Re: [keycloak-dev] Facing Issue with Resource Server in Clustered Environment

Thanks for clarifying. So, I think adapter has become stateless in 1.1.0.Final. Is my understanding correct? -----Original Message----- From: Stian Thorgersen [mailto:stian@redhat.com] Sent: Friday, January 30, 2015 1:18 PM To: Bappaditya Gorai (bgorai) Cc: keycloak-dev(a)lists.jboss.org Subject: Re: [keycloak-dev] Facing Issue with Resource Server in Clustered Environment ----- Original Message ----- > From: "Bappaditya Gorai (bgorai)" <bgorai(a)cisco.com&gt; > To: "Stian Thorgersen" <stian(a)redhat.com&gt; > Cc: keycloak-dev(a)lists.jboss.org > Sent: Friday, 30 January, 2015 8:38:49 AM > Subject: RE: [keycloak-dev] Facing Issue with Resource Server in Clustered Environment > > We are not talking about clustering for Keycloak server. The setup is > for Resource Server (Keycloak Adapter) in clustered environment. Same answer > Thanks > Bappaditya Gorai > > -----Original Message----- > From: Stian Thorgersen [mailto:stian@redhat.com] > Sent: Friday, January 30, 2015 12:57 PM > To: Bappaditya Gorai (bgorai) > Cc: keycloak-dev(a)lists.jboss.org > Subject: Re: [keycloak-dev] Facing Issue with Resource Server in > Clustered Environment > > 1.0.4.Final had very limited support for clustering, please upgrade to > 1.1.0.Final and refer to chapter 24 and 25 in the documentation > (http://docs.jboss.org/keycloak/docs/1.1.0.Final/userguide/html/clustering...). > > ----- Original Message ----- >> From: "Bappaditya Gorai (bgorai)" <bgorai(a)cisco.com&gt; >> To: keycloak-dev(a)lists.jboss.org >> Sent: Friday, 30 January, 2015 8:22:26 AM >> Subject: [keycloak-dev] Facing Issue with Resource Server in Clustered >> Environment >> >> >> >> Hi Team, >> >> Please find the details on setup and observation below. Please >> provide your suggestion on how to overcome this issue. We are using >> Keycloak 1.0.4.Final (Adapter & Server). >> >> >> >> >> >> Setup: >> >> 1. We have brought up Jboss cluster ( Using mod_cluster, httpd ) >> with >> 2 nodes in domain mode and enabled session replication between these nodes. >> >> 2. Our Recourse server is deployed in this clustered environment >> with distributable and Sticky session Off. >> >> >> >> Behavior observed : >> >> During the Authorization/Authentication process ,when Initial >> call(Resource >> Access) lands on master and next redirection (post Code To token) >> falls on slave Adapter is treating it as a new session and >> redirecting to login URL again. So we ended up with circular redirection error. >> After further investigation seems like session replication delay is >> causing adapter to behave this way. As the redirection call happens >> very quickly and this results in circular redirection error. >> >> >> >> >> >> >> >> NOTE: Sticky Session in mod_cluster environment solves the issue but >> it does not provide true load balancing. Therefore we are not >> considering Stick session option. >> >> >> >> >> >> Thanks >> >> Bappaditya Gorai >> >> _______________________________________________ >> keycloak-dev mailing list >> keycloak-dev(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-dev _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev