Hi,
Off list, someone asked me to check if ldap://127.0.0.1:389 would work
better than ldap://localhost:389, but it doesn't.
But I am now also trying to fill in actual remote ldap servers, and they
also don't work. Again nothing at all logged in server.log
Do the test buttons work for others here?
MJ
On 7/3/19 10:55 AM, mj wrote:
Hi,
Keycloak 6.0.1, LDAP federation is working, users can logon and are
updated automatically regularly from ldap:
> 2019-07-02 17:39:49,761 INFO [org.keycloak.storage.ldap.LDAPStorageProviderFactory]
(Timer-2) Sync changed users from LDAP to local store: realm: our_realm, federation
provider: our_realm-ad, last sync time: Mon Jul 01 17:39:43 CEST > 2019-07-02
17:39:50,067 INFO [org.keycloak.storage.ldap.LDAPStorageProviderFactory] (Timer-2) Sync
changed users finished: 3 imported users, 22 updated users
In keycloak, the configured ldap uri is ldap://localhost:389, where a
haproxy instance is listening that talks ldaps to our DCs.
The 'problem': in the keycloak GUI, the buttons 'Test authentication'
and 'Test connection' do not work:
"Error! Error when trying to connect to LDAP. See server.log for details."
But nothing logged in server.log, and haproxy does not even log a
connection attempt at all.
Anyone else seeing this..?
MJ
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user