Description of problem:
If a user installs and runs the Keystione packlage without packstack support, the token provider fails with:

ERROR keystone.common.wsgi [-] No module named backends.sql

This is due to the file /usr/share/keystone/keystone-dist.conf overriding the default config for the token provider, using old information.  The file has:

[token]
driver=keystone.token.backends.sql.Token


Which is no longer the correct path, it should be getting the default value which you can see in the sample config file:

driver = keystone.token.persistence.backends.sql.Token


If this value is explicitly st in /etc/keystone/keystone.conf  everything works correctly.

the keystone rpmshould not be shipping  /usr/share/keystone/keystone-dist.conf as it will continue to trip over default values that change from upstream.  For example, it has 


[database]
connection=mysql://keystone:keystone@localhost/keystone

Which is an example, but should not work;  it is a hardcoded password. 

The catalog section has:"

[catalog]
driver=keystone.catalog.backends.sql.Catalog
template_file=/etc/keystone/default_catalog.templates

This makes no sense:  the template value is only used if the template driver is enabled, not the SQL driver.