<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hey Emanuele - <div><br></div><div>First thing to undertstand the bug is to look at the logging and see what's getting reported as the issue. By default, Keystone logs to /var/log/keystone/keystone.log, but can be modified based on whatever you've set up in your keystone.conf.</div><div><br></div><div>I don't personally use the LDAP backend to Keystone, but I have significant faith that it works based on Adam's work in developing it.</div><div><br></div><div>-joe</div><div><br><div><div>On Jul 12, 2012, at 1:32 AM, Verga Emanuele wrote:</div><blockquote type="cite"><div>Hi everyone,</div><div><br></div><div>I'm currently trying to implent a test configuration of keystone using ldap as backend.</div><div>I've configured everything following those instructions (<a href="http://docs.openstack.org/developer/keystone/configuration.html#configuring-the-ldap-identity-provider">http://docs.openstack.org/developer/keystone/configuration.html#configuring-the-ldap-identity-provider</a>), but if I try to create a new tenant named service (keystone tenant-create --name service )the creation fails and I get the following error:</div>
<div><div><br></div><div>An unexpected error prevented the server from fulfilling your request. {'info': 'enabled: attribute type undefined', 'desc': 'Undefined attribute type'} (HTTP 500)</div>
</div><div>Other keystone client commands fail too.</div><div><br></div><div>According to this post (<a href="http://www.gossamer-threads.com/lists/openstack/dev/12444?do=post_view_threaded">http://www.gossamer-threads.com/lists/openstack/dev/12444?do=post_view_threaded</a>)no custom ldap schema should be required.</div>
<div><br></div><div>What I'm not sure about is if this is expected behavior (I.E. Does the keystone client only works with a SQL backend?) or do I have some error in my implementation?</div><div>Also, if the keystone client only works with an SQL backend how should I manage users, roles, tenants etc?</div>
<div><br></div><div>Thanks in advance for the help</div><div><br></div><div>Emanuele</div>
_______________________________________________<br>OpenStack-operators mailing list<br><a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators<br></blockquote></div><br></div></body></html>