Project

General

Profile

Bug #8813

User login through proxy only logs proxy IP address, not X-Forwarded-For

Added by Jim Pingle 11 months ago. Updated 11 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
User manager
Target version:
Start date:
08/20/2018
Due date:
% Done:

100%

Estimated time:
Affected Version:
All
Affected Architecture:
All

Description

When a user logs into the GUI through a proxy, only the proxy IP address is logged. If the HTTP request headers include X-Forwarded-For then both should be logged, and ideally both should be included when logging where changes were made.

client_behind_proxy_webGUI.png (121 KB) client_behind_proxy_webGUI.png Azamat Khakimyanov, 08/26/2018 09:56 AM

Associated revisions

Revision d629601a (diff)
Added by Jim Pingle 11 months ago

User login source & proxy fwd addr to user data. Fixes #8813 Fixes #8816

While here, use this info more consistently across log messages and
places where user info is recorded when making changes.

History

#1 Updated by Jim Pingle 11 months ago

  • Status changed from New to This Sprint

#2 Updated by Jim Pingle 11 months ago

  • Status changed from This Sprint to Feedback
  • % Done changed from 0 to 100

#3 Updated by Azamat Khakimyanov 11 months ago

On current 2.4.4-DEV (20180825) I'm able to see "X-Forwarded-For" option when remote client behind proxy connects to webGUI (screenshot attached) and in System log I see
Aug 26 14:46:18 php-fpm 1172 /index.php: Successful login for user 'admin' from: 192.168.122.128 [192.168.1.100] (Local Database)

On 2.4.3_p1 I only see proxy IP-address.

Also available in: Atom PDF