deployment error for dcm4che-arc-light from docker-compose

1,569 views
Skip to first unread message

Mamisoa Andriantafika

unread,
Jul 9, 2017, 7:08:27 PM7/9/17
to dcm4che
Hi,

Using the docker-compose files for dcm4che-arc-light, I get a 500 error (Internal Server Error) trying to access UI.

Checking server.log gives:

2017-07-09 23:00:57,170 ERROR [org.keycloak.adapters.AdapterDeploymentContext] (default task-5) request scheme: http ssl required
2017-07-09 23:00:57,171 ERROR [io.undertow.request] (default task-5) UT005023: Exception handling request to /dcm4chee-arc/ui2/: java.lang.RuntimeException: Can't resolve relative url from adapter config.
    at org.keycloak.adapters.AdapterDeploymentContext.getBaseBuilder(AdapterDeploymentContext.java:459)
    at org.keycloak.adapters.AdapterDeploymentContext.resolveUrls(AdapterDeploymentContext.java:107)
    at org.keycloak.adapters.AdapterDeploymentContext.resolveDeployment(AdapterDeploymentContext.java:94)
    at org.keycloak.adapters.PreAuthActionsHandler.preflightCors(PreAuthActionsHandler.java:107)
    at org.keycloak.adapters.PreAuthActionsHandler.handleRequest(PreAuthActionsHandler.java:79)
    at org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:68)
    at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
    at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
    at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
    at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
    at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
    at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
    at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
    at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
    at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
    at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
    at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java.lang.Thread.run(Thread.java:745)

I am actually unable to go to keycloak admin-console as it requires ssl which seems not to be set in docker-compose project.

Any ideas?

Mamisoa

Gunter Zeilinger

unread,
Jul 10, 2017, 2:41:08 AM7/10/17
to dcm...@googlegroups.com
You can change the value of Java Adapter Configuration parameter:
ssl-required

Ensures that all communication to and from the Keycloak server is over HTTPS. In production this should be set to all. This is OPTIONAL. The default value is external meaning that HTTPS is required by default for external requests. Valid values are 'all', 'external' and 'none'.

by ENV SSL_REQUIRED (e.g.: REQUIRED=none). It also sets the corresponded Keycloak ssl_mode  . 

--
You received this message because you are subscribed to the Google Groups "dcm4che" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dcm4che+unsubscribe@googlegroups.com.
To post to this group, send email to dcm...@googlegroups.com.
Visit this group at https://groups.google.com/group/dcm4che.
For more options, visit https://groups.google.com/d/optout.

Mamisoa Andriantafika

unread,
Jul 10, 2017, 11:59:21 AM7/10/17
to dcm4che
Thanks for your answer.

Can you explicitely tell me what to change in the docker-compose.env file?

Or should I work inside the docker container?

The strange thing is in local it does work straight, but on a dedicated server it does not.
To unsubscribe from this group and stop receiving emails from it, send an email to dcm4che+u...@googlegroups.com.

Gunter Zeilinger

unread,
Jul 10, 2017, 12:37:05 PM7/10/17
to dcm...@googlegroups.com
add
SSL_REQUIRED=none
to docker-compose.env
or 

SSL_REQUIRED: none

to the environment section for the dcm4chee-arc service in docker-compose.yml.

To unsubscribe from this group and stop receiving emails from it, send an email to dcm4che+unsubscribe@googlegroups.com.

Mamisoa Andriantafika

unread,
Jul 16, 2017, 7:19:59 AM7/16/17
to dcm4che
Hi,

I use the latest version of docker-compose installation files, and change the ssl-required parameter to none but it is still asking for HTTPS for keycloak. And since there is no SSL certificate produced, it is failing to connect.

And with this last version I can't access Wildfly console with the standard login admin/admin. So I can't check logs...

Gunter Zeilinger

unread,
Jul 17, 2017, 12:56:37 AM7/17/17
to dcm...@googlegroups.com
You always can check server.log in the mapped out /opt/wildfly/standalone/log directory.

