3:07 a.m.
Hi guys, I have deployed an instance of keycloak on openshift
following the steps described here:
https://github.com/keycloak/openshift-keycloak-cartridge
The operation apparently went ok and I have been able to login to the
instance and see kc administrative interface.
Problem is that after a while, I am no longer able to login to the
instance. Not even if I restart it.
This is the error I see when trying:
Bad Request
Your browser sent a request that this server could not understand.
Size of a request header field exceeds server limit.
X-Forwarded-Host
/n
And I get that with both ffox and chromium on linux
this from curl:
$ curl -L -v https://kc-paolo.rhcloud.com/
* Trying 54.89.206.14...
* Connected to kc-paolo.rhcloud.com (54.89.206.14) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
* Server certificate:
* subject: CN=*.rhcloud.com,O=Red Hat Inc.,L=Raleigh,ST=North Carolina,C=US
* start date: Apr 07 00:00:00 2015 GMT
* expire date: Apr 11 12:00:00 2018 GMT
* common name: *.rhcloud.com
* issuer: CN=DigiCert SHA2 High Assurance Server
CA,OU=www.digicert.com,O=DigiCert Inc,C=US
GET / HTTP/1.1
User-Agent: curl/7.40.0
Host: kc-paolo.rhcloud.com
Accept: */*
< HTTP/1.1 400 Bad Request
< Date: Wed, 01 Jul 2015 08:06:46 GMT
< Server: Apache/2.2.15 (Red Hat)
< Content-Length: 392
< Content-Type: text/html; charset=iso-8859-1
< Connection: close
<
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Size of a request header field exceeds server limit.<br />
<pre>
X-Forwarded-Host
</pre>/n</p>
<hr>
<address>Apache/2.2.15 (Red Hat) Server at localhost Port 80</address>
</body></html>
* Closing connection 0
any idea about what's wrong?
thank you
paolo
5:22 a.m.
Don't know what's going on here. If you're sending a request directly to
'https://kc-paolo.rhcloud.com/' it's not specific to Keycloak and it's
either a WildFly or OpenShift issue. My guess would be the latter so maybe ask on
OpenShift forums?
----- Original Message -----
From: "Paolo Antinori" <sonicaaaa(a)gmail.com>
To: keycloak-user(a)lists.jboss.org
Sent: Wednesday, 1 July, 2015 10:07:20 AM
Subject: [keycloak-user] problem with keycloak on openshift
Hi guys, I have deployed an instance of keycloak on openshift
following the steps described here:
https://github.com/keycloak/openshift-keycloak-cartridge
The operation apparently went ok and I have been able to login to the
instance and see kc administrative interface.
Problem is that after a while, I am no longer able to login to the
instance. Not even if I restart it.
This is the error I see when trying:
Bad Request
Your browser sent a request that this server could not understand.
Size of a request header field exceeds server limit.
X-Forwarded-Host
/n
And I get that with both ffox and chromium on linux
this from curl:
$ curl -L -v https://kc-paolo.rhcloud.com/
* Trying 54.89.206.14...
* Connected to kc-paolo.rhcloud.com (54.89.206.14) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
* Server certificate:
* subject: CN=*.rhcloud.com,O=Red Hat Inc.,L=Raleigh,ST=North
Carolina,C=US
* start date: Apr 07 00:00:00 2015 GMT
* expire date: Apr 11 12:00:00 2018 GMT
* common name: *.rhcloud.com
* issuer: CN=DigiCert SHA2 High Assurance Server
CA,OU=www.digicert.com,O=DigiCert Inc,C=US
> GET / HTTP/1.1
> User-Agent: curl/7.40.0
> Host: kc-paolo.rhcloud.com
> Accept: */*
>
< HTTP/1.1 400 Bad Request
< Date: Wed, 01 Jul 2015 08:06:46 GMT
< Server: Apache/2.2.15 (Red Hat)
< Content-Length: 392
< Content-Type: text/html; charset=iso-8859-1
< Connection: close
<
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Size of a request header field exceeds server limit.<br />
<pre>
X-Forwarded-Host
</pre>/n</p>
<hr>
<address>Apache/2.2.15 (Red Hat) Server at localhost Port 80</address>
</body></html>
* Closing connection 0
any idea about what's wrong?
thank you
paolo
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
7:21 a.m.
