KFAA51429-E


      
         An attempt to perform aa....aa failed.

         
            
               aa....aa: Processing that failed to execute

               
                  
                     
                        connection to Keycloak server: Connection to
                           the Keycloak server

                     

                  

               

            
            
               bb....bb: Error type

               
                  If the error type cannot be obtained, * is
                     displayed.

               

            
            
               cc....cc: Error message

               
                  If the error message cannot be obtained, * is
                     displayed.

               

            
            
               S:

               
                  Terminates processing.

               

            
            
               Action:

               
                  Take appropriate action based on the error type output in
                     bb....bb and the error message output in
                     cc....cc. The main causes of the error and their corrective
                     actions are shown below.

                  

                        
                        
                        
                        
                           
                              
                                 Display of bb....bb

                              

                              
                                 Display of cc....cc

                              

                              
                                 Corrective action to take

                              

                           

                        

                        
                           
                              
                                 invalid_grant

                              

                              
                                 Invalid user credentials

                              

                              
                                 
                                    
                                       The specified authorization identifier or password is
                                          incorrect. Specify the correct authorization identifier
                                          and password.

                                    

                                    
                                       No external user corresponding to the specified
                                          authorization identifier exists. Create an external user
                                          with the same name as the authorization identifier.

                                    

                                    
                                       An attempt was made to connect to the Keycloak server with
                                          a user who has multi-factor authentication such as OTP
                                          enabled. Disable the multi-factor authentication
                                          settings.

                                    

                                 

                              

                           

                           
                              
                                 Account is not fully set up

                              

                              
                                 The user account created on the Keycloak server is not fully
                                    configured. Check whether the password and other settings have
                                    been completed.

                              

                           

                           
                              
                                 Realm does not exist

                              

                              
                                 *

                              

                              
                                 The realm name specified in the adb_auth_keyc_realm operand of the server definition does
                                    not exist. Specify an existing realm name in the adb_auth_keyc_realm operand.

                              

                           

                           
                              
                                 invalid_client

                              

                              
                                 Invalid client or Invalid client
                                    credentials

                              

                              
                                 There is an error in the client ID specified in the adb_auth_keyc_clt_id operand of the server
                                    definition. Specify the correct client ID in the adb_auth_keyc_clt_id operand.

                              

                           

                           
                              
                                 unauthorized_client

                              

                              
                                 Client not allowed for direct access
                                    grants

                              

                              
                                 The Authentication flow of the client
                                    configured on the Keycloak server is not set to Direct access grants. Set it to Direct access grants.

Display of `bb....bb`	Display of `cc....cc`	Corrective action to take
invalid_grant	Invalid user credentials	The specified authorization identifier or password is incorrect. Specify the correct authorization identifier and password. No external user corresponding to the specified authorization identifier exists. Create an external user with the same name as the authorization identifier. An attempt was made to connect to the Keycloak server with a user who has multi-factor authentication such as OTP enabled. Disable the multi-factor authentication settings.
invalid_grant	Account is not fully set up	The user account created on the Keycloak server is not fully configured. Check whether the password and other settings have been completed.
Realm does not exist	*	The realm name specified in the adb_auth_keyc_realm operand of the server definition does not exist. Specify an existing realm name in the adb_auth_keyc_realm operand.
invalid_client	Invalid client or Invalid client credentials	There is an error in the client ID specified in the adb_auth_keyc_clt_id operand of the server definition. Specify the correct client ID in the adb_auth_keyc_clt_id operand.
unauthorized_client	Client not allowed for direct access grants	The Authentication flow of the client configured on the Keycloak server is not set to Direct access grants. Set it to Direct access grants.