Rewriting shib headers as proxy request headers: Session ID?

[Christopher Piggott]

I completely can't explain this but I changed it to this:

Was: (doesn't work)
    RequestHeader set X-Shib-Handler %{SHIB_Shib_Handler}e env=SHIB_Shib_Handler
    RequestHeader set Shib-Session %{SHIB_Shib_Session_ID}e env=SHIB_Shib_Session_ID

Changed to: (works)
    RequestHeader set X-Shib-Handler %{SHIB_Shib-Handler}e env=SHIB_Shib-Handler
    RequestHeader set Shib-Session %{SHIB_Shib-Session-ID}e env=SHIB_Shib-Session-ID

Other than the header name, those are environment variable names, aren't they?  Why would they be allowed to have hyphens in them; and why is my test cgi lying to me and telling me they are underscores?  I have the feeling that however environment variables are handled in apache goes through a translation stage for CGIs to convert them to underscores, and that this was fooling me.  I think in this case, I’m looking at something that was originally some other kind of variable (header from shibboleth perhaps?  Or decoded directly from XML attributes that have hyphens in the tag) and that the RequestHeader is working with them prior to that conversion.

Weird.  Is there an explanation?




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 7132 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20240220/94201be1/attachment.p7s>