Ask Your Question

openstack group list returns sometimes empty list with LDAP

asked 2019-09-02 10:46:20 -0600

smutel gravatar image


Our domain is setup with LDAP groups.
Sometimes the command openstack group list returns empty result without any error (just one blank line).
Sometimes the command returns the list of groups.
I sourced the same openstack config files.
The error appears randomly when I type the command several times.

Any idea where this could come from ?


edit retag flag offensive close merge delete


To me it sounds like a network issue, but have you tried running openstack --debug group list and compare the output from a successful command vs. an empty response?

eblock gravatar imageeblock ( 2019-09-04 04:09:42 -0600 )edit

1 answer

Sort by ยป oldest newest most voted

answered 2019-09-04 04:34:25 -0600

smutel gravatar image


I answer to my own question.
LDAP is reachable from a VIP round robin to several LDAP server.
In one server a LDAP rule denied the access for the user to the openstack specific OU.
We changed the rule and now it works fine.


edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2019-09-02 10:20:34 -0600

Seen: 128 times

Last updated: Sep 02 '19