<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Hi Marek,
<div class=""><br class="">
</div>
<div class="">Sorry, never mind. We were missing the ‘cn’ user attribute mapper for some reason.. Adding this mapper fixes the issue. I did manage to reproduce the issue by debugging (using my IDE) the Keycloak source code in LDAPUtils#addUserToLDAP</div>
<div class=""><br class="">
</div>
<div class="">In UsersResource#createUser a ModelException is caught but never logged so this information gets lost completely: </div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">catch (ModelException me){<br class="">
if (session.getTransaction().isActive()) {<br class="">
session.getTransaction().setRollbackOnly();<br class="">
}<br class="">
return ErrorResponse.exists("Could not create user");<br class="">
}</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">It would be great if some exception logging could be added to this class to help in troubleshooting.</div>
<div class=""><br class="">
</div>
<div class="">cheers</div>
<div class=""><br class="">
</div>
<div class="">Edgar</div>
<div class=""><br class="">
</div>
<div class="">
<div>
<blockquote type="cite" class="">
<div class="">On 09 Aug 2016, at 15:07, Marek Posolda <<a href="mailto:mposolda@redhat.com" class="">mposolda@redhat.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div bgcolor="#FFFFFF" text="#000000" class="">
<div class="moz-cite-prefix">Maybe enable LDAP logging will help? You can enable TRACE logging for "org.keycloak.federation.<span style="background-color:#e4e4ff;" class="">ldap" in standalone.xml and see what's logged into server.log when you try to create
Keycloak user?<br class="">
<br class="">
Marek<br class="">
</span><br class="">
On 09/08/16 10:18, Edgar Vonk - <a href="http://info.nl" class="">Info.nl</a> wrote:<br class="">
</div>
<blockquote cite="mid:3286EE03-E0AC-41DE-8F7F-29FE963D990B@info.nl" type="cite" class="">
<pre wrap="" class="">Hi,
We no longer seem to be able to create new users in Keycloak with the LDAP/MSAD User Federation set up with ‘Sync Registrations’ turned on.
I think this is since we migrated to Keycloak 2.0.0.Final (not 100% sure).
When I try to create a new user from Keycloak (Manage - Users) I only see the error message ‘Error! Could not create user’ but nothing else. Nothing in the logs unfortunately. Not even at the debug level.
Any pointers on where to start looking for a solution? I have the Keycloak source code available.
cheers
Edgar
_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>