Identity and Access Management solution
Description
Keycloak is an open source Identity and Access Management solution
aimed at modern applications and services. It makes it easy to
secure applications and services with little to no code, providing
the following features:
- SAML, OAuth 2.0 and OpenID Connect
- Single Sign On
- Admin Console
- Account Management Console
- User Federation with LDAP and Active Directory
- Identity Brokering and Social Login
Package information
- Ports path
- security/keycloak
- Package architecture
- amd64
- Maintainer
- Pavel Korovin <pvk@openbsd.org>
- Categories
- security, java
- Available flavors
- None listed
- Only for architectures
- i386, amd64, aarch64
Ports list build and test dependencies as well as runtime dependencies. pkg_add selects those needed for installation.
Direct dependencies
Runtime
- java/javaPathHelper
- shells/bash
- devel/jdk/21 jdk->=21v0,<22v0
OpenBSD README
This README contains unresolved ports variables; replace them before using its commands.
+-------------------------------------------------------------------------------
| Running keycloak on OpenBSD
+-------------------------------------------------------------------------------
Config files
============
The default config file for keycloak is stored at:
${SYSCONFDIR}/keycloak/keycloak.conf
While the data files are stored at:
${LOCALSTATEDIR}/db/keycloak
Working with a reverse proxy
============================
Keycloak needs HTTPS and will not work without a TLS certificate. A reverse proxy
such as nginx, relayd or haproxy, can be used to do TLS termination. In such a
case, keycloak must be told to trust the reverse proxy by setting the
following options in the config file:
http-enabled=true
http-port=<desired-http-port>
proxy=edge
Working in a cluster
====================
Keycloak supports clustered, high availability mode. This needs multicast enabled,
the details of which can be read in multicast(4).
Due to the limitations of Java on OpenBSD, it is recommended to only use the IPv4
stack for keycloak, both in normal and cluster modes.