<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Our system architecture is: <br>
F5 -> WinServer2012/IIS -> WinServer2012/Tomcat6. <br>
</p>
<p>We followed this documented approach to get the x-forwarded-for
IP info into our Shib audit logs:<br>
<a class="moz-txt-link-freetext"
href="http://serverfault.com/questions/516376/logging-x-forwarded-for-ip-in-shibboleths-audit-logs">http://serverfault.com/questions/516376/logging-x-forwarded-for-ip-in-shibboleths-audit-logs</a></p>
<p><font face="Courier New, Courier, monospace" size="-2"><br>
</font></p>
<font face="Courier New, Courier, monospace" size="-2">In
server.xml:<br>
...<br>
<Valve
className="org.apache.catalina.valves.RemoteIpValve"<br>
remoteIpHeader="X-Forwarded-For"<br>
protocolHeaderHttpsValue="https" /><br>
<br>
...<br>
<br>
<br>
In logging.xml under the IDP_AUDIT appender:<br>
...<br>
<encoder
class="ch.qos.logback.classic.encoder.PatternLayoutEncoder"><br>
<charset>UTF-8</charset><br>
<Pattern>%msg|%X{req.xForwardedFor}|%n</Pattern><br>
</encoder><br>
...<br>
<br>
</font>This has been unsuccessful so far, no client IP appears in
the log. Any ideas?<br>
<pre class="moz-signature" cols="72">
</pre>
</body>
</html>