gistfile1.txt

[identity]
driver = ldap

[ldap]
url = ldap://xxxxx

user = xxxxx
password = xxxxx


suffix = "xxxxx"
query_scope = sub

user_tree_dn = "xxxxx"
user_objectclass = organizationalPerson
user_id_attribute = CN
user_name_attribute = sAMAccountName
user_mail_attribute = mail
user_pass_attribute = userPassword
user_enabled_attribute = userAccountControl
user_enabled_mask = 2
user_enabled_default = 512

group_tree_dn = "xxxxx"
group_objectclass = group
group_id_attribute = cn
group_name_attribute = cn
group_member_attribute = member
group_desc_attribute = description

gistfile2.txt

2017-06-06 09:07:33.813 45553 INFO keystone.common.wsgi [req-2c52942d-84ca-4530-a192-a43354589fa4 - - - - -] POST http://eclabmctl01-opens:5000/v3/auth/tokens
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi [req-2c52942d-84ca-4530-a192-a43354589fa4 - - - - -] 'options'
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi Traceback (most recent call last):
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/dist-packages/keystone/common/wsgi.py", line 228, in __call__
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi     result = method(req, **params)
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/dist-packages/keystone/auth/controllers.py", line 132, in authenticate_for_token
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi     auth_context['user_id'], method_names_set):
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi   File "/usr/lib/python2.7/dist-packages/keystone/auth/core.py", line 377, in check_auth_methods_against_rules
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi     mfa_rules = user_ref['options'].get(ro.MFA_RULES_OPT.option_name, [])
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi KeyError: 'options'
2017-06-06 09:07:33.966 45553 ERROR keystone.common.wsgi