UID not available in HTTP variables

[John Schrader]

Your welcome,

If I understand things correctly re the useHeaders option; it should be
used in conjunction with safeHeaderNames=true and you should only use the
headers prefixed with "HTTP_"

-John S


On Thu, Jun 20, 2019 at 8:43 AM Hong Ye <hy93 at cornell.edu> wrote:

> Thanks John! That resolved our issue.
>
>
>
> Best,
>
> Hong
>
>
>
> *From: *users <users-bounces at shibboleth.net> on behalf of John Schrader <
> John.Schrader at nd.edu>
> *Reply-To: *Shib Users <users at shibboleth.net>
> *Date: *Wednesday, June 19, 2019 at 4:41 PM
> *To: *Shib Users <users at shibboleth.net>
> *Subject: *Re: UID not available in HTTP variables
>
>
>
> I've needed to set "useHeaders="true"  in the ISAPI settings:
>
>
>
> and dump out the headers with:
>
>
>
> <!--- Dump out the request data. --->
> <!---
> <cfdump
>    var="#GetHttpRequestData()#"
>    label="GetHttpResponseData() Values"
>    />
> --->
>
>
>
> -John S
>
>
>
>
>
>
>
>
>
> On Wed, Jun 19, 2019 at 4:04 PM Hong Ye <hy93 at cornell.edu> wrote:
>
> Nate,
>
> Thanks for your reply. We're using IIS. I don't see mod_proxy_ajp
> installed. php is not installed on the server so I can't run php script.
>
> Best,
> Hong
>
> On 6/19/19, 3:26 PM, "users on behalf of Nate Klingenstein" <
> users-bounces at shibboleth.net on behalf of ndk at signet.id> wrote:
>
>     Hong,
>
>     > This application uses tomcat
>
>     I assume you're also using httpd or IIS.  Are you using
> mod_proxy_ajp?  Are the variables visible there?  You can test that out
> quickly with a <? phpinfo(); ?> script.
>
>     If they are, then I think this is a question more for the vendor than
> for Shibboleth, which is acting as it should.
>
>     Best,
>     Nate.
>     --
>     For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
>     To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
>
>
>
> --
>
> John Schrader
>
> Identity and Access Management
>
> Office of Information Technologies
>
> University of Notre Dame
>
>
>
> *EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER*
>
> *—ALBERT EINSTEIN*
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net



-- 
John Schrader
Identity and Access Management
Office of Information Technologies
University of Notre Dame

EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER
—ALBERT EINSTEIN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190620/f3c27507/attachment.html>