keystone.ZAGS.conf

[identity]
driver = keystone.identity.backends.ldap.Identity

[ldap]
url = ldap://192.168.0.117
user = uid=zags_admin,ou=people,dc=zags,dc=nalog,dc=ru
password = Passw0rd
suffix = dc=zags,dc=nalog,dc=ru
use_dumb_member = False
allow_subtree_delete = False

user_tree_dn = ou=People,dc=zags,dc=nalog,dc=ru
user_objectclass = InetOrgPerson

group_tree_dn = ou=Group,dc=zags,dc=nalog,dc=ru
#group_objectclass = groupOfNames
group_objectclass = posixGroup
#group_objectclass = extensibleObject
#group_objectclass = top
#roup_objectclass = group

user_allow_create = False
user_allow_update = False
user_allow_delete = False

group_allow_create = False
group_allow_update = False
group_allow_delete = False


user_id_attribute      = cn
user_name_attribute    = cn
user_mail_attribute    = mail
user_pass_attribute    = userPassword
group_id_attribute     = cn
group_name_attribute   = cn
group_member_attribute = memberUid
group_desc_attribute   = description
group_filter           =

#use_tls = True
#tls_req_cert = allow
tls_req_cert = never
#tls_cacertdir = /etc/keystone/cert
#tls_cacertfile = /etc/keystone/cert/rootca_base64.cer
#tls_req_cacertfile = rootca.crt