Re: [cas-user] CAS behind proxy - Log client IP recorded at proxy

[Dmitriy Kopylenko]

Carl,

configure the CAS’ Inspektr client info filter as such (in CAS’ web.xml):


  CAS Client Info Logging Filter
  
com.github.inspektr.common.web.ClientInfoThreadLocalFilter
  
  alternativeIpAddressHeader
  X-Forwarded-For
  


Best,
D.

> On Oct 16, 2015, at 9:43 AM, Waldbieser, Carl  wrote:
> 
> 
> When placing CAS behind an HTTP proxy, it is possible to include the client 
> IP connecting to the proxy in an HTTP header that is passed on to the back 
> end CAS service (e.g. X-Forwarded-For).
> Is it possible to configure CAS to log the value of such a header rather than 
> the actual client IP (which would be the proxy in this case, and would not be 
> terribly useful).
> 
> I am interested in knowing how to do this for both CAS 3.5 and 4.x.
> 
> My goal is ultimately to log CAS authentication data (successes, failures) 
> along with the actual client IP information from a proxied CAS service.
> 
> Thanks,
> Carl Waldbieser
> ITS Systems Programmer
> Lafayette College
> 
> -- 
> You are currently subscribed to cas-user@lists.jasig.org as: 
> dkopyle...@unicon.net
> To unsubscribe, change settings or access archives, see 
> http://www.ja-sig.org/wiki/display/JSG/cas-user


-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

[cas-user] CAS behind proxy - Log client IP recorded at proxy

[Waldbieser, Carl]

When placing CAS behind an HTTP proxy, it is possible to include the client IP 
connecting to the proxy in an HTTP header that is passed on to the back end CAS 
service (e.g. X-Forwarded-For).
Is it possible to configure CAS to log the value of such a header rather than 
the actual client IP (which would be the proxy in this case, and would not be 
terribly useful).

I am interested in knowing how to do this for both CAS 3.5 and 4.x.

My goal is ultimately to log CAS authentication data (successes, failures) 
along with the actual client IP information from a proxied CAS service.

Thanks,
Carl Waldbieser
ITS Systems Programmer
Lafayette College

-- 
You are currently subscribed to cas-user@lists.jasig.org as: 
arch...@mail-archive.com
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user