[prev in list] [next in list] [prev in thread] [next in thread] 

List:       keycloak-user
Subject:    [keycloak-user] Help - two issues
From:       sthorger () redhat ! com (Stian Thorgersen)
Date:       2016-06-28 13:41:18
Message-ID: CAJgngAfK+AQjDYf-dFz2ARbFpLZf-rWkG8rEz=ZJrYU2tf7kTw () mail ! gmail ! com
[Download RAW message or body]

On 23 June 2016 at 21:05, <James_Saxton at ao.uscourts.gov> wrote:

> Good Day,
> 
> Today I was trying to front-end KeyCloak with Apache.
> Background
> Keycloak 1.9.5 is installed successfully on linix, I can tuunel to it and
> log in using admin creds I set up.
> 
> I installed a webserver and configured SSL for the webserver and Keycloak
> as outlined in *3.2.6. SSL/HTTPS Requirement/Modes*  through *3.2.8.2. Configure
> Wildfly undertow subsystem*
> I restarted the webserver and the keycloak server.
> The webserver shows the credential  pop up stating the site is "strictly
> private".  Creds do not allow me to log in through a webserver, only if I
> use the SSH tunnel.
> Not sure were to go - the instruction are pretty simple, I suspect a
> config issue - not sure where though.
> 

If you have a reverse proxy configured in front of Keycloak you need to
configure it correctly. Please refer to
https://keycloak.gitbooks.io/server-installation-and-configuration/content/topics/clustering/load-balancer.html,
 specifically "Enable HTTPS/SSL with a Reverse Proxy".


> 
> Second issue, using the SSH tunnel, I enable require "ALL SSL"  as a test
> knowing full well I could get locked out completely.  How can I reset the
> require ALL SSL without using the console?
> 

You'll have to change it directly in the database.


> 
> Thanks in advance.
> 
> James Saxton
> Software Infrastructure Division
> Administrative Office of the U.S. Courts
> One Columbus Circle, N.E.
> Washington, DC 20544
> (C) 908-910-5566
> *Teamwork makes the dream work!*
> 
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160628/5ce83a0c/attachment.html \



[prev in list] [next in list] [prev in thread] [next in thread]