<div dir="ltr"><div>Your welcome,</div><div><br></div>If I understand things correctly re the useHeaders option; it should be used in conjunction with safeHeaderNames=true and you should only use the headers prefixed with "HTTP_"<div><br></div><div>-John S</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jun 20, 2019 at 8:43 AM Hong Ye <<a href="mailto:hy93@cornell.edu">hy93@cornell.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div class="gmail-m_-744196174573378463WordSection1">
<p class="MsoNormal">Thanks John! That resolved our issue.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Best,<u></u><u></u></p>
<p class="MsoNormal">Hong<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12pt;color:black">From: </span></b><span style="font-size:12pt;color:black">users <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a>> on behalf of John Schrader <<a href="mailto:John.Schrader@nd.edu" target="_blank">John.Schrader@nd.edu</a>><br>
<b>Reply-To: </b>Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Date: </b>Wednesday, June 19, 2019 at 4:41 PM<br>
<b>To: </b>Shib Users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>><br>
<b>Subject: </b>Re: UID not available in HTTP variables<u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I've needed to set "useHeaders="true" in the ISAPI settings:
<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">and dump out the headers with:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><!--- Dump out the request data. ---><br>
<!---<br>
<cfdump<br>
var="#GetHttpRequestData()#"<br>
label="GetHttpResponseData() Values"<br>
/><br>
---> <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">-John S<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Wed, Jun 19, 2019 at 4:04 PM Hong Ye <<a href="mailto:hy93@cornell.edu" target="_blank">hy93@cornell.edu</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0in 0in 0in 6pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">Nate,<br>
<br>
Thanks for your reply. We're using IIS. I don't see mod_proxy_ajp installed. php is not installed on the server so I can't run php script.<br>
<br>
Best,<br>
Hong<br>
<br>
On 6/19/19, 3:26 PM, "users on behalf of Nate Klingenstein" <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> on behalf of
<a href="mailto:ndk@signet.id" target="_blank">ndk@signet.id</a>> wrote:<br>
<br>
Hong,<br>
<br>
> This application uses tomcat<br>
<br>
I assume you're also using httpd or IIS. Are you using mod_proxy_ajp? Are the variables visible there? You can test that out quickly with a <? phpinfo(); ?> script.<br>
<br>
If they are, then I think this is a question more for the vendor than for Shibboleth, which is acting as it should.<br>
<br>
Best,<br>
Nate.<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a><br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(68,68,68)">John Schrader</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(68,68,68)">Identity and Access Management</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(68,68,68)">Office of Information Technologies</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(68,68,68)">University of Notre Dame</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><i><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(68,68,68)">EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER</span></i>
<u></u><u></u></p>
<div>
<p class="MsoNormal"><i><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(68,68,68)">—ALBERT EINSTEIN</span></i><u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><span style="font-size:14px;line-height:24px;color:rgb(68,68,68);font-family:"Open Sans",Helvetica,Arial,sans-serif">John Schrader</span><br></div><div><font color="#444444" face="Open Sans, Helvetica, Arial, sans-serif"><span style="font-size:14px;line-height:24px">Identity and Access Management</span></font></div><div><font color="#444444" face="Open Sans, Helvetica, Arial, sans-serif"><span style="font-size:14px;line-height:24px">Office of Information Technologies</span></font></div><div><font color="#444444" face="Open Sans, Helvetica, Arial, sans-serif"><span style="font-size:14px;line-height:24px">University of Notre Dame</span></font></div><div><br></div><div dir="ltr"><span style="color:rgb(68,68,68);font-family:"Open Sans",Helvetica,Arial,sans-serif;font-size:14px;font-style:italic;line-height:24px">EVERYTHING SHOULD BE MADE AS SIMPLE AS POSSIBLE, BUT NOT ANY SIMPLER</span><div><span style="color:rgb(68,68,68);font-family:"Open Sans",Helvetica,Arial,sans-serif;font-size:14px;font-style:italic;line-height:24px">—ALBERT EINSTEIN</span><br></div></div></div></div></div></div></div></div>