environments/services/keystone_domain_specific_ldap_backend.yaml

   1 # This is an example template on how to configure keystone domain specific LDAP
   2 # backends. This will configure a domain called tripleoldap will the attributes
   3 # specified.
   4 parameter_defaults:
   5   KeystoneLDAPDomainEnable: true
   6   KeystoneLDAPBackendConfigs:
   7     tripleoldap:
   8       url: ldap://192.0.2.250
   9       user: cn=openstack,ou=Users,dc=tripleo,dc=example,dc=com
  10       password: Secrete
  11       suffix: dc=tripleo,dc=example,dc=com
  12       user_tree_dn: ou=Users,dc=tripleo,dc=example,dc=com
  13       user_filter: "(memberOf=cn=OSuser,ou=Groups,dc=tripleo,dc=example,dc=com)"
  14       user_objectclass: person
  15       user_id_attribute: cn
  16       user_allow_create: false
  17       user_allow_update: false
  18       user_allow_delete: false