Author: Corey Bryant
Revision Date: 2016-05-11 12:05:52 UTC

releasing package keystone version 1:2015.1.4-0ubuntu1

Author: Corey Bryant
Revision Date: 2015-12-09 17:17:48 UTC

releasing package keystone version 1:2014.2.4-0ubuntu1~cloud2

Author: Corey Bryant
Revision Date: 2015-08-03 19:26:59 UTC

* Resynchronize with stable/kilo (54400bf) (LP: #1481008):
  - [c4dc133] Mask passwords in debug log on user password operations
  - [fba2d5c] Add test showing password logged
  - [afaaf11] Fix xmldsig import
  - [ec30329] Pass-in domain when testing saml signing
  - [0c0bf69] Add openstack_project_domain to assertion
  - [dafe5f9] Fix signed_saml2_assertion.xml tests fixture
  - [67cda0c] Eventlet green threads not released back to pool
  - [54400bf] Remove project association before removing endpoint group

Author: Chuck Short
Revision Date: 2015-06-23 01:03:30 UTC

releasing package keystone version 1:2014.1.5-0ubuntu1

Author: Corey Bryant
Revision Date: 2015-06-22 16:01:20 UTC

* Resynchronize with stable/icehouse (91255f1) (LP: #1467533):
  - [a1548eb] backend_argument should be marked secret
  - [e6eba4b] Remove oslo.serialization from requirements.txt
  - [0e0efdb] Work with pymongo 3.0
  - [91255f1] Deal with PEP-0476 certificate chaining checking
* d/p/drop-oslo-serialization.patch: Dropped; Fixed upstream.
* d/p/fix-requirements.patch: Rebased

Author: Chuck Short
Revision Date: 2015-05-07 16:24:05 UTC

debian/control: Open for wily/liberty.

Author: Corey Bryant
Revision Date: 2015-04-30 14:20:44 UTC

New upstream release for OpenStack kilo.

Author: Corey Bryant
Revision Date: 2015-03-29 15:14:23 UTC

* d/p/drop-oslo-serialization.patch: Drop oslo.serialization (LP: #1437741).
* d/control: Set minimum python-six dependency to 1.5.2 (LP: #1403114).

Author: Corey Bryant
Revision Date: 2015-03-20 18:23:50 UTC

* Support new version of Python 2.7 (LP: #1434575):
  - d/p/pep-0476.patch: PEP 476 updates.

Author: Corey Bryant
Revision Date: 2015-02-12 17:03:10 UTC

Add dash to python-oslo-* dependencies

Author: Corey Bryant
Revision Date: 2015-02-09 13:58:05 UTC

* Resynchronize with stable/juno (aa23ce0) (LP: #1418695):
  - [4cdd217] Additional test coverage for password changes
  - [acdf034] explicit namespace prefixes for SAML2 assertion
  - [44c1bd0] Fix modifying a role with same name using LDAP
  - [7fc6585] Add a test for modifying a role to set the name the same
  - [fc6e9e8] Fix disabling entities when enabled is ignored
  - [85c658f] Add tests for enabled attribute ignored
  - [1594c84] Fix update role without name using LDAP
  - [d6ded70] Add test for update role without name
  - [afd4e0d] Exclude domains with inherited roles from user domain list.
  - [eeda52e] Improve testing of exclusion of inherited roles.
  - [e5b660e] Fix project federation tokens for inherited roles.
  - [609c5b3] Improve testing of project federation tokens for inherited roles.
  - [5ec7357] Fix domain federation tokens for inherited roles.
  - [4a914d7] Improve testing of domain federation tokens for inherited roles.
  - [a9a843e] User ids that begin with 0 cannot authenticate through ldap
  - [aa23ce0] Move unit tests from test_backend_ldap
* d/control: Bump minimum python-eventlet to get socket_timeout support.

Author: Corey Bryant
Revision Date: 2015-01-14 15:47:27 UTC

* Rebuild to pick up pkgos upstart generation fix.
  - d/control: Bump openstack-pkg-tools to ensure upstart fix inclusion.

Author: Corey Bryant
Revision Date: 2014-12-05 15:06:43 UTC

* Resynchronize with stable/juno (d7eb999) (LP: #1398952):
  - [f54fa8f] Prevent infinite loop in token_flush
  - [bd92689] Adds IPv6 url validation support
  - [db291b3] Use newer python-ldap paging control API
  - [d7eb999] Add oslo.serialization for latest keystoneclient

Author: Chris Ricker
Revision Date: 2014-11-26 17:47:09 UTC

Bump EVR. I hate PBR

Author: Corey Bryant
Revision Date: 2014-10-10 13:09:17 UTC

Added python-ldap as install dep (LP: #1364854)

Author: Corey Bryant
Revision Date: 2014-10-03 13:46:41 UTC

* Resynchronize with stable/icehouse (8485dbc) (LP: #1377136):
  - [89ebfe9] Fix tests comparing tokens
  - [6bf25d0] Fix typo on cache backend module
  - [1c8f9f9] Set LDAP certificate trust options for LDAPS and TLS
  - [878f12e] Adds a whitelist for endpoint catalog substitution
  - [a391713] Remove extraenous instantiations of managers
  - [25cbcf5] Avoid conversion of binary LDAP values
  - [b3765d7] Catalog driver generates v3 catalog from v2 catalog
  - [824f66d] Ensure token is a string
  - [30f9247] Add workaround to support tox 1.7.2
  - [80502d3] Fixes catalog URL formatting to never return None
  - [f3198d8] Updates keystone.catalog.core.format_url tests
  - [c959cbd] Ignore broken endpoints in get_catalog
  - [126440d] Ignore broken endpoints in get_v3_catalog
  - [c48ec38] No longer allow listing users by email
  - [18d4843] Fixes an issue with the XMLEquals matcher
  - [c6cd627] Implicitly ignore attributes that are mapped to None in LDAP
  - [8485dbc] Remove `with_lockmode` use from Trust SQL backend.
* d/p/fix-requirements.patch: Rebased.
* d/p/add-version-info.patch: Rebased.

