We are not talking about clustering for Keycloak server. The setup is for Resource Server
(Keycloak Adapter) in clustered environment.
From: Stian Thorgersen [mailto:email@example.com]
Sent: Friday, January 30, 2015 12:57 PM
To: Bappaditya Gorai (bgorai)
Subject: Re: [keycloak-dev] Facing Issue with Resource Server in Clustered Environment
1.0.4.Final had very limited support for clustering, please upgrade to 1.1.0.Final and
refer to chapter 24 and 25 in the documentation
----- Original Message -----
From: "Bappaditya Gorai (bgorai)" <bgorai(a)cisco.com>
Sent: Friday, 30 January, 2015 8:22:26 AM
Subject: [keycloak-dev] Facing Issue with Resource Server in Clustered Environment
Please find the details on setup and observation below. Please provide
your suggestion on how to overcome this issue. We are using Keycloak
1.0.4.Final (Adapter & Server).
1. We have brought up Jboss cluster ( Using mod_cluster, httpd ) with
2 nodes in domain mode and enabled session replication between these nodes.
2. Our Recourse server is deployed in this clustered environment with
distributable and Sticky session Off.
Behavior observed :
During the Authorization/Authentication process ,when Initial
Access) lands on master and next redirection (post Code To token)
falls on slave Adapter is treating it as a new session and redirecting
to login URL again. So we ended up with circular redirection error.
After further investigation seems like session replication delay is
causing adapter to behave this way. As the redirection call happens
very quickly and this results in circular redirection error.
NOTE: Sticky Session in mod_cluster environment solves the issue but
it does not provide true load balancing. Therefore we are not
considering Stick session option.
keycloak-dev mailing list