<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 9, 2017 at 9:10 AM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div id="gmail-:3pt" class="gmail-a3s gmail-aXjCH gmail-m15bed8cb74081401">Well, it's telling you there's no REMOTE_USER set, not sure what else there is to debug.<br></div></blockquote></div><br>The Apache HTTPd configuration hasn't changed.</div><div class="gmail_extra">The Tomcat configuration hasn't changed.</div><div class="gmail_extra">I'm using the same idp.authn.flows (based on the RemoteUser flow)</div><div class="gmail_extra"><br></div><div class="gmail_extra">If I access an SP, I get sent to the IDP.  I'm getting sent through each of the flows I've defined (all of them based on RemoteUser), and it triggers my external authentication.</div><div class="gmail_extra"><br></div><div class="gmail_extra">    <a href="https://shibboleth-dev.example.edu/idp/Authn/RemoteUser?conversation=e2s1">https://shibboleth-dev.example.edu/idp/Authn/RemoteUser?conversation=e2s1</a><br></div><div class="gmail_extra"><div class="gmail_extra">    <a href="https://shibboleth-dev.example.edu/idp/Authn/UWLogin?conversation=e2s1">https://shibboleth-dev.example.edu/idp/Authn/UWLogin?conversation=e2s1</a><br></div><div><div class="gmail_extra">    <a href="https://shibboleth-dev.example.edu/idp/Authn/UWLoginToken?conversation=e2s1">https://shibboleth-dev.example.edu/idp/Authn/UWLoginToken?conversation=e2s1</a><br></div></div><div><br></div></div><div class="gmail_extra"><br></div><div class="gmail_extra">This thing installs as an maven overlay.  Something about the install (configuration?  code?) has broken shib's ability to see REMOTE_USER.  I'm trying to figure out where things went wrong.  </div><div class="gmail_extra"><br></div><div class="gmail_extra">Liam</div></div>