<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.EmailStyle17
{mso-style-type:personal;
font-family:Consolas;
color:windowtext;
font-weight:normal;
font-style:normal;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:Consolas;
color:#1F497D;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas;color:#1F497D">Thanks for the update Marek.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas;color:#1F497D">We changed the LDAP attribute to another value and that got sync working.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas;color:#1F497D">-- Rajat<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:windowtext">From:</span></b><span style="color:windowtext"> Marek Posolda [mailto:mposolda@redhat.com]
<br>
<b>Sent:</b> 04 August 2015 16:10<br>
<b>To:</b> Nair, Rajat; keycloak-user@lists.jboss.org<br>
<b>Subject:</b> Re: [keycloak-user] Error during LDAP syncing on Keycloak 1.4.0<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Hi,<br>
<br>
this means that some of your LDAP user record doesn't have the attribute, which you mapped as "Username LDAP Attribute" in the admin console. For example if you configured
<br>
"Username LDAP Attribute" as "cn" and some of your LDAP user doesn't have "cn" . I've created JIRA
<a href="https://issues.jboss.org/browse/KEYCLOAK-1728">https://issues.jboss.org/browse/KEYCLOAK-1728</a> and have a fix, which will be available in 1.5 . The fix will give you better error message and won't break whole sync process with NPE, but just won't
import the incorrect user, which has missing attribute.<br>
<br>
Until that, you can either fix LDAP user records in your LDAP server to contain the missing attribute, or you can configure "Username LDAP Attribute" to different value.
<br>
<br>
Marek<br>
<br>
On 29.7.2015 11:10, Nair, Rajat wrote:<span style="font-size:12.0pt"><o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas">Hi,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas">As part of testing another issue (Distributed Keycloak user sessions using Infinispan), I upgraded my nodes to Keycloak 1.4.0 (grabbed release from here -
<a href="http://central.maven.org/maven2/org/keycloak/keycloak-server-dist/1.4.0.Final/keycloak-server-dist-1.4.0.Final.tar.gz">
http://central.maven.org/maven2/org/keycloak/keycloak-server-dist/1.4.0.Final/keycloak-server-dist-1.4.0.Final.tar.gz</a>). I wiped out our Keycloak database and recreated it. After configuring our LDAP server (similar configuration which worked against Keycloak
1.3.1 Final), when we try to sync users we get following exception – </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas">2015-07-29 09:00:42,062 ERROR [io.undertow.request] (default task-25) UT005023: Exception handling request to /auth/admin/realms/test/user-federation/instances/3ccbe831-2d9b-4253-8fe7-343d7ead505d/sync:
java.lang.RuntimeException: request path: /auth/admin/realms/test/user-federation/instances/3ccbe831-2d9b-4253-8fe7-343d7ead505d/sync</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:73)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:85)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:72)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:282)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:261)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:80)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:172)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:199)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:774)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at java.lang.Thread.run(Unknown Source)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas">Caused by: org.jboss.resteasy.spi.UnhandledException: java.lang.NullPointerException</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(ExceptionHandler.java:76)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandler.java:212)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.SynchronousDispatcher.writeException(SynchronousDispatcher.java:149)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:372)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:179)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:220)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)</span><o:p></o:p></p>
<p class="MsoNormal" style="text-indent:36.0pt"><span style="font-size:9.0pt;font-family:Consolas">at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:59)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> ... 29 more</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas">Caused by: java.lang.NullPointerException</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.models.cache.DefaultCacheUserProvider.getUserByUsername(DefaultCacheUserProvider.java:149)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.federation.ldap.LDAPFederationProviderFactory$2.run(LDAPFederationProviderFactory.java:294)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.models.utils.KeycloakModelUtils.runJobInTransaction(KeycloakModelUtils.java:242)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.federation.ldap.LDAPFederationProviderFactory.importLdapUsers(LDAPFederationProviderFactory.java:286)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.federation.ldap.LDAPFederationProviderFactory.syncImpl(LDAPFederationProviderFactory.java:241)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.federation.ldap.LDAPFederationProviderFactory.syncAllUsers(LDAPFederationProviderFactory.java:200)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.services.managers.UsersSyncManager.syncAllUsers(UsersSyncManager.java:50)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.keycloak.services.resources.admin.UserFederationProviderResource.syncUsers(UserFederationProviderResource.java:143)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at java.lang.reflect.Method.invoke(Unknown Source)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:137)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:296)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:250)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:140)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:109)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:135)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:109)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:135)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:109)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:135)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:103)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:356)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> ... 37 more</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas">Could this be a regression?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas">-- Rajat</span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><br>
<br>
<br>
<o:p></o:p></span></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>keycloak-user mailing list<o:p></o:p></pre>
<pre><a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><o:p></o:p></pre>
<pre><a href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman",serif"><o:p> </o:p></span></p>
</div>
</body>
</html>