June 2015 - keycloak-user - Jboss List Archives

by Fadi Abdin

When my keycloak server run for few days, it start acting weird and start returning "Token is not active" when i just issued the token. My server is synced with a time server so the system date should be always valid. The solution is to restart keycloak. Have anyone faced this issue before ?? this issue is driving me crazy and i cant figure it out, i appreciate some help . . Thanks

11 years

1
0
0 / 0

Keycloak 1.2.0.Final released

by Stian Thorgersen

No major changes since 1.2.0.CR1 only some minor bug fixes. For full details see https://issues.jboss.org/secure/ReleaseNote.jspa?projectId=12313920&versi... and to download go to https://sourceforge.net/projects/keycloak/files/1.2.0.Final/.

11 years

2
2
0 / 0

Keycloak and desktop

by Alik Kurdyukov

Hello, I have a little question on integrating desktop application with Keycloak. I have 1. Desktop application that is a client to (1) a non-web server application and (2) a web server application 2. Non-web server application 3. Web application that is a Keycloak client 4. Keycloak server I want to ask user to auth once with Keycloak (using native WPF window) and use token of some kind for both servers. The questions are 1. What API should desktop application use to auth user with Keycloak? (maybe, I need to read keycloak.js code?) 2. What API should non-web server use to verify token? 3. Can I use bearer token with keycloak client that has access type ‘confidential', not ‘bearer only’? Thank you for your work :) -- Best regards, Alik Kurdyukov

11 years

2
1
0 / 0

Mixing https/http schemes with sslRequired == all

by Orestis Tsakiridis

Hello, Can keycloak operate on HTTPS while the REST application it protects runs on HTTP? I've also set "Require SSL" to "all requests" Regards Orestis

11 years

2
1
0 / 0

Unable to Import Realm Json file in 1.2.0-RC1

by Edem Morny

Hi, I created a realm in keycloak 1.2.0-RC1, exported it with the following command standalone.sh -Dkeycloak.migration.action=export -Dkeycloak.migration.provider=singleFile -Dkeycloak.migration.file=carewexmh-realm.json Unfortunately my colleagues are unable to import the exported realm file, and when I intentionally delete the realm and try to import it myself, I get the same exception as they do. Any idea what's wrong? Find the stacktrace below. If I need to include the jon file, do let me know and i'll include it. 15:25:35,904 ERROR [io.undertow.request] (default task-30) UT005023: Exception handling request to /auth/admin/realms: java.lang.RuntimeException: request path: /auth/admin/realms at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:54) [keycloak-services-1.2.0.CR1.jar:1.2.0.CR1] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:85) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:61) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:56) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:45) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:63) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:261) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:247) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:76) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:166) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.Connectors.executeRootHandler(Connectors.java:197) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:759) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) [rt.jar:1.8.0_25] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) [rt.jar:1.8.0_25] at java.lang.Thread.run(Thread.java:745) [rt.jar:1.8.0_25] Caused by: org.jboss.resteasy.spi.UnhandledException: org.codehaus.jackson.map.JsonMappingException: Can not deserialize instance of org.keycloak.representations.idm.RealmRepresentation out of START_ARRAY token at [Source: java.io.StringReader@3119350b; line: 1, column: 1] at org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(ExceptionHandler.java:76) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandler.java:212) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.writeException(SynchronousDispatcher.java:149) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:372) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:179) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:220) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.0.10.Final.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at org.keycloak.services.filters.ClientConnectionFilter.doFilter(ClientConnectionFilter.java:41) [keycloak-services-1.2.0.CR1.jar:1.2.0.CR1] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:40) [keycloak-services-1.2.0.CR1.jar:1.2.0.CR1] ... 28 more Caused by: org.codehaus.jackson.map.JsonMappingException: Can not deserialize instance of org.keycloak.representations.idm.RealmRepresentation out of START_ARRAY token at [Source: java.io.StringReader@3119350b; line: 1, column: 1] at org.codehaus.jackson.map.JsonMappingException.from(JsonMappingException.java:163) [jackson-mapper-asl-1.9.13.jar:1.9.13] at org.codehaus.jackson.map.deser.StdDeserializationContext.mappingException(StdDeserializationContext.java:219) [jackson-mapper-asl-1.9.13.jar:1.9.13] at org.codehaus.jackson.map.deser.StdDeserializationContext.mappingException(StdDeserializationContext.java:212) [jackson-mapper-asl-1.9.13.jar:1.9.13] at org.codehaus.jackson.map.deser.BeanDeserializer.deserializeFromArray(BeanDeserializer.java:875) [jackson-mapper-asl-1.9.13.jar:1.9.13] at org.codehaus.jackson.map.deser.BeanDeserializer.deserialize(BeanDeserializer.java:597) [jackson-mapper-asl-1.9.13.jar:1.9.13] at org.codehaus.jackson.map.ObjectMapper._readMapAndClose(ObjectMapper.java:2732) [jackson-mapper-asl-1.9.13.jar:1.9.13] at org.codehaus.jackson.map.ObjectMapper.readValue(ObjectMapper.java:1863) [jackson-mapper-asl-1.9.13.jar:1.9.13] at org.keycloak.util.JsonSerialization.readValue(JsonSerialization.java:50) [keycloak-core-1.2.0.CR1.jar:1.2.0.CR1] at org.keycloak.services.resources.admin.RealmsAdminResource.uploadRealm(RealmsAdminResource.java:164) [keycloak-services-1.2.0.CR1.jar:1.2.0.CR1] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.8.0_25] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) [rt.jar:1.8.0_25] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.8.0_25] at java.lang.reflect.Method.invoke(Method.java:483) [rt.jar:1.8.0_25] at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:137) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:296) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:250) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:140) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:103) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:356) [resteasy-jaxrs-3.0.10.Final.jar:] ... 39 more

