Repository navigation
Replies: 4 comments
|
By any chance are you getting github.com/traefik/traefik/v3/pkg/proxy/httputil/proxy.go:121 > 500 Internal Server Error error="http2: request header list larger than peer's advertised limit" in the traefik logs? Error is pretty self explanitory but essentially im having a similar issue with 2FA enabled. It puts too many headers and overflows traefiks limit. There should be a way to change that value but I havent gotten it to work yet. Good luck |
|
Think I got my issue (likely yours too) figured out with a bandaid solution (this is not necessarily advised from a security perspective but might get you past the error if you don't care about security in this case) these are kubernetes manifests for an ingress route and a servertransport. (don't know your env so just mentioning what got it work on my end) Bandaid fix that is insecure is to disable http/2. I am going to reach out to the traefik team on making this parameter configurable but this should fix your problem. |
|
Hi, |
|
Hi there, thank you all. In the end it has been a CA certificate change at Let's Encrypt, that I missed to apply to Traefik. The hint to look at Traefik logs led to the solution. |
Uh oh!
There was an error while loading. Please reload this page.
Hi there,
I am new to keycloak. Manged to install it, setup my first realm beside the admin one, did a few tweaks for 2FA and put it behind a reverse proxy (Traefik). Everything went well until a short time ago. I guess during the last week something happend and now I only get "Internal Server Error" after login.
For I am new to it, I am looking for guidance what to do in such a situation - like eliminating HTTPS, certificates, reverse proxy - and access the admin realm through plain HTTP. Or in which logs to look to trace back the error.
I changed a bit in keycloak.conf for the reverse proxy hostnames and configured logging on the root level. But even setting log-level to DEBUG, I don't see any WARN or ERROR message in the logs.
All reactions