2:11 a.m.
Hi,
We are using Keycloak 2.5.5 and we are facing issues with regard to keycloak session
timeout.
1. Even after session timeout for a particular user, keycloak is maintaining session
for that particular user for some extended time.
2. And if the same user log in again then keycloak is showing that the same user
maintains 2 sessions in active session section. (Previous session [it is no longer exists
for him at application level] and current session.)
We have done following keycloak settings just for checking above scenario. Could anyone
please suggest what are the settings to be done in keycloak so that above mentioned
scenario could be avoided?
[cid:image002.jpg@01D48002.E6221430]
Thanks & regards,
Ashutosh Kanthi
Le contenu de ce courriel et de toute pièce jointe est destiné à l’usage exclusif de son
destinataire. Il contient des renseignements exclusifs, privilégiés, confidentiels ou
assujettis au droit d’auteur. Toute divulgation, distribution ou reproduction non
autorisée est strictement interdite. Si vous n’êtes pas le destinataire prévu,
veuillez-nous en aviser immédiatement et supprimer toutes les copies de ce courriel et des
pièces jointes. Les courriels sont susceptibles d’altération. EXFO Inc. et ses sociétés
affiliées ne seront pas tenues responsables du message s’il a été contrefait, modifié ou
falsifié.
The content of this email and any of its attachments is intended for the exclusive use of
its recipient. It contains information that is proprietary, privileged, confidential
and/or subject to copyright. Any unauthorized disclosure, distribution or reproduction is
strictly prohibited. If you are not the intended recipient, please notify us immediately
and delete all copies of this email and any attachments. E-mails are susceptible to
alteration. EXFO Inc. and its affiliates shall not be liable for the message if altered,
changed or falsified.
2:34 a.m.
Hello Ashutosh,
Could you please try to reproduce this with the latest Keycloak (4.6.0)? Version 2.5.5 has
been released around 1.5 years ago, quite a lot has been done since then, including
session management.
Cheers,
Dmitry Telegin
CTO, Acutus s.r.o.
Keycloak Consulting and Training
Pod lipami street 339/52, 130 00 Prague 3, Czech Republic
+42 (022) 888-30-71
E-mail: info(a)acutus.pro
On Mon, 2018-11-19 at 07:11 +0000, Ashutosh Kanthi wrote:
Hi,
We are using Keycloak 2.5.5 and we are facing issues with regard to keycloak session
timeout.
1. Even after session timeout for a particular user, keycloak is maintaining session
for that particular user for some extended time.
2. And if the same user log in again then keycloak is showing that the same user
maintains 2 sessions in active session section. (Previous session [it is no longer exists
for him at application level] and current session.)
We have done following keycloak settings just for checking above scenario. Could anyone
please suggest what are the settings to be done in keycloak so that above mentioned
scenario could be avoided?
> [cid:image002.jpg@01D48002.E6221430]
Thanks & regards,
Ashutosh Kanthi
Le contenu de ce courriel et de toute pièce jointe est destiné à l’usage exclusif de son
destinataire. Il contient des renseignements exclusifs, privilégiés, confidentiels ou
assujettis au droit d’auteur. Toute divulgation, distribution ou reproduction non
autorisée est strictement interdite. Si vous n’êtes pas le destinataire prévu,
veuillez-nous en aviser immédiatement et supprimer toutes les copies de ce courriel et des
pièces jointes. Les courriels sont susceptibles d’altération. EXFO Inc. et ses sociétés
affiliées ne seront pas tenues responsables du message s’il a été contrefait, modifié ou
falsifié.
The content of this email and any of its attachments is intended for the exclusive use of
its recipient. It contains information that is proprietary, privileged, confidential
and/or subject to copyright. Any unauthorized disclosure, distribution or reproduction is
strictly prohibited. If you are not the intended recipient, please notify us immediately
and delete all copies of this email and any attachments. E-mails are susceptible to
alteration. EXFO Inc. and its affiliates shall not be liable for the message if altered,
changed or falsified.
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
4:06 a.m.
New subject: Get current user through JACC
I'm testing a javaee webapp inside a Wildfly with a 4.5.0.Final keycloak adapter
installed. The authentication is ok but now I would get in my web app the current user
id.
Using this code:
javax.security.jacc.PolicyContext.getContext("javax.security.auth.Subject.container");
I get null. How I miss to receive the user id?
