shib SP 2.5.3 and apache 2.4 AccesControl require session

[Cantor, Scott]

I don't know anything about your intent, but you changed "don't require a login" (passive protection) to "require a login" (active protection), which is pretty different. Nothing you did, or would be likely to do, would impact the data showing up, particularly given it requiring a login. The changes are all around authorization rules.

> but my perl script that returns shib vars , keeps showing REMOTE_USER empty, and no eppn attribute

The log being what it is and indicating it saved off that data, I have no possible explanation for that, it's impossible. So "facts not in evidence", as I've been saying lately, something you claimed is true isn't, so I'm operating on incomplete information.

-- Scott