You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Ability to change password in user federation AD via logged user
#39138
Hello,
last few days I tested and tried to implement keycloak in our private environment.
I have keycloak as SSO for some applications. Everything working well, I am very happy. I have imprted users, mapped groups. But maybe I missed explanation, I don't know how to setup this:
I have user federation via Active Directory (samba 4 server, ldaps). I use very old and strange software to change user password.
I want to migrate it to keycloak, but there is a problem. Keycloak cannot change/reset the user password in our backend (LDAP), even if the mode is set to "writable". This is because user who make connection to LDAP is not Domain Admin, so this user cannot change some attributes in LDAP. When I add this user to Domain Admin, everythink is working and passwords can be changed. User, used for LDAP connection is in Managed Service Account
I want to ask, if there is option/posibility, that password change in LDAP backend is made by logged user. I want that every user, who can log into keycloak (and have AD/LDAP account), can change their own password and the bind is made by this user itself.
I hope, I explained this well.
Thank for your answers or right direction for me.
Have nice time.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hello,
last few days I tested and tried to implement keycloak in our private environment.
I have keycloak as SSO for some applications. Everything working well, I am very happy. I have imprted users, mapped groups. But maybe I missed explanation, I don't know how to setup this:
I have user federation via Active Directory (samba 4 server, ldaps). I use very old and strange software to change user password.
I want to migrate it to keycloak, but there is a problem. Keycloak cannot change/reset the user password in our backend (LDAP), even if the mode is set to "writable". This is because user who make connection to LDAP is not Domain Admin, so this user cannot change some attributes in LDAP. When I add this user to Domain Admin, everythink is working and passwords can be changed. User, used for LDAP connection is in Managed Service Account
I want to ask, if there is option/posibility, that password change in LDAP backend is made by logged user. I want that every user, who can log into keycloak (and have AD/LDAP account), can change their own password and the bind is made by this user itself.
I hope, I explained this well.
Thank for your answers or right direction for me.
Have nice time.
All reactions