Description Juan Pedro Torres 2022-12-26 15:14:10 CET

When trying to activate 2fa there is a traceback.

root@master:~# univention-keycloak 2fa enable
Enabling 2FA ...
Using KC_URL: https://ucs-sso-ng.ucs.test:443
Traceback (most recent call last):
  File "/usr/sbin/univention-keycloak", line 1337, in <module>
    exit(main())
  File "/usr/sbin/univention-keycloak", line 1333, in main
    return opt.func(opt) or 0
  File "/usr/sbin/univention-keycloak", line 692, in enable_2fa
    kc_admin = KeycloakAdmin(server_url=opt.keycloak_url, username=opt.binduser, password=opt.binduser, realm_name=opt.realm, user_realm_name=DEFAULT_REALM, verify=opt.no_ssl_verify)
  File "/usr/lib/python3/dist-packages/keycloak/keycloak_admin.py", line 96, in __init__
    self.get_token()
  File "/usr/lib/python3/dist-packages/keycloak/keycloak_admin.py", line 1786, in get_token
    self._token = self.keycloak_openid.token(self.username, self.password, grant_type=grant_type)
  File "/usr/lib/python3/dist-packages/keycloak/keycloak_openid.py", line 201, in token
    return raise_error_from_response(data_raw, KeycloakGetError)
  File "/usr/lib/python3/dist-packages/keycloak/exceptions.py", line 108, in raise_error_from_response
    response_body=response.content)
keycloak.exceptions.KeycloakAuthenticationError: 401: b'{"error":"invalid_grant","error_description":"Invalid user credentials"}'