Also verify:

$ docker exec <archive-container> env | grep SSL
SSL_REQUIRED=none

$ docker exec <archive-container> grep none /opt/wildfly/standalone/configuration/dcm4che-realm.json
  "sslRequired" : "none"






To unsubscribe from this group and stop receiving emails from it, send an email to dcm4che+unsubscribe@googlegroups.com.

Mamisoa Andriantafika

unread,
Jul 17, 2017, 3:22:12 AM7/17/17
to dcm...@googlegroups.com
Thank you for your input.

I get:

root@dcm4chee:/home/mamisoa# docker exec fbf064 env | grep SSL
SSL_REQUIRED
=none
root@dcm4chee:/home/mamisoa# docker exec fbf0 grep none /opt/wildfly/standalone/configuration/dcm4che-realm.jsonroot@dcm4chee:/home/mamisoa#


for server.log:

2017-07-16 11:52:07,609 INFO  [org.dcm4che3.net.audit.AuditLogger] (ServerService Thread Pool -- 69) Send audit message to Socket[addr=logstash/172.18.0.5,port=8514,localport=39950]
2017-07-16 11:52:08,385 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 39) WFLYSRV0010: Deployed "dcm4chee-arc-ear-5.7.1-psql-secure-ui.ear" (runtime-name : "dcm4chee-arc-ear-5.7.1-psql-secure-ui.ear")
2017-07-16 11:52:08,386 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 66) WFLYSRV0010: Deployed "keycloak-server.war" (runtime-name : "keycloak-server.war")
2017-07-16 11:52:08,795 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://0.0.0.0:9990/management
2017-07-16 11:52:08,795 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://0.0.0.0:9990
2017-07-16 11:52:08,796 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly Full 10.1.0.Final (WildFly Core 2.2.0.Final) started in 29011ms - Started 2246 of 2669 services (741 services are lazy, passive or on-demand)
2017-07-16 11:53:05,595 ERROR [org.keycloak.adapters.AdapterDeploymentContext] (default task-1) request scheme: http ssl required
2017-07-16 11:53:05,597 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /dcm4chee-arc/ui/: java.lang.RuntimeException: Can't resolve relative url from adapter config.
        at org.keycloak.adapters.AdapterDeploymentContext.getBaseBuilder(AdapterDeploymentContext.java:479)
        at org.keycloak.adapters.AdapterDeploymentContext.resolveUrls(AdapterDeploymentContext.java:113)
        at org.keycloak.adapters.AdapterDeploymentContext.resolveDeployment(AdapterDeploymentContext.java:100)
        at org.keycloak.adapters.PreAuthActionsHandler.preflightCors(PreAuthActionsHandler.java:91)
        at org.keycloak.adapters.PreAuthActionsHandler.handleRequest(PreAuthActionsHandler.java:67)

        at org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:68)
        at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
        at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
        at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
        at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
        at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
        at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
        at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
        at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
        at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
        at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
        at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
        at java.lang.Thread.run(Thread.java:745)
2017-07-16 11:54:44,991 ERROR [org.keycloak.adapters.AdapterDeploymentContext] (default task-6) request scheme: http ssl required
2017-07-16 11:54:44,992 ERROR [io.undertow.request] (default task-6) UT005023: Exception handling request to /dcm4chee-arc/ui/: java.lang.RuntimeException: Can'
t resolve relative url from adapter config.
        at org
.keycloak.adapters.AdapterDeploymentContext.getBaseBuilder(AdapterDeploymentContext.java:479)
        at org
.keycloak.adapters.AdapterDeploymentContext.resolveUrls(AdapterDeploymentContext.java:113)
        at org
.keycloak.adapters.AdapterDeploymentContext.resolveDeployment(AdapterDeploymentContext.java:100)
        at org
.keycloak.adapters.PreAuthActionsHandler.preflightCors(PreAuthActionsHandler.java:91)
        at org
.keycloak.adapters.PreAuthActionsHandler.handleRequest(PreAuthActionsHandler.java:67)

        at org
.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:68)
        at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
        at io
.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
        at io
.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
        at io
.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
        at io
.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
        at io
.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
        at io
.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
        at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
        at io
.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
        at io
.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
        at io
.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
        at io
.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
        at io
.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805)
        at java
.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
        at java
.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
        at java
.lang.Thread.run(Thread.java:745)

