diff --git a/keystone/values_overrides/ldap.yaml b/keystone/values_overrides/ldap.yaml
index 8109017a37..510066ad3e 100644
--- a/keystone/values_overrides/ldap.yaml
+++ b/keystone/values_overrides/ldap.yaml
@@ -41,6 +41,12 @@ conf:
         user_mail_attribute: mail
         user_pass_attribute: userPassword
         group_tree_dn: "ou=Groups,dc=cluster,dc=local"
+        group_filter: ""
+        group_objectclass: posixGroup
+        group_id_attribute: cn
+        group_name_attribute: cn
+        group_desc_attribute: description
+        group_member_attribute: memberUID
         use_pool: true
         pool_size: 27
         pool_retry_max: 3
diff --git a/tools/deployment/component/keystone/keystone.sh b/tools/deployment/component/keystone/keystone.sh
index d376e9df9b..7c20f16d81 100755
--- a/tools/deployment/component/keystone/keystone.sh
+++ b/tools/deployment/component/keystone/keystone.sh
@@ -44,6 +44,8 @@ FEATURE_GATE="ldap"; if [[ ${FEATURE_GATES//,/ } =~ (^|[[:space:]])${FEATURE_GAT
   openstack user list
   openstack user list --domain ldapdomain
 
+  openstack group list --domain ldapdomain
+
   openstack role add --user bob --project admin --user-domain ldapdomain --project-domain default admin
 
   domain="ldapdomain"