We need to rebase openstack-keystone to the 8.0.1 release from the liberty/stable branch for RHEL OSP8, as there is at least one bug in there which we've backported to earlier RHEL OSP releases.
rpm -qa |grep keystone openstack-keystone-8.0.1-1.el7ost.noarch python-keystoneclient-1.7.2-1.el7ost.noarch python-keystonemiddleware-2.3.1-1.el7ost.noarch python-keystone-8.0.1-1.el7ost.noarch python-keystoneauth1-1.1.0-4.el7ost.noarch
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHEA-2016-0603.html