Bug 57293 - Keycloak cannot be installed in Ad membermode
Summary: Keycloak cannot be installed in Ad membermode
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Keycloak
Version: UCS 5.0
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 5.2-0-errata
Assignee: Arvid Requate
QA Contact: Julia Bremer
URL:
Keywords:
Depends on: 55807
Blocks: 57377
  Show dependency tree / graph
 
Reported: 2024-05-16 13:12 CEST by Julia Bremer
Modified: 2025-09-09 10:11 CEST (History)
4 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 6: Setup Problem: Issue for the setup process
Who will be affected by this bug?: 1: Will affect a very few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.103
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Julia Bremer univentionstaff 2024-05-16 13:12:36 CEST 
During Keycloak installation we create the dns/host_record ucs-sso-ng.$domainname. 
In AD membermode, the AD is used as a DNS server. The creation of the dns record does not have any effect.

We need to add those dns records to the corresponding AD as well.
Comment 3 Arvid Requate univentionstaff 2024-06-05 11:57:47 CEST 
7bc4a14800 | Fix admember.add_host_record_in_ad for Keycloak

    * Use keycloak/server/sso/fqdn instead of ucs/server/sso/fqdn
      in admember.add_host_record_in_ad()
    * Pass parameter "sso" from admember.sh to admember.add_host_record_in_ad()

Package: univention-lib
Version: 11.0.6
Branch: 5.2-0

Backport to 5.0-8: https://git.knut.univention.de/univention/ucs/-/merge_requests/1197
Comment 4 Monika Turfeld univentionstaff 2025-09-09 10:11:08 CEST 
Please reopen if necessary