Comment 3 for bug 949521

There are many variations on LDAP, so I tried to keep the documentation as Neutral as possible. Assuming a development setup for OpenLDAP has worked in the past, but should probably not be documented in the application itself, but rather on the Keystone or Openstack sites.

Yes, the [ldap] section goes in the keystone.conf file. I have updated to specify that.

On the LDAP side, the user would need to ldapadd a schema as described by the first comment in the ticket. I is pretty straight forward, and should be understandable by anyone comfortable with LDAP.