<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>Figured out the issue. Udp communication was not allowed. So switched to "tcp". Updated the Jira 979 with the settings for tcp. Please update your documentation so that it can benefit others <br><br>Sent from my iPhone</div><div><br>On Jan 19, 2015, at 11:02 AM, Marek Posolda <<a href="mailto:mposolda@redhat.com">mposolda@redhat.com</a>> wrote:<br><br></div><blockquote type="cite"><div>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<div class="moz-cite-prefix">oops, sorry. The server-info page was
added recently and it's not in 1.1.Beta2. It would be available in
1.1.0.Final (or alternative is to build keycloak from master).
Anyway, if you enable debug logging for
org.keycloak.services.DefaultKeycloakSessionFactory you should see
in server.log which providers are used and hence you should see
'infinispan' for realmCache, userCache and userSessions.<br>
<br>
We also recently added "Troubleshooting" page to clustering docs,
which might help you to figure out what ports are needed
<a class="moz-txt-link-freetext" href="https://github.com/keycloak/keycloak/blob/master/docbook/reference/en/en-US/modules/clustering.xml#L222">https://github.com/keycloak/keycloak/blob/master/docbook/reference/en/en-US/modules/clustering.xml#L222</a>
. You can try to temporarily disable firewall and see if it helps
with cluster communication. Then you can figure more accurately
which ports you need to open.<br>
<br>
But generally we rely on infinispan/jgroups for cluster, so more
info about cluster config and switch between udp/tcp should be
available in their docs.<br>
<br>
Marek<br>
<br>
On 19.1.2015 13:32, prab rrrr wrote:<br>
</div>
<blockquote cite="mid:711201839.1935217.1421670761731.JavaMail.yahoo@jws100141.mail.ne1.yahoo.com" type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial,
Lucida Grande, sans-serif;font-size:16px">
<div><span></span></div>
<div id="yui_3_16_0_1_1421668961517_2548" dir="ltr">Hi Marek -
Thanks for the below pointers. I believe my setup is good but
probably the udp communication is blocked in my organization
as I do not see the specific log you mentioned. Here are some
of the log messages I see:</div>
<div id="yui_3_16_0_1_1421668961517_2596" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1421668961517_2597" dir="ltr">Starting
JGroups channel</div>
<div id="yui_3_16_0_1_1421668961517_2598" dir="ltr">Received new
cluster view ... node 1 (no information about node2)<br>
</div>
<div id="yui_3_16_0_1_1421668961517_2754" dir="ltr">I will look
at JGroups documentation to have the communication setup using
tcp on a different port. Hopefully that would address the
problem.</div>
<div id="yui_3_16_0_1_1421668961517_2764" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1421668961517_2765" dir="ltr">I tried out
the url you provided to verify the setup but it doesn't work -
checked on two different setups. fyi - I am using 1.1Beta2
version.</div>
<div id="yui_3_16_0_1_1421668961517_2766" dir="ltr"><br>
</div>
<div id="yui_3_16_0_1_1421668961517_2767" dir="ltr">Regards,</div>
<div dir="ltr">Raghu</div>
<div id="yui_3_16_0_1_1421668961517_2535" style="font-family:
HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida
Grande, sans-serif; font-size: 16px;">
<div id="yui_3_16_0_1_1421668961517_2534" style="font-family:
HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida
Grande, sans-serif; font-size: 16px;">
<div id="yui_3_16_0_1_1421668961517_2533" dir="ltr">
<hr id="yui_3_16_0_1_1421668961517_2739" size="1"> <font id="yui_3_16_0_1_1421668961517_2532" face="Arial" size="2"> <b><span style="font-weight: bold;">From:</span></b>
Marek Posolda <a class="moz-txt-link-rfc2396E" href="mailto:mposolda@redhat.com"><mposolda@redhat.com></a><br>
<b><span style="font-weight: bold;">To:</span></b> prab
rrrr <a class="moz-txt-link-rfc2396E" href="mailto:prabhalar@yahoo.com"><prabhalar@yahoo.com></a>; Keycloak-user
<a class="moz-txt-link-rfc2396E" href="mailto:keycloak-user@lists.jboss.org"><keycloak-user@lists.jboss.org></a> <br>
<b><span style="font-weight: bold;">Sent:</span></b>
Monday, January 19, 2015 6:09 AM<br>
<b><span style="font-weight: bold;">Subject:</span></b>
Re: [keycloak-user] Keycloak Clustering Issues<br>
</font> </div>
<div class="y_msg_container" id="yui_3_16_0_1_1421668961517_2560"><br>
<div id="yiv2569714331">
<div id="yui_3_16_0_1_1421668961517_2559">
<div class="yiv2569714331moz-cite-prefix" id="yui_3_16_0_1_1421668961517_2558">That's quite
strange. I've just tested same scenario and works
fine for me. If you do any change on user, the user
is invalidated from cache on node-1 and this change
about invalidation should be propagated to node-2 .
