Question about Shibboleth IdP v5 with Jetty 12 and extra RemoteUser headers for TLS termination by F5

[Emilio Recio]

Sorry if this is superfluous, but you have the Jetty12 module for
x-forward-for?
https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3516104706/Jetty12#Supporting-X-Forwarded-For-Natively

We haven't implemented this yet, but it's on our todo, so we are watching
this thread intently.

Secondly, how about a simple helloworld.war that dumps the headers to see
if jetty is processing it at all.

Thanks,
Emilio



On Tue, Jul 23, 2024 at 1:37 PM Cantor, Scott via users <
users at shibboleth.net> wrote:

> > Thanks for your assistance in helping me track down the
> > problem. Not sure if anyone else would trip up this way, but
> > at least now there’s a thread about it. Dang.
>
> We document the property management issue, but probably way back in 4.1. I
> guess I can keep noting it since it keeps tripping people up. I should have
> thought of it.
>
> The real problem is the property logging runs too early. Check the metrics
> endpoint, I believe I added a dump of all the active properties to it.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://shibboleth.atlassian.net/wiki/x/ZYEpPw
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240724/9bf04a35/attachment.htm>