4:29 p.m.
Dear experts,
I'm working with keycloak 1.9.4.
We ran some customization with the Authenticators: we implemented a
couple of authenticators in sequence, like provide an OTP token, provide
an additional information etc.
We are facing several issues:
1) we create our custom Flow from the Authentication interface
2) we add our 4 form (Add Execution)
3) from the Flows Module we select the order in which they should be
selected
4) we define in the binding sour flow as Browser Flow
5) we register and enable our executions from the Required Actions
module.
About point 3): even if we change the order of the flows using the
priorities arrows, the forms doesn't show up in order.
We tried to delete and to re-create, but we don't understand if we
should do something else to impose the order we need.
After creation, we decided to remove each single "Execution" and then
remove the flow.
We set again the "Browser Flow" to the standard "Browser", we removed
the created jars from the provider/ directory, but every time that we
try to authenticate we get an error saying that there is still an
existing reference to the old deployment, although the provider/
directory is currently empty.
16:00:40,199 ERROR [io.undertow.request] (default task-4) UT005023:
Exception handling request to
/auth/realms/etatvs/login-actions/required-action:
org.jboss.resteasy.spi.UnhandledException: java.lang.RuntimeException:
Unable to find factory for Required Action: renew_password_config did
you forget to declare it in a META-INF/services file?
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
at
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
at
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
at
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
at
io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
at
io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
Caused by: java.lang.RuntimeException: Unable to find factory for
Required Action: renew_password_config did you forget to declare it in a
META-INF/services file?
at
org.keycloak.services.managers.AuthenticationManager.executionActions(AuthenticationManager.java:569)
at
org.keycloak.services.managers.AuthenticationManager.actionRequired(AuthenticationManager.java:504)
at
org.keycloak.services.managers.AuthenticationManager.nextActionAfterAuthentication(AuthenticationManager.java:426)
at
org.keycloak.services.resources.LoginActionsService$Checks.verifyRequiredAction(LoginActionsService.java:302)
at
org.keycloak.services.resources.LoginActionsService.processRequireAction(LoginActionsService.java:856)
Could you support?
Thanks
7:09 a.m.
On 12 May 2016 at 16:29, Tech @ PSYND <tech(a)psynd.net> wrote:
Dear experts,
I'm working with keycloak 1.9.4.
We ran some customization with the Authenticators: we implemented a
couple of authenticators in sequence, like provide an OTP token, provide
an additional information etc.
We are facing several issues:
1) we create our custom Flow from the Authentication interface
2) we add our 4 form (Add Execution)
3) from the Flows Module we select the order in which they should be
selected
4) we define in the binding sour flow as Browser Flow
5) we register and enable our executions from the Required Actions
module.
About point 3): even if we change the order of the flows using the
priorities arrows, the forms doesn't show up in order.
We tried to delete and to re-create, but we don't understand if we
should do something else to impose the order we need.
The arrows should change the order
After creation, we decided to remove each single "Execution" and then
remove the flow.
We set again the "Browser Flow" to the standard "Browser", we
removed
the created jars from the provider/ directory, but every time that we
try to authenticate we get an error saying that there is still an
existing reference to the old deployment, although the provider/
directory is currently empty.
16:00:40,199 ERROR [io.undertow.request] (default task-4) UT005023:
Exception handling request to
/auth/realms/etatvs/login-actions/required-action:
org.jboss.resteasy.spi.UnhandledException: java.lang.RuntimeException:
Unable to find factory for Required Action: renew_password_config did
you forget to declare it in a META-INF/services file?
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
at
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
at
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
at
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
at
io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
at
io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
Caused by: java.lang.RuntimeException: Unable to find factory for
Required Action: renew_password_config did you forget to declare it in a
META-INF/services file?
at
org.keycloak.services.managers.AuthenticationManager.executionActions(AuthenticationManager.java:569)
at
org.keycloak.services.managers.AuthenticationManager.actionRequired(AuthenticationManager.java:504)
at
org.keycloak.services.managers.AuthenticationManager.nextActionAfterAuthentication(AuthenticationManager.java:426)
at
org.keycloak.services.resources.LoginActionsService$Checks.verifyRequiredAction(LoginActionsService.java:302)
at
org.keycloak.services.resources.LoginActionsService.processRequireAction(LoginActionsService.java:856)
That's a required action that's missing "renew_password_config". Maybe
a
user that has had the action associated with it? Try checking the user
through the admin console and see what required actions it has? Or maybe
you've configured required actions as well as authenticators?
