Please share the contents of nginx -guacamole-ssl file as well. Assuming
there is nothing else configured on nginx like in default etc.
Please also share the 2 lines you are seeing against the real IP for some
users.
Yes, as far as I can tell. I've gone through this so many times.
I thought also i needed to set maybe the 0:0:... address into the proxies
also but that didnt seem to have any affect either.
The odd thing is it does work some of the time...
==
<Valve className="org.apache.catalina.valves.RemoteIpValve"
internalProxies="127.0.0.1"
remoteIpHeader="X-Forwarded-For"
remoteIpProxiesHeader="X-Forwarded-By"
protocolHeader="X-Forwarded-Proto" />
===
/danielm
From: "Nick Couchman" < <mailto:[email protected]> [email protected]>
To: <mailto:[email protected]> [email protected]
Date: 04/08/20 10:18 PM
Subject: Re: randomely showing localhost IP in guacamole user history
_____
So if it works some of the time, the headers must be getting sent correctly?
so the
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
must be working from nginx?
Have you also set the RemoteIPValve correctly in Tomcat?
http://guacamole.apache.org/doc/gug/proxying-guacamole.html#tomcat-remote-ip
-Nick
--
**Disclaimer:* This message and any attachment may contain confidential,
proprietary information and is intended only for the individual named. If
you are not the original intended recipient and have erroneously received
this message, you should not disseminate, distribute or copy this e-mail.
Please notify the sender immediately by e-mail if you have received this
e-mail by mistake and delete this e-mail from your system. Hitachi MGRM Net
E-mail transmission cannot be guaranteed to be secure or error-free as
information could be intercepted, corrupted, lost, destroyed, arrive late
or incomplete, or contain viruses. Hitachi MGRM Net therefore does not
accept liability for any errors or omissions in the contents of this
message, which arise as a result of e-mail transmission. If verification is
required, please request a hard-copy version. Hitachi MGRM Net Ltd, C -
6/5, Safdarjung Development Area, New Delhi - 110016, India*
*
*
*'Please
consider the environment before printing this e-mail'.*
