Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Discuss
  3. Keycloak & Cloudron

Keycloak & Cloudron

Scheduled Pinned Locked Moved Discuss
105 Posts 15 Posters 25.4k Views 17 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • njN Offline
      njN Offline
      nj
      wrote on last edited by
      #5

      @girish, is there a way to import only active users when syncing users with LDAP?
      After setting up Keycloak, only the "active" users could log in to Keycloak. But when I try to import active users to Keycloak, all users were imported, including those who were marked as not active in my Cloudron Users dashboard.

      Founder / Coder • My Apps

      girishG 1 Reply Last reply
      2
      • njN nj

        @girish, is there a way to import only active users when syncing users with LDAP?
        After setting up Keycloak, only the "active" users could log in to Keycloak. But when I try to import active users to Keycloak, all users were imported, including those who were marked as not active in my Cloudron Users dashboard.

        girishG Offline
        girishG Offline
        girish
        Staff
        wrote on last edited by
        #6

        @nj is there a reason not to sync the inactive user information as well? Are you thinking of because of performance or is the active flag getting overwritten or something else?

        njN 1 Reply Last reply
        0
        • girishG girish

          @nj is there a reason not to sync the inactive user information as well? Are you thinking of because of performance or is the active flag getting overwritten or something else?

          njN Offline
          njN Offline
          nj
          wrote on last edited by
          #7

          @girish I always thought marking the users as inactive would mean they can't log in to the services that use Cloudron LDAP. On the other hand, for instance, Keycloak has an option to do a full sync of users from the LDAP server. In such cases, Keycloak does not have any way to know whether the users are still active. That's why I asked if there's any filter that I can apply to only fetch/sync active users.

          Founder / Coder • My Apps

          girishG 1 Reply Last reply
          1
          • njN nj

            @girish I always thought marking the users as inactive would mean they can't log in to the services that use Cloudron LDAP. On the other hand, for instance, Keycloak has an option to do a full sync of users from the LDAP server. In such cases, Keycloak does not have any way to know whether the users are still active. That's why I asked if there's any filter that I can apply to only fetch/sync active users.

            girishG Offline
            girishG Offline
            girish
            Staff
            wrote on last edited by
            #8

            @nj said in Keycloak & Cloudron:

            @girish I always thought marking the users as inactive would mean they can't log in to the services that use Cloudron LDAP

            Yes, that's the case. When you say "Cloudron LDAP" you mean the apps installed on Cloudron, right? Or have you made some custom patch to expose Cloudron LDAP to external apps ?

            On the other hand, for instance, Keycloak has an option to do a full sync of users from the LDAP server.

            I don't get this part... How can Keycloak sync from Cloudron ? (unless, of course, you have made some custom patch to expose Cloudron LDAP...).

            (So, if the above is true, we can expose the active flag via LDAP. That should be straightforward, if that's what you are asking).

            njN 1 Reply Last reply
            0
            • girishG girish

              @nj said in Keycloak & Cloudron:

              @girish I always thought marking the users as inactive would mean they can't log in to the services that use Cloudron LDAP

              Yes, that's the case. When you say "Cloudron LDAP" you mean the apps installed on Cloudron, right? Or have you made some custom patch to expose Cloudron LDAP to external apps ?

              On the other hand, for instance, Keycloak has an option to do a full sync of users from the LDAP server.

              I don't get this part... How can Keycloak sync from Cloudron ? (unless, of course, you have made some custom patch to expose Cloudron LDAP...).

              (So, if the above is true, we can expose the active flag via LDAP. That should be straightforward, if that's what you are asking).

              njN Offline
              njN Offline
              nj
              wrote on last edited by
              #9

              @girish

              When you say "Cloudron LDAP" you mean the apps installed on Cloudron, right?

              Yes. I recently built and run Keycloak as an app on my Cloudron instance.

              we can expose the active flag via LDAP.

              That's exactly what I want. If you could expose the active flag via LDAP, I could use a filter like (&(objectClass=user)(isActive=true)) to only fetch active users.

              I'm not a native English speaker, so excuse the confusion that I caused. 🙂

              Founder / Coder • My Apps

              girishG 1 Reply Last reply
              0
              • njN nj

                @girish

                When you say "Cloudron LDAP" you mean the apps installed on Cloudron, right?

