May 2015 - keycloak-user - Jboss List Archives

Infinispan Clustering Issue with TCP JGroups Stack

by Lohitha Chiranjeewa

Hi, We're trying to have a clustered environment with two servers, and need Infinispan caches to work perfectly. We're using AWS servers for all our requirements, and they don't support multicasting. Hence the UDP option is out for us. So, as per the JIRA ticket KEYCLOAK-979, we have tried to continue with TCP instead. However we've had no success. Changes don't get synced between the servers. To configure TCPPING, we've referred both KEYCLOAK-979 ticket contents and http://middlewaremagic.com/jboss/?p=2015. We have enabled TCP communication in our VPC and have all the necessary ports open in our servers. We've followed the step given at http://docs.jboss.org/keycloak/docs/1.2.0.Beta1/userguide/html/clustering... to setup Infinispan and related configs. What could we be doing wrong here? Any configuration we're missing? Thanks, Lohitha.

10 years, 11 months

3
4
0 / 0

Migrating custom user database to Keycloak

by Anton Hughes

Hello Im currently investigating using Keycloak as a solution to manage users, as well as authentication and authorization. Currently, we have a jboss Errai application, and have a relational database of users and their encrypted password. Is there any tutorials, or advice, on how we would migrate our users to the Keycloak IDM? Thanks and regards Anton

10 years, 11 months

3
7
0 / 0

Keycloak as OpenID Connect Identity Provider?

by Thomas LaPorte

Can Keycloak act as an OpenID Connect Identity Provider? I'm only just getting an understanding of some of the various protocols and standards in this world, but I'm working from a set of developers' specs for a software project and one thing that they list is to use OpenID Connect. I can see from Chapter 9 of the Documentation how to configure the Identity Broker for various types of Identity Providers. But I can't find anything that suggests that Keycloak can act as the Identity Provider for OpenID Connect. I fear I might be missing something obvious. The information on the OpenID.net site ( http://openid.net/developers/libraries/ ) lists Keycloak, but it does not have details on whether it can only act as a Relying Party, or if it can also act as an Identity Provider. Any thoughts or pointers to something I'm missing in the docs would be appreciated. Thanks. -- Tom

10 years, 11 months

2
1
0 / 0

Check to see if user exists with Admin REST API

by Benjamin Hansmann [alphaApps]

I hope this is my last question to this list :-) I want to check if a user exists with given username/or email address from within an Android App while the user is typing. Hence I want to provide a REST endpoint to let the app check. I am using the Admin REST API for backchannel requests to keycloak from within my servlet. /admin/realms/{my-realm}/users/{username} (or the get(username) equivalent of admin-client) does not work for checking if the email address is already in use. /admin/realms/{my-realm}/users?search={username} works for email, but it's greedy. I think "%" is added at beginning and end of the query parameters before the database request, so that search hits are quasi guaranteed. E.g. if someone has a registered Email Address of john.smith(a)example.com and someone tries to register with smith(a)example.com or smith(a)example.com.br it is shown as already in use. Any ideas? How is this solved in the web frontend? Maybe the Admin REST API endpoint should support username and email as path params when those two can be used to login? Best Regards Benjamin

