passing headers and attributes with AJP

[Woolf, Carl]

I found guidance on AJP here: https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2067400159/JavaHowTo
Will pursue that to try to solve my issue!

From: Woolf, Carl <Carl_Woolf at hms.harvard.edu>
Date: Wednesday, August 3, 2022 at 10:39 AM
To: users at shibboleth.net <users at shibboleth.net>
Subject: passing headers and attributes with AJP
Greetings, happily my team has decided to let Apache use AJP rather than HTTP in proxying to our tomcat.

We are using shibd 3.3.0, and Apache 2.4.6. (Tomcat 9.)

Our Apache configuration has


ProxyPass "/our-app/" "ajp://shrine-sso-node01.catalyst.harvard.edu:8009/our-app/"


<LocationMatch "/shrine-api/">

  AuthType shibboleth

  ShibRequestSetting requireSession 1

  Require valid-user local

  ShibUseEnvironment On

  ShibUseHeaders On

</LocationMatch>

Our tomcat is receiving request-headers, including those corresponding to Attributes being sent by our IdP.

We thought that ShibUseEnvironment would also send the information as request-attributes. But we do not seem to receive any request-attributes.

Any advice on how to get request-attributes sent? (We would then probably turn off ShibUseHeaders.)

Thanks, - Carl
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220803/6b9358f5/attachment.htm>