[keycloak-user] Exclude users from password policy

[marcelo.miura]

Ok, done.

Thanks.


On 16/12/2016 10:00, Bruno Oliveira wrote:
> Please file a Jira, describing your setup and the steps to reproduce.
>
> On Fri, Dec 16, 2016 at 9:54 AM, marcelo.miura
> <marcelo.miura at gdcommunity.co.uk> wrote:
>> That's correct, yes!
>>
>> Any ideas?
>>
>>
>>
>> On 16/12/2016 09:50, Bruno Oliveira wrote:
>>> Hmmm, it looks like we have a similar bug
>>> https://issues.jboss.org/browse/KEYCLOAK-3657.
>>>
>>> Is that what happen with your import, but instead of role ids it
>>> changes user ids?
>>>
>>> On Thu, Dec 15, 2016 at 10:46 PM, marcelo.miura
>>> <marcelo.miura at gdcommunity.co.uk> wrote:
>>>> Thanks!
>>>>
>>>> I tried to do that, but when I imported the users to the new realm it
>>>> changed the user ids.
>>>>
>>>> Am I missing any step here?
>>>>
>>>>
>>>>
>>>> On 15/12/2016 18:09, Bruno Oliveira wrote:
>>>>> You can make use of partial imports. Take a look here:
>>>>>
>>>>>
>>>>> https://keycloak.gitbooks.io/server-adminstration-guide/content/topics/export-import.html
>>>>>
>>>>> On Thu, Dec 15, 2016 at 5:59 PM, marcelo.miura
>>>>> <marcelo.miura at gdcommunity.co.uk> wrote:
>>>>>> Thanks for your answer.
>>>>>>
>>>>>> Unfortunately, all my users are currently on master. Is there a way to
>>>>>> change all my users to another realm?
>>>>>>
>>>>>> Would that work if I try to export and import it to another realm?
>>>>>>
>>>>>>
>>>>>> Marcelo
>>>>>>
>>>>>>
>>>>>> On 15/12/2016 17:08, Marek Posolda wrote:
>>>>>>> Maybe you can use the admin user from master realm (and not set any
>>>>>>> password policies in master realm), but all your other users will be
>>>>>>> in some other "business" realms, which will have password policy. Is
>>>>>>> it work to have different realms?
>>>>>>>
>>>>>>> Marek
>>>>>>>
>>>>>>>
>>>>>>> On 15/12/16 19:10, marcelo.miura wrote:
>>>>>>>> Hi,
>>>>>>>>
>>>>>>>> I was wondering if that's possible to exclude a user from the
>>>>>>>> password
>>>>>>>> policies set on keycloak.
>>>>>>>> Problem: I have an admin user used on my API to create new users,
>>>>>>>> reset
>>>>>>>> password and exclude users from keycloak. But as there's a password
>>>>>>>> policy to expire the password within 30 days, this user cannot be
>>>>>>>> used
>>>>>>>> until we reset his password manually.
>>>>>>>>
>>>>>>>> Any ideas?
>>>>>>>>
>>>>>>>> Thanks in advance.
>>>>>>>> _______________________________________________
>>>>>>>> keycloak-user mailing list
>>>>>>>> keycloak-user at lists.jboss.org
>>>>>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>>>>>
>>>>>> _______________________________________________
>>>>>> keycloak-user mailing list
>>>>>> keycloak-user at lists.jboss.org
>>>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>>>>
>>>>>
>>>
>
>