Synchronization of WebSEAL data across multiple servers
We can use the WebSEAL server sync command to synchronize the configuration of one WebSEAL server with another. We can synchronize servers of the same type only. The WebSEAL server type is either a:
- WebSEAL running on an appliance.
- WebSEAL running on a standard operating system.
Server task commands include:
- server sync
- Used to synchronize the configuration of the supplied WebSEAL server to the current WebSEAL server. The server sync command invokes the other commands on this list for a complete synchronization operation. The data that can be synchronized includes configuration entries, the junction database, and selected data files, but not the object space or policy. Configuration entries and data files to be synchronized can be customized in the WebSEAL configuration file.
- server restart
- Used to restart the WebSEAL instance.
The following list describes the flow of communication for the server sync command:
- The server sync command is issued from the administration console.
- The request for data is issued from the WebSEAL server as a new server task command.
- The source WebSEAL server gathers the data for synchronization and sends it to the target WebSEAL server.
- The target WebSEAL server applies the data retrieved.
The request for data is issued from the WebSEAL server that is processing the server sync task. Data is pulled from one WebSEAL server to another with authorization automatically applied by the ISAM server task framework. By using an existing communication channel, there is no need to open up more ports for the WebSEAL server.
Parent topic: Server administration
Related concepts
- Automating synchronization
- WebSEAL instance management
- Error message logging
- Traditional auditing and logging of HTTP events
- Configuration data log file
Related tasks
Related reference