Shibboleth Developers

["Scott Cantor" <>]

> I'm getting an odd interaction between pubcookie and shib.
> Pubcookie often sets multiple cookies and does this with
> separate Set-Cookie headers.  If I omit shib, or configure
> shib ahead of pubcookie I get the separate set-cookies and
> everything works.  If, however, I configure shib after
> pubcookie (in httpd.conf) then the multiple cookies are
> merged into a single Set-Cookie (a comma separated list).
> That doesn't work.  I can't see what in the shib module
> would cause this behavior.

I believe that it may be in your pubcookie code. I say that because I had to
modify the Apache code you added to Shibboleth that does response header
deferral. When I used what you had written, the overlap function you called
was merging headers. I rewrote it to manually loop using apr_table_do:

        apr_table_do(_table_add,r->headers_out, rc->hdr_out,NULL);
        // can't use overlap call because it will collapse Set-Cookie
headers
        //apr_table_overlap(r->headers_out, rc->hdr_out,
APR_OVERLAP_TABLES_MERGE);

Is it possible your pubcookie code has the overlap call?

-- Scott