[keycloak-user] Slave in Domain mode saying "missing/unavailable dependencies org.wildfly.undertow.listener.https is missing [org.wildfly.core.management.security.realm.ssl-realm]"
JTK
jonesy at sydow.org
Wed Nov 20 09:14:55 EST 2019
Hello,
I have a successful dev system stood-up with a 2 node cluster using AWS and
working 100% using Active Directory as the back-end via LDAPS.
We are moving it to production and automation as much of the process as
possible via Cloud Formation, bootstraps with S3 buckets and scripts. So
it's not just a fork lift.
We are on the home stretch with the Master up and running in Domain mode
using TCCPING (We might go to Native S3 Ping) and when I bring up one
Slave, it launches all services and clusters up, but port https errors out
so port 443 does not start up and it looks like 8080 is missing along with
7600, yet it is clustering, per the logs on the Master. Here is the output
of running services.
tcp 0 0 127.0.0.1:42363 0.0.0.0:* LISTEN
31686/java
tcp 0 0 10.122.160.37:3456 0.0.0.0:* LISTEN
31701/java
tcp 0 0 0.0.0.0:8259 0.0.0.0:* LISTEN
31782/java
tcp 0 0 127.0.0.1:7850 0.0.0.0:* LISTEN
31782/java
tcp 0 0 0.0.0.0:8330 0.0.0.0:* LISTEN
31782/java
tcp 0 0 127.0.0.1:38507 0.0.0.0:* LISTEN
31782/java
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
1413/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
1397/master
tcp6 0 0 :::22 :::* LISTEN
1413/sshd
tcp6 0 0 ::1:25 :::* LISTEN
1397/master
Here is what is used to launch the Slave:
/opt/keycloak/bin/domain.sh --host-config=host-slave.xml
-Djboss.bind.address=0.0.0.0 -Djboss.bind.address.management=10.122.160.37
-Djboss.bind.address:10.122.160.37
-Djboss.bind.address.private:10.122.160.37 -Djboss.https.port=443
-Djboss.domain.master.address=10.122.160.147 -Djboss.tx.node.id
<http://djboss.tx.node.id/>=prod-slave-a -Djboss.node.name
<http://djboss.node.name/>=prod-slave-a
-Djava.security.egd=file:/dev/./urandom
This is the actual script which is used to launch it. I've manually added
the IPs and Hostname of the Slave above.
#!/bin/bash
myip=$(ip addr show eth0 | grep -Po 'inet \K[\d.]+')
echo $myip
echo $HOSTNAME
/opt/keycloak/bin/domain.sh --host-config=host-slave.xml
-Djboss.bind.address=0.0.0.0 -Djboss.bind.address.management=${myip}
-Djboss.bind.address=${myip} -Djboss.bind.address.private=${myip}
-Djboss.https.port=443 -Djboss.domain.master.address=10.122.160.147 -
Djboss.tx.node.id <http://djboss.tx.node.id/>=${hostname} -Djboss.node.name
<http://djboss.node.name/>=${hostname}
-Djava.security.egd=file:/dev/./urandom &
The Master Address above is hardcoded for the time being until we work out
getting that automated as well.
Below is the error where is says there are missing dependencies. This is
the exact same configuration for our dev environment. That information is
only found in the domain.xml configuration file.
