How to use keycloak for zoneminder?

1

Does anybody know how to use keycloak for a web app that just uses basic HTTP authentication?

I want to use SSO for zoneminder but it only handles users by using an “Authentication:” HTTP header.

Thx
S

2

Ack I guess this is a new thing nowadays. What I want to do is exactly what this guy is talking about but for zoneminder:

I just can’t find any sample configurations for nginx or apache though!!! I guess what I’m really looking for is more about how to configure nginx and/or apache.

3

Check this out https://stackoverflow.com/questions/57808046/does-keycloak-support-basic-authentication and see if this helps your further

4

I’m not exactly sure what that example is doing but it appears to be using wildfly as web server and using “direct access grants” to pass the credentials or something.

When zoneminder is in “remote” auth mode, it only pays attention to the username in the basic authentication header.

5

getting closer, for future google searching (by me):

6

Hi. We use mod_auth_openidc with Apache and Keycloak Gatekeeper with Nginx, but Gatekeeper requires multiple Nginx vhosts if you would like to talk to FCGI applications (nginx -> gatekeeper -> nginx -> fcgi)

7

Do you happen to have any sample configs that work? I still haven’t managed to set anything up.

The lua-resty-openidc plugin looks promising but man it is a pain to set up. The only howto I could find was for centos. I’ve tried getting it to work on ubuntu 18.04 but there is all kinds of dependency problems.

Little did I know, setting up a reverse proxy for OIDC to http basic authentication is NOT trivial