F5 -- Capture Client Browser IP in IdP & Tomcat

[Joshua Brodie]

Our setup is: F5>Apache>Tomcat8

Done: Configured the Apache to capture the Client IP

Following suggestions posted at:
http://serverfault.com/questions/516376/logging-x-forwarded-for-ip-in-shibboleths-audit-logs
-- I was trying to pass the ClientIP to the Tomcat and IdP.

But was not successful -- it is close to 02:30EST -- so I may not be think
straight after many hours to install -- anything missed below?

Configuration made:

Tomcat -- server.xml

<Valve className="org.apache.catalina.valves.RemoteIpValve"

           remoteIpHeader="X-Forwarded-For"

           trustedProxies="F5 - SNAT IPs"

           protocolHeaderHttpsValue="https" />

idp/conf/logback.xml

<!-- Audit log. -->

    <appender name="IDP_AUDIT"
class="ch.qos.logback.core.rolling.RollingFileAppender">

       ---snip---

        <encoder
class="ch.qos.logback.classic.encoder.PatternLayoutEncoder">

            <charset>UTF-8</charset>

            <Pattern>%msg|%X{req.xForwardedFor}|%n</Pattern>

        </encoder>

    </appender>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170208/1ae6c3d8/attachment.html>