[keycloak-dev] Facing Issue with Resource Server in Clustered Environment

[Stian Thorgersen]

1.0.4.Final had very limited support for clustering, please upgrade to 1.1.0.Final and refer to chapter 24 and 25 in the documentation (http://docs.jboss.org/keycloak/docs/1.1.0.Final/userguide/html/clustering.html).

----- Original Message -----
> From: "Bappaditya Gorai (bgorai)" <bgorai at cisco.com>
> To: keycloak-dev at lists.jboss.org
> Sent: Friday, 30 January, 2015 8:22:26 AM
> Subject: [keycloak-dev] Facing Issue with Resource Server in Clustered	Environment
> 
> 
> 
> Hi Team,
> 
> Please find the details on setup and observation below. Please provide your
> suggestion on how to overcome this issue. We are using Keycloak 1.0.4.Final
> (Adapter & Server).
> 
> 
> 
> 
> 
> Setup:
> 
> 1. We have brought up Jboss cluster ( Using mod_cluster, httpd ) with 2 nodes
> in domain mode and enabled session replication between these nodes.
> 
> 2. Our Recourse server is deployed in this clustered environment with
> distributable and Sticky session Off.
> 
> 
> 
> Behavior observed :
> 
> During the Authorization/Authentication process ,when Initial call(Resource
> Access) lands on master and next redirection (post Code To token) falls on
> slave Adapter is treating it as a new session and redirecting to login URL
> again. So we ended up with circular redirection error. After further
> investigation seems like session replication delay is causing adapter to
> behave this way. As the redirection call happens very quickly and this
> results in circular redirection error.
> 
> 
> 
> 
> 
> 
> 
> NOTE: Sticky Session in mod_cluster environment solves the issue but it does
> not provide true load balancing. Therefore we are not considering Stick
> session option.
> 
> 
> 
> 
> 
> Thanks
> 
> Bappaditya Gorai
> 
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev