<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:14pt;color:#000000;background-color:#FFFFFF;font-family:'Times New Roman', Times, serif;">
<p>Tonu,</p>
<p><br>
</p>
<p>Here is what I have on IdP 3.2.1 vhost file. I am only interest to uid and IdP passes uid to SP's apache2 log file. You can also use Rewrite part on SP's vhost file instead of IdP. The resone that I have in IdP vhost is we have ezproxy SP that does't use
shibboleth2.xml to configure SP. Having in IdP vhost works for ezproxy and <span style="font-size: 14pt;">other SPs with shibboleth2.xml.</span></p>
<p><br>
</p>
<p></p>
<div> ProxyPass /idp ajp://localhost:8009/idp</div>
<div> <Proxy ajp://localhost:8009></div>
<div> Allow from all</div>
<div> </Proxy></div>
<div> </div>
<div> <span style="color: rgb(255, 0, 0);">RewriteEngine On</span></div>
<div><span style="color: rgb(255, 0, 0);"> RewriteCond %{LA-U:REMOTE_USER} (.+)</span></div>
<div><span style="color: rgb(255, 0, 0);"> RewriteRule . - [E=RU:%1]</span></div>
<div><span style="color: rgb(255, 0, 0);"> RequestHeader set Remote-User "%{RU}e" env=RU</span></div>
<div><br>
</div>
<p></p>
<p><br>
</p>
<p> </p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Tonu Mikk <tmikk@umn.edu><br>
<b>Sent:</b> Tuesday, April 5, 2016 12:14 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> passing attributes with reverse proxy</font>
<div> </div>
</div>
<div>
<div dir="ltr"><span style="font-size:12.8px">Hello,</span>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">We have a Apache web server in front of a custom web server (Active4D). We are proxying the requests from the Apache web server to the Active4D. On the web server we implemented Shibboleth login and are able to retrieve the Shibboleth
attributes. How can we pass these attributes to the Active4D server? I understand there is a way to do this by sending the attributes in the http request header, but I haven't found a recipe on how this is accomplished. We would like to pass the eppn value
to Active4D to have it check for existing users in the database.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Our current Apache vhost configuration looks like this:</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">
<div><VirtualHost <a href="http://134.84.192.6:443/" target="_blank" id="LPlnk55797">134.84.192.6:443</a>></div>
<div><span style="white-space:pre-wrap"></span>ServerName <a href="http://4d.diversity.umn.edu/" target="_blank" title="http://4d.diversity.umn.edu/
Ctrl+Click or tap to follow the link">4d.diversity.umn.edu</a> </div>
<div><br>
</div>
<div> <Location /></div>
<div> AuthType shibboleth</div>
<div> ShibRequestSetting requireSession 1</div>
<div> Require valid-user</div>
<div> </Location></div>
<div> ProxyPass /Shibboleth.sso !</div>
<div> </div>
<div> ProxyPass / <a href="http://oed-db.oit.umn.edu/" target="_blank">http://oed-db.oit.umn.edu/</a></div>
<div><span style="white-space:pre-wrap"></span>SSLEngine on</div>
<div><span style="white-space:pre-wrap">....SSL cert paths...- removed for brevity</span></div>
<div></VirtualHost></div>
<div><br>
</div>
<div>Thanks!</div>
</div>
<div><br>
</div>
-- <br>
<div class="gmail_signature">
<div dir="ltr"><span style="border-collapse:collapse; font-family:arial,sans-serif; font-size:13px">
<div>Tonu Mikk</div>
<div>Adaptive Technologist | Disability Resource Center | <a href="http://diversity.umn.edu/disability" target="_blank">
diversity.umn.edu/disability</a></div>
<div>University of Minnesota | <a href="http://umn.edu" target="_blank">umn.edu</a> </div>
<div><a href="mailto:tmikk@umn.edu" target="_blank">tmikk@umn.edu</a> | 612-625-3307</div>
</span></div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>