Problems running the CLI

[KhadeAvinash]

root@user1:/opt/ejbca-ce-r9.0.0/bin# ./ejbca.sh ra addendentity MyAdmin "CN=MyAdmin,O=MyOrganization,C=US" -password mypassword -type 1 -ca ManagementCA -profile SuperAdmin

when i am run this command it show below msg but my wildfly is active ,ejbca ear is deployed
i am using java 17 jdk,
using ejbca-ce-r9.0.0 and wildfly-32.0.0.Final and my mysql 8.0.40-0 ubuntu0.22.04.1
How to resolved this issue
Error: CLI could not contact EJBCA instance. Either your application server is not up and running, EJBCA has not been deployed successfully, or some firewall rule is blocking the CLI from the application server.

Please be aware that most commands will not work without the application server available.

---

The following categories are available:
[ ca | config | cryptotoken | keybind | ocsp | ra | roles | service ]

And the following commands are available:
asn1dump Dumps PEM or DER encoded certificate as readable ASN.1
batch Batch generate keys and certificates.
clearcache Clears caches used internally by EJBCA.
createcert Issue a certificate for a user based on a CSR
encryptpwd Encrypts a password
gencsr Create a CSR
recover Recover certificates and end entities.
setupgradeversion Sets the 'upgrade' and 'post upgrade' versions in database. Internal command; not meant to be used in production.
upgrade Post upgrade command. Use 'ant upgrade' instead of running this directly.

Type a command and "--help" for more information.

[primetomas]

A few things to start with:
I advice against running commands as root. You should run commands as the same user as WildFly is running. And that should not be root.

Second you command does not have the valid parameters. Run "bin/ejbca.sh ra addendentity --help" to see what arguments are available.

Third, if the CLI can not contact the application server you should not have been able to run "anr runinstall", did the installation succeed to the last step before you try to run the above command?

[KhadeAvinash]

i am installed all setup from root user when am trying from different user it not running (is that i need to chnage all setup from root to another user)
How to connect CLI when i am trying to hit
root@user1:/opt/ejbca-ce-r9.0.0# ant runinstall
i got this error
Buildfile: /opt/ejbca-ce-r9.0.0/build.xml

customejbca.message:
[echo] No custom changes to merge.

runinstall:

check:bootstrapdone:

ejbca:prompt:
[input] skipping input as property ca.name has already been set.
[input] skipping input as property ca.dn has already been set.
[input] skipping input as property ca.keytype has already been set.
[input] skipping input as property ca.keyspec has already been set.
[input] skipping input as property ca.signaturealgorithm has already been set.
[input] skipping input as property ca.validity has already been set.
[input] skipping input as property ca.policy has already been set.
[echo] To set httpsserver.hostname you need to configure conf/web.properties. See sample config file conf/web.properties.sample.
[input] skipping input as property httpsserver.hostname has already been set.
[echo]
[echo] Common Name (CN) of httpsserver dn is by default taken from the httpsserver.hostname.
[input] skipping input as property httpsserver.dn has already been set.
[input] skipping input as property superadmin.cn has already been set.
[input] skipping input as property superadmin.dn has already been set.
[input] skipping input as property superadmin.batch has already been set.
[input] skipping input as property superadmin.password has already been set.
[input] skipping input as property ca.tokenpassword has already been set.

ejbca:deploytrustprompt:
[input] skipping input as property java.trustpassword has already been set.

ejbca:deployprompt:
[input] skipping input as property httpsserver.password has already been set.

ejbca:init:
[echo]
[echo] ------------------- CA Properties ----------------
[echo] ca.name : ManagementCA
[echo] ca.dn : CN=ManagementCA,O=EJBCA Sample,C=SE
[echo] ca.tokentype : soft
[echo] ca.keytype : RSA
[echo] ca.keyspec : 2048
[echo] ca.signaturealgorithm : SHA256WithRSA
[echo] ca.validity : 3650
[echo] ca.policy : null
[echo] ca.tokenproperties : ${ca.tokenproperties}
[echo] httpsserver.hostname : localhost
[echo] httpsserver.dn : CN=localhost,O=EJBCA Sample,C=SE
[echo] httpsserver.tokentype : P12
[echo] superadmin.cn : SuperAdmin
[echo] superadmin.dn : CN=SuperAdmin
[echo] superadmin.batch : true
[echo] appserver.home : /opt/wildfly
[echo]

ejbca:install:

