Keycloak - Service / Admin Account

[MickLesk]

Copied from original post: tteck/Proxmox#2922

⚙️ Initial Login

A service admin account created using the method below should be temporary. This means the account should exist only for the duration necessary to perform operations needed to gain permanent and more secure admin access.

Execute the following in the Keycloak LXC console.

systemctl stop keycloak.service
cd /opt/keycloak/bin
./kc.sh bootstrap-admin user

Follow the instructions, then:

systemctl start keycloak.service

Then, go to IP:8080/admin

[miguelcorrea-bit]

systemctl stop keycloak.service
cd /opt/keycloak/bin
./kc.sh bootstrap-admin user

Fallow the instructions for adding a new temp admin user and password.

systemctl start keycloak.service

[davidccunliffe]

This is the mix of both from above, it will ask you to either use the provided username or you can set it and then ask's for the password. It will both stop and start the service after you complete the interaction. Give the VM some time to come back online after starting.

systemctl stop keycloak.service
cd /opt/keycloak/bin
./kc.sh bootstrap-admin user --bootstrap-admin-username=temp-admin --bootstrap-admin-password=changeme --optimized
systemctl start keycloak.service

[jvlomax-hbb]

Gives the following error using the latest script to install: Option: '--bootstrap-admin-username' not valid for command user

[futurelook]

same problem here.

[tremor021]

Hmm, this smells like they changed how bootstraping command works. We will investigate this, stay tuned...

[tremor021]

Ok, seems like they messed a bit with this... I will correct @MickLesk post with a temporary working solution until we get a definitive answer from devs about this.