Comment 5 for bug 949904

Kevin-

As I mentioned on the mailing list, it still looks like you're mixing your keystone admin environment with the client environment. Any OS_* user credentials or credentials passed as arguments to keystone client are disregarded with SERVICE_ENDPOINT and SERVICE_TOKEN set in the environment. See: http://paste.ubuntu.com/876375/

Regarding glance, you now need to configure a service tenant and credentials for glance in keystone and in glance's paste configs (same is true for nova and swift). Please see the devstack keystone_data.sh script