3 Replies Latest reply on Apr 11, 2013 2:59 PM by brian.stansberry

    upgrade 7.1.1 to 7.1.3 ==> hostcontroller: security_realm exception

    herb

      I'm upgrading my 7.1.1 domain to 7.1.3. Domain controller runs fine with 7.1.3, but I've problems starting up hostcontoller. I get following error:

       

      13.02.2013 13:46:46,837 INFO  [org.jboss.modules] (main) JBoss Modules version 1.1.3.GA

      13.02.2013 13:46:47,187 INFO  [org.jboss.as.process.Host Controller.status] (main) JBAS012017: Starting process 'Host Controller'

      [Host Controller] 13.02.2013 13:46:47,646 INFO  [org.jboss.modules] (main) JBoss Modules version 1.1.3.GA

      [Host Controller] 13.02.2013 13:46:47,757 INFO  [org.jboss.msc] (main) JBoss MSC version 1.0.2.GA

      [Host Controller] 13.02.2013 13:46:47,841 INFO  [org.jboss.as] (MSC service thread 1-1) JBAS015899: JBoss AS 7.1.3.Final "Arges" starting

      [Host Controller] 13.02.2013 13:46:48,869 INFO  [org.jboss.security] (Controller Boot Thread) PBOX000361: Default Security Vault Implementation Initialized and Ready

      [Host Controller] 13.02.2013 13:46:48,879 INFO  [org.xnio] (MSC service thread 1-1) XNIO Version 3.0.6.GA

      [Host Controller] 13.02.2013 13:46:48,884 INFO  [org.xnio.nio] (MSC service thread 1-1) XNIO NIO Implementation Version 3.0.6.GA

      [Host Controller] 13.02.2013 13:46:48,903 INFO  [org.jboss.remoting] (MSC service thread 1-1) JBoss Remoting version 3.2.8.SP1

      [Host Controller] 13.02.2013 13:46:48,972 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4) MSC00001: Failed to start service jboss.server.controller.management.security_realm.ManagementRealm.secret: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.ManagementRealm.secret: Failed to start service

      [Host Controller]       at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1767) [jboss-msc-1.0.2.GA.jar:1.0.2.GA]

      [Host Controller]       at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) [rt.jar:1.7.0_07]

      [Host Controller]       at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) [rt.jar:1.7.0_07]

      [Host Controller]       at java.lang.Thread.run(Thread.java:722) [rt.jar:1.7.0_07]

      [Host Controller] Caused by: java.lang.IllegalStateException: Bad Base64 input character at 9: 45(decimal)

      [Host Controller]       at org.jboss.util.Base64.decode(Base64.java:704)

      [Host Controller]       at org.jboss.util.Base64.decode(Base64.java:735)

      [Host Controller]       at org.jboss.as.domain.management.security.SecretIdentityService.start(SecretIdentityService.java:68) [jboss-as-domain-management-7.1.3.Final.jar:7.1.3.Final]

      [Host Controller]       at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811) [jboss-msc-1.0.2.GA.jar:1.0.2.GA]

      [Host Controller]       at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746) [jboss-msc-1.0.2.GA.jar:1.0.2.GA]

      [Host Controller]       ... 3 more

      [Host Controller]

      [Host Controller] 13.02.2013 13:46:49,187 FATAL [org.jboss.as.host.controller] (Controller Boot Thread) JBAS010933: Host Controller boot has failed in an unrecoverable manner; exiting. See previous messages for details.

      [Host Controller] 13.02.2013 13:46:49,201 INFO  [org.jboss.as] (MSC service thread 1-4) JBAS015950: JBoss AS 7.1.3.Final "Arges" stopped in 10ms

      13.02.2013 13:46:49,519 INFO  [org.jboss.as.process.Host Controller.status] (reaper for Host Controller) JBAS012010: Process 'Host Controller' finished with an exit status of 99

      13.02.2013 13:46:49,520 INFO  [org.jboss.as.process] (Thread-8) JBAS012016: Shutting down process controller

      13.02.2013 13:46:49,520 INFO  [org.jboss.as.process] (Thread-8) JBAS012015: All processes finished; exiting

       

      My host.xml (sensitve information are replaced with "...")

       

      <?xml version='1.0' encoding='UTF-8'?>

      <host name="..." xmlns="urn:jboss:domain:1.3">

           <vault>

              <vault-option name="KEYSTORE_URL" value="/.../vault.keystore"/>

              <vault-option name="KEYSTORE_PASSWORD" value="MASK-..."/>

              <vault-option name="KEYSTORE_ALIAS" value="vault"/>

              <vault-option name="SALT" value="..."/>

              <vault-option name="ITERATION_COUNT" value="..."/>

              <vault-option name="ENC_FILE_DIR" value="/.../"/>

          </vault>

           <management>

              <security-realms>

                  <security-realm name="ManagementRealm">

                      <server-identities>

                          <secret value="${VAULT::...::password::...}"/>

                      </server-identities>

                      <authentication>

                          <local default-user="$local" />

                          <properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir"/>

                      </authentication>

                  </security-realm>

              </security-realms>

              <management-interfaces>

                  <native-interface security-realm="ManagementRealm">

                      <socket interface="management" port="${jboss.management.native.port:...}"/>

                  </native-interface>

              </management-interfaces>

          </management>

       

          <domain-controller>

              <remote host="${jboss.domain.master.address}" port="${jboss.domain.master.port:...}" security-realm="ManagementRealm"/>

          </domain-controller>

       

          <interfaces>

              <interface name="management">

                  <inet-address value="${jboss.bind.address.management:...}"/>

              </interface>

              <interface name="public">

                  <inet-address value="${jboss.bind.address:...}"/>

              </interface>

          </interfaces>

       

          <servers>...</servers>

      </host>

       

      I reused the <vault>...</vault> block from 7.1.1 without changes and I used the vaultfile from 7.1.1.

