# Bad Request to Authenticate with Keycloack on Ubuntu 24

**URL:** <https://discourse.openondemand.org/t/bad-request-to-authenticate-with-keycloack-on-ubuntu-24/4535>\
**Category:** Get Help\
**Tags:** question\
**Created:** [September 24, 2025, 2:41pm UTC](https://discourse.openondemand.org/t/bad-request-to-authenticate-with-keycloack-on-ubuntu-24/4535 "2025-09-24T14:41:58Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![irfanardi3001](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/irfanardi3001/32/2593_2.png) [@irfanardi3001](https://discourse.openondemand.org/u/irfanardi3001)\
**Post date:** [September 24, 2025, 2:41pm UTC](https://discourse.openondemand.org/t/bad-request-to-authenticate-with-keycloack-on-ubuntu-24/4535/1 "2025-09-24T14:41:58Z")

</div>

Hi, could you help me to solve this problem?  
I’am setup OpenOndemand in Ubuntu LTS server 24.04 with Keycloack (docker) authentication running on another instance and this problem come up

 ![image](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/e/e95e9fb48fee439b9036cb14667824a7746cf7a3.png)

Also this is my keycloack client configuration

 ![image](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/3/3645d42da582f790d0a09a04ee33150ae9fd1970.png)

On the `/etc/ood/config/ood_portal.yml`

> servername: ‘ondemand-dev.mytestdev.my.id’
> 
> auth:
> 
> - ‘AuthType openid-connect’
> 
> - ‘Require valid-user’logout\_redirect: ‘/oidc?logout=https%3A%2F%2Fondemand-dev.mytestdev.my.id’
> 
> oidc\_uri: ‘/oidc’
> 
> ssl:
> 
> - ‘SSLCertificateFile “/etc/pki/tls/certs/ondemand-dev.mytestdev.my.id.pem”’
> 
> - ‘SSLCertificateKeyFile “/etc/pki/tls/private/ondemand-dev.mytestdev.my.id.key”’
> 
> - ‘LimitRequestFieldSize 32766’
> 
> - ‘LimitRequestLine 32766’

and for /etc/apache2/conf-available/auth\_openidc.conf

> OIDCProviderMetadataURL [https://ondemand-idpdev.mytestdev.my.id/realms/ondemand/.well-known/openid-configuration](https://ondemand-idpdev.mytestdev.my.id/realms/ondemand/.well-known/openid-configuration)  
> OIDCClientID “ondemand-dev.mytestdev.my.id”  
> OIDCClientSecret “ApjCXyalrsN2ERYsUI5f54bOK5W0mTIQ”  
> OIDCRedirectURI [Submitting...](https://ondemand-dev.mytestdev.my.id/oidc)  
> OIDCCryptoPassphrase “1bc4e2524550cad07aed32d2ec864cb4d1ee10f91da7fb24c4489d387f7c4baf8b55684e98de1687”
> 
> OIDCSessionInactivityTimeout 28800  
> OIDCSessionMaxDuration 28800
> 
> OIDCRemoteUserClaim ondemand-dev
> 
> OIDCPassClaimsAs environment
> 
> OIDCStripCookies mod\_auth\_openidc\_session mod\_auth\_openidc\_session\_chunks mod\_auth\_openidc\_session\_0 mod\_auth\_openidc\_session\_1

I can’t find the error regarding this bad request…  
Looking for help

---

<div class="post-metadata">

**Author:** ![jeff.ohrstrom](https://sea1.discourse-cdn.com/flex015/user_avatar/discourse.openondemand.org/jeff.ohrstrom/32/136_2.png) [@jeff.ohrstrom](https://discourse.openondemand.org/u/jeff.ohrstrom)\
**Post date:** [September 24, 2025, 2:44pm UTC](https://discourse.openondemand.org/t/bad-request-to-authenticate-with-keycloack-on-ubuntu-24/4535/2 "2025-09-24T14:44:50Z")

</div>

> [@irfanardi3001](#):
>
> I can’t find the error regarding this bad request…

Logs files will be in `/var/log/apache2` on Ubuntu systems I believe. You’re looking for an `_error` log.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/osc/original/2X/b/bae70bd0ed39a3ae769c2108155f4cb3e9da8385.png) [@system](https://discourse.openondemand.org/u/system)\
**Post date:** [March 23, 2026, 2:45pm UTC](https://discourse.openondemand.org/t/bad-request-to-authenticate-with-keycloack-on-ubuntu-24/4535/3 "2026-03-23T14:45:41Z")

</div>

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.