SSSD user federation not working after upgrade from 17.0.1

Getting advice
1

After upgrading from keycloak 17.0.1 to 20.0.2 login is not possible for users stored in FreeIPA.
I also tried upgrading to 18.0.2 and 19.0.3 with the same result.

I always get the following error when I try to login
org.keycloak.federation.sssd.impl.PAMAuthenticator.authenticate NullPointerException

Login to the admin console with the local keycloak admin user is possible.

For each update I did

cd /opt
wget https://github.com/keycloak/keycloak/releases/download/19.0.3/keycloak-19.0.3.zip
unzip keycloak-19.0.3.zip
rm keycloak
ln -s keycloak-19.0.3 keycloak
chown -R keycloak: /opt/keycloak/
chmod o+x /opt/keycloak/bin/
cp /opt/keycloak-17.0.1/conf/keycloak.conf /opt/keycloak/conf/
systemctl restart keycloak

When I go back to version 17.0.1 with
rm keycloak
ln -s keycloak-17.0.1 keycloak
systemctl restart keycloak

Login is working without issues again.

It seems that SSSD federation is broken for keycloak > 17.0.1

Did anybody get sssd user federation to work on version > 17.0.1 ?

2

did you figure out SSSD? I’ve never used it before but I’m using Keycloak 23 in a docker container and cannot get the SSSD option to show up in the Keycloak admin console.