Author: Corey Bryant
Revision Date: 2014-10-03 13:46:41 UTC

* Resynchronize with stable/icehouse (8485dbc) (LP: #1377136):
  - [89ebfe9] Fix tests comparing tokens
  - [6bf25d0] Fix typo on cache backend module
  - [1c8f9f9] Set LDAP certificate trust options for LDAPS and TLS
  - [878f12e] Adds a whitelist for endpoint catalog substitution
  - [a391713] Remove extraenous instantiations of managers
  - [25cbcf5] Avoid conversion of binary LDAP values
  - [b3765d7] Catalog driver generates v3 catalog from v2 catalog
  - [824f66d] Ensure token is a string
  - [30f9247] Add workaround to support tox 1.7.2
  - [80502d3] Fixes catalog URL formatting to never return None
  - [f3198d8] Updates keystone.catalog.core.format_url tests
  - [c959cbd] Ignore broken endpoints in get_catalog
  - [126440d] Ignore broken endpoints in get_v3_catalog
  - [c48ec38] No longer allow listing users by email
  - [18d4843] Fixes an issue with the XMLEquals matcher
  - [c6cd627] Implicitly ignore attributes that are mapped to None in LDAP
  - [8485dbc] Remove `with_lockmode` use from Trust SQL backend.
* d/p/fix-requirements.patch: Rebased.
* d/p/add-version-info.patch: Rebased.

Author: Pavel Kirpichyov
Revision Date: 2014-07-31 12:01:36 UTC

We do not want change this requirements

Author: Openstack Ubuntu Testing Bot
Revision Date: 2014-07-24 22:39:18 UTC

OpenStack Ubuntu Testing commit tracking:
    - [8d008af] qpid driver for oslo.messaging uses 'wrong' address for direct
      publisher LP: 1300318

Author: Corey Bryant
Revision Date: 2014-06-13 15:50:11 UTC

* Resynchronize with stable/icehouse (1716748) (LP: #1328134):
  - [4408625] sql migration: ensure using innodb utf8 for assignment table
  - [786af98] SQL and LDAP fixes for get_roles_for_user_and_project user=group ID
  - [e56fe4c] Updated from global requirements
  - [0bd819c] Removed duplication with list_user_ids_for_project
  - [b932321] Allow any attributes in mapping and include in results
  - [1716748] Treat LDAP attribute names as case-insensitive

Author: Chuck Short
Revision Date: 2014-04-20 23:14:18 UTC

debian/control: Open up juno release

Author: Chris Ricker
Revision Date: 2014-04-18 18:57:05 UTC

Bump EVR and rebuild

Author: Corey Bryant
Revision Date: 2014-04-08 12:42:13 UTC

New upstream release. (LP: #1298959)

Author: Corey Bryant
Revision Date: 2014-04-07 00:26:15 UTC

Resynchronize with stable/havana

Author: Corey Bryant
Revision Date: 2014-04-04 15:14:27 UTC

* Resynchronize with stable/havana (b85a531) (LP: #1302575):
  - [a96d1a4] User a more accurate max_delay for reconnects
  - [a120f25] Fix issue deleting ec2-credentials as non-admin user
  - [181c3c1] SQLAlchemy Change to support more strict dialect checking
  - [b6f0e26] Ensure tokens are added to both Trustor and Trustee indexes
  - [b85a531] Fix list_projects_for_endpoint failed bug

Author: Chuck Short
Revision Date: 2014-03-28 12:54:29 UTC

Clean up logrotate

Author: Chuck Short
Revision Date: 2014-03-24 16:52:35 UTC

2013.1.5

Author: Chuck Short
Revision Date: 2014-03-24 16:05:47 UTC

Update changelog

Author: Chris Ricker
Revision Date: 2014-02-14 15:32:40 UTC

Add new BRs for 2013.2.2 testing changes

Author: Chuck Short
Revision Date: 2014-01-23 17:32:14 UTC

releasing package keystone version 1:2014.1~b2-0ubuntu1

Author: Chuck Short
Revision Date: 2014-01-15 13:04:26 UTC

debian/patches/debian/patches/disable-oauth2.patch: Refreshed

Author: Chuck Short
Revision Date: 2013-12-16 15:09:52 UTC

Refreshed fix-ubuntu-tests.patch

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-12-15 23:01:39 UTC

OpenStack Ubuntu Testing commit tracking:
    - [2382569] Pin Sphinx to <1.2

Author: Yolanda Robla
Revision Date: 2013-12-10 13:16:48 UTC

debian/keystone.conf: add extra_headers section

Author: Chuck Short
Revision Date: 2013-12-06 16:57:38 UTC

Fix typo

Author: Chuck Short
Revision Date: 2013-12-05 19:30:13 UTC

releasing package keystone version 1:2014.1~b1-0ubuntu1

Author: Chuck Short
Revision Date: 2013-12-03 18:16:10 UTC

Add patch headers

Author: Chuck Short
Revision Date: 2013-10-17 14:22:58 UTC

releasing package keystone version 1:2013.2-0ubuntu1

Author: Chuck Short
Revision Date: 2013-10-16 16:24:15 UTC

Update

Author: Chuck Short
Revision Date: 2013-10-15 13:39:59 UTC

releasing package keystone version 1:2013.2~rc2-0ubuntu1

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-10-09 02:59:32 UTC

OpenStack Ubuntu Testing commit tracking:
    - [7244e53] Disabling a tenant would not disable a user token LP: 1179955

Author: Chuck Short
Revision Date: 2013-10-02 15:46:20 UTC

releasing package keystone version 1:2013.2~rc1-0ubuntu1

Author: Chuck Short
Revision Date: 2013-10-01 16:27:15 UTC

Fix up pydist-override

Author: Chuck Short
Revision Date: 2013-09-24 13:43:30 UTC

debian/patches/disable-oauth2.patch: Refreshed

Author: Chuck Short
Revision Date: 2013-09-20 18:06:14 UTC

* New upstream version.
* debian/control:
  - Add versioned dependencies to python-pbr, python-dogpile.cache,
    python-oslo.config, python-webob, python-pam, python-sqlalchemy,
    python-testtools, and python-requests.
  - Added python-greenlet, python-requests, python-netifaces,
    and python-setuptools as a build dependency.
  - Dropped python-swift, python-unittest as a build dependency
  - Bumped versioned depends for python-keystoneclient.

