[keycloak-user] Alternative ways to reset password

[Stian Thorgersen]

This is a use-case we'll need to support. We have to be able to bootstrap a server without requiring using the admin console. However, it's not supported atm and we're not going to until at least until 1.1.

Your best option at the moment is to use to JSON import approach you're inclining towards ;)

Answers to your questions inline

----- Original Message -----
> From: "Kamal Jagadevan" <j.kamal at ymail.com>
> To: "Rodrigo Sasaki" <rodrigopsasaki at gmail.com>
> Cc: keycloak-user at lists.jboss.org
> Sent: Friday, 15 August, 2014 8:40:56 PM
> Subject: Re: [keycloak-user] Alternative ways to reset password
> 
> Thank you Rodrigo!!
> Can you please clarify the following?
> 
> 1. Admin-client is that something released in beta4 release, is that right?

It's in RC1

> 2. In order to use REST API in a out of box Keycloak service, don't you need
> Username, password and either public client id or combination of client id
> and secret.

Yes

> 3. Also for the 1st time login, you may need to change the admin password.
> can this be done through this Admin client

No

> 4. By default the Direct Grant access API is disabled for the "master" realm,
> can this also be modified through Admin client.

Yes, but you need it enabled to be able to use the admin client in the first place

> 
> My use case is Keycloak will be part of our product and all the 1st time
> setting +configuration should be done during installation step without end
> user logging into keycloak admin console.
> 
> 
> Currently I am inclined towards using a JSON to import a new realm that our
> product can use which are pre-configured with appropriate values. Not sure
> if there is any other better way of dealing with it.
> 
> Best
> Kamal
> 
> 
> 
> From: Rodrigo Sasaki <rodrigopsasaki at gmail.com>
> To: Kamal Jagadevan <j.kamal at ymail.com>
> Cc: "keycloak-user at lists.jboss.org" <keycloak-user at lists.jboss.org>
> Sent: Thursday, August 14, 2014 2:38 PM
> Subject: Re: [keycloak-user] Alternative ways to reset password
> 
> I believe I can help you with this one. The Keycloak team can correct me if I
> say anything inaccurate.
> 
> There is an admin-client bundled with Keycloak that can be used to access the
> Keycloak REST API, it's basically a Java REST client for the REST API that
> they provide and is documented here:
> http://docs.jboss.org/keycloak/docs/1.0-beta-4/rest-api/overview-index.html
> 
> Basically what you need is an OAuthClient or an Application, and a User and
> you can alter information like you requested.
> 
> The source is here:
> https://github.com/keycloak/keycloak/tree/master/integration/admin-client
> And you can add it as a maven dependency as well:
> http://maven-repository.com/artifact/org.keycloak/keycloak-admin-client/1.0-beta-4
> 
> 
> On Thu, Aug 14, 2014 at 3:08 PM, Kamal Jagadevan < j.kamal at ymail.com > wrote:
> 
> 
> 
> 
> 
> Hello,
> Are there any alternative ways like command line or shortcuts to update the
> Realm settings or user settings in Keycloak.
> Though it is possible to set it up through Admin console but trying to avoid
> the setup steps through UI.
> 
> Looks like during application bootstrap these are few settings like admin
> password to be reset & Direct Grant API access being disabled.
> Is there any other better way to modify other than UI or directly updating
> them in database.
> 
> 
> Please let us know. This is critical for our post install steps while
> integrating with Keycloak.
> 
> Thanks
> Kamal
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> 
> 
> 
> --
> Rodrigo Sasaki
> 
> 
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user