ldap - Openstack Keystone 3.0 API -

ldap - Openstack Keystone 3.0 API -

i have openstack havana cluster running 2.0 api. having issues integrating keystone corporate read ldap.

i have done ldap/sql split (for identity , assignment) recommended. when run 'keystone user-list' command multiple times, prints both sql , ldap users (i.e. sql users , ldap users sometimes). don't understand this, expect fetch user list ldap , not sql. user-list trying internally?

could there other settings in add-on ones in keystone.conf [ldap] need change?

i tried doing 'keystone user-role-add' seek , map ldap user precreated tenant fellow member role, failed saying user not found, 1 time again means trying user within sql instead of within ldap

some people have been talking using keystone 3.0 api, yet find material guides me on how install , running. procedure install , configure this? beingness new linux, have no thought whatsoever. how 3.0 api help me address issue?

also, read read ldap flaky in havana. migrating icehouse help? made more stable in icehouse?

can seek setting ldap driver identity follows :

driver = keystone.identity.backends.ldap.identity

ldap openstack keystone