kulatamicuda
Reputation: 1661
Keycloak RC4-With Hmac
I am using Keycloak 8.0.1 with java 11(Amazon corretto) on both Windows 2019 server and CentOS 8.1 with the same keycloak configuration using Standalone-HA configuration. Both keycloak servers are behind HA proxy. Under Linux I receive error with SSO - RC4 with HMAC encryption type is not in permitted_enctypes list. How can I avoid this error and why it appears only on my Linux machine ? The keytab was generated with -crypto all. Is there some possibility to force keycloak to use another algorithm or allow RC4 with HMAC encryption ?
Upvotes: 1
Views: 2317
Answers (1)
kulatamicuda
Reputation: 1661
Just for others stucked by this error - the solution was to edit /etc/krb5.conf.d/crypto-policies , I tried to edit krb5.conf instead.
Upvotes: 1
Related Questions
- Implementation of custom authentication in keycloak
- How can I configure Keycloak to use HMAC algorithm as default instead of RSA?
- Keycloak: Bypass an authenticator flow
- How to use Keycloak with PKCE
- Kerberos - Cannot find key of appropriate type to decrypt AP REP - RC4 with HMAC
- Skip kerberos sso authentication in keycloak
- Setting up Keycloak for authentication
- Keycloak-6.0.1 Custom Authenticator SPI
- Keycloak SSO with JWT is this possible?
- Building a Java OAuth2.0 authorization server with Keycloak