0 Replies Latest reply on Jul 15, 2015 10:26 AM by richard.groote

    Web SSO on two instance

    richard.groote

      Hello,

       

      We're trying to setting up our environment with Web SSO on Jboss EAP 6. I've read the forum about enabling Web SSO and read the Security Guide of Redhat but  it's not working.

      Does anyone has a idea what we're doing wrong?

       

      Kind regards,

      Richard

       

       

      The following questions:

      • Do we need to configure a Valve.
        • Yes, in the documentation there is clustered valve mentioned and in the forum a valve is mentioned. When enabled both result in Class not found
        • No, according to the forum it's not necessary
      • With the below configuration, the application server will not start. The application server prints in the log missing dependents on jgroups / stack (sorry do not have the log any more)
        • Resolve this by adding subsystem group but i think the application are now running i a cluster and that is not what we want.

       

       

      The following installation:

      - two jboss 6.3 installation

      - both with the same web application (in the future this will be two different web application pointing to the same LDAP)

      - both with the same jboss-web.xml

      - both with the same web.xml

      - both with the same standalone.xml except the port offset

      - No valve define in the jboss-web.xml

       

      --------------- STAND ALONE. XML part -------

      <subsystem xmlns="urn:jboss:domain:infinispan:1.5">

                  <cache-container name="web" aliases="standard-session-cache" default-cache="sso" module="org.jboss.as.clustering.web.infinispan">

                      <transport lock-timeout="60000"/>

                      <local-cache name="local-web" batching="true">

                          <file-store passivation="false" purge="false"/>

                      </local-cache>

                      <replicated-cache name="sso" mode="SYNC" batching="true"/>

                      <replicated-cache name="repl" mode="ASYNC" batching="true"/>

                  </cache-container>

                  <cache-container name="hibernate" default-cache="local-query" module="org.jboss.as.jpa.hibernate:4">

                      <local-cache name="entity">

                          <transaction mode="NON_XA"/>

                          <eviction strategy="LRU" max-entries="10000"/>

                          <expiration max-idle="100000"/>

                      </local-cache>

                      <local-cache name="local-query">

                          <transaction mode="NONE"/>

                          <eviction strategy="LRU" max-entries="10000"/>

                          <expiration max-idle="100000"/>

                      </local-cache>

                      <local-cache name="timestamps">

                          <transaction mode="NONE"/>

                          <eviction strategy="NONE"/>

                      </local-cache>

                  </cache-container>

              </subsystem>

      ..........

       

      <subsystem xmlns="urn:jboss:domain:web:2.1" default-virtual-server="default-host" native="false">

                  <connector name="http" protocol="HTTP/1.1" scheme="http" socket-binding="http"/>

                  <virtual-server name="default-host" enable-welcome-root="true">

                      <alias name="localhost"/>

                      <alias name="example.com"/>

                      <sso cache-container="web" cache-name="sso" domain="localhost" reauthenticate="false"/>

                  </virtual-server>

              </subsystem>