Documentation for Crowd 2.0.x. Documentation for other versions of Crowd is available too.

If you are running applications behind one or more proxy servers, you may find it useful to configure Crowd to trust the proxies' IP addresses. When a proxy server forwards an HTTP request, Crowd will recognise the request as coming from the request's originator, not the proxy server. This is particularly useful if you want single sign-on amongst several applications running behind different proxy servers.

Configuring a trusted proxy server means that Crowd will use the rightmost IP address of the X-Fowarded-For: header when verifying the client's IP address.

To configure Crowd to trust a proxy server,

  1. Log in to the Crowd Administration Console.
  2. Click the 'Administration' tab in the top navigation bar.
  3. Click 'Trusted Proxy Servers' in the left-hand menu.
  4. The 'Trusted Proxy Servers' screen appears. Type the IP address of the proxy server. Possible values are:
    • 完全な IP アドレス、例:192.168.10.12。
    • A wildcard IP range, using CIDR notation, e.g. 192.168.10.1/16. For more information, see the introduction to CIDR notation on Wikipedia and RFC 4632.
      (info) The wildcard option is available in Crowd 2.0.4 and later.
  5. 「追加」ボタンをクリックします。

Screenshot: Trusted Proxy Servers



関連トピック

Crowd Documentation

  • ラベルなし

Except where otherwise noted, content in this space is licensed under a Creative Commons Attribution 2.5 Australia License.