Comment 2 for bug 1561236

I suggest to split this task into 2, because when

$cfn_auth_name = $auth_name (possible case when we decided to use single corporate LDAP user as 'service' user for all services)

we receive Puppet catalog compilation error (2 keyustone_user, keystone_user_role etc. resources with the same names) because classes ::heat::keystone::auth and ::heat::keystone::auth_cfn are called in the same task with the same $auth_name