2017-07-16 11:56:59,370 WARN  [org.keycloak.events] (default task-49) type=LOGIN_ERROR, realmId=master, clientId=null, userId=null, ipAddress=109.88.183.31, error=ssl_required


So dcm4chee is deployed but login cannot be done without ssl even if env seems ok.

Gunter Zeilinger

unread,
Jul 17, 2017, 4:32:07 AM7/17/17
to dcm...@googlegroups.com
What archive docker image variant are you using?

On Mon, Jul 17, 2017 at 9:22 AM, Mamisoa Andriantafika <m.andri...@ophtalmologiste.be> wrote:
Thank you for your input.

I get:

root@dcm4chee:/home/mamisoa# docker exec fbf064 env | grep SSL
SSL_REQUIRED
=
none
root@dcm4chee
:/home/mamisoa# docker exec fbf064 env | grep none /opt/wildfly/standalone/configuration/dcm4che-realm.json
grep
: /opt/wildfly/standalone/configuration/dcm4che-realm.json: No such file or directory
root@dcm4chee
:/home/mamisoa#
To unsubscribe from this group and stop receiving emails from it, send an email to dcm4che+unsubscribe@googlegroups.com.

Gunter Zeilinger

unread,
Jul 17, 2017, 5:25:43 AM7/17/17
to dcm...@googlegroups.com

2017-07-16 11:52:08,385 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 39) WFLYSRV0010: Deployed "dcm4chee-arc-ear-5.7.1-psql-secure-ui.ear" (runtime-name : "dcm4chee-arc-ear-5.7.1-psql-secure-ui.ear")

=> you are still using 5.7.1, not 5.10.4!

On Mon, Jul 17, 2017 at 10:32 AM, Gunter Zeilinger <gunt...@gmail.com> wrote:
What archive docker image variant are you using?

Mamisoa Andriantafika

unread,
Jul 17, 2017, 9:12:41 AM7/17/17
to dcm4che
Sorry, my fault, I just retested with a previous docker image to test as this image was working locally. I re-do a simple test with the latest version and give you a full report.


Le lundi 17 juillet 2017 11:25:43 UTC+2, gunterze a écrit :

2017-07-16 11:52:08,385 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 39) WFLYSRV0010: Deployed "dcm4chee-arc-ear-5.7.1-psql-secure-ui.ear" (runtime-name : "dcm4chee-arc-ear-5.7.1-psql-secure-ui.ear")

=> you are still using 5.7.1, not 5.10.4!
On Mon, Jul 17, 2017 at 10:32 AM, Gunter Zeilinger <gunt...@gmail.com> wrote:
What archive docker image variant are you using?

Mamisoa Andriantafika

unread,
Jul 20, 2017, 4:47:41 PM7/20/17
to dcm...@googlegroups.com
Here's an update with the latest docker-compose files, setting ssl_required to none instead of external:

root@test:~/dcm4chee# docker exec 905cb  env | grep SSL
SSL_REQUIRED
=none
root@test
:~/dcm4chee# docker exec 905cb  grep none /opt/wildfly/standalone/configuration/dcm4che-realm.json
root@test
:~/dcm4chee#

