0
votes

Is there another way to cluster WSO2 Identity Servers aside from connecting to another node's embedded-LDAP user store? I turn off embedded-LDAP anyway per other instructions. Would it be better to connect to another user's JDBC store instead?

https://docs.wso2.com/display/CLUSTER44x/Clustering+Identity+Server+5.1.0%2C+5.2.0+and+5.3.0

1

1 Answers

0
votes

Sharing the user stores is mandatory for the functionality of the cluster as both nodes of the cluster should be exposed to the same user base but the user store doesn't have to be the embedded LDAP. The embedded LDAP is usually used for development purposes. It is not recommended to use them in the production environment. So if your still in PoC stage, it is fine to point both nodes one embedded LDAP otherwise I recommend you to have an external user store such as LDAP, AD or a JDBC one.

You can either use an existing LDAP/AD or point to an outside JDBC user store. But both nodes should point to the same user store. You can refer [1] for more information on configuring different types of user stores.