# java/security/acl/Group no longer supported in java 14

**URL:** <https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099>\
**Category:** Securing applications\
**Created:** [November 25, 2020, 9:49am UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099 "2020-11-25T09:49:23Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jakob](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/jakob/32/1242_2.png) [@Jakob](https://forum.keycloak.org/u/Jakob)\
**Post date:** [November 25, 2020, 9:49am UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099/1 "2020-11-25T09:49:23Z")

</div>

Hello,

is there a workaround or a future release to deal with higher java version like 14.  
In Java 14 java/security/acl/Group is removed and the keycloak java adapter no longer works in java 14.  
Note: Downgrading the Java Version is unfortunate not possible.

Error:  
`java.lang.NoClassDefFoundError: java/security/acl/Group`

> <https://stackoverflow.com/questions/61932188/keycloak-server-caused-by-java-lang-classnotfoundexception-java-security-acl-g>

---

<div class="post-metadata">

**Author:** ![zonaut](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/zonaut/32/666_2.png) [@zonaut](https://forum.keycloak.org/u/zonaut)\
**Post date:** [November 25, 2020, 5:32pm UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099/2 "2020-11-25T17:32:59Z")

</div>

There is an issue about this [https://issues.redhat.com/browse/KEYCLOAK-13633](https://issues.redhat.com/browse/KEYCLOAK-13633) but fix versions is 13.  
The status is pull request sent and the pull request can be found on [https://github.com/keycloak/keycloak/pull/7533](https://github.com/keycloak/keycloak/pull/7533) so you can keep an eye on it and maybe create your own build if your require a solution earlier than 13

---

<div class="post-metadata">

**Author:** ![adamzr](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/adamzr/32/1349_2.png) [@adamzr](https://forum.keycloak.org/u/adamzr)\
**Post date:** [November 29, 2020, 9:07pm UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099/3 "2020-11-29T21:07:54Z")

</div>

FYI, this is only if you use Tomcat as the Servlet container.

---

<div class="post-metadata">

**Author:** ![subhashreebiswal](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/subhashreebiswal/32/1967_2.png) [@subhashreebiswal](https://forum.keycloak.org/u/subhashreebiswal)\
**Post date:** [December 24, 2020, 5:29pm UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099/4 "2020-12-24T17:29:54Z")

</div>

i am getting the same error.can anyone help?

---

<div class="post-metadata">

**Author:** ![zonaut](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/zonaut/32/666_2.png) [@zonaut](https://forum.keycloak.org/u/zonaut)\
**Post date:** [December 26, 2020, 10:58am UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099/5 "2020-12-26T10:58:36Z")

</div>

There is nothing to help with.

Or you use Java 11 where you deploy Keycloak, which is the simplest.  
Or you create a custom build yourself and use that one  
Or you wait until Keycloak 13 is released

I’ve posted the links to the original issue already and a link to a git pull request which you can use if you really need to run Keycloak on Java 11+ for some reason today.  
Java 11 is LTS at the moment so I see no problem why running it on that is a problem.

---

<div class="post-metadata">

**Author:** ![aleon](https://avatars.discourse-cdn.com/v4/letter/a/ee7513/32.png) [@aleon](https://forum.keycloak.org/u/aleon)\
**Post date:** [March 24, 2021, 10:20am UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099/6 "2021-03-24T10:20:18Z")

</div>

Hello zonoaut, I am using the java 11 but I am still getting the same error

---

<div class="post-metadata">

**Author:** ![bpc](https://avatars.discourse-cdn.com/v4/letter/b/edb3f5/32.png) [@bpc](https://forum.keycloak.org/u/bpc)\
**Post date:** [May 25, 2021, 3:43am UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099/7 "2021-05-25T03:43:29Z")

</div>

I’ve cloned 13.0.0 and using java 16.0.1 and still getting this error.

`Compilation failure: Compilation failure: [ERROR] /Users/bpc/workspace/keycloak/adapters/spi/jboss-adapter-core/src/main/java/org/keycloak/adapters/jboss/KeycloakLoginModule.java:[39,8] cannot access java.security.acl.Group [ERROR] class file for java.security.acl.Group not found`

What is the recommended resolution? Use Jetty? Use another java version? Patch?

thx.

PS. [https://issues.redhat.com/browse/KEYCLOAK-13633](https://issues.redhat.com/browse/KEYCLOAK-13633) says its fixed in 13.0.0 and Closed. But clearly its not fixed in 13.0.0 for a vanilla environement. Hence there must be some magic configuration that 13.0.0 got built with, which is what I’m searching for. I don’t really care what that config is, I just need it to successful build so I can get on with my development.

---

<div class="post-metadata">

**Author:** ![dasniko](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dasniko/32/2969_2.png) [@dasniko](https://forum.keycloak.org/u/dasniko)\
**Post date:** [May 26, 2021, 3:21pm UTC](https://forum.keycloak.org/t/java-security-acl-group-no-longer-supported-in-java-14/6099/8 "2021-05-26T15:21:57Z")

</div>

It works for adapters ootb at our environment. We’re just using regular KC Tomcat 9.x adapter and compiling our app with Java 16 - works. With KC versions \< 13, we got the above mentioned error.

Keycloak itself still is, for compile, on older Java version! See e.g. here:

> <https://github.com/keycloak/keycloak/blob/9b76b07144ac8a90aebbb59220ec644116cee671/core/pom.xml#L35-L36>