I have another question

I generated the keystores for vm1 and vm2. Each keystore was generated using
for CN the hostname

When I configure my application I have a param

cas.client.trustStore=/apps/frmwk/vm1.keystore

I dont know if I should change this or if I should create a cert for both
hosts. Perhaps I should configure my app in vm1 with vm1.keystore and my app
in vm2 with vm2.keystore

Any help?

Regards

Pablo Mosquera


2009/3/26 Pablo Mosquera Saenz <[email protected]>

> Hi Scott, thanks for the references
>
> I have done everything and my servers start ok
>
> I have 2 virtual machines in cluster, named vm1 and vm2
>
> I have Cas deployed in each server (I use JBoss)
>
> I have configured IIS to redirect either vm1 or vm2
>
> When I used CAS standalone with no cluster configuration I used
>
> cas.server.validateUrl=https://vm1:8443/frmwkCas/proxyValidate<https://vmdev01:8443/frmwkCas/proxyValidate>
>
> If I used the IIS name for this param I had problems with the
> authentication. So now, in a cluster I should use the IIS name
>
> cas.server.validateUrl=https://IISname/frmwkCas/proxyValidate<https://vmdev01:8443/frmwkCas/proxyValidate>
>
> Is this correct?
>
> Thanks in advance
>
> Pablo Mosquera
>
> 2009/3/9 Scott Battaglia <[email protected]>
>
> If you want to cluster CAS, take a look at the options available (Under
>> TicketRegistry):
>>
>> http://www.ja-sig.org/wiki/display/CASUM/Home
>>
>> Also, take a look at our tutorial (which is only for one example, but the
>> concepts can be applied):
>> http://www.ja-sig.org/wiki/display/CASUM/Clustering+CAS
>>
>> -Scott
>>
>>
>> On Mon, Mar 9, 2009 at 10:00 AM, Pablo Mosquera Saenz <
>> [email protected]> wrote:
>>
>>> Hi, I have an application configured to use CAS and IIS
>>>
>>> My configuration is:
>>>
>>> cas.server.validateUrl=https://vmdev01:8443/frmwkCas/proxyValidate
>>> cas.server.casFailed=https://development/frmwkCas/casFailed.jsp
>>> cas.client.urlService=
>>> http://development/frmwkWebAdministration/j_acegi_cas_security_check
>>> cas.server.loginUrl=https://development/frmwkCas/login
>>> cas.server.logoutUrl=https://fdevelopment/frmwkCas/logout
>>> cas.client.trustStore=/apps/ficheroaplicaciones/frmwk/vmdev01.keystore
>>>
>>>
>>> "development" is the name under IIS and is redirected to the machine
>>> "vmdev01".
>>> The parameter validateUrl is with the machine name, because if I use the
>>> IIS name the login fails
>>>
>>> This configuration works. The problem is that under production enviroment
>>> we have a lod balaced server cluster, and I cannot make reference to "one"
>>> machine name
>>>
>>> What should I do?
>>>
>>> Thanks
>>>
>>> --
>>> You are currently subscribed to [email protected] as: 
>>> [email protected]
>>>
>>>
>>> To unsubscribe, change settings or access archives, see 
>>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>>>
>>>
>> --
>> You are currently subscribed to [email protected] as: 
>> [email protected]
>>
>> To unsubscribe, change settings or access archives, see 
>> http://www.ja-sig.org/wiki/display/JSG/cas-user
>>
>>
>

-- 
You are currently subscribed to [email protected] as: 
[email protected]
To unsubscribe, change settings or access archives, see 
http://www.ja-sig.org/wiki/display/JSG/cas-user

Reply via email to