External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-09 23:12:06 -03:30
Code Issues Packages Projects Releases Wiki Activity
28,619 Commits 26 Branches 288 Tags
Commit Graph

536 Commits

Author SHA1 Message Date
Sylvere Richard
173471a1c9 Fix #40995 avoid ModelException: At least one condition should be provided to OR query 
Closes #40995
Signed-off-by: Sylvere Richard <sylvere.richard@gmail.com>
 2025-07-10 15:34:02 -03:00
Martin Kanis
5a42390341 Make UPDATE_EMAIL a supported feature 
Closes #40227

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2025-07-09 10:15:48 -03:00
Pedro Igor
0188d276d8
Invalidate user cache entries when email or username are different from storage 
Closes #40085

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Signed-off-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
 2025-06-17 20:44:01 +00:00
Pedro Igor
9412e339a8
Password modification time attribute as an operational and read-only attribute 
Closes #40270

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-06-10 16:28:55 +02:00
vramik
6bf5727b7b LDAP group mapper skips configured filter and imports all groups with memberOf strategy when fetching the user's groups 
Closes #37537

Signed-off-by: vramik <vramik@redhat.com>
 2025-05-22 09:57:31 -03:00
vramik
f45b8e0c6d Move FGAP classes to specific package 
Signed-off-by: vramik <vramik@redhat.com>
 2025-05-22 09:53:16 -03:00
Pedro Igor
953ba04018
Skip updating account controls if no control is set when enabling/disabling users 
Closes #37720

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-09 09:11:21 +02:00
Pedro Igor
9ad0e1abfa
Check if LDAP entry is still valid before validating duplicate emails 
Closes #39345

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-05-06 21:54:30 +02:00
Pedro Igor
68fc5aa44b
Make sure LDAP connections are released when closing sessions 
Closes #38660

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-28 20:13:30 +02:00
Stefan Guilhen
9976f9380c Fix NPE in LDAPUtils.loadAllLDAPObjects when batch size is set to value <= 0 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #39022
 2025-04-16 12:32:57 -03:00
Pedro Igor
ab41366757
Allow setting locale when edit mode is READ_ONLY 
Closes #38981

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-04-16 08:55:30 +02:00
Stefan Guilhen
86b2a6a95c Fix docs to also mention roles 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>

Closes #28569

Signed-off-by: Jakob Overrein <jakob.overrein@basefarm-orange.com>
 2025-03-10 16:13:36 -03:00
Stefan Guilhen
a0a314aece Append comma to the relative DN only if it is missing 
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-03-10 16:13:36 -03:00
Jakob Overrein
aec62803c7 Allow users, roles, and groups, to be created in a specified DN relative to the parent DN 
The new field introduced will prefix the parent DN as a relative path and allow created items to be placed in a subtree instead of the parent DN.

Closes #28569

Signed-off-by: Jakob Overrein <jakob.overrein@basefarm-orange.com>
 2025-03-10 16:13:36 -03:00
Ricardo Martin
6751c8cb35
Include JNA dependency for the SSSD in the keycloak server (#37905) 
Closes #37898

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2025-03-07 11:56:33 -05:00
Stefan Guilhen
5babc6c1a3 Ensure the group being joined is not an organization group in GroupLDAPStorageMapper 
Closes #37393

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-02-17 14:41:53 -03:00
Pedro Igor
4b2d5ed472 Minor fixes, test coverage, and allow deleting local users 
Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-02-07 10:42:45 -03:00
Pedro Igor
602df06191 Allows querying credential from user storage providers 
Closes #35020

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-02-05 07:56:05 -03:00
Stefan Guilhen
b2e8942dd1 Ensure LDAPStorageMapper.getGroupMembers is taking the fetch strategy in consideration when retrieving the members 
- fixes issue when MEMBER-OF strategy is selected but ignored when listing members

Closes #33477

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2025-01-31 09:54:40 -03:00
Justin Stephenson
d22179e6fa
ipatuura README updates (#36660) 
Signed-off-by: Justin Stephenson <jstephen@redhat.com>
 2025-01-23 08:13:16 +01:00
Pedro Igor
db986c496e Allow tracing packets sent to and from LDAP for troubleshooting purposes 
Closes #36087

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2025-01-07 12:42:23 +01:00
Alexander Schwartz
180be7b182 Avoid NPE when checking exceptions for password based Kerberos login 
Closes #36061

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2025-01-06 17:17:53 +01:00
Alexander Schwartz
4ef178242f Enable LDAP connection pool by default when using the Admin UI 
Closes #35852

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-12-19 10:24:47 -03:00
Alexander Schwartz
af54d6469d Remove unused LDAP properties 
Closes #35854

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-12-18 10:39:06 -03:00
Pedro Igor
45a6b5c657 Setting protocol when initializing the LDAP provider 
Closes #35758

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-12-11 10:21:11 +01:00
Stefan Guilhen
24fab37519 Add README.md for the IPA-Tuura user federation 
#Closes 35563

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-12-03 17:08:27 -03:00
Stefan Guilhen
590944b111 Use proper field type for the IPA-Tuura federation provider password 
#Closes 35529

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-12-03 05:27:27 -03:00
Stefan Guilhen
3c33a7180e
Add initial IPA-Tuura federation (#35467) 
* Add initial federation ipatuura plugin

