How I replication address the security of transport (or how users can implement custom replication transport)

I would like to put in place strong mutual authentication and encryption for replicated data and manage it in the application controls. (That is, not by using a VPN connection or other mechanism of the application could not apply on its own.)

It would be nice if I done this sort of thing automatically, but in the interest of flexibility and simplicity, it seems it would be reasonable that I to allow a user to managing low-level message passing and sleep with any security or integrity checks which were appropriate.

Is it possible now?  It seemed that there was a level of support for transport provided by the user in the past.

To add to the remarks of Marc, there was some thought and effort put into the pluggable teapot, but there have only been a start in this direction so far.  I think it would be possible, for example, add support for Kerberos and secure transportation provided by the user in the future if that made him highest on our list of priorities.

You have a specific need for an alternative implementation of security beyond (rightly) pointing out the merits of a pluggable approach?

-Tim

P.S. I think we used 'SSL' rather than 'TLS' to match the name in the JDK classes and to use terminology better known to the general public.

P.P.S. The NoSQL product layers also its own authentication mechanism of client on top of the SSL part.

Tags: Database

Similar Questions

  • My laptop screen shows just the color of the cursor and background that other users can connect as usual

    Dell Inspiron 1525 Windows Vista, I can only log in safe mode please help!

    Hello

    Thanks for posting your question in the Microsoft Community forum!
    Description of the problem, it seems that you can only connect in safe mode on the windows vista computer.

     
    I would appreciate if you can help me with the following information.

     
    1. don't you make changes to the computer before this problem?
    2. you receive an error message/code?

     
    Try these methods to start the computer in normal mode.

     
    Method 1
    Put the computer in a clean boot state to see if there is a software conflict as the clean boot helps eliminate software conflicts.
    http://support.Microsoft.com/kb/929135
    Note: After completing the steps in the clean boot troubleshooting, follow step 3 of the link to start the computer to a Normal startup mode.
     
     
    Like the other users can log on as usual. Try to perform a restore of the system in safe mode.
     
     

    Methoad 2

    Try to run in safe mode system restore.

    Step 1
    Try to start the computer in safe mode, here is the link:
    http://Windows.Microsoft.com/en-us/Windows-Vista/start-your-computer-in-safe-mode

    Step 2
    Once you start the computer in safe mode, try to perform the system restore and check that if it helps, here is the link:
    http://Windows.Microsoft.com/en-us/Windows-Vista/system-restore-frequently-asked-questions

    It will be useful.
    Let us know if you encounter problems under windows in the future. We will be happy to help you.
     
  • Problem with my e-mail address - the text is so low that I can't read.

    only got one problrm with emails, printing is small I can't read

    original title: can't read my emails, printing went small

    Hi Wendy,.

    I think making sure that your browser is not set will be expanded, as this would cause the text to display much more than normal.
    Please follow the instructions in this article:
  • Security problem - no security not defined but not, users can save form

    I created a PDF with Acrobat 9 Pro form. I deliberately chose to "No Security" when I created the form because we want users to be able to download the form, fill in the form with the information, save the form with the information between and then email the form to our Department human resources.

    However, whenever the form is opened with Adobe Reader 8, the user is informed that they cannot save data typed into the form and that their only option is to print the form.

    Is there a step I'm missing to save the form with the data entered as possible?

    Thanks for any help!

    -Brandi

    Is there a step I'm missing to save the form with the data entered as possible?

    Thanks for any help!

    -Brandi

    Yes. After the creation of the form, you must use advanced > enable usage rights in Adobe Reader.

  • View the connections of the server to connect to the Security Server 5.2

    So, I wonder if it is anyway possible to not expose a subnet of office to the DMZ during the deployment of a security server?  I think remember me, there was a way to have the tunnel of security server all traffic through the connection to the server, but for the life of me, I can't seem to understand.

    Even in your previous PoC you should always have allowed some ports (PCoIP, RDP if use you it and the frame channel) from the server security for virtual offices. This has always been the case.

