Bug 1717909
| Summary: | Rebase keycloak-httpd-client-install to pick up OIDC support | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Martin Kosek <mkosek> |
| Component: | keycloak-httpd-client-install | Assignee: | Jakub Hrozek <jhrozek> |
| Status: | CLOSED ERRATA | QA Contact: | Scott Poore <spoore> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 8.0 | Keywords: | Rebase |
| Target Milestone: | rc | Flags: | mkosek:
mirror+
|
| Target Release: | 8.0 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | keycloak-httpd-client-install-1.0-1.el8 | Doc Type: | Rebase: Enhancements Only |
| Doc Text: |
Important: if this rebase also contains *bug fixes* (or contains only bug fixes), select the correct option from the Doc Type drop-down list.
Rebase package(s) to version:
keycloak-httpd-client-install-1.0-1.el8
Highlights and notable enhancements:
Added OpenID Connect support, see BZ https://bugzilla.redhat.com/show_bug.cgi?id=1553890
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2019-11-05 21:18:49 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1553890 | ||
|
Description
Martin Kosek
2019-06-06 12:48:27 UTC
Verified. Version :: keycloak-httpd-client-install-1.0-2.el8.noarch Results :: TC1: mellon root and protected not related [root@sp2 conf.d]# /root/khci_m.sh + export KEYCLOAK_SERVER=idp.keycloak.test + KEYCLOAK_SERVER=idp.keycloak.test + export KEYCLOAK_REALM=master + KEYCLOAK_REALM=master + export KEYCLOAK_ADMIN_PASSWORD=Secret123 + KEYCLOAK_ADMIN_PASSWORD=Secret123 + keycloak-httpd-client-install --client-originate-method registration --keycloak-server-url https://idp.keycloak.test:8443 --keycloak-admin-username admin --keycloak-realm master --app-name example_app --client-type mellon --location-root mellon_root --protected-locations /private --force ConfigurationError: Invalid protected location "/private/" must be equal to or ancestor of the location root "/mellon_root/" failed as expected ^^^ no login/logout tests run TC2: mellon root and protected same: [root@sp2 conf.d]# /root/khci_m.sh + export KEYCLOAK_SERVER=idp.keycloak.test + KEYCLOAK_SERVER=idp.keycloak.test + export KEYCLOAK_REALM=master + KEYCLOAK_REALM=master + export KEYCLOAK_ADMIN_PASSWORD=Secret123 + KEYCLOAK_ADMIN_PASSWORD=Secret123 + keycloak-httpd-client-install --client-originate-method registration --keycloak-server-url https://idp.keycloak.test:8443 --keycloak-admin-username admin --keycloak-realm master --app-name example_app --client-type mellon --location-root mellon_root --protected-locations /mellon_root --force [Step 1] Assure HTTP config directory is present [Step 2] Assure HTTP federation directory is present [Step 3] Set up template environment [Step 4] Set up Service Provider X509 Certificiates [Step 5] Build Mellon httpd config file [Step 6] Build Mellon SP metadata file [Step 7] Connect to Keycloak Server as admin [Step 8] Query realms from Keycloak server [Step 9] Use existing realm on Keycloak server [Step 10] Query realm clients from Keycloak server [Step 11] Get new initial access token [Step 12] Registering new client [Step 13] Connect to Keycloak Server as anonymous user [Step 14] Enable saml.force.post.binding [Step 15] Add group attribute mapper to client [Step 16] Add Redirect URIs to client [Step 17] Retrieve IdP metadata from Keycloak server [Step 18] Completed Successfully login/logout tests passed TC3: mellon root ancestor of protected: + export KEYCLOAK_SERVER=idp.keycloak.test + KEYCLOAK_SERVER=idp.keycloak.test + export KEYCLOAK_REALM=master + KEYCLOAK_REALM=master + export KEYCLOAK_ADMIN_PASSWORD=Secret123 + KEYCLOAK_ADMIN_PASSWORD=Secret123 + keycloak-httpd-client-install --client-originate-method registration --keycloak-server-url https://idp.keycloak.test:8443 --keycloak-admin-username admin --keycloak-realm master --app-name example_app --client-type mellon --location-root example_app --protected-locations /example_app/private --force [Step 1] Assure HTTP config directory is present [Step 2] Assure HTTP federation directory is present [Step 3] Set up template environment [Step 4] Set up Service Provider X509 Certificiates [Step 5] Build Mellon httpd config file [Step 6] Build Mellon SP metadata file [Step 7] Connect to Keycloak Server as admin [Step 8] Query realms from Keycloak server [Step 9] Use existing realm on Keycloak server [Step 10] Query realm clients from Keycloak server [Step 11] Get new initial access token [Step 12] Registering new client [Step 13] Connect to Keycloak Server as anonymous user [Step 14] Enable saml.force.post.binding [Step 15] Add group attribute mapper to client [Step 16] Add Redirect URIs to client [Step 17] Retrieve IdP metadata from Keycloak server [Step 18] Completed Successfully login/logout tests passed Also ran similar tests for verification of OIDC setup for bug #1553890 here: https://bugzilla.redhat.com/show_bug.cgi?id=1553890#c25 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:3460 |