<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><i>“I would say you should use client side session storage, not
memcache.”</i><br>
Is it by default like that or do I have to configure the client
side session storage ?<br>
If I'm not mistaken, in case of IdP failure, the user will be
prompted to sign in again, is there another constraint?<br>
<br>
I’ve found some recommendations for storage entity, are you an
objection or another suggestion about that for an IdP3 cluster
active-active?</p>
<p> </p>
<table style="border-collapse: collapse;width:293pt" border="0"
cellpadding="0" cellspacing="0" width="390">
<colgroup><col
style="mso-width-source:userset;mso-width-alt:5558;width:114pt"
width="152"> <col
style="mso-width-source:userset;mso-width-alt:6217;width:128pt"
width="170"> <col
style="mso-width-source:userset;mso-width-alt:2486;width:51pt"
width="68"> </colgroup><tbody>
<tr style="height:15.0pt" height="20">
<td class="xl66" style="height:15.0pt;width:114pt;
font-size:11.0pt;color:white;font-weight:700;text-decoration:none;text-underline-style:
none;text-line-through:none;font-family:Calibri;border:.5pt
solid #9BC2E6; background:#5B9BD5;mso-pattern:#5B9BD5 none"
height="20" width="152">Storage Entity</td>
<td class="xl66"
style="width:128pt;font-size:11.0pt;color:white;
font-weight:700;text-decoration:none;text-underline-style:none;text-line-through:
none;font-family:Calibri;border:.5pt solid
#9BC2E6;background:#5B9BD5; mso-pattern:#5B9BD5 none"
width="170">Recommended Storage</td>
<td class="xl66"
style="width:51pt;font-size:11.0pt;color:white;
font-weight:700;text-decoration:none;text-underline-style:none;text-line-through:
none;font-family:Calibri;border:.5pt solid
#9BC2E6;background:#5B9BD5; mso-pattern:#5B9BD5 none"
width="68">Scope</td>
</tr>
<tr style="height:15.0pt" height="20">
<td
style="height:15.0pt;font-size:11.0pt;color:black;font-weight:
400;text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern: #DDEBF7 none"
height="20">Conversational session</td>
<td
style="font-size:11.0pt;color:black;font-weight:400;text-decoration:none;
text-underline-style:none;text-line-through:none;font-family:Calibri;
border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern:#DDEBF7 none">Memory</td>
<td
style="font-size:11.0pt;color:black;font-weight:400;text-decoration:none;
text-underline-style:none;text-line-through:none;font-family:Calibri;
border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern:#DDEBF7 none">Per
Node</td>
</tr>
<tr style="height:15.0pt" height="20">
<td
style="height:15.0pt;font-size:11.0pt;color:black;font-weight:
400;text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid #9BC2E6" height="20">IdP
User Session<span style="mso-spacerun:yes"> </span></td>
<td
style="font-size:11.0pt;color:black;font-weight:400;text-decoration:none;
text-underline-style:none;text-line-through:none;font-family:Calibri;
border:.5pt solid #9BC2E6">Client</td>
<td
style="font-size:11.0pt;color:black;font-weight:400;text-decoration:none;
text-underline-style:none;text-line-through:none;font-family:Calibri;
border:.5pt solid #9BC2E6">Per Client</td>
</tr>
<tr style="height:15.0pt" height="20">
<td class="xl66"
style="height:15.0pt;font-size:11.0pt;color:black;
font-weight:700;text-decoration:none;text-underline-style:none;text-line-through:
none;font-family:Calibri;border:.5pt solid
#9BC2E6;background:#DDEBF7; mso-pattern:#DDEBF7 none"
height="20">Persistent ID</td>
<td class="xl67"
style="font-size:11.0pt;color:black;font-weight:700;
text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern: #DDEBF7 none">Common
Database</td>
<td class="xl66"
style="font-size:11.0pt;color:black;font-weight:700;
text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern: #DDEBF7 none">Cluster</td>
</tr>
<tr style="height:15.0pt" height="20">
<td class="xl66"
style="height:15.0pt;font-size:11.0pt;color:black;
font-weight:700;text-decoration:none;text-underline-style:none;text-line-through:
none;font-family:Calibri;border:.5pt solid #9BC2E6"
height="20">User Consents</td>
<td class="xl67"
style="font-size:11.0pt;color:black;font-weight:700;
text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern: #DDEBF7 none">Common
Database</td>
<td class="xl66"
style="font-size:11.0pt;color:black;font-weight:700;
text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid #9BC2E6">Cluster</td>
</tr>
<tr style="height:15.0pt" height="20">
<td
style="height:15.0pt;font-size:11.0pt;color:black;font-weight:
400;text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern: #DDEBF7 none"
height="20">SAML artifacts</td>
<td class="xl65"
style="font-size:11.0pt;color:black;font-weight:400;
text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern: #DDEBF7 none">Common
Database</td>
<td
style="font-size:11.0pt;color:black;font-weight:400;text-decoration:none;
text-underline-style:none;text-line-through:none;font-family:Calibri;
border:.5pt solid
#9BC2E6;background:#DDEBF7;mso-pattern:#DDEBF7 none">Cluster</td>
</tr>
<tr style="height:15.0pt" height="20">
<td
style="height:15.0pt;font-size:11.0pt;color:black;font-weight:
400;text-decoration:none;text-underline-style:none;text-line-through:none;
font-family:Calibri;border:.5pt solid #9BC2E6" height="20">Message
replay cache</td>
<td
style="font-size:11.0pt;color:black;font-weight:400;text-decoration:none;
text-underline-style:none;text-line-through:none;font-family:Calibri;
border:.5pt solid #9BC2E6">Memory</td>
<td
style="font-size:11.0pt;color:black;font-weight:400;text-decoration:none;
text-underline-style:none;text-line-through:none;font-family:Calibri;
border:.5pt solid #9BC2E6">Per Node</td>
</tr>
</tbody>
</table>
<p> According to the documentation, I have to configure global.xml
to save PersistentID and User consents into the database and
idp.properties for SAML artifacts.<br>
However, is it enough to configure JPAStorageService to save all
three of them in db ?<br>
Does the database replication has to be master-master ?<br>
</p>
<p>Is there any limitation for in using SELinux for IdP3 ?<br>
</p>
Thanks<br>
<pre class="moz-signature" cols="72">Marc SAHIN
Administrateur Systèmes
Pôle Système - DSI - Université Lumière Lyon 2
04 78 77 26 66
</pre>
<div class="moz-cite-prefix">On 29/11/2016 18:05, Cantor, Scott
wrote:<br>
</div>
<blockquote
cite="mid:9846A6064BD102419D06814DD0D78DE112ABC9BD@CIO-TNC-D2MBX02.osuad.osu.edu"
type="cite">
<blockquote type="cite">
<pre wrap="">After reading the official document and the article below, apparently, it's
possible to provide IdP3 clustering with that combination :
</pre>
</blockquote>
<pre wrap="">
Well, yes.
</pre>
<blockquote type="cite">
<pre wrap="">Any suggestions/guidance would be really appreciated.
</pre>
</blockquote>
<pre wrap="">
I don't know what you want, you're not asking a specific question. If you're asking what you should do, I would say you should use client side session storage, not memcache.
-- Scott
</pre>
</blockquote>
<br>
</body>
</html>