    The role of the Security Server is to protect exposure of desktop to the Internet. It provides a monitoring of protocols of the Internet (for example PCoIP) so make it succeed to check if the traffic is in the name of an authenticated user, and to ensure that if it is valid, it is transmitted over an office whose user is authorized to access. It is important to configure your internal firewall so that Office (PCoIP etc.) protocols can come only security servers. Then you give the required insurance. If such packets only packets UDP PCoIP arrive in your DMZ that are not on behalf of an authenticated user and then they are ignored in the DMZ without ever be passed in your data center. You know that all protocols for virtual desktops have been validated by the Security server.

    The Security server should also communicate with the login server and that's why you should also allow JMS, AJP13, and IPsec through. These should be only to the servers again only from servers to security and connection.

    You can always route the PCoIP packages through a proxy in your data center, but the security required inspection happens before that the Security Server so that eventually they can be thrown into the demilitarized zone.

    Mark

  • RADIUS only on the Security Server?

    We have activated 2-factor by Ray and his excellent work. However now must also use 2-factor on internal connections on computers VDI. Is there a way to make the RADIUS only apply on the Security Server? We only want users outside to connect with Ray...

    I'm not totally it. You say you only want authentication RADIUS to be applied on the connections to the Security server used by remote users and internal users to authenticate with just AD?

    If so, the answer is Yes. Just have 2 servers connection, one for internal users and one for remote users (with a security server). A connection to the server is a standard instance and the other is a replica.

    Simply configure RADIUS server remote access connection.

    If I misunderstood the question, please let me know more information. Thank you.

    Mark

  • How to set the number of books, a user can borrow at a time?

    I'm testing with Adobe Digital Editions ACS4. I am able to borrow only one book at a time. Before you borrow another, I need to return the one I already, if not, I get an error E_LIC_TOO_MANY_LOANS of the ADE. Entry into fulfillment.log of ACS4 looks like:

    December 2, 2009 16:47:21, AdeptServlet of ERROR 008: request error [91.82.28.27]: E_LIC_TOO_MANY_LOANS Http://eBooks.webhop.org:8080/realization/Fulfill urn % 3Auuid % 3A0b257c8b-e1e3-4007 - 95 has 9-80efc2b5e9e1

    Is it possible to increase the number of books, that a user can borrow at a time?

    Thank you.

    This is controlled by the maxloancount for the Distributor

  • Once the Interactive connection: not display last user name has been applied is it possible to reverse the trend. I want a few users to see their user names.

    Once the Interactive connection: not display last user name has been applied is it possible to reverse the trend. I want a few users to see their user names.

    Initially, it was setup for the security but now a few users need to see who's online before.

    Help, please

    Hello

    Thank you for contacting Microsoft Answers.

    You do the following:

    1. click on start.
    2. type: secpol.msc and press ENTER.
    3. go to local security policies / adjustment / security options.
    4. on the right side to find Interactive logon: do not display last user name and change to turn it OFF.

    If the issue is not resolved, answer here.

  • We can share with the Community (related to oracle) document which can be useful for someone... ?

    Dear all,

    We can share with the Community (related to oracle) document which can be useful for someone... ? Is there a specific place, so that it... where, once that we download... our document is checked and published if it is deemed sufficiently credible... ?

    Thank you and best regards,

    Séverine Suresh

    Question has now moved to the space of the feedback from the community.

    The community provides for the possibility for members to upload documents to the content-> spaces of Documents in the workspace of each product (if available).  However, the feature is currently disabled for most members due to problems with spam, so only a few members (most of Oracle employees) have the necessary permissions to do this.

    The admin studying how they can implement something that would allow members to upload documents, etc., which also has some mechanism to prevent spam.

    There is an idea already created for this: allow users to create community Documents

    for the Admin provided details on their current attitude

  • How do I change the security questions?

    How do I change the security questions?

    Hello

    If you set an alternate e-mail address, you can reset your security questions. Follow the instructions here to check if this option is available:

    Otherwise, you will need to contact the Apple Support. The information is available here:

    (I'm afraid that no one here can solve the problem for you.) You don't talk to Apple here - it is a community based on the user).

  • How can I change the security answer?

    How can I change the security answer?

    If you forgot your Apple ID security questions answered - https://support.apple.com/kb/HT201485

    Frequently asked questions about Apple ID - http://support.apple.com/kb/HE37 -> Can I change the answers to security questions of my Apple ID?  -> Yes. You can change responses to security issues that are provided when you initially enroll in your Apple ID go to my Apple (http://appleid.apple.com/) ID and click on manage your account.

