http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/authentication-levels.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/authentication-levels.html.md.erb b/geode-docs/nativeclient/security/authentication-levels.html.md.erb deleted file mode 100644 index 0e37060..0000000 --- a/geode-docs/nativeclient/security/authentication-levels.html.md.erb +++ /dev/null @@ -1,21 +0,0 @@ ---- -title: Process and Multiuser Authentication ---- - -Client connections can be authenticated at two levels, process and multiuser. - -- **Process**. Each pool creates a configured minimum number of connections across the server group. The pool accesses the least-loaded server for each cache operation. - - Process-level connections represent the overall client process and are the standard way a client accesses the server cache. - -- **Multi-user**. Each user/pool pair creates a connection to one server and then sticks with it for operations. If the server is unable to respond to a request, the pool selects a new one for the user. - - Typically, application servers or web servers that act as clients to Geode servers make multi-user connections. Multi-user allows a single application or web server process to service a large number of users with varied access permissions. - -By default, server pools use process-level authentication. Enable multi-user authentication by setting a pool's `multi-user-secure-mode-enabled` attribute to `true`. - -<img src="../common/images/security-client-connections.gif" id="security__image_85B98E185AD84C59AC22974A63080559" class="image" /> - -Credentials can be sent in encrypted form using the Diffie-Hellman key exchange algorithm. See [Encrypt Credentials with Diffe-Hellman](overviewencryptcred.html#security) for more information. - -
http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/authforcacheserver.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/authforcacheserver.html.md.erb b/geode-docs/nativeclient/security/authforcacheserver.html.md.erb deleted file mode 100644 index f878b55..0000000 --- a/geode-docs/nativeclient/security/authforcacheserver.html.md.erb +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: Configuring Authentication by the Cache Server ---- - -When the cache server receives client credentials during the handshake operation, the server authenticates the client with the callback configured in the `security-client-authenticator` system property. The handshake succeeds or fails depending on the results of the authentication process. - -Here is an example of how you could configure `security-client-authenticator` in the `gfcpp.properties` file: - -``` pre -security-client-authenticator=templates.security.PKCSAuthenticator.create -``` - -In the preceding configuration sample, `PKCSAuthenticator` is the callback class implementing the `Authenticator` interface and `create` is its factory method. - -The following example shows an implementation of the static `create` method: - -``` pre -public static Authenticator create() { - return new PKCSAuthenticator(); -} -``` - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/caveatregionservice.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/caveatregionservice.html.md.erb b/geode-docs/nativeclient/security/caveatregionservice.html.md.erb deleted file mode 100644 index 719209f..0000000 --- a/geode-docs/nativeclient/security/caveatregionservice.html.md.erb +++ /dev/null @@ -1,26 +0,0 @@ ---- -title: Requirements and Caveats for RegionService ---- - -For each region, you can perform operations through the `Cache` instance or the `RegionService` instances, but not both. - -**Note:** -Through the `Cache` you can create a region that uses a pool configured for multi-user authentication, then access and do work on the region using your `RegionService` instances. - -To use `RegionService`: - -- Configure regions as EMPTY. Depending on your data access requirements, this configuration might affect performance, because the client goes to the server for every `get`. -- If you are running durable CQs through the region services, stop and start the offline event storage for the client as a whole. The server manages one queue for the entire client process, so you need to request the stop and start of durable client queue (CQ) event messaging for the cache as a whole, through the ClientCache instance. If you closed the `RegionService` instances, event processing would stop, but the events from the server would continue, and would be lost. - - Stop with: - - ``` pre - cachePtr->close(true); - ``` - - Start up again in this order: - 1. Create the cache. - 2. Create all region service instances. Initialize CQ listeners. - 3. Call the cache `readyForEvents` method. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/config-clientauthorization.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/config-clientauthorization.html.md.erb b/geode-docs/nativeclient/security/config-clientauthorization.html.md.erb deleted file mode 100644 index b8811e2..0000000 --- a/geode-docs/nativeclient/security/config-clientauthorization.html.md.erb +++ /dev/null @@ -1,13 +0,0 @@ ---- -title: Configuring Client Authorization ---- - -You can configure authorization on a per-client basis for various cache operations such as create, get, put, query invalidations, interest registration, and region destroys. On the server side, the `securityclient-accessor` system property in the serverâs `gemfire.properties` file specifies the authorization callback. - -For example: - -`security-client-accessor=templates.security.XmlAuthorization.create` - -In this system property setting, `XmlAuthorization` is the callback class that implements the `AccessControl` interface. The `XmlAuthorization` sample implementation provided with Geode expects an XML file that defines authorization privileges for the clients. For details of this sample implementation and the `AccessControl` interface, see the [Authorization Example](../../managing/security/authorization_example.html#authorization_example). - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/createsecureconnregionservice.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/createsecureconnregionservice.html.md.erb b/geode-docs/nativeclient/security/createsecureconnregionservice.html.md.erb deleted file mode 100644 index 4c8f64b..0000000 --- a/geode-docs/nativeclient/security/createsecureconnregionservice.html.md.erb +++ /dev/null @@ -1,43 +0,0 @@ ---- -title: Creating Multiple Secure User Connections ---- - -To create multiple, secure connections to your servers from a single client, so the client can service different user types, you create an authenticated `RegionService` for each user. - -Typically, a Geode client embedded in an application server supports data requests from many users. Each user can be authorized to access a subset of data on the servers. For example, customer users are allowed only to see and update their own orders and shipments. - -The authenticated users all access the same Cache through instances of the `RegionService` interface. See [RegionService](../client-cache/caching-apis.html#caching-apis__section_8F81996678B64BBE94EF352527F7F006). - -To implement multiple user connections in your client cache, create your Cache as usual, with these additions: - -1. Configure your clientâs server pool for multiple secure user authentication. Example: - - ``` pre - <pool name="serverPool" multiuser-authentication="true"> - <locator host="host1" port="44444"/> - </pool> - ``` - - This enables access through the pool for the `RegionService` instances and disables it for the Cache instance. - -2. After you create your cache, for each user, call your Cache instance `createAuthenticatedView` method, providing the userâs particular credentials. These are create method calls for two users: - - ``` pre - PropertiesPtr credentials1 = Properties::create(); - credentials1->insert("security-username", "root1"); - credentials1->insert("security-password", "root1"); - RegionServicePtr userCache1 = cachePtr->createAuthenticatedView(credentials1); - - PropertiesPtr credentials2 = Properties::create(); - credentials2->insert("security-username", "root2"); - credentials2->insert("security-password", "root2"); - RegionServicePtr userCache2 = cachePtr->createAuthenticatedView(credentials2); - ``` - - For each user, do all of your caching and region work through the assigned region service pointer. Use the region service to get your regions, and the query service, if you need that, and then do your work with them. Access to the server cache will be governed by the serverâs configured authorization rules for each individual user. - -3. To close your cache, close the Cache instance. - -- **[Requirements and Caveats for RegionService](../../nativeclient/security/caveatregionservice.html)** - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/encrypted-auth.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/encrypted-auth.html.md.erb b/geode-docs/nativeclient/security/encrypted-auth.html.md.erb deleted file mode 100644 index d9f8bf1..0000000 --- a/geode-docs/nativeclient/security/encrypted-auth.html.md.erb +++ /dev/null @@ -1,15 +0,0 @@ ---- -title: Encrypted Authentication ---- - -You can set up encrypted authentication using Diffe-Hellman or the sample PKCS implementation. - -- **[Encrypt Credentials with Diffe-Hellman](../../nativeclient/security/overviewencryptcred.html)** - - For secure transmission of sensitive credentials like passwords, encrypt credentials using the Diffie-Hellman key exchange algorithm. With Diffie-Hellman enabled, you can have your client authenticate its servers. - -- **[Using PKCS for Encrypted Authentication](../../nativeclient/security/PKCS.html)** - - This section discusses the concepts and configurations for the sample UserPassword and PKCS implementations. Descriptions of their interfaces, classes, and methods are available in the API. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/handling-serv-auth-errors.