ejbca:initCA:
[echo] Initializing CA with 'ManagementCA' 'CN=ManagementCA,O=EJBCA Sample,C=SE' 'soft' '<ca.tokenpassword hidden>' '2048' 'RSA' '3650' 'null' 'SHA256WithRSA' -superadmincn 'SuperAdmin'...
[java] 14:36:16.319 [main] ERROR org.ejbca.ui.cli.infrastructure.library.CommandLibrary - Error: CLI could not contact EJBCA instance. Either your application server is not up and running, EJBCA has not been deployed successfully, or some firewall rule is blocking the CLI from the application server.
[java]
[java] Please be aware that most commands will not work without the application server available.
[java]
[java] Exception in thread "main" jakarta.ejb.NoSuchEJBException: EJBCLIENT000079: Unable to discover destination for request for EJB StatelessEJBLocator for "ejbca/cesecore-ejb/GlobalConfigurationSessionBean", view is interface org.cesecore.configuration.GlobalConfigurationSessionRemote, affinity is None
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:620)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:551)
[java] at org.jboss.ejb.protocol.remote.RemotingEJBClientInterceptor.handleInvocationResult(RemotingEJBClientInterceptor.java:57)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:622)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:551)
[java] at org.jboss.ejb.client.TransactionPostDiscoveryInterceptor.handleInvocationResult(TransactionPostDiscoveryInterceptor.java:148)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:622)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:551)
[java] at org.jboss.ejb.client.DiscoveryEJBClientInterceptor.handleInvocationResult(DiscoveryEJBClientInterceptor.java:130)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:622)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:551)
[java] at org.jboss.ejb.client.NamingEJBClientInterceptor.handleInvocationResult(NamingEJBClientInterceptor.java:87)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:622)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:551)
[java] at org.jboss.ejb.client.AuthenticationContextEJBClientInterceptor.call(AuthenticationContextEJBClientInterceptor.java:59)
[java] at org.jboss.ejb.client.AuthenticationContextEJBClientInterceptor.handleInvocationResult(AuthenticationContextEJBClientInterceptor.java:52)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:622)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:551)
[java] at org.jboss.ejb.client.TransactionInterceptor.handleInvocationResult(TransactionInterceptor.java:212)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:622)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.getResult(EJBClientInvocationContext.java:551)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.awaitResponse(EJBClientInvocationContext.java:1003)
[java] at org.jboss.ejb.client.EJBInvocationHandler.invoke(EJBInvocationHandler.java:182)
[java] at org.jboss.ejb.client.EJBInvocationHandler.invoke(EJBInvocationHandler.java:116)
[java] at jdk.proxy2/jdk.proxy2.$Proxy8.getCachedConfiguration(Unknown Source)
[java] at org.ejbca.ui.cli.infrastructure.command.PasswordUsingCommandBase.execute(PasswordUsingCommandBase.java:162)
[java] at org.ejbca.ui.cli.infrastructure.library.CommandLibrary$Branch.execute(CommandLibrary.java:309)
[java] at org.ejbca.ui.cli.infrastructure.library.CommandLibrary$Branch.execute(CommandLibrary.java:320)
[java] at org.ejbca.ui.cli.infrastructure.library.CommandLibrary.findAndExecuteCommandFromParameters(CommandLibrary.java:88)
[java] at org.ejbca.ui.cli.EjbcaEjbCli.main(EjbcaEjbCli.java:38)
[java] Suppressed: java.net.ConnectException: Connection refused
[java] at java.base/sun.nio.ch.Net.pollConnect(Native Method)
[java] at java.base/sun.nio.ch.Net.pollConnectNow(Net.java:672)
[java] at java.base/sun.nio.ch.SocketChannelImpl.finishConnect(SocketChannelImpl.java:946)
[java] at org.xnio.nio.WorkerThread$ConnectHandle.handleReady(WorkerThread.java:331)
[java] at org.xnio.nio.WorkerThread.run(WorkerThread.java:603)
[java] at ...asynchronous invocation...(Unknown Source)
[java] at org.jboss.remoting3.EndpointImpl.connect(EndpointImpl.java:600)
[java] at org.jboss.remoting3.EndpointImpl.connect(EndpointImpl.java:565)
[java] at org.jboss.remoting3.ConnectionInfo$None.getConnection(ConnectionInfo.java:82)
[java] at org.jboss.remoting3.ConnectionInfo.getConnection(ConnectionInfo.java:55)
[java] at org.jboss.remoting3.EndpointImpl.doGetConnection(EndpointImpl.java:499)
[java] at org.jboss.remoting3.EndpointImpl.getConnectedIdentity(EndpointImpl.java:445)
[java] at org.jboss.remoting3.UncloseableEndpoint.getConnectedIdentity(UncloseableEndpoint.java:52)
[java] at org.jboss.ejb.protocol.remote.RemotingEJBDiscoveryProvider.getConnectedIdentityUsingClusterEffective(RemotingEJBDiscoveryProvider.java:342)
[java] at org.jboss.ejb.protocol.remote.RemotingEJBDiscoveryProvider$DiscoveryAttempt.connectAndDiscover(RemotingEJBDiscoveryProvider.java:436)
[java] at org.jboss.ejb.protocol.remote.RemotingEJBDiscoveryProvider.discover(RemotingEJBDiscoveryProvider.java:233)
[java] at org.jboss.ejb.protocol.remote.RemoteEJBDiscoveryConfigurator.lambda$configure$0(RemoteEJBDiscoveryConfigurator.java:42)
[java] at org.wildfly.discovery.impl.AggregateDiscoveryProvider.discover(AggregateDiscoveryProvider.java:58)
[java] at org.wildfly.discovery.ConfiguredProvider.discover(ConfiguredProvider.java:47)
[java] at org.wildfly.discovery.Discovery.discover(Discovery.java:122)
[java] at org.wildfly.discovery.Discovery.discover(Discovery.java:93)
[java] at org.jboss.ejb.client.DiscoveryEJBClientInterceptor.discover(DiscoveryEJBClientInterceptor.java:350)
[java] at org.wildfly.common.context.Contextual.runBiFunction(Contextual.java:224)
[java] at org.jboss.ejb.client.DiscoveryEJBClientInterceptor.discover(DiscoveryEJBClientInterceptor.java:345)
[java] at org.jboss.ejb.client.DiscoveryEJBClientInterceptor.doAnyDiscovery(DiscoveryEJBClientInterceptor.java:506)
[java] at org.jboss.ejb.client.DiscoveryEJBClientInterceptor.executeDiscovery(DiscoveryEJBClientInterceptor.java:430)
[java] at org.jboss.ejb.client.DiscoveryEJBClientInterceptor.handleInvocation(DiscoveryEJBClientInterceptor.java:110)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.sendRequest(EJBClientInvocationContext.java:514)
[java] at org.jboss.ejb.client.NamingEJBClientInterceptor.handleInvocation(NamingEJBClientInterceptor.java:69)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.sendRequest(EJBClientInvocationContext.java:514)
[java] at org.jboss.ejb.client.AuthenticationContextEJBClientInterceptor.lambda$handleInvocation$0(AuthenticationContextEJBClientInterceptor.java:45)
[java] at org.jboss.ejb.client.AuthenticationContextEJBClientInterceptor.call(AuthenticationContextEJBClientInterceptor.java:59)
[java] at org.jboss.ejb.client.AuthenticationContextEJBClientInterceptor.handleInvocation(AuthenticationContextEJBClientInterceptor.java:44)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.sendRequest(EJBClientInvocationContext.java:514)
[java] at org.jboss.ejb.client.TransactionInterceptor.handleInvocation(TransactionInterceptor.java:205)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.sendRequest(EJBClientInvocationContext.java:514)
[java] at org.wildfly.common.context.Contextual.runExConsumer(Contextual.java:203)
[java] at org.jboss.ejb.client.EJBClientInvocationContext.sendRequestInitial(EJBClientInvocationContext.java:341)
[java] at org.jboss.ejb.client.EJBInvocationHandler.invoke(EJBInvocationHandler.java:178)
[java] ... 7 more

