Bug 1910055 - Keycloak login page doesn't show after recent update with shm cache issues
Summary: Keycloak login page doesn't show after recent update with shm cache issues
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: ovirt-engine
Classification: oVirt
Component: BLL.Infra
Version: 4.4.4.5
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: Artur Socha
QA Contact: Lucie Leistnerova
URL:
Whiteboard:
Depends On:
Blocks: 1884233
TreeView+ depends on / blocked
 
Reported: 2020-12-22 13:39 UTC by Petr Matyáš
Modified: 2021-01-18 12:05 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-01-18 12:05:11 UTC
oVirt Team: Infra
Embargoed:


Attachments (Terms of Use)

Description Petr Matyáš 2020-12-22 13:39:19 UTC
Description of problem:
After some of the recent updates I did on my RHVM, keycloak login stopped working and login always redirects to regular login page.
Not sure which update it was as I had the keycloak login disabled for some time.
Login through python API with a user from keycloak (user@openidchttp) works without issues.
Also using this keycloak instance for logging in on a 4.3 engine is working.

Only error I can find is in ssl_error_log:
[Tue Dec 22 14:16:05.881844 2020] [auth_openidc:warn] [pid 1621:tid 140691359319808] [client ip:35124] oidc_cache_get: error retrieving value from shm cache backend for key "very_long_token"
[Tue Dec 22 14:16:05.901819 2020] [auth_openidc:error] [pid 1621:tid 140691359319808] [client ip:35124] oidc_cache_shm_get_key: could not construct cache key since key size is too large (1828 >= 512) (a:"very_long_token")
[Tue Dec 22 14:16:05.901849 2020] [auth_openidc:warn] [pid 1621:tid 140691359319808] [client ip:35124] oidc_cache_set: could NOT store 1105 bytes in shm cache backend for key "very_long_token"


Version-Release number of selected component (if applicable):
ovirt-engine-4.4.4.5-0.10.el8ev.noarch

How reproducible:
always

Steps to Reproduce:
1. setup keycloak login in RHVM
2. open login page
3.

Actual results:
regular login page appears

Expected results:
keycloak login page should appear or no login page at all if already logged in keycloak

Additional info:

Comment 1 Artur Socha 2020-12-22 14:40:21 UTC
What is the exact version of Keycloak ?

Comment 2 Petr Matyáš 2020-12-22 14:53:18 UTC
Server Version 	4.5.0.Final


Note You need to log in before you can comment on or make changes to this bug.