applications:
  keystone-ldap:
    charm: cs:xenial/keystone-ldap
    num_units: 0
    options:
      debug: true
      domain-name: cdoqa
      use-internal-endpoints: true
      ldap-config-flags: "{ user_tree_dn: 'ou=users,dc=test,dc=com', user_objectclass: posixAccount, user_id_attribute: uidNumber, user_name_attribute: uid, group_tree_dn: 'ou=groups,dc=test,dc=com', group_objectclass: posixGroup, group_id_attribute: gidNumber, group_name_attribute: cn, group_member_attribute: memberUid, group_members_are_ids: True}"
      ldap-readonly: true
      ldap-password: "crapper"
      ldap-server: "ldap://10.245.221.126:389"
      ldap-suffix: "dc=test,dc=com"
      ldap-user: "cn=admin,dc=test,dc=com"
relations:
  - - keystone-ldap
    - keystone