admin管理员组文章数量:1399940
I am setting up user import from AD to Keycloak.
When I set the objectGUID (or objectSid) value to the UUID LDAP attribute parameter and click "Sync all user", I get the response "3 user failed".
If I set the userPrincipalName value, I get the response "3 users update".
For debugging, I added mappers for these two attributes with the user-attribute-ldap-mapper type to see their values in the user card. The result is on the screenshot.
binary
Then I enable the "Is binary attribute" parameter in the mapper settings. The result is on the screenshot
base64
It turns out that the values of these attributes come via LDAP in binary form. In the mapper settings, I can decode them in base64 (as I understand it). The question is, how can I make sure that the normal value comes to the UUID LDAP attribute parameter? Because, as I have found out, the values come from LDAP in a different form than required.
P.S. I'm still a newbie, sorry if the question is stupid
版权声明:本文标题:active directory - Problems setting LDAP Attribute UUID to objectSidobjectGUID in Keycloak - Stack Overflow 内容由网友自发贡献,该文观点仅代表作者本人, 转载请联系作者并注明出处:http://www.betaflare.com/web/1744214493a2595570.html, 本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌抄袭侵权/违法违规的内容,一经查实,本站将立刻删除。
发表评论