FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    ERROR: Role "fusionauth" is a member of "fusionauth"

    Scheduled Pinned Locked Moved
    Comments & Feedback
    2
    4
    1.1k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nick 1
      last edited by

      Silent mode tripping up on a supposed recursive role relation

      com.inversoft.maintenance.db.DatabaseSilentModeWorkflowTask - ERROR: role "fusionauth" is a member of role "fusionauth"

      Not sure if this is a postgresql issue or a fusionauth issue as I am able to connect directly to the postgres instance from a local db client.

      Full log and stack trace below for context:

      No older events at this moment. 
Retry
NOTE: Picked up JDK_JAVA_OPTIONS:  --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
2022-06-01 10:17:04.808 AM INFO  org.apache.catalina.core.AprLifecycleListener - The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
2022-06-01 10:17:05.806 AM INFO  org.apache.coyote.http11.Http11NioProtocol - Initializing ProtocolHandler ["http-nio-9011"]
2022-06-01 10:17:05.986 AM INFO  org.apache.coyote.http11.Http11NioProtocol - Initializing ProtocolHandler ["http-nio-127.0.0.1-9012"]
2022-06-01 10:17:05.988 AM INFO  org.apache.coyote.http11.Http11NioProtocol - Initializing ProtocolHandler ["https-jsse-nio-9013"]
2022-06-01 10:17:06.667 AM INFO  org.apache.coyote.ajp.AjpNioProtocol - Initializing ProtocolHandler ["ajp-nio-127.0.0.1-9019"]
2022-06-01 10:17:06.673 AM INFO  org.apache.catalina.startup.Catalina - Initialization processed in 2864 ms
2022-06-01 10:17:06.686 AM INFO  org.apache.catalina.core.StandardService - Starting service [Catalina]
2022-06-01 10:17:06.687 AM INFO  org.apache.catalina.core.StandardEngine - Starting Servlet engine: [Apache Tomcat/8.5.77]
2022-06-01 10:17:13.108 AM INFO  org.apache.jasper.servlet.TldScanner - At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Skipping unneeded JARs during scanning can improve startup time and JSP compilation time.
2022-06-01 10:17:14.261 AM INFO  io.fusionauth.api.configuration.DefaultFusionAuthConfiguration - Loading FusionAuth configuration file [/usr/local/fusionauth/config/fusionauth.properties]
2022-06-01 10:17:14.282 AM INFO  io.fusionauth.api.configuration.DefaultFusionAuthConfiguration - Dynamically set property [fusionauth-app.url] set to [http://10.0.1.239:9011]
2022-06-01 10:17:14.284 AM INFO  com.inversoft.configuration.BasePropertiesFileInversoftConfiguration - 
  - Overriding default value of property [database.mysql.enforce-utf8mb4] with value [true]
  - Overriding default value of property [database.mysql.connector-version] with value [8.0.21]
  - Overriding default value of property [FUSIONAUTH_APP_RUNTIME_MODE] with value [development]
  - Overriding default value of property [SEARCH_TYPE] with value [database]
2022-06-01 10:17:14.464 AM INFO  io.fusionauth.api.configuration.DefaultFusionAuthConfiguration - Loading FusionAuth configuration file [/usr/local/fusionauth/config/fusionauth.properties]
2022-06-01 10:17:14.465 AM INFO  io.fusionauth.api.configuration.DefaultFusionAuthConfiguration - Dynamically set property [fusionauth-app.url] set to [http://10.0.1.239:9011]
2022-06-01 10:17:14.466 AM INFO  com.inversoft.configuration.BasePropertiesFileInversoftConfiguration - 
  - Overriding default value of property [database.mysql.enforce-utf8mb4] with value [true]
  - Overriding default value of property [database.mysql.connector-version] with value [8.0.21]
  - Overriding default value of property [FUSIONAUTH_APP_RUNTIME_MODE] with value [development]
  - Overriding default value of property [SEARCH_TYPE] with value [database]
2022-06-01 10:17:14.682 AM INFO  com.inversoft.maintenance.DefaultMaintenanceModeWorkflow - 
---------------------------------------------------------------------------------------------------------
---------------------------------- Entering Silent Configuration Mode -----------------------------------
---------------------------------------------------------------------------------------------------------
2022-06-01 10:17:15.290 AM INFO  com.inversoft.maintenance.db.JDBCMaintenanceModeDatabaseService - [6BjtDA] Attempting to lock database to prevent multi-node issues
2022-06-01 10:17:15.306 AM INFO  com.inversoft.maintenance.db.JDBCMaintenanceModeDatabaseService - [6BjtDA] Obtained a database lock
2022-06-01 10:17:15.779 AM ERROR com.inversoft.maintenance.db.DatabaseSilentModeWorkflowTask - ERROR: role "fusionauth" is a member of role "fusionauth"
2022-06-01 10:17:15.780 AM INFO  com.inversoft.maintenance.db.JDBCMaintenanceModeDatabaseService - [6BjtDA] Attempting to unlock database to prevent multi-node issues
2022-06-01 10:17:15.782 AM INFO  com.inversoft.maintenance.db.JDBCMaintenanceModeDatabaseService - [6BjtDA] Unlock completed
2022-06-01 10:17:15.784 AM INFO  org.primeframework.mvc.servlet.PrimeServletContextListener - Initializing Prime
2022-06-01 10:17:17.005 AM INFO  io.fusionauth.api.configuration.DefaultFusionAuthConfiguration - Loading FusionAuth configuration file [/usr/local/fusionauth/config/fusionauth.properties]
2022-06-01 10:17:17.006 AM INFO  io.fusionauth.api.configuration.DefaultFusionAuthConfiguration - Dynamically set property [fusionauth-app.url] set to [http://10.0.1.239:9011]
2022-06-01 10:17:17.007 AM INFO  com.inversoft.configuration.BasePropertiesFileInversoftConfiguration - 
  - Overriding default value of property [database.mysql.enforce-utf8mb4] with value [true]
  - Overriding default value of property [database.mysql.connector-version] with value [8.0.21]
  - Overriding default value of property [FUSIONAUTH_APP_RUNTIME_MODE] with value [development]
  - Overriding default value of property [SEARCH_TYPE] with value [database]
2022-06-01 10:17:17.009 AM INFO  com.inversoft.maintenance.MaintenanceModePoller - Poller started to Wait for configuration to be completed.
2022-06-01 10:17:17.070 AM INFO  org.apache.coyote.http11.Http11NioProtocol - Starting ProtocolHandler ["http-nio-9011"]
2022-06-01 10:17:17.091 AM INFO  org.apache.coyote.http11.Http11NioProtocol - Starting ProtocolHandler ["http-nio-127.0.0.1-9012"]
2022-06-01 10:17:17.103 AM INFO  org.apache.coyote.http11.Http11NioProtocol - Starting ProtocolHandler ["https-jsse-nio-9013"]
2022-06-01 10:17:17.107 AM INFO  org.apache.coyote.ajp.AjpNioProtocol - Starting ProtocolHandler ["ajp-nio-127.0.0.1-9019"]
2022-06-01 10:17:17.164 AM INFO  org.apache.catalina.startup.Catalina - Server startup in 10490 ms
      danD 1 Reply Last reply Reply Quote 1
      • danD
        dan @nick 1
        last edited by dan

