[keycloak-user] How to configure new params and edit them with Keycloak and LDAP integration

Hi all, I'm trying to configure KC with LDAP, but some errors are occurring. First, I configured my LDAP to write in the LDAP server, but for some reasons I got this error when I try to register an user: 2017-03-08 11:05:28,862 WARN [org.keycloak.services] (default task-6) at org.keycloak.federation.ldap.idm.store.ldap.LDAPOperationManager. at org.keycloak.federation.ldap.idm.store.ldap.LDAPOperationManager. at org.keycloak.federation.ldap.idm.store.ldap. at org.keycloak.federation.ldap.mappers.msad. at org.keycloak.federation.ldap.mappers.msad. at org.keycloak.models.utils.UserModelDelegate.addRequiredAction( at org.keycloak.authentication.forms.RegistrationPassword. at org.keycloak.authentication.FormAuthenticationFlow.processAction( at org.keycloak.authentication.DefaultAuthenticationFlow. at org.keycloak.authentication.AuthenticationProcessor. at org.keycloak.services.resources.LoginActionsService.processFlow( at org.keycloak.services.resources.LoginActionsService. at org.keycloak.services.resources.LoginActionsService. at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke( at sun.reflect.DelegatingMethodAccessorImpl.invoke( at java.lang.reflect.Method.invoke(Method.java:498) at org.jboss.resteasy.core.MethodInjectorImpl.invoke( at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget( at org.jboss.resteasy.core.ResourceMethodInvoker.invoke( at org.jboss.resteasy.core.ResourceLocatorInvoker. at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke( at org.jboss.resteasy.core.SynchronousDispatcher.invoke( at org.jboss.resteasy.core.SynchronousDispatcher.invoke( at org.jboss.resteasy.plugins.server.servlet. at org.jboss.resteasy.plugins.server.servlet. at org.jboss.resteasy.plugins.server.servlet. at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) at io.undertow.servlet.handlers.ServletHandler.handleRequest( at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl. at org.keycloak.services.filters.KeycloakSessionServletFilter. at io.undertow.servlet.core.ManagedFilter.doFilter( at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl. at io.undertow.servlet.handlers.FilterHandler.handleRequest( at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler. at io.undertow.servlet.handlers.ServletDispatchingHandler. at org.wildfly.extension.undertow.security. at io.undertow.server.handlers.PredicateHandler.handleRequest( at io.undertow.servlet.handlers.security. at io.undertow.servlet.handlers.security. at io.undertow.server.handlers.PredicateHandler.handleRequest( at io.undertow.security.handlers.AbstractConfidentialityHandler at io.undertow.servlet.handlers.security. at io.undertow.security.handlers.AuthenticationMechanismsHandle at io.undertow.servlet.handlers.security. at io.undertow.security.handlers.NotificationReceiverHandler. at io.undertow.security.handlers.AbstractSecurityContextAssocia at io.undertow.server.handlers.PredicateHandler.handleRequest( at org.wildfly.extension.undertow.security.jacc. at io.undertow.server.handlers.PredicateHandler.handleRequest( at io.undertow.server.handlers.PredicateHandler.handleRequest( at io.undertow.servlet.handlers.ServletInitialHandler. at io.undertow.servlet.handlers.ServletInitialHandler. at io.undertow.servlet.handlers.ServletInitialHandler.access$ at io.undertow.servlet.handlers.ServletInitialHandler$1. at io.undertow.server.Connectors.executeRootHandler(Connectors. at io.undertow.server.HttpServerExchange$1.run( at java.util.concurrent.ThreadPoolExecutor.runWorker( at java.util.concurrent.ThreadPoolExecutor$Worker.run( at java.lang.Thread.run(Thread.java:745) Caused by: javax.naming.directory.InvalidAttributeIdentifierException: at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3205) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3082) at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2888) at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1475) at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes( at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext. at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext. at javax.naming.directory.InitialDirContext.modifyAttributes( at javax.naming.directory.InitialDirContext.modifyAttributes( at org.keycloak.federation.ldap.idm.store.ldap. at org.keycloak.federation.ldap.idm.store.ldap. at org.keycloak.federation.ldap.idm.store.ldap. at org.keycloak.federation.ldap.idm.store.ldap.LDAPOperationManager. ... 59 more 2017-03-08 11:05:28,865 WARN [org.keycloak.events] (default task-6) and then, I got this result in my ldap: dn: uid=11111111111,dc=zz,dc=dd,dc=aa givenName:: IA== uid: 11111111111 objectClass: top objectClass: inetOrgPerson objectClass: person objectClass: organizationalPerson objectClass: phpgwAccount objectClass: shadowAccount sn:: IA== cn:: IA== structuralObjectClass: inetOrgPerson entryUUID: 07f0e7caxxxxxxxxxxx creatorsName: cn=admin,dc=zz,dc=dd,dc=aa createTimestamp: 20170308140529Z entryCSN: 20170308140529.527857Z#000000#000#000000 modifiersName: cn=admin,dc=zz,dc=dd,dc=aa modifyTimestamp: 20170308140529Z So, I wrote the uid as 11111111111, but I didn't set the sn, cn and givenName as 'IA=='. It looks like some problem occurs in my configuration. please, need help!! Best Regards, -- --- *Celso Agra*