SP is not using X-Forwarded-For behind load balancer

Cantor, Scott cantor.2 at osu.edu
Thu Mar 15 15:21:37 EDT 2018


> I'm having a bit if trouble getting the sp v 2.6.1 to use X-Forwarded-For ip
> address for it's session instead of the LB ip address. I feel like I'm missing some
> glue between what Apache sees and what is forwarded to the shibd process.

I believe the BP is considered to be just getting Apache itself to do the work, which is covered by their docs. The SP workaround is really more limiting, and is more of an IIS thing I imagine.

> apache conf file entry:
> <Location /grouper>

The SP has to see the right address everywhere, not just there. Thus, avoid that, get Apache to populate REMOTE_ADDR correctly.

-- Scott



More information about the users mailing list