[keycloak-user] Delete large realm fails with timeout

[Marek Posolda]

On 10/03/18 02:18, Niels Bertram wrote:
> Yes trying to upgrade to RH-SSO 7.2 but there are lots of errors 
> during database upgrade. Looks like the liquibase scripts work with a 
> fresh install but not after the database was "used" for 2 years and 
> holds data.
The idea is, that upgrade from from 1.9.8 (or any other version) to 
3.4.3 should always work even if you have existing data in the database. 
If it doesn't work it's a bug.

We are testing database upgrades, but it's possible that we miss some 
scenarios. For example DB upgrade is broken just if some "special" 
condition of data format happens (EG. Read-only LDAP is configured in 
the realm). So feel free to create JIRA and add stacktrace you saw at 
server.log during upgrade. Also all the other details (used DB, previous 
version you're migrating from etc).

Thanks,
Marek
> When hitting delete on the realm admin page, the action starts but 
> times out before the database can finish its work. I did manage to 
> reduce the size of records that need to be deleted by manually 
> clearing out USER_ATTRIBUTE which held ~150k rows. After that, I was 
> able to delete the realm through the admin console.
>
> On Tue, Mar 6, 2018 at 2:23 PM, Marek Posolda <mposolda at redhat.com 
> <mailto:mposolda at redhat.com>> wrote:
>
>     That's quite an old version. There are lots of changes and fixes
>     in the meantime. Do you have a chance to upgrade to latest 3.4.3
>     and try with it?
>
>     Marek
>
>
>     On 05/03/18 05:20, Niels Bertram wrote:
>
>         Is there a database script that we can run to delete a
>         keycloak realm with
>         large volume of synchronised users? We have a realm with a
>         "few" users
>         synced from LDAP in our RH-SSO 7.0 / Keycloak 1.9.8
>         installation and trying
>         to delete the realm via the console fails with a timeout.
>         Cheers Niels
>         _______________________________________________
>         keycloak-user mailing list
>         keycloak-user at lists.jboss.org
>         <mailto:keycloak-user at lists.jboss.org>
>         https://lists.jboss.org/mailman/listinfo/keycloak-user
>         <https://lists.jboss.org/mailman/listinfo/keycloak-user>
>
>
>
>