Use the following list of procedures as a checklist for completing this task.
Access https://osso-1.example.com:1081/opensso/console from a web browser.
Log in to the OpenSSO Enterprise console as the administrator.
amadmin
ossoadmin
Click the Configuration tab.
Under Global properties, click Session.
Under Secondary Configuration Instance, click New.
In the Add Sub Configuration page, provide the following information.
Select External
Enter msgquser
Enter m5gqu5er
Enter m5gqu5er
Keep the default value of 5000.
Enter mq-1.example.com:7777,mq-2.example.com:7777.
This is the Message Queue broker address list. Enter multiple values using a comma and no space.
Click Add.
Click Save.
Log out of the OpenSSO Enterprise console.
Restart the Application Server 1 instance with the following sub procedure.
As a root user, log in to the osso–1 host machine.
Switch to the non-root user and change to the bin directory.
# su osso80adm # cd /export/osso80adm/domains/ossodomain/bin |
Restart the Application Server 1 instance.
# ./stopserv; ./startserv admin username:domain2adm admin password:domain2pwd master password:domain2master Redirecting output to /export/osso80adm/domains/ossodomain/logs/server.log |
Log out of the osso–1 host machine.
Restart the Application Server 2 instance with the following sub procedure.
As a root user, log in to the osso–2 host machine.
Switch to the non-root user and change to the bin directory.
# su osso80adm # cd /export/osso80adm/domains/ossodomain/bin |
Restart the Application Server 2 instance.
# ./stopserv; ./startserv admin username:domain2adm admin password:domain2pwd master password:domain2master Redirecting output to /export/osso80adm/domains/ossodomain/logs/server.log |
Log out of the osso-2 host machine.
Both OpenSSO Enterprise 1 and OpenSSO Enterprise 2 should be up and running before you begin this verification procedure.
As a root user, log in to the osso–2 host machine.
Change to the bin directory.
# cd /export/osso80adm/domains/ossodomain/bin |
Stop OpenSSO Enterprise 2.
# ./stopserv |
Access https://lb-2.example.com:1081/opensso/console from a web browser.
Log in to the OpenSSO Enterprise console as the administrator.
amadmin
ossoadmin
Click the Sessions tab.
In the View field, select osso-1.example.com:1081 from the drop down list.
Verify that only amadmin exists in the Sessions table.
In the View field, select osso-2.example.com:1081 from the drop down list.
You will see an error message indicating the server is down.
Leave this browser window 1 open.
Start OpenSSO Enterprise 2.
# ./startserv admin username:domain2adm admin password:domain2pwd master password:domain2master Redirecting output to /export/osso80adm/domains/ossodomain/logs/server.log |
As a root user, log in to the osso-1 host machine.
Change to the bin directory.
# cd /export/osso80adm/domains/ossodomain/bin |
Stop OpenSSO Enterprise 1.
# ./stopserv |
Going back to the OpenSSO Enterprise console in browser window 1, under the Sessions tab, select osso-1.example.com:1081 from the View drop down list.
You will see an error message indicating the server is down.
Now select osso-2.example.com:1081 from the View drop down list.
Verify that only amadmin exists in the Sessions table. This indicates that although OpenSSO Enterprise 1 was stopped, the OpenSSO Enterprise Load Balancer 2 directed the request to OpenSSO Enterprise 2 and a session for amadmin was successfully created by OpenSSO Enterprise 2. If session failover was not enabled, it would have resulted in a login page.
This procedure assumes that you have just completed To Verify That the Administrator Session Fails Over.
Access https://lb-2.example.com:1081/opensso/UI/Login from a second browser window.
Log in to the OpenSSO Enterprise console as testuser1.
testuser1
password
A page with a message that reads You're logged in is displayed. Since the User Profile attribute was set to Ignored, the user's profile is not displayed following a successful login. Because OpenSSO Enterprise 1 was stopped, the user session is created in OpenSSO Enterprise 2.
Leave browser window 2 open.
Using browser window 1, click the Sessions tab.
In the View field, select osso-2.example.com:1081 from the drop down list.
Verify that amadmin and testuser1 exist in the Sessions table.
On the osso–1 host machine, change to the bin directory.
# cd /export/osso80adm/domains/ossodomain/bin |
Start OpenSSO Enterprise 1.
# ./startserv |
Both OpenSSO Enterprise 1 and OpenSSO Enterprise 2 are up and running.
On the osso–2 host machine, change to the bin directory.
# cd /export/osso80adm/domains/ossodomain/bin |
Stop OpenSSO Enterprise 2.
# ./stopserv |
Using browser window 1, click the Sessions tab and do the following sub procedure.
In the View field, select osso-1.example.com:1081.
Verify that amadmin and testuser1 exist in the Sessions table. This indicates that the session successfully failed over to OpenSSO Enterprise 1.
If testuser1 is not displayed, refresh the browser window 2 page.
In the View field, select osso-2.example.com:1081
You will see an error message indicating the server is down.
Log out of the consoles and the host machines.