How to configure Linux to authenticate users based on Keycloak user database?2019 Community Moderator ElectionHow to enable remote login?How to list existing alias for a certain linux user?Creating MySQL database and user without passwordHow to switch user with pre-configured credentials in SSH Terminal after logging in as standard userCan Linux ldap users still available if ldap server is unlinked?Mapping a unique network or webdav drive for each user in linuxlinux (redhat) local authentication repository redirect to LDAP authenticationAuthenticate VNC connections with Local UsersListing users prior to linux login promptAuthenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
Turning a hard to access nut?
Magnifying glass in hyperbolic space
Is this saw blade faulty?
How do you say "Trust your struggle." in French?
Should a narrator ever describe things based on a character's view instead of facts?
Why does the frost depth increase when the surface temperature warms up?
Walter Rudin's mathematical analysis: theorem 2.43. Why proof can't work under the perfect set is uncountable.
Why does the Persian emissary display a string of crowned skulls?
Strange behavior in TikZ draw command
Index matching algorithm without hash-based data structures?
Relations between homogeneous polynomials
Calculate Pi using Monte Carlo
Can you describe someone as luxurious? As in someone who likes luxurious things?
Why doesn't Gödel's incompleteness theorem apply to false statements?
Why is implicit conversion not ambiguous for non-primitive types?
Is divisi notation needed for brass or woodwind in an orchestra?
Sort with assumptions
How to split IPA spelling into syllables
Did I make a mistake by ccing email to boss to others?
Do people actually use the word "kaputt" in conversation?
How can I, as DM, avoid the Conga Line of Death occurring when implementing some form of flanking rule?
Do I have to take mana from my deck or hand when tapping this card?
Should I warn a new PhD Student?
How can a new country break out from a developed country without war?
How to configure Linux to authenticate users based on Keycloak user database?
2019 Community Moderator ElectionHow to enable remote login?How to list existing alias for a certain linux user?Creating MySQL database and user without passwordHow to switch user with pre-configured credentials in SSH Terminal after logging in as standard userCan Linux ldap users still available if ldap server is unlinked?Mapping a unique network or webdav drive for each user in linuxlinux (redhat) local authentication repository redirect to LDAP authenticationAuthenticate VNC connections with Local UsersListing users prior to linux login promptAuthenticate Linux<->LDAP Protocol<->AD(active directory): Fail to logon with password
I have an existing user database in Keycloak.
I want to build a Linux machine which logs in users according to the user database in Keycloak (username, password).
How can I accomplish this?
login authentication ldap
edited Mar 4 at 20:47
Rui F Ribeiro
41.5k1483141
asked Mar 4 at 19:20
Benyamin HirschbergBenyamin Hirschberg
11
add a comment |
I have an existing user database in Keycloak.
I want to build a Linux machine which logs in users according to the user database in Keycloak (username, password).
How can I accomplish this?
login authentication ldap
edited Mar 4 at 20:47
Rui F Ribeiro
41.5k1483141
asked Mar 4 at 19:20
Benyamin HirschbergBenyamin Hirschberg
11
add a comment |
I have an existing user database in Keycloak.
I want to build a Linux machine which logs in users according to the user database in Keycloak (username, password).
How can I accomplish this?
login authentication ldap
edited Mar 4 at 20:47
Rui F Ribeiro
41.5k1483141
asked Mar 4 at 19:20
Benyamin HirschbergBenyamin Hirschberg
11
I have an existing user database in Keycloak.
I want to build a Linux machine which logs in users according to the user database in Keycloak (username, password).
How can I accomplish this?
login authentication ldap
login authentication ldap
edited Mar 4 at 20:47
Rui F Ribeiro
41.5k1483141
asked Mar 4 at 19:20
Benyamin HirschbergBenyamin Hirschberg
11
edited Mar 4 at 20:47
Rui F Ribeiro
41.5k1483141
asked Mar 4 at 19:20
Benyamin HirschbergBenyamin Hirschberg
11
edited Mar 4 at 20:47
Rui F Ribeiro
41.5k1483141
edited Mar 4 at 20:47
Rui F Ribeiro
41.5k1483141
edited Mar 4 at 20:47
Rui F Ribeiro
41.5k1483141
41.5k1483141
asked Mar 4 at 19:20
Benyamin HirschbergBenyamin Hirschberg
11
asked Mar 4 at 19:20
Benyamin HirschbergBenyamin Hirschberg
11
asked Mar 4 at 19:20
Benyamin HirschbergBenyamin Hirschberg
11
11
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
You would have to implement the following:
- add NSS passwd map data to Keycloak user accounts (POSIX-UID, primary POSIX-GID, etc.)
