Configure CA Strong Authentication Database for Master Master Replication

This section provides information about how to configure the CA Strong Authentication database instances in the Master Master replication mode.
aa9
This section provides information about how to configure the CA Strong Authentication database instances in the Master Master replication mode.
As part of this release, the sequence ARWFTXNIDSEQ has been replaced with ARWFINSTANCETXNIDSEQ sequence. ARWFINSTANCETXNIDSEQ sequence allows you to use the full range of Txn sequence IDs (which is 2^31-1). The ARWFINSTANCETXNIDSEQ sequence does not require to be distributed and is available only after starting the CA Strong Authentication service.
Distribute the Sequences
CA Strong Authentication uses sequences or database sequences to uniquely identify the users and related data. To support Master Master replication environment, distribution of these sequences is required to avoid any conflict between each instance of Strong Authentication. The following method explains how to distribute the Strong Authentication server sequences.
How to Distribute ARSEQUENCETABLE Sequences for MSSQL
Applicable only when the database used in MSSQL.
In addition to ARWFSEQUENCE table, Strong Authentication server stores the sequences in the ARSEQUENCETABLE table. The following table mentions the names of the sequences that you distribute with their maximum values.
Table 4: Sequences present in ARSEQUENCETABLE table
SEQUENCE NAME
MAXIMUM VALUE
ARUDSORGAUDITREFIDSEQ
2147483647
ARUDSUSERAUDITREFIDSEQ
2147483647
ADMINAUDITTRAILSEQ
2147483647
ARUDSCONFIGAUDITREFIDSEQ
2147483647
ARUDSUSERREFIDSEQ
2147483647
CACHEREFRESHREQUESTSEQ
2147483647
BULKUPLOADREQUESTSEQ
2147483647
ARACCOUNTMAPREFIDSEQ
2147483647
KEYSEQUENCEID_SEQ
2147483647
ARUSERACCOUNTARCREFIDSEQ
2147483647
The following paragraph describes the distribution of sequence values across servers like Server A, Server B, …, Server N. Each Server contains these sequences and each sequence contains
current
value
and
maximum
value
  • Divide the maximum value as mentioned in Table 4. 
  • Allocate the value to each instance of server by changing
    current
     
