Skip to main content

Posts

TIMEOUT Issue

  Status Update: Investigation into the recurring "Unauthorized" pop-up identified a probable cause in the Grafana configuration. The grafana.ini [auth] section contains: login_maximum_lifetime_duration = 1m In Grafana, a lowercase m means minutes , not months. This caps the maximum session lifetime at one minute, which matches the reported 30-second to 2-minute cycle of the "Unauthorized" pop-up and forced refresh. The Grafana default for this setting is 30d . A secondary contributing factor is under review: whether Grafana is configured to use the Keycloak refresh token ( use_refresh_token ). Without it, Grafana cannot silently renew an expired access token, so the browser receives a 401 when Keycloak's access token lifespan elapses. Keycloak's default access token lifespan is 5 minutes, which could produce the same symptom at a different interval. While troubleshooting this ticket, a separate and more severe defect was found: SSO users other than ...
Post a Comment
Read more
Recent posts

Grafana Keycloak SSO login: "User sync failed"

  Background Keycloak SSO authentication succeeds, but Grafana then rejects the login with "Login failed / User sync failed." Grafana receives a valid token and fails while creating the local user record. Root cause: All GTAC LDAP users share one email address. Keycloak allows duplicate emails; Grafana requires them to be unique. The first account claims that email, and every SSO user after that fails to be created. Also found: login_attribute_path = username doesn't match Keycloak's actual claim ( preferred_username ), so Grafana falls back to email as the username too. We have no access to the GTAC LDAP interface, so the fix is limited to Keycloak and Grafana config. No LDAP or Keycloak email addresses change. Environment: Grafana 10.4.11.13 | Keycloak 10.4.11.12:8444, realm databridge-web-service , client grafana | Generic OAuth Reproduce: Authenticate to Keycloak → open Grafana → click "Sign in with DataBridge SSO" → "User sync failed....
Post a Comment
Read more

JUpdate

  Status Update: Root cause identified. Grafana SSO login fails with "User sync failed" after Keycloak authentication succeeds. Keycloak authenticates the user correctly. Grafana then fails when creating its own local copy of that user. Grafana logs confirm this: logger=user.sync level=error msg="Failed to create user" error="user not found" auth_module=oauth_generic_oauth logger=authn.service level=error msg="Failed to run post auth hook" error="[user.sync.internal] unable to create user: user not found" The cause is duplicate email addresses. All users sourced from the GTAC LDAP provider share a single email address. Keycloak permits duplicate emails; Grafana requires every user to have a unique one. The first account created claims that email, and every subsequent user collides with it and is rejected. Two secondary config issues were also found in grafana.ini : login_attribute_path = username does not match Keycloak's st...
Post a Comment
Read more

Joke of Day

Home / Blog / 35 Cybersecurity Jokes to Make Any Security Geek Chuckle (or Groan) 35 Cybersecurity Jokes to Make Any SecurityGeek Chuckle (or Groan) Posted on September 8, 2020 Last updated on December 13, 2024. Good IT jokes are few and far between, especially when it comes to cybersecurity. That’s why we put on our creativityhats to brainstorm joke after joke – with a break to pull in a few of our favorites from the web – for the ultimate result: themotherlode (or should we say mother board ?) of cybersecurity jokes and puns. P.S.: we side with Alfred Hitchcock on thisone: puns are the highest form of literature. Everyone deserves an eye-catching intro to break the ice at the start of a meeting or spice up a PowerPoint – gotta keepthe CEO’s attention somehow! And no joke is complete without the perfect graphic. Feel free to grab ours and includethem in your next newsletter, quarterly presentation, or for a workday pick-me-up. Without further ado, we present… Our Favorite Cybersecurit...
Post a Comment
Read more

3/19

 Greetings. The last few days on this weight management program as been a bit crazy.  I had serious cravings.  Then I did some serious yard work then took a shower.  After that I felt like I would faint.  Chiquita and I had to go and get some powerade.  I ate some crackers as well and it seem to help.  Tomorrow back to the weight management grind.  :) G 283.1 lb
Post a Comment
Read more

03/21

 Today was a bit tough but notice the plan allows for one substitution of the shake with a protein.  So the wife and I decided to grill 4oz of chicken with a small salad.  Chicken with a little italian seasoning (no salt) and lemon juice covering salad.  After two days of shakes :) it was glorious! G 290lb
Post a Comment
Read more