Just a quick followup... the issue was in the application which was silently discarding all header variables upon reaching one without a value. And apparently either the Shib SP or the proxy likes sending value-less header variables (e.g. "Shib-AuthnContent-Decl:") the moment ShibUseHeaders got turned on. Now that the application ignores these and reads the rest it eventually gets to the last few, including the critical one (Content-Length:).<br>
<br>(I hadn't gotten back to this in the past two weeks or I'd have realized this sooner.)<br><br><div class="gmail_quote">On Wed, Jan 25, 2012 at 7:06 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 1/25/12 7:32 PM, "Steve Siirila" <<a href="mailto:sfs@umn.edu">sfs@umn.edu</a>> wrote:<br>
><br>
>Sorry, I specifically meant the Apache mod_shib module -- which is<br>
>bundled in my "ShibSP" software.<br>
<br>
</div>Which is the SP, and again, has nothing to do with your issue. There is no<br>
code in it that will remove headers that don't overlap with the ones it<br>
controls.<br>
<br>
Whether the behavior is observed without the SP or not, it is not the SP<br>
doing it.<br>
<div class="im"><br>
>Care to share your Apache configuration -- in particular, the Shib- and<br>
>Proxy-related lines?<br>
<br>
</div>It isn't mine and I have no access to it. I simply note the fact that it's<br>
been done.<br>
<div><div></div><div class="h5"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br>