Problem with probe check for xwiki with OIDC Keycloak

Help / Discuss
1

We have a xwiki cluster that pans a VIP through a keepalived service. This works without any problems. We use a keycloak server for authentication. However, when I test (curl) whether the service is still running, I get an error:

[http-nio-8080-exec-7 - http://127.0.0.1:8080/xwiki/bin/view/Main/] INFO  .u.i.DefaultURLSecurityManager - Domain of URL [https://our.keycloakserver.net/auth/realms/...] does not belong to the list of trusted domains but it's considered as trusted since the check has been bypassed.

Is there a way to add localhost as a trusted domain?

2

That’s not an error, just an info. XWiki just tells you that this is not part of the explicitly allowed domains, but it’s been forced (by the OIDC authenticator in this case).

3

thanks a lot!