Keycloak is an open source Identity and Access Management solution
aimed at modern applications and services. It makes it easy to
secure applications and services with little to no code.
Keycloak was installed
1) Configuration files are located at /usr/local/share/java/keycloak/conf
2) keycloak start in production mode by default. https is mandatory in this
mode. You must generate some certificate files.
# cd /usr/local/share/java/keycloak/conf
# openssl req -newkey rsa:2048 -nodes -keyout server.key.pem -x509 \
-days 3650 -out server.crt.pem
# chmod 640 server.crt.pem server.key.pem
# chown keycloak:keycloak server.crt.pem server.key.pem
Do not forget set certificate paths into keycloak.conf
3) If you want start keycloak on develpment mode (http), you can change
it the following way:
# sysrc keycloak_flags=start-dev
4) Also you can use mysql or postgresql backend for store keycloak data. Take a
look at db, db-username, db-password and db-url options into keycloak.conf
file.
5) Enable keycloak service
# service keycloak enable
6) Sometimes you will need run a keycloak build when you change some settings
into config file or when you pass from development mode to production mode.
Try the following if you need it:
# service keycloak build
7) Start keycloak service
# service keycloak start
8) Development mode listen on 8080 port and production mode listen on 8443 port
by default. Depending of your own configuration, the administration console
can be accesing from a web browser from localhost first time:
http://localhost:8080
or if you are using production mode
https://ip_or_hostname:8443
9) Also, you can create admin user by using KEYCLOAK_ADMIN and
KEYCLOAK_ADMIN_PASSWORD environment variables when keycloak is started first
time on production mode:
# cd /usr/local/etc/rc.d
# KEYCLOAK_ADMIN=admin_user KEYCLOAK_ADMIN_PASSWORD=pass_user sh keycloak start
10) For more information about keycloak configuration, visit:
https://www.keycloak.org/documentation
11) Enjoy it