<div dir="ltr">That&#39;d be nice. Not sure how we would test it though. Especially not how we&#39;d automate testing of it.</div><div class="gmail_extra"><br><div class="gmail_quote">On 17 August 2016 at 06:16, Bill Burke <span dir="ltr">&lt;<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    We should create a domain profile for this EC2 config.<div><div class="h5"><br>
    <br>
    <div>On 8/16/16 9:59 AM, Aikeaguinea wrote:<br>
    </div>
    <blockquote type="cite">
      
      <div>Yes, this gets more complicated than your standard
        installation. AWS doesn&#39;t allow UDP communication in S3, and you
        also need to configure your Infinispan cache to work while
        you&#39;re running in Docker. <br>
      </div>
      <div><br>
      </div>
      <div>There was a thread on this list &quot;Using Keycloak in AWS EC2.
        What are people using? / Infinispan not working&quot; where this was
        discussed; this is from that three describing howI got things
        working:<br>
      </div>
      <div><br>
      </div>
      <div>______________________________<wbr>__________________________</div>
      <div><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">I just got JGroups/Infinispan with
        JDBC_PING working from inside a<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">Docker cluster in ECS on EC2. I use
        JDBC_PING rather than S3_PING, since<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">I need a database anyway and didn&#39;t
        want to have to set up an S3 bucket<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">just for this one purpose. Nicolás, if
        you&#39;re on AWS the default UDP<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">transport for JGroups doesn&#39;t work
        because multicast isn&#39;t supported<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">inside EC2, which may be your problem.<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">Here are the configurations you&#39;d need:<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">1. The JGroups module has to reference
        to the db module. So in<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">jgroups-module.xml I have:<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">  &lt;dependencies&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">    &lt;module
          name=&quot;javax.api&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">    &lt;module
          name=&quot;org.postgresql.jdbc&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">  &lt;/dependencies&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">2. The standalone-ha.xml has a JGroups
        subsystem (with TCP and<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">JDBC_PING) that looks like the
        configuration below; I read certain<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">variables from the environment, but may
        use the Wildfly vault tool for<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">some of them. The external_addr
        property configurations are only needed<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">if you&#39;re inside a Docker container,
        since Wildfly has to read the<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">address of the EC2 instance hosting the
        container to register itself<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">with JGroups. For the initialize_sql
        you can generally use the default,<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">but for Postgres I needed a custom DDL
        because I needed the BYTEA data<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">type which isn&#39;t in the default DDL.<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">&lt;subsystem
          xmlns=&quot;urn:jboss:domain:<wbr>jgroups:4.0&quot;&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">      &lt;channels
          default=&quot;ee&quot;&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">        &lt;channel
          name=&quot;ee&quot; stack=&quot;tcp&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">      &lt;/channels&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif"><br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">      &lt;stacks
          default=&quot;tcp&quot;&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">        &lt;stack
          name=&quot;tcp&quot;&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;transport
          type=&quot;TCP&quot; socket-binding=&quot;jgroups-tcp&quot;&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            &lt;property<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            name=&quot;external_<wbr>addr&quot;&gt;${env.EXTERNAL_HOST_IP}&lt;<wbr>/property&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;/transport&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif"><br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;JDBC_PING&quot;&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            &lt;property<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            name=&quot;connection_<wbr>driver&quot;&gt;org.postgresql.Driver&lt;<wbr>/property&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            &lt;property<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            name=&quot;connection_<wbr>url&quot;&gt;jdbc:postgresql://${env.<wbr>POSTGRES_TCP_ADDR}:${env.<wbr>POSTGRES_TCP_PORT}/${env.<wbr>POSTGRES_DATABASE}&lt;/property&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            &lt;property<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            name=&quot;connection_<wbr>username&quot;&gt;${env.POSTGRES_USER}<wbr>&lt;/property&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            &lt;property<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            name=&quot;connection_<wbr>password&quot;&gt;${env.POSTGRES_<wbr>PASSWORD}&lt;/property&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            &lt;property
          name=&quot;initialize_sql&quot;&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">              CREATE
          TABLE IF NOT EXISTS jgroupsping (<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">                own_addr
          VARCHAR(200) NOT NULL,<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">                cluster_name
          VARCHAR(200) NOT NULL,<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">                ping_data
          BYTEA DEFAULT NULL,<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">                PRIMARY
