From 99128d1acbda0b37e8fa6cfe937969c8e1e4889d Mon Sep 17 00:00:00 2001 From: Sheppy Date: Wed, 3 Jan 2024 21:11:39 +0000 Subject: [PATCH] fix: uuidLDAPAttribute and disable emailVerified mapper --- .../tasks/keycloak-ldap-provider.yaml | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/roles/usermanagement/tasks/keycloak-ldap-provider.yaml b/roles/usermanagement/tasks/keycloak-ldap-provider.yaml index ba977cc..56ea358 100644 --- a/roles/usermanagement/tasks/keycloak-ldap-provider.yaml +++ b/roles/usermanagement/tasks/keycloak-ldap-provider.yaml @@ -22,7 +22,7 @@ vendor: other usernameLDAPAttribute: uid rdnLDAPAttribute: uid - uuidLDAPAttribute: entryUUID + uuidLDAPAttribute: uid userObjectClasses: person, inetOrgPerson, organizationalPerson, verification connectionUrl: "{{ ldap_connection_url }}" usersDn: "{{ ldap_user_dn }}" @@ -102,15 +102,15 @@ read.only: true user.model.attribute: createTimestamp ldap.attribute: createTimestamp - - name: "email_verified" - providerId: "user-attribute-ldap-mapper" - providerType: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper" - config: - always.read.value.from.ldap: false - is.mandatory.in.ldap: false - read.only: false - user.model.attribute: emailVerified - ldap.attribute: emailVerified + #- name: "email_verified" + # providerId: "user-attribute-ldap-mapper" + # providerType: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper" + # config: + # always.read.value.from.ldap: false + # is.mandatory.in.ldap: false + # read.only: false + # user.model.attribute: emailVerified + # ldap.attribute: emailVerified - name: "group-mapper" providerId: "group-ldap-mapper" providerType: "org.keycloak.storage.ldap.mappers.LDAPStorageMapper"