OpenStack Keystone LDAP and Active Directory integration
Connecting Keystone to LDAP or Active Directory: read-only identity back ends, per-domain drivers that keep service accounts in SQL while employees come from the directory, group-to-role assignment and the limits of read-only LDAP.

