I'm creating it based on the example devstack generated ceilometer.conf - it doesn't have a auth_uri .  I'm not saying it can take one but it certainly works without one.  The devstack ceilometer.conf also designates a auth_protocol.  It might work without one , but I haven't tested that.  My intent was to get a working conf mirroring the one created in devstack and then to iterate from there.