          KEY (own_addr, cluster_name)<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">              )<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            &lt;/property&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;/protocol&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif"><br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;MERGE3&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;FD_SOCK&quot; socket-binding=&quot;jgroups-tcp-<wbr>fd&quot;&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            &lt;property<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">            name=&quot;external_<wbr>addr&quot;&gt;${env.EXTERNAL_HOST_IP}&lt;<wbr>/property&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;/protocol&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif"><br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;FD&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;VERIFY_SUSPECT&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;pbcast.NAKACK2&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;UNICAST3&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;pbcast.STABLE&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;pbcast.GMS&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;MFC&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">          &lt;protocol
          type=&quot;FRAG2&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">        &lt;/stack&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">      &lt;/stacks&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">    &lt;/subsystem&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">3. If you&#39;re in a Docker container, you
        have to expose the JGroups ports<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">so they are visible from outside the
        container, so in standalone-ha.xml<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">in the socket bindings I have changed
        to the public interface:<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">      &lt;socket-binding
          name=&quot;jgroups-tcp&quot; interface=&quot;public&quot;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">      port=&quot;7600&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">      &lt;socket-binding
          name=&quot;jgroups-tcp-fd&quot; interface=&quot;public&quot;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">      port=&quot;57600&quot;/&gt;<br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">4. For Docker, the startup script needs
        to pass the EXTERNAL_HOST_IP<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">variable. I have a wrapper start script
        that first queries the AWS<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal">instance metadata service at
        169.254.169.254 for the host&#39;s private IP address:<br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><br>
      </div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">export
          EXTERNAL_HOST_IP=$(curl -s</span><span style="font-family:menlo,consolas,monospace,sans-serif"><br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif"><a href="http://169.254.169.254/latest/meta-data/local-ipv4" target="_blank">169.254.169.254/latest/meta-<wbr>data/local-ipv4</a>)</span><span style="font-family:menlo,consolas,monospace,sans-serif"><br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">exec
          $WILDFLY_HOME/bin/standalone.<wbr>sh -c standalone-keycloak-ha.xml</span><span style="font-family:menlo,consolas,monospace,sans-serif"><br>
        </span></div>
      <div style="color:rgb(0,0,0);font-family:-webkit-standard;letter-spacing:normal"><span style="font-family:menlo,consolas,monospace,sans-serif">-<a href="http://Djboss.node.name" target="_blank">Djboss.node.name</a>=$HOSTNAME
          -Djgroups.bind_addr=global -b $HOSTNAME</span><span style="font-family:menlo,consolas,monospace,sans-serif"><br>
        </span></div>
      <div><br>
      </div>
      <div><br>
      </div>
      <div>On Tue, Aug 16, 2016, at 09:01 AM, Haim Vana wrote:<br>
      </div>
      <blockquote type="cite">
        <div>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">Hi,</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">We are trying to set KeyCloak
                1.9.3 with HA on AWS EC2 with docker, the cluster is up
                without errors however the login fails with the below
                error:</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"><b>WARN [org.keycloak.events]
                  (default task-10) type=LOGIN_ERROR, realmId=master,
                  clientId=null, userId=null, ipAddress=172.30.200.171,
                  error=invalid_code</b></span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">we have followed this (<a href="http://lists.jboss.org/pipermail/keycloak-user/2016-February/004940.html" style="text-decoration:underline;color:rgb(5,99,193)" target="_blank">http://lists.jboss.org/<wbr>pipermail/keycloak-user/2016-<wbr>February/004940.html</a>
                ) post but used S3_PING instead of JDBC_PING.</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">It seems that the nodes detect
                each other:</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"><b>INFO
                  [org.infinispan.remoting.<wbr>transport.jgroups.<wbr>JGroupsTransport]
                  (Incoming-2,ee,6dbce1e2a05a) ISPN000094: Received new
                  cluster view for channel keycloak: [6dbce1e2a05a|1]
                  (2) [6dbce1e2a05a, 75f2b2e98cfd]</b></span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">We suspect that the nodes doesn&#39;t
                communicate with each other, when we queried the jboss
                mbean &quot;<b>jboss.as.expr:subsystem=<wbr>jgroups,channel=ee&quot; </b>the
                result was:</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">jgroups,channel=ee =
                [6dbce1e2a05a|1] (2) [6dbce1e2a05a, 75f2b2e98cfd]</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">jgroups,channel=ee 
                receivedMessages = 0</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">jgroups,channel=ee  sentMessages
                = 0</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">And for the second node:</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">jgroups,channel=ee =
                [6dbce1e2a05a|1] (2) [6dbce1e2a05a, 75f2b2e98cfd]</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">jgroups,channel=ee 
                receivedMessages = 0</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">jgroups,channel=ee  sentMessages
                = 5</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">We also verified that the TCP
                 ports 57600 and 7600 are open.</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">Any idea what might cause it ?</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">Here is the relevant
                standalone-ha.xml configuration and below is that
                startup command:</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">&lt;subsystem
                xmlns=&quot;urn:jboss:domain:<wbr>jgroups:4.0&quot;&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">            &lt;channels
                default=&quot;ee&quot;&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                &lt;channel
                name=&quot;ee&quot; stack=&quot;tcp&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">            &lt;/channels&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">            &lt;stacks&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                &lt;stack
                name=&quot;udp&quot;&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;transport
