• silenium_dev@feddit.org
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 days ago

    I already had Keycloak set up, but a few services don’t support OIDC or SAML (Jellyfin, Reposilite), so I’ve deployed lldap and connected those services and Keycloak to it. Now I really have a single user across all services

    • WhyJiffie@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      2 days ago

      how did tou migrate your existing accounts to this system? or did you just make a new account from scratch?

      • silenium_dev@feddit.org
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 days ago

        I recreated the Keycloak account from LDAP, and then manually patched the databases for all OIDC-based services to the new account UUID, so the existing accounts are linked to the new Keycloak account.

        I have two Keycloak accounts, one in the master realm for administrative purposes, and one in the apps realm for all my services, so I didn’t break access to Keycloak