IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Creating a DSC replica set

    Posted 01/02/21 07:40 AM
    I can see in my cluster that there is 1 replica set named default.
    I cannot see anywhere a way to create another replica set. How is it done?

    If I have multiple reverse proxies, should the share the same replica set? or should each reverse proxy use a different replica set?

    ------------------------------
    Joao Goncalves
    Pyxis, Lda.
    Sintra
    +351 91 721 4994
    ------------------------------


  • 2.  RE: Creating a DSC replica set

    Posted 01/03/21 10:36 PM
    HI

    in case, reverse proxies are sharing user sessions then they should be in same replica set

    you can't create replica set explicitly

    replica sets are created based on how they are defined in Reverse proxy configuration:

    for example: when reverse proxy conf has this

    standard-junction-replica-set = repl1
    and replica set definition under

    [replica-sets]
    replica-set = repl1

    you should see a repl1 as a replica set created  when reverse proxies restarts.

    all other webseal instance will have same configuration so that they use same replica set

    ------------------------------
    Tushar
    Tushar
    ------------------------------



  • 3.  RE: Creating a DSC replica set

    Posted 01/04/21 02:43 AM
    Hi Joao,

    As Tushar already answered, replica-sets are configured in the WebSEAL conf file. Once a replica-set has bee confgured in a WebSEAL conf file it will also appear in the DSC menu.

    You can share the same replica-set across different reverse proxies, but they have to be in the same domain, else there is no way to share the session cookie.

    ------------------------------
    Laurent LA Asselborn
    ------------------------------