Keycloak App - postgres db authentication of keycloak user fails

Apps & App Center
, ,
1

Hey,

UCS ist still on 5.0-10 and I’m preparing for upgrade to 5.2.x.
I installed keycloak with some hickups but managed. Now when starting keycloak app I get an authentication error for user keycloak.

Connection error: : org.postgresql.util.PSQLException: FATAL: Passwort-Authentifizierung für Benutzer »keycloak« fehlgeschlagen

I checked via

psql postgresql://[fqdn]:5432/keycloak?sslmode=require -U keycloak

if user keycloak can log in. That worked fine.
Now I’m running out of ideas where to look. Any hints are very much appreciated.

2

Hi,

you will find the secret for the keycloak in /etc/keycloak.secret*.
Maybe you have to check if keycloak is available in the postgres.

This article may help you to solve the problem.

3

Thanks for the link. I checked that already and as I said, I can logon with the user.
I am a little bit confused now. You state that keycloak password can be found in /etc/ keycloak.secret*. I thought that is the password of user admin. In keycloak documentation for example it says: univention-keycloak --binduser=admin --bindpwdfile=/etc/keycloak.secret init.

In Post https://help.univention.com/t/updating-from-postgresql-11-to-postgresql-15/22162 is explained that the secret for user keycloak is in /etc/postgresql-keycloak.secret.

Which one is the correct one?

4

For those who might run into same problem.
Problem wasn’t after all postgres or keycloak but apache. Join of keycloak didn’t work because apache needed a restart to load new keycloak conf.