Grouper Users - Open Discussion List

[Peter DiCamillo <>]

Hi, at Brown we put Apache in front of Tomcat using mod_proxy_ajp. Doing 
that preserves REMOTE_USER for Grouper. Then we configure Shib 
authentication in Apache in the usual way.

Peter

On 12/14/15 3:03 PM, Michael McManaman wrote:
> Hey everybody -
>
> I'm new to the internet2/grouper project, so bear with me, if you have 
> the time.
>
> I've followed the Newcastle U. GrouperUI with Shib doc, I've also 
> follow a GrouperUI/shib related doc out of the university of Alaska.
> And finally I've followed the Consortium GARR project/pdf on 
> Shibbolizing Grouper.  All 3 were new installs of grouper, to avoid 
> any confusion with configs.
> The last one looked very promising, but I always end up with an 'You 
> have an anonymous session...' type-error for the most part.
>
> We do not have CAS set up here and I'm wondering, seeing CAS and 
> Grouper seem to be mentioned together frequently that CAS has to be 
> implemented to get a shibbolized Grouper login configured correctly?.
>
> I have the SP configured correctly (we do shib SPs for many other 
> services) and am populating the REMOTE_USER variable - I can 
> authenticate successfully against our IdP, but there must be a step 
> that i'm missing.
>
> Maybe?
>
> Anyone have any ideas?
>
>
> Thanks!
> Mike