AEM 6.3 plain war file bundle starting issue in Jboss EAP 6.4

[dinesh_sundaram]

There are 372 bundles are not starting while deploying AEM 6.3 plain war file, the below setting is blocking the bundles to be active. do we need to add anything in aem war file? the same setting works fine in 6.1 war. any suggestion?

<server-identities>

                    <ssl protocol="TLS">

                        <keystore path="/apps_data_01/security.jks" keystore-password="${VAULT::externalCommand::X529-Default::.}" alias="security"/>

                    </ssl>

                </server-identities>

<ldap connection="ActiveDirectory" base-dn="OU=mycompany Users,DC=corp,DC=mycompany,DC=test" recursive="true">

                        <advanced-filter filter="(&amp;(sAMAccountName={0})(|(memberOf=CN=ws_administrator,OU=mycompany Groups,DC=corp,DC=mycompany,DC=test)(memberOf=CN=ws_operator,OU=mycompany Groups,DC=corp,DC=mycompany,DC=test)))"/>

                    </ldap>

<authorization map-groups-to-roles="true">

<ldap connection="ActiveDirectory">

                        <group-search group-name="SIMPLE" iterative="true" group-dn-attribute="dn" group-name-attribute="cn">

                            <principal-to-group group-attribute="memberOf"/>

                        </group-search>

                    </ldap>

<outbound-connections>

            <ldap name="ActiveDirectory" url="ldaps://active-directory.mylocal.int:6312" search-dn="CN=was_system_user,OU=Service Accounts,OU=mycompany Users,DC=corp,DC=mycompany,DC=test" search-credential="${VAULT::externalCommand::cd-client::.}"/>

        </outbound-connections>

<role-mapping>

                <role name="SuperUser">

                    <include>

                        <group realm="ManagementRealm" name="ws_administrator"/>

                    </include>

                </role>

                <role name="Deployer">

                    <include>

                        <group realm="ManagementRealm" name="ws_operator"/>

                    </include>

                </role>

            </role-mapping>

[dinesh_sundaram]

jboss-web.xml is required to be added?

[dinesh_sundaram]

I dont see any other changes in war file except jboss-web.xml, is there anything else needs to be added?

[dinesh_sundaram]

we see this error while starting fresh AEM instance. Is that helping?

21.07.2017 16:22:57.428 *INFO* [Apache Sling Repository Startup Thread] com.adobe.granite.repository Service [1043, [org.apache.jackrabbit.oak.spi.gc.GCMonit

or]] ServiceEvent REGISTERED

21.07.2017 16:22:57.454 *ERROR* [Apache Sling Repository Startup Thread] com.adobe.granite.repository.impl.SlingRepositoryManager start: Uncaught Throwable trying to access Repository, calling stopRepository()

javax.management.JMRuntimeException: JBAS011360: Unauthorized access

at org.jboss.as.jmx.PluggableMBeanServerImpl.authorizeMBeanOperation(PluggableMBeanServerImpl.java:1117)

at org.jboss.as.jmx.PluggableMBeanServerImpl.authorizeMBeanOperation(PluggableMBeanServerImpl.java:1104)

at org.jboss.as.jmx.PluggableMBeanServerImpl.registerMBean(PluggableMBeanServerImpl.java:838)

at com.codahale.metrics.JmxReporter$JmxListener.registerMBean(JmxReporter.java:505)

at com.codahale.metrics.JmxReporter$JmxListener.onCounterAdded(JmxReporter.java:556)

at com.codahale.metrics.MetricRegistry.notifyListenerOfAddedMetric(MetricRegistry.java:346)

at com.codahale.metrics.MetricRegistry.onMetricAdded(MetricRegistry.java:338)

at com.codahale.metrics.MetricRegistry.register(MetricRegistry.java:89)

at com.codahale.metrics.MetricRegistry.getOrAdd(MetricRegistry.java:313)

at com.codahale.metrics.MetricRegistry.counter(MetricRegistry.java:114)

