Keystone Fails to Start and Produces Error "Unable to establish connection" During Authorization Attempt in OpenStack Platform 5.0 on Red Hat Enterprise Linux

Solution In Progress - Updated -


Keystone uses port 35357, which is within the default ephemeral port range. This means that a program making outgoing connections on the Keystone system could randomly make use of port 35357 and block the Keystone service from starting.


  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat OpenStack Platform 5.0
  • Keystone

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content