如果看过《Identity, Authentication & Access Management in OpenStack》的Page72，这里提到"Projects, Roles and Assignments from LDAP(Just Say NO!)"。