11:51 a.m.
Hi team, we are using Keycloak and we are facing two issues that we do not
know why is happening
1. We are using the same Database to save Keycloak and our App information,
we have a Spring boot and MongoDB environment, so we have access directly
from our Application level to the Keycloak collections, we had noticed
that if we change any value on Keycloak collection form the DB or from our
app level it is no reflected on Keycloak
Does Keycloak have some security validation for data that are No saved from
the Admin or API ?
Could be related with Caching ?
2. For some reason our Keycloak collections is getting mess up, after a
period of time, what is happening is the Master/Realm/Admin User password
is getting clean up and also the credentials for some of our users
Do you have any idea what is happening ?
Could be related with that we are adding extra values to the "user"
collection ?
Thanks
Francisco
9:58 p.m.
On 05/08/16 04:51, Francisco Montada wrote:
Hi team, we are using Keycloak and we are facing two issues that we
do
not know why is happening
1. We are using the same Database to save Keycloak and our App
information, we have a Spring boot and MongoDB environment, so we have
access directly from our Application level to the Keycloak
collections, we had noticed that if we change any value on Keycloak
collection form the DB or from our app level it is no reflected on
Keycloak
Does Keycloak have some security validation for data that are No saved
from the Admin or API ?
Could be related with Caching ?
Yes, Keycloak has cache for user data. It's
possible to disable it in
keycloak admin console.
2. For some reason our Keycloak collections is getting mess up, after
a period of time, what is happening is the Master/Realm/Admin User
password is getting clean up and also the credentials for some of our
users
Do you have any idea what is happening ?
Could be related with that we are adding extra values to the "user"
collection ?
Yes. Also the question is, if you're not doing something, which
accidentally breaks existing users (delete their passwords etc)?
Marek
Thanks
Francisco
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
12:23 a.m.
Hi Marek , thanks so much for you reply
The first question is clear.
The second question, We are sure we do not have any extra process in our
application that can cause Master/Realm/Admin clean up,
When you said "Yes" means that if we add new properties to the "User"
collection keycloak is detecting it like the DB was hacked ?
Thanks
Francisco
On Mon, Aug 8, 2016 at 5:58 AM, Marek Posolda <mposolda(a)redhat.com> wrote:
On 05/08/16 04:51, Francisco Montada wrote:
Hi team, we are using Keycloak and we are facing two issues that we do not
know why is happening
1. We are using the same Database to save Keycloak and our App
information, we have a Spring boot and MongoDB environment, so we have
access directly from our Application level to the Keycloak collections, we
had noticed that if we change any value on Keycloak collection form the DB
or from our app level it is no reflected on Keycloak
Does Keycloak have some security validation for data that are No saved
from the Admin or API ?
Could be related with Caching ?
Yes, Keycloak has cache for user data. It's possible to disable it in
keycloak admin console.
2. For some reason our Keycloak collections is getting mess up, after a
period of time, what is happening is the Master/Realm/Admin User password
is getting clean up and also the credentials for some of our users
Do you have any idea what is happening ?
Could be related with that we are adding extra values to the "user"
collection ?
Yes. Also the question is, if you're not doing something, which
accidentally breaks existing users (delete their passwords etc)?
Marek
Thanks
Francisco
_______________________________________________
keycloak-user mailing
listkeycloak-user@lists.jboss.orghttps://lists.jboss.org/mailman/listinfo/keycloak-user
9:32 p.m.
Sorry to not be clear in my last answer. Keycloak doesn't have any
detection, that if you add new property to mongo "user" it will break.
You can manually add any property you want to the objects in "user"
collection.
However note that:
- Keycloak data is cached, so direct mongo modifications to user won't
be visible by Keycloak until you clear the cache or restart Keycloak
server (or disable cache).
- I was more thinking about the case, that with your direct modification
to "user" object, there is a chance that you accidentally delete some
properties of the "user" object. For example you update some attribute
of "user" and accidentally delete password etc.
Keycloak itself doesn't have anything, which clears the password of
existing users. So you can try to just run Keycloak without running the
second app. If Keycloak will still work after a period of time, then you
will know that breaking user records is probably related to some mongo
modifications by your second app.
Marek
On 08/08/16 17:23, Francisco Montada wrote:
Hi Marek , thanks so much for you reply
The first question is clear.
The second question, We are sure we do not have any extra process in
our application that can cause Master/Realm/Admin clean up,
When you said "Yes" means that if we add new properties to the "User"
collection keycloak is detecting it like the DB was hacked ?
Thanks
Francisco
On Mon, Aug 8, 2016 at 5:58 AM, Marek Posolda <mposolda(a)redhat.com
<mailto:mposolda@redhat.com>> wrote:
On 05/08/16 04:51, Francisco Montada wrote:
> Hi team, we are using Keycloak and we are facing two issues that
> we do not know why is happening
>
> 1. We are using the same Database to save Keycloak and our App
> information, we have a Spring boot and MongoDB environment, so we
> have access directly from our Application level to the Keycloak
> collections, we had noticed that if we change any value on
> Keycloak collection form the DB or from our app level it is no
> reflected on Keycloak
>
> Does Keycloak have some security validation for data that are No
> saved from the Admin or API ?
> Could be related with Caching ?
Yes, Keycloak has cache for user data. It's possible to disable it
in keycloak admin console.
>
> 2. For some reason our Keycloak collections is getting mess up,
> after a period of time, what is happening is the
> Master/Realm/Admin User password is getting clean up and also the
> credentials for some of our users
>
> Do you have any idea what is happening ?
> Could be related with that we are adding extra values to the
> "user" collection ?
Yes. Also the question is, if you're not doing something, which
accidentally breaks existing users (delete their passwords etc)?
Marek
>
> Thanks
> Francisco
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> <https://lists.jboss.org/mailman/listinfo/keycloak-user>
2837
days inactive
2841
days old
3 comments
2 participants
participants (2)
-
Francisco Montada -
Marek Posolda