As long as you have shared database, node-2 should
then retrieve newest data about shared user from
database. <br clear="none">
<br clear="none">
I would suggest to try this:<br clear="none">
<br clear="none">
* Make sure that your infinispan cluster is
correctly set. You can check it by seeing the
message similar to this in server.log of both nodes:
node_1 | 10:49:50,344 INFO
[org.infinispan.remoting.transport.jgroups.JGroupsTransport]
(Incoming-10,shared=udp) ISPN000094: Received new
cluster view: [node1/keycloak|1] (2)
[node1/keycloak, node2/keycloak]<br clear="none">
<br clear="none">
* Make sure that you enable "infinispan" as provider
of realmCache and userCache and configured
connectionsInfinispan . When you open admin console
on any node like: <a moz-do-not-send="true" class="yiv2569714331moz-txt-link-freetext" id="yui_3_16_0_1_1421668961517_2599" onclick="return
theMainWindow.showLinkWarning(this)" href="http://localhost:8080/auth/admin/master/console/index.html#/server-info" target="_blank" rel="nofollow" shape="rect">http://node-1:8080/auth/admin/master/console/index.html#/server-info</a><br clear="none">
<br clear="none">
you should see:<br clear="none">
connectionsInfinispan default<br clear="none">
realmCache infinispan<br clear="none">
userCache infinispan<br clear="none">
userSessions infinispan<br clear="none">
<br clear="none">
* If still seeing issues, you can try to enable
trace logging for
"org.keycloak.models.cache.infinispan" category.<br clear="none">
<br clear="none">
Hope this helps,<br clear="none">
Marek<br clear="none">
<br clear="none">
<br clear="none">
On 17.1.2015 04:32, prab rrrr wrote:<br clear="none">
</div>
<blockquote id="yui_3_16_0_1_1421668961517_2713" type="cite">
<div class="qtdSeparateBR"><br>
<br>
</div>
<div class="yiv2569714331yqt9566109160" id="yiv2569714331yqt12189">
<div id="yui_3_16_0_1_1421668961517_2712" style="color: rgb(0, 0, 0); font-family:
HelveticaNeue, Helvetica Neue, Helvetica, Arial,
Lucida Grande, sans-serif; font-size: 16px;
background-color: rgb(255, 255, 255);">
<div id="yiv2569714331yui_3_16_0_1_1421464230104_2309" dir="ltr"> Anyone noticed any issues with
Infinispan? I saw a weird issue. After setting
up a cluster with two nodes, made some changes
on node-1 (created a user and changed the
first name). While the user appeared on
node-2, the change to the first name didn't
make it. Restarting the node-2 didn't help
either. Wondering if Infinispan is preventing
all the changes to be picked up from database.
If so, what settings would ensure that the
data is consistent between the nodes?</div>
<div id="yiv2569714331yui_3_16_0_1_1421464230104_2333" dir="ltr"><br clear="none">
</div>
<div id="yiv2569714331yui_3_16_0_1_1421464230104_2334" dir="ltr">Thanks,</div>
<div id="yiv2569714331yui_3_16_0_1_1421464230104_2335" dir="ltr">Raghu</div>
</div>
</div>
<br clear="none">
<fieldset class="yiv2569714331mimeAttachmentHeader"></fieldset>
<br clear="none">
<pre>_______________________________________________
keycloak-user mailing list
<a moz-do-not-send="true" class="yiv2569714331moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org" target="_blank" rel="nofollow" shape="rect" ymailto="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a moz-do-not-send="true" class="yiv2569714331moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank" rel="nofollow" shape="rect">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br clear="none">
</div>
</div>
<br>
<br>
</div>
</div>
</div>
</div>
</blockquote>
<br>
</div></blockquote></body></html>