trinitry commented on issue #10783: URL: https://github.com/apache/druid/issues/10783#issuecomment-765219676
the output from `curl -vv https://xxxxxx.biz/auth/realms/eu0/protocol/openid-connect/token` `> GET /auth/realms/eu0/protocol/openid-connect/token HTTP/1.1 > Host: sso.XXXX.biz > User-Agent: curl/7.64.1 > Accept: */* > < HTTP/1.1 405 Method Not Allowed < Server: nginx/1.19.5 < Date: Thu, 21 Jan 2021 12:55:13 GMT < Content-Type: application/json < Content-Length: 90 < Connection: keep-alive < * Connection #0 to host sso.XXXX.biz left intact {"error":"RESTEASY003650: No resource method found for GET, return 405 with Allow header"}* Closing connection 0` As i see from the above is (i believe) exactly what you suggest to be the issue!! Then i try with a different `druid.auth.pac4j.oidc.discoveryURI` which i also tested `curl -vv https://sso.XXXX.biz/auth/realms/eu0/.well-known/openid-configuration` and i got GET /auth/realms/eu0/.well-known/openid-configuration HTTP/1.1 > Host: sso.XXXXX.biz > User-Agent: curl/7.64.1 > Accept: */* > < HTTP/1.1 200 OK < Server: nginx/1.19.5 < Date: Thu, 21 Jan 2021 12:52:48 GMT < Content-Type: application/json < Content-Length: 2644 < Connection: keep-alive < Cache-Control: no-cache, must-revalidate, no-transform, no-store < * Connection #0 to host sso.XXXX.biz left intact {"issuer":"https://sso .....* Closing connection 0 It seems with this discoveryURI i went a bit further... but now i get through Druid web console > Invalid parameter: redirect_uri For the authentication server, if i am not mistaken (as i am not the one who set the broker up but i try to connect to it), i understand that is using the > keycloak Thank you for your comments and support on this!! ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@druid.apache.org For additional commands, e-mail: commits-h...@druid.apache.org