How to integrate google ldap with keycloak #12683

iammuho · 2022-06-23T12:18:45Z

iammuho
Jun 23, 2022

Hello team,

I'm trying to integrate google LDAP with keycloak. I've created my LDAP client in GOOGLE ADMIN and downloaded the generated certificates and client credentials.

I've created a "federation provider" as describe in the documents but whatever I do, I'm getting below error;

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)
	at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)
	at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
	at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
	... 90 more

and also when I click the "test authentication" it always say "invalid".

here is how I've configure my ldap in keycloak

Can someone explain to me what should I do with the certificates from google and why my credentials say wrong. Btw, I've tested the ldap with credentials on my local, and it's working.

Btw, I'm using new keycloak operator in Kubernetes

andreaTP · 2022-06-27T09:12:30Z

andreaTP
Jun 27, 2022

Hi @iammuho , this discussion doesn't belong to the "New Kubernetes Operator", would you mind closing it and opening a relevant Issue if still necessary?

1 reply

iammuho Jun 27, 2022
Author

Hey @andreaTP , I couldn't find how to close the discussion but moved to Q/A category. Do you have any idea how can I solve this issue ?

romitkmehta · 2025-03-12T09:57:28Z

romitkmehta
Mar 12, 2025

Hey @iammuho and Keycloak community,
I am facing similar issue. I am getting the error as
javax.naming.NoPermissionException: [LDAP: error code 50 - Insufficient Access Rights]; remaining name 'dc=<domain>,dc=com'
I have been trying to sync users from Google workspace to Keycloak. I've enabled truststore and also have added required certificates in keystore.
Any insights on this?

0 replies

Navigation Menu

Repository navigation

How to integrate google ldap with keycloak #12683

Uh oh!

{{title}}

Uh oh!

Replies: 2 comments 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

How to integrate google ldap with keycloak #12683

Uh oh!

iammuho Jun 23, 2022

Replies: 2 comments · 1 reply

Uh oh!

andreaTP Jun 27, 2022

Uh oh!

iammuho Jun 27, 2022 Author

Uh oh!

romitkmehta Mar 12, 2025

iammuho
Jun 23, 2022

Replies: 2 comments 1 reply

andreaTP
Jun 27, 2022

iammuho Jun 27, 2022
Author

romitkmehta
Mar 12, 2025