                Yes. I recently built and run Keycloak as an app on my Cloudron instance.

                we can expose the active flag via LDAP.

                That's exactly what I want. If you could expose the active flag via LDAP, I could use a filter like (&(objectClass=user)(isActive=true)) to only fetch active users.

                I'm not a native English speaker, so excuse the confusion that I caused. 🙂

                girishG Offline
                girishG Offline
                girish
                Staff
                wrote on last edited by
                #10

                @nj I just made a fix in fact to not list inactive users in ldap at all. I think that was an oversight. After all, we don't want those users to appear in LDAP searches. Maybe you can try this patch - https://git.cloudron.io/cloudron/box/-/commit/8958b154e96832688896dafccf7350bad575b0a9

                njN 1 Reply Last reply
                3
                • girishG girish

                  @nj I just made a fix in fact to not list inactive users in ldap at all. I think that was an oversight. After all, we don't want those users to appear in LDAP searches. Maybe you can try this patch - https://git.cloudron.io/cloudron/box/-/commit/8958b154e96832688896dafccf7350bad575b0a9

                  njN Offline
                  njN Offline
                  nj
                  wrote on last edited by
                  #11

                  @girish That worked. By the way, is there a plan to package Keycloak? I managed to run Keycloak and Outline on Cloudron. Keycloak needed some patching to make it work on the read-only system without mounting everything to /app/data. Outline wiki app can be easily set up to authenticate using Keycloak. Both apps seem to be working as they should. Do you think we can publish those apps to the Cloudron App Store? That would be my first experience publishing an app.

                  Currently, I am packaging the Outline app to directly authenticate with the Cloudron user directory without the need to install Keycloak. If anyone is interested, I published a little more details in my blog. I'm doing another write-up describing the issues I solved while packaging Keylcloak.

                  Founder / Coder • My Apps

                  girishG 1 Reply Last reply
                  6
                  • njN nj

                    @girish That worked. By the way, is there a plan to package Keycloak? I managed to run Keycloak and Outline on Cloudron. Keycloak needed some patching to make it work on the read-only system without mounting everything to /app/data. Outline wiki app can be easily set up to authenticate using Keycloak. Both apps seem to be working as they should. Do you think we can publish those apps to the Cloudron App Store? That would be my first experience publishing an app.

                    Currently, I am packaging the Outline app to directly authenticate with the Cloudron user directory without the need to install Keycloak. If anyone is interested, I published a little more details in my blog. I'm doing another write-up describing the issues I solved while packaging Keylcloak.

                    girishG Offline
                    girishG Offline
                    girish
                    Staff
                    wrote on last edited by
                    #12

                    @nj Yes, we can get them published as time permits! If you post the links to the repos when they are sort of ready, we can take it from there.

                    Sam_ukS njN 2 Replies Last reply
                    1
                    • girishG girish

                      @nj Yes, we can get them published as time permits! If you post the links to the repos when they are sort of ready, we can take it from there.

                      Sam_ukS Offline
                      Sam_ukS Offline
                      Sam_uk
                      wrote on last edited by
                      #13

                      @nj I'm interested in this, is your code available anywhere please?

                      Sam_ukS 1 Reply Last reply
                      1
                      • C Offline
                        C Offline
                        cuzy-app
                        wrote on last edited by
                        #14

                        https://git.cloudron.io/cloudron/keycloak-app/

                        1 Reply Last reply
                        1
                        • Sam_ukS Sam_uk

                          @nj I'm interested in this, is your code available anywhere please?

                          Sam_ukS Offline
                          Sam_ukS Offline
                          Sam_uk
                          wrote on last edited by
                          #15

                          Just spotted this: https://git.cloudron.io/cloudron/keycloak-app/ does anyone know the status of that project?

                          Sam_ukS 1 Reply Last reply
                          1
                          • Sam_ukS Sam_uk

                            Just spotted this: https://git.cloudron.io/cloudron/keycloak-app/ does anyone know the status of that project?

                            Sam_ukS Offline
                            Sam_ukS Offline
                            Sam_uk
                            wrote on last edited by
                            #16

                            @girish would you add this to the appstore? https://git.cloudron.io/cloudron/keycloak-app/ It seems complete?

                            girishG 1 Reply Last reply
                            1
                            • Sam_ukS Sam_uk

                              @girish would you add this to the appstore? https://git.cloudron.io/cloudron/keycloak-app/ It seems complete?

