Return-Path: 
 <users-return-231846-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
X-Original-To: apmail-tomcat-users-archive@www.apache.org
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 5432C9549
	for <apmail-tomcat-users-archive@www.apache.org>;
 Mon,  6 Feb 2012 18:30:10 +0000 (UTC)
Received: (qmail 41147 invoked by uid 500); 6 Feb 2012 18:30:06 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 40917 invoked by uid 500); 6 Feb 2012 18:30:05 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 40908 invoked by uid 99); 6 Feb 2012 18:30:05 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 06 Feb 2012 18:30:05 +0000
X-ASF-Spam-Status: No, hits=0.7 required=5.0
	tests=RCVD_IN_DNSWL_NONE,SPF_NEUTRAL
X-Spam-Check-By: apache.org
Received-SPF: neutral (athena.apache.org: local policy)
Received: from [76.96.62.96] (HELO qmta09.westchester.pa.mail.comcast.net)
 (76.96.62.96)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 06 Feb 2012 18:29:59 +0000
Received: from omta18.westchester.pa.mail.comcast.net ([76.96.62.90])
	by qmta09.westchester.pa.mail.comcast.net with comcast
	id WfWA1i0061wpRvQ59iVfWR; Mon, 06 Feb 2012 18:29:39 +0000
Received: from Christophers-MacBook-Pro.local ([69.143.109.145])
	by omta18.westchester.pa.mail.comcast.net with comcast
	id WiVe1i02J38FjT13eiVfEa; Mon, 06 Feb 2012 18:29:39 +0000
Message-ID: <4F301C14.3010407@christopherschultz.net>
Date: Mon, 06 Feb 2012 13:29:40 -0500
From: Christopher Schultz <chris@christopherschultz.net>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7;
 rv:10.0) Gecko/20120129 Thunderbird/10.0
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Clustering and https configuration
References: 
 <32345_1328032338_4F282A52_32345_11430_1_2f2b98fe305ba50d1113797344d9d43e.squirrel@mail.objectway.it>
    <32345_1328033916_4F28307B_32345_11517_1_1328033877.2868.6.camel@cleveland.mikusa.com>
 <4276_1328533842_4F2FD152_4276_9247_1_666cfdf90bee19fc588078086369c728.squirrel@mail.objectway.it>
In-Reply-To: 
 <4276_1328533842_4F2FD152_4276_9247_1_666cfdf90bee19fc588078086369c728.squirrel@mail.objectway.it>
X-Enigmail-Version: 1.3.5
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Riccardo,

On 2/6/12 8:10 AM, Riccardo Venittelli wrote:
> Now my test web app work fine but i'm unable to find a
> configuration for SingleSignOn in cluster.

Are you trying to set up a Cluster to communicate over SSL? I don't
believe <Cluster> supports that. I have two recommendations (having
never done anything like this):

* stunnel (requires that you know in advance which ports will be used)

That's probably either non-ideal or not actually possible due to the
multicast nature of the <Cluster> capabilities.

* Use a secure VPN with multicast enabled on that interface

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8wHBQACgkQ9CaO5/Lv0PBhigCgiegd0D7r8dLapzbK5/ZqOooA
Ti8AnR4lAkhjuWXLRBIDXqgUV0ocsWca
=jVBu
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org