The options are documented in http://devstack.org/stack.sh.html Just search for LDAP: Keystone can now optionally install OpenLDAP by enabling the ldap service in localrc (e.g. enable_service ldap). To clean out the Keystone contents in OpenLDAP set KEYSTONE_CLEAR_LDAP to yes (e.g. KEYSTONE_CLEAR_LDAP=yes) in localrc. To enable the Keystone Identity Driver ( keystone.identity.backends.ldap.Identity) set KEYSTONE_IDENTITY_BACKEND to ldap (e.g. KEYSTONE_IDENTITY_BACKEND=ldap) in localrc. Brad Topol, Ph.D. IBM Distinguished Engineer OpenStack (919) 543-0646 Internet: btopol at us.ibm.com Assistant: Kendra Witherspoon (919) 254-0680 From: Adam Young <ayoung at redhat.com> To: openstack at lists.openstack.org, Date: 04/15/2014 11:14 PM Subject: Re: [Openstack] Install OS-KSADM and LDAP for Devstack On 04/10/2014 12:34 AM, Shital Patil wrote: Hi, I have a devstack setup running but for tenant management I need OS-KSADM extension and LDAP configuration with keystone what changes will I need to do in local.conf ? Thank you _______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack at lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack LDAP in devstack was fairly well documented. I'd have to look, but I think it was: add an enabled service entry for ldap ENABLED_SERVICES=$ENABLED_SERVICES,ldap KEYSTONE_IDENTITY_BACKEND=ldap KEYSTONE_CLEAR_LDAP=yes LDAP_PASSWORD=test_______________________________________________ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack at lists.openstack.org Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140416/6c8631ec/attachment.html>