Grizzly Keystone has been updated to address these security issues:
https://access.redhat.com/security/cve/CVE-2013-2157
https://bugzilla.redhat.com/956474
update: openstack-keystone-2013.1.2-3
* Mon Jun 24 2013 apevec(a)redhat.com 2013.1.2-3
- restrict /var/log/keystone/ rhbz#956474
* Sat Jun 22 2013 apevec(a)redhat.com 2013.1.2-2
- Force simple Bind for authentication CVE-2013-2157
thanks,
Pádraig.