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/handling-serv-auth-errors.html.md.erb b/geode-docs/nativeclient/security/handling-serv-auth-errors.html.md.erb deleted file mode 100644 index 244c35a..0000000 --- a/geode-docs/nativeclient/security/handling-serv-auth-errors.html.md.erb +++ /dev/null @@ -1,7 +0,0 @@ ---- -title: Server Authentication Errors ---- - -An `AuthenticationRequiredException` is thrown when the server is configured with security and the client does not present its credentials while attempting to connect. This can occur if the `securityclient-auth-factory` and `security-client-auth-library` properties are not configured on the client. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/limitations.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/limitations.html.md.erb b/geode-docs/nativeclient/security/limitations.html.md.erb deleted file mode 100644 index ee64cf6..0000000 --- a/geode-docs/nativeclient/security/limitations.html.md.erb +++ /dev/null @@ -1,9 +0,0 @@ ---- -title: Limitations ---- - -Currently the native client only supports the NULL cipher with mutual authentication for SSL socket communications. - -The keys and keystores need to be in the JKS (Java KeyStore) format for the Geode server and in the clear PEM format for the native client. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/overviewauthentication.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/overviewauthentication.html.md.erb b/geode-docs/nativeclient/security/overviewauthentication.html.md.erb deleted file mode 100644 index 29e1072..0000000 --- a/geode-docs/nativeclient/security/overviewauthentication.html.md.erb +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: Authentication ---- - -A client is authenticated when it connects, with valid credentials, to a Geode cache server that is configured with the client `Authenticator` callback. - -Once the client is authenticated, the server assigns the client a unique ID and principal, used to authorize operations. The client must trust all cache servers in the server system as it may connect to any one of them. For information on configuring client/server , see [Client/Server Configuration](../../topologies_and_comm/cs_configuration/chapter_overview.html). - -- **[Process and Multiuser Authentication](../../nativeclient/security/authentication-levels.html)** - - Client connections can be authenticated at two levels, process and multiuser. - -- **[Configuring Credentials for Authentication](../../nativeclient/security/systempropsforauth.html)** - - The native client uses system properties to acquire valid credentials for authentication by the server. You define these properties in the `gfcpp.properties` file, which the native client accesses during startup. - -- **[Configuring Authentication by the Cache Server](../../nativeclient/security/authforcacheserver.html)** - - When the cache server receives client credentials during the handshake operation, the server authenticates the client with the callback configured in the `security-client-authenticator` system property. The handshake succeeds or fails depending on the results of the authentication process. - -- **[Server Authentication Errors](../../nativeclient/security/handling-serv-auth-errors.html)** - -- **[Creating Multiple Secure User Connections](../../nativeclient/security/createsecureconnregionservice.html)** - - To create multiple, secure connections to your servers from a single client, so the client can service different user types, you create an authenticated `RegionService` for each user. - -- **[Using an LDAP Server for Client Authentication](../../nativeclient/security/LDAPserverauth.html)** - - An LDAP server can be used by a Geode cache server using the sample LDAP implementation provided in Geode server product. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/overviewclientauthorization.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/overviewclientauthorization.html.md.erb b/geode-docs/nativeclient/security/overviewclientauthorization.html.md.erb deleted file mode 100644 index 76cdaac..0000000 --- a/geode-docs/nativeclient/security/overviewclientauthorization.html.md.erb +++ /dev/null @@ -1,21 +0,0 @@ ---- -title: Client Authorization ---- - -Using a provided callback that implements the `AccessControl` interface, you can configure each server to authorize some or all cache operations. - -The callback can also modify or even disallow the data being provided by the client in the operation, such as a put or a `putAll` operation. The callback can also register itself as a post-processing filter that is passed operation results like `get`, `getAll`, and `query`. - -- **[Configuring Client Authorization](../../nativeclient/security/config-clientauthorization.html)** - - You can configure authorization on a per-client basis for various cache operations such as create, get, put, query invalidations, interest registration, and region destroys. On the server side, the `securityclient-accessor` system property in the serverâs `gemfire.properties` file specifies the authorization callback. - -- **[Post-Operative Authorization](../../nativeclient/security/postopauthorization.html)** - - Authorization in the post-operation phase occurs on the server after the operation is complete and before the results are sent to the client. - -- **[Determining Pre- or Post-Operation Authorization](../../nativeclient/security/usingoperationcontext.html)** - - The `OperationContext` object that is passed to the `authorizeOperation` method of the callback as the second argument provides an `isPostOperation` method that returns true when the callback is invoked in the post-operation phase. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/overviewencryptcred.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/overviewencryptcred.html.md.erb b/geode-docs/nativeclient/security/overviewencryptcred.html.md.erb deleted file mode 100644 index bf41b50..0000000 --- a/geode-docs/nativeclient/security/overviewencryptcred.html.md.erb +++ /dev/null @@ -1,42 +0,0 @@ ---- -title: Encrypt Credentials with Diffe-Hellman ---- - -For secure transmission of sensitive credentials like passwords, encrypt credentials using the Diffie-Hellman key exchange algorithm. With Diffie-Hellman enabled, you can have your client authenticate its servers. - -## <a id="security__section_1BB8F13C7ACB44668FF337F59A3BA5AE" class="no-quick-link"></a>Enabling Diffe-Hellman - -Set the `security-client-dhalgo` system property in the `gfcpp.properties` file to the password for the public key file store on the client (the name of a valid symmetric key cipher supported by the JDK). - -Valid `security-client-dhalgo` property values are `DESede`, `AES`, and `Blowfish`, which enable the Diffie-Hellman algorithm with the specified cipher to encrypt the credentials. - -For the `AES` and `Blowfish` algorithms, optionally specify the key size for the `security-client-dhalgo` property. Valid key size settings for the `AES` algorithm are `AES:128`, `AES:192`, and `AES:256`. The colon separates the algorithm name and the key size. For the `Blowfish` algorithm, key sizes from 128 to 448 bits are supported. For example: - -``` pre -security-client-dhalgo=Blowfish:128 -``` - -For `AES` algorithms, you may need Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files from Sun or equivalent for your JDK. - -Adding settings for Diffie-Hellman on clients also enables challenge response from server to client in addition to encryption of credentials using the exchanged key to avoid replay attacks from clients to servers. Clients can also enable authentication of servers, with challenge-response from client to server to avoid server-side replay attacks. - -## <a id="security__section_F881653044EC4AB5BE88F673890F2A40" class="no-quick-link"></a>Client Authentication of Server - -With Diffie-Hellman enabled, you can have your client authenticate its servers. - -1. Generate a `.pem` file for each pkcs12 keystore: - - 1. Enter this command from a pkcs12 file or a pkcs keystore: <a id="security__fig_3CAFDE3CB29348A19AF3BE3591AFA2F7"></a> - - ``` pre - user@host: ~> openssl pkcs12 -nokeys -in <keystore/pkcs12 file> -out <outputfilename.pem > - ``` - - 2. Concatenate the generated .pem files into a single .pem file. You will use this file name in the next step. - -2. In the `gfcpp.properties` file: - - 1. Set `security-client-kspath` to the file name of the `.pem` file password for the public key file store on the client. - 2. Set `security-client-kspasswd` to the password for the public key file store on the client. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/overviewsecurity.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/overviewsecurity.html.md.erb b/geode-docs/nativeclient/security/overviewsecurity.html.md.erb deleted file mode 100644 index 17acd3f..0000000 --- a/geode-docs/nativeclient/security/overviewsecurity.html.md.erb +++ /dev/null @@ -1,29 +0,0 @@ ---- -title: Security ---- - -*Security* describes how to implement the security framework for the Geode native client, including authentication, authorization, ecryption, and SSL client/server communication. - -The security framework authenticates clients that attempt to connect to a Geode cache server, and authorizes client cache operations. You can also configure it for client authentication of servers, and you can plug in your own implementations for authentication and authorization. - -- **[Authentication](../../nativeclient/security/overviewauthentication.html)** - - A client is authenticated when it connects, with valid credentials, to a Geode cache server that is configured with the client `Authenticator` callback. - -- **[Encrypted Authentication](../../nativeclient/security/encrypted-auth.html)** - - You can set up encrypted authentication using Diffe-Hellman or the sample PKCS implementation. - -- **[Client Authorization](../../nativeclient/security/overviewclientauthorization.html)** - - Using a provided callback that implements the `AccessControl` interface, you can configure each server to authorize some or all cache operations. - -- **[Security-Related System Properties (gfcpp.properties)](../../nativeclient/security/security-systemprops.html)** - - The table describes the security-related system properties in the `gfcpp.properties` file for native client authentication and authorization. - -- **[SSL Client/Server Communication](../../nativeclient/security/overviewsslclientserver.html)** - - This section describes how to configure OpenSSL; implement SSL-based communication between your clients and servers; and run clients and servers with SSL enabled. