Monday, September 15, 2014

Forward Shibboleth Environment Variables to Tomcat via Apache

I am using Shibbolethv2.3 with Apache web server and Tomcat application server. I am using Apache as a reverse proxy using mod_proxy.so. I am not able to forward the Shibboleth environment variables from Apache to Tomcat. I am able to forward the attributes in the headers but as already mentioned in the wiki this approach is not safe.
I have tried forwarding the environment variables by the following directive :



SetEnv AJP_username ${username}



then at the Java side I can access the attribute by : request.getAttribute("username");

The strange thing here is that, I get a different value instead of the one set by Shibboleth. I get the Windows account name as a result. If I use any other attribute name, I get a null value.



I have searched a lot and have run out of options. Please guide me towards the right solution.



My setup details :




  1. Shibboleth version : 2.3

  2. OS : Windows XP SP3

  3. Webserver : Apache 2.2


  4. Application Server : Tomcat 6

  5. Proxy module : mod_proxy.so

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...