Shibboleth Developers

[Ian Young <>]

I should have mentioned something about configuration: this is Apache 
2.0.53 under Fedora Core 3, latest Shibboleth 1.3 RPMs installed.

A little additional information.  On a hunch, I added another clause to 
my original RequestMap:

> <RequestMap applicationId="default">
>   <Host name="target.iay.org.uk" port="8446" scheme="https">
>     <Path name="secure" requireSession="true" exportAssertion="true" />
>   </Host>
>   <Host name="target.iay.org.uk" scheme="http">
>     <Path name="secure" requireSession="true" exportAssertion="true" />
>   </Host>
>   <Host name="target.iay.org.uk" port="8446" scheme="http">
>     <Path name="secure" requireSession="true" exportAssertion="true" />
>   </Host>
> </RequestMap>

This "fixes" the problem, in the sense that the Internet Explorer via 
http route case now always comes up with the HTTP_SHIB_ATTRIBUTES as I 
expected from using Firefox.

So, it kind of looks like in some sense Shibboleth is seeing the request 
as a request in the http scheme on port 8446 (strictly impossible; that 
port is SSL-protected), and defaults to not exporting the assertion.

I'm still bemused.

        -- Ian