[keycloak-dev] WildFly subsystem and demo

[Bill Burke]

On 2/18/2014 10:47 AM, Stan Silvert wrote:
> On 2/18/2014 9:45 AM, Bill Burke wrote:
>>
>> On 2/18/2014 7:44 AM, Stan Silvert wrote:
>>> On 2/18/2014 7:16 AM, Stian Thorgersen wrote:
>>>> I've just tried out deploying the demo manually using the WildFly subsystem. It's very cool and I really like how the WildFly subsystem has made things so much simpler. Some comments though on my "experience" trying this out.
>>>>
>>>> 1. Having to edit standalone.xml to add secure-deployment requires restarting the server. In installation tab we could have an additional option that lists the jboss-cli command to add this at runtime
>>> Yes, it's usually easier and more accurate to run a CLI script instead
>>> of editing standalone.xml by hand.  Using CLI also allows you to make
>>> the update remotely when you might not have access to the remote file
>>> system.
>>>
>> Stan.  I actually kinda (not wholeheartedly) disagree.  To run the CLI
>> requires setting up a local user to administrate the server.  Its
>> actually easier to cut, paste, and restart, IMO.
> If you are local then CLI does not require setting up a user.  Web
> console requires it, but CLI does not.
>
> If you are remote then I'm sure you agree that CLI is better since it is
> that much harder to edit a remote file.
>

I just can't see (yet) anybody securing a system remotely.  Even in the 
Openshift case, its a real pain to do anything with a subsystem remotely 
as you have to do port mapping to expose the admin HTTP interface, and 
also set up a admin user (which I don't think can be done without 
hardcoding initial credentials).

> Granted, there is more work to do in this area to make it even easier.
> One thing you could do is create a CLI script along with a *.sh or *.bat
> file to launch it.  Tell the user to save it to JBOSS_HOME/bin.  Then
> you can update the server quickly and accurately with a single click.

Or, they could just cut and paste the XML from the admin console to 
standalone.xml...which is, still...IMO...faster, simpler, and easier?


-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com