11 years

2
1
0 / 0

LDAP configuration

by Ayrton Araújo

I'm trying do add a new user federation provider for integrate keycloak with a ldap server. The parameters: Console display name -> Active Directory Priority -> 0 Edit Mode -> READ_ONLY Sync Registrations -> OFF Vendor -> Active Directory Username LDAP attribute -> sAMAccountName User Object Classes -> person, organizationPerson, user Connection URL -> ldap://dom.example.com:389 Base DN -> DC=dom,DC=example,DC=com User DN Suffix -> CN=Users Bind DN -> CN=Keycloak.LDAP;CN=Users;DC=dom,DC=example,DC=com Bind Credential -> ******** Connection pooling -> ON Pagination -> ON Enable Account After Password Update -> OFF Batch Size -> 100 Periodic Full Sync -> OFF Periodic changed users sync -> ON Changed users sync period -> 86400 I tried change User DN Suffix to only Users, but it not works. The log always saying: LDAP: error code 1 - 000020D6: SvcErr: DSID-031007DB, problem 5012 (DIR_ERROR) And it says this when it tries to parse the User DN Suffix. Theres something wrong with my conf?

11 years

2
3
0 / 0

Re: [keycloak-user] When will Keycloak be a supported

by Schneider, John DODGE CONSULTING SERVICES, LLC

+1 for paid Keycloak support services from JBoss. If you could advocate for this by 2016, it'd be much appreciated. My client is evaluating other products mainly because of the FUD of free products and lack of commercial support. Some people in big companies think a product is better just because they have to pay for support. In the meantime, keep up the great work on development and don't take this as a message that you're not already doing a fantastic job supporting Keycloak. You are! Thanks, John

11 years

1
0
0 / 0

When will Keycloak be a supported service?

by Dean Peterson

I have been using Keycloak for some time now. I love it. I am doing a proof of concept for work. Unfortunately I am one of two architects. For reasons I won't go into, the other architect keeps changing his requirements. The new requirement is that security be a supported and externally hosted service. Do you have a time frame when Keycloak will be something we can just pay support for and have it hosted externally?

11 years

2
1
0 / 0

org.keycloak.VerificationException: Token is not active

by Carlos Feria

Hi all. I'm migrating my app to *keycloak-1.2.0.Final*. In this escenario i *have two servers*, one for *keycloak* and other *wildfly+keycloak-adapter* for myApp.war, both servers are in diferent hosts. I'm using javascript adapter for my app and a wildfly-adapter for my restApi.war. Javascript adapter send a requests as: *Bearer eyJhb..............b-ckM2WKRPgopaeQ3I3ZXQwOyYWFGEd5OIHqA* my problem is that when i send a request to restApi.war i have an exception as: ERROR [org.keycloak.adapters.BearerTokenRequestAuthenticator] (default task-14) Failed to verify token: *org.keycloak.VerificationException: Token is not active.* this tell me that my token is not active....i can't find where is the problem. In keycloak-1.1.Final this configuration was good. Please help me. -- Carlos E. Feria Vila

11 years

1
0
0 / 0

Re: [keycloak-user] Get user by id

by Chris Flatley

Thanks. I noticed some comments on that, changing usernames, etc in the dev mailing list. I couldn't quite see what the end results was (between the mailing list, jira, etc). Is the preferredUsername going to change too? Just wondered since I can register google.username(a)domain.com (as my username on keycloak's user inbuilt db). That overlaps with username(a)domain.com for a google provided account. Then the username(a)domain.com can't do social login through google. It would be nice if all brokers (including the internal one prefixed an brokerid to avoid this), C > C > > On Mon, Jun 8, 2015 at 12:21 PM, Stian Thorgersen <stian(a)redhat.com> > wrote: > >> In the past we had a mix of lookup by username/name and id. To make it >> more consistent in 1.3 we're changing this to only allow lookup by id. 1.3 >> should be out next week. >> >> ----- Original Message ----- >> > From: "Chris Flatley" <chrisflatley(a)gmx.net> >> > To: keycloak-user(a)lists.jboss.org >> > Sent: Monday, 8 June, 2015 1:16:50 PM >> > Subject: [keycloak-user] Get user by id >> > >> > This is probably really obvious, but I can't find it. >> > >> > I'm currently using the Admin REST API to find users by search. >> > >> > I see that the Admin REST API has get user representation by username, >> but I >> > want to also find user info (UserRepresentation) given the id. >> > >> > If this possible through REST? >> > >> > (Use case being it makes more sense to me to store the user id in my >> database >> > as a reference back to keycloak rather than the username or replicate >> any of >> > the user info which keycloak has stored). >> > >> > Many thanks (great product!) >> > >> > C >> > >> > _______________________________________________ >> > keycloak-user mailing list >> > keycloak-user(a)lists.jboss.org >> > https://lists.jboss.org/mailman/listinfo/keycloak-user >> > >

11 years

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

keycloak-user June 2015