Grouper Users - Open Discussion List

[Chris Hyzer <>]

I don't think any Java webapps should share a tomcat :)

You can have one apache, and one domain name, SSL cert etc.  Then have one 
tomcat install, but run in several times on the same server with different 
ports.  This way:

1. If one webapp takes all the heap/permgen, it wont affect other webapps
2. If you need to redeploy and bounce, you can bounce without affecting other 
apps (haven't had good experience with hotswap)
3. If there is an endless loop or something that takes all the CPU, it will 
affect the whole tomcat, but on a multi-core server, might not affect other 
services
4. If there is a deadlock, the whole tomcat could be wedged
5. When debugging, running jstack, etc, things are simpler
6. There are probably other reasons, but it is easy enough to run each webapp 
in its own tomcat, so I didn't dig too deep to find more reasons

I didn't read the whole article, but maybe this helps explain

http://blogs.vmware.com/vfabric/2012/10/5-scenarios-and-best-practices-for-running-multiple-instances-of-tomcat-or-tc-server.html

With that all said, if you want to run the UI and WS on the same tomcat, go 
for it  :)

thanks,
Chris



-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Bryan E. Wooten
Sent: Thursday, May 16, 2013 12:56 PM
To: Dominique Petitpierre
Cc: 

Subject: RE: [grouper-users] Grouper Deployment Infrastructure

I separated the UI and WS because I think I read somewhere on this list that 
was the thing to do. I am open to correction.

Yes, Active Directory is our subject source. We currently are not doing 
anything with the LDAP server, but in the future we plan on provisioning 
groups to LDAP.

I have updated my diagram to show AD as the subject source.

-Bryan


-----Original Message-----
From: Dominique Petitpierre 
[mailto:]
 
Sent: Thursday, May 16, 2013 10:47 AM
To: Bryan E. Wooten
Cc: 

Subject: Re: [grouper-users] Grouper Deployment Infrastructure

Hello,

On 05/15/2013 07:59 PM, Bryan E. Wooten wrote:
> I have drawn up this diagram showing all the servers needed to deploy 
> Grouper in a production environment.
>
> https://www.lucidchart.com/publicSegments/view/5193bf44-b5e4-4861-9bff
> -3fc10a0098b7/image.pdf
...

Reading the diagram, I am curious:

In the Notes it says "3.Grouper Ui and WS must be on separate Tomcat 
instances"
- What is the criterion to separate them?

- Is your subject source on Active Directory or on the other LDAP server?


Best regards,
Dominique

--
Mr Dominique Petitpierre, user=Dominique.Petitpierre domain=unige.ch IT 
Division, University of Geneva, Switzerland