BUILD FAILED
/opt/ejbca-ce-r9.0.0/build.xml:73: The following error occurred while executing this line:
/opt/ejbca-ce-r9.0.0/bin/cli.xml:98: The following error occurred while executing this line:
/opt/ejbca-ce-r9.0.0/bin/cli.xml:126: The following error occurred while executing this line:
/opt/ejbca-ce-r9.0.0/bin/cli.xml:211: Java returned: 1
i am using Java 17 jdk path are set
export PATH=/opt/mysql:$PATH

export WILDFLY_HOME=/opt/wildfly
export PATH=$PATH:$WILDFLY_HOME/bin
export APPSRV_HOME=/opt/wildfly
export JAVA_HOME=/usr/lib/jvm/java-17-openjdk-amd64
export PATH=$JAVA_HOME/bin:$PATH
export EJBCA_HOME=/opt/ejbca-ce-r9.0.0

note - https://localhost:8443/ejbca/adminweb/
on hitting this endpoint i am not able to access getting error
Authorization Denied
No client certificate was presented
If you did not get prompted to select a client certificate, please check that you have the correct certificate.

[primetomas]

Your server can not be contacted. Either it is not deployed, so you should start with basic troubleshooting.
https://docs.keyfactor.com/ejbca/latest/troubleshooting-guide

It may be that you missed the configuration for the CLI remoting:
https://docs.keyfactor.com/ejbca/latest/wildfly-35#id-(9.2)WildFly35-ConfigureWildFlyRemoting

See other topics in discussions, for example:
#765