Author: <email address hidden>
Revision Date: 2013-08-19 14:00:18 UTC

debian/control: Add python-oauth2 as a build dependency.

Author: James Page
Revision Date: 2013-08-15 09:45:22 UTC

* d/patches/fix-ubuntu-tests.patch: Fixup for new tests location.
* d/patches/ubuntu-test-overrides.patch: Override testing defaults
  using patches.
* d/rules: Rework for patching approach for test_overrides.conf.
* d/tests/test_overrides.conf: Dropped - no longer required.
* d/control: Add python-netaddr to BD's.

Author: Chuck Short
Revision Date: 2013-08-12 19:09:09 UTC

* debian/control: Add python-babel as a build dependency.
* debian/patches/sql_connection.patch: Refreshed

Author: Chuck Short
Revision Date: 2013-08-06 14:57:02 UTC

debian/control: Add python-oslo.sphinx as a build dependency.

Author: Chuck Short
Revision Date: 2013-08-01 16:49:34 UTC

* New upstream release.
* debian/patches/fix-ubuntu-tests.patch: Refreshed.

Author: Chuck Short
Revision Date: 2013-07-19 13:25:41 UTC

releasing version 1:2013.2~b2-0ubuntu1

Author: Chuck Short
Revision Date: 2013-07-17 16:57:02 UTC

Refreshed patches

Author: Chris Ricker
Revision Date: 2013-07-09 04:36:17 UTC

Add patch to disable failing tests

Disable failing tests. See Bug #1190054

Author: Chuck Short
Revision Date: 2013-06-20 14:30:54 UTC

Refreshed patch

Author: Adam Gandelman
Revision Date: 2013-06-17 04:59:01 UTC

Rebased to include latest security updates.

Author: Adam Gandelman
Revision Date: 2013-06-12 18:17:36 UTC

TRIVIAL: d/keystone.install: Fix path to keystone-paste.ini

Author: Chris Ricker
Revision Date: 2013-06-11 13:57:02 UTC

Bump epoch to force build

Author: Chuck Short
Revision Date: 2013-06-06 18:10:33 UTC

Refreshed

Author: Yolanda Robla
Revision Date: 2013-06-03 14:07:45 UTC

modified import keystone

Author: Chuck Short
Revision Date: 2013-05-31 13:13:10 UTC

releasing version 1:2013.2~b1-0ubuntu1

Author: Chuck Short
Revision Date: 2013-05-28 14:16:26 UTC

* debian/control: Add python-pbr and python-d2to1.
* debian/patches/sql_connection.patch: Refreshed.

Author: Adam Gandelman
Revision Date: 2013-05-23 20:17:30 UTC

* Dropped patches, applied upstream:
  - debian/patches/CVE-2013-2059.patch: [992466d]

Author: Chuck Short
Revision Date: 2013-05-21 17:11:16 UTC

debian/patches/sql_connection.patch: Refreshed.

Author: Chuck Short
Revision Date: 2013-04-30 13:38:53 UTC

* New upstream version.
* debian/patches/fix-ubuntu-tests.patch: Refreshed.

Author: Yolanda Robla
Revision Date: 2013-04-24 15:49:17 UTC

Refreshed patches

Author: Yolanda Robla
Revision Date: 2013-04-11 07:45:30 UTC

[ Jamie Strandboge ]
* SECURITY UPDATE: fix token creation error handling
  - debian/patches/CVE-2013-0247.patch: validate size of user_id, username,
    password, tenant_name, tenant_id and token size to help guard against a
    denial of service via large log files filling the disk
  - CVE-2013-0247
    LP: 1121494 (CVE-2013-0282)
  - [8945567] DoS through XML entity expansion (CVE-2013-1664, CVE-2013-1665)
  - LP: 1100282, LP: 1100279
    tenant (LP: #1064914) - CVE-2012-5571
    (LP: #1040626) CVE-2012-3542

