[keycloak-dev] Application clustering Issue with Keycloak 1.1.0_Final

[Lakshmi Narayana VADALI (lvadali)]

Hi Marek,

We Tested with our Application standalone mode and clustered but still facing the same issue.

Can you please help us in taking this forward.

We are getting below exception client side

org.apache.http.client.ClientProtocolException
      at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:186)
      at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:84)
      at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:109)
      at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57)
      at org.cisco.oauth.test.OAuthClient.sendGetRequest(OAuthClient.java:241)
      at org.cisco.oauth.test.OAuthClient.accessResource(OAuthClient.java:383)
      at org.cisco.oauth.test.OAuthClient.hitResource(OAuthClient.java:436)
      at org.cisco.oauth.test.OAuthClient.hitResource(OAuthClient.java:456)
      at org.cisco.oauth.test.OAuthClient.main(OAuthClient.java:503)
Caused by: org.apache.http.client.CircularRedirectException: Circular redirect to 'https://10.78.216.143:10001/peach-ecmg/ecmg/get'
      at org.apache.http.impl.client.DefaultRedirectStrategy.getLocationURI(DefaultRedirectStrategy.java:175)
      at org.apache.http.impl.client.DefaultRedirectStrategy.getRedirect(DefaultRedirectStrategy.java:219)
      at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:120)
      at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
      ... 8 more

Thanks,
Lakshmi Narayana V

From: Marek Posolda [mailto:mposolda at redhat.com]
Sent: Tuesday, March 10, 2015 1:50 PM
To: Lakshmi Narayana VADALI (lvadali); keycloak-dev at lists.jboss.org
Subject: Re: [keycloak-dev] Application clustering Issue with Keycloak 1.1.0_Final

Can you please try to test cluster with your application in standalone mode? Just curious if it's bug specific just to domain mode...

Thanks,
Marek

On 9.3.2015 11:09, Lakshmi Narayana VADALI (lvadali) wrote:
Hi Marek,

We are thinking may be session replication for keycloak application alone ( in domain mode) is not working because of below reasons

1.       The application you provided  is working fine in our environment . (Conclusion:: session replication working for other applications)

2.       If only one node in the cluster(domain mode) is up its  working. (Conclusion:: keycloak setup is fine in my environment , as session replication is not needed)

Please let us know if you think otherwise.

Thanks,
Lakshmi Narayana V



From: Marek Posolda [mailto:mposolda at redhat.com]
Sent: Friday, March 06, 2015 1:47 PM
To: Lakshmi Narayana VADALI (lvadali); keycloak-dev at lists.jboss.org<mailto:keycloak-dev at lists.jboss.org>
Subject: Re: [keycloak-dev] Application clustering Issue with Keycloak 1.1.0_Final

Hi Lakshmi,

EAP 6.3.0 should work, but I've tested with "standalone" mode so far, not domain mode yet.. Not sure if it's keycloak bug specific to domain or just some issue in your environment.

Could you try to test if HTTP session replication works for you in domain mode with some simple servlet application (not keycloak authentication enabled) ? If you don't have any, take a look at this for example: https://github.com/keycloak/keycloak/blob/master/testsuite/integration/src/test/java/org/keycloak/testsuite/adapter/SessionServlet.java

Thanks,
Marek

On 5.3.2015 17:18, Lakshmi Narayana VADALI (lvadali) wrote:
Hi Marek,

Yes we have "<distributable />" tag in web.xml.

We are using EAP 6.3.0-1.

Thanks,
Lakshmi Narayana V

From: Marek Posolda [mailto:mposolda at redhat.com]
Sent: Thursday, March 05, 2015 8:55 PM
To: Lakshmi Narayana VADALI (lvadali); keycloak-dev at lists.jboss.org<mailto:keycloak-dev at lists.jboss.org>
Subject: Re: [keycloak-dev] Application clustering Issue with Keycloak 1.1.0_Final

Hi,

do you have "<distributable />" tag in web.xml? Do you have Wildfly or EAP6 for your application and which version?

Thanks,
Marek

On 5.3.2015 14:12, Lakshmi Narayana VADALI (lvadali) wrote:
Hi,

We are using keycloak 1.1.0_Final. We are trying Application clustering using jboss (domain mode). We Tested clustering setup (with cluster-demo application provided by jboss) which is working. But With  Latest keycloak-adapter looks like keycloak-sessions are not replicated. We are always redirected to Keycloak when the request lands new node of cluster.

We are able to make our  setup work if we use cookie store, But we wanted to use Session store rather than cookie store.


When we bringup our nodes we are able to receive below logs

INFO  [org.infinispan.remoting.transport.jgroups.JGroupsTransport] (Incoming-10,shared=udp)

ISPN000094: Received new cluster view: [node1/web|1] (2) [node1/web, node2/web]
Thanks,
Lakshmi Narayana V






_______________________________________________

keycloak-dev mailing list

keycloak-dev at lists.jboss.org<mailto:keycloak-dev at lists.jboss.org>

https://lists.jboss.org/mailman/listinfo/keycloak-dev



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20150330/33be3368/attachment-0001.html