Are you able to reproduce this on a newer version of keystone?
Do any of the users in the group have non-ascii characters in their names? What version of python-ldap is installed?
Are you able to reproduce this on a newer version of keystone?
Do any of the users in the group have non-ascii characters in their names? What version of python-ldap is installed?