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/overviewsslclientserver.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/overviewsslclientserver.html.md.erb b/geode-docs/nativeclient/security/overviewsslclientserver.html.md.erb deleted file mode 100644 index 5875a03..0000000 --- a/geode-docs/nativeclient/security/overviewsslclientserver.html.md.erb +++ /dev/null @@ -1,13 +0,0 @@ ---- -title: SSL Client/Server Communication ---- - -This section describes how to configure OpenSSL, implement SSL-based communication between your clients and servers, and run clients and servers with SSL enabled. - -- **[Set Up OpenSSL](../../nativeclient/security/ssl-setup.html)** - -- **[Limitations](../../nativeclient/security/limitations.html)** - - Currently the native client only supports the NULL cipher with mutual authentication for SSL socket communications. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/postopauthorization.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/postopauthorization.html.md.erb b/geode-docs/nativeclient/security/postopauthorization.html.md.erb deleted file mode 100644 index 37d2bc8..0000000 --- a/geode-docs/nativeclient/security/postopauthorization.html.md.erb +++ /dev/null @@ -1,15 +0,0 @@ ---- -title: Post-Operative Authorization ---- - -Authorization in the post-operation phase occurs on the server after the operation is complete and before the results are sent to the client. - -The callback can modify the results of certain operations, such as `query`, `get` and `keySet`, or even completely disallow the operation. For example, a post-operation callback for a query operation can filter out sensitive data or data that the client should not receive, or even completely fail the operation. - -The `security-client-accessor-pp` system property in the serverâs `gemfire.properties` file specifies the callback to invoke in the post-operation phase. For example: - -``` pre -security-client-accessor-pp=templates.security.XmlAuthorization.create -``` - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/security-systemprops.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/security-systemprops.html.md.erb b/geode-docs/nativeclient/security/security-systemprops.html.md.erb deleted file mode 100644 index 115919e..0000000 --- a/geode-docs/nativeclient/security/security-systemprops.html.md.erb +++ /dev/null @@ -1,68 +0,0 @@ ---- -title: Security-Related System Properties (gfcpp.properties) ---- - -The table describes the security-related system properties in the `gfcpp.properties` file for native client authentication and authorization. - -<a id="security__section_6DC4C72A2EEB432AA40DE97D438FD1E7"></a><a id="security__table_92A6A66523764199A19BCD66BA189921"></a> - -<table> -<caption><span class="tablecap">Table 1. System Properties for Client Authentication and Authorization</span></caption> -<colgroup> -<col width="50%" /> -<col width="50%" /> -</colgroup> -<tbody> -<tr class="odd"> -<td><code class="ph codeph">security-client-auth-factory</code></td> -<td>Sets the key for the <code class="ph codeph">AuthInitialize</code> factory function.</td> -</tr> -<tr class="even"> -<td><code class="ph codeph">security-client-auth-library</code></td> -<td>Registers the path to the <code class="ph codeph">securityImpl.dll</code> library.</td> -</tr> -<tr class="odd"> -<td><code class="ph codeph">security-client-dhalgo</code></td> -<td>Returns the Diffie-Hellman secret key cipher algorithm.</td> -</tr> -<tr class="even"> -<td><code class="ph codeph">security-client-kspath</code></td> -<td>Path to a .pem file, which contains the public certificates for all Geode cache servers to which the client can connect through specified endpoints.</td> -</tr> -<tr class="odd"> -<td><code class="ph codeph">security-client-kspasswd</code></td> -<td>Password for the public key file store on the client.</td> -</tr> -<tr class="even"> -<td><code class="ph codeph">security-keystorepath</code></td> -<td>Path to the public keystore.</td> -</tr> -<tr class="odd"> -<td><code class="ph codeph">security-alias</code></td> -<td>Alias name for the key in the keystore.</td> -</tr> -<tr class="even"> -<td><code class="ph codeph">security-keystorepass</code></td> -<td>Sets the password for the password-protected keystore.</td> -</tr> -<tr class="odd"> -<td><code class="ph codeph">ssl-enabled</code></td> -<td>Enables SSL-based client/server communication when set to true. When true, the other ssl-* settings are required. The default is false, which causes communication to use plain socket connections.</td> -</tr> -<tr class="even"> -<td><code class="ph codeph">ssl-keystore</code></td> -<td>Name of the .PEM keystore file, containing the clientâs private key. Not set by default. Required if <code class="ph codeph">ssl-enabled</code> is true.</td> -</tr> -<tr class="odd"> -<td><code class="ph codeph">ssl-keystore-password</code></td> -<td>Sets the password for the private key PEM file for SSL.</td> -</tr> -<tr class="even"> -<td><code class="ph codeph">ssl-truststore</code></td> -<td><p>Name of the .PEM truststore file, containing the serversâ public certificate. Not set by default. Required if <code class="ph codeph">ssl-enabled</code> is true.</p></td> -</tr> -</tbody> -</table> - - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/ssl-setup.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/ssl-setup.html.md.erb b/geode-docs/nativeclient/security/ssl-setup.html.md.erb deleted file mode 100644 index 832ca68..0000000 --- a/geode-docs/nativeclient/security/ssl-setup.html.md.erb +++ /dev/null @@ -1,122 +0,0 @@ ---- -title: Set Up OpenSSL ---- - -## Step 1. Download and install OpenSSL -The open-source OpenSSL toolkit provides a full-strength general purpose cryptography library to operate along with the PKCS sample implementation for encrypted authentication of native client credentials. - -Follow these instructions to download and install OpenSSL for your specific operating system. - -The native client requires OpenSSL 1.0.1h or later. For Windows platforms, you can use either the regular or the OpenSSL 1.0.1h "Light" version. - -**Note:** -If you use Cygwin, it is recommended that you do not use the OpenSSL library that comes with Cygwin because it is built with `cygwin.dll` as a dependency. - -### <a id="security__section_5C95C2E4D9244B27BF8FD178E402D993" class="no-quick-link"></a>Linux - -Download the OpenSSL tarball archive from the OpenSSL web site at [http://www.openssl.org/source/](http://www.openssl.org/source/). Copy the downloaded tarball file into `NativeClient_xxxx/templates/security/openssl/Linux` and run `buildit.sh`. - -### <a id="security__section_93651F296C1A4EA5A3FA045EC15FB506" class="no-quick-link"></a>Solaris - -Download the OpenSSL tarball archive from the OpenSSL web site at [http://www.openssl.org/source/](http://www.openssl.org/source/). Copy the downloaded tarball file into `NativeClient_xxxx/templates/security/openssl/SunOS` and run `buildit.sh`. - -### <a id="security__section_68961A8829D44BFB8F542F3317464E5E" class="no-quick-link"></a>Windows - -Download the installer for OpenSSL from [http://www.openssl.org/related/binaries.html](http://www.openssl.org/related/binaries.html). You can also use the OpenSSL "Light" version. - -Use the downloaded OpenSSL installer to install it on Windows. You can usually accept the default installation path (`C:\OpenSSL`). - - -## Step 2. Create keystores - -The Geode server requires keys and keystores in the Java Key Store (JKS) format while the native client requires them in the clear PEM format. Thus you need to be able to generate private/public keypairs in either format and convert between the two using the `keytool` utility and the `openssl` command. - -There are public third party free tools and source code available to download such as the "KeyTool IUI" tool. - - -## Step 3. Configure environment variables - -Configure your system environment to build and run OpenSSL. Follow the environment setup that applies to your operating system. - -For all references to the Pivotal\_GemFire\_NativeClient\_*64bit*\_*xxxx* directory, replace *64bit* with the appropriate architecture and *xxxx* with the actual four-digit product build number. - -### <a id="security__section_6C173D0D8C8343EA92961C954032E2CA" class="no-quick-link"></a>Bourne and Korn shells (sh, ksh, bash) - -``` pre -% OPENSSL=<parent folder for OpenSSL binaries>; export OPENSSL -% GFCPP=<path to installation, typically C:\Pivotal_GemFire_NativeClient_64bit_xxxx>; export GFCPP -% LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$GFCPP/lib:$GFCPP/ssl_libs:$OPENSSL/lib -% export LD_LIBRARY_PATH -% CLASSPATH=$GEMFIRE/lib/gfSecurityImpl.jar:$CLASSPATH -``` - -### <a id="security__section_76CF86EDC2234BA6BF7DA6E253C71F61" class="no-quick-link"></a>Windows - -``` pre -> set GFCPP=<path to installation, typically C:\Pivotal_GemFire_NativeClient_32or64bit_xxxx> -> set OPENSSL=<path to installed OpenSSL, typically C:\OpenSSL> -> set PATH=<path to Java JDK or JRE>\bin;%GFCPP%\bin;%GFCPP%\ssl_libs;%OPENSSL%\bin;%PATH% -> set CLASSPATH=<path to GemFire installation>\lib\gfSecurityImpl.jar;%CLASSPATH% -``` - - -## Step 4. Configure SSL properties in gfcpp.properties and gemfire.properties - -Configure SSL properties. - -1. In `gfcpp.properties`, set `ssl-enabled` to true and set `ssl-keystore` and `ssl-truststore` to point to your keystore files. See [Security-Related System Properties (gfcpp.properties)](security-systemprops.html#security) for a description of these properties. -2. On each locator, set the following SSL properties in the locatorâs `gemfire.properties` file: - - ``` pre - server-ssl-enabled=true - server-ssl-protocols=any - server-ssl-require-authentication=true - server-ssl-ciphers=SSL_RSA_WITH_NULL_SHA - ``` - - -## Step 5. Start and stop the client and server - -Before you start and stop the client and server, make sure you configure the native client with the SSL properties as described and with the servers or locators specified as usual. - -Specifically, ensure that: - -- OpenSSL and ACE\_SSL `DLL`s locations are in the right environment variables for your system: `PATH` for Windows, and `LD_LIBRARY_PATH` for Unix. -- You have generated the keys and keystores. -- You have set the system properties. - -For details on stopping and starting locators and cache servers with SSL, see [Starting Up and Shutting Down Your System](../../configuring/running/starting_up_shutting_down.html). - -**Example locator start command** - -Ensure that all required SSL properties are configured in your server's `gfsecurity.properties` file. Then start your locator as follows: - -``` pre -gfsh>start locator --name=my_locator --port=12345 --dir=. \ ---security-properties-file=/path/to/your/gfsecurity.properties -``` - -**Example locator stop command** - -``` pre -gfsh>stop locator --port=12345 \ ---security-properties-file=/path/to/your/gfsecurity.properties -``` - -**Example server start command** - -Again, ensure that all required SSL properties are configured in `gfsecurity.properties`. Then start the server with: - -``` pre -gfsh>start server --name=my_server --locators=hostname[12345] \ ---cache-xml-file=server.xml --log-level=fine \ ---security-properties-file=/path/to/your/gfsecurity.properties -``` - -**Example server stop command** - -``` pre -gfsh>stop server --name=my_server -``` - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/systempropsforauth.