Which release are you using? According to my experience last year when ldap backend was much more premature, i had to add those attributes in my ldap server's manually, because there is no such attribute in its schema. I don't know the status now. On Mon, Aug 19, 2013 at 11:42 PM, Qinglong.Meng <mengql112233 at gmail.com>wrote: > Hi all, > I configure keystone with ldap backend followed LDAP section of > http://docs.openstack.org/developer/keystone/configuration.html, > and when I create tenant in ldap, I got the error about "enable" and > "desc" attribute type undefined in keystone.log. > Here is keystone.conf: > http://paste.openstack.org/show/44574/ > > keystone.log > http://paste.openstack.org/show/44575/ > > the ldif of ldap server > http://paste.openstack.org/show/44578/ > > sample slapd.conf > http://paste.openstack.org/show/44579/ > > -- > > Lawrency Meng > mail: mengql112233 at gmail.com > _______________________________________________ > Mailing list: https://launchpad.net/~openstack > Post to : openstack at lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > _______________________________________________ > OpenStack-dev mailing list > OpenStack-dev at lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130820/e8cd3c23/attachment.html>