Keystone

• Cron for TGTs (UGLY!)

• KRB5CCNAME=FILE:/tmp/krb5cc_$UID
• kinit keystone -k -t /var/kerberos/krb5/user/$UID/client.keytab"

• SQLAlchemy URL

• connection = postgresql://pg.openstack.freeipa.org/keystone?krbsrvname=postgres