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/systempropsforauth.html.md.erb b/geode-docs/nativeclient/security/systempropsforauth.html.md.erb deleted file mode 100644 index bbfae31..0000000 --- a/geode-docs/nativeclient/security/systempropsforauth.html.md.erb +++ /dev/null @@ -1,68 +0,0 @@ ---- -title: Configuring Credentials for Authentication ---- - -The native client uses system properties to acquire valid credentials for authentication by the server. You define these properties in the `gfcpp.properties` file, which the native client accesses during startup. - -## <a id="security__section_E1835A3B22D44D47A4C9DB54A3590B71" class="no-quick-link"></a>security-client-auth-factory - -System property for the factory function of the class implementing the `AuthInitialize` interface (`IAuthInitialize` in .NET). The .NET clients can load both C++ and .NET implementations. For .NET implementations, this property is the fully qualified name of the static factory function (including the namespace and class). - -## <a id="security__section_15C6689C363B469B947B177E1DE73208" class="no-quick-link"></a>security-client-auth-library - -System property for the library where the factory methods reside. The library is loaded explicitly and the factory functions are invoked dynamically, returning an object of the class implementing the `AuthInitialize` interface. - -Other implementations of the `AuthInitialize` interface may be required to build credentials using properties that are also passed as system properties. These properties also start with the security- prefix. For example, the PKCS implementation requires an alias name and the corresponding keystore path, which are specified as `security-alias` and `security-keystorepath`, respectively. Similarly, `UserPasswordAuthInit `requires a username specified in `security-username`, and the corresponding password is specified in the `security-password` system property. - -The `getCredentials` function for the `AuthInitialize` interface is called to obtain the credentials. All system properties starting with security- are passed to this callback as the first argument to the `getCredentials` function, using this prototype: - -`PropertiesPtr getCredentials(PropertiesPtr& securityprops, const char *server);` - -## <a id="security__section_869DD42F1B23450D9425712EBBD5CB1C" class="no-quick-link"></a>Implementing the Factory Method for Authentication (C++ and .NET) - -The following examples show how to implement the factory method in both C++ and .NET. **C++ Implementation** - -``` pre -LIBEXP AuthInitialize* createPKCSAuthInitInstance() -{ - return new PKCSAuthInit( ); -} -``` - -**.NET Implementation** - -``` pre -public static IAuthInitialize Create() -{ - return new UserPasswordAuthInit(); -} -``` - -Implementations of the factory method are user-provided. Credentials in the form of properties returned by this function are sent by the client to the server for authentication during the clientâs handshake process with the server. - -The Geode native client installation provides sample security implementations in its `templates/security` folder. - -## <a id="security__section_9DEC6B55C76D446FB0821AF3B3922BD6" class="no-quick-link"></a>Acquiring Credentials Programmatically (C++ and .NET) - -This example shows a C++ client connecting with credentials. - -``` pre -PropertiesPtr secProp = Properties::create(); -secProp->insert("security-client-auth-factory", "createPKCSAuthInitInstance"); -secProp->insert("security-client-auth-library", "securityImpl"); -secProp->insert("security-keystorepath", "keystore/gemfire6.keystore"); -secProp->insert("security-alias", "gemfire6"); -secProp->insert("security-zkeystorepass", "gemfire"); -CacheFactoryPtr cacheFactoryPtr = CacheFactory::createCacheFactory(secProp); -``` - -This example shows a .NET client. - -``` pre -Properties secProp = Properties.Create(); -secProp.Insert("security-client-auth-factory", - "GemStone.GemFire.Templates.Cache.Security.UserPasswordAuthInit.Create"); -secProp.Insert("security-client-auth-library", "securityImpl"); -secProp.Insert("security-username"," gemfire6"); -secProp.Insert("security-password"," gemfire6Pass); -``` http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/security/usingoperationcontext.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/security/usingoperationcontext.html.md.erb b/geode-docs/nativeclient/security/usingoperationcontext.html.md.erb deleted file mode 100644 index 75bb22a..0000000 --- a/geode-docs/nativeclient/security/usingoperationcontext.html.md.erb +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: Determining Pre- or Post-Operation Authorization ---- - -The `OperationContext` object that is passed to the `authorizeOperation` method of the callback as the second argument provides an `isPostOperation` method that returns true when the callback is invoked in the post-operation phase. - -For example: - -``` pre -bool authorizeOperation(Region region, OperationContext context) { - if (context.isPostOperation()) { - //it's a post-operation - } else { - //it's a pre-operation - } -} -``` - -If an authorization failure occurs in a pre-operation or post-operation callback on the server, the operation throws a `NotAuthorizedException` on the client. - -For more information, see [Authorization](../../managing/security/authorization_overview.html). - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/setting-properties/attribute-def-priority.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/setting-properties/attribute-def-priority.html.md.erb b/geode-docs/nativeclient/setting-properties/attribute-def-priority.html.md.erb deleted file mode 100644 index 953c92c..0000000 --- a/geode-docs/nativeclient/setting-properties/attribute-def-priority.html.md.erb +++ /dev/null @@ -1,21 +0,0 @@ ---- -title: Attribute Definition Priority ---- - -You can specify attributes in different ways, which can cause conflicting definitions. Applications can be configured programmatically, and that has priority over other settings. - -Check your application documentation to see whether this applies in your case. - -- Programmatic configuration -- Properties set at the command line -- `currentWorkingDirectory/gfcpp.properties` file -- `productDir/defaultSystem/gfcpp.properties` file -- Geode defaults - -In case an attribute is defined in more than one place, the first source in this list is used: - -The `gfcpp.properties` files and programmatic configuration are optional. If they are not present, no warnings or errors occur. For details on programmatic configuration through the `Properties` object, see [Defining Properties Programmatically](define-programmatically.html#define-programmatically). - -For information on the cache server configuration, see the *User's Guide*. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/setting-properties/attributes-gfcpp.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/setting-properties/attributes-gfcpp.html.md.erb b/geode-docs/nativeclient/setting-properties/attributes-gfcpp.html.md.erb deleted file mode 100644 index 4e5a8c6..0000000 --- a/geode-docs/nativeclient/setting-properties/attributes-gfcpp.html.md.erb +++ /dev/null @@ -1,264 +0,0 @@ ---- -title: Attributes in gfcpp.properties ---- - -A variety of `gfcpp.properties` settings can be used when a native client connects to a distributed system. - -The following settings can be configured: - -- **[General Properties](attributes-gfcpp.html#attributes-gfcpp__table_21004C9E93294F03BE3469C13EA33262)** Basic information for the process, such as cache creation parameters. -- **[Logging Properties](attributes-gfcpp.html#attributes-gfcpp__table_D42627049FD6432494BDE5170AF1BCCF)** How and where to log system messages. -- **[Statistics Archiving Properties](attributes-gfcpp.html#attributes-gfcpp__table_E1A0EDBA67CD41319E1E5FD0A0BB2723)** How to collect and archive statistics information. -- **[Durable Client Properties](attributes-gfcpp.html#attributes-gfcpp__table_BA6DAF27947B4A9488787E6BDCFC15B9)** Information about the durable clients connected to the system. -- **[Security Properties](attributes-gfcpp.html#attributes-gfcpp__table_B3A8E9EB44A94557A97BB700E2BA1EF1)** Information about various security parameters. - -## <a id="attributes-gfcpp__section_655789BCC46642789F91CDA8AE03CD9B" class="no-quick-link"></a>Attribute Definitions - -The following tables list Geode configuration attributes that can be stored in the `gfcpp.properties` file to be read by a native client. - -For the system properties that relate to high availability, see [Sending Periodic Acknowledgement](../preserving-data/sending-periodic-ack.html#concept_868B8082463846DE9F35BBEA56105C82). For a list of security-related system properties and their descriptions, see the table [System Properties for Client Authentication and Authorization](../security/security-systemprops.html#security__table_92A6A66523764199A19BCD66BA189921). - -<a id="attributes-gfcpp__table_21004C9E93294F03BE3469C13EA33262"></a> - -<table> -<caption><span class="tablecap">Table 1. Attributes in gfcpp.propertiesâGeneral Properties</span></caption> -<colgroup> -<col width="33%" /> -<col width="33%" /> -<col width="34%" /> -</colgroup> -<thead> -<tr class="header"> -<th>gfcpp.properties Attribute</th> -<th>Description</th> -<th>Default</th> -</tr> -</thead> -<tbody> -<tr class="odd"> -<td>appdomain-enabled</td> -<td>If <code class="ph codeph">true</code>, allows native client to work when multiple .NET appdomains are in use.