Return-Path: X-Original-To: apmail-manifoldcf-user-archive@www.apache.org Delivered-To: apmail-manifoldcf-user-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 7DE871063C for ; Tue, 10 Feb 2015 11:25:27 +0000 (UTC) Received: (qmail 14866 invoked by uid 500); 10 Feb 2015 11:25:24 -0000 Delivered-To: apmail-manifoldcf-user-archive@manifoldcf.apache.org Received: (qmail 14816 invoked by uid 500); 10 Feb 2015 11:25:24 -0000 Mailing-List: contact user-help@manifoldcf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@manifoldcf.apache.org Delivered-To: mailing list user@manifoldcf.apache.org Received: (qmail 14805 invoked by uid 99); 10 Feb 2015 11:25:24 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 10 Feb 2015 11:25:24 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of daddywri@gmail.com designates 209.85.160.177 as permitted sender) Received: from [209.85.160.177] (HELO mail-yk0-f177.google.com) (209.85.160.177) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 10 Feb 2015 11:25:18 +0000 Received: by mail-yk0-f177.google.com with SMTP id 20so1710267yks.8 for ; Tue, 10 Feb 2015 03:24:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=Xo2lFqVwYoQyGCPxQj5ZyO/nbIyz5l1zmgHMe9aGT6s=; b=lV11db0/sBNwZPA8LJ3+P3HGx6b08eYt7KiD4yyBehFSkH5x+4SnVmfaqX8XlftoZM MvOkme6xUw1rKE38o/2wBzmJnM+OHhpHrrPkw/+/hU89L4yh9wAAEHBgiUdOnkR3XAaN LJRuaibfKAR5Q5gPA3cz27VqgZf020K26MKWMEyUW/sPJ21t5N+fkQyhfuInNx2v5qNf U3fAUvHmX45XM7m/CYZSDfY772ldi4yxSno9qmy8H51WlFnM8xkulGVr9y/s7coF3+3k rbG/AC6x2dIsKF6h/oeRBFWrtxs6m4fJv8RaVjldooVLMsBNrQBWIyb9fjT71cuLAj23 VHPg== MIME-Version: 1.0 X-Received: by 10.170.55.138 with SMTP id 132mr9501028ykx.29.1423567453116; Tue, 10 Feb 2015 03:24:13 -0800 (PST) Received: by 10.170.44.200 with HTTP; Tue, 10 Feb 2015 03:24:13 -0800 (PST) In-Reply-To: <1011050581.2474925.1423566792669.JavaMail.yahoo@mail.yahoo.com> References: <1011050581.2474925.1423566792669.JavaMail.yahoo@mail.yahoo.com> Date: Tue, 10 Feb 2015 06:24:13 -0500 Message-ID: Subject: Re: Redundancy of ManifoldCF AuthorityServiceBaseURL From: Karl Wright To: "user@manifoldcf.apache.org" , Kambiz Niktabar Content-Type: multipart/alternative; boundary=001a113a05d85b5e50050eba20b2 X-Virus-Checked: Checked by ClamAV on apache.org --001a113a05d85b5e50050eba20b2 Content-Type: text/plain; charset=UTF-8 Hi Kambiz, If you want redundancy for document authorization, you would want to specify the URL of a load balancer (not included), that would send requests on to multiple authority service instances. Karl On Tue, Feb 10, 2015 at 6:13 AM, Kambiz Niktabar wrote: > Hello, > > By looking at MCF Solr plugin and the configuration required in > solrconfig.xml file, it seems it's not possible to have more than > one AuthorityServiceBaseURL in solrconfig.xml to implement redundancy for > document level security. So in case the MCF is down expanding user tokens > can not be expanded. > Can you advise what kind of workaround can be used to handle this > situation? > > Regards > Kambiz Niktabar > > --001a113a05d85b5e50050eba20b2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Kambiz,

If you want redundancy for do= cument authorization, you would want to specify the URL of a load balancer = (not included), that would send requests on to multiple authority service i= nstances.

Karl


On Tue, Feb 10, 2015 at 6:13 AM, Kambiz Niktabar <nikta= bar@yahoo.com> wrote:
=
Hello,
=
By looking at MCF Solr plugin and the configurat= ion required in solrconfig.xml file, it seems it's not possible to have= more than one=C2=A0AuthorityServiceBaseURL in solrconfig.xml to implement = redundancy for document level security. So in case the MCF is down expandin= g user tokens can not be expanded.
Can you advise wha= t kind of workaround can be used to handle this situation?

Regards
Kambiz Niktabar
= =C2=A0

--001a113a05d85b5e50050eba20b2--