SOLVED - Deploying dcm4chee-arc-light 5.11.0 secure UI - forbidden

[Docjay]

 
Windows 7 x64
mysql
wildfly 11
dcm4chee 5.11.0 secure UI


I'm running v 5.11.0 without docker (I don't want to run docker, so its a manual config)  I've attached a pic of my keycloak client config.


Need some help with the keycloak piece please.  this is a brand new install.

I'm following this guide and I can deploy the dcm4chee-arc-ear-5.11.0-mysql-secure-ui.ear file with no problems.

My issue is when I go to http://localhost:8080/dcm4chee-arc/ui2 it gives me a 'forbidden' message.

I can get to the keycloak site at http://127.0.0.1:8080/auth and login to configure what the guide said to do.

I can get to the wildfly server at http://localhost:8080/ so I know its running.

I'm attaching my server.log file and hope someone can help me troubleshoot my issue.  I've read through other posts about the 'forbidden' problem but none of them worked out for me.

also will be pasting a snippet from the end of the log here.  (is there a separate keycloak file file??)

 [org.jboss.as.jpa] (ServerService Thread Pool -- 78) WFLYJPA0010: Starting Persistence Unit (phase 2 of 2) Service 'dcm4chee-arc-ear-5.11.0-mysql-secure-ui.ear#dcm4chee-arc'
2018-01-14 15:13:08,007 INFO  [org.hibernate.dialect.Dialect] (ServerService Thread Pool -- 78) HHH000400: Using dialect: org.hibernate.dialect.MySQL5Dialect
2018-01-14 15:13:08,061 INFO  [org.hibernate.envers.boot.internal.EnversServiceImpl] (ServerService Thread Pool -- 78) Envers integration enabled? : true
2018-01-14 15:13:08,675 INFO  [org.apache.cxf.endpoint.ServerImpl] (MSC service thread 1-5) Setting the server's publish address to be http://localhost:8080/dcm4chee-arc/xdsi/ImagingDocumentSource
2018-01-14 15:13:08,884 INFO  [org.hibernate.hql.internal.QueryTranslatorFactoryInitiator] (ServerService Thread Pool -- 78) HHH000397: Using ASTQueryTranslatorFactory
2018-01-14 15:13:08,933 INFO  [org.jboss.ws.cxf.deployment] (MSC service thread 1-5) JBWS024074: WSDL published to: file:/D:/apps/dicom/prod/standalone/data/wsdl/dcm4chee-arc-ear-5.11.0-mysql-secure-ui.ear/dcm4chee-arc-retrieve-xdsi-5.11.0.war/wsdl/XDS-I.b_ImagingDocumentSource.wsdl
2018-01-14 15:13:09,174 INFO  [org.jboss.as.webservices] (MSC service thread 1-3) WFLYWS0003: Starting service jboss.ws.endpoint."dcm4chee-arc-ear-5.11.0-mysql-secure-ui.ear"."dcm4chee-arc-retrieve-xdsi-5.11.0.war"."org.dcm4chee.arc.retrieve.xdsi.ImageDocumentSource"
2018-01-14 15:13:11,263 WARN  [org.keycloak.adapters.undertow.KeycloakServletExtension] (ServerService Thread Pool -- 93) No adapter configuration.  Keycloak is unconfigured and will deny all requests.
2018-01-14 15:13:11,342 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 83) WFLYUT0021: Registered web context: '/dcm4chee-arc' for server 'default-server'
2018-01-14 15:13:11,343 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 74) WFLYUT0021: Registered web context: '/dcm4chee-arc/xdsi' for server 'default-server'
2018-01-14 15:13:11,345 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 93) WFLYUT0021: Registered web context: '/dcm4chee-arc/ui2' for server 'default-server'
2018-01-14 15:13:11,652 WARN  [org.dcm4che3.imageio.codec.ImageWriterFactory] (ServerService Thread Pool -- 85) No preferred Writer com.sun.media.imageioimpl.plugins.jpeg.CLibJPEGImageWriter for format: jpeg - use com.sun.imageio.plugins.jpeg.JPEGImageWriter
2018-01-14 15:13:11,652 WARN  [org.dcm4chee.arc.impl.ArchiveDeviceProducer] (ServerService Thread Pool -- 85) UnzipVendorDataToURI=${jboss.server.temp.url}/dcm4chee-arc, but no Vendor Data
2018-01-14 15:13:11,860 INFO  [org.dcm4che3.net.Connection] (EE-ManagedExecutorService-default-Thread-1) Start TCP Listener on /0.0.0.0:2575
2018-01-14 15:13:11,861 INFO  [org.dcm4che3.net.Connection] (EE-ManagedExecutorService-default-Thread-2) Start TCP Listener on /0.0.0.0:11112
2018-01-14 15:13:11,875 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0010: Deployed "dcm4chee-arc-ear-5.11.0-mysql-secure-ui.ear" (runtime-name : "dcm4chee-arc-ear-5.11.0-mysql-secure-ui.ear")
2018-01-14 15:13:11,875 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 70) WFLYSRV0010: Deployed "keycloak-server.war" (runtime-name : "keycloak-server.war")
2018-01-14 15:13:11,917 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
2018-01-14 15:13:11,929 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
2018-01-14 15:13:11,929 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
2018-01-14 15:13:11,929 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: Keycloak 3.4.0.Final (WildFly Core 3.0.8.Final) started in 22097ms - Started 2811 of 3160 services (700 services are lazy, passive or on-demand)
2018-01-14 15:14:11,938 INFO  [org.dcm4che3.net.audit.AuditLogger] (EE-ManagedScheduledExecutorService-default-Thread-2) Send audit message to localhost/127.0.0.1:514
2018-01-14 15:15:11,944 INFO  [org.dcm4che3.net.audit.AuditLogger] (EE-ManagedScheduledExecutorService-default-Thread-6) Send audit message to localhost/127.0.0.1:514
2018-01-14 15:25:28,160 WARN  [org.keycloak.events] (default task-1) type=LOGIN_ERROR, realmId=master, clientId=null, userId=null, ipAddress=127.0.0.1, error=expired_code, restart_after_timeout=true
2018-01-14 15:26:36,338 WARN  [org.keycloak.services.managers.AuthenticationManager] (default task-33) Some clients have been not been logged out for user admin in master realm: security-admin-console
2018-01-14 15:38:22,129 WARN  [org.keycloak.services.managers.AuthenticationManager] (default task-37) Some clients have been not been logged out for user admin in master realm: security-admin-console

[Docjay]

..just fixed my issue with help from Zaharia in this post

The problem was that I was just copying and pasting from the install notes and wasn't paying enough attention.

On step #20 on this guide, make sure you replace the version of dcm4chee in:

 /subsystem=keycloak/secure-deployment=dcm4chee-arc-ui2-5.x-secure.war/:add(realm=dcm4che,resource=dcm4chee-arc-ui,realm-public-key=<Public-Key>,auth-server-url=/auth)
  /subsystem=keycloak/secure-deployment=dcm4chee-arc-ui2-5.x-secure.war/credential=secret:add(value=<Secret-Key>)

instead of using 'dcm4chee-arc-ui2-5.x-secure.war, I needed 'dcm4chee-arc-ui2-5.11.0-secure.war'