IdP Clustering and CAS

[Sacilowski, Tadeusz]

Hi All,

I've been tasked with introducing more HA features in our portal
environment (Ellucian Luminis/Liferay) at my current institution. To that
end, I've managed to cluster our LDAP and CAS nodes and all seems to be
working. I've also been tasked with setting up Shib IdP with CAS as our
authentication provider, which I also seem to have working. However, I'd
like to have IdP be clustered as well.

(Or do I? What do I gain/lose in my situation where I'm using CAS for SSO?)

After reading through documentation and some threads on this list, the idea
of using Memcached does not appeal to me (we're on Java 7 and Tomcat 7),
which leaves me with using stateless clustering. The documentation also
mentions that if using an external SSO as a viable option since we already
have that in place and clustered.

I was just curious what others have done in this situation and what
experiences/caveats I should be aware of before heading down this path?

Thank you!

-- 
*Tadeusz Sacilowski*
*Manager, Portal & Mobile Development*
Teachers College, Columbia University
sacilowski at tc.columbia.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140528/2967d764/attachment-0001.html