[keycloak-user] EJB Invalid User + Log Out not working

[Firdos Ali]

Hello,

 

I am having a few problems with Keycloak.  Let me first start with the
environment information:

 

Keycloak version: 1.9.0

Keycloak wildfly version: 10.0.0

 

Application wildfly version: 8.0.0

 

Problem 1: EJB error - javax.ejb.EJBAccessException: JBAS013323: Invalid
User

I have followed the documentation by adding the keycloak adapter to the
application wildfly 8.0 and by server.xml has the following:

 

<extensions>
       ..
        <extension module="org.keycloak.keycloak-adapter-subsystem"/>
</extensions>

<profile>
        <subsystem xmlns="urn:jboss:domain:security:1.2">
                ..
            <security-domain name="keycloak">
                    <authentication>
                        <login-module
code="org.keycloak.adapters.jboss.KeycloakLoginModule" flag="required"/>
                    </authentication>
                </security-domain>
            </security-domains>
        </subsystem>
       .
        <subsystem xmlns="urn:jboss:domain:keycloak:1.1"/>
</profile>

MyEJB:
@Stateless

@Local(MyInt.class)

@SecurityDomain("keycloak")
public class MyBean implements MyInt 

       ...

    @PermitAll

    @TransactionAttribute(TransactionAttributeType.REQUIRES_NEW)

    public boolean myMethod(...) throws Exception {

    }

 

At the moment I am not using jboss-ej3.xml as I reference the security
domain in my EJB class.  I added it and it did not help out

 

Stacktrace:

ERROR [org.jboss.as.ejb3.invocation] (default task-13) JBAS014134: EJB
Invocation failed on component MyBean for method public abstract boolean
com.at.ejb.MyInt.myMethod(.) throws java.lang.Exception:
javax.ejb.EJBAccessException: JBAS013323: Invalid User

        at
org.jboss.as.ejb3.security.SecurityContextInterceptor$1.run(SecurityContextI
nterceptor.java:66) [wildfly-ejb3-8.0.0.Final.jar:8.0.0.Final]

        at
org.jboss.as.ejb3.security.SecurityContextInterceptor$1.run(SecurityContextI
nterceptor.java:46) [wildfly-ejb3-8.0.0.Final.jar:8.0.0.Final]

        at
org.jboss.as.ejb3.security.SecurityContextInterceptor.processInvocation(Secu
rityContextInterceptor.java:92) [wildfly-ejb3-8.0.0.Final.jar:8.0.0.Final]

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

        at
org.jboss.as.ejb3.component.interceptors.ShutDownInterceptorFactory$1.proces
sInvocation(ShutDownInterceptorFactory.java:64)
[wildfly-ejb3-8.0.0.Final.jar:8.0.0.Final]

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

        at
org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocatio
n(LoggingInterceptor.java:59) [wildfly-ejb3-8.0.0.Final.jar:8.0.0.Final]

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

        at
org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(Name
spaceContextInterceptor.java:50)

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

        at
org.jboss.as.ejb3.component.interceptors.AdditionalSetupInterceptor.processI
nvocation(AdditionalSetupInterceptor.java:55)
[wildfly-ejb3-8.0.0.Final.jar:8.0.0.Final]

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

        at
org.jboss.invocation.ContextClassLoaderInterceptor.processInvocation(Context
ClassLoaderInterceptor.java:64)

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

        at
org.jboss.invocation.InterceptorContext.run(InterceptorContext.java:326)

        at
org.wildfly.security.manager.WildFlySecurityManager.doChecked(WildFlySecurit
yManager.java:448)

        at
org.jboss.invocation.AccessCheckingInterceptor.processInvocation(AccessCheck
ingInterceptor.java:61)

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

        at
org.jboss.invocation.InterceptorContext.run(InterceptorContext.java:326)

        at
org.jboss.invocation.PrivilegedWithCombinerInterceptor.processInvocation(Pri
vilegedWithCombinerInterceptor.java:80)

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

        at
org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor
.java:61)

        at
org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:185)

        at
org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescriptio
n.java:182)

        at
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:309)

Is there something I am missing from the documentation?  Any thoughts how to
resolve this issue?

Problem 2: Unable to log out a user from keycloak administration console:

After I click "Logout" on the administration console in Keycloak, I see the
following error on the keycloak server:

ERROR [io.undertow.request] (default task-26) UT005023: Exception handling
request to
/auth/admin/realms/affordabletours/sessions/f1e69f90-03fc-453d-a495-225bb0c4
29ab: org.jboss.resteasy.spi.UnhandledException:
java.lang.NoSuchMethodError:
org.apache.http.impl.client.HttpClientBuilder.setConnectionTimeToLive(JLjava
/util/concurrent/TimeUnit;)Lorg/apache/http/impl/client/HttpClientBuilder;
        at
org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(Exceptio
nHandler.java:76)


Best regards,

 <http://www.affordabletours.com/> AffordableTours.com
Firdos Ali
Senior Project Manager
11150 Cash Road
Stafford, TX 77477
Toll Free (800) 935-2620 X181
Direct (281) 269-2681
Fax (281) 269-2691
E-mail:  <mailto:ali at affordabletours.com> ali at affordabletours.com
My Working Hours: Mon - Fri: 09:00AM - 05:00PM CST

NOTICE: This e-mail message, including any attachments, is for the use of
the intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the recipient, please contact the sender by reply
e-mail and destroy all copies of the original message

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160310/8559046e/attachment-0001.html