Comment 6 for bug 1544888

this problem may be solved by adding /v3 after auth_uri in cinder.conf [keystone_authtoken].Because it is caused by an authentication for hierarchical projects, this project is supported by keystone v3. However, keystone v2 only supports default domain,v3 isn't needed.This solution is working for me.