Unable to Connect to MSAD LDAP over SSL Server Info: Server Version 9.0.2 Standalone Server Profile: Community Operating System: CentOS 7 minimal Latest Virtual Machine 4 CPU, 6GB Memory, and 100GB Storage. Java Version 1.8.0_242 Created a Service account on MSAD with Administrator Rights for…

Thank for posting that issue! I have the exact same issue you have and can’t get it to work. I could add, that I tried to use different certificate formats to put it into the truststore base64 der and I also tried to insert the full chain to the truststore. –> no success so far! I would love to…

Hello, My suggestion to check whther an appropriate certificate was imported into truststore is below. [1] openssl s_client -connect <ldap server’s IP>:636 [2] copy a part of result starting from “-----BEGIN CERTIFICATE-----” to “-----END CERTIFICATE-----” . (This is aiming for the creation of ld…

@Taro Thank you for the reply, and I did as you suggested. Executed “openssl s_client -connect <ldap server’s IP>:636” [keycloak_part1] 2.paste it into a file with extension .cer made file called " Keycloak.cer" and imported it into the truststore. [keycloak_part1-1] Restarted keycloak, I…

Hello gsmith, Thank you for your time on the test. From the message “No truststore provider found - using default SSLSocketFactory”, it seems the truststore(keycloak.jks) is not specified in standalone.xml, but did you specify it in standalone.xml like previous? https://www.keycloak.org/docs/late…

@Taro Unfortunately when I tried that I received an error " No trustedstore provider Found- using default SSLSocketFactory" I went back to my JAVA keystore ( cacerts) and imported my CA.cer, restarted services, this gave me a connection, but I still dont know why I wasnt able to change or redirec…

The page https://www.keycloak.org/docs/latest/server_installation/#enabling-ssl-https-for-the-keycloak-server tells about how to secure server using ssl, so I assume that it do not use the configured keystore as truststore. The preferred way of using truststore should be to add certificate to cacer…

@claudioweiler Thank you for the reply, much apperciated. I have tried what you stated, and I was still unable to change Keystore. I executed this; https://www.keycloak.org/docs/latest/server_installation/#configure-keycloak-to-use-the-keystore Keycloak still shows errors as I stated from abov…

im using v8.0.2 on docker and i have the same issue. made the same steps you did :frowning: regards.

[image] gsmith: Keycloak still shows errors as I stated from above. Still unable to change keystore location. Right now I can only use Java Keystore (cacerts) on centOS 7. I wonder if its because i have Nginx Reverse Proxy? If it works with cacerts, then truststore and certificate validation…

@claudioweiler I solved my issue. This issue was in my standalone.xml. Instead of copy -n paste I typed it out, and by some dark magic it worked. Think I was trying to hard and over looked my mistake. Thank you for your reply.

Keycloak Connecting to MSAD LDAP Over SSL

Configuring the server

gsmith February 24, 2022, 4:57am 15

Not that I know of, but I haven’t used Docker or any type of container.

Topic		Replies	Views
Connect keycloak to LDAP over SSL Configuring the server ldap	21	35469	October 3, 2024
LDAP authentication over SSL not working Configuring the server authentication , ldap	3	1867	April 26, 2023
LDAPS Test Authentication failing by using User Federation module in keycloak Getting advice authentication , ldap	0	475	November 25, 2022
Facing issue for LDAPS connection from keycloak running on docker as non root user Getting advice	0	409	February 28, 2024
Trust Certificates from Mailserver and LDAP-Server Getting advice	0	531	June 15, 2023

Keycloak Connecting to MSAD LDAP Over SSL

Related topics