[GUACAMOLE-1826] HTTP GET fails for auth

• Type: Bug
• Status: Closed
• Priority: Minor
• Resolution: Invalid
• Affects Version/s: 1.5.2
• Component/s: guacamole-auth-openid
• Assignee: Unassigned
• Reporter: Simon Matthews
• Created: 29/Jun/23 23:29
• Updated: 30/Jun/23 00:22
• Resolved: 30/Jun/23 00:22

Description

I am seeing a strange issue when I enable my split DNS resolving on my network. This doesn't seem to be sent to the Keycloak server when attempting to auth with OpenID.

DEBUG org.jose4j.jwk.HttpsJwks - Refreshing/loading JWKS from https://keycloak.example.com/realms/master/protocol/openid-connect/certs
DEBUG org.jose4j.http.Get - HTTP GET of https://keycloak.example.com/realms/master/protocol/openid-connect/certs 

My setup is configured using IPv6 and split-DNS for local connections. My Keycloak server and Guacamole server reside in containers on the same server. All the traffic goes through a HAProxy server.

Even with packet captures, I can't even see that request happen at all.