:)
----- Original Message -----
From: Daniel L�pez <[EMAIL PROTECTED]>
To: Orion-Interest <[EMAIL PROTECTED]>
Sent: Wednesday, June 06, 2001 7:49 AM
Subject: Re: getRemoteAddr() - APACHE as proxy !!
> Well,
>
> I have some partially good news: There is a way around that using
> Apache. I'm also using it as a proxy, to concentrate all the services on
> the standard HTTP port while keeping different Orion instances running,
> and as some of our security requirements take into account the IP from
> the client, so I run onto the same problem. I queried the mod_proxy
> list and I got a patch that includes, as an extra HTTP header, the
> client original IP. This solves the problem for our own custom
> authentication, as we check first if this header is available or not, if
> it is, then we check the IP agains this value.
> The problem here would be if you use some authentication mechanism that
> you cannot modify so it checks for this extra header.
> Here it is, the URL I was given and from where you can download the
> patch: http://develooper.com/code/mpaf/
> I hope this helps,
> D.
>
>
> elephantwalker wrote:
> >
> > Andre,
> >
> > Sorry, but the loadbalancer.jar has the same problem. For example, the
> > access logs for the various orion servers only report the ip of the
> > loadbalancer...not very interesting.
> >
> > Regards,
> >
> > the elephantwalker
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Andre Vanha
> > Sent: Tuesday, June 05, 2001 12:55 PM
> > To: Orion-Interest
> > Subject: RE: getRemoteAddr() - APACHE as proxy !!
> >
> > I've run into the same problem. I don't think there is any way around
this,
> > since the Apache module is a simple proxy.
> > It would be necessary to improve the Apache plugin to send some extra
> > headers, and then have orion interpret them.
> > However without an open API through which to construct the HTTP requests
> > coming into orion, you would have to interpret these headers in your own
> > code.
> >
> > One possible avanue is Orion's load balancer. I haven't had a chance to
> > test it, but does it suffer from the same problem?
> > It may already have an API that allows it to pass through the original
IP
> > address (and other info) to the actual server, which could be emulated
by a
> > web server plugin.
> >
> > Andre
> >
> > -----Original Message-----
> > From: Eddie [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, June 05, 2001 10:30 AM
> > To: Orion-Interest
> > Subject: Re: getRemoteAddr() - APACHE as proxy !!
> >
> > OK,
> > In the meantime I found out what is wrong:
> > I am using apache as a proxy server, and therefore I do get the IP
address
> > of the server.
> > How can I overcome this ?? Such that getRemoteAddr() does return the
> > client's IP address in my servlets.
> >
> > Eddie
> >
> > ----- Original Message -----
> > From: Eddie <mailto:[EMAIL PROTECTED]>
> > To: Orion-Interest <mailto:[EMAIL PROTECTED]>
> > Sent: Tuesday, June 05, 2001 2:12 PM
> > Subject: getRemoteAddr()
> >
> > Hellu there,
> >
> > If I use getRemoteAddr() to get the IP address of the client the makes
the
> > servlet requests it return the IP address of the server ?? (also
> > getRemoteHost() returns the server name).
> >
> > Any idea how come ??
> > I am running jdk 1.3 and the servlets run on the application server
Orion
> > 1.5.1
> > (OS: Linux redhat 7.0)
> >
> > (I can remember that a JSP on JSERv on apache didn't had this problem,
so I
> > quess it's Orion .. not ??)
> >
> > Eddie
>
>