server.log

2017-07-20 20:26:54,168 INFO  [org.hibernate.dialect.Dialect] (ServerService Thread Pool -- 72) HHH000400: Using dialect: org.hibernate.dialect.H2Dialect
2017-07-20 20:26:54,170 WARN  [org.hibernate.dialect.H2Dialect] (ServerService Thread Pool -- 72) HHH000431: Unable to determine H2 database version, certain features may not work
2017-07-20 20:26:54,263 INFO  [org.hibernate.envers.boot.internal.EnversServiceImpl] (ServerService Thread Pool -- 72) Envers integration enabled? : true
2017-07-20 20:26:59,872 INFO  [org.hibernate.hql.internal.QueryTranslatorFactoryInitiator] (ServerService Thread Pool -- 72) HHH000397: Using ASTQueryTranslatorFactory
2017-07-20 20:27:00,862 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 89) WFLYUT0021: Registered web context: /dcm4chee-arc/xdsi
2017-07-20 20:27:00,865 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: /dcm4chee-arc
2017-07-20 20:27:02,570 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 91) WFLYUT0021: Registered web context: /
dcm4chee-arc/ui2
2017-07-20 20:27:06,269 INFO  [org.dcm4che3.net.Connection] (EE-ManagedExecutorService-default-Thread-2) Start TCP Listener on /0.0.0.0:11112
2017-07-20 20:27:06,269 INFO  [org.dcm4che3.net.Connection] (EE-ManagedExecutorService-default-Thread-1) Start TCP Listener on /0.0.0.0:2575
2017-07-20 20:27:10,766 INFO  [org.keycloak.services] (ServerService Thread Pool -- 72) KC-SERVICES0030: Full model import requested. Strategy: OVERWRITE_EXISTING
2017-07-20 20:27:10,766 INFO  [org.keycloak.exportimport.singlefile.SingleFileImportProvider] (ServerService Thread Pool -- 72) Full importing from file /opt/wildfly/standalone/configuration/dcm4che-realm.json
2017-07-20 20:27:10,771 INFO  [org.keycloak.exportimport.util.ImportUtils] (ServerService Thread Pool -- 72) Realm 'dcm4che' already exists. Removing it before import
2017-07-20 20:27:19,272 INFO  [org.keycloak.exportimport.util.ImportUtils] (ServerService Thread Pool -- 72) Realm 'dcm4che' imported
2017-07-20 20:27:19,367 INFO  [org.keycloak.services] (ServerService Thread Pool -- 72) KC-SERVICES0032: Import finished successfully
2017-07-20 20:27:20,167 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002225: Deploying javax.ws.rs.core.Application: class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,167 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002205: Adding provider class org.keycloak.services.filters.KeycloakTransactionCommitter from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,167 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002200: Adding class resource org.keycloak.services.resources.ThemeResource from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,167 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002200: Adding class resource org.keycloak.services.resources.JsResource from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,167 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.admin.AdminRoot from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,167 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002210: Adding provider singleton org.keycloak.services.util.ObjectMapperResolver from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,168 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.RobotsResource from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,168 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.WelcomeResource from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,168 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.RealmsResource from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,168 INFO  [org.jboss.resteasy.resteasy_jaxrs.i18n] (ServerService Thread Pool -- 72) RESTEASY002220: Adding singleton resource org.keycloak.services.resources.ServerVersionResource from Application class org.keycloak.services.resources.KeycloakApplication
2017-07-20 20:27:20,480 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 72) WFLYUT0021: Registered web context: /auth
2017-07-20 20:27:20,761 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 39) WFLYSRV0010: Deployed "dcm4chee-arc-ear-5.10.4-psql-secure-ui.ear" (runtime-name : "dcm4chee-arc-ear-5.10.4-psql-secure-ui.ear")
2017-07-20 20:27:20,762 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 39) WFLYSRV0010: Deployed "dcm4chee-arr-proxy-5.10.4-secure.war" (runtime-name : "dcm4chee-arr-proxy-5.10.4-secure.war")
