Experience with JSS and mod_proxy_ajp (or something like it)? - JAMF Nation

Experience with JSS and mod_proxy_ajp (or something like it)? - JAMF Nation

The rest of the Connector block was left as-is, [for us] containing a bunch of SSL keystore and cipher information.

1. Also in /usr/local/jss/tomcat/conf/server.xml inside the <Engine name="Catalina" defaultHost="localhost"> block, we added:

   <Valve className="org.apache.catalina.valves.RemoteIpValve"   internalProxies="127.0.0.1|::1|0:0:0:0:0:0:0:1" />

   This will configure Tomcat to trust certain proxy headers (e.g. X-Forwarded-For) coming from the known proxy IPv4/IPv6 addresses. Without this, all clients in the JSS will appear to be checking in via the same IP address, that of the localhost proxy.

Restart tomcat (/etc/init.d/jamf.tomcat7 restart) to apply changes.

Read full article from Experience with JSS and mod_proxy_ajp (or something like it)? - JAMF Nation