Repository navigation
SSSD federation #15587
Replies: 9 comments 2 replies
|
@Keeper-of-the-Keys the @stianst do you think we should move that script to another place? Or add it as part of the docs? |
|
Cool, from looking at the diff it looks like the script just does some basic settings in sssd.conf and PAM, do these steps still need to be taken? And how do I cause SSSD to become an option inside of the keycloak UI itself? |
|
@Keeper-of-the-Keys it's been a while since I touched, so please take my word with a grain of salt. The script previously provided are just regular configuration steps, we used to ship our release to make it easy for people, considering how complicated was the whole setup. |
|
I made the changes and I'm pretty sure I also implemented all other things listed in the documenation (install jna, libunix-dbus-java and ran sssctl successfully) but I still have no option to add an SSSD provider :/ |
|
Was SSSD support removed from 20.x.y (20.0.1)? @abstractj @stianst |
|
|
I also need the SSSD support. Is there any chance it will be restored? |
|
Opened an issue #16165 |
|
@s1341 Since I was just playing around with different solutions and not pinned down to something in Keycloak I ended up switching to the recently revived Ipsilon, I also still hope to try authentik at some point though that I believe also does not do SSSD (and thus no TOTP from freeIPA). |
|
Hrm. Does ipsilon support openid and 2fa (web-authn)? |
|
As far as I understand...
I haven't as yet tied it to a different system and have other priorities...
https://ipsilon-project.org/
Op zo 25 dec. 2022 om 11:18 schreef s1341 ***@***.***>:
… Hrm. Does ipsilon support openid and 2fa (web-authn)?
—
Reply to this email directly, view it on GitHub
<#15587 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AALOIVUTTSP4HEVL3DIE743WPAGNFANCNFSM6AAAAAASF7LPBE>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
Uh oh!
There was an error while loading. Please reload this page.
The keycloak documentation mentions running a script called federation-sssd-setup.sh to use federation via SSSD (which allows using FreeIPA OTP as far as I understand), I can't find this script anywhere what package is supposed to provide this? Does the documentation need to be updated?
All reactions