title: keycloak with ldap connected to external ldap
body: <p>I'm trying to setup a Mattermost (Team Edition) authentication via Keycloak with users synced from openldap.</p>
  <p>We have a two ldaps config: the company LDAP and our project's OpenLdap that is connected to the company's one.</p>
  <p>So the config for Mattermost auth looks now like this: Mattermost &gt;&gt; Keycloak &gt;&gt; internal project's LDAP &gt;&gt; company's LDAP</p>
  <p>Everything works fine as long as I'm trying to log in to Mattermost with a user that was created in our project internal openldap and has a password set and stored in it.</p>
  <p>The problem is that most of the users are simply added to the project openldap without passwords so that they can log in using corporate credentials. So when I'm trying to log in to Mattermost with such a user I'm getting 'invalid_cedentials' in Keycloak and err=49 in OpenLdap.</p>
  <p>My question would be is there a way to set up Keycloak in such a way that it lets users in even though they are synchronized with an ldap that does not know their passwords and is connected to an external Ldap. If not, can you suggest any alternatives? Keycloak seems appropriate as I could also map groups from the internal LDAP to roles.</p>