<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I am testing tomcat valve on ECS and I want to open up Shibboleth access control.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Here is tomcat valve:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><span style="font-size:9.0pt;font-family:Helvetica;color:#3F7F5F"><!-- add valve x-forwarded-for --><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> <<b>Valve</b> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055">className</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF">"org.apache.catalina.valves.RemoteIpValve"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055;background:yellow;mso-highlight:yellow">internalProxies</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black;background:yellow;mso-highlight:yellow">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF;background:yellow;mso-highlight:yellow">"10\.140\.(0|1)\.\d{1,3}"</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055">remoteIpHeader</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF">"x-forwarded-for"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055">proxiesHeader</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF">"x-forwarded-by"</span><span style="font-size:9.0pt;font-family:Helvetica;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055">protocolHeader</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF">"x-forwarded-proto"</span><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055">trustedProxies</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF">"proxy1|proxy2|proxy3"</span><span style="font-size:9.0pt;font-family:Helvetica;color:black"> /></span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black">Shibboleth access-control.xml:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> <<b>entry</b> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055">key</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF">"AccessByIPAddress"</span><span style="font-size:9.0pt;font-family:Helvetica;color:black">></span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> <<b>bean</b> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055">id</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF">"AccessByIPAddress"</span><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055">parent</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF">"shibboleth.IPRangeAccessControl"</span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055;background:yellow;mso-highlight:yellow">p</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black;background:yellow;mso-highlight:yellow">:</span><b><span style="font-size:9.0pt;font-family:Helvetica;color:#7F0055;background:yellow;mso-highlight:yellow">allowedRanges</span></b><span style="font-size:9.0pt;font-family:Helvetica;color:black;background:yellow;mso-highlight:yellow">=</span><span style="font-size:9.0pt;font-family:Helvetica;color:#2A00FF;background:yellow;mso-highlight:yellow">"#{
{'127.0.0.1/32', '::1/128', '10.140.0.0/25', '10.140.0.128/25', '10.140.1.0/25'} }"</span><span style="font-size:9.0pt;font-family:Helvetica;color:black;background:yellow;mso-highlight:yellow"> /></span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Helvetica;color:black"> </<b>entry</b>></span><span style="font-size:11.0pt;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Any suggestions?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks in advance.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Regards,<br>
Sunil<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
</body>
</html>