Can you use kerberos to reset a password in keycloak

Hi

Im new to Keycloak and was hoping someone can provide some information

Is it possible (using an existing extension) to get Keycloak to achieve the following over Kerberos

  • Pull users to a user store
  • Pull groups to a store
  • Reset user password
  • Allow form authentication using kerberos (Users would provide their credentials via a web form, the Keycloak server would pass these to the Active Directory via Kerberos, as opposed to browser providing the credentials)

This would be independent of the LDAP(S) protocol