Accidentally only added WSGIPassAuthorization to the public port, like all the other WSGI props, it should be added for both ports. Change-Id: I4e52e0881df464dfb7b28e22581f462e14e37bdb
@@ -22,6 +22,7 @@ Listen %ADMINPORT%
WSGIProcessGroup keystone-admin
WSGIScriptAlias / %ADMINWSGI%
WSGIApplicationGroup %{GLOBAL}
+ WSGIPassAuthorization On
<IfVersion >= 2.4>
ErrorLogFormat "%{cu}t %M"
</IfVersion>