Thank you. After confirming it's anything known or that I'm doing
anything obviously stupid on Keycloak side I will verify with the OS
guys.
I'll report the finding just for cross linking.
thank you!
paolo
On Thu, Jul 2, 2015 at 12:22 PM, Stian Thorgersen <stian(a)redhat.com> wrote:
Don't know what's going on here. If you're sending a
request directly to 'https://kc-paolo.rhcloud.com/' it's not specific to
Keycloak and it's either a WildFly or OpenShift issue. My guess would be the latter so
maybe ask on OpenShift forums?
----- Original Message -----
> From: "Paolo Antinori" <sonicaaaa(a)gmail.com>
> To: keycloak-user(a)lists.jboss.org
> Sent: Wednesday, 1 July, 2015 10:07:20 AM
> Subject: [keycloak-user] problem with keycloak on openshift
>
> Hi guys, I have deployed an instance of keycloak on openshift
> following the steps described here:
>
> https://github.com/keycloak/openshift-keycloak-cartridge
>
> The operation apparently went ok and I have been able to login to the
> instance and see kc administrative interface.
>
> Problem is that after a while, I am no longer able to login to the
> instance. Not even if I restart it.
>
> This is the error I see when trying:
>
> Bad Request
>
> Your browser sent a request that this server could not understand.
> Size of a request header field exceeds server limit.
>
> X-Forwarded-Host
>
> /n
>
>
> And I get that with both ffox and chromium on linux
>
> this from curl:
>
>
> $ curl -L -v https://kc-paolo.rhcloud.com/
> * Trying 54.89.206.14...
> * Connected to kc-paolo.rhcloud.com (54.89.206.14) port 443 (#0)
> * Initializing NSS with certpath: sql:/etc/pki/nssdb
> * CAfile: /etc/pki/tls/certs/ca-bundle.crt
> CApath: none
> * SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
> * Server certificate:
> * subject: CN=*.rhcloud.com,O=Red Hat Inc.,L=Raleigh,ST=North
> Carolina,C=US
> * start date: Apr 07 00:00:00 2015 GMT
> * expire date: Apr 11 12:00:00 2018 GMT
> * common name: *.rhcloud.com
> * issuer: CN=DigiCert SHA2 High Assurance Server
> CA,OU=www.digicert.com,O=DigiCert Inc,C=US
> > GET / HTTP/1.1
> > User-Agent: curl/7.40.0
> > Host: kc-paolo.rhcloud.com
> > Accept: */*
> >
> < HTTP/1.1 400 Bad Request
> < Date: Wed, 01 Jul 2015 08:06:46 GMT
> < Server: Apache/2.2.15 (Red Hat)
> < Content-Length: 392
> < Content-Type: text/html; charset=iso-8859-1
> < Connection: close
> <
> <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
> <html><head>
> <title>400 Bad Request</title>
> </head><body>
> <h1>Bad Request</h1>
> <p>Your browser sent a request that this server could not understand.<br
/>
> Size of a request header field exceeds server limit.<br />
> <pre>
> X-Forwarded-Host
> </pre>/n</p>
> <hr>
> <address>Apache/2.2.15 (Red Hat) Server at localhost Port 80</address>
> </body></html>
> * Closing connection 0
>
>
>
>
> any idea about what's wrong?
>
> thank you
>
> paolo
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
3450
days inactive
3451
days old
2 comments
2 participants
participants (2)
-
Paolo Antinori -
Stian Thorgersen