Revision 6936
Added by ben leinfelder about 12 years ago
| docs/user/metacat/source/replication.rst | ||
|---|---|---|
| 85 | 85 |
Replication control panel. |
| 86 | 86 |
|
| 87 | 87 |
Note that currently, you cannot use the Replication Control Panel to remove a |
| 88 |
server after a replication has occurred. At this point in time, the only way to |
|
| 89 |
remove a replication server after replication has occurred is to remove the |
|
| 90 |
certificates. |
|
| 88 |
server after a replication has occurred. To stop replication between two servers, |
|
| 89 |
update the flags that control whether metadata and/or data are replicated. |
|
| 91 | 90 |
|
| 92 | 91 |
Generating and Exchanging Security Certificates |
| 93 | 92 |
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| ... | ... | |
| 103 | 102 |
serves to verify and authenticate that the server is trusted. |
| 104 | 103 |
|
| 105 | 104 |
If you must generate a self-signed certificate, the partner replication server |
| 106 |
will need the public certificate added to its existing Certificate Authorities.
|
|
| 105 |
will need that public certificate added to its existing Certificate Authorities.
|
|
| 107 | 106 |
|
| 108 | 107 |
Generate Certificates for Metacat running under Apache/Tomcat |
| 109 | 108 |
............................................................. |
| ... | ... | |
| 166 | 165 |
sudo cp <hostname>-apache.crt /etc/ssl/certs |
| 167 | 166 |
sudo cp <hostname>-apache.key /etc/ssl/private |
| 168 | 167 |
|
| 169 |
4. Apache needs to be configured to request a “client certificate” when the
|
|
| 168 |
4. Apache needs to be configured to request a client certificate when the
|
|
| 170 | 169 |
replication API is utilized. The helper file named "knb-ssl" has default |
| 171 | 170 |
rules that configure Apache for SSL and client certificate authentication. |
| 172 | 171 |
Set up these SSL settings by copying the knb-ssl file into the ``sites-available`` |
| ... | ... | |
| 223 | 222 |
Update your Metacat database |
| 224 | 223 |
~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
| 225 | 224 |
The simplest way to update the Metacat database to use replication is to use |
| 226 |
the Replication Control Panel. You can also update the database u |
|
| 227 |
sing SQL. Instructions for both options are included in this section.
|
|
| 225 |
the Replication Control Panel. You can also update the database using SQL.
|
|
| 226 |
Instructions for both options are included in this section. |
|
| 228 | 227 |
|
| 229 | 228 |
.. figure:: images/screenshots/image063.jpg |
| 230 | 229 |
:align: center |
Also available in: Unified diff
some minimal editing on replication configuration -- bulk of it had been done in the Word doc before rst conversion
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5516