10 years, 11 months

2
3
0 / 0

Keycloak 1.2.0.CR1 OpenShift Cartridge released

by Stian Thorgersen

OpenShift Cartridge has been updated to 1.2.0.CR1

10 years, 11 months

1
0
0 / 0

Re: [keycloak-user] Batch import of accounts into Keycloak

by Eugene Chow

Thanks Marek for the detailed explanation! I’ll give it a shot. > Hi, > > you first need to enable "Direct access grant" for the master realm. > Then retrieve the token via direct access grant request for the master > realm for example with "security-admin-console" application. You can see > some example in the docs on how to do it: > http://docs.jboss.org/keycloak/docs/1.2.0.CR1/userguide/html/direct-acces... > . Use username/password of admin user in the endpoint (admin/admin by > default). > > Note that we have some more examples showing direct access grant (as > pointed on that page in the docs) and especially that admin-client > handles this for you, which is one of his big advantages. > > Then REST endpoint for adding user is here: > http://docs.jboss.org/keycloak/docs/1.2.0.CR1/rest-api/admin/realms/%7Bre... > . For change password, you need to use endpoint for "reset-password" and > then use another endpoint for removing required action from the user (as > reseting password will add this required action automatically). > > For more inspiration, you can also use keycloak admin console and use > some tool (For example Firebug in FF) to see which REST endpoints is > admin console itself using. Note that admin console is angular > application, which invokes all these admin REST endpoints under the hood. > > Marek > > On 6.5.2015 17:26, Eugene Chow wrote: >> Hi Marek, >> >> Thanks for the link. Looks like it came up shortly before I posted. >> >> I would like to first try the REST API as I can quickly whip up a BASH >> script to perform the batch import. In 1.2.0.CR1's REST API >> documentation, there doesn't seem to be an option to login as admin and >> get the token. >> >> Could you point out which URL I should call to login via curl on the CLI? >> >> Thanks! >> >> On 6/5/2015 10:33 PM, Marek Posolda wrote: >>> Hi, >>> >>> we have some admin REST API documented and the operations you mentioned >>> should be available there: >>> http://docs.jboss.org/keycloak/docs/1.2.0.CR1/rest-api/overview-index.html >>> >>> Maybe easiest solution for you would be to use our admin-client, which >>> allows to easily invoke REST endpoints as java methods and handles >>> obtain the accessToken for admin authentication too. If your >>> command-line has Java available, you can just run simple Java program, >>> which will use admin-client to invoke REST endpoints. The example for >>> admin client is here: >>> https://github.com/keycloak/keycloak/tree/master/examples/admin-client >>> >>> Marek >>> >>> >>> On 5.5.2015 17:30, Eugene Chow wrote: >>>> Hi, >>>> >>>> First of all, a big thank you to the developers for an SSO that's simple >>>> to use and a beautiful interface to boot. >>>> >>>> I'm running Keycloak for an app in development. For UAT purposes, I need >>>> to batch import accounts from a CSV file via the command-line. I'm >>>> looking for the REST API to login as admin, get token, create new >>>> account, update new acct's password, and then logout. I haven't found >>>> any documentation on this. >>>> >>>> If the REST API is not equipped for this purpose, what would be the >>>> correct method to bulk import users? >>>> >>>> Thanks! >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user

10 years, 11 months

1
0
0 / 0

Keycloak still creates long ugly urls

by Dean Peterson

I recently upgraded to the latest beta version of Keycloak expecting my long ugly url problem to go away: http://trade.abecorn.com/?redirect_fragment=%2F&code=ukqPsGX7F3ViiYdYgVjs... Am I doing something wrong?

10 years, 11 months

3
4
0 / 0

Disable SSL with keycloak-server.json

by Dean Peterson

I am trying to deploy Keycloak with Docker on a headless Redhat Enterprise Linux on Amazon's EC2. There is no way to sign in on the local host. I saw a brief mention of allowing an entry in the keycloak-server.json file to disable ssl but it does not appear that was ever implemented. Is there a way to disable ssl without first needing to sign in to the master realm as administrator?

10 years, 11 months

2
2
0 / 0

Deployment of 1.2.0.CR1

by Benjamin Hansmann [alphaApps]

Thanks for the release. I have questions regarding the new overlay distribution: 1 Wildfly adapter seems to be integrated in the overlay distribution, so no adapter installation is needed in this situation. Is this correct? 2 Section 3.1.2 (Install on existing WildFly 8.2.0.Final) of the documentation refers to the keycloak standalone server/appliance distribution. Is this intended? 3 I merged the keycloak specific configuration from standalone-keycloak.xml into the standalone.xml of my existing wildfly installation. Am I supposed to deploy the keycloak-server-1.2.0.CR1.war manually as in previous versions? Section 3.4. (Installing Keycloak Server as Root Context) states that main-auth-server is the name of the Keycloak server as defined in the Keycloak subsystem. Can I use this name to deploy it without providing the full path even when not using it as the default-web-module? 4 Will there be maven artifacts for this release soon? Best Regards Benjamin

10 years, 11 months

3
5
0 / 0

Keycloak 1.2.0.CR1 Docker image

by Stian Thorgersen

Keycloak 1.2.0.CR1 Docker image is available on Docker Hub (https://registry.hub.docker.com/u/jboss/keycloak/)

10 years, 11 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

keycloak-user May 2015