Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-08 Thread Marvin S. Addison
My (limited and possibly inaccurate) understanding of memcached, specifically the client implementation for CAS, is that a particular key is hashed, and based on the outcome of that, the client looks for it on a specific node. So I'm not sure what good a copy of the data on another node will do if

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-08 Thread Paul B. Henson
On 8/7/2013 12:18 PM, Aaron Bennett wrote: What we're planning for scheduled maintenance, is using memcached-tool to push a given server's cache to another server before shutting it down for maintenance... something as simple as this.. ./memcached-tool localhost dump | nc 11211 My (limited

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-08 Thread Paul B. Henson
On 8/7/2013 11:59 AM, Scott Battaglia wrote: You do realize you will have to configure and tune any solution :-) Well, yah :). Before comparing solutions, I would recommend defining your requirements and your tolerance for failure (if you have not). For example, Is it acceptable that if a no

RE: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-07 Thread Aaron Bennett
From: Scott Battaglia [mailto:scott.battag...@gmail.com] Sent: Wednesday, August 7, 2013 2:59 PM To: cas-user@lists.jasig.org Subject: Re: [cas-user] fault-tolerant/redundant/HA CAS deployment You do realize you will have to configure and tune any solution :-) Before comparing solutions, I

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-07 Thread Scott Battaglia
You do realize you will have to configure and tune any solution :-) Before comparing solutions, I would recommend defining your requirements and your tolerance for failure (if you have not). For example, Is it acceptable that if a node (that has > 99.9% uptime) goes down, a user must re-authentic

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-07 Thread Paul B. Henson
On 8/7/2013 7:08 AM, Jérôme LELEU wrote: Memcached processes can crash but it never happens for us It's not just a matter of unplanned downtime; we deploy updates and patches and do other routine maintenance on a regular basis. With the memcached ticket registry, if we intentionally pull out

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-07 Thread Paul B. Henson
On 8/6/2013 2:13 PM, Andrew Morgan wrote: As others have said on the mailing list before, is it really that big of a deal if people have to reauthenticate? If there is no concern about users reauthenticating, why not just skip CAS completely and have them authenticate directly to each app ;)?

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-07 Thread Jérôme LELEU
Hi, Yes, Memcached processes can crash but it never happens for us (10 Memcached servers, thousands of requests every second). It's very stable and performant. That said, you can add replication using repcache. You can even use Couchbase as a replacement of Memcached (replication / persistence) fo

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-06 Thread Andrew Morgan
On Tue, 6 Aug 2013, Paul B. Henson wrote: Memcached is more performant than EhCache globally, but what really makes the difference is the serialization through the Kryo library (instead of the Java serialization). My concern on memcached is that it shards the tickets, and if you lose any give

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-06 Thread Paul B. Henson
On 8/6/2013 2:13 AM, Jérôme LELEU wrote: For those who complain about the "poor" documentation, I advice you to search accross the mailing lists. I did spend a fair amount of time on Google, and poking through the mailing list archives. I did find some helpful information, but nothing really

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-06 Thread Paul B. Henson
On 8/5/2013 7:37 PM, Pierce, Eric wrote: The tomcat session is only used during the initial authentication - it's just there to keep track of where the user is in the webflow during login. Once a user has authenticated and the TGT has been sent, the tomcat session isn't needed. If you lose a s

RE: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-06 Thread Aaron Bennett
-user@lists.jasig.org Subject: Re: [cas-user] fault-tolerant/redundant/HA CAS deployment Hi, For those who complain about the "poor" documentation, I advice you to search accross the mailing lists. We already had several discussions about Ehcache/Memcached security/performance conc

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-06 Thread Jérôme LELEU
gt; From: Paul B. Henson > Sent: Monday, August 05, 2013 8:14 PM > To: cas-user@lists.jasig.org > Subject: Re: [cas-user] fault-tolerant/redundant/HA CAS deployment > > > > Once I get that working, I'm probably also going to try and cluster the > underlying tom

RE: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-05 Thread Pierce, Eric
From: Paul B. Henson Sent: Monday, August 05, 2013 8:14 PM To: cas-user@lists.jasig.org Subject: Re: [cas-user] fault-tolerant/redundant/HA CAS deployment Once I get that working, I'm probably also going to try and cluster the underlying tomcat ses

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-05 Thread Paul B. Henson
On 8/5/2013 1:43 PM, Aaron Bennett wrote: Did you get any decent response from this? Not yet; but I did send the initial query late on a Friday, so I'm hoping maybe a few will trickle in over the course of the week :). compose a similar email when I saw yours. I'm hoping I can just use an

Re: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-05 Thread Tom Poage
On 08/05/2013 01:43 PM, Aaron Bennett wrote: > Hi Paul -- > > Did you get any decent response from this? I was just about to compose a > similar email when I saw yours. I'm hoping I can just use an mmcache ticket > registry and let a hardware Load Balancer take care of the session stuff, but

RE: [cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-05 Thread Aaron Bennett
ct: [cas-user] fault-tolerant/redundant/HA CAS deployment > > I finished setting up an initial standalone CAS server, and am now > moving on to getting redundant servers set up behind a load balancer. > > The first page of the documentation > (https://wiki.jasig.org/display/CASUM/Home) s

[cas-user] fault-tolerant/redundant/HA CAS deployment

2013-08-02 Thread Paul B. Henson
I finished setting up an initial standalone CAS server, and am now moving on to getting redundant servers set up behind a load balancer. The first page of the documentation (https://wiki.jasig.org/display/CASUM/Home) says: Additionally, session state replication is unnecessary since tick