Author: Chuck Short
Revision Date: 2013-04-02 13:50:52 UTC

releasing version 1:2013.1~rc3-0ubuntu1

Author: Chuck Short
Revision Date: 2013-03-28 14:35:15 UTC

releasing version 1:2013.1~rc2-0ubuntu1

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-03-28 13:07:33 UTC

* Automated Ubuntu testing build:
* [af31ecd] Fix test coverage for v2 scoped auth xml response (bug
  1160504)
* [4965c83] keystone commands don't print any version information
* [3e55be0] Rename trust extension (bug 1158980)
* [4f75f84] Add a dereference option for ldap
* Automated Ubuntu testing build:
* [63b8a82] Move trusts to extension
* [53450e2] Enable emulation for domains
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* [a6df07e] Version bump to 2013.2
* [53450e2] Enable emulation for domains
* Automated Ubuntu testing build:
* [601d993] Allow trusts to be optional
* Automated Ubuntu testing build:
* [53450e2] Enable emulation for domains
* [7db01cd] Wrap config module and require manual setup (bug 1143998)
* [533bb01] Correct spacing in warning msg
* [550973b] Prohibit V3 V2 token intermix for resource in non-default
  domain (bug 1157430)
* [3353996] Properly handle emulated ldap enablement
* [5cb8e1f] Support for LDAP groups (bug #1092187)
* [cd3f58a] Validate domains unconditionally (bug 1130236)
* [a066b69] Fix live ldap tests
* [75637be] V2, V3 token intermix for unscoped tokens (bug 1156913)
* [975af8d] Pass project membership as dict in migration 015.
* [85910ce] Utilize legacy_endpoint_id column (bug 1154918)
* [7c07de1] Test default_project_id scoping (bug 1023502)
* [167a8b7] Fix XML handling of member links (bug 1156594)
* [050ad91] Revise docs to use keystoneclient.middleware.auth_token
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [90fcb99] Ensure delete domain removes all owned entities
* Automated Ubuntu testing build:
* [7c07de1] Test default_project_id scoping (bug 1023502)
* Automated Ubuntu testing build:
* [167a8b7] Fix XML handling of member links (bug 1156594)
* [eb4dd4a] extracting user and trust ids into normalized fields
* Automated Ubuntu testing build:
* [0a81b69] Discard null endpoints (bug 1152632)
* [eb4dd4a] extracting user and trust ids into normalized fields
* [c92b276] Remove duplicate password/token opts.
* [a80a1f8] xml_body returns backtrace on XMLSyntaxError
* [c515073] Fixes bug 1151747: broken XML translation for resource
  collections
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [2295db4] No parent exception to wrap
* [e551104] Migrate roles from metadata to user_project_metadata
* [3209db6] quiet route logging on skipped tests
* [fe28dda] Added test cases to improve LDAP project testing
* [82738b4] Remove TODO that didn't land in grizzly
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8e58384] duplicated trust tests
* [6853e18] Catch and log server exceptions
* [fe28dda] Added test cases to improve LDAP project testing
* [4ceaa57] Switch to final 1.1.0 oslo.config release
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* Automated Ubuntu testing build:
* [e551104] Migrate roles from metadata to user_project_metadata
* [6853e18] Catch and log server exceptions
* [fe28dda] Added test cases to improve LDAP project testing
* [4ceaa57] Switch to final 1.1.0 oslo.config release
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [f5edbae] Ensure tokens are revoked for relevant v3 api calls
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* [a6e2960] Explain LDAP page_size & default value
* Automated Ubuntu testing build:
* [6853e18] Catch and log server exceptions
* [f57f5ba] add belongs_to check
* [a6e2960] Explain LDAP page_size & default value
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b4adb6a] Improve tests for api protection and filtering
* [ca76e86] remove spurious roles check
* [f423429] cleanup trusts in controllers
* Automated Ubuntu testing build:
* [f57f5ba] add belongs_to check
* [ca76e86] remove spurious roles check
* [f423429] cleanup trusts in controllers
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [09e2fc7] Revert "update tests/__init__.py to verify openssl
  version"
* [ceefe7f] Revert "from tests import"
* [6308bf1] Run keystone server in debug mode.
* [806a2ca] bug 1133526
* [42bd756] Fix folsom -> grizzly role table migration issues (bug
  1119789)
* [d8599dc] from tests import
* [26ecdca] Change exception raised to Forbidden on trust_id
* [1e64378] Make getting user-domain roles backend independant
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [2dd6481] Make Keystone return v3 as part of the version api
* [a2c3636] Delete tokens for user
* [d8599dc] from tests import
* [31df378] v3 endpoints won't have legacy ID's (bug 1150930)
* [dd7d4fd] return 201 Created on POST request (bug1131119)
* [0297f6f] add missing attributes for group/project tables
  (bug1126021)
* [9789447] Remove unused methods from LDAP backed.
* [dea5eea] Move get_by_name to LdapBase.
* [38bf87b] fix typo in kvs backend
* [156f474] mark 2.0 API as stable
* [b1474da] unable to load certificate should abort request
* [ddd2216] Move auth plugins to 'keystone.auth.plugins' (bug 1136967)
* [26ecdca] Change exception raised to Forbidden on trust_id
* [be23b79] remove unused import
* [7b2d5a4] ports should be ints in config (bug 1137696)
* [c0f017c] Expand v3 trust test coverage
* [601eeb5] Trusts
* [ab6e552] bug 1134802: fix inconsistent format for expires_at and
  issued_at
* [a14b67e] Straighten out NotFound raising in LDAP backend.
* [1e64378] Make getting user-domain roles backend independant
* [7f20fee] Unpin pam dependency version
* [39f1260] keystone : Use Ec2Signer utility class from keystoneclient
* [eaab3c2] Remove obsolete *page[_marker] methods from LDAP backend.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a899227] Sync timeutils with oslo
* [83d08cf] Enable a parameters on ldap to allow paged_search of ldap
  queries This fixes bug 1083463
* [72ec89b] update tests/__init__.py to verify openssl version
* [7f20fee] Unpin pam dependency version
* [a198f59] Setup logging in keystone-manage command.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [bec8b31] Imported Translations from Transifex
* [a198f59] Setup logging in keystone-manage command.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [9fa6e0a] command line switch for short pep8 output.
* [250e671] bug 1131840: fix auth and token data for XML translation
* [b978211] domain_id_attributes in config.py have wrong default value
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5cfecdd] Convert api to controller
* Automated Ubuntu testing build:
* [f3d2a46] flatten payload for policy
* [1f7f1bd] Ensure keystone unittests do not leave CONF.policyfile in
  bad state
* Automated Ubuntu testing build:
* [547fddd] Move handle_conflicts decorator into sql
* [49a672a] Correct SQL migration 017 column name
* Automated Ubuntu testing build:
* [1f7f1bd] Ensure keystone unittests do not leave CONF.policyfile in
  bad state
* [0e0d5dc] Tests for domain-scoped tokens
