Open Stack

Hello folks,

I was wondering if you let me know if enabling keystone to listen on public interface for ports 5000 and 35357 is considered as a normal practice. Example if a customer wants to authenticate not via horizon or some other proxy but setting up OS_AUTH_URL=http://blah  variable to be able to run OpenStack commands in cli.

Thank you in advance

Serguei