2017-07-20 20:27:20,762 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 66) WFLYSRV0010: Deployed "keycloak-server.war" (runtime-name : "keycloak-server.war")
2017-07-20 20:27:21,767 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http:/
/0.0.0.0:9990/management
2017-07-20 20:27:21,767 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://0.0.0.0:9990
2017-07-20 20:27:21,768 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly Full 10.1.0.Final (WildFly Core 2.2.0.Final) started in 106278ms - Started 2670 of 3131 services (808 services are lazy, passive or on-demand)
2017-07-20 20:28:06,477 INFO  [org.dcm4che3.net.Connection] (EE-ManagedScheduledExecutorService-default-Thread-2) Initiate connection from /0.0.0.0:0 to logstash:8514
2017-07-20 20:28:06,481 INFO  [org.dcm4che3.net.Connection] (EE-ManagedScheduledExecutorService-default-Thread-2) Established connection Socket[addr=logstash/172.18.0.6,port=8514,localport=48834]
2017-07-20 20:28:06,481 INFO  [org.dcm4che3.net.audit.AuditLogger] (EE-ManagedScheduledExecutorService-default-Thread-2) Send audit message to Socket[addr=logstash/172.18.0.6,port=8514,localport=48834]
2017-07-20 20:28:49,272 WARN  [org.dcm4che3.audit.keycloak.AuditAuth] (default task-2) Failed to write to Audit Spool File - {} : java.lang.NullPointerException
    at org
.dcm4che3.audit.keycloak.AuditAuth$AuthInfo.<init>(AuditAuth.java:169)
    at org
.dcm4che3.audit.keycloak.AuditAuth.spoolAuditMsg(AuditAuth.java:92)
    at org
.dcm4che3.audit.keycloak.Dcm4cheEventListenerProvider.onEvent(Dcm4cheEventListenerProvider.java:74)
    at org
.keycloak.events.EventBuilder.send(EventBuilder.java:187)
    at org
.keycloak.events.EventBuilder.error(EventBuilder.java:164)
    at org
.keycloak.protocol.oidc.endpoints.AuthorizationEndpoint.checkSsl(AuthorizationEndpoint.java:155)
    at org
.keycloak.protocol.oidc.endpoints.AuthorizationEndpoint.build(AuthorizationEndpoint.java:95)
    at sun
.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun
.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun
.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java
.lang.reflect.Method.invoke(Method.java:498)
    at org
.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:139)
    at org
.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:295)
    at org
.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:249)
    at org
.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:138)
    at org
.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:107)
    at org
.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:133)
    at org
.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:101)
    at org
.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:402)
    at org
.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:209)
    at org
.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:221)
    at org
.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
    at org
.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
    at javax
.servlet.http.HttpServlet.service(HttpServlet.java:790)
    at io
.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85)
    at io
.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
    at org
.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:90)
    at io
.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
    at io
.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
    at io
.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84)
    at io
.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
    at io
.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
    at org
.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at io
.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131)
    at io
.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at io
.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
    at io
.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
    at io
.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
    at io
.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
    at io
.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
    at io
.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at org
.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)

