V3 Idp - how to get client IP address in load balanced server

[Ramaiah, Vanna G.]

Loadbalancer is passing the x-forwarded-for.
Could you please let me know what should I do get the remoteipvalve? What are the files I need to modify in addition to logback.xml?



-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Jarno Huuskonen
Sent: Wednesday, July 19, 2017 4:35 AM
To: Shib Users <users at shibboleth.net>
Subject: Re: V3 Idp - how to get client IP address in load balanced server



On Wed, Jul 19, Ramaiah, Vanna G. wrote:
> My idp set up is: client->load balancer->tomcat8 Do I need to have 
> MDCInsertingServletFilter in web.xml to use the x-fowarded-for value?

We use remoteipvalve / %mdc{idp.remote_addr}:
https://tomcat.apache.org/tomcat-8.0-doc/api/org/apache/catalina/valves/RemoteIpValve.html
https://wiki.shibboleth.net/confluence/display/IDP30/LoggingConfiguration

You'll probably want to configure loadbalancer to make sure that x-forwarded-for is set by the lb.

-Jarno

>
> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, 
> Scott
> Sent: Tuesday, July 18, 2017 9:34 PM
> To: Shib Users <users at shibboleth.net>
> Subject: Re: V3 Idp - how to get client IP address in load balanced 
> server
>
>
>
> On 7/18/17, 2:26 PM, "users on behalf of Ramaiah, Vanna G." <users-bounces at shibboleth.net on behalf of ramaiah at musc.edu> wrote:
>
> > I need to log the client ip address in audit logs. Shib servers are load balanced. Apache logs are showing the client ip address.
>
> https://wiki.shibboleth.net/confluence/display/IDP30/AuditLoggingConfi
> guration
>
> -- Scott

--
Jarno Huuskonen
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net