Advanced configuration for the distributed session cache

There are many advanced configuration options for integrating WebSEAL with a distributed session cache solution.

These advanced configuration tasks are primarily for configuring WebSEAL instances that are external to the distributed session cache server cluster. However, these tasks can also be useful to fine-tune the configuration on appliances that are internal to the distributed session cache server cluster.

Topic Index:

• Distributed session cache configuration for WebSEAL
  There are numerous configuration entries in the [session], [dsess], and [dsess-cluster] stanzas for configuring WebSEAL to use the distributed session cache.
• Replica set configuration
  A replica set consists of clustered servers that share sessions. A client session created by one member of a replica set can be used unmodified by another.
• Adjustment of the last access time update frequency for the distributed session cache
  The dsess-last-access-update-interval stanza entry in the [session] stanza of the WebSEAL configuration file specifies the frequency at which WebSEAL updates the session last access time at the distributed session cache.
• Communication timeout configuration for the distributed session cache
  There are two configuration entries to control the communication timeout values for the distributed session cache environment.
• Performance configuration for the distributed session cache
  We can configure the maximum number of pre-allocated session IDs and the handle pool size to fine-tune the performance of the distributed session cache.
• SSL configuration for WebSEAL and the distributed session cache
  When the [dsess-cluster] server stanza entry specifies the HTTPS protocol in the URL, configure WebSEAL for SSL communication with the distributed session cache. WebSEAL can authenticate to the distributed session cache with client certificates.
• Maximum concurrent sessions policy
  
• Single signon in a replica set
  A distributed session cache environment provides a single sign-on solution by sharing sessions across servers in a replica set.

Parent topic: Distributed session cache