F5 -- Capture Client Browser IP in IdP & Tomcat

[Joshua Brodie]

Eureka.

Following required for Tomcat8:  requestAttributesEnabled="true"

Hence in server.xml:

<Valve className="org.apache.catalina.valves.RemoteIpValve"

           remoteIpHeader="X-Forwarded-For"

           trustedProxies="SNAT IPs"

           proxiesHeader="x-forwarded-by"

           requestAttributesEnabled="true"/>

On 8 February 2017 at 23:32, Joshua Brodie <josbrodie at gmail.com> wrote:

> Our setup is: F5>Apache>Tomcat8
>
> Done: Configured the Apache to capture the Client IP
>
> Following suggestions posted at: http://serverfault.com/
> questions/516376/logging-x-forwarded-for-ip-in-shibboleths-audit-logs --
> I was trying to pass the ClientIP to the Tomcat and IdP.
>
> But was not successful -- it is close to 02:30EST -- so I may not be think
> straight after many hours to install -- anything missed below?
>
> Configuration made:
>
> Tomcat -- server.xml
>
> <Valve className="org.apache.catalina.valves.RemoteIpValve"
>
>            remoteIpHeader="X-Forwarded-For"
>
>            trustedProxies="F5 - SNAT IPs"
>
>            protocolHeaderHttpsValue="https" />
>
> idp/conf/logback.xml
>
> <!-- Audit log. -->
>
>     <appender name="IDP_AUDIT" class="ch.qos.logback.core.
> rolling.RollingFileAppender">
>
>        ---snip---
>
>         <encoder class="ch.qos.logback.classic.
> encoder.PatternLayoutEncoder">
>
>             <charset>UTF-8</charset>
>
>             <Pattern>%msg|%X{req.xForwardedFor}|%n</Pattern>
>
>         </encoder>
>
>     </appender>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170209/21156bf0/attachment.html>