<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:-webkit-standard;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.font
{mso-style-name:font;}
span.size
{mso-style-name:size;}
span.colour
{mso-style-name:colour;}
span.highlight
{mso-style-name:highlight;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle24
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Thanks, the below is the exact post we were using as a reference.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Any other idea what might cause it ? or what to search in the logs or JMX ?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Aikeaguinea [mailto:aikeaguinea@xsmail.com]
<br>
<b>Sent:</b> Tuesday, August 16, 2016 4:59 PM<br>
<b>To:</b> Haim Vana <haimv@perfectomobile.com>; keycloak-user@lists.jboss.org<br>
<b>Subject:</b> Re: [keycloak-user] KeyCloak HA on AWS EC2 with docker - cluster is up but login fails<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Yes, this gets more complicated than your standard installation. AWS doesn't allow UDP communication in S3, and you also need to configure your Infinispan cache to work while you're running in Docker. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">There was a thread on this list "Using Keycloak in AWS EC2. What are people using? / Infinispan not working" where this was discussed; this is from that three describing howI got things working:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">________________________________________________________<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">I just got JGroups/Infinispan with JDBC_PING working from inside a<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">Docker cluster in ECS on EC2. I use JDBC_PING rather than S3_PING, since<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">I need a database anyway and didn't want to have to set up an S3 bucket<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">just for this one purpose. Nicolás, if you're on AWS the default UDP<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">transport for JGroups doesn't work because multicast isn't supported<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">inside EC2, which may be your problem.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">Here are the configurations you'd need:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">1. The JGroups module has to reference to the db module. So in<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">jgroups-module.xml I have:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <dependencies></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <module name="javax.api"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <module name="org.postgresql.jdbc"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </dependencies></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">2. The standalone-ha.xml has a JGroups subsystem (with TCP and<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">JDBC_PING) that looks like the configuration below; I read certain<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">variables from the environment, but may use the Wildfly vault tool for<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">some of them. The external_addr property configurations are only needed<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">if you're inside a Docker container, since Wildfly has to read the<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">address of the EC2 instance hosting the container to register itself<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">with JGroups. For the initialize_sql you can generally use the default,<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">but for Postgres I needed a custom DDL because I needed the BYTEA data<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">type which isn't in the default DDL.<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"><subsystem xmlns="urn:jboss:domain:jgroups:4.0"></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <channels default="ee"></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <channel name="ee" stack="tcp"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </channels></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <stacks default="tcp"></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <stack name="tcp"></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <transport type="TCP" socket-binding="jgroups-tcp"></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <property</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> name="external_addr">${env.EXTERNAL_HOST_IP}</property></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </transport></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="JDBC_PING"></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <property</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> name="connection_driver">org.postgresql.Driver</property></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <property</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> name="connection_url">jdbc:postgresql://${env.POSTGRES_TCP_ADDR}:${env.POSTGRES_TCP_PORT}/${env.POSTGRES_DATABASE}</property></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <property</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> name="connection_username">${env.POSTGRES_USER}</property></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <property</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> name="connection_password">${env.POSTGRES_PASSWORD}</property></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <property name="initialize_sql"></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> CREATE TABLE IF NOT EXISTS jgroupsping (</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> own_addr VARCHAR(200) NOT NULL,</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> cluster_name VARCHAR(200) NOT NULL,</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> ping_data BYTEA DEFAULT NULL,</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> PRIMARY KEY (own_addr, cluster_name)</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> )</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </property></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </protocol></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="MERGE3"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="FD_SOCK" socket-binding="jgroups-tcp-fd"></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <property</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> name="external_addr">${env.EXTERNAL_HOST_IP}</property></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </protocol></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="FD"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="VERIFY_SUSPECT"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="pbcast.NAKACK2"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="UNICAST3"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="pbcast.STABLE"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="pbcast.GMS"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="MFC"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <protocol type="FRAG2"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </stack></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </stacks></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> </subsystem></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">3. If you're in a Docker container, you have to expose the JGroups ports<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">so they are visible from outside the container, so in standalone-ha.xml<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">in the socket bindings I have changed to the public interface:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <socket-binding name="jgroups-tcp" interface="public"</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> port="7600"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> <socket-binding name="jgroups-tcp-fd" interface="public"</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black"> port="57600"/></span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">4. For Docker, the startup script needs to pass the EXTERNAL_HOST_IP<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">variable. I have a wrapper start script that first queries the AWS<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black">instance metadata service at 169.254.169.254 for the host's private IP address:<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:"-webkit-standard",serif;color:black"><o:p> </o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black">export EXTERNAL_HOST_IP=$(curl -s</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black">169.254.169.254/latest/meta-data/local-ipv4)</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black">exec $WILDFLY_HOME/bin/standalone.sh -c standalone-keycloak-ha.xml</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span class="font"><span style="font-family:Consolas;color:black">-Djboss.node.name=$HOSTNAME -Djgroups.bind_addr=global -b $HOSTNAME</span></span><span style="font-family:"-webkit-standard",serif;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">On Tue, Aug 16, 2016, at 09:01 AM, Haim Vana wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Hi,</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">We are trying to set KeyCloak 1.9.3 with HA on AWS EC2 with docker, the cluster is up without errors however the login fails with
