-
Bug
-
Resolution: Done
-
Critical
-
11.0.0.Beta7
ropalka I believe this is caused by the MSC refactoring.
Steps, in the default host.xml for domain mode.
1. Define the following security realm: -
<security-realms> <security-realm name="ldap_security_realm"> <server-identities> <ssl> <keystore path="generated.keystore" relative-to="jboss.server.config.dir" keystore-password="password" alias="server" key-password="password" generate-self-signed-certificate-host="localhost"/> </ssl> </server-identities> <authentication> <ldap connection="testLdap" base-dn="dc=test,dc=sbc,dc=com" recursive="true"> <username-filter attribute="samaccountname"/> </ldap> </authentication> </security-realm>
2. Define the following outbound connection: -
<outbound-connections> <ldap name="testLdap" url="ldap://localhost:636" search-dn="CN=mxxxxxx,OU=GenericID,OU=testUsers,DC=testServices,DC=test,DC=com" search-credential="passowrd" /> </outbound-connections>
3. Update the management interfaces to: -
<management-interfaces> <http-interface security-realm="ldap_security_realm"> <http-upgrade enabled="true"/> <socket interface="management" port="${jboss.management.http.port:9990}"/> </http-interface> </management-interfaces>
The server fails to boot with just the following error: -
[Host Controller] 17:56:40,052 FATAL [org.jboss.as.host.controller] (Controller Boot Thread) WFLYHC0034: Host Controller boot has failed in an unrecoverable manner; exiting. See previous messages for details.
If the management interface is then updated to reference the ManagementRealm instead the error is now: -
[Host Controller] 18:01:48,595 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("add") failed - address: ([ [Host Controller] ("host" => "master"), [Host Controller] ("core-service" => "management"), [Host Controller] ("security-realm" => "ldap_security_realm") [Host Controller] ]) - failure description: { [Host Controller] "WFLYCTL0412: Required services that are not installed:" => ["jboss.server.path.\"jboss.server.config.dir\""], [Host Controller] "WFLYCTL0180: Services with missing/unavailable dependencies" => ["org.wildfly.core.management.security.realm.ldap_security_realm.key-manager is missing [jboss.server.path.\"jboss.server.config.dir\"]"] [Host Controller] }
This error is expected as the realm defined in step 1 referenced an invalid path.
I believe the error reporting should come from this method: -
org.jboss.as.controller.ServiceVerificationHelper.execute(OperationContext, ModelNode)
However something seems to have changes with the MSC migration.
This was recently encountered debugging the bug report in https://issues.redhat.com/browse/WFCORE-4820, if you see an error "Multiple CallbackHandlerServices for the same mechanism (PLAIN)" that has been covered by WFCORE-4820.
- is cloned by
-
JBEAP-18601 (7.3.z) WFCORE-4827 - Errors Missing on Invalid Configuration
-
- Closed
-
-
JBEAP-21329 (7.4.z) WFCORE-4827 - Errors Missing on Invalid Configuration
-
- Closed
-
[WFCORE-4827] Errors Missing on Invalid Configuration
Link |
New:
This issue is cloned by |
Link |
Original:
This issue clones |
Link |
New:
This issue clones |
Link |
Original:
This issue cloned to |
Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
Workflow | Original: GIT Pull Request workflow [ 13139872 ] | New: GIT Pull Request workflow v1.0 [ 14258425 ] |
Fix Version/s | New: 16.0.0.Final [ 12358650 ] |
Link |
New:
This issue cloned to |
Fix Version/s | New: 16.0.0.Beta1 [ 12354378 ] | |
Resolution | New: Done [ 1 ] | |
Status | Original: Pull Request Sent [ 10011 ] | New: Resolved [ 5 ] |
Git Pull Request | New: https://github.com/wildfly/wildfly-core/pull/4499 | |
Status | Original: Open [ 1 ] | New: Pull Request Sent [ 10011 ] |
Assignee | Original: Richard Opalka [ ropalka ] | New: Bartosz Spyrko-Smietanko [ spyrkob ] |
Labels | New: domain-mode |
Link |
New:
This issue is cloned by |
I found there's one more problem - as soon as the FAILURE_DESCRIPTION is set in the first failing ServiceVerificationHelper, the rollback flag will be set in https://github.com/wildfly/wildfly-core/blob/master/controller/src/main/java/org/jboss/as/controller/AbstractOperationContext.java#L1020 which will prevent any further ServiceVerificationHelpers from running.
Maybe in this case SVH could attach something like DEFERED_ROLLBACK flag to the context and if it's present, canContinueProcessing() would allow the VERIFY stage to finish?