Keycloak server overlay installation only contains Keycloak server support, and accompanying keycloak-standalone.xml only contains server configuration. What you need to secure your web app in the same container is Keycloak adapter download for WF9 to get the necessary adapter modules (that's the 'client' part that talks to the server). Then you also need to add: <extension module="org.keycloak.keycloak-adapter-subsystem"/> and <subsystem xmlns="urn:jboss:domain:keycloak:1.1"/> to standalone.xml On Sep 26, 2015 8:58 AM, "Hristo Stoyanov" <hr.stoyanov(a)peruncs.com&gt; wrote: > Hi all > I am getting the below message with KeyCloak 1.5.0/WF9.0.1 overlay > installation. My configuration file looks exactly the same as the stock > one, e.g: > > <extensions> > ... > <extension module="org.keycloak.keycloak-server-subsystem"/> > ... > </extensions> > ... > > <profile> > ... > <subsystem xmlns="urn:jboss:domain:keycloak-server:1.1"> > <web-context>auth</web-context> > </subsystem> > </profile> > > The module jars are properly put in the WF folders > > My web.xml also seems right too: > ========================================= > <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee" > xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" > xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee > http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd" > version="3.1"> > > <!-- Default page to serve --> > <welcome-file-list> > <welcome-file>index.jsp</welcome-file> > </welcome-file-list> > > <!-- This error page rule responds with the GWT Host page for > pushstate Errai Navigation URLs --> > <error-page> > <error-code>404</error-code> > <location>/</location> > </error-page> > > > <!-- Erray Keycloak security --> > <filter> > <filter-name>ErraiLoginRedirectFilter</filter-name> > <init-param> > <param-name>redirectLocation</param-name> > <param-value>/index_draft.jsp</param-value> > </init-param> > </filter> > > <!-- JAX-RS configuration--> > <servlet-mapping> > <servlet-name>javax.ws.rs.core.Application</servlet-name> > <url-pattern>/rest/*</url-pattern> > </servlet-mapping> > > <filter-mapping> > <filter-name>ErraiUserCookieFilter</filter-name> > <url-pattern>/index_draft.jsp</url-pattern> > </filter-mapping> > > <filter-mapping> > <filter-name>ErraiLoginRedirectFilter</filter-name> > <url-pattern>/app-login</url-pattern> > </filter-mapping> > > <security-constraint> > <web-resource-collection> > <web-resource-name>Login</web-resource-name> > <url-pattern>/app-login</url-pattern> > </web-resource-collection> > <auth-constraint> > <role-name>*</role-name> > </auth-constraint> > </security-constraint> > > <login-config> > <auth-method>KEYCLOAK</auth-method> > <realm-name>whatever</realm-name> > </login-config> > > <security-role> > <role-name>user</role-name> > </security-role> > > <security-role> > <role-name>admin</role-name> > </security-role> > > </web-app> > > I can access the KC admin console and configure realms/users/roles no > problem in the WF 9.0.1 server.* I am out of ideas of what could be > causing it. Any hints? Thanks* > > ============================= > 11:47:54,444 ERROR [org.jboss.msc.service.fail] (ServerService Thread > Pool -- 78) MSC000001: Failed to start service > jboss.undertow.deployment.default-server.de > fault-host./draft: org.jboss.msc.service.StartException in service > jboss.undertow.deployment.default-server.default-host./draft: > java.lang.RuntimeException: jav > a.lang.RuntimeException: UT010039: Unknown authentication mechanism > KEYCLOAK > at > org.wildfly.extension.undertow.deployment.UndertowDeploymentService$1.run(UndertowDeploymentService.java:85) > at java.util.concurrent.Executors$RunnableAdapter.call(Unknown > Source) > at java.util.concurrent.FutureTask.run(Unknown Source) > at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown > Source) > at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown > Source) > at java.lang.Thread.run(Unknown Source) > at org.jboss.threads.JBossThread.run(JBossThread.java:320) > Caused by: java.lang.RuntimeException: java.lang.RuntimeException: > UT010039: Unknown authentication mechanism KEYCLOAK > at > io.undertow.servlet.core.DeploymentManagerImpl.deploy(DeploymentManagerImpl.java:224) > at > org.wildfly.extension.undertow.deployment.UndertowDeploymentService.startContext(UndertowDeploymentService.java:100) > at > org.wildfly.extension.undertow.deployment.UndertowDeploymentService$1.run(UndertowDeploymentService.java:82) > ... 6 more > Caused by: java.lang.RuntimeException: UT010039: Unknown authentication > mechanism KEYCLOAK > at > io.undertow.servlet.core.DeploymentManagerImpl.setupSecurityHandlers(DeploymentManagerImpl.java:326) > at > io.undertow.servlet.core.DeploymentManagerImpl.deploy(DeploymentManagerImpl.java:200) > ... 8 more > > 11:47:54,471 ERROR [org.jboss.as.controller.management-operation] > (management-handler-thread - 2) WFLYCTL0013: Operation ("deploy") failed - > address: ([("deploy > ment" => "draft.war")]) - failure description: {"WFLYCTL0080: Failed > services" => > {"jboss.undertow.deployment.default-server.default-host./draft" => > "org.jboss. > msc.service.StartException in service > jboss.undertow.deployment.default-server.default-host./draft: > java.lang.RuntimeException: java.lang.RuntimeException: UT01 > 0039: Unknown authentication mechanism KEYCLOAK > Caused by: java.lang.RuntimeException: java.lang.RuntimeException: > UT010039: Unknown authentication mechanism KEYCLOAK > Caused by: java.lang.RuntimeException: UT010039: Unknown > authentication mechanism KEYCLOAK"}} > 11:47:54,478 ERROR [org.jboss.as.server] (management-handler-thread - 2) > WFLYSRV0021: Deploy of deployment "draft.war" was rolled back with the > following failur > e message: > {"WFLYCTL0080: Failed services" => > {"jboss.undertow.deployment.default-server.default-host./draft" => > "org.jboss.msc.service.StartException in service jboss.und > ertow.deployment.default-server.default-host./draft: > java.lang.RuntimeException: java.lang.RuntimeException: UT010039: Unknown > authentication mechanism KEYCLOAK > > Caused by: java.lang.RuntimeException: java.lang.RuntimeException: > UT010039: Unknown authentication mechanism KEYCLOAK > Caused by: java.lang.RuntimeException: UT010039: Unknown > authentication mechanism KEYCLOAK"}} > 11:47:54,488 INFO [org.jboss.as.jpa] (ServerService Thread Pool -- 79) > WFLYJPA0011: Stopping Persistence Unit (phase 2 of 2) Service > 'draft.war#s4g' > > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user >