Can I provision 2 Apache servers with the same <Extensions>?
Phil Ehrens
pehrens at ligo.caltech.edu
Thu Mar 3 13:52:25 EST 2016
Peter Schober wrote:
> * Phil Ehrens <pehrens at ligo.caltech.edu> [2016-03-03 18:03]:
> > Scott Cantor's suggestion of using a logical EntityID
> > pretty much solves all my issues
>
> If your current entityID is widely deployed (the "galaxy" one) you
> can decide to treat it as "logical" in the sense that you forget it
> referenced a server name and keep it the same on the new server.
That may in fact be the right thing to do in this case, since the
new hardware (actually a pair of boxes configured for failover)
will use the hostname "galaxy". I would like to use the "logical"
naming for other purposes, so I am going to continue with it for
now just to get it under my fingers.
> I'd also re-use the same keys (for SAML) from the old server.
> Then add endpoints for the new host name to the metadata, essentially
> duplicating the existing ones, but changing the indexes (which must be
> unique). So far that matches your orignal request.
We are doing that, but only because it looked right, not because I
was sure it was the right thing. Thank you for validating it!
> If you published SLO endpoints the endpoint duplication method won't
> work, though, as that's an unindex endpoint and for the same binding
> you can't have more than one location.
Fortunately for me, we do not publish SLO endpoints.
All very helpful info. Thank you!
Phil
--
Phil Ehrens <phil.ehrens at ligo.org> | mm
The LIGO Laboratory, MS 100-36 | /^( )^\
California Institute of Technology | \,(..),/
1200 East California Blvd. | V~~V
Pasadena, CA 91125 USA | My gpg public key:
Phone:(626)395-8518 | http://www.imbe.net/peligo.asc
More information about the users
mailing list