IP Based Activation Condition

[Kevin Ratcliffe]

Thanks Dave, I've come to the same conclusion.
I've done some reading and it seems that if I use the AJP connector in Tomcat and get Apache to proxy that using mod_ajp, then apache will return the correct IP to Tomcat rather than the proxy address. I may be wrong but I'll give it a go.

Kevin Ratcliffe
Network & IT Systems Support
Bolton Sixth Form College
T: 01204 846215
E: kratcliffe at bolton-sfc.ac.uk
W: www.bolton-sfc.ac.uk
Save Paper. Please consider the environment before printing.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Dave Perry
Sent: 02 February 2016 14:27
To: Shib Users <users at shibboleth.net>
Subject: RE: IP Based Activation Condition

Surely Apache is what captures the IP address and passes it onto the IdP?

Dave

_________________________________________________
Dave Perry
eLearning Technologist, Hull College Group

Room L34 - Queens Gardens Library
Wilberforce Drive, Queen's Gardens, Hull, HU1 3DG Extension 2230 / Direct Dial 01482 381930

* Need a fast reply? Try elearning at hull-college.ac.uk *


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Kevin Ratcliffe
Sent: 02 February 2016 14:12
To: Shib Users
Subject: RE: IP Based Activation Condition

I don't see how a web server log helps. Don't I need to know what the IdP behind Apache 'sees' as the client IP address?

Kevin Ratcliffe
Network & IT Systems Support
Bolton Sixth Form College
T: 01204 846215
E: kratcliffe at bolton-sfc.ac.uk
W: www.bolton-sfc.ac.uk
Save Paper. Please consider the environment before printing.

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: 02 February 2016 14:02
To: Shib Users <users at shibboleth.net>
Subject: Re: IP Based Activation Condition

On 2/2/16, 9:01 AM, "users on behalf of Kevin Ratcliffe" <users-bounces at shibboleth.net on behalf of kratcliffe at bolton-sfc.ac.uk> wrote:



>Thanks for the reply Scott. I've been through the idp-process.log and don't see any IP addresses. Do I need to turn up the log verbosity somewhere?

I'm talking about your web server log.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

This email has been scanned by BSFC and seems to be OK

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

**********************************************************************
This message is sent in confidence for the addressee only. It may  contain confidential or sensitive information.  The contents are not to be disclosed to anyone other than the addressee.  Unauthorised recipients are requested to preserve this confidentiality and to advise us of any errors in transmission.  Any views expressed in this message are solely the views of the individual and do not represent the views of the College.  Nothing in this message should be construed as creating a contract.

Hull College Group owns the email infrastructure, including the contents.

Hull College Group is committed to sustainability, please reflect before printing this email.
**********************************************************************

TEXT
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

This email has been scanned by BSFC and seems to be OK