[External] Re: Question on Client IP issue

[Brewer, Edward L]

Scott and Paul,

Thank you for your input.  As you both noted (directly and indirectly) I was able to fix the issue through configuration of Tomcat.  In particular I edited the server.xml and added

  <Valve className="org.apache.catalina.valves.RemoteIpValve"
   remoteIpHeader="X-Forwarded-For"
   trustedProxies="10.152.19.245,10.152.19.246 "
   protocolHeaderHttpsValue="https" />

and now it works

Thanks,
Lee Brewer

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Tuesday, August 05, 2014 3:41 PM
To: Shib Users
Subject: [External] Re: Question on Client IP issue

On 8/5/14, 4:35 PM, "Brewer, Edward L" <lee.brewer at Vanderbilt.Edu> wrote:

> How can I signal to the IdP the value set for X-Forwarded-For.  BTW I 
>am not using Apache.

By configuring the container to provide that value for getRemoteAddr() in the servlet API. I have no idea of any particular containers can do that.
If not, you would force it with a Java filter that did the override and configure it in web.xml to wrap those requests. (If any containers support this, that's likely how they would do it.)

There are probably some examples of that filter around the .net, it's a pretty common thing.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net