topic Re: Relocation of alf_data in Alfresco Archive

Relocation of alf_data

javadeep — Thu, 15 Oct 2009 08:38:33 GMT

I am using Alfresco 3 Stable labs version .Can I have alf_data in a different server than the one in which Alfresco is running .Say I have installed Alfresco in Server A . I want alf_data to be created in Server B .How can I do that ?

Re: Relocation of alf_data

mrogers — Thu, 15 Oct 2009 09:00:12 GMT

You would use your O.S. to mount the remote filesystem of Server B. The actual commands to use depends on your O.S.

Re: Relocation of alf_data

javadeep — Thu, 15 Oct 2009 10:54:48 GMT

Thanks mrogers for the input.

I have done the same with mounting the remote NFS share (RHEL 5.2) under alf_data. But by doing this I am exposing the store to the DMZ, as my Alfresco server is at the DMZ. But is there a possibility that we can specify the 'dir.root' parameter in custom-repository.properties pointing to the remote sever directory ?

Thanks for the help.

Re: Relocation of alf_data

gronfelt — Thu, 15 Oct 2009 12:31:48 GMT

I doubt what you wan't to do is possible, at least without some major rewriting of Alfresco, because you would have to utilize some sort of remote access protocol, instead of just accessing a local filesystem.

But do you have to place your Alfresco server in the DMZ? If you put an Apache proxy in front of Alfresco you could put that in the DMZ and place the Alfresco machine in the trusted zone and then you would only have to open up for the AJP service.

Re: Relocation of alf_data

javadeep — Tue, 20 Oct 2009 06:44:24 GMT

Thanks gronfelt .

Actually I have one central office where the Alfresco servers reside . I want the zonal offices to accesss the repository through internet .
My architecture is somewhat like this .

                                                                           Request from Internet
                                                                                    |
                                                                                    |
                                                                                    |
                                                                                   \/
                                                         =======================================
                                                        |   Web Server Where Alfresco will be installed |      ( DMZ )
                                                         ========================================
                                                                                  |
                                                                                  |
                                        =====================Firewall ===============================

                                               R        = ===================================
                                               E        |                        Server A                        |              ( MZ)
                                               P        |                                                             |
                                               O       |     (where alf_data must be created )      |
                                               S         ====================================
                                               I
                                               T          =======================
                                               O        | Database     Server         |
                                               R        ========================
                                               Y

My aim is to keep the repository inside the MZ and the services in the DMZ so that the client can be accessed directly from the zonal offices .
The repository should reside inside the DMZ for security reasons . I do not want to expose my repository .

   Please advise as to how to achieve this .

Re: Relocation of alf_data

norgan — Tue, 20 Oct 2009 07:45:47 GMT

Hi,
what is the use of positioning the servers outside the DMZ. If your firewall blocks everything but the alfresco address, a direct attack is only possible on alfresco server. To attack the filesystem or the database, you have to
a) hack your firewall - game over
b) or hack the alfresco server.

In either case, once the bad guys are on the alfresco server, they have access to the database and filesystem anyway, even using "alfresco system rights", which would theoratically allow to hack the alfresco server and use the information stored in the DB like audit traces, version control, userrights settings …

The only reason would be that inside applications are using the fileserver & DBMS server as well and you do not want to expose other data. If you have a HUGE DBMS server, thats fine, but Alfresco can deal with that. But regarding a file server, I would think about splitting them up anyways for both operational security and maintenance issues.

Norgan