New installation on Rocky Linux 9.6 using keycloak for auth

keycloak fixed users showing up and i am getting the login screen.

I get this error when i try to login as my user.

You’ll have to check the logs in /var/log/httpd to see what that may be. Note it’s the error log with the hostname in the filename, not the access logs.

does it make a difference if we are running httpd or nginx?

also i have been looking over the logs and i don’t see anything

httpd is what’s serving this page, so that’s where we need to look.

You should see something, it shouldn’t just fail without some error message.

Maybe the error is bubbling from /var/log/ondemand-nginx/$USER/error.log?

i looked there as well but its just empty.

@jeff.ohrstrom i would like to challenge you to install OpenOndemand on a Rocky Linux 9.6 with keycloak 26.3.3. i suspect you will run into the same problems. if you don’t i owe you $20, But if you do please put up a blog page with the steps and your fix, how about that?

We run RHEL 9.6 (redhat proper) at OSC, though I don’t know the keycloak version.

In any case, you can attach /var/log/httpd/*error* to this ticket if you like. I’m 100% sure there’s something in the httpd logs, it doesn’t just fail without letting you know how or how. Additionally you can turn the logging up to get more verbose logs, even the fine grain configuration for turning only auth related logs up so they’re more verbos.

The fact that there are no ondemand-nginx logs only strengthens my suspicion.

Just glanced at our configs, and we run Keycloak 25.0.1 if I’m reading it right.

server.com_error.log.txt (3.7 KB)

error_log.txt (2.8 KB)

attached are my error log files

that might also have something to do with it. the keycloak 26.3.3 version has so many options in the client config that is not referenced in the install manual. I also have my $20 bucks ready just in case.

To me it looks like the sessions are expiring too quickly. Do the servers two have the same NTP time? Also I’d try maybe in a private window or clear your cache to see if it’s a client side issue given you’ve tried so many times.

Lastly I’d check for any session timeout settings that could be set to something very small.

i have it all running on the same server. i will check the settings and report back.

thanks @maflister and all other contributors. i have been able to resolve my issues an have open ondemand running fine now and connecting to it using keycloak.

My issue was that i initially tried setting up Dex on the system i had running ondemand. when Dex failed i then shifted to keycloak. we got keycloak working but something was causing it all not to work fine. my resolution was to stand up a VM and install open Ondemand stand alone. connected it back to keycloak and it worked fine. I now have both running on separate VM’s and working fine with no issues.

I need some additional assistance with getting jobs to show up on the active jobs menu of onDemand. should i start a new thread @jeff.ohrstrom @maflister ?

Yea please start a new thread.