One of our applications needs high level of security and activation of the application requires passwords from two parties. The application itself is sitting inside the production network with absolutely no access over the browser. It is a servlet based application and tomcat is the container.
As of now, we use ssh tunneling to activate these applications (one by one). Once activated, we will kill the tunnel thereby cutting off access.
The problem is with regards to scaling up or scaling down and deployments. Assuming we have 4 to 6 servers, it becomes a daunting task to deploy.
Are there any graceful solutions that exist for such a problem? Is there any better way to do the split password setup? Currently, we have two screens each with a form asking for a password and a third screen to attempt activation.
