Description of problem: "Integrate With Identity Service" guide tells users to "Set the network timeout in /etc/openldap/ldap.conf" [1]. It was proper recommendation for RHOSP 10, but keystone is running in containers since RHOSP 12. As a result, customers need to adjust settings inside keystone container, but there is no folder related to /etc/openldap in /var/lib/config-data/puppet-generated/keystone/etc/ Affected releases: all active RHOSP releases. I am not sure if this is a pure documentation bug or a combination of keystone container issue and documentation problem, so setting openstack-keystone as affected component. [1] https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/8/html/integrate_with_identity_service/sec-active-directory#AD-HA 2. Set the network timeout in /etc/openldap/ldap.conf: NETWORK_TIMEOUT 2
Setting CONDNACK capacity for now.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Red Hat OpenStack Platform 16.1.7 (Train) bug fix and enhancement advisory), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2021:3762