WARNING:
=======

2014-05-21 14:53:07.923 19791 INFO eventlet.wsgi.server [-] 10.xxx.xxx.xx - - [21/May/2014 14:53:07] "GET /v2.0/tokens/revoked HTTP/1.1" 200 923 0.068970
2014-05-21 14:53:17.079 19791 WARNING keystone.common.wsgi [-] Authorization failed. The request you have made requires authentication. from 10.xxx.xxx.xx
2014-05-21 14:53:17.080 19791 INFO eventlet.wsgi.server [-] 10.xxx.xxx.xx - - [21/May/2014 14:53:17] "POST /v2.0/tokens HTTP/1.1" 401 313 0.025746
2014-05-21 14:53:22.364 19791 WARNING keystone.common.wsgi [-] Authorization failed. The request you have made requires authentication. from 10.xxx.xxx.xx
2014-05-21 14:53:22.365 19791 INFO eventlet.wsgi.server [-] 10.xxx.xxx.xx - - [21/May/2014 14:53:22] "POST /v2.0/tokens HTTP/1.1" 401 314 0.005556
2014-05-21 14:53:23.491 19791 WARNING keystone.common.wsgi [-] Authorization failed. The request you have made requires authentication. from 10.xxx.xxx.xx



I). LDAP Server 10.xxx.xxx.xx
=============================

$ ldapsearch -x -W -D"dc=Manager,dc=openstack,dc=org" -b dc=openstack,dc=org }}
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <dc=openstack,dc=org> with scope subtree
# filter: (objectclass=*)
# requesting: }}
#

# openstack.org
dn: dc=openstack,dc=org

# UserGroups, openstack.org
dn: ou=UserGroups,dc=openstack,dc=org

# Users, openstack.org
dn: ou=Users,dc=openstack,dc=org

# Roles, openstack.org
dn: ou=Roles,dc=openstack,dc=org

# Projects, openstack.org
dn: ou=Projects,dc=openstack,dc=org

# 9fe2ff9ee4384b1894a90878d3e92bab, Roles, openstack.org
dn: cn=9fe2ff9ee4384b1894a90878d3e92bab,ou=Roles,dc=openstack,dc=org

# search result
search: 2
result: 0 Success

# numResponses: 7
# numEntries: 6


II). LDAP Related Keystone Config
=================================

[DEFAULT]

member_role_id = 9fe2ff9ee4384b1894a90878d3e92bab
member_role_name = _member_

[identity]

driver=keystone.identity.backends.ldap.Identity

[ldap]

url = ldap://10.xxx.xxx.xx
password = admin
user = dc=Manager,dc=openstack,dc=org
suffix = dc=openstack,dc=org
use_dumb_member = True
user_attribute_ignore = enabled,email,tenants,default_project_id
tenant_attribute_ignore = enabled
tenant_domain_id_attribute = businessCategory
tenant_desc_attribute = description
tenant_tree_dn = ou=Projects,dc=openstack,dc=org
user_domain_id_attribute = businessCategory
user_tree_dn = ou=Users,dc=openstack,dc=org