ldap schema, roles, and add
ldap keystone config