Closes #35325

Signed-off-by: Justin Stephenson <jstephen@redhat.com>
Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
Co-authored-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-12-02 14:59:21 -03:00
Pedro Igor
4668abc802 Better message when failing to update passwords due to invalid constraint/policy violation 
Closes #35421

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-11-28 18:28:26 +01:00
Martin Bartoš
594218382d
OTEL: Instrument parts of Keycloak with OTEL spans 
Closes #32114

Signed-off-by: Martin Bartoš <mabartos@redhat.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <alexander.schwartz@gmx.net>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-28 12:08:50 +00:00
Thomas Darimont
f61937f3d9
Prefer usage of StandardCharsets.UTF_8 over "UTF-8" charset reference 
Fixes #35080

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
Co-authored-by: Alexander Schwartz <aschwart@redhat.com>
 2024-11-25 10:45:37 +00:00
Ricardo Martin
ca1c10f7ba
Use short UUID for ldap components (#34815) 
Closes #32143

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-11-15 15:15:04 +01:00
Pedro Igor
dfe2f2bb54 Allow updating the username when registration as email is enabled during LDAP updates 
Closes #34560

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-11-15 09:51:44 +01:00
Pedro Igor
f5dcf770dc Improving the error message when failing to query an LDAP provider 
Closes #34760

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-11-11 10:34:53 +01:00
Pedro Igor
d3c5082244 Better message when updating users when import is disabled 
Closes #31456

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-11-07 21:21:56 +01:00
Stefan Guilhen
af434d6bc1 Add checks to prevent GroupLDAPStorageMapper from performing operations on groups it does not manage 
Closes #11008
Closes #17593
Closes #19652

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-11-01 15:49:55 -03:00
Pedro Igor
4ad462fbd3 Do not rely on the pwdLastSet attribute when updating AD entries 
Closes #34467

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-10-30 17:43:07 +01:00
Stefan Guilhen
d66030fcad Check if LDAPObject is available from a previously cached proxied user 
Closes #34412

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-10-28 19:19:16 -03:00
Alexi Vandevoorde
0d07342649
Implement pagination for getLDAPRoleMappings (#34043) 
* Implement pagination for getLDAPRoleMappings

On Active Directory, allow to retrieve more groups than the MaxPageSize
(default to 1000). Without this patch, we need to increase the
MaxPageSize which does not really scale. Implemented only for the
LoadRolesByMember startegy.

Closes #34042

Signed-off-by: Alexi Vandevoorde <alexi@vandevoor.de>
 2024-10-28 16:40:20 -03:00
Stefan Guilhen
4690e00d91 Ensure searched LDAPObject is properly cached before other methods that trigger user validation run 
Closes #34050

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-10-28 15:39:16 -03:00
Martin Kanis
0ebf862b63 LDAP Import: KERBEROS_PRINCIPAL not updated when UserPrincipal changes and user already exists 
Closes #32266

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2024-10-11 09:16:17 -03:00
Martin Kanis
51fd133f05 [Keycloak CI] - User Federation Tests - fixing AD tests 
Closes #33231

Signed-off-by: Martin Kanis <mkanis@redhat.com>
 2024-10-02 16:02:55 -03:00
Stefan Guilhen
be13366c17
Improve response time when displaying group members using LDAP Provider 
Closes #31786

Signed-off-by: rmartinc <rmartinc@redhat.com>
Co-authored-by: rmartinc <rmartinc@redhat.com>
 2024-09-20 21:20:24 +02:00
Alexander Schwartz
2a95d0abfa
Sort order of updates for user properties (#32853) 
This should reduce deadlocks on the user property table if the users are updated concurrently.

Closes #32852

Signed-off-by: Alexander Schwartz <aschwart@redhat.com>
 2024-09-18 12:37:42 +02:00
Stefan Guilhen
92e435f192 Do not automatically re-import users if they already exist locally when searching by attributes 
Closes #32870

Signed-off-by: Stefan Guilhen <sguilhen@redhat.com>
 2024-09-13 08:54:44 +02:00
Pedro Igor
d04d2bb852 Allow removing users federated from a kerberos provider 
Closes #31603

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-08-13 18:47:55 +02:00
Thomas Darimont
2140e573f2
Fix test LDAP connection with multiple ldap connection urls 
Previously, the given connection string was check with URI.create(..) which
failed when multiple space separated LDAP URLs were given.

Closes #31267

Signed-off-by: Thomas Darimont <thomas.darimont@googlemail.com>
 2024-07-16 08:57:50 +02:00
rmartinc
bd90ead892 Do not compare user DN using DN comparison as Ad can login via username@domain 
Closes #31196

Signed-off-by: rmartinc <rmartinc@redhat.com>
 2024-07-10 17:01:49 -03:00
Pedro Igor
ead1b4a851
Testing ldap connection should not process or bind the credentials (#31081) 
Closes #30821

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
 2024-07-08 13:58:02 +02:00
Rishabh Singh
3a156b1a8b This fix allows the LDAP connection pool parameters - maxsize, prefsize, initsize - to be configured using JVM arguments. 
Removed the check on connectionPoolingMaxSize, connectionPoolingInitSize and connectionPoolingPrefSize

Closes #30677

Signed-off-by: Rishabh Singh <rishabhsvats@gmail.com>

This fix allows all the LDAP connection pool parameters to be configured using JVM arguments.

Removed all the ldap connection pool parameters

Signed-off-by: Rishabh Singh <rishabhsvats@gmail.com>
 2024-07-02 07:47:14 -03:00