Here are some logs: 2018-11-09 16:01:35.944 2950 DEBUG keystone.server.flask.request_processing.req_logging [req-4424851b-93ac-4d82-925a-832142745a04 fd3bbebfac87486c97ed7dc5091d604f 1e43121813974b8d9c2cf5502b56dc88 - default default] REQUEST_METHOD: `GET` log_request_info /usr/lib/python2.7/site-packages/keystone/server/flask/request_processing/req_logging.py:27 2018-11-09 16:01:35.944 2950 DEBUG keystone.server.flask.request_processing.req_logging [req-4424851b-93ac-4d82-925a-832142745a04 fd3bbebfac87486c97ed7dc5091d604f 1e43121813974b8d9c2cf5502b56dc88 - default default] SCRIPT_NAME: `` log_request_info /usr/lib/python2.7/site-packages/keystone/server/flask/request_processing/req_logging.py:28 2018-11-09 16:01:35.944 2950 DEBUG keystone.server.flask.request_processing.req_logging [req-4424851b-93ac-4d82-925a-832142745a04 fd3bbebfac87486c97ed7dc5091d604f 1e43121813974b8d9c2cf5502b56dc88 - default default] PATH_INFO: `/v3/auth/tokens` log_request_info /usr/lib/python2.7/site-packages/keystone/server/flask/request_processing/req_logging.py:29 2018-11-09 16:01:35.945 2950 DEBUG keystone.common.fernet_utils [req-4424851b-93ac-4d82-925a-832142745a04 fd3bbebfac87486c97ed7dc5091d604f 1e43121813974b8d9c2cf5502b56dc88 - default default] Loaded 2 Fernet keys from /etc/keystone/fernet-keys, but `[fernet_tokens] max_active_keys = 5`; perhaps there have not been enough key rotations to reach `max_active_keys` yet? load_keys /usr/lib/python2.7/site-packages/keystone/common/fernet_utils.py:307 2018-11-09 16:01:35.952 2950 DEBUG keystone.common.rbac_enforcer.enforcer [req-4424851b-93ac-4d82-925a-832142745a04 fd3bbebfac87486c97ed7dc5091d604f 1e43121813974b8d9c2cf5502b56dc88 - default default] RBAC: Authorizing `identity:validate_token()` enforce_call /usr/lib/python2.7/site-packages/keystone/common/rbac_enforcer/enforcer.py:410 2018-11-09 16:01:35.953 2950 DEBUG keystone.common.rbac_enforcer.enforcer [req-4424851b-93ac-4d82-925a-832142745a04 fd3bbebfac87486c97ed7dc5091d604f 1e43121813974b8d9c2cf5502b56dc88 - default default] RBAC: Policy Enforcement Cred Data `identity:validate_token creds(service_project_id=None, service_user_id=None, service_user_domain_id=None, service_project_domain_id=None, trustor_id=None, user_domain_id=default, domain_id=None, trust_id=None, project_domain_id=default, service_roles=[], group_ids=[], user_id=fd3bbebfac87486c97ed7dc5091d604f, roles=[u'admin'], system_scope=None, trustee_id=None, domain_name=None, is_admin_project=True, token=*** (audit_id=i98r6xYhRXWMLpFzydG0AQ, audit_chain_id=[u'i98r6xYhRXWMLpFzydG0AQ']) at 0x7fd651650a50>, project_id=1e43121813974b8d9c2cf5502b56dc88)` enforce_call /usr/lib/python2.7/site-packages/keystone/common/rbac_enforcer/enforcer.py:418 2018-11-09 16:01:35.953 2950 DEBUG keystone.common.rbac_enforcer.enforcer [req-4424851b-93ac-4d82-925a-832142745a04 fd3bbebfac87486c97ed7dc5091d604f 1e43121813974b8d9c2cf5502b56dc88 - default default] RBAC: Policy Enforcement Target Data `identity:validate_token => target(target.token.user.domain.id=default, target.token.user_id=fd3bbebfac87486c97ed7dc5091d604f)` enforce_call /usr/lib/python2.7/site-packages/keystone/common/rbac_enforcer/enforcer.py:426 2018-11-09 16:01:35.973 2950 DEBUG keystone.common.rbac_enforcer.enforcer [req-4424851b-93ac-4d82-925a-832142745a04 fd3bbebfac87486c97ed7dc5091d604f 1e43121813974b8d9c2cf5502b56dc88 - default default] RBAC: Authorization granted enforce_call /usr/lib/python2.7/site-packages/keystone/common/rbac_enforcer/enforcer.py:432