Configure CA Strong Authentication Database for Master Master Replication
This section provides information about how to configure the CA Strong Authentication database instances in the Master Master replication mode.
aa9
This section provides information about how to configure the CA Strong Authentication database instances in the Master Master replication mode.
As part of this release, the sequence ARWFTXNIDSEQ has been replaced with ARWFINSTANCETXNIDSEQ sequence. ARWFINSTANCETXNIDSEQ sequence allows you to use the full range of Txn sequence IDs (which is 2^31-1). The ARWFINSTANCETXNIDSEQ sequence does not require to be distributed and is available only after starting the CA Strong Authentication service.
Distribute the Sequences
CA Strong Authentication uses sequences or database sequences to uniquely identify the users and related data. To support Master Master replication environment, distribution of these sequences is required to avoid any conflict between each instance of Strong Authentication. The following method explains how to distribute the Strong Authentication server sequences.
How to Distribute ARSEQUENCETABLE Sequences for MSSQL
Applicable only when the database used in MSSQL.
In addition to ARWFSEQUENCE table, Strong Authentication server stores the sequences in the ARSEQUENCETABLE table. The following table mentions the names of the sequences that you distribute with their maximum values.
Table 4: Sequences present in ARSEQUENCETABLE table
SEQUENCE NAME
| MAXIMUM VALUE
|
ARUDSORGAUDITREFIDSEQ | 2147483647 |
ARUDSUSERAUDITREFIDSEQ | 2147483647 |
ADMINAUDITTRAILSEQ | 2147483647 |
ARUDSCONFIGAUDITREFIDSEQ | 2147483647 |
ARUDSUSERREFIDSEQ | 2147483647 |
CACHEREFRESHREQUESTSEQ | 2147483647 |
BULKUPLOADREQUESTSEQ | 2147483647 |
ARACCOUNTMAPREFIDSEQ | 2147483647 |
KEYSEQUENCEID_SEQ | 2147483647 |
ARUSERACCOUNTARCREFIDSEQ | 2147483647 |
The following paragraph describes the distribution of sequence values across servers like Server A, Server B, …, Server N. Each Server contains these sequences and each sequence contains
and
.
current
value
maximum
value
- Divide the maximum value as mentioned in Table 4.
- Allocate the value to each instance of server by changingcurrentvalueandmaximumvalue.
Following paragraph shows the strategy to divide these sequences when the customer is deploying three Strong Authentication instances.
Table 5: Sequences Current and Maximum value in three instance scenario
Server | CURRENT VALUE
| MAXIMUM VALUE
|
Server A | ||
ARUDSORGAUDITREFIDSEQ ARUDSUSERAUDITREFIDSEQ ADMINAUDITTRAILSEQ ARUDSCONFIGAUDITREFIDSEQ ARUDSUSERREFIDSEQ CACHEREFRESHREQUESTSEQ BULKUPLOADREQUESTSEQ ARACCOUNTMAPREFIDSEQ KEYSEQUENCEID_SEQ ARUSERACCOUNTARCREFIDSEQ | 1 1 1 1 1 1 1 1 1 1 | 715827882 715827882 715827882 715827882 715827882 715827882 715827882 715827882 715827882 715827882 |
Server B | ||
ARUDSORGAUDITREFIDSEQ ARUDSUSERAUDITREFIDSEQ ADMINAUDITTRAILSEQ ARUDSCONFIGAUDITREFIDSEQ ARUDSUSERREFIDSEQ CACHEREFRESHREQUESTSEQ BULKUPLOADREQUESTSEQ ARACCOUNTMAPREFIDSEQ KEYSEQUENCEID_SEQ ARUSERACCOUNTARCREFIDSEQ | 715827883 715827883 715827883 715827883 715827883 715827883 715827883 715827883 715827883 715827883 | 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 |
Server C | ||
ARUDSORGAUDITREFIDSEQ ARUDSUSERAUDITREFIDSEQ ADMINAUDITTRAILSEQ ARUDSCONFIGAUDITREFIDSEQ ARUDSUSERREFIDSEQ CACHEREFRESHREQUESTSEQ BULKUPLOADREQUESTSEQ ARACCOUNTMAPREFIDSEQ KEYSEQUENCEID_SEQ ARUSERACCOUNTARCREFIDSEQ | 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 | 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 |
The maximum value of sequences in table 4 is divided into three parts and allocated to each instance of Strong Authentication server. Similarly, divide the sequence values based on number of Strong Authentication instances in deployment.
Note: Carefully divide and assign minimum and maximum value of above mentioned sequences.
UPDATE ARSEQUENTABLE SET curr_val = $CURRENT_VALUE$, max_val = $MAXIMUM_VALUE$ WHERE sequence_id = '$SEQUENCE_'NAME$'; For example, if you want to set '715827883' as the current value and '1431655764' as the maximum value for "ARUDSUSERREFIDSEQ", use the following query. UPDATE ARSEQUENCETABLE SET curr_val = 715827883, max_val = 1431655764 WHERE sequence_id = 'ARUDSUSERREFIDSEQ';
How to Distribute Database sequences in Oracle
Applicable only when the database used in Oracle.
