On Fri, Mar 25, 2011 at 5:00 PM, <christian.muel...@nvoe.at> wrote: > 4) I hope you are aware that you can cluster geoserver instances only for > not authenticated access. If you want to cluster with user authentication, > you need an authentication cluster concept, a single sign on for the > cluster. This requires a group communication system like jgroups and some > cryptographic techniques. At the moment I am investigating on this topic.
Agree on the other points, have a doubt on this one, afaik the above statement is not true in all cases. The majority of clients supports only basic authentication, that one does not need explicit clustering support as it's always included by the client in the http headers, in every request. I think digest works the same but I'm not sure. Since it's part of each request it's also clustering friendly, you just need a load balancer in front of the cluster, there is no session nor state to be shared among the nodes. Of course there is a host of other auth schemes that are cluster unfriendly, normally they also tend to be OGC client unfriendly (thinking desktop clients here). The hard part that cannot be avoided is having ssl on the cluster afaik, which can be solved by using high end load balancers that hide the ssl from the cluster (ssl happens only betwen the load balancer and the client). Cheers Andrea -- ------------------------------------------------------- Ing. Andrea Aime GeoSolutions S.A.S. Tech lead Via Poggio alle Viti 1187 55054 Massarosa (LU) Italy phone: +39 0584 962313 fax: +39 0584 962313 mob: +39 333 8128928 http://www.geo-solutions.it http://geo-solutions.blogspot.com/ http://www.youtube.com/user/GeoSolutionsIT http://www.linkedin.com/in/andreaaime http://twitter.com/geowolf ------------------------------------------------------- ------------------------------------------------------------------------------ Enable your software for Intel(R) Active Management Technology to meet the growing manageability and security demands of your customers. Businesses are taking advantage of Intel(R) vPro (TM) technology - will your software be a part of the solution? Download the Intel(R) Manageability Checker today! http://p.sf.net/sfu/intel-dev2devmar _______________________________________________ Geoserver-users mailing list Geoserver-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/geoserver-users