    Advice to the user to alarm: some Solutions for forgot security reset issues - https://discussions.apple.com/docs/DOC-4551

    KingPenguin 02/2015 post - https://discussions.apple.com/message/27660375#27660375

    Rescue email address and how to reset Apple ID security issues - http://support.apple.com/kb/ht5312 - "If you don't remember your Apple ID security and answers questions, email backup option provides a way to reset the.» In addition, all future emails related to safety of your Apple ID will send to the email address of relief. »

    January 2014 post about to contact Apple to reset security - https://discussions.apple.com/message/24543247#24543247 and https://discussions.apple.com/message/24671039#24671039 and other related expenses issues, February 2016 - https://discussions.apple.com/message/29465949#29465949

    If none of the above works, contact the support of iTunes at http://www.apple.com/emea/support/itunes/contact/ and follow the instructions to report the problem to the iTunes Store.

  • How can I load the security updates that Belarc suggests?

    HOW CAN I LOAD THE SECURITY UPDATES BELARC SUGGESTS?

    Hello jobtoo,

    You may have already solved this problem, but my suggestion would be to contact Belarc support.

    You can use the link below:
    e-mail: * address email is removed from the privacy *

    http://www.Belarc.com/contact.html

    Thank you!

  • Need to change the e-mail address to which the security of Skype code is sent

    I write the question below on behalf of someone else:

    When I try to sign in to Skype from my laptop (Windows 8), I see the following window will appear:

    "Call us overprotective, but we need to ensure that you can receive a security code if ever you lose access to that account. Where should we send your code? »

    The e-mail address option (that code is sent) below the question isn't my email address, so I can't receive the five-digit code. When I click on the option "More", I'm rerouted to the FAQ which provides no real help.

    How can I get the code sent to my email instead of another?

    Hello

    I'm sorry to know that you are facing trouble signing in Skype, because you have a problem with Microsoft Account where you replace the security information. I suggest that you click on the link below and send the same in the Windows live ID Support.

    http://Windows.Microsoft.com/en-in/Windows-Live/ID-support

  • I forgot my answer to the security question, now I want to change my answer and to change their application asks me for my old answer which I forgot how can I change my answer to my security questions

    I forgot my answer to the security question, now I want to change my answer and to change their application asks me for my old answer which I forgot how can I change my answer to my security questions

    When I had the same problem, I used the solutions here If you have forgotten the answers to the security of your questions - Apple Support Apple ID

  • How to do in the security settings

    Can how I get in the security settings of safari

    Depends on what you mean. Security preferences are located in the preferences panel security & privacy of system preferences. For Safari, open Safari preferences and click on the Security tab.

Maybe you are looking for

  • None of my programs will open or run, cannot run the files downloaded from the internet, either to try to resolve it.

    I am running windows XP Pro and am unable to open any programs at all.  I was uninstalling some programs add and remove applications in Control Panel and I think I deleted a necessary program, file or something because right afterwards none of files

  • I can't activate Microsoft Update in Windows 7.

    My Windows Update (from Control Panel) screen says "you receive updates: for Windows only."  If I click on 'Get updates for other Microsoft products.  «More» I am sent to http://v4.windowsupdate.microsoft.com/en/default.asp with a message that it is

  • Filtering in Cisco ASA using module sfr Web

    Hello I have Cisco ASA 5515-x version 9.2 (2) and I use ASDM version 7.2 (2). I module 5.3.1 LICO of ASA. I want to activate the ASA web filtering feature. Previously, I used the method of expression regex in the SAA to perform url filtering, but it

  • Product key is not valid when you try to reinstall Windows 7

    I bought a hp laptop and it came preloaded with windows 7. I let my uncle use my laptop and tried to install windows 7, even though he was already on my laptop. I have my product key but when I type in it says invalid. Is there anyway I can restore m

  • format the numbers on network ft

    Hello On three different ECM installations on 3 different sites, the number of recipient (SDA) presented by the network on appeal entering is different (as seen in "debug ISDN standard") On UN 2811 / IOS 12.4 (24) T3, the SDA are presented with the a