<div>I am having a little more positive progress and a few more useful things to report from me trying to get this working.
</div><div>The logs below aren’t an issue anymore. Here is how i now have things setup. </div><div><br></div><div>I have nginx setup and running on port 443 and my nginx config looks like this</div><div><div>location / {</div><div> if ($http_user_agent ~ ^$) {</div><div># return 403;</div><div> }</div><div><br></div><div> proxy_pass http://10.128.93.235:8080/;</div><div> proxy_redirect off;</div><div><br></div><div> proxy_set_header Host $host;</div><div>proxy_set_header X-Forwarded-Proto "https";</div><div>proxy_set_header X-Forwarded-Host $host;</div><div> proxy_set_header X-Forwarded-Server $host;</div><div> proxy_set_header X-Real-IP $remote_addr;</div><div> proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;</div><div> }</div></div><div><br></div><div><br></div><div>I seem to be able to login if i choose http://myserver.com but if i try and do https://myserver.com/ag-push </div><div><br></div><div>I get a message that is saying we are sorry <span style="color: rgb(255, 255, 255); font-family: 'Open Sans', Helvetica, Arial, sans-serif; font-size: 12px; line-height: 20px; background-color: rgba(0, 0, 0, 0.2);">Invalid redirect_uri. . </span></div><div><br></div><div>In looking at the http requests I am seeing </div><div><span style="color: rgb(48, 57, 66); font-family: Menlo, monospace; font-size: 11px; white-space: pre-wrap;">/auth/realms/aerogear/tokens/login url cause a 500</span></div>
<div><div><br></div><div>Any way to troubleshoot why its giving a 500?</div><div><br></div><div>Thanks in advance,</div><div><br></div><div><br></div><div><br></div><div><br></div><div>-- </div><div>Chris Hale</div><div>Sent with <a href="http://www.sparrowmailapp.com/?sig" target="_top" rel="nofollow" link="external">Sparrow</a></div><div><br></div></div>
<p style="color: #A0A0A8;">On Friday, October 17, 2014 at 12:31 AM, Matthias Wessendorf [via aerogear-dev] wrote:</p>
<blockquote style='border-left:2px solid #CCCCCC;padding:0 1em' type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;">
<span><div><div>
<div dir="ltr">Hi Chris!<div><br></div><div>thanks for trying the UnifiedPush Server. I have never tried to run the UPS behind a (ngnix) proxy. Does the same config work w/o the proxy? The stack above says "Unable to resolve realm public key remotely", so I am wondering if the Keycoak Auth-Server is deployed as well.</div><div><br></div><div>In the meantime I'll ask our Keycloak friends if they have any experience on this.</div><div><br></div><div>Thanks,</div><div>Matthias</div></div><div><br><div>On Fri, Oct 17, 2014 at 6:59 AM, chale <span dir="ltr"><<a href="/user/SendEmail.jtp?type=node&node=9490&i=0" target="_top" rel="nofollow" link="external">[hidden email]</a>></span> wrote:<br><blockquote style='border-left:2px solid #CCCCCC;padding:0 1em' type="cite"><div>Hi,<br>
I need some help. I am trying to setup aerogear behind a nginx proxy<br>
server that has ssl enabled and I am running into issues. Anytime i try to<br>
go to /ag-push I see this in the logs<br>
<br>
RROR [org.apache.catalina.connector.CoyoteAdapter]<br>
(http--10.128.93.235-8080-5) An exception or error occurred in the container<br>
during the request processing: java.lang.RuntimeException: Unable to resolve<br>
realm public key remotely, status = 403<br>
at<br>
org.keycloak.adapters.AdapterDeploymentContext.resolveRealmKey(AdapterDeploymentContext.java:69)<br>
[keycloak-adapter-core-1.0-final.jar:]<br>
at<br>
org.keycloak.adapters.AdapterDeploymentContext.resolveDeployment(AdapterDeploymentContext.java:55)<br>
[keycloak-adapter-core-1.0-final.jar:]<br>
at<br>
org.keycloak.adapters.as7.AuthenticatedActionsValve.invoke(AuthenticatedActionsValve.java:45)<br>
[keycloak-as7-adapter-1.0-final.jar:]<br>
at<br>
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:397)<br>
[jbossweb-7.0.13.Final.jar:]<br>
at<br>
org.keycloak.adapters.as7.KeycloakAuthenticatorValve.invoke(KeycloakAuthenticatorValve.java:135)<br>
[keycloak-as7-adapter-1.0-final.jar:]<br>
at<br>
