Comment 3 for bug 930444

this is coming from keystone.postinst:

        if [ "$dbc_install" = "true" ]
        then
            # On first install, create basics configuration and add roles
            if [ -z "$2" ]
            then
                sed -e "s,_DBC_URL_,$SQL_CONNECTION," -i /etc/keystone/keystone.conf

                keystone-manage database sync
                keystone-manage role add Admin
                keystone-manage role add Member
                keystone-manage role add KeystoneAdmin
                keystone-manage role add KeystoneServiceAdmin
                keystone-manage role add sysadmin
                keystone-manage role add netadmin
            fi

            if [ "$dbc_upgrade" = "true" ]
            then
                su -s /bin/sh -c 'exec keystone-manage db sync' keystone
            fi
        fi

It looks like this needs to be `keystone-manage sync_database` instead.