> On 03/12/2022 19:41 EET Gary Horchem <[email protected]> wrote:
> 
>  
> Hello I’m trying to configure Dovecot with Keycloak I’m using the proxy with 
> password grant method. 
> 
> Here’s my dovecot-oauth2.plain.conf.ext
> 
> grant_url = 
> https://server-1.gary-springfield-mo.net/realms/sso/protocol/openid-connect/token
> client_id = dovecot
> client_secret = WtZ5uZsBi2QPfh1EWuMWjUVGNNT4HEGR
> introspection_url = 
> https://server-1.gary-springfield-mo.net/realms/sso/protocol/openid-connect/token/introspect
> introspection_mode = post
> use_grant_password = yes
> debug = yes
> username_attribute = username
> pass_attrs = host=server-1:8181 proxy=y proxy_mech=xoauth2 
> pass=%{oauth2:access_token}
> 
> And my dovecot-oauth2.token.conf.ext
> 
> grant_url = 
> https://server-1.gary-springfield-mo.net/realms/sso/protocol/openid-connect/token
> client_id = dovecot
> client_secret = WtZ5uZsBi2QPfh1EWuMWjUVGNNT4HEGR
> tokeninfo_url = 
> https://server-1.gary-springfield-mo.net/realms/sso/protocol/openid-connect/token
> introspection_url = 
> https://server-1.gary-springfield-mo.net/realms/sso/protocol/openid-connect/token/introspect
> introspection_mode = post
> use_grant_password = no
> debug = yes
> username_attribute = username
> pass_attrs = pass=%{oauth2:access_token}
> 
> Do I also need to configure the dovecot-oauth2.conf.ext
> 
> 
> Sent from my iPhone


Not really.

They are just example files, you need to use the one that makes sense with your 
setup and which you used for passdb oauth2.

Aki

Reply via email to