<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#FFFFFF">
I've sent a PR for this:<br>
<a class="moz-txt-link-freetext" href="https://github.com/keycloak/keycloak/pull/811">https://github.com/keycloak/keycloak/pull/811</a><br>
<br>
It's a pretty big change in the way the Auth Server is started when
the KeyCloak subsystem is used. The WAR is no longer dropped into
the standalone/deployments directory. This is especially helpful
for domain deployments, but it makes standalone cleaner as well. It
will also be important for Feature Pack installation.<br>
<br>
The main difference you will see right away with this PR is that the
appliance dist now uses the subsystem to launch the Auth Server.<br>
<br>
Here are some notes about how everything turned out. Next, I'll
update the documentation if there is no major rework that needs to
be done after the PR is reviewed.<br>
<br>
<ul>
<li>The WAR for the auth server now lives in
modules/.../keycloak-wildfly-subsystem/main/auth-server. By
default, it is unexploded. If you want it to be exploded you
can unzip it into that same directory and set the
"auth-server-exploded" property in module.xml.</li>
<li>A new Auth Server is declared in standalone.xml/domain.xml.
You can have more than one Auth Server in the same WildFly
instance. </li>
<li><subsystem xmlns="urn:jboss:domain:keycloak:1.0"><br>
<auth-server name="main-auth-server"><br>
<enabled>true</enabled><br>
<web-context>auth</web-context><br>
</auth-server><br>
<br>
</li>
<li>The "enabled" attribute can be toggled at runtime to make the
auth server undeploy/redeploy.</li>
<li>If you have more than one auth-server, the web-context must be
unique.</li>
<li>In a domain environment, all specified Auth Server deployments
are propagated to all servers using that profile. The same is
true for overlays uploaded through the new CLI operations.<br>
</li>
<li>There are two new CLI operations that act on an auth-server.
They are "add-provider" and "update-server-config". Currently,
you can only execute these operations in the latest version of
CLI GUI. We should discuss if we need to add support in plain
CLI. The long term goal would be to add this functionality to
the Keycloak Admin Console.</li>
<li>"add-provider" adds a provider jar to an auth-server</li>
<li>"update-server-config" overlays the keycloak-server.json for
an auth-server.</li>
<li>If a keycloak-server.json file is found in
standalone/configuration directory, all auth-server instances
will still use it regardless of any update-server-config
operations.<br>
</li>
<li>EAP6 does not yet support all this. We should discuss whether
or not this functionality should be backported.<br>
</li>
</ul>
</body>
</html>