Tero Saarni
Tero Saarni
This change adds support for SASL EXTERNAL method, using x509 certificate as client credentials for LDAP server administrator. It works with both: LDAPS and LDAP + StartTLS What is included:...
"userCertificate" attribute was searched only under searchBaseDn and therefore it was not possible to use SASL EXTERNAL method with client certificate based authentication for admin user. This change adds explicit...
I'm trying to run tests for a project which uses Arquillian integration test framework. The project has an alternative `pom.xml` file (outside of the root dir of the project) which...
This change adds the documentation related to SASL EXTERNAL authentication for LDAP federation, which is being introduced by related PR on Keycloak code repository https://github.com/keycloak/keycloak/pull/7365. The change additionally clarifies few...
Update to https://github.com/Masterminds/sprig/releases/tag/v3.2.1 or later to remove https://github.com/Masterminds/goutils/security/advisories/GHSA-xg2h-wx96-xgxr.
Enable TLSv1.3 when server is running on JDK that supports it. - Select TLSv1.3 as default protocol. - Include both TLSv1.2 and TLSv1.3 as default enabled protocols. - Include TLSv1.3...
After #4686 merge `make checkall` fails ``` $ make checkall ... Generating Gateway API CRD YAML documents... error: git cmd = '/usr/bin/git fetch --depth=1 origin v0.5.1-0.20220822185609-d05e07b14156': exit status 128 make:...
### Description LDAP user can be set up to require forced password change after password reset. It would be nice if Keycloak would support prompting user for new password in...
This PR proposes new SPI called "KeyStore". The purpose of the SPI is to allow an arbitrary number of key stores to be provisioned. This work is split from old...
Request: remove the `docs/build` directory from future pypi releases. Background: Recent pypi release packages contain the full web site docs in `docs/build/` directory, while the older releases only contained the...