Passing & Accessing Attributes with Tomcat

[Lewellyn, Jared]

My problem with passing and accessing attributes continues. Does anyone have any experience with accessing attributes provided by Shibboleth?
In doing some testing I setup a simple PHP page and attempted to access: $_SERVER['Shib_Affiliation'] but nothing is outputted. A quick check of Shibboleth.sso/Session reveals that the affiliation, and eppn are present. I can see them with ShowAttributeValues set to True

From: Lewellyn, Jared
Sent: Monday, March 28, 2016 2:24 PM
To: users at shibboleth.net
Subject: Passing & Accessing Attributes with Tomcat

Hello,

I am currently trying to figure out how to pass and access attributes between Apache and Tomcat for display to the user in a front-end Java application. I currently have Apache 2.4.6 and Tomcat 7.0.54.0 with proxy_ajp installed and configured. Apache acts as a reverse proxy for Tomcat and helps secure my web application. Although I can secure a web application without a problem I don't seem to be able to pass and echo attributes between the two in a Java web application.

I have been following the guide provided here without any luck:
https://wiki.surfnet.nl/display/surfconextdev/My+First+SP+-+Java

I have double checked that my application defaults are set like so to allow the passing of information via ajp_proxy:
<ApplicationDefaults entityID=https://MY FQDN/shibboleth<https://MY%20FQDN/shibboleth> REMOTE_USER="eppn persistent-id targeted-id" attributePrefix="AJP_">


Apache Tomcat Configuration:

ProxyPass /ShibTest ajp://localhost:8009/ShibTest

<Location /ShibTest>
  AuthType shibboleth
  ShibRequestSetting requireSession 1
  require valid-user
  ShibUseEnvironment On
</Location>

Although I am able to access the deployed application as defined here: https://wiki.surfnet.nl/display/surfconextdev/My+First+SP+-+Java and am correctly directed to my authentication portal, none of the SAML attributes (with the exception of the persistent-id) are passed and simply show "null"

Does anyone have any experience with passing variables between Apache and Tomcat and then displaying them in a Tomcat application? If so, can you point me in the right direction and suggest other things I might check?

Any help would be greatly appreciated!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160330/2bb83a88/attachment.html>