Altostratus
Long story short, fronting PeopleSoft with LTM using SNAT and PSACCESSLOG shows the SNAT IP. I'm wondering how to tell PS to derive IP from X-Forwarded-For or WL-Proxy-IP.
Cirrostratus
Maybe here:
http://middlewaremagic.com/weblogic/?p=6466
To get the value of X-forwarded-for (i.e. The IP address of the client.) you just have to do the two following things from the console
Console Path:
First
AdminConsole —> Servers —-> [Your_Server_Name] —> Configuration [Tab] —> General [Sub-Tab] —>
- Click on “Advanced” Link
- Check the CheckBox in this Page “WebLogic Plug-In Enabled”
“WL-Proxy-Client-IP”
Second
Servers –> [YOUR_SERVER_NAME] —> Logging [Tab] —> HTTP [sub-tab]
- Click on Advanced Link at the bottom of the page
- In the “Extended Logging Format Fields:” Just add the c-ip at the beginning or at the end of the values and save it.
Suppose if you have given c-ip at the beginning then the output in the access.log would be something like this
Example:
10.10.10.10 – - [26/Apr/2011:16:36:14 +0530] “GET /SimpleWebApp/ HTTP/1.1″ 200 119
10.10.10.10 – - [26/Apr/2011:16:36:14 +0530] “GET /favicon.ico HTTP/1.1″ 404 1214
Where “10.10.10.10″ is the client IP.
Regards,
Ravish Mody
Aaron
Nimbostratus
I had quite a bit of trouble with this on WL10.3.4 and ended up logging an SR with Oracle. In addition to the steps above you also need to go...
Servers -> [YOUR_SERVER_NAME] -> Protocols -> HTTP [sub-tab]
-In the 'Remote Address Override' text box enter 'X-Forwarded-For'
Oracle has an internal MOS support note 1531012.1 which they said they will publicize at some stage in the future... but not at the time of this writing.
Unfortunately, none of the steps above address the initial question "PeopleSoft Access Logging (PSACCESSLOG) Showing IP Address of LTM".
PSACCESSLOG is actually an internal PeopleSoft database table that gets written to when a user correctly authenticates to a database. My initial research indicates this requires custom code to get the IP being written to the weblogic PIA_access.log file but I haven't yet confirmed this. I will update if I get a decent solution.
Dave.