<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On 23 June 2016 at 21:05, <span dir="ltr"><<a href="mailto:James_Saxton@ao.uscourts.gov" target="_blank">James_Saxton@ao.uscourts.gov</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><font size="2" face="sans-serif">Good Day,</font>
<br>
<br><font size="2" face="sans-serif">Today I was trying to front-end KeyCloak
with Apache.</font>
<br><font size="2" face="sans-serif">Background</font>
<br><font size="2" face="sans-serif">Keycloak 1.9.5 is installed successfully
on linix, I can tuunel to it and log in using admin creds I set up.</font>
<br>
<br><font size="2" face="sans-serif">I installed a webserver and configured
SSL for the webserver and Keycloak as outlined in </font><font size="4"><b>3.2.6. SSL/HTTPS
Requirement/Modes</b></font><font size="2" face="sans-serif"> through
</font><font size="3"><b>3.2.8.2. Configure Wildfly undertow subsystem</b></font>
<br><font size="2" face="sans-serif">I restarted the webserver and the keycloak
server.</font>
<br><font size="2" face="sans-serif">The webserver shows the credential pop
up stating the site is "strictly private". Creds do not
allow me to log in through a webserver, only if I use the SSH tunnel.</font>
<br><font size="2" face="sans-serif">Not sure were to go - the instruction
are pretty simple, I suspect a config issue - not sure where though.</font>
<br></blockquote><div><br></div><div>If you have a reverse proxy configured in front of Keycloak you need to configure it correctly. Please refer to <a href="https://keycloak.gitbooks.io/server-installation-and-configuration/content/topics/clustering/load-balancer.html">https://keycloak.gitbooks.io/server-installation-and-configuration/content/topics/clustering/load-balancer.html</a>, specifically "Enable HTTPS/SSL with a Reverse Proxy".</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br><font size="2" face="sans-serif">Second issue, using the SSH tunnel,
I enable require "ALL SSL" as a test knowing full well
I could get locked out completely. How can I reset the require ALL
SSL without using the console?</font>
<br></blockquote><div><br></div><div>You'll have to change it directly in the database.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br><font size="2" face="sans-serif">Thanks in advance.</font>
<br>
<br><font size="3">James Saxton<br>
Software Infrastructure Division</font>
<br><font size="3">Administrative Office of the U.S. Courts<br>
One Columbus Circle, N.E.<br>
Washington, DC 20544</font>
<br><font size="3">(C) <a href="tel:908-910-5566" value="+19089105566" target="_blank">908-910-5566</a></font>
<br><font size="3"><i>Teamwork makes the dream work!</i></font>
<br>
<br><br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div></div>