    value
     and 
    maximum
     
    value
Following paragraph shows the strategy to divide these sequences when the customer is deploying three Strong Authentication instances.
Table 5: Sequences Current and Maximum value in three instance scenario
Server
CURRENT VALUE
MAXIMUM VALUE
Server A
ARUDSORGAUDITREFIDSEQ
ARUDSUSERAUDITREFIDSEQ
ADMINAUDITTRAILSEQ
ARUDSCONFIGAUDITREFIDSEQ
ARUDSUSERREFIDSEQ
CACHEREFRESHREQUESTSEQ
BULKUPLOADREQUESTSEQ
ARACCOUNTMAPREFIDSEQ
KEYSEQUENCEID_SEQ
ARUSERACCOUNTARCREFIDSEQ
1
1
1
1
1
1
1
1
1
1
715827882
715827882
715827882
715827882
715827882
715827882
715827882
715827882
715827882
715827882
Server B
ARUDSORGAUDITREFIDSEQ
ARUDSUSERAUDITREFIDSEQ
ADMINAUDITTRAILSEQ
ARUDSCONFIGAUDITREFIDSEQ
ARUDSUSERREFIDSEQ
CACHEREFRESHREQUESTSEQ
BULKUPLOADREQUESTSEQ
ARACCOUNTMAPREFIDSEQ
KEYSEQUENCEID_SEQ
ARUSERACCOUNTARCREFIDSEQ
715827883
715827883
715827883
715827883
715827883
715827883
715827883
715827883
715827883
715827883
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
Server C
ARUDSORGAUDITREFIDSEQ
ARUDSUSERAUDITREFIDSEQ
ADMINAUDITTRAILSEQ
ARUDSCONFIGAUDITREFIDSEQ
ARUDSUSERREFIDSEQ
CACHEREFRESHREQUESTSEQ
BULKUPLOADREQUESTSEQ
ARACCOUNTMAPREFIDSEQ
KEYSEQUENCEID_SEQ
ARUSERACCOUNTARCREFIDSEQ
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
The maximum value of sequences in table 4 is divided into three parts and allocated to each instance of Strong Authentication server. Similarly, divide the sequence values based on number of Strong Authentication instances in deployment.
Note: Carefully divide and assign minimum and maximum value of above mentioned sequences. 
UPDATE ARSEQUENTABLE SET curr_val = $CURRENT_VALUE$, max_val = $MAXIMUM_VALUE$ WHERE sequence_id = '$SEQUENCE_'NAME$'; For example, if you want to set '715827883' as the current value and '1431655764' as the maximum value for "ARUDSUSERREFIDSEQ", use the following query. UPDATE ARSEQUENCETABLE SET curr_val = 715827883, max_val = 1431655764 WHERE sequence_id = 'ARUDSUSERREFIDSEQ';
How to Distribute Database sequences in Oracle
Applicable only when the database used in Oracle.
Strong Authentication stores certain sequences as database sequence objects. Following table shows the name of database sequences and their respective maximum value.
Table 6: Database Sequences
SEQUENCE NAME
MINIMUM VALUE
MAXIMUM VALUE
ARUDSORGAUDITREFIDSEQ
1
2147483647
ARUDSUSERAUDITREFIDSEQ
1
2147483647
ADMINAUDITTRAILSEQ
1
2147483647
ARUDSCONFIGAUDITREFIDSEQ
1
2147483647
ARUDSUSERREFIDSEQ
1
2147483647
CACHEREFRESHREQUESTSEQ
1
2147483647
BULKUPLOADREQUESTSEQ
1
2147483647
ARACCOUNTMAPREFIDSEQ
1
2147483647
KEYSEQUENCEID_SEQ
1
2147483647
ARUSERACCOUNTARCREFIDSEQ
1
2147483647
The following paragraph describes the distribution of sequence values across servers like Server A, Server B, …, Server N. Each Server contains these sequences and each sequence contains 
minimum value
and
maximum value
  • Divide the maximum value as mentioned in Table 6. 
  • Allocate the value to each instance of server by changing
    minimum value
     and 
    maximum value
Following paragraph shows the strategy to divide these sequences when the customer is deploying three Strong Authentication instances.
Table 7: Sequences minimum and maximum value in three instance scenario
Server
MINIMUM VALUE
MAXIMUM VALUE
Server A
ARUDSORGAUDITREFIDSEQ
ARUDSUSERAUDITREFIDSEQ
ADMINAUDITTRAILSEQ
ARUDSCONFIGAUDITREFIDSEQ
ARUDSUSERREFIDSEQ
CACHEREFRESHREQUESTSEQ
BULKUPLOADREQUESTSEQ
ARACCOUNTMAPREFIDSEQ
KEYSEQUENCEID_SEQ
ARUSERACCOUNTARCREFIDSEQ
1
1
1
1
1
1
1
1
1
1
715827882
715827882
715827882
715827882
715827882
715827882
715827882
715827882
715827882
715827882
Server B
ARUDSORGAUDITREFIDSEQ
ARUDSUSERAUDITREFIDSEQ
ADMINAUDITTRAILSEQ
ARUDSCONFIGAUDITREFIDSEQ
ARUDSUSERREFIDSEQ
CACHEREFRESHREQUESTSEQ
BULKUPLOADREQUESTSEQ
ARACCOUNTMAPREFIDSEQ
KEYSEQUENCEID_SEQ
ARUSERACCOUNTARCREFIDSEQ
715827883
715827883
715827883
715827883
715827883
715827883
715827883
715827883
715827883
715827883
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
1431655764
Server C
ARUDSORGAUDITREFIDSEQ
ARUDSUSERAUDITREFIDSEQ
ADMINAUDITTRAILSEQ
ARUDSCONFIGAUDITREFIDSEQ
ARUDSUSERREFIDSEQ
CACHEREFRESHREQUESTSEQ
BULKUPLOADREQUESTSEQ
ARACCOUNTMAPREFIDSEQ
KEYSEQUENCEID_SEQ
ARUSERACCOUNTARCREFIDSEQ
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
1431655765
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
2147483647
The maximum value of sequences as mentioned in table 6 is divided in three parts and allocated to each instance of Strong Authentication server. Similarly divide the sequence values based on number of Strong Authentication instances in deployment.
For updating both minimum and maximum values for all sequences, drop the sequences and recreate sequences with the following minimum and maximum values . For more information about Drop and Create Sequences, see Oracle documentation.
Sample Query for updating Minimum and Maximum values for ARUDSORGAUDITREFIDSEQ sequence.
DROP SEQUENCE $SEQUENCE_NAME$; CREATE SEQUENCE $SEQUENCE_NAME$ START WITH $START_VALUE$ MAXVALUE $MAXIMUM_VALUE$ MINVALUE $MINIMUM_VALUE$ NOCYCLE CACHE 20 NOORDER;   For example, if you want to set '1431655765' as the minimum value and 2147483647 as the maximum value for the sequence ARUDSORGAUDITREFIDSEQ, use following query. Set the starting value equal to the minimum valueDROP SEQUENCE ARUDSORGAUDITREFIDSEQ; CREATE SEQUENCE ARUDSORGAUDITREFIDSEQ START WITH 1431655765 MAXVALUE 2147483647 MINVALUE 1431655765 NOCYCLE CACHE 20 NOORDER;