Here is the actual start-up from the debug logs:
[Server:prod-slave-a] 14:47:05,630 DEBUG [org.jboss.as.config] (MSC service
thread 1-1) VM Arguments: -D[Server:prod-slave-a] -D[pcid:1223106776]
-Xms64m -Xmx512m -XX:MetaspaceSize=96m -XX:MaxMetaspaceSize=256m
-Djava.awt.headless=true -Djava.net.preferIPv4Stack=true
-Djava.security.egd=file:/dev/./urandom -Djboss.bind.address=0.0.0.0
-Djboss.bind.address.management=10.122.160.37
-Djboss.bind.address.private:10.122.160.37=true
-Djboss.bind.address:10.122.160.37=true
-Djboss.cluster.tcp.initial_hosts=10.122.160.147[7600],10.122.160.37[7600]
-Djboss.domain.master.address=10.122.160.147 -Djboss.home.dir=/opt/keycloak
-Djboss.https.port=443 -Djboss.modules.system.pkgs=org.jboss.byteman -
Djboss.node.name <http://djboss.node.name/>=prod-slave-a -Djboss.tx.node.id
<http://djboss.tx.node.id/>=prod-slave-a
-Djboss.server.log.dir=/opt/keycloak/domain/servers/prod-slave-a/log
-Djboss.server.temp.dir=/opt/keycloak/domain/servers/prod-slave-a/tmp
-Djboss.server.data.dir=/opt/keycloak/domain/servers/prod-slave-a/data
-Dlogging.configuration=file:/opt/keycloak/domain/servers/prod-slave-a/data/logging.properties
[Server:prod-slave-a] 14:34:26,278 INFO [org.wildfly.extension.undertow]
(ServerService Thread Pool -- 50) WFLYUT0021: Registered web context:
'/auth' for server 'default-server'
[Server:prod-slave-a] 14:34:26,290 ERROR
[org.jboss.as.controller.management-operation] (Controller Boot Thread)
WFLYCTL0013: Operation ("add") failed - address: ([
[Server:prod-slave-a] ("subsystem" => "undertow"),
[Server:prod-slave-a] ("server" => "default-server"),
[Server:prod-slave-a] ("https-listener" => "https")
[Server:prod-slave-a] ]) - failure description: {
[Server:prod-slave-a] "WFLYCTL0412: Required services that are not
installed:" => ["org.wildfly.core.management.security.realm.ssl-realm"],
[Server:prod-slave-a] "WFLYCTL0180: Services with missing/unavailable
dependencies" => ["org.wildfly.undertow.listener.https is missing
[org.wildfly.core.management.security.realm.ssl-realm]"]
[Server:prod-slave-a] }
[Server:prod-slave-a] 14:34:26,358 INFO [org.jboss.as.server]
(ServerService Thread Pool -- 40) WFLYSRV0010: Deployed
"keycloak-server.war" (runtime-name : "keycloak-server.war")
[Server:prod-slave-a] 14:34:26,364 INFO [org.jboss.as.controller]
(Controller Boot Thread) WFLYCTL0183: Service status report
[Server:prod--slave-a] WFLYCTL0184: New missing/unsatisfied dependencies:
[Server:prod-slave-a] service
org.wildfly.core.management.security.realm.ssl-realm (missing) dependents:
[service org.wildfly.undertow.listener.https]
[Server:prod-slave-a]
[Server:prod-slave-a] 14:34:26,402 INFO [org.jboss.as.server] (Controller
Boot Thread) WFLYSRV0212: Resuming server
[Server:prod-slave-a] 14:34:26,407 ERROR [org.jboss.as] (Controller Boot
Thread) WFLYSRV0026: Keycloak 7.0.1 (WildFly Core 9.0.2.Final) started
(with errors) in 16346ms - Started 656 of 962 services (1 services failed
or missing dependencies, 690 services are lazy, passive or on-demand)
Some of the output from the Master showing that it is clustering:
tail -n 50 -f /opt/keycloak/domain/servers/prod-a/log/server.log
2019-11-19 14:46:32,379 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN100001: Node prod-sentinel-slave-a left the
cluster
2019-11-19 14:46:32,379 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN000094: Received new cluster view for channel
ejb: [true|16] (1) [true]
2019-11-19 14:46:32,379 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN100001: Node prod-sentinel-slave-a left the
cluster
2019-11-19 14:47:10,566 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN000094: Received new cluster view for channel
ejb: [true|17] (2) [true, prod-slave-a]
2019-11-19 14:47:10,567 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN100000: Node prod-sentinel-slave-a joined the
cluster
2019-11-19 14:47:10,567 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN000094: Received new cluster view for channel
ejb: [true|17] (2) [true, prod-slave-a]
2019-11-19 14:47:10,567 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN100000: Node prod-sentinel-slave-a joined the
cluster
2019-11-19 14:47:10,567 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN000094: Received new cluster view for channel
ejb: [true|17] (2) [true, prod-slave-a]
2019-11-19 14:47:10,567 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN100000: Node prod-sentinel-slave-a joined the
cluster
2019-11-19 14:47:10,568 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN000094: Received new cluster view for channel
ejb: [true|17] (2) [true, prod-slave-a]
2019-11-19 14:47:10,568 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN100000: Node prod-sentinel-slave-a joined the
cluster
2019-11-19 14:47:10,568 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN000094: Received new cluster view for channel
ejb: [true|17] (2) [true, prod-slave-a]
2019-11-19 14:47:10,568 INFO [org.infinispan.CLUSTER]
(thread-303,ejb,true) ISPN100000: Node prod-sentinel-slave-a joined the
cluster
Any help would be appreciated. I never did encounter this error in dev,
although we had numerous ones.
Thanks
>
More information about the keycloak-user
mailing list