Can I set multiple hostnames? Or can I set kerberos behind a reverse proxy?

Getting advice
1

Hi,

Setting hostname=b.com and sending https://b.com/realms/… works perfectly fine.
Kerberos works good.

But now I have keycloak behind a reverse proxy (a.com)
Setting hostname=a.com allows the oidc authentication but not kerberos.
I set the ProxyPass for 88 port as well, but I still get the NTLM prompt.
Changing the Keytab file and the Server Principal in the admin console to a.com also did not help.
(FYI. Both a.com and b.com keytabs were created in the AD server, not the proxy server.)

So I’m looking for a way to either:

  1. Make kerberos work where keycloak is behind the reverse proxy
  2. Set multiple hostnames in keycloak.conf

I found Keycloak Quarkus multiple hostname (googleusercontent.com) and [keycloak-user] Reverse Proxy Keycloak - Kerberos SPNEGO breaks (jboss.org) but both not have any answer…

2

I know it was a long time ago, but did you by any chance find an answer? I have the same problem now.

best regards
Leon