[keycloak-dev] Setting up AJP proxy from Apache?

[Adam Young]

keycloak-1.9.0.Final

Having trouble finding the right notes for setting up AJP.  This is to 
run alongside a FreeIPA server which is already set up with 
mod_proxy_ajp talking to Tomcat, so I want to keep using the same set of 
modules.



I can see keycloak-1.9.0.Final/standalone/configuration/standalone.xml


<subsystem xmlns="urn:jboss:domain:undertow:3.0">
             <buffer-cache name="default"/>
             <server name="default-server">
                 <http-listener name="default" socket-binding="http" 
redirect-socket="https"/>

                 <host name="default-host" alias="localhost">
                     <location name="/" handler="welcome-content"/>
                     <filter-ref name="server-header"/>
                     <filter-ref name="x-powered-by-header"/>
                 </host>
             </server>


I'm assuming I need a line comparable to <http-listener name="default" 
socket-binding="http" redirect-socket="https"/> But for the AJP 
protocol. Perhaps ajp-listener?

A line like this, perhaps?

      <http-listener name="default-ajp" socket-binding="ajp" 
scheme="http"  />






https://docs.jboss.org/author/display/WFLY8/AJP+listeners

I see at the bottom of the file:

     <socket-binding-group name="standard-sockets" 
default-interface="public" 
port-offset="${jboss.socket.binding.port-offset:0}">
         <socket-binding name="management-http" interface="management" 
port="${jboss.management.http.port:9990}"/>
         <socket-binding name="management-https" interface="management" 
port="${jboss.management.https.port:9993}"/>
         <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>