non cluster IdP behind hardware load balancer
Jean Robertson
jean.robertson at mcgill.ca
Mon Apr 2 19:04:47 BST 2012
Hello,
We are looking for a non-cluster pair of IdP's behind a hardware load
balancer.
The only reason we want it behind a load balancer is a fast recuperation in
case of failure.
We are not looking to share load between servers.
We are planning to have a single IdP server run for long periods of time and
should it fail, the standby would take over.
We know that single sign on is lost in this case.
We are using shibboleth IdP 2.1.5 software
My question:
- how to configure this?
Do we call the AnonymousRelyingParty and DefaultRelyingParty the same in each
IdP's relying-party.xml config file? (The name being the one that the front
end is called)
Do we copy the SHIBHOME/credentials cert and key from one machine to the
other?
Is there something I missed apart from these steps?
I did look for documentation but did not quite find what is being proposed
here.
Thanks,
Jean Robertson, McGill University
More information about the users
mailing list