Metacat

add section about importing self-signed certificates into the Java keystore (now that we use strict verification on the java client side when calling replication endpoints).

a few additional notes about Metacat replication configuration.

Throw an exception when NOT allowed, not when allowed =).

ignore partition owner -- always attempt to look up form local store if we were unable to get the SM from the shared map.

do not check if this CN has a "perfect" copy of the SM identifiers -- we need any CN coming online to contribute the records that they have locally so that in the event that all three CNs have a partial view of things they all eventually share each others' SM entries.

Also get the list size, which may throw an NPE.

Only add an AccessPolicy to SystemMetadata during generation when the AccessPolicy is not empty. We've had some scenarios where IdentifierManager.getaccessPolicy() is returning an empty policy because of an empty permission list coming from the db. This was causing InvalidSystemMetadata exceptions during MN to MN replication.

push SystemMetadata entries from the CN that has them all to the shared map where other nodes may not have all entries. The CN with the complete copy only pushes SM entries that it does not own and that return as null because those are the ones that are missing on the other, non-complete CNs....

trace level log for looping over EVERY pid in the system.

meant to log the guids (source) not the pids (target)