<div dir="ltr">Thanks. Can you please clarify a bit what you mean by "You don't have to require a session... There's no reason that shouldn't work for you." Are you suggesting if I require shibboleth session for "/secure" I should have access to the Shib session variables when the same browser instance later accesses "/" or you are suggesting that I use Lazy session? I'm using Lighttpd so I'm using the RequestMapper to set the session.</div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Apr 17, 2015 at 1:33 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On 4/17/15, 1:26 PM, "Guy Tadi" <<a href="mailto:tadiguy812@gmail.com">tadiguy812@gmail.com</a>> wrote:<br>
<br>
>Thanks for the response. The Cookies path defaulting to path=/ is OK because that's where my application resides (in fact, I explicitly set the cookieProp in the shib config to path=/). However, I can't require Shibsession for / due to legacy constraints.<br>
<br>
</span>You don't have to require a session. require shibboleth is a dummy rule that just activates the SP lazily. There's no reason that shouldn't work for you.<br>
<span><br>
> I agree that Shib SP doesn't see the request to / because nothing tells the webserver to require SP for / which is exactly how I want it. However, by inpsection I determined that HTTP_COOKIE=_shibsession_randomstring=SHIB_SESSION_ID and so was hoping to use the SHIB_SESSION_ID to get attributes previously exported to the session cache during the initial access to /secure. Is that possible?<br>
<br>
</span>Not really. Not practically anyway.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>