UID not available in HTTP variables

[Hong Ye]

It’s vendor application. They are looking for uid in header variable.

Thanks,
Hong

From: users <users-bounces at shibboleth.net> on behalf of John Schrader <John.Schrader at nd.edu>
Reply-To: Shib Users <users at shibboleth.net>
Date: Thursday, June 20, 2019 at 8:47 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: UID not available in HTTP variables

Your welcome,

If I understand things correctly re the useHeaders option; it should be used in conjunction with safeHeaderNames=true and you should only use the headers prefixed with "HTTP_"

-John S


On Thu, Jun 20, 2019 at 8:43 AM Hong Ye <hy93 at cornell.edu<mailto:hy93 at cornell.edu>> wrote:
Thanks John! That resolved our issue.

Best,
Hong

From: users <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net>> on behalf of John Schrader <John.Schrader at nd.edu<mailto:John.Schrader at nd.edu>>
Reply-To: Shib Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Date: Wednesday, June 19, 2019 at 4:41 PM
To: Shib Users <users at shibboleth.net<mailto:users at shibboleth.net>>
Subject: Re: UID not available in HTTP variables

I've needed to set "useHeaders="true"  in the ISAPI settings:

and dump out the headers with:

<!--- Dump out the request data. --->
<!---
<cfdump
   var="#GetHttpRequestData()#"
   label="GetHttpResponseData() Values"
   />
--->

-John S




On Wed, Jun 19, 2019 at 4:04 PM Hong Ye <hy93 at cornell.edu<mailto:hy93 at cornell.edu>> wrote:
Nate,

Thanks for your reply. We're using IIS. I don't see mod_proxy_ajp installed. php is not installed on the server so I can't run php script.

Best,
Hong

On 6/19/19, 3:26 PM, "users on behalf of Nate Klingenstein" <users-bounces at shibboleth.net<mailto:users-bounces at shibboleth.net> on behalf of ndk at signet.id<mailto:ndk at signet.id>> wrote:

    Hong,

    > This application uses tomcat

    I assume you're also using httpd or IIS.  Are you using mod_proxy_ajp?  Are the variables visible there?  You can test that out quickly with a <? phpinfo(); ?> script.

    If they are, then I think this is a question more for the vendor than for Shibboleth, which is acting as it should.

    Best,
    Nate.
    --
    For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


--
John Schrader
Identity and Access Management
Office of Information Technologies
University of Notre Dame

EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER
—ALBERT EINSTEIN
--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


--
John Schrader
Identity and Access Management
Office of Information Technologies
University of Notre Dame

EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER
—ALBERT EINSTEIN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190620/fb8ca2e7/attachment.html>