After Keycloak migration I am getting UnrecognizedPropertyException on maxTemporaryLockouts #37862

mfuentescas · 2025-03-06T09:19:56Z

mfuentescas
Mar 6, 2025

After upgrade from Keycloak 23.0.1 to 26.1.2 (using Docker) and PostreSQL to 16, my Keycloak seems fine: clients, realmRoles, users and groups are still here. My updated Angular website and Springboot Java backend still work well except some Java exception explained down bellow.

The issue

I am using keycloak-admin-client 26.0.0 Java library, and in the following source code:
keycloak.realm(this.realm).toRepresentation()

I am getting the following error:
UnrecognizedPropertyException (through reference chain: org.keycloak.representations.idm.RealmRepresentation["maxTemporaryLockouts"])

As I said, Keycloak Log upgrade seems ok:

Updating the configuration and installing your custom providers, if any. Please wait.
2025-03-06 07:12:53,682 WARN [org.key.qua.run.cli.Picocli] (main) The following used options or option values are DEPRECATED and will be removed in a future release:

proxy: Use proxy-headers.
Consult the Release Notes for details.
2025-03-06 07:13:00,542 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index jakarta.jms.Connection: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,597 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index org.apache.tools.ant.Task: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,609 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index org.springframework.core.io.Resource: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,612 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index org.springframework.core.io.DefaultResourceLoader: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,613 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index org.springframework.core.io.ResourceLoader: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,717 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index org.apache.activemq.artemis.core.journal.RecordInfo: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,718 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index org.apache.activemq.artemis.core.journal.Journal: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,721 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index io.mashona.logwriting.ArrayStore: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,727 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index jakarta.jms.XAConnection: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,728 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index jakarta.jms.XASession: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:13:00,728 WARN [io.qua.dep.ind.IndexWrapper] (build-6) Failed to index jakarta.jms.XAConnectionFactory: Class does not exist in ClassLoader QuarkusClassLoader:Deployment Class Loader: PROD for 130a0f66
2025-03-06 07:14:31,936 INFO [io.qua.dep.QuarkusAugmentor] (main) Quarkus augmentation completed in 96886ms
2025-03-06 07:14:34,724 WARN [org.keycloak.quarkus.runtime.cli.Picocli] (main) The following used options or option values are DEPRECATED and will be removed in a future release:

proxy: Use proxy-headers.
Consult the Release Notes for details.
2025-03-06 07:14:35,606 WARN [org.keycloak.protocol.oidc.OIDCLoginProtocolFactory] (main) Deprecated switch 'legacy-logout-redirect-uri' is enabled. Please try to disable it and update your clients to use OpenID Connect compliant way for RP-initiated logout.
2025-03-06 07:14:36,208 INFO [org.keycloak.quarkus.runtime.hostname.DefaultHostnameProvider] (main) Hostname settings: Base URL: , Hostname: one-login.nextgen-lab.net, Strict HTTPS: false, Path: , Strict BackChannel: false, Admin URL: , Admin: , Port: -1, Proxied: true
2025-03-06 07:14:38,559 WARN [io.quarkus.agroal.runtime.DataSources] (JPA Startup Thread) Datasource enables XA but transaction recovery is not enabled. Please enable transaction recovery by setting quarkus.transaction-manager.enable-recovery=true, otherwise data may be lost if the application is terminated abruptly
2025-03-06 07:14:39,390 WARN [org.infinispan.CONFIG] (keycloak-cache-init) ISPN000569: Unable to persist Infinispan internal caches as no global state enabled
2025-03-06 07:14:39,474 INFO [org.infinispan.CONTAINER] (keycloak-cache-init) ISPN000556: Starting user marshaller 'org.infinispan.jboss.marshalling.core.JBossUserMarshaller'
2025-03-06 07:14:40,061 WARN [io.quarkus.vertx.http.runtime.VertxHttpRecorder] (main) The X-Forwarded-* and Forwarded headers will be considered when determining the proxy address. This configuration can cause a security issue as clients can forge requests and send a forwarded header that is not overwritten by the proxy. Please consider use one of these headers just to forward the proxy address in requests.
2025-03-06 07:14:40,108 INFO [org.keycloak.connections.infinispan.DefaultInfinispanConnectionProviderFactory] (main) Node name: node_965690, Site name: null
2025-03-06 07:14:40,117 INFO [org.keycloak.broker.provider.AbstractIdentityProviderMapper] (main) Registering class org.keycloak.broker.provider.mappersync.ConfigSyncEventListener
2025-03-06 07:14:42,009 INFO [org.keycloak.quarkus.runtime.storage.legacy.liquibase.QuarkusJpaUpdaterProvider] (main) Updating database. Using changelog META-INF/jpa-changelog-master.xml

UPDATE SUMMARY
Run: 7
Previously run: 117
Filtered out: 0

Total change sets: 124

2025-03-06 07:14:47,920 INFO [io.quarkus] (main) Keycloak 24.0.5 on JVM (powered by Quarkus 3.8.4) started in 15.236s. Listening on: http://0.0.0.0:8080
2025-03-06 07:14:47,921 INFO [io.quarkus] (main) Profile dev activated.
2025-03-06 07:14:47,921 INFO [io.quarkus] (main) Installed features: [agroal, cdi, hibernate-orm, jdbc-postgresql, keycloak, logging-gelf, narayana-jta, reactive-routes, resteasy-reactive, resteasy-reactive-jackson, smallrye-context-propagation, vertx]
2025-03-06 07:14:47,927 WARN [org.keycloak.quarkus.runtime.KeycloakMain] (main) Running the server in development mode. DO NOT use this configuration in production.

Workaround tried out:

I have installed Keycloak 24.0.5 and the same error.
I have installed Keycloak 26.0.0 to have the same version than library keycloak-admin-client (26.0.0), still same issue.

I don't think could be related, but I am using keycloak-spring-boot-starter 25.0.3 because there is no more recent.

Somebody could help me? I don't know what to do anymore.

mfuentescas · 2025-03-06T12:51:31Z

mfuentescas
Mar 6, 2025
Author

Ok, I found a workaround. The issue was not with the Keycloak migration but with keycloak-spring-boot-starter, which is not yet available in version 26.x.x so it is including a old version of keycloak-core with the outdated version of the class RealmRepresentation. To fix this, I needed to add keycloak-core as a dependency and exclude it from keycloak-spring-boot-starter. Check below:

Now I will wait for the updated library 26.x.x.

0 replies

Navigation Menu

Repository navigation

After Keycloak migration I am getting UnrecognizedPropertyException on maxTemporaryLockouts #37862

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

UPDATE SUMMARY
Run: 7
Previously run: 117
Filtered out: 0

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Select a reply

Uh oh!

After Keycloak migration I am getting UnrecognizedPropertyException on maxTemporaryLockouts #37862

Uh oh!

Uh oh!

mfuentescas Mar 6, 2025

The issue

UPDATE SUMMARY Run: 7 Previously run: 117 Filtered out: 0

Replies: 1 comment

Uh oh!

Uh oh!

mfuentescas Mar 6, 2025 Author

mfuentescas
Mar 6, 2025

UPDATE SUMMARY
Run: 7
Previously run: 117
Filtered out: 0

mfuentescas
Mar 6, 2025
Author