Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


    Cloudron Forum

    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular

    Keycloak & Cloudron

    Discuss
    9
    39
    1146
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • girish
      girish Staff @nj last edited by

      @nj is there a reason not to sync the inactive user information as well? Are you thinking of because of performance or is the active flag getting overwritten or something else?

      nj 1 Reply Last reply Reply Quote 0
      • nj
        nj @girish last edited by

        @girish I always thought marking the users as inactive would mean they can't log in to the services that use Cloudron LDAP. On the other hand, for instance, Keycloak has an option to do a full sync of users from the LDAP server. In such cases, Keycloak does not have any way to know whether the users are still active. That's why I asked if there's any filter that I can apply to only fetch/sync active users.

        girish 1 Reply Last reply Reply Quote 1
        • girish
          girish Staff @nj last edited by

          @nj said in Keycloak & Cloudron:

          @girish I always thought marking the users as inactive would mean they can't log in to the services that use Cloudron LDAP

          Yes, that's the case. When you say "Cloudron LDAP" you mean the apps installed on Cloudron, right? Or have you made some custom patch to expose Cloudron LDAP to external apps ?

          On the other hand, for instance, Keycloak has an option to do a full sync of users from the LDAP server.

          I don't get this part... How can Keycloak sync from Cloudron ? (unless, of course, you have made some custom patch to expose Cloudron LDAP...).

          (So, if the above is true, we can expose the active flag via LDAP. That should be straightforward, if that's what you are asking).

          nj 1 Reply Last reply Reply Quote 0
          • nj
            nj @girish last edited by

            @girish

            When you say "Cloudron LDAP" you mean the apps installed on Cloudron, right?

            Yes. I recently built and run Keycloak as an app on my Cloudron instance.

            we can expose the active flag via LDAP.

            That's exactly what I want. If you could expose the active flag via LDAP, I could use a filter like (&(objectClass=user)(isActive=true)) to only fetch active users.

            I'm not a native English speaker, so excuse the confusion that I caused. 🙂

            girish 1 Reply Last reply Reply Quote 0
            • girish
              girish Staff @nj last edited by

              @nj I just made a fix in fact to not list inactive users in ldap at all. I think that was an oversight. After all, we don't want those users to appear in LDAP searches. Maybe you can try this patch - https://git.cloudron.io/cloudron/box/-/commit/8958b154e96832688896dafccf7350bad575b0a9

              nj 1 Reply Last reply Reply Quote 3
              • nj
                nj @girish last edited by

                @girish That worked. By the way, is there a plan to package Keycloak? I managed to run Keycloak and Outline on Cloudron. Keycloak needed some patching to make it work on the read-only system without mounting everything to /app/data. Outline wiki app can be easily set up to authenticate using Keycloak. Both apps seem to be working as they should. Do you think we can publish those apps to the Cloudron App Store? That would be my first experience publishing an app.

                Currently, I am packaging the Outline app to directly authenticate with the Cloudron user directory without the need to install Keycloak. If anyone is interested, I published a little more details in my blog. I'm doing another write-up describing the issues I solved while packaging Keylcloak.

                girish 1 Reply Last reply Reply Quote 6
                • girish
                  girish Staff @nj last edited by

                  @nj Yes, we can get them published as time permits! If you post the links to the repos when they are sort of ready, we can take it from there.

                  Sam_uk nj 2 Replies Last reply Reply Quote 1
                  • Sam_uk
                    Sam_uk @girish last edited by

                    @nj I'm interested in this, is your code available anywhere please?

                    Sam_uk 1 Reply Last reply Reply Quote 1
                    • C
                      cuzy-app last edited by

                      https://git.cloudron.io/cloudron/keycloak-app/

                      1 Reply Last reply Reply Quote 1
                      • Sam_uk
                        Sam_uk @Sam_uk last edited by

                        Just spotted this: https://git.cloudron.io/cloudron/keycloak-app/ does anyone know the status of that project?

                        Sam_uk 1 Reply Last reply Reply Quote 1
                        • Sam_uk
                          Sam_uk @Sam_uk last edited by

                          @girish would you add this to the appstore? https://git.cloudron.io/cloudron/keycloak-app/ It seems complete?

