Posts

Showing posts from April 3, 2023

Maximo maxsessions showing Server IP instead of Client IP

MAXSESSIONS table shows the current list of user sessions and also contains client Hostname and IP addresses. Depending on the implementation architecture of webserver, firewall, load balancer etc the  client IP in maxsessions table might show only the server IP all the time. This is due to the HTTP XFF header which may not be getting forwarded correctly for some reason.  In our case, one of our clients faced this issue and I had to forcibly set header using a rewriterule in HTTP server. Go to the HTTP server directory. Usually something like <installation_path>/IBM/HTTPServer/conf/httpd.conf Added the below lines in httpd.conf. Also make sure that the  mod_rewrite.so  and  mod_headers.so  mods are enabled in the same file and not commented out . ####### set "X-Forwarded-For" header as Client IP###### #set XFF header to get the Client IP address in Max Sessions table RewriteEngine on RewriteRule ^(.*) - [E=CLIENTIP:%{REMOTE_ADDR},L] RequestHea...