4 ms·

Setting up OpenLDAP or 389ds and integrating Keycloak with it is hardly rocket science - no need to reinvent the wheel.

• vetinari 7y ago
  Setting it up with FreeIPA (which contains 389ds) is a matter of filling up a single form in Keycloak admin. That includes SPNEGO (passwordless auth in browser) for those, who are enrolled into domain or have Kerberos tickets.
  • kiney 7y ago
    FreeIPA has it's own set of problems. One being basically unrunnable in containers because of weird systemd stuff
    • vetinari 7y ago
      FreeIPA is not supported in containers, because it is integration of a bunch of services that need to be on the same machine and each of them has its own idea where to keep state. It has nothing to do with systemd, despite what systemd-phobes think.
      • doublerabbit 7y ago
        And is somewhat broken and bodged with FreeBSD.