[keycloak-user] Error enabling 'Sync Registrations' for LDAP (FreeIPA) User Federation

[Marek Posolda]

On 13/06/16 15:47, Rafael T. C. Soares wrote:
>
> ___
> Rafael T. C. Soares
>
> On 06/13/2016 04:54 AM, Marek Posolda wrote:
>> The "Sync registration" doesn't work with LDAP provider configured 
>> against FreeIPA.
>>
> Is this issue specific for FreeIPA? Is it supposed to work for other 
> LDAP Impl and MS AD?
Yes, it should work for other LDAP Impl.

The FreeIPA is a bit special, as the registration of user needs to be 
done properly through SSSD or something, not through calling LDAP API 
directly. SSSD updates LDAP and do some other required things to have 
user account in correct state. That's what FreeIPA CLI is doing as well 
AFAIK.

Marek
>
> Thanks!