the below error:</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">WARN [org.keycloak.events] (default task-10) type=LOGIN_ERROR, realmId=master, clientId=null, userId=null, ipAddress=172.30.200.171,
error=invalid_code</span></b></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">we have followed this (<a href="https://emea01.safelinks.protection.outlook.com/?url=http%3a%2f%2flists.jboss.org%2fpipermail%2fkeycloak-user%2f2016-February%2f004940.html&data=01%7c01%7chaimv%40perfectomobile.com%7cfdfb32069e4647fa9d9308d3c5dd7f6f%7cceb4c662d6994e7da0bd272619a46977%7c1&sdata=Qfqh1zMdVGYCoDKw6fweSKtX5MG3h0wl33JFtYDmzvA%3d"><span style="color:#0563C1">http://lists.jboss.org/pipermail/keycloak-user/2016-February/004940.html</span></a>
) post but used S3_PING instead of JDBC_PING.</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">It seems that the nodes detect each other:</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">INFO [org.infinispan.remoting.transport.jgroups.JGroupsTransport] (Incoming-2,ee,6dbce1e2a05a) ISPN000094: Received new cluster
view for channel keycloak: [6dbce1e2a05a|1] (2) [6dbce1e2a05a, 75f2b2e98cfd]</span></b></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">We suspect that the nodes doesn't communicate with each other, when we queried the jboss mbean "<b>jboss.as.expr:subsystem=jgroups,channel=ee"
</b>the result was:</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">jgroups,channel=ee = [6dbce1e2a05a|1] (2) [6dbce1e2a05a, 75f2b2e98cfd]</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">jgroups,channel=ee receivedMessages = 0</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">jgroups,channel=ee sentMessages = 0</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">And for the second node:</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">jgroups,channel=ee = [6dbce1e2a05a|1] (2) [6dbce1e2a05a, 75f2b2e98cfd]</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">jgroups,channel=ee receivedMessages = 0</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">jgroups,channel=ee sentMessages = 5</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">We also verified that the TCP ports 57600 and 7600 are open.</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Any idea what might cause it ?</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Here is the relevant standalone-ha.xml configuration and below is that startup command:</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"><subsystem xmlns="urn:jboss:domain:jgroups:4.0"></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <channels default="ee"></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <channel name="ee" stack="tcp"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </channels></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <stacks></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <stack name="udp"></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <transport type="UDP" socket-binding="jgroups-udp"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="PING"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="MERGE3"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="FD_SOCK" socket-binding="jgroups-udp-fd"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="FD_ALL"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="VERIFY_SUSPECT"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="pbcast.NAKACK2"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="UNICAST3"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="pbcast.STABLE"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="pbcast.GMS"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="UFC"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="MFC"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="FRAG2"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </stack></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <stack name="tcp"></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <transport type="TCP" socket-binding="jgroups-tcp"></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <property name="external_addr">200.129.4.189</property></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </transport></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="S3_PING"></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <property name="access_key">AAAAAAAAAAAAAA</property></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <property name="secret_access_key">BBBBBBBBBBBBBB</property></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <property name="location">CCCCCCCCCCCCCCCCCCCC</property></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </protocol></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="MERGE3"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="FD_SOCK" socket-binding="jgroups-tcp-fd"></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <property name="external_addr">200.129.4.189</property></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </protocol></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="FD"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="VERIFY_SUSPECT"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="pbcast.NAKACK2"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="UNICAST3"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="pbcast.STABLE"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="pbcast.GMS"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="MFC"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <protocol type="FRAG2"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </stack></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </stacks></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </subsystem></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <socket-binding name="jgroups-tcp" interface="public" port="7600"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> <socket-binding name="jgroups-tcp-fd" interface="public" port="57600"/></span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">And we start the server using the below (</span></span><span class="size"><span style="font-size:11.5pt;font-family:"Courier New";color:black">$INTERNAL_HOST_IP
is the container internal IP address):</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.5pt;font-family:"Courier New";color:black;background:white">standalone.sh -c=standalone-ha.xml -b=$INTERNAL_HOST_IP -bmanagement=$INTERNAL_HOST_IP -bprivate=$INTERNAL_HOST_IP</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Any help will be appreciated.</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Thanks,</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">Haim.</span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
<p style="margin:0in;margin-bottom:.0001pt"><span class="size"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> </span></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">The information contained in this message is proprietary to the sender, protected from disclosure, and may be privileged. The information is intended to be conveyed only to the designated recipient(s) of the message. If the reader of this
message is not the intended recipient, you are hereby notified that any dissemination, use, distribution or copying of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately
by replying to the message and deleting it from your computer. Thank you.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><u>_______________________________________________</u><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">keycloak-user mailing list<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="mailto:keycloak-user@lists.jboss.org"><span style="color:#0563C1">keycloak-user@lists.jboss.org</span></a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="https://emea01.safelinks.protection.outlook.com/?url=https%3a%2f%2flists.jboss.org%2fmailman%2flistinfo%2fkeycloak-user&data=01%7c01%7chaimv%40perfectomobile.com%7cfdfb32069e4647fa9d9308d3c5dd7f6f%7cceb4c662d6994e7da0bd272619a46977%7c1&sdata=4HJT%2bfld%2bfvDf2moOzm6coVt9NvNwAGWVtU9TBPgMZY%3d"><span style="color:#0563C1">https://lists.jboss.org/mailman/listinfo/keycloak-user</span></a><o:p></o:p></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div id="sig3995191">
<div>
<p class="MsoNormal">--<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> Aikeaguinea<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <a href="mailto:aikeaguinea@xsmail.com">aikeaguinea@xsmail.com</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<pre><o:p> </o:p></pre>
<pre>-- <o:p></o:p></pre>
<pre><a href="http://www.fastmail.com">http://www.fastmail.com</a> - Same, same, but different...<o:p></o:p></pre>
</div>
The information contained in this message is proprietary to the sender, protected from disclosure, and may be privileged. The information is intended to be conveyed only to the designated recipient(s) of the message. If the reader of this message is not the
intended recipient, you are hereby notified that any dissemination, use, distribution or copying of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to
the message and deleting it from your computer. Thank you.
</body>
</html>