note about making sure keystone user-list works on plain LDAP