Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of f.sordillo@cineca.it
 designates 130.186.81.105 as permitted sender)
Message-ID: <4FA8F1F3.8010203@cineca.it>
Date: Tue, 08 May 2012 12:14:11 +0200
From: Francesco Sordillo <f.sordillo@cineca.it>
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US;
 rv:1.9.2.18) Gecko/20110626 Iceowl/1.0b2 Icedove/3.1.11
MIME-Version: 1.0
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-15; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [users@httpd] REMOTE_USER mod_proxy_ajp JBoss

Hi to all.

I'm running JBoss 5.1.2 with Apache 2.2 with mod_proxy_ajp and mod_shib 
2.4 on RHEL 6.2 environment, so Shibboleth as SSO authentication.
Proxying Apache request to JBoss we are not able to retreive REMOTE_USER 
via request attribute. An example of application code is:

String username = (String) request.getAttribute("REMOTE_USER");

but, as I said before, REMOTE_USER is not in the attribute header! The 
problem is that using a proxy, requests attribute are lost!
By Google, some user suggests to configure this rewrite rule on Apache

###
     RewriteCond %{LA-U:REMOTE_USER} (.*)
     RewriteRule .* - [E=MY_REMOTE_USER:%1]
     RequestHeader add REMOTE_USER %{MY_REMOTE_USER}e
###

but in this case "REMOTE_USER" is a Request Header and not a request 
attribute.
Is there anyone that know how to proxy REMOTE_USER as request attribute 
with mod_proxy_ajp?

Thanks a lot.
Francesco.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org