how to remove Frontend URL from realm | no UI #15016

lazzio7 · 2022-10-19T10:37:35Z

lazzio7
Oct 19, 2022

Hi there,

when I troubleshoot why grafana client does not work with keycloak as SSO,
I add value for "Frontend UR" in UI , i am not able now reach admin console of keycloak.

I tried it via:

kcadm.sh config credentials --server https://iam.xx.net --realm master --user admin
but keycloak is running behind nginx/ingress with tls.
so I'm getting:
Failed to send request - PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

as I read I have to add my keycloak cert into truststore,
so I make exec to pod and try:

keytool -trustcacerts -keystore ....jre/lib/security/cacerts" -storepass changeit -importcert -alias <alias_name> -file <path_to_crt_file>
but I got permission denied...
currently I have no access to login to pod as root...

anyway, i just found that CA is in the place:

keycloak@keycloak-0:/opt/bitnami/java/lib/security$ keytool -list -trustcacerts -keystore /opt/bitnami/java/lib/security/cacerts  -storepass changeit | grep -i tele
Warning: use -cacerts option to access cacerts keystore
ttelesecglobalrootclass2ca [jdk], Oct 1, 2008, trustedCertEntry, 
ttelesecglobalrootclass3ca [jdk], Oct 1, 2008, trustedCertEntry,

when i make export of master realm:
kc.sh export --file master-realm.json
and I can grep:

keycloak@keycloak-0:/opt/bitnami/keycloak/bin$ grep -i frontend master-realm.json 
    "frontendUrl" : "https://iam.xx.net/admin/master"

question(s):

is there a way how to erase or change this value to the "empty" value as it is was before ?
or
if I make update to latest version of keycloak ( as I'm still facing issue with correct redirecting of grafana ) will be this value there ?

keycloak version: 18.0.2 running as statefulset within k3s installed via helm on cloud

Thanks a lot.

Answered by lazzio7

Oct 19, 2022

well..

after edited exported realm settings and following import directly inside the pod, front end url has been rewrited to original value after restar statefulset.
so now i can get access to the admin console. O_o
very strange, as i do not have authenticate against nothing....

View full answer

lazzio7 · 2022-10-19T13:00:56Z

lazzio7
Oct 19, 2022
Author

well..

after edited exported realm settings and following import directly inside the pod, front end url has been rewrited to original value after restar statefulset.
so now i can get access to the admin console. O_o
very strange, as i do not have authenticate against nothing....

0 replies

Navigation Menu

Repository navigation

how to remove Frontend URL from realm | no UI #15016

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

how to remove Frontend URL from realm | no UI #15016

Uh oh!

Uh oh!

lazzio7 Oct 19, 2022

Replies: 1 comment

Uh oh!

lazzio7 Oct 19, 2022 Author

lazzio7
Oct 19, 2022

lazzio7
Oct 19, 2022
Author