Redirect loop with Keycloak

gvs77

I'm tying to get Grommunio to talk to my Keycloak instance.
With the built in keycloak or mine, it goes into a redirect loop between Grommunio web and Keycloak, the php log says it cannot authenticate the web user against the MAPI backend, the user exists in the Grommunio backend (with LDAP)

What am I missing?

RideauTrio

I know this is months ago, however....

I only get this login loop using Firefox, with Chrome everything works. Including OTP prompt and successful logins.

I only discovered keycloak yesterday, so I'm not up on how it really works, but I'm still searching and have found others with this issue, but only one notes the other browsers work while firefox does not.

Firefox, fresh install, no addons at all, issue exists.
Chrome, fresh install, everything works.

nybble

I'm having exactly this issue with Grommunio and Keycloak, whether I use Firefox or Chrome.

This is on a freshly deployed instance of Grommunio using their grommunio-auth package.

When I create a user in Grommunio, it appears in Keycloak, and I can log in and I'm prompted to validate the profile and enter the accounts first and last name. The form never accepts the input data, simply looping back to the same page.

If I enter the account first and last name in Grommunio directly and attempt to log in, I get caught in the redirect loop.

nybble

Replying to myself here. My deployment is still internal in a testing environment using a public DNS name.

As soon as I added the local IP of the Grommunio/Keycloak server with its associated DNS name in the servers /etc/hosts file everything started working as expected.

Maybe a DNS issue? 🙂

(It's always DNS)