On Sat, 31 Mar 2012 10:26:10 +0800 Yong Sheng Gong <gongysh at cn.ibm.com> wrote: > Second: you can use keystone --debug user-list to show what http message sent to server As it turned out, I omitted 's' after the format, because I redone my old Keystone population script, which did not have any of those. E.g. public_url was: http://kvm-rei.zaitcev.lan/v1/AUTH_$(tenant_id) but it should've been: http://kvm-rei.zaitcev.lan/v1/AUTH_$(tenant_id)s -- Pete