org.jboss.as.<a href="http://web.security.SecurityContextAssociationValve.invoke" target="_top" rel="nofollow" link="external">web.security.SecurityContextAssociationValve.invoke</a>(SecurityContextAssociationValve.java:153)<br>
[jboss-as-web-7.1.1.Final.jar:7.1.1.Final]<br>
at<br>
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155)<br>
[jbossweb-7.0.13.Final.jar:]<br>
at<br>
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)<br>
[jbossweb-7.0.13.Final.jar:]<br>
at<br>
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)<br>
[jbossweb-7.0.13.Final.jar:]<br>
at<br>
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368)<br>
[jbossweb-7.0.13.Final.jar:]<br>
at<br>
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877)<br>
[jbossweb-7.0.13.Final.jar:]<br>
at<br>
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671)<br>
[jbossweb-7.0.13.Final.jar:]<br>
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930)<br>
[jbossweb-7.0.13.Final.jar:]<br>
at java.lang.Thread.run(Thread.java:745) [rt.jar:1.7.0_65]<br>
<br>
Does anyone have any advice or experience on how to go about setting up<br>
aerogear behind an nginx proxy?<br>
<br>
<br>
<br>
--<br>
View this message in context: <a href="http://aerogear-dev.1069024.n5.nabble.com/setting-up-aerogear-behind-nginx-proxy-tp9489.html" target="_blank" rel="nofollow" link="external">http://aerogear-dev.1069024.n5.nabble.com/setting-up-aerogear-behind-nginx-proxy-tp9489.html</a><br>
Sent from the aerogear-dev mailing list archive at <a href="http://Nabble.com" target="_top" rel="nofollow" link="external">Nabble.com</a>.<br>
_______________________________________________<br>
aerogear-dev mailing list<br>
<a href="/user/SendEmail.jtp?type=node&node=9490&i=1" target="_top" rel="nofollow" link="external">[hidden email]</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank" rel="nofollow" link="external">https://lists.jboss.org/mailman/listinfo/aerogear-dev</a><br>
</div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Matthias Wessendorf <br><br>blog: <a href="http://matthiaswessendorf.wordpress.com/" target="_blank" rel="nofollow" link="external">http://matthiaswessendorf.wordpress.com/</a><br>sessions: <a href="http://www.slideshare.net/mwessendorf" target="_blank" rel="nofollow" link="external">http://www.slideshare.net/mwessendorf</a><br>twitter: <a href="http://twitter.com/mwessendorf" target="_blank" rel="nofollow" link="external">http://twitter.com/mwessendorf</a>
</div>
<br>_______________________________________________
<br>aerogear-dev mailing list
<br><a href="/user/SendEmail.jtp?type=node&node=9490&i=2" target="_top" rel="nofollow" link="external">[hidden email]</a>
<br><a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_top" rel="nofollow" link="external">https://lists.jboss.org/mailman/listinfo/aerogear-dev</a>
<br>
<br>
<hr noshade="noshade" size="1" color="#cccccc">
<div style="color:#444; font: 12px tahoma,geneva,helvetica,arial,sans-serif;">
<div style="font-weight:bold">If you reply to this email, your message will be added to the discussion below:</div>
<a href="http://aerogear-dev.1069024.n5.nabble.com/setting-up-aerogear-behind-nginx-proxy-tp9489p9490.html" target="_top" rel="nofollow" link="external">http://aerogear-dev.1069024.n5.nabble.com/setting-up-aerogear-behind-nginx-proxy-tp9489p9490.html</a>
</div>
<div style="color:#666; font: 11px tahoma,geneva,helvetica,arial,sans-serif;margin-top:.4em;line-height:1.5em">
To unsubscribe from setting up aerogear behind nginx proxy, <a href="" target="_top" rel="nofollow" link="external">click here</a>.<br>
<a href="http://aerogear-dev.1069024.n5.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml" rel="nofollow" style="font:9px serif" target="_top" link="external">NAML</a>
</div></div></div></span>
</blockquote>
<div>
<br>
</div>
<br/><hr align="left" width="300" />
View this message in context: <a href="http://aerogear-dev.1069024.n5.nabble.com/setting-up-aerogear-behind-nginx-proxy-tp9489p9491.html">Re: [aerogear-dev] setting up aerogear behind nginx proxy</a><br/>
Sent from the <a href="http://aerogear-dev.1069024.n5.nabble.com/">aerogear-dev mailing list archive</a> at Nabble.com.<br/>