วีดีโอ

thanks for your feedback.

thanks for your feedback

in this case it would be better if you add your proxy as environment variable in the docker-compose file or with the docker run command for the containers.

check your ingress configs one more time. Maybe something is wrong . have you configured the configmap correctly?

thanks for your feedback.

as far as i know, it should be possible

thanks for your feedback.

شکرا جزیلا ! Thanks for you Feedback

thanks for your feedback. I have only one video about keycloak migration from jboss to quarkus, if it helps you : th-cam.com/video/tQ2KmCqW9m8/w-d-xo.html

i am glad that it could help and thanks for your feedback .

i am glad it could help and thanks for your feedback.

Thanks for your Feedback :))

this video here on my channel may help you : th-cam.com/video/liR9_KAz0tA/w-d-xo.html

that is a good question. After doing the federation you have to open the mappers tab ( under the federation itself). After that you have to create a new mapper and for that mapper you select the ,, group-ldap-mapper ,, and there you do the configuration according to your ldap structure.

@@computeriseasy I have tried the same steps but groups not imported , getting this message I have installed intSuccess! Data synced successfully. 0 imported groups, 0 updated groups, 0 removed groups Canyou please help me the keycloak configuration details for groups import please make a video for groups migration in keycloak if possible

@@bcreddy571look at the log file of keycloak, maybe you find some infos about that. Or try it with : Ignore Missing Groups: True

i have not done it but this link may help you: keycloak.discourse.group/t/using-keycloak-as-idp-for-office365-and-sharepoint-online/21475

i am glad that it could help. it is a keystore for your certificate and private key. in this video kann you see how you could generate it: th-cam.com/video/mHxrsUvW8v4/w-d-xo.html

Thanks for your kind response@@computeriseasy I've one more question and is that how do I configure hba file for mysql? It would be very helpful if you guide me in this area

@@milanbhatt3608 as far as i know, hba is more compatible with postgres. i have not use it with mysql.

@@computeriseasy I think you are right, I did not find hba file for mysql Thanks again

@@milanbhatt3608 its ok. I am glad that it could help.

i am glad that it could help and thanks for your feedback.

i am glad it could help and thanks for your feedback.

i am glad that it could help

you can check if the pods run: kubectl get pods that is the simplest way to check, if cluster is working and the pods run . To the cashing : Unfortunately, the specific details of cache distribution might not be as visible in Kubernetes-based cache stacks as they were in Docker Swarm's jdbc-ping mechanism.

@@computeriseasy Thank you, I was able to set it up after updating my manifest and change the type of the service that anounces the instances IP addresses to ClusterIP.

@@MichaelG-q6m very nice ! bravo ... i really glad to hear that !

i am glad that i could help and thanks for your feedback.

with socks5 i have not worked but something like this maybe help you: Environment="ALL_PROXY=socks5://127.0.0.1:1080"

this may help you: Environment="HTTP_PROXY=<username>:<password>@<proxy-host>:<proxy-port>" Environment="HTTPS_PROXY=<username>:<password>@<proxy-host>:<proxy-port>"

i am glad that it could help. no i am not german 😉

did you try this video?

Yes, unfortunately there's no kc script on the file tree. I Imagine there could be another approach to migrate it.

@@RuslanGonzalez-ox6vz according to the documentation ( version 22.0.1 )it starts with kc.sh start: www.keycloak.org/server/configuration or you mean something else ?

@@computeriseasy actually I was able to migrate seamlessly without any complexity than just using the same database. It seems that the newer versions perform some migration behind scenes transparently. Although, this only migrates the whole realms configurations, users data, but not the custom theming.

So thanks for the hint, really appreciated

maybe you are in a domain and you have trusted CA. And in this case you want to use self-signed certificate.

for pinging you have to set proxy separately as an environment variable . for example on linux with this command: export http_proxy=proxy.example.com:1234 export https_proxy=proxy.example.com:1234 if you have already set the proxy on your machine but you can not still ping , you have then check if the ICMP (Internet Control Message Protocol) requests, which are used for pinging, is not blocked through your proxy server.