</td> -<td>false</td> -</tr> -<tr class="even"> -<td>cache-xml-file</td> -<td>Name and path of the file whose contents are used by default to initialize a cache if one is created. If not specified, the native client starts with an empty cache, which is populated at runtime. -<p>See <a href="../cache-init-file/chapter-overview.html#chapter-overview">Cache Initialization File</a> for more information on the cache initialization file.</p></td> -<td>no default</td> -</tr> -<tr class="odd"> -<td>heap-lru-delta</td> -<td>When heap LRU is triggered, this is the amount that gets added to the percentage that is above the <code class="ph codeph">heap-lru-limit</code> amount. LRU continues until the memory usage is below <code class="ph codeph">heap-lru-limit</code> minus this percentage. This property is only used if <code class="ph codeph">heap-lru-limit</code> is greater than 0 .</td> -<td>10</td> -</tr> -<tr class="even"> -<td>heap-lru-limit</td> -<td>Maximum amount of memory, in megabytes, used by the cache for all regions. If this limit is exceeded by <code class="ph codeph">heap-lru-delta</code> percent, LRU reduces the memory footprint as necessary. If not specified, or set to 0, memory usage is governed by each region's LRU entries limit, if any.</td> -<td>0</td> -</tr> -<tr class="odd"> -<td>conflate-events</td> -<td>Client side conflation setting, which is sent to the server.</td> -<td>server</td> -</tr> -<tr class="even"> -<td>connect-timeout</td> -<td>Amount of time (in seconds) to wait for a response after a socket connection attempt.</td> -<td>59</td> -</tr> -<tr class="odd"> -<td>connection-pool-size</td> -<td>Number of connections per endpoint</td> -<td>5</td> -</tr> -<tr class="even"> -<td>crash-dump-enabled</td> -<td>Whether crash dump generation for unhandled fatal errors is enabled. True is enabled, false otherwise.</td> -<td>true</td> -</tr> -<tr class="odd"> -<td>disable-chunk-handler-thread</td> -<td>When set to false, each application thread processes its own response. If set to true, the chunk-handler-thread processes the response for each application thread.</td> -<td>false</td> -</tr> -<tr class="even"> -<td>disable-shuffling-of-endpoints</td> -<td>If true, prevents server endpoints that are configured in pools from being shuffled before use.</td> -<td>false</td> -</tr> -<tr class="odd"> -<td>grid-client</td> -<td>If true, the client does not start various internal threads, so that startup and shutdown time is reduced.</td> -<td>false</td> -</tr> -<tr class="even"> -<td>max-fe-threads</td> -<td>Thread pool size for parallel function execution. An example of this is the GetAll operations.</td> -<td>2 * number of CPU cores</td> -</tr> -<tr class="odd"> -<td>max-socket-buffer-size</td> -<td>Maximum size of the socket buffers, in bytes, that the native client will try to set for client-server connections.</td> -<td>65 * 1024</td> -</tr> -<tr class="even"> -<td>notify-ack-interval</td> -<td>Interval, in seconds, in which client sends acknowledgments for subscription notifications.</td> -<td>1</td> -</tr> -<tr class="odd"> -<td>notify-dupcheck-life</td> -<td>Amount of time, in seconds, the client tracks subscription notifications before dropping the duplicates.</td> -<td>300</td> -</tr> -<tr class="even"> -<td>ping-interval</td> -<td>Interval, in seconds, between communication attempts with the server to show the client is alive. Pings are only sent when the <code class="ph codeph">ping-interval</code> elapses between normal client messages. This must be set lower than the server's <code class="ph codeph">maximum-time-between-pings</code>.</td> -<td>10</td> -</tr> -<tr class="odd"> -<td>redundancy-monitor-interval</td> -<td>Interval, in seconds, at which the subscription HA maintenance thread checks for the configured redundancy of subscription servers.</td> -<td>10</td> -</tr> -<tr class="even"> -<td>stacktrace-enabled</td> -<td>If <code class="ph codeph">true</code>, the exception classes capture a stack trace that can be printed with their <code class="ph codeph">printStackTrace</code> function. If false, the function prints a message that the trace is unavailable.</td> -<td>false</td> -</tr> -<tr class="odd"> -<td>tombstone-timeout</td> -<td>Time in milliseconds before a tombstone entry goes away, when region consistency checking is enabled. -<div class="note note"> -**Note:** -<p>This timeout's default has been determined heuristically through experience with many systems. Careful consideration should be applied before changing the value away from the default.</p> -</div></td> -<td>480000</td> -</tr> -</tbody> -</table> - - -<a id="attributes-gfcpp__table_D42627049FD6432494BDE5170AF1BCCF"></a> - -<table> -<caption><span class="tablecap">Table 2. Attributes in gfcpp.propertiesâLogging Properties</span></caption> -<colgroup> -<col width="34%" /> -<col width="33%" /> -<col width="33%" /> -</colgroup> -<thead> -<tr class="header"> -<th>gfcpp.properties Attribute</th> -<th>Description</th> -<th>Default</th> -</tr> -</thead> -<tbody> -<tr class="odd"> -<td>log-disk-space-limit</td> -<td>Maximum amount of disk space, in megabytes, allowed for all log files, current, and rolled. If set to 0, the space is unlimited.</td> -<td>0</td> -</tr> -<tr class="even"> -<td>log-file</td> -<td>Name and full path of the file where a running client writes log messages. If not specified, logging goes to <code class="ph codeph">stdout</code>.</td> -<td>no default file</td> -</tr> -<tr class="odd"> -<td>log-file-size-limit</td> -<td>Maximum size, in megabytes, of a single log file. Once this limit is exceeded, a new log file is created and the current log file becomes inactive. If set to 0, the file size is unlimited.</td> -<td>0</td> -</tr> -<tr class="even"> -<td>log-level</td> -<td>Controls the types of messages that are written to the application's log. These are the levels, in descending order of severity and the types of message they provide: -<ul> -<li><strong>Error</strong> (highest severity) is a serious failure that will probably prevent program execution.</li> -<li><strong>Warning</strong> is a potential problem in the system.</li> -<li><strong>Info</strong> is an informational message of interest to the end user and system administrator.</li> -<li><strong>Config</strong> is a static configuration message, often used to debug problems with particular configurations.</li> -<li><strong>Fine, Finer, Finest, and Debug</strong> provide tracing information. Only use these with guidance from technical support.</li> -</ul> -<p>Enabling logging at any level enables logging for all higher levels.</p></td> -<td>config</td> -</tr> -</tbody> -</table> - - -<a id="attributes-gfcpp__table_E1A0EDBA67CD41319E1E5FD0A0BB2723"></a> - -<table> -<caption><span class="tablecap">Table 3. Attributes in gfcpp.propertiesâStatistics Archiving Properties</span></caption> -<colgroup> -<col width="33%" /> -<col width="33%" /> -<col width="34%" /> -</colgroup> -<thead> -<tr class="header"> -<th>gfcpp.properties Attribute</th> -<th>Description</th> -<th>Default</th> -</tr> -</thead> -<tbody> -<tr class="odd"> -<td>statistic-sampling-enabled</td> -<td>Controls whether the process creates a statistic archive file.</td> -<td>true</td> -</tr> -<tr class="even"> -<td>statistic-archive-file</td> -<td>Name and full path of the file where a running system member writes archives statistics. If <code class="ph codeph">archive-disk-space-limit</code> is not set, the native client appends the process ID to the configured file name, like <code class="ph codeph">statArchive-PID.gfs</code>. If the space limit is set, the process ID is not appended but each rolled file name is renamed to statArchive-ID.gfs, where ID is the rolled number of the file.</td> -<td>./statArchive.gfs</td> -</tr> -<tr class="odd"> -<td>archive-disk-space-limit</td> -<td>Maximum amount of disk space, in megabytes, allowed for all archive files, current, and rolled. If set to 0, the space is unlimited.</td> -<td>0</td> -</tr> -<tr class="even"> -<td>archive-file-size-limit</td> -<td>Maximum size, in bytes, of a single statistic archive file. Once this limit is exceeded, a new statistic archive file is created and the current archive file becomes inactive. If set to 0, the file size is unlimited.</td> -<td>0</td> -</tr> -<tr class="odd"> -<td>statistic-sample-rate</td> -<td>Rate, in seconds, that statistics are sampled. Operating system statistics are updated only when a sample is taken. If statistic archival is enabled, then these samples are written to the archive. -<p>Lowering the sample rate for statistics reduces system resource use while still providing some statistics for system tuning and failure analysis.</p> -<p>You can view archived statistics with the optional VSD utility.