Solved: Cannot Login with LDAP User and Password

Getting advice
1

I’ve just installed OpenLDAP to store user info. I’ve added it as a User Federation source in Keycloak and it seems to work. It syncs, and if I set the password in Keycloak I can verify that it’s changed in OpenLDAP by using Apache Directory Studio to verify the password. So far, so good.

However, when I try to login at the security admin console of the realm using the sameLDAP user, it point blank refuses to accept the password. The Keycloak logs don’t say much - “invalid_user_credentials” and OpenLDAP logs say nothing at all.

Does anyone have any advice on how to debug this? Or am I missing something obvious?

Thanks, Gareth

2

It was down to the ACLs in the end - anonymous auth ACL was blocked as I’d added an new ACL at the top of the list {0} which gave manage permission to a manager account, but forgot to add * break to the end.

Apache Directory Studio was connecting with this manager account, so that was working.