* [43adc12] domain-scoping
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* [49a672a] Correct SQL migration 017 column name
* [a791f45] Change the default LDAP mapping for description.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5734375] Fix id_to_dn for creating objects
* [329aeca] Pass query filter attributes to policy engine
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* Automated Ubuntu testing build:
* [43adc12] domain-scoping
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* [408a1d5] enabled attribute emulation support
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [329aeca] Pass query filter attributes to policy engine
* [408a1d5] enabled attribute emulation support
* Automated Ubuntu testing build:
* [9f81293] v3 token API
* [408a1d5] enabled attribute emulation support
* [9572bfc] Ensure user and tenant enabled in EC2
* [2afe8e4] Disable XML entity parsing
* [159ffe4] make LDAP query scope configurable
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [f8a32f1] merging in fix from oslo upstream
* [cab6917] Remove old, outdated keystone devref docs
* [a7149c0] Update the Keystone policy engine to the latest openstack
  common
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [909c44a] Use oslo-config-2013.1b3
* Automated Ubuntu testing build:
* [9572bfc] Ensure user and tenant enabled in EC2
* [a7149c0] Update the Keystone policy engine to the latest openstack
  common
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [909c44a] Use oslo-config-2013.1b3
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [cab6917] Remove old, outdated keystone devref docs
* [d6f7cbc] Update sample_data.sh to match docs
* [838069b] Workaround Migration issue with PostgreSQL
* [63f6e87] make fakeldap._match_query work for an arbitrary number of
  groups
* [909c44a] Use oslo-config-2013.1b3
* [fb66ad8] Remove usage of UserRoleAssociation.id in LDAP
* [78b662e] Add an update option to run_tests.sh
* [beaad83] Add pysqlite as explicit test dep
* [8a2a2c7] Silence routes internal debug logging
* Automated Ubuntu testing build:
* [b20302a] project membership to role conversion
* [b1bfca2] Remove test_auth_token_middleware
* [838069b] Workaround Migration issue with PostgreSQL
* [63f6e87] make fakeldap._match_query work for an arbitrary number of
  groups
* [fb66ad8] Remove usage of UserRoleAssociation.id in LDAP
* [78b662e] Add an update option to run_tests.sh
* [beaad83] Add pysqlite as explicit test dep
* [0fb017a] add missing kvs functionality (bug1119770)
* [5e82d94] Update to oslo version code.
* [a6abeb7] adding additional backend tests (bug1101244)
* [83e989f] Cleaned up keystone-all --help output
* [9401709] Fix test_contrib_s3_core unit test
* [98cd383] remove unneeded config reloading (it's already done during
  setUp)
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a2a2c7] Silence routes internal debug logging
* [8a78126] don't create a new, copied list in get_project_users
* [34d0eb3] Fix bugs with set ldap password.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5cd2fa9] fix unit test when memcache middleware is not configured
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a78126] don't create a new, copied list in get_project_users
* Automated Ubuntu testing build:
* [a6abeb7] adding additional backend tests (bug1101244)
* [8a89464] Keystone backend preparation for domain-scoping
* [2ab990b] Use install_venv_common.py from oslo.
* [9401709] Fix test_contrib_s3_core unit test
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a78126] don't create a new, copied list in get_project_users
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ac6ee69] Fix spelling mistakes
* [2ab990b] Use install_venv_common.py from oslo.
* [cccbf8a] Spell accommodate correctly.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [8a89464] Keystone backend preparation for domain-scoping
* [cccbf8a] Spell accommodate correctly.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [2ab990b] Use install_venv_common.py from oslo.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [cccbf8a] Spell accommodate correctly.
* [43ec450] Add missing log_format, log_file, log_dir opts.
* [a5cd95e] simplify query building logic
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [3786352] Generate apache-style common access logs
* Automated Ubuntu testing build:
* [2889a6c] Missed import for IPv6 tests skip.
* [c213f48] remove duplicate model declaration/attribution
* [a5cd95e] simplify query building logic
* [41234c0] Expand dependency injection test coverage
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [31b61e0] Query only attributes strictly required for keystone when
  using it with existing LDAP servers
* [3786352] Generate apache-style common access logs
* [cdfbbc6] import tools/flakes from oslo
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [43ec450] Add missing log_format, log_file, log_dir opts.
* [329b00d] Fix normalize identity sql ugrade for Mysql and postgresql
* [c213f48] remove duplicate model declaration/attribution
* [a5cd95e] simplify query building logic
* [41234c0] Expand dependency injection test coverage
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [5342209] return 400 Bad Request if invalid params supplied
  (bug1061738)
* [4624638] UserApi.update not to require all fields in arg
* [31b61e0] Query only attributes strictly required for keystone when
  using it with existing LDAP servers
* [74e0e17] Update .coveragerc
* [8ec247b] Add size validations to token controller.
* [0bc423a] Imported Translations from Transifex
* [74c3e87] Delete Roles for User and Project LDAP
* [4cd7aba] Fixes 'not in' operator usage
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* [e6c5f7f] Adds png versions of all svg image files. Changes
  reference.
* [3786352] Generate apache-style common access logs
* [cdfbbc6] import tools/flakes from oslo
* [49447c2] Sync latest cfg from oslo-incubator
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [1573973] Relational API links
* [5342209] return 400 Bad Request if invalid params supplied
  (bug1061738)
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* Automated Ubuntu testing build:
* [4624638] UserApi.update not to require all fields in arg
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8ec247b] Add size validations to token controller.
* [0bc423a] Imported Translations from Transifex
* [74c3e87] Delete Roles for User and Project LDAP
* [08baaa4] Why .pop()'ing urls first is important
* [4cd7aba] Fixes 'not in' operator usage
* [4722c84] Updates migration 008 to work on PostgreSQL.
* [5bc46d8] Create a default domain (bp default-domain)
* [02da3af] Enable/disable domains (bug 1100145)
* [3ef0346] Readme: use 'doc' directory not 'docs'
* [a5b7fcf] Update to requests>=1.0.0 for keystoneclient.
* [0b2ef0d] Document user group LDAP options
* Automated Ubuntu testing build:
* [4b2b3af] tenant to project in the apis
* [02da3af] Enable/disable domains (bug 1100145)
* [3ef0346] Readme: use 'doc' directory not 'docs'
