I have Keycloak hooked up to openldap via TLS. A customer requires that it work with StartTLS. I can connect to openldap and click on Test Authentication and received a success dialog. I can also import and view the users that are there. But when I go to login as a user, I receive a bad credent…

Where you able to get keycloak to connect to openldap with OpenLDAP with mutual LDAP_TLS_VERIFY_CLIENT=demand ? I’m able to get keycloak test connection to work when LDAP_TLS_VERIFY_CLIENT=try, but it fails when setting to demand. It isn’t clear in the logs why Keycloak isn’t sending client certif…

I have not been able to use demand. We went with try.

Keycloak startTLS openldap user credentials failure

Configuring the server

tlann July 30, 2020, 4:27pm 2

This has been fixed by version 11.0.0

User Federation - LDAP - StartTLS

Topic		Replies	Views
Integrating Keycloak with OpenLDAP via ldaps	2	1816	April 12, 2021
User Federation - LDAP - StartTLS Getting advice ldap	1	1914	August 21, 2020
javax.net.ssl.SSLHandshakeException when connecting keycloak to LDAP over SSL Configuring the server authentication , user-federation , ldap	0	1779	April 25, 2023
Keycloak LDAP integration with startTLS enabled Configuring the server ldap	0	388	January 5, 2024
Ldap mTLS connection problem on Base Command Manager 11 Ubuntu 24.04 Configuring the server ldap	6	136	December 15, 2025

Keycloak startTLS openldap user credentials failure

Related topics