Shibboleth SP in front of HA-Proxy in http mode

[Jakub Danek]

Actually we are going to use the http headers. It probably wasn't obvious
from the original post.

I was asking merely to confirm that the environment variables won't work in
our scenario, because Shibboleth documentation makes pretty strong point
that it is the preferred way and should be possible in most cases.

Thank you a lot for your input!
J.



Dne po 10. 9. 2018 9:14 uživatel Nate Klingenstein <ndk at sudonym.me> napsal:

> Actually, it is in the Shibboleth 3.x Wiki:
>
> https://wiki.shibboleth.net/confluence/display/SP3/Assertion+Export
>
> I suppose it's the sessionCache boolean that has changed from true to
> false in the default configuration.  So, the same approach would probably
> still work if you enable sessionCaching.
>
> But I didn't ask the obvious question: is there a reason why you're not
> just passing the attributes in HTTP headers anyway?
>
> It's too late at night here for me to do any more investigation, but I
> hope this gives you somewhere to start.
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180910/46971109/attachment.html>