Headers for non-browser Duo auth in 3.4.3

[Cantor, Scott]

On 2/28/19, 4:16 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:

> Other than the debug-level output that I sent in my last message, I'm not sure what to turn up. I'd love to see what
> headers the IdP is receiving and what headers it's looking for, but I don't know how I'd go about that.

Short of a packet trace, the best thing is just to test it with a browser and an extension, or curl, or something that can send known headers and trace that.

I've tested both ways and never had any problems with it.

The latest code has this line in the Spring bean you apparently looked at:

        p:httpServletRequest-ref="shibboleth.HttpServletRequest"

That line missing is the only non-external facor that would prevent the code from getting at the headers if they're there.

What exact headers does he think he's sending? It's possibly my code does different things with them than John's did, and something is circumventing the behavior.

-- Scott