[jboss-jira] [JBoss JIRA] (WFCORE-4152) HC cannot connect to DC after lost connect with error "WFLYCTL0332: Permission denied\"

[Yeray Borges (Jira)]

     [ https://issues.jboss.org/browse/WFCORE-4152?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Yeray Borges moved JBEAP-15592 to WFCORE-4152:
----------------------------------------------

           Project: WildFly Core  (was: JBoss Enterprise Application Platform)
               Key: WFCORE-4152  (was: JBEAP-15592)
          Workflow: GIT Pull Request workflow   (was: CDW with loose statuses v1)
       Component/s: Security
                        (was: Security)
    Target Release:   (was: 7.backlog.GA)


> HC cannot connect to DC after lost connect with error "WFLYCTL0332: Permission denied\"
> ---------------------------------------------------------------------------------------
>
>                 Key: WFCORE-4152
>                 URL: https://issues.jboss.org/browse/WFCORE-4152
>             Project: WildFly Core
>          Issue Type: Bug
>          Components: Security
>         Environment: -- EAP 7.1.2 Domain mode
>            Reporter: Yeray Borges
>            Assignee: Yeray Borges
>            Priority: Major
>
> Customer has domain mode, they have the following enabled
> - RBAC
> - Management realm with ssl and ldap
> When HC is disconnected from the DC due to bad GC performance, it then cannot connect to the DC with the following errors
> 2018-08-15 04:30:19,035 WARN  [org.jboss.as.host.controller] (management task-3) WFLYHC0015: Connection to remote host-controller closed. Trying to reconnect.
> 2018-08-15 04:30:19,036 INFO  [org.jboss.as.host.controller] (Host Controller Service Threads - 149) WFLYHC0150: Trying to reconnect to master host controller.
> 2018-08-15 04:30:21,006 ERROR [org.jboss.as.host.controller] (Host Controller Service Threads - 151) WFLYHC0143: Failed to apply domain-wide configuration from master host controller. Operation outcome: failed. Failure description "WFLYCTL0313: Unauthorized to execute operation 'server-set-reload-required' for resource '[]' -- \"WFLYCTL0332: Permission denied\""
> due to this , We are not able to restart any JVMs in this domain. The only way we could recover was to restart all DC/HC & JVMs. I have collected the logs and config files for DC/HC/JVM and I am uploading it to the case. Please review and let us know what is the root cause of this issue and what can be done to prevent it. 
> There is a management operation is requires reload in the log.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)