Access to Wildfly management console

[Alex Kaisar]

Hello all,

I'm running dcm4chee secured archive on docker compose and I've come up against the following problem. When i am trying to access the wildfly management console to configure some storage settings i'm constantly getting 403 Unauthorized and a blank page.

If anyone can help me that would be great as I've seen others have had the same issue without any luck

I'm attaching my yml

version: "3"
services:
  ldap:
    image: dcm4che/slapd-dcm4chee:2.6.7-33.1
    logging:
      driver: json-file
      options:
        max-size: "10m"
    ports:
      - "389:389"
      - "636:636"
    environment:
      STORAGE_DIR: /storage/fs1
    volumes:
      - /var/local/dcm4chee-arc/ldap:/var/lib/openldap/openldap-data
      - /var/local/dcm4chee-arc/slapd.d:/etc/openldap/slapd.d
  mariadb:
    image: mariadb:10.11.4
    logging:
      driver: json-file
      options:
        max-size: "10m"
    ports:
      - "3306:3306"
    environment:
      MYSQL_ROOT_PASSWORD: secret
      MYSQL_DATABASE: keycloak
      MYSQL_USER: keycloak
      MYSQL_PASSWORD: keycloak
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - /var/local/dcm4chee-arc/mysql:/var/lib/mysql
  keycloak:
    image: dcm4che/keycloak:26.0.6
    logging:
      driver: json-file
      options:
        max-size: "10m"
    ports:
      - "8843:8843"
    environment:
      KC_HTTPS_PORT: 8843
      KC_HOSTNAME: https://alex:8843
      KC_HOSTNAME_BACKCHANNEL_DYNAMIC: 'true'
      KC_BOOTSTRAP_ADMIN_USERNAME: admin
      KC_BOOTSTRAP_ADMIN_PASSWORD: changeit
      KC_DB: mariadb
      KC_DB_URL_DATABASE: keycloak
      KC_DB_URL_HOST: mariadb
      KC_DB_USERNAME: keycloak
      KC_DB_PASSWORD: keycloak
      KC_LOG: file
      ARCHIVE_HOST: alex
      KEYCLOAK_WAIT_FOR: ldap:389 mariadb:3306
    depends_on:
      - ldap
      - mariadb
     volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - /var/local/dcm4chee-arc/keycloak:/opt/keycloak/data
  db:
    image: dcm4che/postgres-dcm4chee:17.1-33
    logging:
      driver: json-file
      options:
        max-size: "10m"
    ports:
      - "5432:5432"
    environment:
      POSTGRES_DB: pacsdb
      POSTGRES_USER: pacs
      POSTGRES_PASSWORD: pacs
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - /var/local/dcm4chee-arc/db:/var/lib/postgresql/data
  arc:
    image: dcm4che/dcm4chee-arc-psql:5.33.1-secure
    ports:
      - "8080:8080"
      - "8443:8443"
      - "9990:9990"
      - "9993:9993"
      - "11112:11112"
      - "2762:2762"
      - "2575:2575"
      - "12575:12575"
    environment:
      POSTGRES_DB: pacsdb
      POSTGRES_USER: pacs
      POSTGRES_PASSWORD: pacs
      AUTH_SERVER_URL: https://keycloak:8843
      UI_AUTH_SERVER_URL: https://alex:8843
      WILDFLY_CHOWN: /storage
      WILDFLY_WAIT_FOR: ldap:389 db:5432 keycloak:8843
    depends_on:
      - ldap
      - keycloak
      - db
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /etc/timezone:/etc/timezone:ro
      - /var/local/dcm4chee-arc/wildfly:/opt/wildfly/standalone
      - /var/local/dcm4chee-arc/storage:/storage
      - /mnt/dicom_windows:/storage/windows_dicom

[Marius S]

You mean to access to Wildfly console on 9993 port?

Login to Keycloak > dcm4chee realm > Clients and check for wildfly-console client and check if it has Root URL and Valid redirect URIs?
It should have values something like https://alex:9993 and https://alex:9993/* 

I think new version of Keycloak doesn't add these during docker installation.

[Gunter Zeilinger]

Current WildFly Management Console is not compatible with Keycloak 26.x

I opened an issues at RedHat, but so far there is no sign of any progress to solve it.

[Eduardo Bubols]

Hello all
I’ve got the same setup and problem as Alex.
Gunter, what do you recommend we do?
Should I downgrade Keycloak to a version that works with it? If so, which one?
Also, what’s the impact of not having access to the Wildfly console?
Thanks in advance!

[Naveen K]

Hey guys, I have an similar issue. Any updates on this?

Or will it work if I downgrade my Keycloak version? If so, what version should it be? 

[Eduardo Bubols]

Hey Naveen,

I tried downgrading to versions 5.32.0-secure-ui and 5.31.0-secure-ui, which come with Keycloak 24.0.3 and 23.0.3 respectively, but unfortunately, it still didn’t work...

I chose not to roll back too far to avoid ending up with a very outdated environment.

I’m also waiting to hear if there’s any update or suggestion on a version we can downgrade to where Wildfly works fine with Keycloak.

[Naveen K]

Hey Eduardo, I've downgraded Keycloak to 25.0.5 and it worked. I've followed the below attached link 

https://github.com/dcm4che/dcm4chee-arc-light/wiki/Run-secured-archive-services-on-a-single-host/6d8b8afe037f7917fed40a07a7599f8c0dc4ac78

Let me know if you face any issues 

[Eduardo Bubols]

Good news...
I'll then try with 25.0.5 keycloak version...