...
[15:11:15 CDT(-0500)] <EricDalquist> it is likely wrapped several times
[15:11:22 CDT(-0500)] <b-sure> ok
[15:11:26 CDT(-0500)] <EricDalquist> what could be useful is to "step into" the getRemoteUser() call
[15:11:30 CDT(-0500)] <EricDalquist> and follow that as far as you can
[15:11:34 CDT(-0500)] <b-sure> ok
[15:11:43 CDT(-0500)] <EricDalquist> see if some wrapper is returning null
[15:11:50 CDT(-0500)] <EricDalquist> instead of the REMOTE_USER http header