]
Michael Schnell edited comment on ELY-1705 at 4/21/19 1:12 AM:
---------------------------------------------------------------
Any chance to get this done? Since November this has been postponed from release to
release. For someone who has in-depth knowledge of Wildfly this should not be too hard to
solve. Unfortunately my knowledge is insufficient here...
was (Author: fuinorg):
Any chance to get this done? Since November this has been postponed from release to
release. For someone who has in-depth knowledge of Wildfly this should be too hard to
solve. Unfortunately my knowledge is insufficient here...
Running "Protecting Wildfly Adminstration Console With
Keycloak" leads to WFLYCTL0412 (Required services not installed:
org.wildfly.security.http-server-mechanism-factory.wildfly-management)
----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Key: ELY-1705
URL:
https://issues.jboss.org/browse/ELY-1705
Project: WildFly Elytron
Issue Type: Bug
Environment: * wildfly-14.0.1.Final
* keycloak-oidc/keycloak-wildfly-adapter-dist-4.5.0.Final.tar.gz
* keycloak-saml-wildfly-adapter-dist-4.5.0.Final.tar.gz
* Attached "protect-wildfly-mgmt-services.cli"
Reporter: Michael Schnell
Assignee: Darran Lofthouse
Priority: Major
Fix For: 1.9.0.CR4
Attachments: protect-wildfly-mgmt-services.cli
Following the instuctions [Protecting Wildfly Adminstration Console With
Keycloak|https://docs.jboss.org/author/display/WFLY/Protecting+Wildfly+Ad...]
leads to an error in CLI script "protect-wildfly-mgmt-services.cli".
Execution of the following line:
{code}
/subsystem=elytron/http-authentication-factory=keycloak-mgmt-http-authentication:add(security-domain=KeycloakDomain,http-server-mechanism-factory=wildfly-management,mechanism-configurations=[{mechanism-name=KEYCLOAK,mechanism-realm-configurations=[{realm-name=KeycloakOIDCRealm,realm-mapper=keycloak-oidc-realm-mapper}]}])
{code}
Leads to error:
{code:json}
{
"outcome" => "failed",
"failure-description" => {
"WFLYCTL0412: Required services that are not installed:" =>
["org.wildfly.security.http-server-mechanism-factory.wildfly-management"],
"WFLYCTL0180: Services with missing/unavailable dependencies" =>
["org.wildfly.security.http-authentication-factory.keycloak-mgmt-http-authentication
is missing [org.wildfly.security.http-server-mechanism-factory.wildfly-management]"]
},
"rolled-back" => true
}
{code}
Steps to reproduce:
1. Download [Wildfly
14.0.1.Final|http://download.jboss.org/wildfly/14.0.1.Final/wildfly-14.0....] and
extract to disk
2. Change to Wildfly directory
3. curl -L
https://downloads.jboss.org/keycloak/4.5.0.Final/adapters/keycloak-oidc/k...
| tar zx
4. curl -L
https://downloads.jboss.org/keycloak/4.5.0.Final/adapters/saml/keycloak-s...
| tar zx
5. Execute: bin/jboss-cli.sh --file="bin/adapter-elytron-install-offline.cli"
6. Copy attached "protect-wildfly-mgmt-services.cli" to Wildfly's
"bin" directory
7. Execute: bin/jboss-cli.sh --file="bin/protect-wildfly-mgmt-services.cli"
Result: Fails with above error.