User Tools

Site Tools


linux_server_manuals:keycloak_openldap_integration

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
linux_server_manuals:keycloak_openldap_integration [2018/01/31 19:30] – [Setup Keycloak LDAP federation] ronneylinux_server_manuals:keycloak_openldap_integration [2018/05/12 16:28] (current) ronney
Line 1: Line 1:
 ====== Setup openLDAP and integrate it with Keycloak ====== ====== Setup openLDAP and integrate it with Keycloak ======
  
-For that manual, we assume that you've already got a working Keycloak installation. Otherwise take a look at [[linux_server_manuals:install_docker_and_with_keycloak|]] first.+For that manual, we assume that you've already got a working Keycloak installation. Otherwise take a look at [[linux_server_manuals:docker_keycloak_container_with_local_postgresql]] first.
 The manual was written for Debian Stretch, but should also work with other distributions. The manual was written for Debian Stretch, but should also work with other distributions.
  
Line 23: Line 23:
 </code> </code>
  
 +If you changed the above setting, that slapd should not listen on all hosts, then you also need to tell slapd it should not start up before docker. Otherwise the dockerinterface is not ready to bind to it:
 +
 +<code>
 +systemctl edit slapd.service
 +</code>
 +
 +In the editor that was opened enter:
 +<code>
 +[Unit]
 +After=docker.service
 +</code>
  
 create file /tmp/test.ldif: create file /tmp/test.ldif:
Line 98: Line 109:
 changetype: modify changetype: modify
 add: olcDbIndex add: olcDbIndex
-olcDbIndex: memberOf eq+olcDbIndex: memberOf, mail eq
 </code> </code>
  
Line 105: Line 116:
 ldapadd -Q -Y EXTERNAL -H ldapi:/// -f index.ldif ldapadd -Q -Y EXTERNAL -H ldapi:/// -f index.ldif
 </code> </code>
 +
 +create file database.ldif to increase the maxsize of 1GB of the database.I once run out of space after only adding a few 100 users...
 +<file>
 +dn: olcDatabase={1}mdb,cn=config
 +changetype: modify
 +replace: OlcDbMaxSize
 +OlcDbMaxSize: 20073741824
 +</file>
 +
 +Execute:
 +<code>
 +ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f database.ldif
 +</code>
 +
  
 ===== Setup Keycloak LDAP federation ===== ===== Setup Keycloak LDAP federation =====
linux_server_manuals/keycloak_openldap_integration.1517427011.txt.gz · Last modified: 2018/01/31 19:30 by ronney