# SSSD user federation not working after upgrade from 17.0.1

**URL:** <https://forum.keycloak.org/t/sssd-user-federation-not-working-after-upgrade-from-17-0-1/19386>\
**Category:** Getting advice\
**Created:** [January 4, 2023, 8:23am UTC](https://forum.keycloak.org/t/sssd-user-federation-not-working-after-upgrade-from-17-0-1/19386 "2023-01-04T08:23:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gnot](https://avatars.discourse-cdn.com/v4/letter/g/dec6dc/32.png) [@gnot](https://forum.keycloak.org/u/gnot)\
**Post date:** [January 4, 2023, 8:23am UTC](https://forum.keycloak.org/t/sssd-user-federation-not-working-after-upgrade-from-17-0-1/19386/1 "2023-01-04T08:23:08Z")

</div>

After upgrading from keycloak 17.0.1 to 20.0.2 login is not possible for users stored in FreeIPA.  
I also tried upgrading to 18.0.2 and 19.0.3 with the same result.

I always get the following error when I try to login  
org.keycloak.federation.sssd.impl.PAMAuthenticator.authenticate NullPointerException

Login to the admin console with the local keycloak admin user is possible.

For each update I did

cd /opt  
wget [https://github.com/keycloak/keycloak/releases/download/19.0.3/keycloak-19.0.3.zip](https://github.com/keycloak/keycloak/releases/download/19.0.3/keycloak-19.0.3.zip)  
unzip keycloak-19.0.3.zip  
rm keycloak  
ln -s keycloak-19.0.3 keycloak  
chown -R keycloak: /opt/keycloak/  
chmod o+x /opt/keycloak/bin/  
cp /opt/keycloak-17.0.1/conf/keycloak.conf /opt/keycloak/conf/  
systemctl restart keycloak

When I go back to version 17.0.1 with  
rm keycloak  
ln -s keycloak-17.0.1 keycloak  
systemctl restart keycloak

Login is working without issues again.

It seems that SSSD federation is broken for keycloak \> 17.0.1

Did anybody get sssd user federation to work on version \> 17.0.1 ?

---

<div class="post-metadata">

**Author:** ![pmcpherson](https://avatars.discourse-cdn.com/v4/letter/p/3bc359/32.png) [@pmcpherson](https://forum.keycloak.org/u/pmcpherson)\
**Post date:** [December 1, 2023, 4:32pm UTC](https://forum.keycloak.org/t/sssd-user-federation-not-working-after-upgrade-from-17-0-1/19386/2 "2023-12-01T16:32:30Z")

</div>

did you figure out SSSD? I’ve never used it before but I’m using Keycloak 23 in a docker container and cannot get the SSSD option to show up in the Keycloak admin console.