X-Forwarded-For on the IdP

[James Bardin]

On Fri, Feb 10, 2012 at 4:20 AM, Turner, Andrew P <A.P.Turner at shu.ac.uk> wrote:
> I have a one-liner in my sever.xml that seems to do what Elliot is asking for:
>
> <Valve className="org.apache.catalina.valves.RemoteIpValve" internalProxies="regex representing IPs load balancer sends traffic on (SNAT pool)" />


D'oh, you're right. I haven't had to do this on tomcat in forever, and
the last time I looked it up was for 7 (not for shib). I assume the
valve stills works, but the tomcat docs have this as an example in the
filter section now.

http://tomcat.apache.org/tomcat-7.0-doc/config/filter.html#Remote_IP_Filter

For shib I'm using mod_rpaf, since I still have to have apache in the mix.

-jim