<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 7.7.2015 13:44, Nair, Rajat wrote:<br>
</div>
<blockquote
cite="mid:E8E85ED231DB984CA315C4439410229A1F03029D@G9W0758.americas.hpqcorp.net"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Consolas;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas">I have setup
LDAP server and configured Keycloak (under User Federation)
to communicate with LDAP. Test connection and test
authentication both work and Keycloak “seems” to be
communicating with LDAP successfully, but when I try to sync
users, no data is imported to Keycloak. I have tried with
Keycloak release 1.3.1 and 1.2.0 Final. Also tried with
simple LDAP schema (ou=customers,dc=xyz,dc=com) but still no
luck.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas">I’m attaching
my LDAP setting (from phpLdap) and my Keycloak settings –
could this be configuration issues?</span></p>
</div>
</blockquote>
Yes, for "User Object classes" you are supposed to enter all values
of objectClass attribute of your typical user record in LDAP. For
your case, it might be sufficient to enter just value
"inetOrgPerson" . <br>
<br>
In latest master, I've improved the description of User Object
classes tooltip a bit to clearify this a bit more. Let me know if
still seeing issues. <br>
<br>
Thanks,<br>
Marek<br>
<blockquote
cite="mid:E8E85ED231DB984CA315C4439410229A1F03029D@G9W0758.americas.hpqcorp.net"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas"><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas">On Keycloak
logs, I can see –
<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas">06:32:57,286
INFO
[org.keycloak.federation.ldap.LDAPFederationProviderFactory]
(default task-15) Sync all users from LDAP to local store:
realm: 4b921ecb-e068-41d0-956d-fea12f2706cf, federation
provider: myldapserver<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas">06:32:57,301
INFO
[org.keycloak.federation.ldap.LDAPFederationProviderFactory]
(default task-15) Sync all users finished: 0 imported users,
0 updated users, 0 removed users<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas">Any way I can
debug further to figure out what is going on? Currently,
Keycloak and LDAP are setup on different boxes.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:9.0pt;font-family:Consolas">-- Rajat<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>