diff --git a/doc/requirements.txt b/doc/requirements.txt
index fde3699e3b..49e992cdf4 100644
--- a/doc/requirements.txt
+++ b/doc/requirements.txt
@@ -6,5 +6,5 @@ sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD
 sphinxcontrib-apidoc>=0.2.0  # BSD
 reno>=2.5.0 # Apache-2.0
 os-api-ref>=1.4.0 # Apache-2.0
-pyldap>=2.4.20 # PSF
+python-ldap>=3.0.0  # PSF
 ldappool>=2.0.0 # MPL
diff --git a/lower-constraints.txt b/lower-constraints.txt
index 5b46d81a4b..43f2b016cb 100644
--- a/lower-constraints.txt
+++ b/lower-constraints.txt
@@ -92,7 +92,7 @@ pycparser==2.18
 pyflakes==0.8.1
 Pygments==2.2.0
 pyinotify==0.9.6
-pyldap===2.4.20
+python-ldap===3.0.0
 pymongo===3.0.2
 PyMySQL==0.8.0
 PyNaCl==1.2.1
diff --git a/releasenotes/notes/use-python-ldap-0318ff7798bdd98d.yaml b/releasenotes/notes/use-python-ldap-0318ff7798bdd98d.yaml
new file mode 100644
index 0000000000..1cbbce2b91
--- /dev/null
+++ b/releasenotes/notes/use-python-ldap-0318ff7798bdd98d.yaml
@@ -0,0 +1,6 @@
+---
+upgrade:
+  - Keystone now relies on python-ldap instead of pyldap.
+    The pyldap library is a deprecated fork from python-ldap. Starting
+    with python-ldap 3.0 release this has been merged and is maintained
+    there.
diff --git a/setup.cfg b/setup.cfg
index 662d6f2d1c..a2471fb0be 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -28,7 +28,7 @@ packages =
 
 [extras]
 ldap =
-  pyldap>=2.4.20 # PSF
+  python-ldap>=3.0.0 # PSF
   ldappool>=2.0.0 # MPL
 memcache =
   python-memcached>=1.56 # PSF