Base
Hardened build
minimal ports, security patches applied at build time
Keycloak with OpenLDAP Directory on Ubuntu 24.04 LTS
Azure
Security
Keycloak identity provider with an OpenLDAP directory behind it, federation pre-wired and proven, so LDAP users sign in through SSO from first boot.
Overview
Keycloak with OpenLDAP Directory pairs the two halves of the canonical enterprise identity stack on one appliance: OpenLDAP slapd is the authoritative user and group directory, and Keycloak is the modern identity provider in front of it, adding single sign on, OpenID Connect, OAuth 2.0 and SAML to accounts that live in LDAP. Keycloak user federation is configured out of the box: a dedicated realm syncs users from the directory, writes changes back in writable mode, and validates passwords against LDAP itself, so applications authenticate against Keycloak while the directory remains the single source of truth.
It suits any team that keeps identities in LDAP but needs modern token based authentication in front of them, without building and testing the federation wiring by hand.
Why the cloudimg image
cloudimg delivers the pair already working together: on each machine's first boot the image generates unique passwords for the Keycloak administrator, the LDAP directory administrator and the sample directory user, wires the Keycloak LDAP federation provider against the local directory, runs a full user sync, and proves that a directory-stored user can actually sign in through Keycloak before handing the machine over. No default logins exist at any point, the LDAP TLS certificate is regenerated per machine, the directory database lives on a dedicated resizable data disk, and both verbatim open source licences ship in the image. Everything is backed by a paired deployment guide and 24/7 support.
Common uses
- Put SSO, OIDC and SAML in front of users that live in an LDAP directory
- Run a self-owned identity stack: authoritative LDAP plus a modern identity provider on one VM
- Develop and test LDAP federation against a real, pre-wired Keycloak and OpenLDAP pairing
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
2F
2FAuth on Ubuntu 24.04 LTS
Security
2FAuth is a free, open source, self hosted web app for managing your two factor authentication accounts.
Ad
acme-dns on Ubuntu 24.04 LTS
Security
The image installs acme-dns 2.0.2 from the official upstream release (github.com/acme-dns/acme-dns, the project formerly...
addy.io on Ubuntu 24.04
Security
Mail sent to an alias is forwarded to your real inbox, and you can reply from the alias so the other side never learns w...
AliasVault on Ubuntu 24.04
Security
AliasVault is an open source, end to end encrypted password manager combined with a private email alias service that you...
Apache SpamAssassin
Security
This image runs Apache SpamAssassin, the long established open source anti spam platform, fully configured and security ...
Apache Syncope on Ubuntu 24.04
Security
Apache Syncope is an open source identity management and identity governance platform.