Could you support?
Thanks
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
8:01 a.m.
Hello Stian,
About the Java error appearing, I saw that keycloak is keeping still
some "no existing" dependencies, I had to re-deploy part of the code,
complete some workflows and after removing again the code, everything
was working.
What I'm worried about is I re-deployed again the authenticator in a
brand new keycloak, and the fact that I'm unable to change the order of
the flows using the arrows is surprising me.
I think today that this could be a bug of the product, I cannot find any
other explaination in this case.
May I send you the code to let you verify yourself what is happening?
I've the feeling that keycloak is writing the wrong order of execution
of flows in the database, but I'm not able to debug it.
Thanks!
On 2016-05-19 07:09, Stian Thorgersen wrote:
On 12 May 2016 at 16:29, Tech @ PSYND <tech(a)psynd.net> wrote:
> Dear experts,
>
> I'm working with keycloak 1.9.4.
>
> We ran some customization with the Authenticators: we implemented a
> couple of authenticators in sequence, like provide an OTP token,
> provide
> an additional information etc.
>
> We are facing several issues:
> 1) we create our custom Flow from the Authentication interface
> 2) we add our 4 form (Add Execution)
> 3) from the Flows Module we select the order in which they should
> be
> selected
> 4) we define in the binding sour flow as Browser Flow
> 5) we register and enable our executions from the Required Actions
> module.
>
> About point 3): even if we change the order of the flows using the
> priorities arrows, the forms doesn't show up in order.
>
> We tried to delete and to re-create, but we don't understand if we
> should do something else to impose the order we need.
The arrows should change the order
> After creation, we decided to remove each single "Execution" and
> then
> remove the flow.
>
> We set again the "Browser Flow" to the standard "Browser", we
> removed
> the created jars from the provider/ directory, but every time that
> we
> try to authenticate we get an error saying that there is still an
> existing reference to the old deployment, although the provider/
> directory is currently empty.
>
> 16:00:40,199 ERROR [io.undertow.request] (default task-4) UT005023:
> Exception handling request to
> /auth/realms/etatvs/login-actions/required-action:
> org.jboss.resteasy.spi.UnhandledException:
> java.lang.RuntimeException:
> Unable to find factory for Required Action: renew_password_config
> did
> you forget to declare it in a META-INF/services file?
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
> at
>
io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
> at
>
io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
> Caused by: java.lang.RuntimeException: Unable to find factory for
> Required Action: renew_password_config did you forget to declare it
> in a
> META-INF/services file?
> at
>
org.keycloak.services.managers.AuthenticationManager.executionActions(AuthenticationManager.java:569)
> at
>
org.keycloak.services.managers.AuthenticationManager.actionRequired(AuthenticationManager.java:504)
> at
>
org.keycloak.services.managers.AuthenticationManager.nextActionAfterAuthentication(AuthenticationManager.java:426)
> at
>
org.keycloak.services.resources.LoginActionsService$Checks.verifyRequiredAction(LoginActionsService.java:302)
> at
>
org.keycloak.services.resources.LoginActionsService.processRequireAction(LoginActionsService.java:856)
That's a required action that's missing "renew_password_config". Maybe
a user that has had the action associated with it? Try checking the
user through the admin console and see what required actions it has?
Or maybe you've configured required actions as well as authenticators?
> Could you support?
>
> Thanks
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user [1]
Links:
------
[1] https://lists.jboss.org/mailman/listinfo/keycloak-user
2892
days inactive
2899
days old
2 comments
2 participants
participants (2)
-
Stian Thorgersen -
Tech ＠ PSYND