Turns out it is not a bug, but an artefact of the method of testing. If you use domain/handlerPrefix/Login to test your setup, the Apache variables are not set. They are only set when the shib2 module is called by way of a Require rule, and this does not happen if you have free access but call the Login yourself.
** Changed in: shibboleth-sp2 (Ubuntu) Status: New => Invalid ** Converted to question: https://answers.launchpad.net/ubuntu/+source/shibboleth-sp2/+question/407815 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1651531 Title: libapache2-mod-shib2, no server variables of session To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shibboleth-sp2/+bug/1651531/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs