[keycloak-dev] Facing Issue with Resource Server in Clustered Environment

[Bappaditya Gorai (bgorai)]

We are not talking about clustering for Keycloak server. The setup is for Resource Server (Keycloak Adapter)  in clustered environment.

Thanks
Bappaditya Gorai

-----Original Message-----
From: Stian Thorgersen [mailto:stian at redhat.com] 
Sent: Friday, January 30, 2015 12:57 PM
To: Bappaditya Gorai (bgorai)
Cc: keycloak-dev at lists.jboss.org
Subject: Re: [keycloak-dev] Facing Issue with Resource Server in Clustered Environment

1.0.4.Final had very limited support for clustering, please upgrade to 1.1.0.Final and refer to chapter 24 and 25 in the documentation (http://docs.jboss.org/keycloak/docs/1.1.0.Final/userguide/html/clustering.html).

----- Original Message -----
> From: "Bappaditya Gorai (bgorai)" <bgorai at cisco.com>
> To: keycloak-dev at lists.jboss.org
> Sent: Friday, 30 January, 2015 8:22:26 AM
> Subject: [keycloak-dev] Facing Issue with Resource Server in Clustered	Environment
> 
> 
> 
> Hi Team,
> 
> Please find the details on setup and observation below. Please provide 
> your suggestion on how to overcome this issue. We are using Keycloak 
> 1.0.4.Final (Adapter & Server).
> 
> 
> 
> 
> 
> Setup:
> 
> 1. We have brought up Jboss cluster ( Using mod_cluster, httpd ) with 
> 2 nodes in domain mode and enabled session replication between these nodes.
> 
> 2. Our Recourse server is deployed in this clustered environment with 
> distributable and Sticky session Off.
> 
> 
> 
> Behavior observed :
> 
> During the Authorization/Authentication process ,when Initial 
> call(Resource
> Access) lands on master and next redirection (post Code To token) 
> falls on slave Adapter is treating it as a new session and redirecting 
> to login URL again. So we ended up with circular redirection error. 
> After further investigation seems like session replication delay is 
> causing adapter to behave this way. As the redirection call happens 
> very quickly and this results in circular redirection error.
> 
> 
> 
> 
> 
> 
> 
> NOTE: Sticky Session in mod_cluster environment solves the issue but 
> it does not provide true load balancing. Therefore we are not 
> considering Stick session option.
> 
> 
> 
> 
> 
> Thanks
> 
> Bappaditya Gorai
> 
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev