Question about Shibboleth IdP v5 with Jetty 12 and extra RemoteUser headers for TLS termination by F5

[Cantor, Scott]

Given that you're members, I did run a quick test. At least under Eclipse, Jetty 12 handles a smuggled in X-Remote-User header just fine, the flow worked without any unusual steps. I was expecting to find a regression in the RemoteUser servlet, but I'm not seeing one.

Because you're members, I'm willing to assist, but you'd have to file a support issue (If you don't have access, I can connect you with the person at UV who can add you). I don't offhand know what to suggest at this point though, other than logging some headers to get more insight.

I don't think it's possible that your HTTP traces are accurate, I'm afraid. Something is stripping the header before it reaches the web server, but the logging should prove that.

-- Scott