Project

General

Profile

« Previous | Next » 

Revision 6936

Added by ben leinfelder almost 13 years ago

some minimal editing on replication configuration -- bulk of it had been done in the Word doc before rst conversion
http://bugzilla.ecoinformatics.org/show_bug.cgi?id=5516

View differences:

docs/user/metacat/source/replication.rst
85 85 
   Replication control panel.
86 86 

  		




  87
  87
  
    
Note that currently, you cannot use the Replication Control Panel to remove a 


  		




  88
  
  
    
server after a replication has occurred. At this point in time, the only way to 


  		




  89
  
  
    
remove a replication server after replication has occurred is to remove the 


  		




  90
  
  
    
certificates. 


  		




  
  88
  
    
server after a replication has occurred. To stop replication between two servers,


  		




  
  89
  
    
update the flags that control whether metadata and/or data are replicated.


  		




  91
  90
  
    

  		




  92
  91
  
    
Generating and Exchanging Security Certificates


  		




  93
  92
  
    
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


  		




  ......




  103
  102
  
    
serves to verify and authenticate that the server is trusted.


  		




  104
  103
  
    

  		




  105
  104
  
    
If you must generate a self-signed certificate, the partner replication server 


  		




  106
  
  
    
will need the public certificate added to its existing Certificate Authorities. 


  		




  
  105
  
    
will need that public certificate added to its existing Certificate Authorities. 


  		




  107
  106
  
    

  		




  108
  107
  
    
Generate Certificates for Metacat running under Apache/Tomcat


  		




  109
  108
  
    
.............................................................


  		




  ......




  166
  165
  
    
     sudo cp <hostname>-apache.crt /etc/ssl/certs 


  		




  167
  166
  
    
     sudo cp <hostname>-apache.key /etc/ssl/private 


  		




  168
  167
  
    

  		




  169
  
  
    
4. Apache needs to be configured to request a “client certificate” when the 


  		




  
  168
  
    
4. Apache needs to be configured to request a client certificate when the 


  		




  170
  169
  
    
   replication API is utilized. The helper file named "knb-ssl" has default 


  		




  171
  170
  
    
   rules that configure Apache for SSL and client certificate authentication. 


  		




  172
  171
  
    
   Set up these SSL settings by copying the knb-ssl file into the ``sites-available`` 


  		




  ......




  223
  222
  
    
Update your Metacat database


  		




  224
  223
  
    
~~~~~~~~~~~~~~~~~~~~~~~~~~~~


  		




  225
  224
  
    
The simplest way to update the Metacat database to use replication is to use 


  		




  226
  
  
    
the Replication Control Panel. You can also update the database u


  		




  227
  
  
    
sing SQL. Instructions for both options are included in this section.


  		




  
  225
  
    
the Replication Control Panel. You can also update the database using SQL. 


  		




  
  226
  
    
Instructions for both options are included in this section.


  		




  228
  227
  
    

  		




  229
  228
  
    
.. figure:: images/screenshots/image063.jpg


  		




  230
  229
  
    
   :align: center


  		












Also available in:  Unified diff