[keycloak-user] Passwords with umlauts

Andreas Lau andreas.lau at outlook.com
Mon Sep 17 09:31:05 EDT 2018


Hi,
Not quite sure how to solve this in first place. But as long nobody has a real answer to this. Have you considered to disallow umlauts for password via the password policy?
You possibly could define a regexp using the password policy type "Regular Expression" that disallow such umlauts. I know it's not the answer of your question, but may be a workaround until someone can give you a more sophisticated answer.
https://www.keycloak.org/docs/3.2/server_admin/topics/authentication/password-policies.html
Regards

Am 3. September 2018 22:51:37 MESZ schrieb zitrone at gmx-topmail.de:

Hi,

I have a problem with user passwords which contain umlauts (like Ö Ä Ü,
common ones in germany). They will be stored, but when i try to get a
token, it always fails with "Invalid user credentials".
I read
https://www.keycloak.org/docs/3.4/server_installation/index.html#unicode-considerations-for-databases
on how to enable unicode in the DB, but i don't get which columns to
alter. Since the password will be stored hashed and salted, will
altering the DB have any effect at all?

Technical setup:
Keycloak 3.4.3.Final
with an Oracle DB

Regards

zitrone
________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user


More information about the keycloak-user mailing list