                          girish 1 Reply Last reply Reply Quote 1
                          • girish
                            girish Staff @Sam_uk last edited by

                            @Sam_uk mm, not really, it seems to have some compose files etc. I can't find pawel on this forum to tag but I am not even sure who created that repo and why it's in the cloudron namespace. But worth looking into.

                            1 Reply Last reply Reply Quote 0
                            • girish
                              girish Staff last edited by

                              Strange there is no app request for keycloak. @Sam_uk do you think you can open an app request topic ?

                              marcusquinn Sam_uk 2 Replies Last reply Reply Quote 2
                              • marcusquinn
                                marcusquinn @girish last edited by

                                @girish Or move this one? It seems to have all the useful links in so far.

                                We're not here for a long time - but we are here for a good time :)
                                Jersey/UK
                                Work & Ecommerce Advice: https://brandlight.org
                                Personal & Software Tips: https://marcusquinn.com

                                1 Reply Last reply Reply Quote 2
                                • Sam_uk
                                  Sam_uk @girish last edited by

                                  @girish I'm tempted not to.

                                  I think my position is that Authentik is the better app, which would provide everything that Keycloak does.

                                  girish 1 Reply Last reply Reply Quote 4
                                  • girish
                                    girish Staff @Sam_uk last edited by

                                    @Sam_uk ah ok, I upvoted that one 😉

                                    1 Reply Last reply Reply Quote 1
                                    • nj
                                      nj @girish last edited by

                                      @girish Please check this out. I previously packaged Keycloak but suddenly the Keycloak team decided to deprecate the Wildfly version and started supporting Quarkus runtime. So I had to re-package it again. Took a while during the weekdays.

                                      https://github.com/njsubedi/cloudron-keycloak

                                      Sam_uk girish timconsidine 3 Replies Last reply Reply Quote 9
                                      • Sam_uk
                                        Sam_uk @nj last edited by

                                        @nj Great stuff, thanks I'll have a go at installing it sometime this week.

                                        1 Reply Last reply Reply Quote 2
                                        • girish
                                          girish Staff @nj last edited by

                                          @nj thanks! this is awesome, added to our list of packages to push out.

                                          Sam_uk marcusquinn 2 Replies Last reply Reply Quote 4
                                          • Sam_uk
                                            Sam_uk @girish last edited by

                                            @girish

                                            Just to update https://github.com/njsubedi/cloudron-keycloak seems to be working well so far.

                                            Configured Nextcloud, Humhub & Rocketchat to use it.

                                            1 Reply Last reply Reply Quote 5
                                            • marcusquinn
                                              marcusquinn @girish last edited by

                                              @girish @nebulon Maybe it makes sense to consider making this an add-on app and option to enable for apps that can support it. Very valuable to us, and could look at helping with sponsorship if that motivates.

                                              We're not here for a long time - but we are here for a good time :)
                                              Jersey/UK
                                              Work & Ecommerce Advice: https://brandlight.org
                                              Personal & Software Tips: https://marcusquinn.com

                                              1 Reply Last reply Reply Quote 4
                                              • nj
                                                nj last edited by

                                                Update available: Keycloak 7.0.1

                                                Sam_uk 1 Reply Last reply Reply Quote 3
                                                • Referenced by  J jk 
                                                • Sam_uk
                                                  Sam_uk @nj last edited by

                                                  @nj I've run into an issue with using custom themes on Keycloak: https://github.com/njsubedi/cloudron-keycloak/issues/5

                                                  Does this seem to be specific to a Cloudron install? It works on a more conventional install for us.

                                                  Can anyone suggest how to troubleshoot or fix?

                                                  1 Reply Last reply Reply Quote 2
                                                  • timconsidine
                                                    timconsidine @nj last edited by

                                                    @nj awesome ! thank you !

                                                    I just installed it as a custom app. Looks great. BUT ...

                                                    I haven't a scoobies how to use it !
                                                    There's far too many words on their website, and far too many options in the app.

                                                    2 questions :

                                                    • the sync of Cloudron users does not seem to complete, although app says completed.
                                                    • how do I add an app to be protected by Keycloak ?
                                                    1 Reply Last reply Reply Quote 3
                                                    • nj
                                                      nj last edited by

                                                      Update available for Keycloak 18.0.0. Up and running without issues for a while.