at org.apache.jackrabbit.oak.plugins.metric.MetricStatisticsProvider$StatsBuilder$1.newComposite(MetricStatisticsProvider.java:185)

at org.apache.jackrabbit.oak.plugins.metric.MetricStatisticsProvider.getStats(MetricStatisticsProvider.java:142)

at org.apache.jackrabbit.oak.plugins.metric.MetricStatisticsProvider.getCounterStats(MetricStatisticsProvider.java:107)

at org.apache.jackrabbit.oak.stats.StatisticManager.getStatsCounter(StatisticManager.java:98)

at org.apache.jackrabbit.oak.jcr.session.SessionStats.<init>(SessionStats.java:83)

at org.apache.jackrabbit.oak.jcr.delegate.SessionDelegate.<init>(SessionDelegate.java:150)

at org.apache.jackrabbit.oak.jcr.repository.RepositoryImpl$1.<init>(RepositoryImpl.java:304)

at org.apache.jackrabbit.oak.jcr.repository.RepositoryImpl.createSessionDelegate(RepositoryImpl.java:302)

at org.apache.jackrabbit.oak.jcr.repository.RepositoryImpl.login(RepositoryImpl.java:283)

at com.adobe.granite.repository.impl.CRX3RepositoryImpl.login(CRX3RepositoryImpl.java:150)

at com.adobe.granite.repository.impl.SlingRepositoryImpl$2.run(SlingRepositoryImpl.java:113)

at com.adobe.granite.repository.impl.SlingRepositoryImpl$2.run(SlingRepositoryImpl.java:105)

at java.security.AccessController.doPrivileged(Native Method)

at javax.security.auth.Subject.doAsPrivileged(Subject.java:549)

at com.adobe.granite.repository.impl.SlingRepositoryImpl.createAdministrativeSession(SlingRepositoryImpl.java:105)

at org.apache.sling.jcr.base.AbstractSlingRepository2.loginAdministrative(AbstractSlingRepository2.java:385)

at org.apache.sling.jcr.base.internal.loader.Loader.getSession(Loader.java:326)

at org.apache.sling.jcr.base.internal.loader.Loader.registerNodeTypes(Loader.java:253)

at org.apache.sling.jcr.base.internal.loader.Loader.registerBundleInternal(Loader.java:226)

at org.apache.sling.jcr.base.internal.loader.Loader.registerBundle(Loader.java:158)

at org.apache.sling.jcr.base.internal.loader.Loader.<init>(Loader.java:75)

at org.apache.sling.jcr.base.AbstractSlingRepositoryManager.initializeAndRegisterRepositoryService(AbstractSlingRepositoryManager.java:481)

at org.apache.sling.jcr.base.AbstractSlingRepositoryManager.access$300(AbstractSlingRepositoryManager.java:85)

at org.apache.sling.jcr.base.AbstractSlingRepositoryManager$4.run(AbstractSlingRepositoryManager.java:455)

21.07.2017 16:22:57.455 *INFO* [Apache Sling Repository Startup Thread] com.adobe.granite.repository.impl.SlingRepositoryManager stop: Repository still running, forcing shutdown

[smacdonald2008]

Have you followed all instructions in the AEM Install docs?

Application Server Install

[dinesh_sundaram]

yes, we did the same. but the above configurations are blocking. is there something has to be added in war file or those configurations will not work in aem 6.3?

[dinesh_sundaram]

Is Jboss RBAC not supported in AEM?

[vaibhavs7024655]

Hi Dinesh,

AEM supports JBoss EAP 6.3.0/6.4.0. Please refer[1].

[1]

https://docs.adobe.com/docs/en/aem/6-3/deploy/application-server-install.html#JBoss EAP 6.3.0/6.4.0

[dinesh_sundaram]

yeah thats true, I'm looking for RBAC setting specifically which I mentioned above. we have that setting in eap 6.2 with 6.1 aem works fine but the same setting is not working in eap 6.4 with 6.3 aem.