passing headers and attributes with AJP

[Woolf, Carl]

Greetings, happily my team has decided to let Apache use AJP rather than HTTP in proxying to our tomcat.

We are using shibd 3.3.0, and Apache 2.4.6. (Tomcat 9.)

Our Apache configuration has


ProxyPass "/our-app/" "ajp://shrine-sso-node01.catalyst.harvard.edu:8009/our-app/"


<LocationMatch "/shrine-api/">

  AuthType shibboleth

  ShibRequestSetting requireSession 1

  Require valid-user local

  ShibUseEnvironment On

  ShibUseHeaders On

</LocationMatch>

Our tomcat is receiving request-headers, including those corresponding to Attributes being sent by our IdP.

We thought that ShibUseEnvironment would also send the information as request-attributes. But we do not seem to receive any request-attributes.

Any advice on how to get request-attributes sent? (We would then probably turn off ShibUseHeaders.)

Thanks, - Carl
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220803/9e760b34/attachment.htm>