shib SP 2.5.3 and apache 2.4 AccesControl require session

[Cantor, Scott]

> if I set  here ShibRequireSession Off ( to reflect requireSession 0 on the old server config) , then I get a "Unauthorized"
> response :

Because you changed the require rule from "shibboleth", a dummy rule for passive content protection, to "shib-session", which means "a session has to exist, doesn't matter what the data is". You're changing things that don't need to be changed.

What has been posted is physically impossible, so the script itself is at fault somewhere. I don't know Perl particularly, or anything about the specifics of the environment, but the data's there, your script just isn't getting to it for reasons unrelated to the SP.

It's not an environment/header issue, since the built-in data is showing up as variables and not headers (no HTTP_ prefix).

-- Scott