* [a5b7fcf] Update to requests>=1.0.0 for keystoneclient.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [31660b1] Tenant to Project in Back ends
* [3ef0346] Readme: use 'doc' directory not 'docs'
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [02da3af] Enable/disable domains (bug 1100145)
* [a7c6427] Fix role delete method in LDAP backend.
* [8eaa3ce] public_endpoint & admin_endpoint configuration
* [64ef907] Skip IPv6 tests if IPv6 is not supported.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [56f194a] rename tenant to project in sql
* Automated Ubuntu testing build:
* [dd35747] Fix pep8 error.
* Automated Ubuntu testing build:
* [7691276] Limit the size of HTTP requests.
* [f6b133d] Test that you can undo & re-apply all migrations
* [52da32c] Auto-detect max SQL migration
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* Automated Ubuntu testing build:
* [ed252e0] Allow running of sql against the live DB.
* [f6b133d] Test that you can undo & re-apply all migrations
* [acc810d] downgrade user and tenant normalized tables downgraded
  such that sqlite is supported, too
* [52da32c] Auto-detect max SQL migration
* [6c6915b] Safer data migrations
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* [7a4e373] Enhance wsgi to listen on ipv6 address
* [9c2c4ec] add database string field length check
* [57f1e30] Autoload schema before creating FK's (bug 1098174)
* [9089d8e] reorder tables for delete
* Automated Ubuntu testing build:
* [42bd9c7] Enable exception format checking in the tests.
* [24f21f5] Fix issue in test_forbidden_action_exposure.
* [2c1785a] Update ldap exceptions to pass correct kwargs.
* [8507261] Add _FATAL_EXCEPTION_FORMAT_ERRORS global.
* [617b700] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [9089d8e] reorder tables for delete
* [9af1d7b] Fixes import order nits
* [4e1cab8] Cleanup keystoneclient testing requirements
* [24f21f5] Fix issue in test_forbidden_action_exposure.
* [7490cab] Correct spelling errors / typos in test names
* [2c1785a] Update ldap exceptions to pass correct kwargs.
* [8507261] Add _FATAL_EXCEPTION_FORMAT_ERRORS global.
* [617b700] Imported Translations from Transifex
* [ba6b1c3] Revert "shorten pep8 output"
* [949fbbb] Removed unused variables
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [3a38ecf] Validated URLs in v2 endpoint creation API
* [7490cab] Correct spelling errors / typos in test names
* [ba6b1c3] Revert "shorten pep8 output"
* [949fbbb] Removed unused variables
* Automated Ubuntu testing build:
* [9af1d7b] Fixes import order nits
* [4fae928] Keystone server support for user groups
* [3244451] Add missing .po files to tarball
* [ba6b1c3] Revert "shorten pep8 output"
* [64672bd] Upgrade WebOb to 1.2.3
* [949fbbb] Removed unused variables
* [5a81be3] Removed unused imports
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1cab8] Cleanup keystoneclient testing requirements
* [3244451] Add missing .po files to tarball
* [ea282cb] adds keyring to test-requires
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4fae928] Keystone server support for user groups
* [0e5533e] il8n some strings
* [5a81be3] Removed unused imports
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* [64672bd] Upgrade WebOb to 1.2.3
* [5a81be3] Removed unused imports
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [0e5533e] il8n some strings
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* [76af49f] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [a0e06a8] Add pyflakes to tox.ini
* [0f22574] Adding a means to connect back to a pydevd debugger.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [1b3b642] Fix spelling typo
* [a591b30] add in pip requires for requests
* [e577cd6] Remove swift auth.
* Automated Ubuntu testing build:
* [03eb280] Driver registry
* [2f85134] Split endpoint records in SQL by interface
* [f74aab2] Expand default time delta (bug 1089988)
* [5b3a74d] Support non-default role_id_attribute
* [e577cd6] Remove swift auth.
* Automated Ubuntu testing build:
* [a591b30] add in pip requires for requests
* [f74aab2] Expand default time delta (bug 1089988)
* [5b3a74d] Support non-default role_id_attribute
* Automated Ubuntu testing build:
* [2f85134] Split endpoint records in SQL by interface
* [fb963a5] module refactoring
* [f74aab2] Expand default time delta (bug 1089988)
* [8e2a183] Test drivers return HTTP 501 Not Implemented
* [5b3a74d] Support non-default role_id_attribute
* [d17dfe6] Import pysqlite2 if sqlite3 is not available.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [23ba963] Fix typo s/interalurl/internalurl/
* [e093e81] Imported Translations from Transifex
* [6ceb066] fixing bug 1046862
* [e4d61ac] Add tests for contrib.s3.core.
* [8e2a183] Test drivers return HTTP 501 Not Implemented
* [d17dfe6] Import pysqlite2 if sqlite3 is not available.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [be3dcf9] Test for content-type appropriate 404 (bug 1089987)
* [e093e81] Imported Translations from Transifex
* [e4d61ac] Add tests for contrib.s3.core.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* [6ceb066] fixing bug 1046862
* [4e2be8a] Move token controller into keystone.token
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* [e4d61ac] Add tests for contrib.s3.core.
* Automated Ubuntu testing build:
* [4e2be8a] Move token controller into keystone.token
* [a800fae] Ensure serviceCatalog is list when empty, not dict
* [0ea864b] Adding downgrade steps for migration scripts.
* [847d591] Port to argparse based cfg
* [c858c1b] Only 'import *' from 'core' modules
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [aaf61a4] Remove mentions of essex in docs (bug 1085247)
* [847d591] Port to argparse based cfg
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a800fae] Ensure serviceCatalog is list when empty, not dict
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* Automated Ubuntu testing build:
* [c858c1b] Only 'import *' from 'core' modules
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* [5b73757] Validate password type (bug 1081861)
* Automated Ubuntu testing build:
* [af8761d] check the redirected path on the request, not the response
* [5b73757] Validate password type (bug 1081861)
* Automated Ubuntu testing build:
* [f57098d] split identities module into logical parts remove unneeded
  imports from core
* Automated Ubuntu testing build:
* [38c7e46] Ensure token expiration is maintained (bug 1079216)
* [d4c4cf0] Fixes typo in keystone setup doc
* [3779c67] Imported Translations from Transifex
* [904af11] Stop using cfg's internal implementation details
* Automated Ubuntu testing build:
* [1012bd4] normalize identity
* [3779c67] Imported Translations from Transifex
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d4c4cf0] Fixes typo in keystone setup doc
* [3779c67] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [904af11] Stop using cfg's internal implementation details
* [0e23490] Utilize policy.json by default (bug 1043758)
