Re: No reliable way to know if the request emerged from localhost

2018-02-27 Thread Mark Thomas
On 27/02/18 12:06, Alex O'Ree wrote: > I think this means, no remote http access, but allow admins remote desktop > access. Once in a local desktop sessions, allow the http access since the > request comes from local host Possibly. That is one possible reading of "need to login remotely" vs "not

Re: No reliable way to know if the request emerged from localhost

2018-02-27 Thread Alex O'Ree
I think this means, no remote http access, but allow admins remote desktop access. Once in a local desktop sessions, allow the http access since the request comes from local host This issue is get remote address usually returns a non loop back ip address, even if the url was to localhost On Feb

Re: No reliable way to know if the request emerged from localhost

2018-02-27 Thread Mark Thomas
On 27/02/18 08:29, Vasantharaju Trichy wrote: > Tomcat version 7.0.82 | Windows > > > > We have a requirement such that admins(tomcat users) need to login remotely > to the machine where Tomcat is hosted and access tomcat webapp to perform > certain action or see certain pages . These pages or a

Re: No reliable way to know if the request emerged from localhost

2018-02-27 Thread logo
Hi Vasanth, Am 27.02.2018 09:29, schrieb Vasantharaju Trichy: Tomcat version 7.0.82 | Windows We have a requirement such that admins(tomcat users) need to login remotely to the machine where Tomcat is hosted and access tomcat webapp to perform certain action or see certain pages . These pa

Re: No reliable way to know if the request emerged from localhost

2018-02-27 Thread Olaf Kock
On 27.02.2018 09:29, Vasantharaju Trichy wrote: Tomcat version 7.0.82 | Windows We have a requirement such that admins(tomcat users) need to login remotely to the machine where Tomcat is hosted and access tomcat webapp to perform certain action or see certain pages . These pages or actions a

No reliable way to know if the request emerged from localhost

2018-02-27 Thread Vasantharaju Trichy
Tomcat version 7.0.82 | Windows We have a requirement such that admins(tomcat users) need to login remotely to the machine where Tomcat is hosted and access tomcat webapp to perform certain action or see certain pages . These pages or actions are not permitted if users login remotely Initiall