Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Content Gateway uses one storage domain within the storage cluster to persist meta information about all tenants and storage domains. Although there is no difference between storage domains to in the storage cluster, Content Gateway uses these two distinctions for domains: administrative domain, and tenant storage domain.

  • administrative domainAdministrative Domainrefers to the domain used by Gateway to store meta information used in the management of managing tenants and all other storage domains, including itself, and should only be accessible to cluster administrators. It is not recommended to use the administrative domain to store general-purpose content. Do not interfere with the objects managed by the Gateway.

  • tenant storage domainTenant Storage Domain(or storage domain Storage Domain) refers to the domains that store content that is accessible to normal users and applications. All content within a tenant storage domain is potentially accessible to the users of that domain and there is no special Gateway content within it.

...

Code Block
/opt/caringo/cloudgateway/bin/initgateway
Infonote

Caution

Run once only. This command should be run one time when installing the first Gateway server; it should not run when installing subsequent servers.

Run locally only. Do not run the command in a remote cluster which replicates the administrative domain using a Feed.

A domain named by the adminDomain parameter is created in the storage cluster with the owner set to the value admin@. Without additional action on the part of the cluster administrator, this domain is locked for all access and requires the use of an administrative override to log in to the domain.

SeeĀ Restricting Domain Access for more about access control and administrative override.

Cluster administrators use the Policy and IDSYS documents for the domain and change the ownership by modifying the X-Owner-Meta metadata value if access of the administrative domain needs to be open.

Infonote

Caution

Verify access to the administrative domain is locked or unlocked. Content stored within the administrative domain controls access, policies, and management data for all tenants and storage domains.

The name of the administrative domain must be unique for a set of tenant storage domains and must not be created more than once whether using an SCSP operation or by using the initgateway script. Once an administrative domain or a tenant storage domain has been created, the only proper way to instantiate the domain in another cluster is by using remote replication in Swarm.

See Replicating Domains to Other Clusters.

...