--host / --bind-host seem to have no effect ...

Not sure I understand this. Is it still an issue?

$ git show
commit 37ff5b68836b09848ce2213eca961402e99c8d8c

This is an example of the initial bug:

(.keystone-venv)$ ./bin/keystone --help | grep -A1 BIND_HOST
    --host=BIND_HOST, --bind-host=BIND_HOST
                        specifies host address to listen on (default is all or

(.keystone-venv)$ ./bin/keystone --host=127.0.0.1
Starting the RAX-KEY extension
Starting the Legacy Authentication component
Service API listening on 0.0.0.0:5000
Admin API listening on 0.0.0.0:35357

(.keystone-venv)$ ./bin/keystone --bind-host=127.0.0.1
Starting the RAX-KEY extension
Starting the Legacy Authentication component
Service API listening on 0.0.0.0:5000
Admin API listening on 0.0.0.0:35357

-----

The binaries are ignoring the flags, and just using what is in the conf file.

the help bit should have been (didn't grep enough lines after match):

(.keystone-venv)[justinshepherd@sideswipe keystone-trunk (master)]$ ./bin/keystone --help | grep -A2 BIND_HOST
    --host=BIND_HOST, --bind-host=BIND_HOST
                        specifies host address to listen on (default is all or
                        0.0.0.0)

Reviewed: https://review.openstack.org/1889
Committed: http://github.com/openstack/keystone/commit/f721abd9ea127df6b289ca27aeb6f1f098eae8f0
Submitter: Jenkins
Branch: master

 status fixcommitted
 done

commit f721abd9ea127df6b289ca27aeb6f1f098eae8f0
Author: Ziad Sawalha <email address hidden>
Date: Wed Nov 23 23:22:48 2011 -0600

    Fixes bug 843065

    Stopped defaults from option parser overriding arguments. Arguments take precendence.

    Change-Id: I40847efce567a37e7d41ca7b409c0411f13d383f