FS#67108 - [keycloak] Permissions missing a path [systemd] and folder has wrong owner

Attached to Project: Community Packages
Opened by Obadja Hauser (xBitSec) - Thursday, 25 June 2020, 15:56 GMT
Last edited by Sven-Hendrik Haase (Svenstaro) - Friday, 26 June 2020, 21:09 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Sven-Hendrik Haase (Svenstaro)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
The deployment scanner from jboss will not installing additional package, if the file placed into '/opt/keycloak/standalone/deployments'.
You will find one of this error logs into the keycloak server.log file: WFLYDS0039, WFLYDS0043 or WFLYDS0042.

Solution:
Fix folder permission: `chown -R keycloak:keycloak /opt/keycloak/standalone/deployments`
Add the path `/opt/keycloak/standalone/deployments` to the directive 'ReadWritePaths' in your service file '/usr/lib/systemd/system/keycloak.service'.
Reload daemon.
Restart keycloak.

Additional info:
* package version(s)
10.0.1, 10.0.2

Steps to reproduce:
Install package and start keycloak. The message should appear into the log file.
INFO [org.jboss.as.server.deployment.scanner] (MSC service thread 1-1) WFLYDS0013: Started FileSystemDeploymentService for directory /opt/keycloak/standalone/deployments
WARN [org.jboss.as.server.deployment.scanner] (DeploymentScanner-threads - 1) WFLYDS0043: Deployment directory scan failed due to inaccessible deployment directory: /opt/keycloak/standalone/deployments
This task depends upon

Closed by  Sven-Hendrik Haase (Svenstaro)
Friday, 26 June 2020, 21:09 GMT
Reason for closing:  Implemented

Loading...