@@computeriseasy im using windows 11

@@ogidarmatena which error do you get, when you try to ping an IP or a host?

i am glad that it could help and thanks for your feedback.

@@computeriseasy like cmd no internet access

@@ogidarmatena so you dont have any connection to internet

@@computeriseasy i have internet connection in browser, but when i use ping in cmd its not working. Maybe cause i use proxy

first try to check one more time if you have used the commands correctly. second, you have to check , which version of jdk is installed on your machine. The low versions of that do not support pkcs12.

@@computeriseasy java -version openjdk version "18.0.2-ea" 2022-07-19 OpenJDK Runtime Environment (build 18.0.2-ea+9-Ubuntu-222.04) OpenJDK 64-Bit Server VM (build 18.0.2-ea+9-Ubuntu-222.04, mixed mode, sharing) i think it does support?

@@memoonash5851 yes it does. Make sure that the file extention is correct ( .p12 ). After that check the file path to the p12 keystore, if it is correct. Check , if you use the keystore type correctly in your command with -storetype PKCS12. Check if your user has enough rights to do some thing on the keystore.

i am glad that it could help . Thanks for your feedback

your welcome

so , you mean if you open azure and go to users and search for your user , you can not see the ,, object id ,, under the profile of the user?

By default, Keycloak generates the user's ID using a UUID (Universally Unique Identifier) algorithm, which creates a 128-bit random string in hexadecimal format. This ensures that the user ID is globally unique and highly unlikely to clash with another user's ID.

the video ist also about installing openldap.

@@computeriseasy That's exactly what I wrote.

sorry, i did not get your question correctly. what do you mean?

that is a good question. you have configure boath of them, if you also have ca certificates . for your ca certificates you use : olcTLSCACertificateFile /path/to/ldap-ca.crt and for your public certificate you use : olcTLSCertificateFile /path/to/ldap-server.crt if you want to use ldif file . It means the path to the cacertificate points only to the cacertificates.

that is a good question. When we say that a software component or library is platform independent, it means that the software can run on different operating systems and hardware architectures without requiring modification or recompilation. ( MySQL Connector/J is a Java-based database driver for MySQL that allows Java programs to connect to a MySQL database server.)

@@computeriseasy thanks a lot, actually when clicking windows only it will makes me to download the MySQL again that has 400+mb file size. But seeing your tutorial adding connector/j helps me a lot.

@@Scythellia exactly, klicking on only windows makes you download the installer for MySQL itself. I am glad that i could help and thanks for feedback.

i am glad to hear that and thanks for your feedback. Gracias :))

your welcome !

Thanks for your feedback. It is possible to create ssl for IP Address instead of domain name but it is not common, if you mean that.

@@computeriseasy Unfortunately, I'm in that environment right now. Thank you for your comment.

@@samandamoon4076 Its ok and Best of luck !

i does not work with Azure AD. I posted this video because someone needed that. But to your question: after you logout , do a normal loging to the Master Realm and and go to the Azure Realm and open the users tap and select your user and check if its session still active is or not. And can you tell me which version of keycloak you use?

It have already done it. It is over Quarkus: th-cam.com/video/liR9_KAz0tA/w-d-xo.html

@@computeriseasythanks for video it help me alot, just need one help is it possible without nohup, run as service. as i already runnig 15 version through service. Thanks in advance....

@@DipakToke Its ok. I have not installed keycloak as service but this link may help you: stackoverflow.com/questions/73350542/how-to-set-a-startscript-in-linux-for-keycloak-quarkus-up-to-version-17-18-or

@@computeriseasy Thank you, hope it will help me...

what do get in your keycloak log file?

by default it is there. If you dont have it you can install it as a plugin.