[keycloak-dev] Cannot login to fresh KC + Postgres setup

Libor Krzyžanek lkrzyzan at redhat.com
Wed Mar 25 06:07:16 EDT 2015


Hi,
I have the latest 1.2.0-Beta1 installation and I cannot login via admin/admin to master realm after fresh installation.

I see tables in postgres but cannot login.

Deployment is EAP 6.3 with proper modules + Postgres 9.2.8 (everything on Openshift, in keycloak-server.json I uses Openshift’s Postgres datasource defined in standalone.xml)

I’m checking tables and I see

keycloak=#  select * from USER_ENTITY;
                  id                  | email |           email_constraint           | email_verified | enabled | federation_link | first_name | last_name | realm_id | totp | username
--------------------------------------+-------+--------------------------------------+----------------+---------+-----------------+------------+-----------+----------+------+----------
 e8620950-494a-422a-9430-bf8a001b64b6 |       | 05634ab8-5856-4587-a42b-9dadb1eef591 | f              | t       |                 |            |           | master   | f    | admin
(1 row)

keycloak=# select * from credential where user_id='e8620950-494a-422a-9430-bf8a001b64b6';
                  id                  | device | hash_iterations |                salt                |   type   |                                          value                                           |               user_id
--------------------------------------+--------+-----------------+------------------------------------+----------+------------------------------------------------------------------------------------------+--------------------------------------
 675d7483-746e-4195-a544-327027890492 |        |               1 | \xa1a0aa3ca2e4ef65e26794805ed1248c | password | b8Ue+oLgrvdUWp4bzKAXoFfSli90ENUSPp439uIqks8iOMcMypjetKYbwZI8Qu1sTwXVZwdEJ6hVf/9hGa66FQ== | e8620950-494a-422a-9430-bf8a001b64b6
(1 row)

However USERNAME_LOGIN_FAILURE is empty.

rhdssodev2=# select * from USERNAME_LOGIN_FAILURE;
 realm_id | username | failed_login_not_before | last_failure | last_ip_failure | num_failures
----------+----------+-------------------------+--------------+-----------------+--------------
(0 rows)


Is it known issue?


Here is snippet from log:
2015/03/25 06:02:34,378 WARN  [org.jboss.resteasy.core.ResourceLocator] (http-/127.5.255.129:8080-3) Field uriInfo of subresource org.keycloak.services.resources.LoginActionsService will not be injected according to spec
2015/03/25 06:02:34,378 WARN  [org.jboss.resteasy.core.ResourceLocator] (http-/127.5.255.129:8080-3) Field clientConnection of subresource org.keycloak.services.resources.LoginActionsService will not be injected according to spec
2015/03/25 06:02:34,378 WARN  [org.jboss.resteasy.core.ResourceLocator] (http-/127.5.255.129:8080-3) Field providers of subresource org.keycloak.services.resources.LoginActionsService will not be injected according to spec
2015/03/25 06:02:34,378 WARN  [org.jboss.resteasy.core.ResourceLocator] (http-/127.5.255.129:8080-3) Field session of subresource org.keycloak.services.resources.LoginActionsService will not be injected according to spec
2015/03/25 06:02:34,423 DEBUG [org.keycloak.services.managers.AuthenticationManager] (http-/127.5.255.129:8080-3) validating password for user: admin
2015/03/25 06:02:34,424 DEBUG [org.keycloak.services.managers.AuthenticationManager] (http-/127.5.255.129:8080-3) Expiring remember me cookie
2015/03/25 06:02:34,425 DEBUG [org.keycloak.services.managers.AuthenticationManager] (http-/127.5.255.129:8080-3) Expiring cookie: KEYCLOAK_REMEMBER_ME path: /auth/realms/master
2015/03/25 06:02:34,431 DEBUG [freemarker.cache] (http-/127.5.255.129:8080-3) "template.ftl"["en_US",UTF-8,parsed]  using cached since vfs:/content/ROOT.war/WEB-INF/lib/keycloak-forms-common-themes-1.2.0.Beta1-SNAPSHOT.jar/theme/base/login/template.ftl didn't change.



Thanks,

Libor Krzyžanek
jboss.org Development Team




More information about the keycloak-dev mailing list