      Are there some changes in vault implementation?

      Do I have to recreate the vault file?

        • 1. Re: upgrade 7.1.1 to 7.1.3 ==> hostcontroller: security_realm exception
          herb

          After replacing the vault secret <secret value="${VAULT::...::password::...}"/> with base64 encoded password it works perfectly (this means without using vault).

          So, in my opinion, the error must be in <secret value="${VAULT::...::password::...}"/>. Are there any changes in 7.1.3 or 7.1.2?? What's the correct syntax in 7.1.3?

          • 2. Re: upgrade 7.1.1 to 7.1.3 ==> hostcontroller: security_realm exception
            scroodj

            up. Anyone. same error:

             

            =========================================================================

             

             

              JBoss Bootstrap Environment

             

             

              JBOSS_HOME: /opt/jboss-as-7.2.0.Final

             

             

              JAVA: java

             

             

              JAVA_OPTS: -Xms64m -Xmx512m -XX:MaxPermSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true

             

             

            =========================================================================

             

             

            16:19:25,298 INFO  [org.jboss.modules] (main) JBoss Modules version 1.2.0.CR1

            16:19:25,451 INFO  [org.jboss.as.process.Host Controller.status] (main) JBAS012017: Starting process 'Host Controller'

            [Host Controller] 16:19:25,983 INFO  [org.jboss.modules] (main) JBoss Modules version 1.2.0.CR1

            [Host Controller] 16:19:26,148 INFO  [org.jboss.msc] (main) JBoss MSC version 1.0.4.GA

            [Host Controller] 16:19:26,217 INFO  [org.jboss.as] (MSC service thread 1-7) JBAS015899: JBoss AS 7.2.0.Final "Janus" starting

            [Host Controller] 16:19:27,060 INFO  [org.jboss.security] (Controller Boot Thread) PBOX000361: Default Security Vault Implementation Initialized and Ready

            [Host Controller] 16:19:27,075 INFO  [org.xnio] (MSC service thread 1-8) XNIO Version 3.0.7.GA

            [Host Controller] 16:19:27,089 INFO  [org.xnio.nio] (MSC service thread 1-8) XNIO NIO Implementation Version 3.0.7.GA

            [Host Controller] 16:19:27,093 INFO  [org.jboss.as] (Controller Boot Thread) JBAS010902: Creating http management service using network interface (management) port (9990) securePort (-1)

            [Host Controller] 16:19:27,100 INFO  [org.jboss.remoting] (MSC service thread 1-8) JBoss Remoting version 3.2.14.GA

            [Host Controller] 16:19:27,173 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4) MSC00001: Failed to start service jboss.server.controller.management.security_realm.ManagementRealm.secret: org.jboss.msc.service.StartException in service jboss.server.controller.management.security_realm.ManagementRealm.secret: Failed to start service

            [Host Controller]           at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1767) [jboss-msc-1.0.4.GA.jar:1.0.4.GA]

            [Host Controller]           at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [rt.jar:1.7.0_17]

            [Host Controller]           at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [rt.jar:1.7.0_17]

            [Host Controller]           at java.lang.Thread.run(Thread.java:722) [rt.jar:1.7.0_17]

            [Host Controller] Caused by: java.lang.IllegalStateException: Bad Base64 input character at 7: 64(decimal)

            [Host Controller]           at org.jboss.util.Base64.decode(Base64.java:704)

            [Host Controller]           at org.jboss.util.Base64.decode(Base64.java:735)

            [Host Controller]           at org.jboss.as.domain.management.security.SecretIdentityService.start(SecretIdentityService.java:68) [jboss-as-domain-management-7.2.0.Final.jar:7.2.0.Final]

            [Host Controller]           at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811) [jboss-msc-1.0.4.GA.jar:1.0.4.GA]

            [Host Controller]           at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746) [jboss-msc-1.0.4.GA.jar:1.0.4.GA]

            [Host Controller]           ... 3 more

            [Host Controller]

            [Host Controller] 16:19:27,396 FATAL [org.jboss.as.host.controller] (Controller Boot Thread) JBAS010933: Host Controller boot has failed in an unrecoverable manner; exiting. See previous messages for details.

            [Host Controller] 16:19:27,417 INFO  [org.jboss.as] (MSC service thread 1-3) JBAS015950: JBoss AS 7.2.0.Final "Janus" stopped in 15ms

            16:19:27,765 INFO  [org.jboss.as.process.Host Controller.status] (reaper for Host Controller) JBAS012010: Process 'Host Controller' finished with an exit status of 99

            16:19:27,767 INFO  [org.jboss.as.process] (Thread-8) JBAS012016: Shutting down process controller

            16:19:27,768 INFO  [org.jboss.as.process] (Thread-8) JBAS012015: All processes finished; exiting

            • 3. Re: upgrade 7.1.1 to 7.1.3 ==> hostcontroller: security_realm exception
              brian.stansberry

              Thanks for the bug report at https://issues.jboss.org/browse/AS7-6874.