* [84cd8ff] Wrap v3 API with RBAC (bug 1023943)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [01fccdb] Expose auth failure details in debug mode
* [0e23490] Utilize policy.json by default (bug 1043758)
* [84cd8ff] Wrap v3 API with RBAC (bug 1023943)
* [ddc8c83] v3 Identity
* [ff669f0] v3 Catalog
* [827fc4c] v3 Policies
* [07525b1] Refix transient test failures
* [c7066a9] Expose authn/z failure info to API in debug mode
* [c740090] tweaking docs to fix link to wiki Keystone page
* Automated Ubuntu testing build:
* [e59360d] Import auth_token middleware from keystoneclient
* [07525b1] Refix transient test failures
* [90ebf9f] Make the controller addresses configurable.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a92b1da] Imported Translations from Transifex
* [90ebf9f] Make the controller addresses configurable.
* [9d68b40] Ensures User is member of tenant in ec2 validation
* [cdd7d65] populate table check.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [be754ff] Refactor TokenController.authenticate() method.
* [cdd7d65] populate table check.
* Automated Ubuntu testing build:
* [2b83d4d] Fix error un fixtures.
* [36c880e] Reduce total number of fixtures
* [411dde1] Run test_keystoneclient_sql in-memory
* [e19a62c] Make tox.ini run pep8 checks on bin.
* Automated Ubuntu testing build:
* [ac2d5b8] Properly list tokens with a null tenant
* [36c880e] Reduce total number of fixtures
* [001f708] Provide config file fields for enable users in LDAP
  backend (bug1067516)
* [411dde1] Run test_keystoneclient_sql in-memory
* [e19a62c] Make tox.ini run pep8 checks on bin.
* [8dcafd8] Various pep8 fixes for keystone.
* [164326b] Use the right subprocess based on os monkeypatch
* [a10bd7a] Fix transient test failures (bug 1077065, bug 1045962)
* [84e69a4] Rewrite initial migration
* [b446a77] Fix default port for identity.internalURL
* [28c52ac] Improve feedback on test failure
* [7cc02c8] fixes bug 1074172
* [0478276] SQL upgrade test.
* [2eea455] Include 'extra' attributes twice (bug 1076120)
* [fddacf7] bug 1069945: generate certs for the tests in one place
* [ef65550] monkeypatch cms Popen
* [5761a2c] HACKING compliance: consistent use of 'except'
* [3733170] Fixed typo in log message
* [399cb4c] Identity API v3 Config, Routers, Controllers
* Automated Ubuntu testing build:
* [df148a0] Return non-indexed attrs, not 'extra' (bug 1075376)
* [1eb9947] don't import filter_user name, use it from the identity
  module
* [fdcb856] don't modify the passed in dict to from_dict
* [0d02e12] move hashing user password functions to common/utils
* [d95d6bf] ignore .tox directory for pep8 in runtests
* [23bb7ec] Imported Translations from Transifex
* [f79f701] Implements REMOTE_USER authentication support.
* [27ae477] Ignore keystone.openstack for PEP8
* Automated Ubuntu testing build:
* [75496bb] auth_token hash pki key PKI tokens on hash in memcached
  when accessed by auth_token middelware
* [1eb9947] don't import filter_user name, use it from the identity
  module
* [fdcb856] don't modify the passed in dict to from_dict
* [0d02e12] move hashing user password functions to common/utils
* [d95d6bf] ignore .tox directory for pep8 in runtests
* [23bb7ec] Imported Translations from Transifex
* [f79f701] Implements REMOTE_USER authentication support.
* [27ae477] Ignore keystone.openstack for PEP8
* Automated Ubuntu testing build:
* [23aa49e] key all backends off of hash of pki token.
* [1eb9947] don't import filter_user name, use it from the identity
  module
* [fdcb856] don't modify the passed in dict to from_dict
* [0d02e12] move hashing user password functions to common/utils
* [d95d6bf] ignore .tox directory for pep8 in runtests
* Re-enable gating of package build based on successful unit testing:
  - d/tests/test_overrides.conf: Fixup test configuration to use
    correct certificate locations.
  - d/p/fix-ubuntu-tests.patch: Skip tests for older versions of
    keystoneclient based on checkouts of upstream git repo.
  - d/rules: Re-enable package build failure on test failure.
* d/control: Bump dependencies on python-keystoneclient to >= 1:0.2.
* d/control: Update Vcs-Bzr location to point to correct branch.
* d/control,d/po/*: Setup package templates for translation.
* d/man/*: Corrected spellings in man pages.
* d/keystone.upstart: Tweak 'stop on' to be triggered on all
  appropriate runlevel transitions, use start-stop-daemon to startup
  keystone daemon.
* debian/keystone.manpages: Install sphinx-generated manpages instead
  of our own outdated and unneeded versions. (LP: #1082050)
* New upstream release.
* Remove incomplete/broken dbconfig-common scripts.
* d/control: Added python-novaclient dependency
* d/patches: refreshed patches
* debian/tests/test_overrides.conf: Update for Grizzly test suite.
* debian/control: Drop python-nova.
* New upstream release.
* debian/rules: FTBFS if there is a missing binary.
* debian/rules: Temporarily pass the tests since you need to run
  keystone in order to run the tests.
* debian/patches/*: Refrehsed.
* New upstream release.
* debian/control: Ensure keystoneclient is upgraded with keystone,
  require python-keystoneclient >= 1:0.1.3. (LP: #1073273)
* Automated Ubuntu testing build:
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* [af8b031] Fixed trivally true tests (bug 983304)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1a086] Limit token revocation to tenant (bug 1050025)
* [af8b031] Fixed trivally true tests (bug 983304)
* [2c29d4c] LDAP backend attribute fixes
* [1683d84] Document memcached host system time configuration.
* [b6e568e] Implement token endpoint list (bug 1006777)
* [861f27f] LOG.warn all exception.Unauthorized authentication
  failures
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [efb6b3f] Delete user tokens after role grant/revoke
* [201a109] Cleanup PEP8 errors from Common
* Automated Ubuntu testing build:
* [235c4ce] Implementation of tenant,user,role list functions for ldap
* [201a109] Cleanup PEP8 errors from Common
* [685c1c2] PEP8 fix E251
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [fa9f0f1] Initialize Metadata variable
* [150413c] List tokens for memcached backend
* [32b82ae] Ignore eclipse files.
* [7d9b239] Sync some misc changes from openstack-common
* [e09a121] Sync latest cfg from openstack-common
* [a9ee611] Remove id_hash column
* [5446577] Upgrade PEP8 to 1.3.3 (bug 1037303)
* [4c32b5c] Expand PEP8 coverage to include docs & tests
* [ac95f83] Removed/fixed unused variable references
* [b82a0e2] HACKING compliance & staticly init module vars
* [685c1c2] PEP8 fix E251
* [7ad8497] PEP8 fix
* [7c93e84] Removed unused imports
* [026bea6] Fixed typos in comment
* [8a84c03] HACKING: Import by full module path
* [379354b] HACKING: Use single quotes
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a411412] Fixed: test_default_tenant_uuid_token not running
* [b82a0e2] HACKING compliance & staticly init module vars
* [7ad8497] PEP8 fix
* Automated Ubuntu testing build:
* [2759c22] Check for expected cfg impl (bug 1043479)