                type=&quot;UDP&quot; socket-binding=&quot;jgroups-udp&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;PING&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;MERGE3&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;FD_SOCK&quot; socket-binding=&quot;jgroups-udp-<wbr>fd&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;FD_ALL&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;VERIFY_SUSPECT&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;pbcast.NAKACK2&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;UNICAST3&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;pbcast.STABLE&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;pbcast.GMS&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;UFC&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;MFC&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;FRAG2&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                &lt;/stack&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                &lt;stack
                name=&quot;tcp&quot;&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;transport
                type=&quot;TCP&quot; socket-binding=&quot;jgroups-tcp&quot;&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                       
                &lt;property
                name=&quot;external_addr&quot;&gt;200.129.<wbr>4.189&lt;/property&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                   
                &lt;/transport&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;S3_PING&quot;&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                        
                       &lt;property
                name=&quot;access_key&quot;&gt;<wbr>AAAAAAAAAAAAAA&lt;/property&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                              <wbr> 
                &lt;property
                name=&quot;secret_access_key&quot;&gt;<wbr>BBBBBBBBBBBBBB&lt;/property&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                              <wbr> 
                &lt;property
                name=&quot;location&quot;&gt;<wbr>CCCCCCCCCCCCCCCCCCCC&lt;/<wbr>property&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                &lt;/protocol&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;MERGE3&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;FD_SOCK&quot; socket-binding=&quot;jgroups-tcp-<wbr>fd&quot;&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                       
                &lt;property
                name=&quot;external_addr&quot;&gt;200.129.<wbr>4.189&lt;/property&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                   
                &lt;/protocol&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;FD&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;VERIFY_SUSPECT&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;pbcast.NAKACK2&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;UNICAST3&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;pbcast.STABLE&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;pbcast.GMS&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;MFC&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                    &lt;protocol
                type=&quot;FRAG2&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">                &lt;/stack&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">            &lt;/stacks&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">        &lt;/subsystem&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">        &lt;socket-binding
                name=&quot;jgroups-tcp&quot; interface=&quot;public&quot; port=&quot;7600&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">        &lt;socket-binding
                name=&quot;jgroups-tcp-fd&quot; interface=&quot;public&quot;
                port=&quot;57600&quot;/&gt;</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">And we start the server using the
                below (<span style="color:black"><span style="font-family:&#39;Courier New&#39;"><span style="font-size:11.5pt">$INTERNAL_HOST_IP
                      is the container internal IP address):</span></span></span></span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="background-color:white"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"><span style="color:black"><span style="font-family:&#39;Courier New&#39;"><span style="font-size:11.5pt">standalone.sh
                        -c=standalone-ha.xml -b=$INTERNAL_HOST_IP
                        -bmanagement=$INTERNAL_HOST_IP
                        -bprivate=$INTERNAL_HOST_IP</span></span></span></span></span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">Any help will be appreciated.</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">Thanks,</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt">Haim.</span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
          <p style="margin:0in 0in 0.0001pt"><span style="font-family:Calibri,sans-serif"><span style="font-size:11pt"> </span></span><br>
          </p>
        </div>
        <div>The information contained in this message is proprietary to
          the sender, protected from disclosure, and may be privileged.
          The information is intended to be conveyed only to the
          designated recipient(s) of the message. If the reader of this
          message is not the intended recipient, you are hereby notified
          that any dissemination, use, distribution or copying of this
          communication is strictly prohibited and may be unlawful. If
          you have received this communication in error, please notify
          us immediately by replying to the message and deleting it from
          your computer. Thank you.<br>
        </div>
        <div><u>______________________________<wbr>_________________</u><br>
        </div>
        <div>keycloak-user mailing list<br>
        </div>
        <div><a href="mailto:keycloak-user@lists.jboss.org" style="text-decoration:underline;color:rgb(5,99,193)" target="_blank">keycloak-user@lists.jboss.org</a><br>
        </div>
        <div><a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" style="text-decoration:underline;color:rgb(5,99,193)" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/keycloak-user</a><br>
        </div>
      </blockquote>
      <div><br>
      </div>
      <div>
        <div>--<br>
        </div>
        <div>  Aikeaguinea<br>
        </div>
        <div>  <a href="mailto:aikeaguinea@xsmail.com" target="_blank">aikeaguinea@xsmail.com</a><br>
        </div>
        <div><br>
        </div>
      </div>
      <div><br>
      </div>
      <pre>-- 
<a href="http://www.fastmail.com" target="_blank">http://www.fastmail.com</a> - Same, same, but different...
</pre>
      <br>
      <fieldset></fieldset>
      <br>
      <pre>______________________________<wbr>_________________
keycloak-user mailing list
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/keycloak-user</a></pre>
    </blockquote>
    <br>
  </div></div></div>

<br>______________________________<wbr>_________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>