From c1afd3f99ffd1c3dda86e46bdd45690cedba25d5 Mon Sep 17 00:00:00 2001 From: rmartinc Date: Fri, 24 Mar 2023 16:04:39 +0100 Subject: [PATCH] Docs changes for running the adapters with EAP7 and jdk-17 Closes https://github.com/keycloak/keycloak/issues/19273 --- .../securing_apps/topics/oidc/java/jboss-adapter.adoc | 2 ++ .../saml/java/jboss-adapter/jboss_adapter_installation.adoc | 2 ++ 2 files changed, 4 insertions(+) diff --git a/docs/documentation/securing_apps/topics/oidc/java/jboss-adapter.adoc b/docs/documentation/securing_apps/topics/oidc/java/jboss-adapter.adoc index f716a3f545..9371660f28 100644 --- a/docs/documentation/securing_apps/topics/oidc/java/jboss-adapter.adoc +++ b/docs/documentation/securing_apps/topics/oidc/java/jboss-adapter.adoc @@ -113,6 +113,8 @@ $ ./bin/jboss-cli.sh -c --file=bin/adapter-elytron-install.cli ---- + NOTE: It is possible to use the legacy non-Elytron adapter on JBoss EAP 7.1 or newer as well, meaning you can use `adapter-install-offline.cli` ++ +NOTE: https://access.redhat.com/articles/2026253#EAP_74[EAP supports OpenJDK 17 and Oracle JDK 17] since 7.4.CP7 and 7.4.CP8 respectively. Note that the new java version makes the elytron variant compulsory, so do not use the legacy adapter with JDK 17. Also, after running the adapter CLI file, execute the `enable-elytron-se17.cli` script provided by EAP. Both scripts are necessary to configure the elytron adapter and remove the incompatible EAP subsystems. For more details, see this https://access.redhat.com/articles/6956863[Security Configuration Changes] article. * Install on JBoss EAP 6.4 + diff --git a/docs/documentation/securing_apps/topics/saml/java/jboss-adapter/jboss_adapter_installation.adoc b/docs/documentation/securing_apps/topics/saml/java/jboss-adapter/jboss_adapter_installation.adoc index e580176325..cfea981807 100644 --- a/docs/documentation/securing_apps/topics/saml/java/jboss-adapter/jboss_adapter_installation.adoc +++ b/docs/documentation/securing_apps/topics/saml/java/jboss-adapter/jboss_adapter_installation.adoc @@ -70,6 +70,8 @@ ifeval::[{project_product}==true] $ cd $JBOSS_HOME $ ./bin/jboss-cli.sh -c --file=bin/adapter-elytron-install-saml.cli ---- ++ +NOTE: https://access.redhat.com/articles/2026253#EAP_74[EAP supports OpenJDK 17 and Oracle JDK 17] since 7.4.CP7 and 7.4.CP8 respectively. Note that the new java version makes the elytron variant compulsory, so do not use the legacy adapter with JDK 17. Also, after running the adapter CLI file, execute the `enable-elytron-se17.cli` script provided by EAP. Both scripts are necessary to configure the elytron adapter and remove the incompatible EAP subsystems. For more details, see this https://access.redhat.com/articles/6956863[Security Configuration Changes] article. * Use this command for JBoss EAP 7.0 and EAP 6.4 +