CPIP (non GCF) and user's User-Agent and IP address
Wed, 2007-10-10 12:35 — villiam
Has anyone been able to pass to a CPIP server the user's User-Agent and IP address?
One of our external systems records these two details when a user is authenticated to help prevent session hijacking. If I could access this information from within the CPIP servlet I could forward it on to the external system as an override to the browser values.
We have our CPIP server setup on the same box as Luminis but running on a different port. We are using Java to write the code and for the most part are using the code as shown in the CPIP.pdf document from the Luminis PLatform Security SDK.
- villiam's blog
- Login or register to post comments
Hack Your Knowledge
Recent blog posts
- Banner w/ Bursar Consultant Needed
- A different MOWA problem
- Passing user's displayName to php script
- Stats - Anyone satistified with their solutions
- Turing Off Luminis IV Cache
- Banner-Luminis-WebCT integration
- Trying to use a cpip with javascript
- Updated to 4.1.22 - Complications
- Time Estimate for Luminis Platform IV Upgrade
- Luminis IV Memory Configuration
Developer Links
Poll
What version of Luminis are you on (Production)?
Luminis III.3.3.x
54%
Luminis 4.0.x
23%
Luminis 4.1.0.x
16%
Luminis 4.x
7%
Luminis 5+
0%
NONE : We ditched Luminis for static HTML! (it was more functional and doesn't crash)
0%
Total votes: 57
Syndicate
Comments
Use redirection?
We would like to achieve the same thing... my only idea is to add an extra servlet to the Luminis web.xml (actually, we already have this for another reason) and use that as your CPIP URL so that when you access:
/cp/redirect/whatever?url=xxx
your servlet would get the user's IP address from the request and store it under their username in the LDAP or some database table, and then redirect the user to:
/cp/ip/login?sys=whatever&url=xxx
then your CPIP connector could connect to the same LDAP or database to retrieve the IP address.
It's a bit convoluted but I can't see why it wouldn't work.
Mark.
Hmmm it shoudl work
You would not even need to store the data in LDAP, you could have your redirect script just append that data to the end of the /cp/ip/login? link. I shall have to give this a try, thanks.
Maybe
You could try appending the IP address to the /cp/ip request but there's no guarantee that it will be passed through to your connector.... the cpip servlet may strip off any extra parameters. Anyway, it's worth trying!
Reference Parameter in CPIP URL inside Properties File
I too have a connector that would benefit from being able to have additional information passed in on the /cp/ip/login URL. I could actually pass it as part of the "url" parameter of the login URL. Does anyone know how I can reference the value of a parameter on the cp/ip/login URL from within the .properties file?