diff --git a/keystone/server.sls b/keystone/server.sls
index 97fa2e0..60f162d 100644
--- a/keystone/server.sls
+++ b/keystone/server.sls
@@ -337,6 +337,8 @@
   - require:
     - keystone: keystone_service_tenant
 
+{%- if not server.get('ldap', {}).get('read_only', False) %}
+
 keystone_admin_user:
   keystone.user_present:
   - name: {{ server.admin_name }}
@@ -354,6 +356,8 @@
 
 {%- endif %}
 
+{%- endif %}
+
 {%- for service_name, service in server.get('service', {}).iteritems() %}
 
 keystone_{{ service_name }}_service: