On 11 Jan 2013, at 20:51, Ti Leggett <leggett@mcs.anl.gov> wrote:
On Jan 11, 2013, at 2:35 PM, A.L.M.Buxey@lboro.ac.uk wrote:
hi,
dont play with User-Name, update/modify Stripped-User-Name instead and use that in the authn/authz stages
How do I get the remote servers I'm proxying for to understand Stripped-User-Name. As far as I can tell Stripped-User-Name isn't even in the Access-Request to the proxyied server.
It's not, it's an internal attribute which doesn't get copied into the proxy request. In pre-proxy you can add update proxy-request { User-Name := "%{%{Stripped-User-Name}:-%{User-Name}}" } Which will fix the issue. Where is that User-Name value in the proxy request coming from, is it the one from the original request? Could you include more debug output? -Arran