attribute-map.xml changes not visible in apache

[David Balažic]

Hi!


There is a bizarre problem on one setup using shibboleth SP 3.0.2 with apache.
If we change the attribute-map.xml file  and restart shibd, it detects the changes (it reports an error if we put a syntax error in the file on purpose), but the web application still sees the old definitions.
apache is acting as a reverse proxy for the actual web server and sends the shibboleth attributes as headers, the relevant apache config is:

<Location "/" >
         AuthType shibboleth
         ShibRequestSetting requireSession 1
         ShibUseHeaders On
         Require valid-user
 </Location>

We used the apache dumpio module to log the outgoing headers (from apache to the web server) and we see that no matter what changes we do in attribute-map.xml (like: add a new attribute, remove an old one, rename an old one) the sent headers are always the same. As if the  attribute-map.xml was not changed at all.

What could be the cause of this? Did anyone experience something similar?

There is only one instance of shibd running on the system.

Regards,
David Balažic