-
Hello all
After getting Josso working I am looking on a high availability setup for out environment...
There are a couple of things I have questions about:
- Can I share the authenticated sessions between 2 servers? How?
- Can I put 2 gateway servers in the agent configurations? How? I am especially interested in the Apache agent. Or do I need to set things up active/passive with...
2009-11-27 14:27:36 UTC by fnollet
-
Looks like the user is able to authenticate successfully using NTLM, but then when the user authentication information is sent back to the agent - for establishing the corresponding security context - for some reason this fails.
I would look into the agent tier not the gateway one which seems to be authenticating the user fine. Also, increase the logging level for the org.josso to debug so...
2009-11-26 00:15:16 UTC by gbrigand
-
Thanks Gianluca;
I added this to the login-config.xml as you suggested previously :
true
The exception...
2009-11-25 23:45:05 UTC by jolmstead2k
-
no, this is correct since the missing uri part is added automatically to the target url. This only needs to be changed if your gateway is located in a different host and/or port.
In order to check that services are up and running I'd suggest you try hitting the url mentioned in my previous post.
Upon installing the agent and gateway components using the console JOSSO should work out of...
2009-11-25 22:59:44 UTC by gbrigand
-
So is this section in the agent setup doc in error?
Should'nt there be a...
2009-11-25 19:00:01 UTC by jolmstead2k
-
Yes, by default the agent will look into http://localhost:8080/josso/services . If you attempt hitting this url from a browser you should see the list of JOSSO's web services in case they are correctly deployed.
2009-11-25 18:46:05 UTC by gbrigand
-
Thanks Gianluca;
Am I supposed to configure the web service call here?
.
2009-11-25 17:49:21 UTC by jolmstead2k
-
Hi John,
Gateway is running fine, although the Agent is not able to connect to the web services exposed by the Gateway. You need to point the agent to the correct gateway instance . Therefore, make sure to update the endpoint attribute of the service locator. For more information please see : http://www.josso.org/confluence/display/JOSSO1/Setup+JOSSO+Agent+(SP)
Regards,
Gianluca.
2009-11-25 17:15:05 UTC by gbrigand
-
Thanks Again Gianluca.;
I have moved to JBoss 4.2.1 GA since this is the AS that the Portal Server runs on. I have rerun the agent and gateway scripts and provided the updates according to the windows authentication script.
When I naviste to the parnerapp context, I still see this in the browser :
java.lang.RuntimeException: Outbound relaying failed. No Principal found. Verify your SSO...
2009-11-25 16:46:51 UTC by jolmstead2k
-
Hi John,
Josso supports chaining authentication schemes, therefore it falls back to the second - usually weaker - authentication mechanism in the chain if the first fails.
Therefore, avoid removing the josso-basic-authentication bean definition so that bean referential integrity is not broken, and reference the ntlm one from the authenticator's schemes :
2009-11-25 15:33:43 UTC by gbrigand