</p></td> -<td>1</td> -</tr> -<tr class="even"> -<td>enable-time-statistics</td> -<td>Enables time-based statistics for the distributed system and caching. For performance reasons, time-based statistics are disabled by default. See <a href="../system-statistics/chapter_overview.html#concept_3BE5237AF2D34371883453E6A9474A79">System Statistics</a>. </td> -<td>false</td> -</tr> -</tbody> -</table> - - -### <a id="attributes-gfcpp__table_BA6DAF27947B4A9488787E6BDCFC15B9" class="no-quick-link"></a>Table 4. Attributes in gfcpp.propertiesâDurable Client Properties - -| gfcpp.properties Attribute | Description | Default | -|----------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|---------| -| auto-ready-for-events | Whether client subscriptions automatically receive events when declaratively configured via XML. If set to `false`, event startup is not automatic and you need to call the `Cache.ReadyForEvents()` method API after subscriptions for the server to start delivering events. | true | -| durable-client-id | Identifier to specify if you want the client to be durable. | empty | -| durable-timeout | Time, in seconds, a durable client's subscription is maintained when it is not connected to the server before being dropped. | 300 | - - -### <a id="attributes-gfcpp__table_B3A8E9EB44A94557A97BB700E2BA1EF1" class="no-quick-link"></a>Table 5. Attributes in gfcpp.propertiesâSecurity Properties - -| gfcpp.properties Attribute | Description | Default | -|------------------------------|----------------------------------------------------------------------|---------| -| security-client-dhalgo | Diffie-Hellman secret key algorithm. | null | -| security-client-kspath | keystore (.pem file ) path. | null | -| security-client-auth-factory | Factory method for the security `AuthInitialize` module. | empty | -| security-client-auth-library | Path to the client security library for the `AuthInitialize` module. | empty | -| ssl-keystore-password | Keystore password. | null | - - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/setting-properties/cache-server-config.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/setting-properties/cache-server-config.html.md.erb b/geode-docs/nativeclient/setting-properties/cache-server-config.html.md.erb deleted file mode 100644 index de5de3b..0000000 --- a/geode-docs/nativeclient/setting-properties/cache-server-config.html.md.erb +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: Cache Server Configuration ---- - -You configure the cache server in two files: `gemfire.properties` for server system-level configuration and `cache.xml` for cache-level configuration. - -The configuration of the caches is part of the application development process. See [Cache Initialization File](../cache-init-file/chapter-overview.html#chapter-overview). (The cache-level configuration file is generally referred to as `cache.xml`, but you can use any name.) - -## <a id="cache-server-config__section_FED30097F6C246DE843EBD8B5292D86C" class="no-quick-link"></a>Configuration File Locations - -For the GemFire cache server, the `gemfire.properties` file is usually stored in the current working directory. For more information, see the *User's Guide*. - -For the `cache.xml` cache configuration file, a native client looks for the path specified by the `cache-xml-file` attribute in `gfcpp.properties` (see [Attributes in gfcpp.properties](attributes-gfcpp.html#attributes-gfcpp)). If the `cache.xml` is not found, the process starts with an unconfigured cache. - -## <a id="cache-server-config__section_F47DE4D858B04244956B91360AD8967E" class="no-quick-link"></a>Modifying Attributes Outside the gemfire.properties File - -In addition to the `gemfire.properties file`, you can pass attributes to the cache server on the gfsh command line. These override any settings found in the `gemfire.properties` file when starting the cache server. - -For more information, see *Configuring a Cluster* in the *User's Guide*. http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/setting-properties/chapter-overview.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/setting-properties/chapter-overview.html.md.erb b/geode-docs/nativeclient/setting-properties/chapter-overview.html.md.erb deleted file mode 100644 index 899989d..0000000 --- a/geode-docs/nativeclient/setting-properties/chapter-overview.html.md.erb +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: Setting System Properties ---- - -*Setting System Properties* describes how to configure Apache Geode native clients and cache servers to participate in a distributed system. - -- **[Configuring the Native Client and Cache Server](../../nativeclient/setting-properties/config-overview.html)** - - You can configure clients through files and API calls. The servers are configured through command-line input and configuration files. - -- **[Attributes in gfcpp.properties](../../nativeclient/setting-properties/attributes-gfcpp.html)** - - A variety of `gfcpp.properties` settings can be used when a native client connects to a distributed system. - -- **[gfcpp.properties Example File](../../nativeclient/gfcpp.properties/chapter_overview.html)** - - Use the gfcpp.properties file to configure distributed system connections for the Apache Geode native client. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/setting-properties/config-overview.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/setting-properties/config-overview.html.md.erb b/geode-docs/nativeclient/setting-properties/config-overview.html.md.erb deleted file mode 100644 index 212d9d8..0000000 --- a/geode-docs/nativeclient/setting-properties/config-overview.html.md.erb +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: Configuring the Native Client and Cache Server ---- - -You can configure clients through files and API calls. The servers are configured through command-line input and configuration files. - -- **[Native Client Configuration](../../nativeclient/setting-properties/native-client-config.html)** - - You configure the native client in two files: `gfcpp.properties` for native client system-level configuration and `cache.xml` for cache-level configuration. - -- **[Cache Server Configuration](../../nativeclient/setting-properties/cache-server-config.html)** - - You configure the cache server in two files: `gemfire.properties` for server system-level configuration and `cache.xml` for cache-level configuration. - -- **[Attribute Definition Priority](../../nativeclient/setting-properties/attribute-def-priority.html)** - - You can specify attributes in different ways, which can cause conflicting definitions. Applications can be configured programmatically, and that has priority over other settings. - -- **[Search Path for Multiple gfcpp.properties Files](../../nativeclient/gfcpp.properties/gfcpp.properties_search_path.html)** - - The native client and cache server processes first look for their properties file in the `productDir/defaultSystem` directory, then in the working directory. - -- **[Overriding gfcpp.properties Settings](../../nativeclient/gfcpp.properties/overriding_gfcpp.properties.html)** - - Application developers have the option of configuring system attributes programmatically, rather than using the `gfcpp.properties` file. - -- **[Defining Properties Programmatically](../../nativeclient/setting-properties/define-programmatically.html)** - - You can pass in specific gfcpp properties programmatically by using a `Properties` object to define the non-default properties. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/setting-properties/define-programmatically.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/setting-properties/define-programmatically.html.md.erb b/geode-docs/nativeclient/setting-properties/define-programmatically.html.md.erb deleted file mode 100644 index 94141d6..0000000 --- a/geode-docs/nativeclient/setting-properties/define-programmatically.html.md.erb +++ /dev/null @@ -1,18 +0,0 @@ ---- -title: Defining Properties Programmatically ---- - -You can pass in specific gfcpp properties programmatically by using a `Properties` object to define the non-default properties. - -Example: - -``` pre -PropertiesPtr systemProps = Properties::create(); -systemProps->insert( "statistic-archive-file", "stats.gfs" ); -systemProps->insert( "cache-xml-file", "./myapp-cache.xml" ); -systemProps->insert( "stacktrace-enabled", "true" ); -CacheFactoryPtr systemPtr = CacheFactory::createCacheFactory(systemProps); - -``` - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/setting-properties/native-client-config.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/setting-properties/native-client-config.html.md.erb b/geode-docs/nativeclient/setting-properties/native-client-config.html.md.erb deleted file mode 100644 index 3c272a2..0000000 --- a/geode-docs/nativeclient/setting-properties/native-client-config.html.md.erb +++ /dev/null @@ -1,33 +0,0 @@ ---- -title: Native Client Configuration ---- - -You configure the native client in two files: `gfcpp.properties` for native client system-level configuration and `cache.xml` for cache-level configuration. - -The configuration of the caches is part of the application development process. See [Cache Initialization File](../cache-init-file/chapter-overview.html#chapter-overview). (The cache-level configuration file is generally referred to as `cache.xml`, but you can use any name.) - -## <a id="native-client-config__section_67D24B8F8C6C46CDA3474E6E42963D04" class="no-quick-link"></a>About gfcpp.properties Configuration File - -The `gfcpp.properties` file provides local settings required to connect a client to a distributed system, along with settings for licensing, logging, and statistics. See [Attributes in gfcpp.properties](attributes-gfcpp.html#attributes-gfcpp). - -The application software may include a set of `gfcpp.properties` files. You set any attributes needed for the application design in these files, then you can add any attributes needed for the local site. - -If you do not have `gfcpp.properties` files, use any text editor to create them. See [gfcpp.properties Example File](../gfcpp.properties/chapter_overview.html#concept_41DADD6F4E41495A89CCBB8A790ED9DF) for a sample of the file format and contents. - -## <a id="native-client-config__section_88780874FD6C4BBD9B1B993758A985BB" class="no-quick-link"></a>Configuration File Locations - -A native client looks for `gfcpp.properties` first in the working directory where the process runs, then in `productDir/defaultSystem`. Use the `defaultSystem` directory to group configuration files or to share them among processes for more convenient administration. If `gfcpp.properties` is not found, the process starts up with the default settings. - -For the `cache.xml` cache configuration file, a native client looks for the path specified by the `cache-xml-file` attribute in `gfcpp.properties` (see [Attributes in gfcpp.properties](attributes-gfcpp.html#attributes-gfcpp)). If the `cache.xml` is not found, the process starts