LDAP over SSL, or LDAPS, allows you to encrypt your LDAP server data while it travels during communications, in order to protect it from attacks like certificate theft. For more information, see the official Keycloak documentation on LDAPS.
On this page:
Prerequisites
You must have the Java jre
package installed to complete this procedure.
Establishing LDAPS
-
Open a terminal and connect to your instance of Anaconda Server.
-
Generate a truststore on your host by running the following command:
-
Copy the
truststore.jks
file you just generated to the following location: -
Find and open your
docker-compose.yml
file in your installer directory using your preferred file editor. -
Find the
services: keycloak: volumes:
section of the file and add the following line: -
Find the
services: keycloak: depends_on:
section of the file and add the following line:
Pay close attention to the indentation of your added lines. If you do not add them at the correct level of indentation, your configurations will not be readable.
Here is an example of what your docker-compose.yml
file should look like when you are finished adding these lines:
-
Enter your base installer directory by running the following command:
-
Restart your containers by running the following command:
Troubleshooting
If you have any issues, verify the certificate authority against the LDAPS server by running the following command:
This returns the following string:
You can inspect the keystore you created with the following command:
Was this page helpful?