Repository navigation
keycloak 26.3 fails with the "2025-07-08 17:25:38,968 WARN [io.agroal.pool] (agroal-11) Datasource '<default>': Wrong user name or password [28000-230]" #41030
Replies: 5 comments 6 replies
If you are trying to migrate using a dev database this could be related to #39046 - how quarkus handles h2 passwords changed in 26.2. Whatever setup you had working for 26.2 is expected to keep working in 26.3. If you explicitly set the db-username / password, or created the database prior to 26.1, then you must keep explicitly specifying the db-username and password. If you create the h2 database using 26.2 or later, then there should be no db username / password needed. |
|
these creds are working for 26.2 and i didnt change anything else except for the docker image tag, any idea why they stopped working? |
|
I'm not sure what is going on from just what you have posted. You should verify that the database file is not being implicitly created for your new image, and that you can use it directly via the h2 driver. |
|
the H2 DB was created before 26.2 version |
|
Then explicitly specifying the db-username and db-password will continue to work. Note that we don't officially support migrations on a dev database. You should move to using a production level database. |
|
but then its not working, |
|
Understood. Try letting the instance implicitly create the database file rather than mounting one, just to confirm the behavior when starting fresh, but with specifying the credentials. |
|
but if i remove the H2 DB and create a fresh one, i will loose all my data. |
|
I know, I'm just asking for you to confirm the behavior. |
|
"You should verify that the database file is not being implicitly created for your new image, and that you can use it directly via the h2 driver." |
|
Not in keycloak. You can use jdbc tooling, such as dbeaver, to confirm connecting to a h2 database file. |
Uh oh!
There was an error while loading. Please reload this page.
I have upgraded my keycloak version from 26.2 to 26.3 and now i see the below error in the logs
2025-07-08 17:25:38,968 WARN [io.agroal.pool] (agroal-11) Datasource '<default>': Wrong user name or password [28000-230] 2025-07-08 17:25:38,969 WARN [org.hibernate.engine.jdbc.env.internal.JdbcEnvironmentInitiator] (JPA Startup Thread) HHH000342: Could not obtain connection to query metadata: org.hibernate.exception.GenericJDBCException: unable to obtain isolated JDBC connection [Wrong user name or password [28000-230]] [n/a] at org.hibernate.exception.internal.StandardSQLExceptionConverter.convert(StandardSQLExceptionConverter.java:63) at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:108)I am using keycloak internal database H2 and this is my configuration
env: - name: DB_VENDOR value: h2 - name: KEYCLOAK_ADMIN value: admin - name: KEYCLOAK_ADMIN_PASSWORD valueFrom: secretKeyRef: name: keycloak-secret key: KEYCLOAK_PASSWORD - name: KC_DB_USERNAME value: sa - name: KC_DB_PASSWORD valueFrom: secretKeyRef: name: keycloak-secret key: KEYCLOAK_DB_PASSWORDPlease point me to the correct vars, i dont see them in release notes
All reactions