with an unconfigured cache. - -## <a id="native-client-config__section_6EBE269F15A1497BB4ABBF659F978DA1" class="no-quick-link"></a>Configuring System Properties for the Native Client - -The typical configuration procedure for a native client includes the high-level steps listed below. The rest of this chapter provides the details. - -1. Place the `gfcpp.properties` file for the application in the working directory or in `productDir/defaultSystem`. Use the configuration file that came with the application software if there is one, or create your own. See [gfcpp.properties Example File](../gfcpp.properties/chapter_overview.html#concept_41DADD6F4E41495A89CCBB8A790ED9DF) for a sample of the file format and contents. -2. Place the `cache.xml` file for the application in the desired location and specify its path in the `gfcpp.properties` file. -3. Add other attributes to the `gfcpp.properties` file as needed for the local system architecture. See [Attributes in gfcpp.properties](attributes-gfcpp.html#attributes-gfcpp) for the configurable attributes, and [gfcpp.properties Example File](../gfcpp.properties/chapter_overview.html#concept_41DADD6F4E41495A89CCBB8A790ED9DF) for a sample of the file format. - -## <a id="native-client-config__section_7F09E85DD0144972AAA7028D81780129" class="no-quick-link"></a>Running a Native Client Out of the Box - -If you start a native client without any configurations, it uses any attributes set programmatically plus any hard-coded defaults (listed in [Attributes in gfcpp.properties](attributes-gfcpp.html#attributes-gfcpp)). Running with the defaults is a convenient way to learn the operation of the distributed system and to test which attributes need to be reconfigured for your environment. http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/sqlite-persistence/chapter_overview.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/sqlite-persistence/chapter_overview.html.md.erb b/geode-docs/nativeclient/sqlite-persistence/chapter_overview.html.md.erb deleted file mode 100644 index ed01b0f..0000000 --- a/geode-docs/nativeclient/sqlite-persistence/chapter_overview.html.md.erb +++ /dev/null @@ -1,21 +0,0 @@ ---- -title: Installing the SQLite Persistence Manager ---- - -This section describes how to download, build and install the SQLite database libraries for use with disk overflow. - -See [PersistenceManager](../client-cache/persistence-manager.html#persistence-manager) for additional information about the SQLite database libraries. - -- **[Linux Installation](../../nativeclient/sqlite-persistence/linux_install.html)** - - This topic describes how to install the SQLite Persistence Manager on Linux for use with the Geode native client. - -- **[Solaris Installation](../../nativeclient/sqlite-persistence/solaris_install.html)** - - This topic describes how to install the SQLite Persistence Manager on Solaris for use with the Geode native client. - -- **[Windows Installation](../../nativeclient/sqlite-persistence/windows_install.html)** - - This topic describes how to install the SQLite Persistence Manager on Windows for use with the Geode native client. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/sqlite-persistence/linux_install.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/sqlite-persistence/linux_install.html.md.erb b/geode-docs/nativeclient/sqlite-persistence/linux_install.html.md.erb deleted file mode 100644 index b75b6e4..0000000 --- a/geode-docs/nativeclient/sqlite-persistence/linux_install.html.md.erb +++ /dev/null @@ -1,42 +0,0 @@ ---- -title: Linux Installation ---- - -This topic describes how to install the SQLite Persistence Manager on Linux for use with the Geode native client. - -The *`productDir`* directory refers to the path to the native client product directory. - -The following libraries must be present in the runtime linking path: - -- `libSqLiteImpl.so` is provided in <code><i>productDir</i>/lib</code>, so it is already present in the runtime linking path. -- `libsqlite3.so` is the SQLite Library. You need to create this library and make available in the runtime linking path, or copied to <code><i>productDir</i>/lib</code>, as described below. - -The Geode Native Client has been tested with SQLite v3.7.14.1. - -## <a id="concept_CC9BD47B46DE4281BBB789FABE6ABEA9__section_FAB703D706D54311963399A714D466F9" class="no-quick-link"></a>Downloading, Building and Installing the Library - -You create the SQLite database library by downloading the latest .zip file and compiling the source code. - -1. Download the source code `sqlite-autoconf-NNNNNNN.tar.gz` file (where *NNNNNNN* corresponds to the version) for SQLite v3.7.14.1 or later from [http://www.sqlite.org/download.html](http://www.sqlite.org/download.html). -2. Extract the source code from the .tar.gz file. For example: - - ``` pre - tar -xvf sqlite-autoconf-3071401.tar.gz - ``` - -3. Change directories to the extracted source files, and follow the install instructions located in the "INSTALL" file. - 1. Run the `configure` command for 32-bit or 64-bit with the following options, all entered on a single command line. Change the` --prefix` directory specification to the location where you want the libraries: - - **32-bit:** - - ``` pre - CFLAGS="-m32" ./configure --prefix=/desired_binary_location/sqlite-binaries - ``` - - **64-bit:** - - ``` pre - ./configure --prefix=/desired_binary_location/sqlite-binaries - ``` - - 2. Run `gmake install` as described in the build instructions. The libraries will be available in the `sqlite-binaries` directory that you specified. - -4. Copy `/desired_binary_location/sqlite-binaries/lib/libsqlite3.so` file to <code><i>productDir</i>/lib</code>. http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/sqlite-persistence/solaris_install.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/sqlite-persistence/solaris_install.html.md.erb b/geode-docs/nativeclient/sqlite-persistence/solaris_install.html.md.erb deleted file mode 100644 index 5c90278..0000000 --- a/geode-docs/nativeclient/sqlite-persistence/solaris_install.html.md.erb +++ /dev/null @@ -1,54 +0,0 @@ ---- -title: Solaris Installation ---- - -This topic describes how to install the SQLite Persistence Manager on Solaris for use with the Geode native client. - -The *`productDir`* directory refers to the path to the native client product directory. - -The following libraries must be present in the runtime linking path: - -- `libSqLiteImpl.so` is provided in <code><i>productDir</i>/lib</code>, so it is already present in the runtime linking path. -- `libsqlite3.so` is the SQLite Library. You need to create this library and make available in the runtime linking path, or copied to <code><i>productDir</i>/lib</code>, as described below. - -The Geode Native Client has been tested with SQLite v3.7.14.1. - -## <a id="concept_613BCAD15D9C4B3C94BBA3C1A26B6166__section_FAB703D706D54311963399A714D466F9" class="no-quick-link"></a>Downloading, Building, and Installing the Library - -You create the SQLite database library by downloading the latest .zip file and compiling the source code. - -1. Download the source code `sqlite-autoconf-NNNNNNN.tar.gz` file (where *NNNNNNN* corresponds to the version) for SQLite v3.7.14.1 or later from [http://www.sqlite.org/download.html](http://www.sqlite.org/download.html). -2. Update your PATH environment variable to include the location of the Solaris `ar` command. - - ``` pre - export PATH=/usr/css/bin:$PATH - ``` - -3. Extract the source code from the .tar.gz file. First unzip: - - ``` pre - gzip -d sqlite-autoconf-3071401.tar.gz - ``` - - Then untar the file: - - ``` pre - tar -xvf sqlite-autoconf-3071401.tar - ``` - -4. Change directories to the extracted source files, and follow the install instructions located in the "INSTALL" file. - 1. Run the `configure` command for 32-bit or 64-bit Solaris systems with the following options, all entered on a single command line. Change the` --prefix` directory specification to the location where you want the libraries: - - **32-bit:** - - ``` pre - CC=cc CFLAGS="-xarch=v8plus -code=pic32" ./configure --prefix=/desired_binary_location/sqlite-binaries - ``` - - **64-bit:** - - ``` pre - CC=cc CFLAGS="-xarch=v9 -code=pic32" ./configure --prefix=/desired_binary_location/sqlite-binaries CFLAGS="-m64" - ``` - - 2. Run `gmake install`. The libraries will be available in the `sqlite-binaries` directory that you specified. - -5. Copy `/desired_binary_location/sqlite-binaries/lib/libsqlite3.so` file to <code><i>productDir</i>/lib</code>. http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/sqlite-persistence/windows_install.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/sqlite-persistence/windows_install.html.md.erb b/geode-docs/nativeclient/sqlite-persistence/windows_install.html.md.erb deleted file mode 100644 index d753366..0000000 --- a/geode-docs/nativeclient/sqlite-persistence/windows_install.html.md.erb +++ /dev/null @@ -1,37 +0,0 @@ ---- -title: Windows Installation ---- - -This topic describes how to install the SQLite Persistence Manager on Windows for use with the Geode native client. - -The Geode Native Client has been tested with SQLite v3.7.14.1. - -The <code><i>productDir</i></code> directory refers to the native client product directory path. - -The following libraries are required. The <code><i>productDir</i>/bin</code> directory containing these libraries must be present in the Windows `PATH` environment variable, and that directory is added to `PATH` during the Geode product installation. - -- The `sqliteimpl.dll` and `GemStone.GemFire.Plugins.SQLite.dll` files are provided in <code><i>productDir</i>/bin</code>. -- For .NET C\# native client application development, you need to obtain the `System.Data.SQLite.dll` SQLite library, as described below. The library can be copied to <code><i>productDir</i>/bin</code>. -- For C++ native client application development, you need the `SqLite3.dll` SQLite Library. You create this library and make it available in the runtime linking path, or copied to <code><i>productDir</i>/bin</code>, as described below. - -## <a id="concept_E097592856274EFABE81426FF7312294__section_270FDD34D5D1460DAF0FD2DD4E8FB31A" class="no-quick-link"></a>Downloading Pre-built