I got the solution, There is not 'enable' attribute in objectClass inetOrgPerson of openldap inetOrgPerson schema. Now everything is OK. 2013/8/21 XINYU ZHAO <xyzjerry at gmail.com> > Which release are you using? > According to my experience last year when ldap backend was much more > premature, i had to add those attributes in my ldap server's manually, > because there is no such attribute in its schema. > I don't know the status now. > > > On Mon, Aug 19, 2013 at 11:42 PM, Qinglong.Meng <mengql112233 at gmail.com>wrote: > >> Hi all, >> I configure keystone with ldap backend followed LDAP section of >> http://docs.openstack.org/developer/keystone/configuration.html, >> and when I create tenant in ldap, I got the error about "enable" and >> "desc" attribute type undefined in keystone.log. >> Here is keystone.conf: >> http://paste.openstack.org/show/44574/ >> >> keystone.log >> http://paste.openstack.org/show/44575/ >> >> the ldif of ldap server >> http://paste.openstack.org/show/44578/ >> >> sample slapd.conf >> http://paste.openstack.org/show/44579/ >> >> -- >> >> Lawrency Meng >> mail: mengql112233 at gmail.com >> _______________________________________________ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack at lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> _______________________________________________ >> OpenStack-dev mailing list >> OpenStack-dev at lists.openstack.org >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> > > _______________________________________________ > OpenStack-dev mailing list > OpenStack-dev at lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Lawrency Meng mail: mengql112233 at gmail.com _______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack at lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130821/1073fbdc/attachment.html>