<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Thank you for the response. I don't know if my application endpoint is explicitly secured by Shib SP or not. My nginx-powered endpoint checks for a Shib cookie and if not present in the http request, redirects to the
Shib login.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">I don't have any confidence that Shib SP is creating REMOTE_USER at all. My log files don't give me any detailed information even though everything is set to the DEBUG level. I can see which SP endpoints are being accessed,
the http verb, status, and bytecount. But no XML or anything that tells me what's really happening.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); font-family: Calibri, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<br style="font-family:Times">
<br style="font-family:Times">
<table id="sig" width="500" border="0" cellspacing="0" cellpadding="0" style="font-family:Arial,sans-serif; width:500px; margin:0px; padding:0px">
<tbody>
<tr>
<td valign="top" width="80" style="width:80px; margin:0px; padding:0px; vertical-align:top">
<a title="Rivera Group" tabindex="0" href="http://www.riverainc.com" target="_blank" style="border:none; text-decoration:none" id="LPNoLP"><img alt="Rivera Group" width="80" height="60" style="border: none; width: 80px; height: 60px; display: block; user-select: none;" src="http://riverainc.com/img/signatures/logo60h.png"></a></td>
<td width="5" style="width:5px; max-width:5px; margin:0px; padding:0px; border-right:2px solid rgb(0,0,0)">
</td>
<td width="5" style="width:5px; max-width:5px; margin:0px; padding:0px"> </td>
<td style="margin:0px; padding:0px">
<table id="sig2" cellspacing="0" cellpadding="0" style="padding:0px; margin:0px; font-size:14px; line-height:16px; color:rgb(0,0,0); border-collapse:collapse">
<tbody>
<tr style="margin:0px; padding:0px">
<td style="font-family:Arial,Arial,sans-serif; margin:0px; padding:0px; white-space:nowrap">
<span style="font-family:Arial,sans-serif"><strong>Tony Ennis</strong></span></td>
</tr>
<tr style="margin:0px; padding:0px">
<td style="margin:0px; padding:0px; white-space:nowrap">Chief Architect</td>
</tr>
<tr style="margin:0px; padding:0px">
<td style="margin:0px; padding:0px; white-space:nowrap"><a tabindex="0" href="mailto:tennis@riverainc.com " style="border:none; text-decoration:none; color:rgb(0,0,0)" id="LPNoLP">tennis@riverainc.com</a> | <a tabindex="0" href="http://www.riverainc.com" target="_blank" style="color:rgb(0,0,0); text-decoration:none" id="LPNoLP">Rivera
Group</a></td>
</tr>
<tr style="margin:0px; padding:0px">
<td style="margin:0px; padding:0px; white-space:nowrap">O: 812.246.4055</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Peter Schober <peter.schober@univie.ac.at><br>
<b>Sent:</b> Wednesday, July 18, 2018 4:39:10 AM<br>
<b>To:</b> users@shibboleth.net<br>
<b>Subject:</b> Re: Can't find attribute REMOTE_USER value in https request</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">External Email! Do not click any links or open any attachments unless you trust the sender and know the content is safe.<br>
________________________________<br>
<br>
* Tony Ennis <tennis@eagle6.com> [2018-07-17 21:46]:<br>
> I seem to successfully log in using my SP and IdP. I get redirected<br>
> back to my application. A shib cookie is defined. I dump the environ<br>
> variables (and all other data structures) from the http request and<br>
> REMOTE_USER is not defined. I then use the same browser window and<br>
> check the session with the SSO and my variables are displayed.<br>
<br>
You're probably just accessing a resource that has no protection by<br>
the Shib SP configured, neither active nor passive/lazy.<br>
<br>
Assuming use of Apache httpd, the following would make attributes<br>
appear on all requests, but would not enforce creation of a session if<br>
there wasn't one:<br>
<br>
<Location /><br>
AuthType shibboleth<br>
ShibRequestSetting requireSession 0<br>
require shibboleth<br>
</Location><br>
<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPWontProtect">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPWontProtect</a><br>
<br>
-peter<br>
--<br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
<hr>
<div style="font-size:8pt; font-family: serif; color:black; font-style:italic">Confidentiality Notice: This message and any attachments are for the sole use of the intended recipient(s), and may contain information considered confidential or privileged by the
sending organization or trade secrets of the sending organization. This message does not authorize the intended recipient to disclose this information to any other party. Use, disclosure, or retention of any information in this message by anyone other than
the intended user is strictly prohibited, unless otherwise authorized in writing. If you are not the intended recipient, please destroy all copies of this message.
</div>
</body>
</html>