SSSD might be the right way to go. I followed this guide
https://github.com/keycloak/keycloak-documentation/blob/master/server_adm...
but I am not sure what the output of "sssctl user-checks admin -s
keycloak" should be.
sssctl user-checks admin -s keycloak
user: admin
action: acct
service: keycloak
SSSD nss user lookup result:
- user name: admin
- user id: 1246600000
- group id: 1246600000
- gecos: Administrator
- home directory: /home/admin
- shell: /bin/bash
SSSD InfoPipe user lookup result:
- name: admin
- uidNumber: 1246600000
- gidNumber: 1246600000
- gecos: Administrator
- homeDirectory: /home/admin
- loginShell: /bin/bash
testing pam_acct_mgmt
pam_acct_mgmt: Permission denied
PAM Environment:
- no env -
I think the "Permission denied" should not pop up...
However, no SSSD-Option shows up when I am trying to configure SSSD as a
User Federation Provider.
What am I missing?
Cheers,
Ronald