SP server variables an IIS with Tomcat Connector

[Peter Schober]

Bobby Lawrence via users <users at shibboleth.net> [2024-02-23 21:23 CET]:
> I cannot determine if this issue is a ColdFusion proper issue or the
> Tomcat Connector for IIS that CF uses.  I decompiled the
> coldfusion.runtime.CgiScope class I can see where it would try to
> resolve the value for some name from request.getAttribute(), but
> again - I always get no value, even when the SP is protecting the
> page.  This leads me to believe that it's a Tomcat Connector issue
> (which is an ISAPI filter - not a module :().  I've read on some
> other forums that in order to access certain CGI variables in CF
> fronted by Apache that you need to declare them in mod_jk.conf via
> the "JkEnvVar" directive.  It doesn't look like the IIS connector
> has any such option so I cannot try it.

Now I know nothing about ColdFusion (or IIS, for that matter) but
maybe parts from this
https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2067400159/JavaHowTo
may be relevant here, too?

At least I'm assuming use of the AJP protocol in your deployment (what
else could a "Tomcat Connector" be?) and with Tomcat on the receiving
end the "allowedRequestAttributesPattern" attribute on the AJP
Connector in Tomcat[1] may well be responsible for the data not being
accepted.

-peter

[1] https://tomcat.apache.org/tomcat-10.1-doc/config/ajp.html