Re: AzMan concurrency.

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Claudio Pacciarini (ClaudioPacciarini_at_discussions.microsoft.com)
Date: 02/16/05


Date: Wed, 16 Feb 2005 11:43:07 -0800

Morten,

Thanks for writing. Yes, I considered that idea too; the problem is that to
support clustering / availability / scalability, the servers must be running
Windows Server Enterprise or DataCenter Editions.

MSMQ can be clustered but not load balanced and unfortunately, clustering is
NOT available in Windows Server Standard :-(

Since many of our customers use the standard version of Windows Server, I
must come up with something compatible with that.

Another idea was to use Enterprise Services, but again, same problem;
Enterprise or DataCenter Editions are needed in order to support clustering.

Regarding ADAM, I had no time to try it and perhaps I’ll never will, because
it offers no advantage to me for the applications that we are implementing.

Bottom line: so far we’ll do the synchronization with SQL server; server
that we need anyway for other aspects of our applications.

Regards,

Claudio Pacciarini

"Morten Overgaard" wrote:

> The following steps could be another alternative
>
> 1) Web client sends message (with a correleationID) to specific MSMQ
> (QueueA)
> 2) NT Service listens on that QueueA and updates AzMan store according to
> message
> 3) NT Services writes a result message (using the correleationID from 1) on
> another queue (QueueB)
> 4) Web client waits and listens for messages on QueueB with the
> correlationID from 1)
>
> Hope this helps you :-)
>
> And now for my question. I was under the assumption that AzMan and ADAM did
> not work well together since AzMAn can only handle pure Windows Accounts. Is
> this correct or have I misunderstood something?
>
>
> Regards Morten
> "Claudio Pacciarini" <ClaudioPacciarini@discussions.microsoft.com> wrote in
> message news:89BAAEB7-D7F6-4BBA-B2CB-8016A15F7EB2@microsoft.com...
> > In the original post, I didn't explained in detail what I need to do, so
> here
> > I go:
> >
> > I need to implement an application with load balancing support; this app
> > will be mission critical and will always need to be available. It will
> also
> > need to authenticate and authorize users.
> >
> > For the authorization part of the app, I was planning to use AzMan.
> >
> > AzMan seemed to be the perfect solution; the store (when in Active
> > Directory) is automatically replicated, performance is great, audits, easy
> > access to the store from any machine in the domain, azman.msc, etc.
> >
> > But after reading some responses from people that really know windows
> > programming and security, I'm hesitating (and feeling considerably
> concerned
> > too) about azman in mission critical projects.
> >
> > I wonder if it's possible (and/or recommended) to use AzMan with Active
> > Directory in mission critical (clustered/load balanced) applications and
> if
> > it is, how to do it (or at least some ideas). The main problem is
> > synchronizing the servers accessing the store in AD.
> >
> > I really like AzMan and I'd hate to give it up. I'd hate even more to be
> > forced to implement my own custom AzMan-like logic because there's no
> > practical/elegant way to do this locking.
> >
> > So the main questions remain: how could I synchronize server apps
> accessing
> > a store located in Active Directory? Is it possible to use AzMan in
> mission
> > critical apps? Any recommendations?
> >
> > If it's not possible or convenient to use AzMan in clustered/nlb
> > environments, any advice on how could to design a distributed, mission
> > critical system requiring authorization similar to what AzMan provides?
> >
> > Many thanks,
> >
> > Claudio Pacciarini
> >
> >
>
>
>



Relevant Pages

  • Re: Local AzMan XML store from Win32 Service Running as Local System
    ... an XML store or a store in AD/ADAM. ... AzMan works fine on Windows Server 2003, but the other post your have seen ...
    (microsoft.public.dotnet.security)
  • Re: A directory Service error has occured
    ... I have ADAM, AzMan, Server app, Client app in both the machines. ... B is Windows Server Machine. ... ASPNET account as Reader in ADAM and AzMan and things worked out positively. ...
    (microsoft.public.windows.server.active_directory)
  • Re: how to find "step by step" articles to learn windows 2003 AD?
    ... Sites by Using ISA Server in Windows 2000 and Windows 2003" ... Additional Help Files for Windows Server 2003" ... http://support.microsoft.com?kbid=323360 "How to install and configure a DHCP ... http://support.microsoft.com?kbid=323381 "HOW TO Allow Remote Users to Access ...
    (microsoft.public.win2000.advanced_server)
  • Re: Installation Failure - Error Code 0x80244018
    ... You experience problems when you access the Windows Update Version 6 Web site through a server that is running ISA Server ... .101 is pruned out due to potential supersedence ... [CallerId = MicrosoftUpdate] ...
    (microsoft.public.windowsupdate)
  • RE: Backups, VSS and SBS2003 HELP NEEDED!!!
    ... suggest customers Only install Windows Server 2003 SP1 on their server. ...
    (microsoft.public.windows.server.sbs)