I tried using the Ruby to import users into a tenant from KeyCloak, the script threw no errors but I am unable to login using the password. The password works in KeyCloak but not in FusionAuth. The Fusion Auth version I am using is 1.45.3 and Key Cloak version is 21.1.1.
Anybody had this issue before?
Without understanding your setup completely, is the callback happening in a server-to-server call? If so, localhost doesn't work.
For example when I wanna call the elastic search container from fusion auth, I cannot call it as http://localhost:9200. For instance if the setup is
fusionauth-search:
image: docker.elastic.co/elasticsearch/elasticsearch:8.5.0
container_name: fusionauth-search
environment:
cluster.name: fusionauth
networks:
- data-layer
restart: unless-stopped
ports:
- '9011:9011'
I will need to call it via http://fusionauth-search:9200. You can also see such a setup in Fusion Auth's documentation on setting up Fusion Auth in docker-compose at https://fusionauth.io/docs/v1/tech/installation-guide/docker. You notice that the URLs will refer to the container names.
I hope this helps.
@dan Hello Dan, I found the fix, at least for my test instance, seems that pbkdf2-sha256 maps to salted-pbkdf2-hmac-sha256 rather than salted-pbkdf2-hmac-sha256-512.
This seems to make the Ruby script work and also it works on our own internal update scripts in the test instance.
@dan You folks may want to update the documentation and potentially the ruby script you guys provide so people won't panic like we did lolz.