                              girishG Offline
                              girishG Offline
                              girish
                              Staff
                              wrote on last edited by
                              #17

                              @Sam_uk mm, not really, it seems to have some compose files etc. I can't find pawel on this forum to tag but I am not even sure who created that repo and why it's in the cloudron namespace. But worth looking into.

                              1 Reply Last reply
                              0
                              • girishG Offline
                                girishG Offline
                                girish
                                Staff
                                wrote on last edited by
                                #18

                                Strange there is no app request for keycloak. @Sam_uk do you think you can open an app request topic ?

                                marcusquinnM Sam_ukS 2 Replies Last reply
                                2
                                • girishG girish

                                  Strange there is no app request for keycloak. @Sam_uk do you think you can open an app request topic ?

                                  marcusquinnM Offline
                                  marcusquinnM Offline
                                  marcusquinn
                                  wrote on last edited by
                                  #19

                                  @girish Or move this one? It seems to have all the useful links in so far.

                                  Web Design https://www.evergreen.je
                                  Development https://brandlight.org
                                  Life https://marcusquinn.com

                                  1 Reply Last reply
                                  2
                                  • girishG girish

                                    Strange there is no app request for keycloak. @Sam_uk do you think you can open an app request topic ?

                                    Sam_ukS Offline
                                    Sam_ukS Offline
                                    Sam_uk
                                    wrote on last edited by
                                    #20

                                    @girish I'm tempted not to.

                                    I think my position is that Authentik is the better app, which would provide everything that Keycloak does.

                                    girishG 1 Reply Last reply
                                    5
                                    • Sam_ukS Sam_uk

                                      @girish I'm tempted not to.

                                      I think my position is that Authentik is the better app, which would provide everything that Keycloak does.

                                      girishG Offline
                                      girishG Offline
                                      girish
                                      Staff
                                      wrote on last edited by
                                      #21

                                      @Sam_uk ah ok, I upvoted that one 😉

                                      1 Reply Last reply
                                      1
                                      • girishG girish

                                        @nj Yes, we can get them published as time permits! If you post the links to the repos when they are sort of ready, we can take it from there.

                                        njN Offline
                                        njN Offline
                                        nj
                                        wrote on last edited by
                                        #22

                                        @girish Please check this out. I previously packaged Keycloak but suddenly the Keycloak team decided to deprecate the Wildfly version and started supporting Quarkus runtime. So I had to re-package it again. Took a while during the weekdays.

                                        https://github.com/njsubedi/cloudron-keycloak

                                        Founder / Coder • My Apps

                                        Sam_ukS girishG timconsidineT 3 Replies Last reply
                                        9
                                        • njN nj

                                          @girish Please check this out. I previously packaged Keycloak but suddenly the Keycloak team decided to deprecate the Wildfly version and started supporting Quarkus runtime. So I had to re-package it again. Took a while during the weekdays.

                                          https://github.com/njsubedi/cloudron-keycloak

                                          Sam_ukS Offline
                                          Sam_ukS Offline
                                          Sam_uk
                                          wrote on last edited by
                                          #23

                                          @nj Great stuff, thanks I'll have a go at installing it sometime this week.

                                          1 Reply Last reply
                                          2
                                          • njN nj

                                            @girish Please check this out. I previously packaged Keycloak but suddenly the Keycloak team decided to deprecate the Wildfly version and started supporting Quarkus runtime. So I had to re-package it again. Took a while during the weekdays.

                                            https://github.com/njsubedi/cloudron-keycloak

                                            girishG Offline
                                            girishG Offline
                                            girish
                                            Staff
                                            wrote on last edited by
                                            #24

                                            @nj thanks! this is awesome, added to our list of packages to push out.

                                            Sam_ukS marcusquinnM 2 Replies Last reply
                                            4
                                            Reply
                                            • Reply as topic
                                            Log in to reply
                                            • Oldest to Newest
                                            • Newest to Oldest
                                            • Most Votes


                                              • Login

                                              • Don't have an account? Register

                                              • Login or register to search.
                                              • First post
                                                Last post
                                              0
                                              • Categories
                                              • Recent
                                              • Tags
                                              • Popular
                                              • Bookmarks
                                              • Search