rcit points out that the problem is likely the LDIF file/migration for the default role:
"Looking at the ldif I'm guessing it is this entry that is the problem:
dn: cn=9fe2ff9ee4384b1894a90878d3e92bab,ou=Roles,dc=openstack,dc=org
objectClass: organizationalRole
ou: _member_
cn: 9fe2ff9ee4384b1894a90878d3e92bab
...
I'm guessing that python-ldap is dealing with the base64-decoded version of this as a plain string and that is why it is blowing up."
rcit points out that the problem is likely the LDIF file/migration for the default role:
"Looking at the ldif I'm guessing it is this entry that is the problem:
dn: cn=9fe2ff9ee438 4b1894a90878d3e 92bab,ou= Roles,dc= openstack, dc=org 894a90878d3e92b ab
objectClass: organizationalRole
ou: _member_
cn: 9fe2ff9ee4384b1
...
I'm guessing that python-ldap is dealing with the base64-decoded version of this as a plain string and that is why it is blowing up."
rob