You can test the sample of the keycloak quickstart from
https://github.com/keycloak/keycloak-quickstarts/tree/latest/app-authz-je... and add
that code in the Controller class where do you want.
3:05 a.m.
Hi Dmitry,
We have used latest Keycloak (4.6.0) but still we are getting the same issue.
Could you please suggest something on this?
Thanks & regards,
Ashutosh Kanthi
-----Original Message-----
From: Dmitry Telegin <dt(a)acutus.pro>
Sent: 19 November 2018 13:04
To: Ashutosh Kanthi <ashutosh.kanthi(a)exfo.com>; keycloak-user(a)lists.jboss.org
Cc: Abhijit Mhaske <abhijit.mhaske(a)exfo.com>; Mohammed Mustafa N
<mohammed.mustafa-n(a)exfo.com>; Sandeep Jalvi <sandeep.jalvi(a)exfo.com>
Subject: Re: [keycloak-user] Keycloak Session timeout issue
Hello Ashutosh,
Could you please try to reproduce this with the latest Keycloak (4.6.0)? Version 2.5.5 has
been released around 1.5 years ago, quite a lot has been done since then, including
session management.
Cheers,
Dmitry Telegin
CTO, Acutus s.r.o.
Keycloak Consulting and Training
Pod lipami street 339/52, 130 00 Prague 3, Czech Republic
+42 (022) 888-30-71
E-mail: info(a)acutus.pro
On Mon, 2018-11-19 at 07:11 +0000, Ashutosh Kanthi wrote:
Hi,
We are using Keycloak 2.5.5 and we are facing issues with regard to keycloak session
timeout.
1. Even after session timeout for a particular user, keycloak is maintaining session
for that particular user for some extended time.
2. And if the same user log in again then keycloak is showing that the same user
maintains 2 sessions in active session section. (Previous session [it is no longer exists
for him at application level] and current session.)
We have done following keycloak settings just for checking above scenario. Could anyone
please suggest what are the settings to be done in keycloak so that above mentioned
scenario could be avoided?
> [cid:image002.jpg@01D48002.E6221430]
Thanks & regards,
Ashutosh Kanthi
Le contenu de ce courriel et de toute pièce jointe est destiné à l’usage exclusif de son
destinataire. Il contient des renseignements exclusifs, privilégiés, confidentiels ou
assujettis au droit d’auteur. Toute divulgation, distribution ou reproduction non
autorisée est strictement interdite. Si vous n’êtes pas le destinataire prévu,
veuillez-nous en aviser immédiatement et supprimer toutes les copies de ce courriel et des
pièces jointes. Les courriels sont susceptibles d’altération. EXFO Inc. et ses sociétés
affiliées ne seront pas tenues responsables du message s’il a été contrefait, modifié ou
falsifié.
The content of this email and any of its attachments is intended for the exclusive use of
its recipient. It contains information that is proprietary, privileged, confidential
and/or subject to copyright. Any unauthorized disclosure, distribution or reproduction is
strictly prohibited. If you are not the intended recipient, please notify us immediately
and delete all copies of this email and any attachments. E-mails are susceptible to
alteration. EXFO Inc. and its affiliates shall not be liable for the message if altered,
changed or falsified.
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
Le contenu de ce courriel et
de toute pièce jointe est destiné à l’usage exclusif de son destinataire. Il contient des
renseignements exclusifs, privilégiés, confidentiels ou assujettis au droit d’auteur.
Toute divulgation, distribution ou reproduction non autorisée est strictement interdite.
Si vous n’êtes pas le destinataire prévu, veuillez-nous en aviser immédiatement et
supprimer toutes les copies de ce courriel et des pièces jointes. Les courriels sont
susceptibles d’altération. EXFO Inc. et ses sociétés affiliées ne seront pas tenues
responsables du message s’il a été contrefait, modifié ou falsifié.
The content of this email and any of its attachments is intended for the exclusive use of
its recipient. It contains information that is proprietary, privileged, confidential
and/or subject to copyright. Any unauthorized disclosure, distribution or reproduction is
strictly prohibited. If you are not the intended recipient, please notify us immediately
and delete all copies of this email and any attachments. E-mails are susceptible to
alteration. EXFO Inc. and its affiliates shall not be liable for the message if altered,
changed or falsified.
1980
days inactive
1982
days old
3 comments
3 participants
participants (3)
-
Ashutosh Kanthi -
Dmitry Telegin -
Luca Stancapiano