<div dir="ltr"><div>Our setup is: F5>Apache>Tomcat8</div><div><br></div><div>Done: Configured the Apache to capture the Client IP</div><div><br></div><div>Following suggestions posted at: <a href="http://serverfault.com/questions/516376/logging-x-forwarded-for-ip-in-shibboleths-audit-logs">http://serverfault.com/questions/516376/logging-x-forwarded-for-ip-in-shibboleths-audit-logs</a> -- I was trying to pass the ClientIP to the Tomcat and IdP.<br><div><br></div><div>But was not successful -- it is close to 02:30EST -- so I may not be think straight after many hours to install -- anything missed below?</div><div><br></div><div>Configuration made:</div><div><br></div><div>Tomcat -- server.xml</div><div>







<p class="gmail-p1"><span class="gmail-s1"><Valve className="org.apache.catalina.valves.RemoteIpValve"</span></p>
<p class="gmail-p1"><span class="gmail-s1">           remoteIpHeader="X-Forwarded-For"</span></p>
<p class="gmail-p1"><span class="gmail-s1">           trustedProxies="F5 - SNAT IPs"</span></p>
<p class="gmail-p1"><span class="gmail-s1">           protocolHeaderHttpsValue="https" /></span></p><p class="gmail-p1">idp/conf/logback.xml</p><p class="gmail-p1"><span class="gmail-s1"><!-- Audit log. --></span></p><p class="gmail-p1"><span class="gmail-s1">    <appender name="IDP_AUDIT" class="ch.qos.logback.core.rolling.RollingFileAppender"></span></p><p class="gmail-p1"><span class="gmail-s1">       ---snip---</span></p><p class="gmail-p1"><span class="gmail-s1">        <encoder class="ch.qos.logback.classic.encoder.PatternLayoutEncoder"></span></p><p class="gmail-p1"><span class="gmail-s1">            <charset>UTF-8</charset></span></p><p class="gmail-p1"><span class="gmail-s1">            <Pattern>%msg|%X{req.xForwardedFor}|%n</Pattern></span></p><p class="gmail-p1"><span class="gmail-s1">        </encoder></span></p><p class="gmail-p1">




















</p><p class="gmail-p1"><span class="gmail-s1">    </appender></span></p></div></div></div>