8000 Restrict Kerberos password authentication to allowed realms (26.8) by mabartos · Pull Request #54939 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

Restrict Kerberos password authentication to allowed realms (26.8) - #54939

Open
mabartos wants to merge 2 commits into
keycloak:release/26.8from
mabartos:backport-54363-26.8
Open

mabartos wants to merge 2 commits into
keycloak:release/26.8from
mabartos:backport-54363-26.8

Conversation

@mabartos
@mabartos mabartos commented Nov 9, 2026
Copy link
Copy Markdown
Member

closes: #54271

(cherry picked from commit ca650c6)

@rmartinc
Copy link
Copy Markdown
Contributor

@mabartos You need to also backport #54717. One test was flaky. I think the rest is OK.

@rmartinc rmartinc left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There was a test that was flaky. Backport also the other PR upon this one.

@mabartos
mabartos force-pushed the backport-54363-26.8 branch from 405ff94 to 299e1a6 Compare November 12, 2026 09:00
@mabartos
Copy link
Copy Markdown
Member Author

@rmartinc I added it as part of this PR. Thanks!

michalvavrik and others added 2 commits November 12, 2026 13:43
closes: keycloak#54271

Signed-off-by: Michal Vavřík <dev@michalvavrik.net>
(cherry picked from commit ca650c6)
…os test

Closes keycloak#54716

Signed-off-by: rmartinc <rmartinc@redhat.com>
@mabartos
mabartos force-pushed the backport-54363-26.8 branch from 299e1a6 to 22e955e Compare November 12, 2026 12:44
@mabartos
mabartos requested a review from rmartinc November 12, 2026 15:14
@mabartos
Copy link
Copy Markdown
Member Author

@rmartinc CI should be fine now.

@edewit edewit left a comment
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍 from a UI point of view

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Kerberos realm in login username is not validated against provider configuration (defense-in-depth hardening)

4 participants

0