<div dir="ltr">Eureka.<div><br></div><div>Following required for Tomcat8:  requestAttributesEnabled="true"</div><div><br></div><div>Hence in server.xml:</div><div><br></div><div>







<p class="gmail-p1"><span class="gmail-s1"><Valve className="org.apache.catalina.valves.RemoteIpValve"</span></p><p class="gmail-p1"><span class="gmail-s1">           remoteIpHeader="X-Forwarded-For"</span></p><p class="gmail-p1"><span class="gmail-s1">           trustedProxies="SNAT IPs"</span></p><p class="gmail-p1"><span class="gmail-s1">           proxiesHeader="x-forwarded-by"</span></p><p class="gmail-p1">











</p><p class="gmail-p1"><span class="gmail-s1">           requestAttributesEnabled="true"/></span></p></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 8 February 2017 at 23:32, Joshua Brodie <span dir="ltr"><<a href="mailto:josbrodie@gmail.com" target="_blank">josbrodie@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Our setup is: F5>Apache>Tomcat8</div><div><br></div><div>Done: Configured the Apache to capture the Client IP</div><div><br></div><div>Following suggestions posted at: <a href="http://serverfault.com/questions/516376/logging-x-forwarded-for-ip-in-shibboleths-audit-logs" target="_blank">http://serverfault.com/<wbr>questions/516376/logging-x-<wbr>forwarded-for-ip-in-<wbr>shibboleths-audit-logs</a> -- I was trying to pass the ClientIP to the Tomcat and IdP.<br><div><br></div><div>But was not successful -- it is close to 02:30EST -- so I may not be think straight after many hours to install -- anything missed below?</div><div><br></div><div>Configuration made:</div><div><br></div><div>Tomcat -- server.xml</div><div>







<p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1"><Valve className="org.apache.<wbr>catalina.valves.RemoteIpValve"</span></p>
<p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">           remoteIpHeader="X-Forwarded-<wbr>For"</span></p>
<p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">           trustedProxies="F5 - SNAT IPs"</span></p>
<p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">           protocolHeaderHttpsValue="<wbr>https" /></span></p><p class="m_-5532330441554544824gmail-p1">idp/conf/logback.xml</p><p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1"><!-- Audit log. --></span></p><p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">    <appender name="IDP_AUDIT" class="ch.qos.logback.core.<wbr>rolling.RollingFileAppender"></span></p><p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">       ---snip---</span></p><p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">        <encoder class="ch.qos.logback.classic.<wbr>encoder.PatternLayoutEncoder"></span></p><p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">            <charset>UTF-8</charset></span></p><p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">            <Pattern>%msg|%X{req.<wbr>xForwardedFor}|%n</Pattern></span></p><p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">        </encoder></span></p><p class="m_-5532330441554544824gmail-p1">




















</p><p class="m_-5532330441554544824gmail-p1"><span class="m_-5532330441554544824gmail-s1">    </appender></span></p></div></div></div>
</blockquote></div><br></div>