Jasig/mod_auth_cas — pull request #42 by forsetti (2012-08-14 02:05:39+00:00)
Title: Minor fixes

As described in email to @pames:
"""
* SAML attributes are not exported to the environment, so they are unavailble for CGI. They are available for authorization (require cas-attribute) and to other Apache mods (mod_php, etc). A simple "apr_env_set(a->attr,csvs,r->pool);" will fix that.

* SAML attributes are only stuffed into the headers if CASAuthNHeader is set (mod_auth_cas.c:2061). CASAuthNHeader is meant to create a header with the contents of REMOTE_USER for applications with specific header requirements, but currently it also is used to signal that attributes should be added to the headers. I believe the correct approach is simply to move the attr handling outside of the if(d->CASAuthNHeader != NULL) block, unless someone can explain the rationale for the current code.
"""