Project

General

Profile

Actions
Copy link

Bug #8813

closed

User login through proxy only logs proxy IP address, not X-Forwarded-For

Added by Jim Pingle over 6 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Jim Pingle
Category:
User Manager / Privileges
Target version:
2.4.4
Start date:
08/20/2018
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
All

Description

When a user logs into the GUI through a proxy, only the proxy IP address is logged. If the HTTP request headers include X-Forwarded-For then both should be logged, and ideally both should be included when logging where changes were made.

Files

client_behind_proxy_webGUI.png (121 KB) client_behind_proxy_webGUI.png Azamat Khakimyanov, 08/26/2018 09:56 AM
Actions
Copy link
 #1

Updated by Jim Pingle over 6 years ago

  • Status changed from New to 13
Actions
Copy link
 #2

Updated by Jim Pingle over 6 years ago

  • Status changed from 13 to Feedback
  • % Done changed from 0 to 100
Actions
Copy link
 #3

Updated by Azamat Khakimyanov about 6 years ago

On current 2.4.4-DEV (20180825) I'm able to see "X-Forwarded-For" option when remote client behind proxy connects to webGUI (screenshot attached) and in System log I see
Aug 26 14:46:18 php-fpm 1172 /index.php: Successful login for user 'admin' from: 192.168.122.128 [192.168.1.100] (Local Database)

On 2.4.3_p1 I only see proxy IP-address.

Actions
Copy link

Also available in: Atom PDF