We are ready to move our single-computer test /semi-PROD CAS setup that used self-signed certificates to a true PROD configuration using a clustered setup. I'll confess that besides setting up a very basic jBoss cluster, I don't know much about clustering. Yet, I am the one that will have to build these clusters.
Questions: 1. jBoss recommends placing a certificate in a load balancer (like apache/mod_jk) that sits in front of the cluster, placing no certificate on the jBoss servers themselves. a. Will CAS work with the certificate in the load balancer instead of each individual application server? b. Or does CAS require a certificate in each cluster node - so that the calls between the client and CAS can happen (and be trusted) using HTTPS? 2. Is there a good document about clustering CAS? (it would be even better if it was about clustering CAS on jBoss, but I won't hold my breath) 3. Do you have any recommendations, warnings, knowledge about pitfalls, etc... that I should keep in mind as I setup this? Thank you, Bruno -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
