== Keystone service ==
openstack-keystone:                     inactive

This guide uses the Apache HTTP server with mod_wsgi to serve keystone requests
on ports 5000 and 35357. By default, the keystone service still listens on ports
5000 and 35357. Therefore, this guide disables the keystone service.

I have resolved the "openstack service create" problem following this steps :

HTTP and KEYSTONE service sharing the same port, so stop httpd and start openstack-keystone.service. Edit /etc/keystone/keystone.conf and replace "hostname or ip" to "localhost":

connection = mysql://keystone:openstack@localhost/keystone

Remember to stop service httpd and enable start service keystone: - systemctl stop httpd.service - systemctl enable openstack-keystone.service => systemctl start openstack-keystone.service

And finally, exec "openstack service create --name keystone --description "OpenStack Identity" identity" command.

Most important to remember, the dashboard horizon use apache so that keystone and apache service must be running. Into keystone.conf and wsgi-keystone.conf occur bind a single interface on ports 5000 and 35357 instead of all interface "*" or "0.0.0.0":

edit /etc/keystone/keystone.conf => set admin_bind_host = <ip_mgmt> => set public_bind_host = <ip_mgmt>
edit /etc/httpd/conf.d/wsgi-keystone.conf => set Listen 127.0.0.1:5000 => Listen 127.0.0.1:35357 => same for VirtualHost 127.0.0.1:5000 & 35357
After service openstack-keystone.service and httpd.service restart, both process will be running in the same time.

[root@controller ~]# openstack-status
......
== Keystone service ==
openstack-keystone:                     active
== Horizon service ==
openstack-dashboard:                    active
......