Bug 58183 - startTls in conjunction with connectionPooling are incompatible default options for keycloak 26
Summary: startTls in conjunction with connectionPooling are incompatible default optio...
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Keycloak
Version: UCS 5.2
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 5.2-1-errata
Assignee: Christian Castens
QA Contact: Felix Botner
URL: https://git.knut.univention.de/univen...
Keywords:
Depends on: 58182
Blocks:
  Show dependency tree / graph
 
Reported: 2025-04-07 18:33 CEST by Christian Castens
Modified: 2025-04-23 11:56 CEST (History)
2 users (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Christian Castens univentionstaff 2025-04-07 18:33:29 CEST 
+++ This bug was initially created as a clone of Bug #58182 +++

startTls in conjunction with connectionPooling are incompatible default options for keycloak 26.

Currently, we set connectionPooling regardless of startTls in univention-keycloak.


Bug for 5.2-1 errata release
Comment 1 Christian Castens univentionstaff 2025-04-08 19:39:47 CEST 
univention-keycloak.yaml
434b18a70b29 | Bug #58183: deactivate connectionPooling while startTls is active

univention-keycloak (3.0.27-2)
434b18a70b29 | Bug #58183: deactivate connectionPooling while startTls is active

As of this version, `connectionPooling` will only be enabled if `startTls` is disabled.
Comment 2 Felix Botner univentionstaff 2025-04-11 10:00:46 CEST 
OK 3.0.28 univention-keycloak.yaml
OK update disables connectionPooling
OK connectionPooling is disabled is startTLS is true for new installations
Comment 3 Arvid Requate univentionstaff 2025-04-16 14:10:01 CEST 
<https://errata.software-univention.de/#/?erratum=5.2x67>