System.Data.SQLite.dll Binaries - -If you are writing native client applications using the .NET caching API, obtain the SQLite library (version 3.12.2 or later) for Windows as follows: - -1. Access the System.Data.SQLite Download Page at the following URL: [http://system.data.sqlite.org/index.html/doc/trunk/www/downloads.wiki](http://system.data.sqlite.org/index.html/doc/trunk/www/downloads.wiki). -2. Download the appropriate setup file for your .NET Framework installation and hardware architecture. - - For 64-bit Windows, under **Precompiled Binaries for 64-bit Windows (.NET Framework 4.5.1)** download `sqlite-netFx451-binary-bundle-x64-2013-1.0.101.0.zip`. - -3. Execute the setup .exe file, and follow the prompts in the installation wizard. Accept all default installation options. -4. Copy the `C:\Program Files\System.Data.SQLite\2010\bin\System.Data.SQLite.dll` file to your Geode Native Client distribution at `productDir\bin`. - -## <a id="concept_E097592856274EFABE81426FF7312294__section_FAB703D706D54311963399A714D466F9" class="no-quick-link"></a>Downloading, Building, and Installing the Library - -If you are writing native client applications using the C++ caching API, you need to build the SQLite solution for your Windows platform architecture. - -1. Download the source code `sqlite-autoconf-NNNNNNN.tar.gz` file (where *NNNNNNN* corresponds to the version) for SQLite version 3.12.2 or later from [http://www.sqlite.org/download.html](http://www.sqlite.org/download.html). -2. Extract the source code from the .tar.gz file. You may need to use CygWin or a Windows-compatible tar extraction tool. -3. Using Visual Studio, build the version-specific SqLite solution either as a release or debug build: - - If you are using 64-bit Windows, use the x64 configuration. - -4. From the built files, copy the `SqLite3.dll` file to your Geode Native Client distribution at <code><i>productDir</i>/bin</code>. http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/system-statistics/cache_performance_statistics.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/system-statistics/cache_performance_statistics.html.md.erb b/geode-docs/nativeclient/system-statistics/cache_performance_statistics.html.md.erb deleted file mode 100644 index 0edcb18..0000000 --- a/geode-docs/nativeclient/system-statistics/cache_performance_statistics.html.md.erb +++ /dev/null @@ -1,30 +0,0 @@ ---- -title: Cache Performance Statistics ---- - -Use cache performance statistics to determine the type and number of cache operations being performed and how much time they consume. - -These statistics are available if the member creates a cache. - -| | | -|----------------------------------|----------------------------------------------------------------------------------------------| -| `creates` | Total number of cache creates. | -| `puts` | Total number of cache puts. | -| `gets` | Total number of cache gets. | -| `entries` | Current number of cache entries. | -| `hits` | Total number of cache hits. | -| `misses` | Total number of cache misses. | -| `destroys` | Total number of cache destroys. | -| `overflows` | Total number of cache overflows to persistence backup. | -| `cacheListenerCallsCompleted` | Total number of times a cache listener call has completed. | -| `pdxInstanceDeserializations` | Total number of times getObject has been called on a PdxInstance. | -| `pdxInstanceDeserializationTime` | Total amount of time, in nanoseconds, spent deserializing PdxInstances by calling getObject. | -| `pdxInstanceCreations` | Total number of times a deserialization created a PdxInstance. | -| `pdxSerializations` | Total number of PDX serializations. | -| `pdxSerializedBytes` | Total number of bytes produced by PDX serialization. | -| `pdxDeserializations` | Total number of PDX deserializations. | -| `pdxDeserializedBytes` | Total number of bytes read by PDX deserialization. | -| `tombstoneCount` | Total number of tombstone entries created for performing concurrency checks. | -| `nonReplicatedTombstoneSize` | Approximate total size (in bytes) of tombstones present in the client cache. | - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/system-statistics/chapter_overview.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/system-statistics/chapter_overview.html.md.erb b/geode-docs/nativeclient/system-statistics/chapter_overview.html.md.erb deleted file mode 100644 index 56f47db..0000000 --- a/geode-docs/nativeclient/system-statistics/chapter_overview.html.md.erb +++ /dev/null @@ -1,21 +0,0 @@ ---- -title: System Statistics ---- - -*System Statistics* provides information on the installation and includes standard statistics for caching and distribution activities. - -Statistics that end with "time" are time-based statistics. For performance reasons, by default, the system does not collect these. To enable time-based statistics gathering, set the system property` enable-time-statistics` in [Attributes in gfcpp.propertiesâStatistics Archiving Properties](../setting-properties/attributes-gfcpp.html#attributes-gfcpp__table_E1A0EDBA67CD41319E1E5FD0A0BB2723). - -- **[Sampling Statistics](../../nativeclient/system-statistics/sampling_statistics.html)** - - When applications and cache servers join a distributed system, they indicate whether to enable statistics sampling and whether to archive the statistics that are gathered. - -- **[System Performance Statistics](../../nativeclient/system-statistics/system_performance_statistics.html)** - - Performance statistics are collected for each application or cache server that connects to a distributed system. - -- **[Operating System Statistics](../../nativeclient/system-statistics/operating_system_statistics.html)** - - Use operating system statistics to determine a memberâs CPU, memory, and disk usage. - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/system-statistics/continuous_query_statistics.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/system-statistics/continuous_query_statistics.html.md.erb b/geode-docs/nativeclient/system-statistics/continuous_query_statistics.html.md.erb deleted file mode 100644 index 7e463e0..0000000 --- a/geode-docs/nativeclient/system-statistics/continuous_query_statistics.html.md.erb +++ /dev/null @@ -1,14 +0,0 @@ ---- -title: Continuous Query Statistics ---- - -Continuous query statistics give you information about a registered Continuous Query (CQ) represented by the CqQuery object. - -| | | -|------------|--------------------------------------------| -| `inserts` | Total number of inserts for this CQ query. | -| `updates ` | Total number of updates for this CQ query. | -| `deletes` | Total number of deletes for this CQ query. | -| `events` | Total number of events for this CQ query. | - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/system-statistics/cq_service_statistics.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/system-statistics/cq_service_statistics.html.md.erb b/geode-docs/nativeclient/system-statistics/cq_service_statistics.html.md.erb deleted file mode 100644 index 24db7b1..0000000 --- a/geode-docs/nativeclient/system-statistics/cq_service_statistics.html.md.erb +++ /dev/null @@ -1,15 +0,0 @@ ---- -title: CQ Service Statistics ---- - -Use CQ service methods to get aggregate statistical information about the continuous queries of a client. - -| | | -|----------------|--------------------------------------------------------| -| `CqsActive` | Total number of CQs active for this CQ service. | -| `CqsCreated ` | Total number of CQs created for this CQ service. | -| `CqsClosed ` | Total number of CQs closed for this CQ service. | -| `CqsStopped` | Total number of CQs stopped for this CQ service. | -| `CqsOnClient ` | Total number of CQs on the client for this CQ service. | - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/system-statistics/delta_statistics.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/system-statistics/delta_statistics.html.md.erb b/geode-docs/nativeclient/system-statistics/delta_statistics.html.md.erb deleted file mode 100644 index b9b6b32..0000000 --- a/geode-docs/nativeclient/system-statistics/delta_statistics.html.md.erb +++ /dev/null @@ -1,14 +0,0 @@ ---- -title: Delta Statistics ---- - -Delta statistics provide information about updates to data. - -| | | -|------------------------------|--------------------------------------------------------------------------------------------------------------| -| `deltaMessageFailures` | Total number of messages containing delta (received from server) but could not be processed after reception. | -| `deltaPuts` | Total number of puts containing delta that have been sent from client to server. | -| `processedDeltaMessages` | Total number of messages containing delta received from server and processed after reception. | -| `processedDeltaMessagesTime` | Total time spent applying delta (received from server) on existing values at client. | - - http://git-wip-us.apache.org/repos/asf/geode/blob/de0559be/geode-docs/nativeclient/system-statistics/linux_os_statistics.html.md.erb ---------------------------------------------------------------------- diff --git a/geode-docs/nativeclient/system-statistics/linux_os_statistics.html.md.erb b/geode-docs/nativeclient/system-statistics/linux_os_statistics.html.md.erb deleted file mode 100644 index ab4d2b3..0000000 --- a/geode-docs/nativeclient/system-statistics/linux_os_statistics.html.md.erb +++ /dev/null @@ -1,17 +0,0 @@ ---- -title: Linux Process Statistics ---- - -Use these methods to get information about a Linux operating system process that is using a Geode system. - -| | | -|---------------------|--------------------------------------------------------------------------| -| `imageSize` | The size of the process's image in megabytes. | -| `rssSize` | The size of the process's resident set size in megabytes. | -| `userTime` | The operating system statistic for the process CPU usage in user time | -| `systemTime` | The operating system statistic for the process CPU usage in system time. | -| `hostCpuUsage` | The operating system statistic for the host CPU usage. | -| `threads` | Number of threads currently active in this process. | -| `LinuxProcessStats` | Statistics for a Linux process. | - -
