Page History

...

Multiple instances of the JOC Cockpit can be synchronized to provide a high availability, active, cluster that is transparent to the user and allows seamless fail-over. . Cluster members then share Authentication and Authorization information.

A more detailed description of JOC Cockpit clusters can be found in the JOC Cockpit - Clustering article.Cluster configuration is described in the Clustering section of the Authentication and Authorization - Configuration article.

Implementation

• The JOC Cockpit uses Apache Shiro to authenticate and authorize users.
• Authentication and Authorization information can be read by Shiro from a number of separate resources. These are:
  • a local configuration (shiro.ini) file that may include both authentication and authorization information, depending on the methods of authentication and authorization configured;
  • a authentication service that provides an LDAP interface such as Microsoft Active Directory and
  • a database containing both authentication and authorization information and which complies with the Shiro data model requirements. This database will be managed (and populated) by a system administrator.

...