this post was submitted on 24 Nov 2024
7 points (88.9% liked)

Selfhosted

40347 readers
366 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
HybridSarcasm@lemmy.world
HybridSarcasm@lemmy.hybridsarcasm.xyz
7
Help Needed: Disabling Dynamic Client Registration in Keycloak for OwnCloud Infinite Scale Mobile App Authentication (buddyverse.one)
submitted 7 hours ago by mitexleo@buddyverse.one to c/selfhosted@lemmy.world
8 comments fedilink hide all child comments
 

Hi,

I'm hoping someone can help me with an issue I'm facing with Keycloak and OCIS.

Background: I installed OCIS (ownCloud Infinite Scale) and configured it to use Keycloak as the OIDC provider. Everything works perfectly when logging in via the web interface. However, I'm encountering issues when trying to log in from the ownCloud mobile apps (iOS and Android).

Problem: Whenever I attempt to log in from the mobile apps, Keycloak reports a "client not found" error. According to various forum posts, Keycloak is creating a new client each time a login attempt is made from the mobile apps. Since these dynamically created clients are not configured properly, the login fails.

Suggested Solution: One developer suggested disabling dynamic client registration in Keycloak. This would prevent Keycloak from creating new clients automatically and ensure that the existing, properly configured client is used.

My Setup:

  • Keycloak version: 26
  • OCIS version: 5.0.9 (Stable)

What I've Tried: I've looked through the Keycloak admin console and documentation but haven't found a straightforward way to disable dynamic client registration. I've also tried configuring the clients manually, but the issue persists.

Questions:

  1. How can I disable dynamic client registration in Keycloak version 26?
  2. Are there any other settings or configurations I should be aware of to ensure smooth authentication for the ownCloud mobile apps?

Any guidance or insights would be greatly appreciated. Thanks in advance!

top 8 comments
sorted by: hot top controversial new old
[–] sorter_plainview@lemmy.today 2 points 5 hours ago* (last edited 4 hours ago) (1 children)

Hi, I have some experience with Keycloak. So I assume ~~you explicitly enabled~~ you are using OIDC dynamic registration.

Can you share the config file after redacting sensitive contents?

[–] mitexleo@buddyverse.one 1 points 5 hours ago (1 children)

I didn't enable dynamic registration. I used this docker compose to deploy keycloak: https://github.com/mitexleo/keycloak_docker/blob/main/compose.yaml

[–] sorter_plainview@lemmy.today 2 points 4 hours ago (1 children)

Oh, so no separate config is used and only env variables I guess. Is it possible for you to get the URL your app is requesting? If yes, please share a sample.

Also double check the realm name. I assume you created a new realm for your use and not using master.

[–] mitexleo@buddyverse.one 1 points 4 hours ago (1 children)
[–] mitexleo@buddyverse.one 0 points 4 hours ago* (last edited 4 hours ago)

You might want to check this out: https://github.com/owncloud/client/issues/11940

Apparently, the client_ID stays same in my case. I guess it's not really creating new clients.

I also set oc://android.owncloud.com as valid redirect URI.

[–] just_another_person@lemmy.world -2 points 6 hours ago (1 children)

Dafuq?

[–] mitexleo@buddyverse.one 1 points 6 hours ago (1 children)

What does that mean?

[–] mitexleo@buddyverse.one -1 points 6 hours ago

Got it ..