X-Forwarded-For on the IdP
Elliot Kendall
elliot.kendall at emory.edu
Thu Feb 9 19:23:20 GMT 2012
Our IdPs are behind a load balancer that sends real client IP addresses
in the X-Forwarded-For header. I want to put client IP into the IdP
logs, but %mdc{clientIP} gives me the load balancer's address.
On the SP side, you can do "ShibRequestSetting REMOTE_ADDR
X-Forwarded-For" in Apache conf, but I haven't been able to find
anything about the IdP other than a feature request from 2010 -
https://lists.internet2.edu/sympa/arc/shibboleth-dev/2010-05/msg00017.html
Is there any way to do what I want? If not, how should I go about
requesting it as a new feature?
Thanks.
--
Elliot Kendall
Information Security Specialist
Office of Information Technology
Emory University and Healthcare
More information about the users
mailing list