3 ms·
Setting it up with FreeIPA (which contains 389ds) is a matter of filling up a single form in Keycloak admin. That includes SPNEGO (passwordless auth in browser
by vetinari 7y ago
Setting it up with FreeIPA (which contains 389ds) is a matter of filling up a single form in Keycloak admin.
That includes SPNEGO (passwordless auth in browser) for those, who are enrolled into domain or have Kerberos tickets.
- kiney 7y agoFreeIPA has it's own set of problems. One being basically unrunnable in containers because of weird systemd stuff
- vetinari 7y agoFreeIPA is not supported in containers, because it is integration of a bunch of services that need to be on the same machine and each of them has its own idea where to keep state. It has nothing to do with systemd, despite what systemd-phobes think.
- doublerabbit 7y agoAnd is somewhat broken and bodged with FreeBSD.