[root@localhost ~]# keystone --debug role-list
REQ: curl -i http://localhost:35357/v2.0/OS-KSADM/roles -X GET -H "User-Agent: python-keystoneclient" -H "X-Auth-Token: hastexo"

connect: (localhost, 35357) ************
proxy: ('', 80, None, None, None) ************
connect fail: (localhost, 35357)
proxy: ('', 80, None, None, None)
connect: (localhost, 35357) ************
proxy: ('', 80, None, None, None) ************
connect fail: (localhost, 35357)
proxy: ('', 80, None, None, None)
RESP: {'status': '400', 'content-length': 30, 'content-type': 'text/plain'}
RESP BODY: [Errno 111] Connection refused

Request returned failure status: 400
Traceback (most recent call last):
  File "/usr/bin/keystone", line 9, in <module>
    load_entry_point('python-keystoneclient==0.2.0', 'console_scripts', 'keystone')()
  File "/usr/lib/python2.6/site-packages/keystoneclient/shell.py", line 432, in main
    OpenStackIdentityShell().main(sys.argv[1:])
  File "/usr/lib/python2.6/site-packages/keystoneclient/shell.py", line 376, in main
    args.func(self.cs, args)
  File "/usr/lib/python2.6/site-packages/keystoneclient/v2_0/shell.py", line 217, in do_role_list
    roles = kc.roles.list()
  File "/usr/lib/python2.6/site-packages/keystoneclient/v2_0/roles.py", line 53, in list
    return self._list("/OS-KSADM/roles", "roles")
  File "/usr/lib/python2.6/site-packages/keystoneclient/base.py", line 67, in _list
    resp, body = self.api.get(url)
  File "/usr/lib/python2.6/site-packages/keystoneclient/client.py", line 202, in get
    return self._cs_request(url, 'GET', **kwargs)
  File "/usr/lib/python2.6/site-packages/keystoneclient/client.py", line 198, in _cs_request
    **kwargs)
  File "/usr/lib/python2.6/site-packages/keystoneclient/client.py", line 169, in request
    raise exceptions.from_response(resp, body)
keystoneclient.exceptions.BadRequest: Unable to communicate with identity service: [Errno 111] Connection refused. (HTTP 400)