[keycloak-dev] Facing Issue with Resource Server in Clustered Environment

[Bappaditya Gorai (bgorai)]

Thanks for clarifying.  So, I think adapter has become stateless in 1.1.0.Final. Is my understanding correct?


-----Original Message-----
From: Stian Thorgersen [mailto:stian at redhat.com] 
Sent: Friday, January 30, 2015 1:18 PM
To: Bappaditya Gorai (bgorai)
Cc: keycloak-dev at lists.jboss.org
Subject: Re: [keycloak-dev] Facing Issue with Resource Server in Clustered Environment



----- Original Message -----
> From: "Bappaditya Gorai (bgorai)" <bgorai at cisco.com>
> To: "Stian Thorgersen" <stian at redhat.com>
> Cc: keycloak-dev at lists.jboss.org
> Sent: Friday, 30 January, 2015 8:38:49 AM
> Subject: RE: [keycloak-dev] Facing Issue with Resource Server in Clustered	Environment
> 
> We are not talking about clustering for Keycloak server. The setup is 
> for Resource Server (Keycloak Adapter)  in clustered environment.

Same answer

> 
> Thanks
> Bappaditya Gorai
> 
> -----Original Message-----
> From: Stian Thorgersen [mailto:stian at redhat.com]
> Sent: Friday, January 30, 2015 12:57 PM
> To: Bappaditya Gorai (bgorai)
> Cc: keycloak-dev at lists.jboss.org
> Subject: Re: [keycloak-dev] Facing Issue with Resource Server in 
> Clustered Environment
> 
> 1.0.4.Final had very limited support for clustering, please upgrade to 
> 1.1.0.Final and refer to chapter 24 and 25 in the documentation 
> (http://docs.jboss.org/keycloak/docs/1.1.0.Final/userguide/html/clustering.html).
> 
> ----- Original Message -----
> > From: "Bappaditya Gorai (bgorai)" <bgorai at cisco.com>
> > To: keycloak-dev at lists.jboss.org
> > Sent: Friday, 30 January, 2015 8:22:26 AM
> > Subject: [keycloak-dev] Facing Issue with Resource Server in Clustered
> > 	Environment
> > 
> > 
> > 
> > Hi Team,
> > 
> > Please find the details on setup and observation below. Please 
> > provide your suggestion on how to overcome this issue. We are using 
> > Keycloak 1.0.4.Final (Adapter & Server).
> > 
> > 
> > 
> > 
> > 
> > Setup:
> > 
> > 1. We have brought up Jboss cluster ( Using mod_cluster, httpd ) 
> > with
> > 2 nodes in domain mode and enabled session replication between these nodes.
> > 
> > 2. Our Recourse server is deployed in this clustered environment 
> > with distributable and Sticky session Off.
> > 
> > 
> > 
> > Behavior observed :
> > 
> > During the Authorization/Authentication process ,when Initial 
> > call(Resource
> > Access) lands on master and next redirection (post Code To token) 
> > falls on slave Adapter is treating it as a new session and 
> > redirecting to login URL again. So we ended up with circular redirection error.
> > After further investigation seems like session replication delay is 
> > causing adapter to behave this way. As the redirection call happens 
> > very quickly and this results in circular redirection error.
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > NOTE: Sticky Session in mod_cluster environment solves the issue but 
> > it does not provide true load balancing. Therefore we are not 
> > considering Stick session option.
> > 
> > 
> > 
> > 
> > 
> > Thanks
> > 
> > Bappaditya Gorai
> > 
> > _______________________________________________
> > keycloak-dev mailing list
> > keycloak-dev at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
>