23.11.2014 Views

TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

TIBCO Spotfire Server 3.2.2 - TIBCO Product Documentation

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Load Balancing<br />

# Load the mod_jk module<br />

LoadModule jk_module modules/mod_jk.so<br />

# Load the workers configuration<br />

JkWorkersFile conf/workers.properties<br />

# The mod_jk module's log file<br />

JkLogFile logs/mod_jk.log<br />

# The mod_jk module's log level (trace, debug, info, warn, error)<br />

JkLogLevel info<br />

# Let the load balancer worker handle all requests to the TSS web applications<br />

JkMount /spotfire loadbalancer<br />

JkMount /spotfire/* loadbalancer<br />

# Define Apache environment variables to be exported by mod_jk to Tomcat web<br />

applications<br />

JkEnvVar REMOTE_USER<br />

JkEnvVar SSL_CLIENT_CERT<br />

#JkEnvVar SSL_CLIENT_CERT_CHAIN<br />

#JkEnvVar SSL_CLIENT_S_DN<br />

#JkEnvVar SSL_CLIENT_S_DN_CN<br />

5 Make sure that the Apache httpd configuration includes the file mod_jk.conf.<br />

6 Restart Apache httpd. Check for any startup errors.<br />

7 Make sure you are able to connect to each server using both HTTP on the ports<br />

defined in the installation process, and using AJP on port 8009.<br />

8 To achieve a higher level of security, it is possible to make the load balancer<br />

authenticate when it talks to the <strong>Spotfire</strong> servers. See the section “Load Balancer AJP<br />

Keyword Restriction” on page 63 for more information about this.<br />

Note: It might be a good idea to start by setting up one <strong>Spotfire</strong> <strong>Server</strong> to be load<br />

balanced. When you see that traffic is being forwarded as it should, add the other<br />

servers.<br />

It is also possible to forward traffic from the load balancer to the Configuration<br />

Console. See the section “Forwarding Traffic from the Load Balancer to the<br />

Configuration Console” on page 99 for instructions on how to set this up.<br />

7.5 Kerberos Authentication<br />

In a clustered environment where Kerberos authentication is used to authenticate<br />

users, the load balancer forwards all Kerberos authentication information to the<br />

<strong>Spotfire</strong> <strong>Server</strong>s. No configuration on the load balancer is needed for this, but there<br />

are certain considerations that must be taken into account when Kerberos<br />

authentication is set up:<br />

• Two Service Principal Names must be created for each <strong>Spotfire</strong> <strong>Server</strong> as well as<br />

for the load balancer.<br />

<strong>TIBCO</strong> <strong>Spotfire</strong>® <strong>Server</strong> <strong>3.2.2</strong> 61 (144)

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!