keystone-manage is designed to execute commands that cannot be administered through the normal REST api. At the moment, the following calls are supported:
db_sync: Sync the database.import_legacy: Import a legacy (pre-essex) version of the db.export_legacy_catalog: Export service catalog from a legacy (pre-essex) db.import_nova_auth: Load auth data from a dump created with keystone-manage.
Generally, the following is the first step after a source installation:
keystone-manage db_sync
Invoking keystone-manage by itself will give you additional usage information.