- implement a service pulling NSS data from Keycloak and make it locally available on Linux system
- implement a PAM module sending password authentication requests to Keycloak
While it's not impossible it would be quite some development work.
The usual way of having centralized user management for Unix/Linux is to set up a LDAP server storing the relevant data. And then configure Keycloak to use this LDAP server for retrieving user data and check passwords.
There are ready-to-use solutions available like FreeIPA or my own Æ-DIR.
answered 17 hours ago
Michael StröderMichael Ströder
2947
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f504337%2fhow-to-configure-linux-to-authenticate-users-based-on-keycloak-user-database%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
You would have to implement the following:
- add NSS passwd map data to Keycloak user accounts (POSIX-UID, primary POSIX-GID, etc.)
- implement a service pulling NSS data from Keycloak and make it locally available on Linux system
- implement a PAM module sending password authentication requests to Keycloak
While it's not impossible it would be quite some development work.
The usual way of having centralized user management for Unix/Linux is to set up a LDAP server storing the relevant data. And then configure Keycloak to use this LDAP server for retrieving user data and check passwords.
There are ready-to-use solutions available like FreeIPA or my own Æ-DIR.
answered 17 hours ago
Michael StröderMichael Ströder
2947
add a comment |
You would have to implement the following:
- add NSS passwd map data to Keycloak user accounts (POSIX-UID, primary POSIX-GID, etc.)
- implement a service pulling NSS data from Keycloak and make it locally available on Linux system
- implement a PAM module sending password authentication requests to Keycloak
While it's not impossible it would be quite some development work.
The usual way of having centralized user management for Unix/Linux is to set up a LDAP server storing the relevant data. And then configure Keycloak to use this LDAP server for retrieving user data and check passwords.
There are ready-to-use solutions available like FreeIPA or my own Æ-DIR.
answered 17 hours ago
Michael StröderMichael Ströder
2947
add a comment |
You would have to implement the following:
- add NSS passwd map data to Keycloak user accounts (POSIX-UID, primary POSIX-GID, etc.)
- implement a service pulling NSS data from Keycloak and make it locally available on Linux system
- implement a PAM module sending password authentication requests to Keycloak
While it's not impossible it would be quite some development work.
The usual way of having centralized user management for Unix/Linux is to set up a LDAP server storing the relevant data. And then configure Keycloak to use this LDAP server for retrieving user data and check passwords.
There are ready-to-use solutions available like FreeIPA or my own Æ-DIR.
answered 17 hours ago
Michael StröderMichael Ströder
2947
You would have to implement the following:
- add NSS passwd map data to Keycloak user accounts (POSIX-UID, primary POSIX-GID, etc.)
- implement a service pulling NSS data from Keycloak and make it locally available on Linux system
- implement a PAM module sending password authentication requests to Keycloak
While it's not impossible it would be quite some development work.
The usual way of having centralized user management for Unix/Linux is to set up a LDAP server storing the relevant data. And then configure Keycloak to use this LDAP server for retrieving user data and check passwords.
There are ready-to-use solutions available like FreeIPA or my own Æ-DIR.
answered 17 hours ago
Michael StröderMichael Ströder
2947
answered 17 hours ago
Michael StröderMichael Ströder
2947
answered 17 hours ago
Michael StröderMichael Ströder
2947
answered 17 hours ago
Michael StröderMichael Ströder
2947
2947
add a comment |
add a comment |
Thanks for contributing an answer to Unix & Linux Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f504337%2fhow-to-configure-linux-to-authenticate-users-based-on-keycloak-user-database%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
