passing headers and attributes with AJP

Woolf, Carl Carl_Woolf at
Wed Aug 3 14:39:43 UTC 2022

Greetings, happily my team has decided to let Apache use AJP rather than HTTP in proxying to our tomcat.

We are using shibd 3.3.0, and Apache 2.4.6. (Tomcat 9.)

Our Apache configuration has

ProxyPass "/our-app/" "ajp://"

<LocationMatch "/shrine-api/">

  AuthType shibboleth

  ShibRequestSetting requireSession 1

  Require valid-user local

  ShibUseEnvironment On

  ShibUseHeaders On


Our tomcat is receiving request-headers, including those corresponding to Attributes being sent by our IdP.

We thought that ShibUseEnvironment would also send the information as request-attributes. But we do not seem to receive any request-attributes.

Any advice on how to get request-attributes sent? (We would then probably turn off ShibUseHeaders.)

Thanks, - Carl
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list