Keycloak v15.0.2 fails to synchronize user from LDAPS #16024

reddybhavaniprasad · 2022-12-15T16:48:41Z

reddybhavaniprasad
Dec 15, 2022

Hi,

I am trying to synchronize all the users from LDAPS into Keycloak 15.0.2. So, I have created a truststore.jks file using the LDAPS certificate as mentioned below.

keytool -import -alias xxx.xxx.xxx.xx.nip.io -keystore /opt/jboss/keycloak/standalone/configuration/data/truststore.jks -file /opt/jboss/keycloak/standalone/configuration/data/ldap.cer

Later updated the standalone.xml file with the "truststore" SPI with the truststore.jks file path and the password. Attached the truststore section below.

<spi name="truststore">
    <provider name="file" enabled="true">
        <properties>
        <property name="file" value="configuration/data/truststore.jks"/>
        <property name="password" value="changeit"/>
        <property name="hostname-verification-policy" value="WILDCARD"/>
        <property name="enabled" value="true"/>
        </properties>
     </provider>
</spi>

After the restarting the service, we are facing the "No truststore provider found - using default SSLSocketFactory" error.

Does Keycloak v15.0.2 support LDAPS user federation? If yes, please suggest if we are missing anything.

reddybhavaniprasad · 2022-12-19T11:39:21Z

reddybhavaniprasad
Dec 19, 2022
Author

The issue is due to that keycloak fails to read the contents of the standalone.xml file that I have updated with the truststore spi.
I have updated the keycloak deployment by adding args section that contains an option for passing the updated standalone.xml file as mentioned below,

args: ["-c standalone.xml"]

This resolved the "No Truststore Provider found error" but fails to synchronize all the users because of the "TLS non negotiation error".

Please help me to know if the truststore does not properly contains the server certificate or it might be a different issue.

0 replies

Navigation Menu

Repository navigation

Keycloak v15.0.2 fails to synchronize user from LDAPS #16024

Uh oh!

{{title}}

Uh oh!

Replies: 1 comment

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Keycloak v15.0.2 fails to synchronize user from LDAPS #16024

Uh oh!

reddybhavaniprasad Dec 15, 2022

Replies: 1 comment

Uh oh!

reddybhavaniprasad Dec 19, 2022 Author

reddybhavaniprasad
Dec 15, 2022

reddybhavaniprasad
Dec 19, 2022
Author