Grouper Training Admin WS Part 2 Chris Hyzer

Grouper Training - Admin - WS - Part 2 Chris Hyzer Internet 2 University of Pennsylvania This work licensed under a Creative Commons Attribution-Non. Commercial 3. 0 Unported License.

Contents • • • Introduction Configuration Logging High availability Monitoring Troubleshooting 2

Introduction 3

Configuration • grouper-ws. properties • See file for all options, here are some examples • Control who can access WS by group • If you configure this, you could auto-create the group and auto-assign users in the grouper. properties 4

Configuration (continued) • Which users can act-as which other users 5

Configuration (continued) • Which subject attributes are sent by default (note, client can request more) 6

Logging • Logging is controlled via log 4 j. properties • Clients can easily proxy (especially in non-SSL test environment) • Errors are generally returned to client • Grouper. Client has --debug=true switch to log request and response 7

Logging (continued) • Can log requests and responses on server (2. 1. 1+) • Should generally not do in production • Edit web. xml • Add log 4 j debug settings 8

High availability • Can have multiple app servers connected to one registry • Might want session persistence by source IP address • There are many ways to do this, here are two Client Registry Load balancers WS servers 9

High availability (continued) • For improved availability, can deploy in multiple data centers, load balance on client • Grouper. Client can do this, or custom client Load balancers Registry WS servers One-way replication Data center 1 Client Readonly Load WS servers Registry balancers Data center 2 10

Monitoring • Monitor like any other web application • Status servlet can check health • Hook up to monitoring software e. g. Nagios Monitoring software Registry e. g. Nagios WS servers 11

Monitoring (continued) • Status servlet will return 200 on success • Can have log 4 j errors emailed to admins • TODO ADD EXAMPLE 12

Troubleshooting • Generally the client will receive a descriptive error to troubleshoot their own problems • Refer the client to the WS samples / docs • Use the Grouper. Client with --debug to show examples of requests / responses • Contact the Grouper-users email list 13

Quiz • Click on the quiz link in the video description to reinforce your knowledge of this topic 14

Thanks! Further information: • Infosheets, mailing lists, wiki, downloads, etc. : grouperdemo. internet 2. edu • Grouper demo server: grouperdemo. internet 2. edu/ • Grouper Online Training Home: spaces. internet 2. edu/x/IIGf. AQ This work licensed under a Creative Commons Attribution-Non. Commercial 3. 0 Unported License. 15