        @nick-1 Thanks for sharing the stack trace.

        What version of FusionAuth is this?

        --
        FusionAuth - Auth for devs, built by devs.
        https://fusionauth.io

        1 Reply Last reply Reply Quote 0
        • N
          nick 1
          last edited by

          FusionAuth v1.36.4

          @dan thanks in part to your past resolution "Hosting on RDS" in January 2022, i was able to resolve this in this way given we are trying to create a self-hosted clustered deployment of fusionauth:

          1. Disabled silent mode FUSIONAUTH_APP_SILENT_MODE=false
          2. Downloaded the db schema scripts v1.36.4
          3. Ran the scripts against our deployed RDS postgres cluster (fresh install so just initial provisioning postgres.sql)
          4. Still did not work, so then I tried replacing DATABASE_ROOT_USERNAME and DATABASE_ROOT_PASSWORD with DATABASE_USERNAME and DATABASE_PASSWORD and connection was made possible 🙏

          Not sure if you have a recommendation on how to manage clustered fusion auth app upgrades requiring db migrations in a CI/CD pipeline?

          danD 1 Reply Last reply Reply Quote 1
          • danD
            dan @nick 1
            last edited by

            @nick-1 said in ERROR: Role "fusionauth" is a member of "fusionauth":

            Not sure if you have a recommendation on how to manage clustered fusion auth app upgrades requiring db migrations in a CI/CD pipeline?

            Here's our general upgrade guidance:

            https://fusionauth.io/docs/v1/tech/admin-guide/upgrade#downtime

            Our migration scripts are consistently named, so you should be able to pull down the zip file, see if any new migrations are present, then apply them in order.

            --
            FusionAuth - Auth for devs, built by devs.
            https://fusionauth.io

            1 Reply Last reply Reply Quote 0
            • First post
              Last post