                                                      https://github.com/njsubedi/cloudron-keycloak

                                                      cd732a50-7c98-4216-8c6d-cc7ead482064-image.png

                                                      1 Reply Last reply Reply Quote 3
                                                      • nj
                                                        nj last edited by

                                                        Update available v18.0.1

                                                        1 Reply Last reply Reply Quote 2
                                                        • nj
                                                          nj last edited by

                                                          Update available 18.0.2

                                                          1 Reply Last reply Reply Quote 4
                                                          • nj
                                                            nj last edited by

                                                            Update available v19.0.1

                                                            1 Reply Last reply Reply Quote 2
                                                            • jdaviescoates
                                                              jdaviescoates last edited by

                                                              @staff we should get this in the app store, no?

                                                              I use Cloudron with Gandi & Hetzner

                                                              BrutalBirdie 1 Reply Last reply Reply Quote 2
                                                              • BrutalBirdie
                                                                BrutalBirdie Staff @jdaviescoates last edited by BrutalBirdie

                                                                @nj && @jdaviescoates
                                                                I just tested the app but ended up with an error state.

                                                                # Clone the repo
                                                                git clone https://github.com/njsubedi/cloudron-keycloak.git; cd cloudron-keycloak
                                                                
                                                                # build the app
                                                                cloudron build --set-repository dr.cloudron.dev/$(jq -r .id < CloudronManifest.json) --tag $(jq -r .version < CloudronManifest.json)
                                                                
                                                                # Install the app
                                                                cloudron install -l keycloak.cloudron.dev
                                                                

                                                                log:
                                                                https://paste.cloudron.dev/hemoxaroni.log

                                                                Like my work? Consider donating a beer 🍻 Cheers!

                                                                nj 1 Reply Last reply Reply Quote 2
                                                                • nj
                                                                  nj @BrutalBirdie last edited by nj

                                                                  @BrutalBirdie It seems the problem only occurs in new installation. Since I've always been updating from previous versions, the error didn't show up. I'm fixing it now; and will update you when done.

                                                                  Issue: Starting v19.0, Keycloak would require kc.sh --optimized to start Keycloak. Otherwise it would try to run kc.sh build before starting. That resulted in failure in the readonly system.

                                                                  Issue 2: I had set optionalSso=true but that lead to another issue where CLOUDRON_LDAP_URL variable would be unbound when installed from CLI. I don't think this was the default behaviour when I first packaged Cloudron. Anyway, I have set optionalSso=false just in case Cloudron's default changes again.

                                                                  The package should build and install correctly. PS: I'll start testing on fresh installs from next releases, so it should not repeat again.

                                                                  https://github.com/njsubedi/cloudron-keycloak/releases/tag/v19.0.1-patch2

                                                                  BrutalBirdie 1 Reply Last reply Reply Quote 4
                                                                  • BrutalBirdie
                                                                    BrutalBirdie Staff @nj last edited by

                                                                    @nj lgtm - Install checks out OK.

                                                                    Now there are tests missing for the app.
                                                                    If I create the tests they will be rudimentary and will not cover much of the functionality of the app it self.

                                                                    @nj could you also write the tests?
                                                                    If you need support regarding the tests I can point you in the right directions.

                                                                    Like my work? Consider donating a beer 🍻 Cheers!

                                                                    nj 1 Reply Last reply Reply Quote 1
                                                                    • nj
                                                                      nj @BrutalBirdie last edited by

                                                                      @BrutalBirdie do you mean the Cloudron's usual tests to see if the app installs, backs up and restores correctly? If so I don't think I'll do that because you guys better know how to do that.

                                                                      BrutalBirdie 1 Reply Last reply Reply Quote 1
                                                                      • BrutalBirdie
                                                                        BrutalBirdie Staff @nj last edited by

                                                                        @nj
                                                                        Okay. 👍
                                                                        My next free week is in around 2/3 Weeks 😬

                                                                        The basic tests you could just copy paste from any other app.
                                                                        But when I got the time again I will tackle this task.

                                                                        Like my work? Consider donating a beer 🍻 Cheers!

                                                                        1 Reply Last reply Reply Quote 4
                                                                        • First post
                                                                          Last post
                                                                        Powered by NodeBB