Kerberos using Keycloak prebuilt container, is it working?

[Tomas Dalebjörk]

Hi.

I tried yesterday to use the Keycloak built container adding the Kerberos authentication.

But it looks like that the container has missing Fedora packages to support Kerberos as I could not find any krb5 libs installed?

The logs contains evidence of that the Java code does not understand the user sent Kerberos encryption ("checksum error").

Ok, it would be easy to install using dnf install, but the container is secured in a way so it is very complex to install anything.

Any tips how to install ?

Regards Tomas 

[Francis Augusto Medeiros]

My experience has been that these errors are always related to the keytab. Are you using Active Directory? Try to generate the keytab without deprecated ciphers. This helped me a lot. 

__

Francis Augusto Medeiros-Logeay

Oslo, Norway

Sent from a mobile device / Enviado a partir de dispositivo móvel

On 28 Oct 2025, at 07:58, Tomas Dalebjörk <tomas.d...@gmail.com> wrote:



--
You received this message because you are subscribed to the Google Groups "Keycloak User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to keycloak-use...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/keycloak-user/CACrcyfJXPOJ2zNVBUVmTyDtNV9c6vx3n2S0MEMJf09-UH0-NmA%40mail.gmail.com.

[Elivania Ié]

Não entendi 

To view this discussion visit https://groups.google.com/d/msgid/keycloak-user/8268D223-782F-47A0-BAD8-578C32DDEE8B%40gmail.com.