2:29 a.m.
Hi again,
Already found the solution: You have to copy keycloak-add-user.json to the
node configuration directory:
cp domain/configuration/keycloak-add-user.json
domain/servers/server-one/configuration
My interpretation of the documentation is that it should load the
keycloak-add-user.json from domain configuration directory when starting
keycloak in Domain Clustered Mode.
Now after copying the file to the server-one configuration directory there
is also a message while starting up regarding importing the user account:
[Server:server-one] 09:22:45,025 INFO [org.keycloak.services]
(ServerService Thread Pool -- 62) KC-SERVICES0006: Importing users from
'/opt/kc0/keycloak-8.0.1/domain/servers/server-one/configuration/keycloak-ad
d-user.json'
[Server:server-one] 09:22:45,427 INFO [org.keycloak.services]
(ServerService Thread Pool -- 62) KC-SERVICES0009: Added user 'admin' to
realm 'master'
Is this the correct initial setup process?
Regards,
Hans
-----Ursprüngliche Nachricht-----
Von: keycloak-user-bounces(a)lists.jboss.org
[mailto:keycloak-user-bounces@lists.jboss.org] Im Auftrag von Frank, Hans,
22F
Gesendet: Dienstag, 3. Dezember 2019 08:59
An: keycloak-user(a)lists.jboss.org
Betreff: [keycloak-user] Not able to create administrative User in Domain
Clustered Mode
Hi all,
I am trying to configure Keycloak in Domain Clustered Mode. I already was
able to create a little bit more advanced configuration (with external
database and loadbalancer and so on) in standalone clustered mode and I am
trying to transfer this configuration to domain clustered mode. But I am not
able to create the initial admin account in domain clustered mode, so I
tried to narrow the problem down with leaving everything on default and just
try to create that account.
So the basic setup is:
- Download and unzip keycloak-8.0.1.zip
- Start master (including loadbalancer): ./bin/domain.sh
--host-config=host-master.xml
(basically the "Clustered Domain Example" from the documentation without the
slave node instance.)
When accessing keycloak (locally) I get the message "You need local access
to create the initial admin user. Open http://localhost:8080/auth or use the
add-user-keycloak script."
When I open http://localhost:8080/auth I get the exact same message. When I
open http://localhost:8080/auth/admin, I get a login form.
So I tried to use the script add-user-keycloak.sh:
./bin/add-user-keycloak.sh -r master -u admin -p Test --domain --dc
$KH/keycloak-8.0.1/domain/configuration/
Added 'admin' to
'/opt/kc0/keycloak-8.0.1/domain/configuration/keycloak-add-user.json',
restart server to load user
... and then restarted the server. But I still get the message "You need
local access ...." and when trying to login directly via .../auth/admin I
get "Invalid username or password.". Log output:
[Server:server-one] 08:52:10,560 WARN [org.keycloak.events] (default
task-2) type=LOGIN_ERROR, realmId=master, clientId=security-admin-console,
userId=null, ipAddress=127.0.0.1, error=user_not_found,
auth_method=openid-connect, auth_type=code,
redirect_uri=http://localhost:8080/auth/admin/master/console/,
code_id=b4fb71f2-6e61-40c9-8953-506e589a1a0a, username=admin,
authSessionParentId=b4fb71f2-6e61-40c9-8953-506e589a1a0a,
authSessionTabId=RZzwAXq3BEw
The content of ../domain/configuration/keycloak-add-user.json looks OK for
me:
[ {
"realm" : "master",
"users" : [ {
"username" : "admin",
"enabled" : true,
"credentials" : [ {
"type" : "password",
"secretData" :
"{\"value\":\"s0uo+lD2jgE+i68wWym1El6mlsMKJY3fkxlOMpRul9FBUv5vmQA/YbCC541NkP
2EXOp6UjQYtSErkI9OQnM65Q==\",\"salt\":\"WYn5KUEDP+LbxGQQDZfnSg==\"}",
"credentialData" :
"{\"hashIterations\":100000,\"algorithm\":\"pbkdf2-sha256\"}"
} ],
"realmRoles" : [ "admin" ]
} ]
What step did I miss in order to create the administrative account needed
for the initial login?
Thanks!
Hans