KeyCloak과 LDAP 연동

/ Unix/Linux/MacOS / 글쓴이

1. realms 선택

  • Manage realms > example 선택

2. User federation 정의

  • User federation > Add Ldap providers
  • [Settings 탭]
    • General options
      • UI display name: My LDAP
      • Vendor: Other (OpenLDAP)
  • Connection and authentication settings

    • Connection URL: ldap//127.0.0.1

    • Enable StartTLS: Off

    • Use Truststore SPI: Always

    • Connection pooling: On

    • Bind type: simple

    • Bind DN: cn=admin,dc=example,dc=com

    • Bind credentials: XXXXXXXXXXXX

  • LDAP searching and updating
    • Edit mode: READ_ONLY
    • Users DN: ou=employees,dc=example,dc=com
    • Username LDAP attribute: mail (이메일로 계정명 사용)
    • RDN LDAP attribute: uid
    • UUID LDAP attribute: entryUUID
    • User object classes: inetOrgPerson, organizationalPerson
    • Search scope: One Level
    • Pagination: On
  • Synchronization settings
    • Import users: On
    • Sync Registrations: On
    • Periodic full sync: Off
    • Periodic changed users sync: Off
    • Remove invalid users during searches: On
  • 아래는 모두 Default 아니면 Off로 설정

3. 동기화

  • 우측 상단 Action 메뉴에서 Sync all users 선택

4. 검색

  • Users > Search user: *

위로 스크롤