[keycloak-user] problem with keycloak on openshift
Paolo Antinori
sonicaaaa at gmail.com
Wed Jul 1 04:07:20 EDT 2015
Hi guys, I have deployed an instance of keycloak on openshift
following the steps described here:
https://github.com/keycloak/openshift-keycloak-cartridge
The operation apparently went ok and I have been able to login to the
instance and see kc administrative interface.
Problem is that after a while, I am no longer able to login to the
instance. Not even if I restart it.
This is the error I see when trying:
Bad Request
Your browser sent a request that this server could not understand.
Size of a request header field exceeds server limit.
X-Forwarded-Host
/n
And I get that with both ffox and chromium on linux
this from curl:
$ curl -L -v https://kc-paolo.rhcloud.com/
* Trying 54.89.206.14...
* Connected to kc-paolo.rhcloud.com (54.89.206.14) port 443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
* Server certificate:
* subject: CN=*.rhcloud.com,O=Red Hat Inc.,L=Raleigh,ST=North Carolina,C=US
* start date: Apr 07 00:00:00 2015 GMT
* expire date: Apr 11 12:00:00 2018 GMT
* common name: *.rhcloud.com
* issuer: CN=DigiCert SHA2 High Assurance Server
CA,OU=www.digicert.com,O=DigiCert Inc,C=US
> GET / HTTP/1.1
> User-Agent: curl/7.40.0
> Host: kc-paolo.rhcloud.com
> Accept: */*
>
< HTTP/1.1 400 Bad Request
< Date: Wed, 01 Jul 2015 08:06:46 GMT
< Server: Apache/2.2.15 (Red Hat)
< Content-Length: 392
< Content-Type: text/html; charset=iso-8859-1
< Connection: close
<
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
Size of a request header field exceeds server limit.<br />
<pre>
X-Forwarded-Host
</pre>/n</p>
<hr>
<address>Apache/2.2.15 (Red Hat) Server at localhost Port 80</address>
</body></html>
* Closing connection 0
any idea about what's wrong?
thank you
paolo
More information about the keycloak-user
mailing list