dn: cn=keystone,cn=schema,cn=config
objectClass: olcSchemaConfig
cn: keystone
olcAttributeTypes: (
    1.3.6.1.3.1.666.667.3.1
    NAME 'keystoneEnabled'
    EQUALITY booleanMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.7
    SINGLE-VALUE
    )
olcAttributeTypes: (
    1.3.6.1.3.1.666.667.3.2
    NAME 'keystoneTenant'
    SUP distinguishedName
    SINGLE-VALUE
    )
olcAttributeTypes: (
    1.3.6.1.3.1.666.667.3.3
    NAME 'keystoneRole'
    SUP distinguishedName
    SINGLE-VALUE
    )
olcAttributeTypes: (
    1.3.6.1.3.1.666.667.3.4
    NAME 'serviceId'
    EQUALITY caseExactIA5Match
    SUBSTR caseExactIA5SubstringsMatch
    SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
    SINGLE-VALUE
    )
olcObjectClasses: (
    1.3.6.1.3.1.666.667.4.1
    NAME 'keystoneUidObject'
    SUP top
    STRUCTURAL
    MUST ( uid )
    )
olcObjectClasses: (
    1.3.6.1.3.1.666.667.4.2
    NAME 'keystoneUser'
    SUP top
    AUXILIARY
    MUST ( keystoneEnabled )
    MAY ( mail $ userPassword )
    )
olcObjectClasses: (
    1.3.6.1.3.1.666.667.4.3
    NAME 'keystoneRole'
    SUP top
    AUXILIARY
    MAY ( member $ description $ serviceId )
    )
olcObjectClasses: (
    1.3.6.1.3.1.666.667.4.4
    NAME 'keystoneTenant'
    SUP top
    AUXILIARY
    MUST ( keystoneEnabled )
    MAY ( member $ description )
    )
olcObjectClasses: (
    1.3.6.1.3.1.666.667.4.5
    NAME 'keystoneTenantRole'
    SUP top
    AUXILIARY
    MUST ( keystoneRole )
    MAY ( member )
    )
