keystone.conf

[identity]
driver=keystone.identity.backends.ldap.Identity

[assignment]
driver=keystone.assignment.backends.sql.Assignment

[ldap]
### Connection Details ###
url=ldaps://localhost
user=CN=svc_user,OU=Svc Acount Org Unit,DC=dc1,DC=example,DC=com
password=some_pass
query_scope=sub
page_size=2000

### User ###
user_tree_dn=DC=dc1,DC=example,DC=com
user_filter=(&(objectClass=organizationalPerson)(!(objectClass=computer)))
user_objectclass=organizationalPerson

user_name_attribute=sAMAccountName
user_id_attribute=sAMAccountName
user_mail_attribute=mail

user_enabled_attribute=userAccountControl
user_enabled_default=512
user_enabled_mask=2
user_enabled_emulation=False

user_allow_delete=False
user_allow_create=False
user_allow_update=False

### Groups ###
group_tree_dn=OU=Users,OU=My Company,DC=Domain Comp 2,DC=Domain Comp 1
group_objectclass=group

group_id_attribute=cn
group_name_attribute=name
group_member_attribute=member
group_desc_attribute=description

group_allow_update=False
group_allow_delete=False
group_allow_create=False