Problem:
Keycloak Client scopes analyse shows unknown_error
Investigation:
univention-app configure keycloak --set keycloak/log/level=DEBUG
docker logs keycloak 2>&1 |tee -a keycloak.logs
Search for error message, when reporducing the failure.
There was message regarding an user, which has no username attribute. So a test with the users search in Keycloak for “*” returned the same error.
Solution:
The log file contained a reference to a user named “backup” who had no username. It was also not visible via ldap-directory, just univention-ldapsearch, because lots of attributes were missing.
Removing the misterious user resolved the issue.