<div dir="ltr"><div><div>Jira issue for this:<br><a href="https://issues.jboss.org/browse/KEYCLOAK-2796">https://issues.jboss.org/browse/KEYCLOAK-2796</a><br><br></div>Best Regards,<br></div>Juraj<br><div><div><div><br><br></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">2016-04-08 8:19 GMT+02:00 Juraj Janosik <span dir="ltr"><<a href="mailto:juraj.janosik77@gmail.com" target="_blank">juraj.janosik77@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>OK. <br>Then in this case I can report inconsistency in displaying of value of parameter "enabled" between<br></div>following two admin REST API requests:<br>1. GET /admin/realms/{realm}/users/{id} => "enabled":false<br><br>2.1 GET /admin/realms/{realm}/users => "enabled":true<br>2.2 GET /admin/realms/{realm}/users?search={string} => "enabled":true<br><br></div>And in GUI Admin console is user disabled after Max Login Failure attempts.<br><br></div>Thanks.<span class="HOEnZb"><font color="#888888"><br></font></span></div><span class="HOEnZb"><font color="#888888">Juraj</font></span></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">2016-04-07 15:48 GMT+02:00 Stian Thorgersen <span dir="ltr"><<a href="mailto:sthorger@redhat.com" target="_blank">sthorger@redhat.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">User#enabled is only used for users that are manually disabled by admin and not for user temporarily disabled by brute force protection, so this is expected behavior.</div><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On 7 April 2016 at 14:18, Juraj Janosik <span dir="ltr"><<a href="mailto:juraj.janosik77@gmail.com" target="_blank">juraj.janosik77@gmail.com</a>></span> wrote:<br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div><div dir="ltr"><div><div><div><div>Hi,<br><br></div>is the following issue known in the community? (see description below)<br></div><br></div></div><u>Prerequisities:</u><br>1. Keycloak 1.9.1.Final, CentOS7, Oracle12c<br>2. User disabled after "Max Login Failure" attempts.<br><br><u>Observed behavior:</u><br>1. User displayed correctly as disabled ("enabled":false) via Get Representation of the user<br>GET /admin/realms/{realm}/users/{id}<br><br>2. User displayed correctly as disabled ("disabled":true) via <br>GET /admin/realms/{realm}/attack-detection/brute-force/usernames/{username}<br><br>3. User displayed not correctly ("enabled":true) via Get users (list of all users and search)<br>GET /admin/realms/{realm}/users<br>GET /admin/realms/{realm}/users?search={string}<br><br>Thanks a lot.<br><br>Best Regards,<br>Juraj<br><br><div><div><br><br></div></div></div>
<br></div></div>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>
</blockquote></div><br></div>
</div></div></blockquote></div><br></div>