<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Do you care about usability at all? Not everything can fit into
nice little boxes all the time. This is going to be extremely
confusing for users. I ran into it myself as I thought the jboss
add-user.sh script was overwritten by our distribution script by
mistake. *OF COURSE* we should have a separate add-user.sh script.
Even when, hopefully, JBoss can delegate to Keycloak in maybe 7.1.
If we are going to leverage the JBoss platform, and this means the
JBoss documentation too, every management function that exists in
JBoss should be available in Keycloak and *WORK THE SAME WAY*. If
we don't change this, we're going to get a ton of support questions
that say: "Why doesn't add-user.sh work?" <br>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 4/23/2016 1:29 AM, Stian Thorgersen
wrote:<br>
</div>
<blockquote
cite="mid:CAJgngAdKXKOsm60uXM9D5E3TYhhEgOE7ZXbgC6Fgxb1UnV=y0Q@mail.gmail.com"
type="cite">
<p dir="ltr">In the future we need to secure the underlying
WildFly with rhsso. In which case our add-user will add users
for both Keycloak and WildFly/EAP.</p>
<p dir="ltr">IMO there's going to be confusion until the above is
solved no matter what we do. We'll need to document this
whichever way we do it. Options are stay with what we have or
rename our script. My vote goes to keep as is and document it.
Then hopefully by 7.1 we can secure the WildFly bits so the
problem goes away. With the other option (rename ours) there
will be a problem once WildFly bits are secured by Keycloak as
now the wf add-user script should no longer be used and
completely removed at which point we should then rename it back.
So in the long run sticking with how it is today is ideal. It's
also way to late making changes now. BTW this has been around
for months.</p>
<div class="gmail_quote">On 22 Apr 2016 22:14, "Bill Burke" <<a
moz-do-not-send="true" href="mailto:bburke@redhat.com"><a class="moz-txt-link-abbreviated" href="mailto:bburke@redhat.com">bburke@redhat.com</a></a>>
wrote:<br type="attribution">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
On 4/22/2016 3:57 PM, Marek Posolda wrote:<br>
> That's the question...<br>
><br>
> For server distribution, we also have our stuff (
keycloak subsystem,<br>
> datasource, infinispan etc) directly declared in
"standalone.xml". On<br>
> the other hand, for overlay distribution, we don't want
to directly<br>
> update default "standalone.xml", so we are adding our own<br>
> "standalone-keycloak.xml". Isn't it quite similar thing?<br>
><br>
<br>
Product will not have the overlay distribution.<br>
<br>
> We can do the same for overlay and server distribution,
so never edit<br>
> default wildfly files ( standalone.xml , add-user.sh),
but always use<br>
> our own versions with "-keycloak" suffix. Advantage is
more<br>
> consistent. However people will need to always start
keycloak server<br>
> with "./standalone.sh -c standalone-keycloak.xml" then.
Doesn't it<br>
> sucks from the usability perspective?<br>
><br>
<br>
The overlay exists because we can't distribute EAP within
community.<br>
Keycloak should be run as a separate server, so, IMO,
-keycloak.xml<br>
files should go away and overwrite standalone.xml,
standalone-ha.xml and<br>
domain.xml<br>
<br>
> I honestly don't know what's the best way regarding
usability. AFAIK<br>
> this was decided on mailing lists couple of months ago,
but don't<br>
> remember the exact threads...:/<br>
><br>
<br>
I'm pretty adamant about this. There will be a huge amount of
confusion<br>
if we don't make this separation. Wildfly/JBoss and Keycloak
are hard<br>
enough to configure as it is.<br>
<br>
<br>
--<br>
Bill Burke<br>
JBoss, a division of Red Hat<br>
<a moz-do-not-send="true" href="http://bill.burkecentral.com"
rel="noreferrer" target="_blank">http://bill.burkecentral.com</a><br>
<br>
_______________________________________________<br>
keycloak-dev mailing list<br>
<a moz-do-not-send="true"
href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>
<a moz-do-not-send="true"
href="https://lists.jboss.org/mailman/listinfo/keycloak-dev"
rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br>
</blockquote>
</div>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Bill Burke
JBoss, a division of Red Hat
<a class="moz-txt-link-freetext" href="http://bill.burkecentral.com">http://bill.burkecentral.com</a></pre>
</body>
</html>