From 143ccbfa152f02b3df3882adfb6ccff4ad29d1a7 Mon Sep 17 00:00:00 2001 From: Stefan Guilhen Date: Fri, 16 Feb 2024 09:58:07 -0300 Subject: [PATCH] Check if kerberos auth is enabled before creating the kerberos principal in LDAPStorageProvider - prevents misleading warn messages from being logged Closes #25294 Signed-off-by: Stefan Guilhen --- .../java/org/keycloak/storage/ldap/LDAPStorageProvider.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/federation/ldap/src/main/java/org/keycloak/storage/ldap/LDAPStorageProvider.java b/federation/ldap/src/main/java/org/keycloak/storage/ldap/LDAPStorageProvider.java index 136e56197b1..9412d3a484b 100755 --- a/federation/ldap/src/main/java/org/keycloak/storage/ldap/LDAPStorageProvider.java +++ b/federation/ldap/src/main/java/org/keycloak/storage/ldap/LDAPStorageProvider.java @@ -676,7 +676,7 @@ public class LDAPStorageProvider implements UserStorageProvider, if(getLdapIdentityStore().getConfig().isTrustEmail()){ imported.setEmailVerified(true); } - if (kerberosConfig.getKerberosPrincipalAttribute() != null) { + if (kerberosConfig.isAllowKerberosAuthentication() && kerberosConfig.getKerberosPrincipalAttribute() != null) { String kerberosPrincipal = ldapUser.getAttributeAsString(kerberosConfig.getKerberosPrincipalAttribute()); if (kerberosPrincipal == null) { logger.warnf("Kerberos principal attribute not found on LDAP user [%s]. Configured kerberos principal attribute name is [%s]", ldapUser.getDn(), kerberosConfig.getKerberosPrincipalAttribute());