HA and Single Signon(SSO).
Home > IT Answers > Security > HA and Single Signon(SSO).
Chris650
20 pts.
0
Q:
HA and Single Signon(SSO).
Single sign-on, HA, LPAR, SSO, HA High Availability
I have three LPAR's that I have setup for HA High Availablity. I also use SSO for user authentication. How do I setup SSO on the HA side so when I do a role swap I dont have to give them all passwords. I
ASKED: Oct 27 2008  8:21 PM GMT
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
RELATED QUESTIONS
0
Rmason
335 pts.
0
A:
 RATE THIS ANSWER
0
Click to Vote:
  •   0
  •  0
  • AddThis Social Bookmark Button
Hi Chris, Have you found a solution to this issue yet? We have encountered the same issue and cannot roll out SSO until we find a way to implement it when we are in a failed over mode. Thanks!!
Last Answered: Nov 25 2008  2:56 PM GMT by Rmason   335 pts.
  •   
0
0
RSS - Discussions Help
Discuss This Answer:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _



_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

Chris650   20 pts.  |   Nov 26 2008  3:37PM GMT

After a long discussion with IBM I found that we would need to have the HA on it’s own network so the system names would stay the same but use a different IP. In the event of a failover you would manually change to the HA IP through DNS to force the users to the new system. This will not be seemless but should work. SSO relies on DNS to do most of the work according to IBM. The other issue would be if a user connects useing the IP I think the system name will need to be used unless you have both IP’s assigned to the system name in DNS. We have not tried this on our system at this time. Hope this helps.

 
0