Strong Authentication stores certain sequences as database sequence objects. Following table shows the name of database sequences and their respective maximum value.
Table 6: Database Sequences
SEQUENCE NAME
| MINIMUM VALUE
| MAXIMUM VALUE
|
ARUDSORGAUDITREFIDSEQ | 1 | 2147483647 |
ARUDSUSERAUDITREFIDSEQ | 1 | 2147483647 |
ADMINAUDITTRAILSEQ | 1 | 2147483647 |
ARUDSCONFIGAUDITREFIDSEQ | 1 | 2147483647 |
ARUDSUSERREFIDSEQ | 1 | 2147483647 |
CACHEREFRESHREQUESTSEQ | 1 | 2147483647 |
BULKUPLOADREQUESTSEQ | 1 | 2147483647 |
ARACCOUNTMAPREFIDSEQ | 1 | 2147483647 |
KEYSEQUENCEID_SEQ | 1 | 2147483647 |
ARUSERACCOUNTARCREFIDSEQ | 1 | 2147483647 |
The following paragraph describes the distribution of sequence values across servers like Server A, Server B, …, Server N. Each Server contains these sequences and each sequence contains
and
.
minimum value
maximum value
- Divide the maximum value as mentioned in Table 6.
- Allocate the value to each instance of server by changingminimum valueandmaximum value.
Following paragraph shows the strategy to divide these sequences when the customer is deploying three Strong Authentication instances.
Table 7: Sequences minimum and maximum value in three instance scenario
Server | MINIMUM VALUE
| MAXIMUM VALUE
|
Server A | ||
ARUDSORGAUDITREFIDSEQ ARUDSUSERAUDITREFIDSEQ ADMINAUDITTRAILSEQ ARUDSCONFIGAUDITREFIDSEQ ARUDSUSERREFIDSEQ CACHEREFRESHREQUESTSEQ BULKUPLOADREQUESTSEQ ARACCOUNTMAPREFIDSEQ KEYSEQUENCEID_SEQ ARUSERACCOUNTARCREFIDSEQ | 1 1 1 1 1 1 1 1 1 1 | 715827882 715827882 715827882 715827882 715827882 715827882 715827882 715827882 715827882 715827882 |
Server B | ||
ARUDSORGAUDITREFIDSEQ ARUDSUSERAUDITREFIDSEQ ADMINAUDITTRAILSEQ ARUDSCONFIGAUDITREFIDSEQ ARUDSUSERREFIDSEQ CACHEREFRESHREQUESTSEQ BULKUPLOADREQUESTSEQ ARACCOUNTMAPREFIDSEQ KEYSEQUENCEID_SEQ ARUSERACCOUNTARCREFIDSEQ | 715827883 715827883 715827883 715827883 715827883 715827883 715827883 715827883 715827883 715827883 | 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 1431655764 |
Server C | ||
ARUDSORGAUDITREFIDSEQ ARUDSUSERAUDITREFIDSEQ ADMINAUDITTRAILSEQ ARUDSCONFIGAUDITREFIDSEQ ARUDSUSERREFIDSEQ CACHEREFRESHREQUESTSEQ BULKUPLOADREQUESTSEQ ARACCOUNTMAPREFIDSEQ KEYSEQUENCEID_SEQ ARUSERACCOUNTARCREFIDSEQ | 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 1431655765 | 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 2147483647 |
The maximum value of sequences as mentioned in table 6 is divided in three parts and allocated to each instance of Strong Authentication server. Similarly divide the sequence values based on number of Strong Authentication instances in deployment.
For updating both minimum and maximum values for all sequences, drop the sequences and recreate sequences with the following minimum and maximum values . For more information about Drop and Create Sequences, see Oracle documentation.
Sample Query for updating Minimum and Maximum values for ARUDSORGAUDITREFIDSEQ sequence.
DROP SEQUENCE $SEQUENCE_NAME$; CREATE SEQUENCE $SEQUENCE_NAME$ START WITH $START_VALUE$ MAXVALUE $MAXIMUM_VALUE$ MINVALUE $MINIMUM_VALUE$ NOCYCLE CACHE 20 NOORDER; For example, if you want to set '1431655765' as the minimum value and 2147483647 as the maximum value for the sequence ARUDSORGAUDITREFIDSEQ, use following query. Set the starting value equal to the minimum valueDROP SEQUENCE ARUDSORGAUDITREFIDSEQ; CREATE SEQUENCE ARUDSORGAUDITREFIDSEQ START WITH 1431655765 MAXVALUE 2147483647 MINVALUE 1431655765 NOCYCLE CACHE 20 NOORDER;