    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at io
.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
    at io
.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
    at io
.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
    at io
.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
    at io
.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
    at io
.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)

    at io
.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
    at io
.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
    at io
.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
    at io
.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
    at io
.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805)
    at java
.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java
.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java
.lang.Thread.run(Thread.java:745)

2017-07-20 20:28:49,280 WARN  [org.keycloak.events] (default task-2) type=LOGIN_ERROR, realmId=dcm4che, clientId=null, userId=null, ipAddress=109.88.183.31, error=ssl_required
2017-07-20 20:29:06,563 INFO  [org.dcm4che3.net.audit.AuditLogger] (EE-ManagedScheduledExecutorService-default-Thread-7) Send audit message to Socket[addr=logstash/172.18.0.6,port=8514,localport=48834]
2017-07-20 20:29:13,296 WARN  [org.keycloak.events] (default task-8) type=LOGIN_ERROR, realmId=master, clientId=null, userId=null, ipAddress=109.88.183.31, error=ssl_required
2017-07-20 20:29:30,562 WARN  [org.dcm4che3.audit.keycloak.AuditAuth] (default task-12) Failed to write to Audit Spool File - {} : java.lang.NullPointerException
    at org
.dcm4che3.audit.keycloak.AuditAuth$AuthInfo.<init>(AuditAuth.java:169)
    at org
.dcm4che3.audit.keycloak.AuditAuth.spoolAuditMsg(AuditAuth.java:92)
    at org
.dcm4che3.audit.keycloak.Dcm4cheEventListenerProvider.onEvent(Dcm4cheEventListenerProvider.java:74)
    at org
.keycloak.events.EventBuilder.send(EventBuilder.java:187)
    at org
.keycloak.events.EventBuilder.error(EventBuilder.java:164)
    at org
.keycloak.protocol.oidc.endpoints.AuthorizationEndpoint.checkSsl(AuthorizationEndpoint.java:155)
    at org
.keycloak.protocol.oidc.endpoints.AuthorizationEndpoint.build(AuthorizationEndpoint.java:95)
    at sun
.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun
.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun
.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java
.lang.reflect.Method.invoke(Method.java:498)
    at org
.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:139)
    at org
.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:295)
    at org
.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:249)
    at org
.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:138)
    at org
.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:107)
    at org
.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:133)
    at org
.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:101)
    at org
.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:402)
    at org
.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:209)
    at org
.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:221)
    at org
.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
    at org
.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
    at javax
.servlet.http.HttpServlet.service(HttpServlet.java:790)
    at io
.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85)
    at io
.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
    at org
.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:90)
    at io
.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
    at io
.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
    at io
.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84)
    at io
.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
    at io
.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
    at org
.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at io
.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131)
    at io
.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at io
.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
    at io
.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
    at io
.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
    at io
.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
    at io
.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
    at io
.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at org
.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)

    at io
.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
    at io
.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
    at io
.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
    at io
.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
    at io
.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
    at io
.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
    at io
.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
    at io
.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)

    at io
.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
    at io
.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
    at io
.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
    at io
.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
    at io
.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805)
    at java
.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
    at java
.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
    at java
.lang.Thread.run(Thread.java:745)

2017-07-20 20:29:30,565 WARN  [org.keycloak.events] (default task-12) type=LOGIN_ERROR, realmId=dcm4che, clientId=null, userId=null, ipAddress=109.88.183.31, error=ssl_required

It seems I'm the only one with ths problem. I'm running on a clean ubuntu server 16.04.2 installation on a dedicated server.

Wouldn't it be wise to add a script during installation to generate a self certificate?

Without transition, I add to add this env parameter to docker to be able to deploy the dockers as some are waiting for others:

export DOCKER_CLIENT_TIMEOUT=120
export COMPOSE_HTTP_TIMEOUT=120


Mamisoa Andriantafika

unread,
Jul 20, 2017, 5:46:22 PM7/20/17
to dcm4che
Ok I got it working.

I modified the SslRequired parameter in dcm4chee-reaml.json which stayed "external".

Is keycloak server enabled for HTTPS by default in the docker image? I can't connect in HTTPS to 8443.

Gunter Zeilinger

unread,
Jul 21, 2017, 2:11:34 AM7/21/17
to dcm...@googlegroups.com
You did something wrong, if dcm4chee-reaml.json does not reflect ENV SSL_REQUIRED. Guess you did not delete the mapped out wildfly standalone directory, so it remains from a previous container created without SSL_REQUIRED=none.

Did you mapped out port 8443 from the archive container in your docker-compose.yaml?

--
You received this message because you are subscribed to the Google Groups "dcm4che" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dcm4che+unsubscribe@googlegroups.com.

Mamisoa Andriantafika

unread,
Jul 21, 2017, 5:47:22 AM7/21/17
to dcm4che
Voilà...

I would advise to add in the docker-compose.yml for the dcm4chee-arc part the mapping for port

" - 8443:8443"

so that users can access dcm4chee other than locally, and adjust the documentation to access thru https with 8443 port.
To unsubscribe from this group and stop receiving emails from it, send an email to dcm4che+u...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages