I think Keystone got error itself. Check keystone service and troubleshot. Last time I got this error is because the Ntp is not configured , then the keystone got wrong without time sync. *Best Regards！* *Chao Yan--------------**My twitter：Andy Yan @yanchao727 <https://twitter.com/yanchao727>* *My Weibo：http://weibo.com/herewearenow <http://weibo.com/herewearenow>--------------* 2014-09-09 7:07 GMT+08:00 David Hill <david.hill at ubisoft.com>: > Hi guys, > > > > I have 2 environments that are almost identical but one of > them gives me this: > > > > keystoneclient.openstack.common.apiclient.exceptions.Forbidden: You are > not authorized to perform the requested action, identity:create_domain. > (HTTP 403) > > > > When I try to run: > > > > heat-keystone-setup-domain --stack-domain-admin stack_admin > --stack-domain-admin-password $password --stack-user-domain-name heat > > > > The problem is that I’m using the same policy everywhere and one works but > the other doesn’t. I’m out of ideas! > > > > Any hints? > > > > Dave > > > > _______________________________________________ > Mailing list: > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack > Post to : openstack at lists.openstack.org > Unsubscribe : > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack > > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140909/509a3da1/attachment.html>