Bug 57293 - Keycloak cannot be installed in Ad membermode
Keycloak cannot be installed in Ad membermode
Status: NEW
Product: UCS
Classification: Unclassified
Component: Keycloak
UCS 5.0
Other Linux
: P5 normal (vote)
: UCS 5.2
Assigned To: Arvid Requate
Julia Bremer
:
Depends on: 55807
Blocks: 57377
  Show dependency treegraph
 
Reported: 2024-05-16 13:12 CEST by Julia Bremer
Modified: 2024-06-20 16:48 CEST (History)
2 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 6: Setup Problem: Issue for the setup process
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.103
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Julia Bremer univentionstaff 2024-05-16 13:12:36 CEST
During Keycloak installation we create the dns/host_record ucs-sso-ng.$domainname. 
In AD membermode, the AD is used as a DNS server. The creation of the dns record does not have any effect.

We need to add those dns records to the corresponding AD as well.
Comment 3 Arvid Requate univentionstaff 2024-06-05 11:57:47 CEST
7bc4a14800 | Fix admember.add_host_record_in_ad for Keycloak

    * Use keycloak/server/sso/fqdn instead of ucs/server/sso/fqdn
      in admember.add_host_record_in_ad()
    * Pass parameter "sso" from admember.sh to admember.add_host_record_in_ad()

Package: univention-lib
Version: 11.0.6
Branch: 5.2-0

Backport to 5.0-8: https://git.knut.univention.de/univention/ucs/-/merge_requests/1197