[keycloak-user] Not able to log into admin console ufter upgrading from 1.4 -> 1.9.1

Carsten Saathoff Carsten.Saathoff at kisters.de
Fri Apr 1 11:03:21 EDT 2016


Ah! You are right, I did not set that property. I even remember that it 
existed, now that you mention it. I agree that it's probably better to 
check it every time, since currently it's easy to overlook (obviously).

Thanks

Carsten

--------------------------------------------------------------------------------------------------------------------------------------------
 Carsten Saathoff - KISTERS AG - Stau 75 - 26122 Oldenburg - Germany
Handelsregister Aachen, HRB-Nr. 7838 | Vorstand: Klaus Kisters, Hanns Kisters | Aufsichtsratsvorsitzender: Dr. Thomas Klevers
Phone: +49 441 93602 -257 | Fax: +49 441 93602 -222 | E-Mail: Carsten.Saathoff at kisters.de | WWW: http://www.kisters.de
--------------------------------------------------------------------------------------------------------------------------------------------
Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. 
This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorised copying, disclosure or distribution of the material in this e-mail is strictly forbidden.

From:   Marek Posolda <mposolda at redhat.com>
To:     Carsten Saathoff <Carsten.Saathoff at kisters.de>, Thomas Darimont 
<thomas.darimont at googlemail.com>, keycloak-user at lists.jboss.org
Date:   01/04/2016 16:59
Subject:        Re: [keycloak-user] Not able to log into admin console 
ufter upgrading from 1.4 -> 1.9.1



I've finally reproduced it and see why the DB wasn't upgraded for you. I 
guess you were missing property "databaseSchema" in the configuration of 
connectionsMongo in keycloak-server.json. I've removed this property for 
the future versions and instead Mongo will be checked for updates by 
default at startup. JIRA is here 
https://issues.jboss.org/browse/KEYCLOAK-2737

Marek

On 01/04/16 14:09, Carsten Saathoff wrote:
Hi Thomas, 

yes, that's what I eventually did and it worked. Thanks. 

best 

Carsten 
Carsten Saathoff - KISTERS AG - Stau 75 - 26122 Oldenburg - Germany
Handelsregister Aachen, HRB-Nr. 7838 | Vorstand: Klaus Kisters, Hanns 
Kisters | Aufsichtsratsvorsitzender: Dr. Thomas Klevers
Phone: +49 441 93602 -257 | Fax: +49 441 93602 -222 | E-Mail: 
Carsten.Saathoff at kisters.de | WWW: http://www.kisters.de Diese E-Mail 
enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie 
nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten 
haben, informieren Sie bitte sofort den Absender und vernichten Sie diese 
Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail 
ist nicht gestattet. 
This e-mail may contain confidential and/or privileged information. If you 
are not the intended recipient (or have received this e-mail in error) 
please notify the sender immediately and destroy this e-mail. Any 
unauthorised copying, disclosure or distribution of the material in this 
e-mail is strictly forbidden. 



From:        Thomas Darimont <thomas.darimont at googlemail.com> 
To:        Carsten Saathoff <Carsten.Saathoff at kisters.de> 
Cc:        keycloak-user <keycloak-user at lists.jboss.org>, 
keycloak-user-bounces at lists.jboss.org 
Date:        01/04/2016 14:04 
Subject:        Re: [keycloak-user] Not able to log into admin console 
ufter upgrading from 1.4 -> 1.9.1 
Sent by:        keycloak-user-bounces at lists.jboss.org 



Hello, 

I guess you could change this in the database ... -> e.g. in the "client" 
table in the keycloak db, there are boolean flags per client like: 
-  standard_flow_enabled boolean NOT NULL DEFAULT true, 
-  implicit_flow_enabled boolean NOT NULL DEFAULT false, 
-  direct_access_grants_enabled boolean NOT NULL DEFAULT false,  

You could try to change that ...  

Cheers, 
Thomas 

2016-04-01 12:29 GMT+02:00 Carsten Saathoff <Carsten.Saathoff at kisters.de>: 

Hi again, I should have added some more details, sorry: 

keycloak-user-bounces at lists.jboss.org wrote on 01/04/2016 12:18:06:

> I just upgraded my old Keycloak 1.4 installation to 1.9.1. But I am 
> not able to log into the admin console any more. After having read 
> the migration guide again, it seems this could be due to the direct 
> grant being disabled now for some client. But to be honest, I don't 
> quite understand what exactly the issue is. Any ideas? 
> 

the browser shows me the following error: 

Client is not allowed to initiate browser login with given response_type. 
Standard flow is disabled for the client. 

In the logs, I only find the following line: 

2016-04-01 12:27:16,772 WARN  [org.keycloak.events] (default task-7) 
type=LOGIN_ERROR, realmId=master, clientId=security-admin-console, 
userId=null, ipAddress=192.168.113.34, error=not_allowed, 
response_type=code, response_mode=fragment 

I am not sure, what I have to do to enable the standard flow in the 1.4 
UI. 

thanks 

Carsten 
Carsten Saathoff - KISTERS AG - Stau 75 - 26122 Oldenburg - Germany
Handelsregister Aachen, HRB-Nr. 7838 | Vorstand: Klaus Kisters, Hanns 
Kisters | Aufsichtsratsvorsitzender: Dr. Thomas Klevers
Phone: +49 441 93602 -257 | Fax: +49 441 93602 -222 | E-Mail: 
Carsten.Saathoff at kisters.de | WWW: http://www.kisters.de Diese E-Mail 
enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie 
nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten 
haben, informieren Sie bitte sofort den Absender und vernichten Sie diese 
Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail 
ist nicht gestattet. 
This e-mail may contain confidential and/or privileged information. If you 
are not the intended recipient (or have received this e-mail in error) 
please notify the sender immediately and destroy this e-mail. Any 
unauthorised copying, disclosure or distribution of the material in this 
e-mail is strictly forbidden. 

_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user 
_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user 


_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160401/624d3a02/attachment.html 


More information about the keycloak-user mailing list