Troubleshoot the Identity Service

To troubleshoot the Identity Service, review the logs in the /var/log/keystone.log file.

	Note
	Use the /etc/keystone/logging.conf file to configure the location of log files.

The logs show the components that have come in to the WSGI request, and ideally show an error that explains why an authorization request failed. If you do not see the request in the logs, run keystone with --debug parameter. Pass the --debug parameter before the command parameters.