I don't believe this is an issue with mod_auth_cas, but I could use some 
direction. 

A user with a large SAML memberships payload is not passing authentication 
due to the length:

[proxy_fcgi:warn] [pid 750194] [client xxx.xxx.xxx.xxx:57500] AH02536: 
couldn't encode envvar 'HTTP_SAML_MEMBEROF' in 16384 bytes

The total memberof attributes size is ~30 bytes, but I'm not sure where to 
increase this limit in the FCGI proxy module, or if, indeed, this is a good 
idea. For reference:

https://sources.debian.org/src/apache2/2.4.10-10+deb8u12/modules/proxy/mod_proxy_fcgi.c/#L237

Has anyone else experienced this that could provide some pointers?

Thank you!
-Alan

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/21ad9c10-fab7-476f-b7d0-e3d8426c6e42n%40apereo.org.

Reply via email to