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* Automated Ubuntu testing build:
* [13ce482] mistake in doc string
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [6b04662] Removed dead code
* [3fa4ba5] Fix auth_token middleware to fetch revocation list as
  admin.
* [98d3a89] Code cleanup in doc/source/conf.py
* [067fcf0] Typo fix in keystone: existant => existent
* [1749644] allow middleware configuration from app config
* [1698094] change verbose and debug to Fasle in keystone.conf.sample
* [ddc8995] add token_format=UUID to keystone.conf.sample
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c13d0ba] Require authz to update user's tenant (bug 1040626)
* [1749644] allow middleware configuration from app config
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [212f13b] PEP8 fix for PAM test.
* [308ca89] Removed stray print statement (bug 1038131)
* [e0a7ebd] Add tests for PAM authentication.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d04e99a] Support running the tests in the debugger.
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [bf45b45] Remove unused variables
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build:
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [bf5ce27] Adding missing files to
  MANIFEST.in
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [37ff759] Simplify the sql backend
  deletion of users and tenants.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [9d5261c] Implement python version
  of migration 002.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [4f3dcb6] Allow overloading of
  username and tenant name in the config files.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [bf49594] fix sphinx warnings
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [002dd42] Fixed marker & limit
  computation (bug 1006055)
* Automated Ubuntu testing build: [bd94b4b] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [39b20ac] pep8 v1.3.3 compliance
  (bug 1019498)
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [0b5cf00] documenting models
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [abc0671] notify calling process we
  are ready to serve
* Automated Ubuntu testing build: [7297afc] Return a 409 error when
  adding a second time a role to user/tenant
* Automated Ubuntu testing build: [c3696ba] Use sdist tarball instead
  of zipball.
* Automated Ubuntu testing build: [81cb2ab] Move monkey patch to
  keystone-all startup.
* Automated Ubuntu testing build: [04df79b] Run pep8 for tests.
* Automated Ubuntu testing build: [c411125] pep8 for openssl
* Automated Ubuntu testing build: [e923518] Make sure user dict has id
  key before checking against it
* Automated Ubuntu testing build: [7cdae1b] Fixing pep8 errors in
  tests/*py
* Automated Ubuntu testing build: [4ab47ad] Adding user password
  setting api call
* Automated Ubuntu testing build: [2a909ee] Making docs pretty!
* Automated Ubuntu testing build: [8a94a9c] Removed redundant /
  excessively verbose debug
* Automated Ubuntu testing build: [9625c55] adding keystoneclient test
* Automated Ubuntu testing build: [60fa32b] updating testing
  documentation
* Automated Ubuntu testing build: [ae0515c] Admin Auth URI prefix
* Automated Ubuntu testing build: [86177df] Prevent service catalog
  injection in auth_token.
* Automated Ubuntu testing build: [4b97716] Webob needs body to calc
  Content-Length (bug 1016171)
* Automated Ubuntu testing build: [d061599] Fix the wrong infomation
  in keystone-manage.rst
* Automated Ubuntu testing build: [2a78594] Implementation of LDAP
  functions
* Automated Ubuntu testing build: [9b31383] Files for Apache-HTTPD
* Automated Ubuntu testing build: [4ebfdfa] Raise unauthorized if
  tenant disabled (bug 988920)
* Automated Ubuntu testing build: [0abf6ba] Debug output may include
  passwords (bug 1004114)
* Automated Ubuntu testing build: [ec363ac] Import ec2 credentials
  from old keystone db
* Automated Ubuntu testing build: [2806181] Added user name
  validation. Fixes bug 966251.
* Automated Ubuntu testing build: [5adb018] Sync jsonutils from
  openstack-common
* Automated Ubuntu testing build: [bcc0f6d] Cryptographically Signed
  tokens
* Automated Ubuntu testing build: [d2ecd61] Typo error in
  keystone/doc/source/configuration.rst.
* Automated Ubuntu testing build: [dada197] Test for Cert by name
* Automated Ubuntu testing build: [ba8f351] Assert adminness on token
  validation (bug 1030968)
* Automated Ubuntu testing build: [4444577] Set default signing_dir
  based on os USER.
* Automated Ubuntu testing build: [2b2d0a1] Log errors when
  signing/verifying.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [f82c7c2] Enabling SQL Catalog tests
  (bug 958950)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [f648819] Set iso8601 module as
  default dependence.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [5ad8086] keystone_manage
  certificate generation
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [c79d93b] Keystone should use
  openstack.common.timeutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [cb74707] Keystone should use
  openstack.common.jsonutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [23ca656] Refactor 404's into
  managers & drivers (bug 968519)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [a68d530] Fixed typo in routing
  conditions (bug 1006793)
* Automated Ubuntu testing build: [cc91786] Pass serviceCatalog in
  auth_token middleware
* Automated Ubuntu testing build: [79647c6] Reorder imports by full
  module path
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [3f9f77a] Monkey patching 'thread'.
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [79647c6] Reorder imports by full module path
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [e33a474] Clean up test requires a bit.
* [3ed1caf] Tweak for easier, safer subclassing
* [375838c] Carrying over token expiry time when token chaining
* Automated Ubuntu testing build:
* [b2aa78b] Use cfg's new global CONF object
* [3ed1caf] Tweak for easier, safer subclassing
* [375838c] Carrying over token expiry time when token chaining
* [8680549] Require authz for user role list (bug 1006815)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b2aa620] Add s3 extension in keystone.conf sample.
* [b71fb3d] fix importing of optional modules in auth_token
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c785018] Revert file mode to be non-executable
* [1d146f5] Require authz for service CRUD (bug 1006822)
* [d2619f1] Use cfg's new behavior of reset() clearing overrides
* [65ec652] Use cfg's new group autocreation feature
* [dd14b16] Sync with latest version of openstack.common.cfg
* [daf395b] Use X_USER_NAME and X_ROLES headers.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [17723a6] Keystone should use openstack.common.importutils
* Automated Ubuntu testing build:
* [4bfa203] PEP8 fixes
* [bb2fbb7] Fixes some pep8 warning/errors.
* [055d073] Update swift_auth documentation.
* [30654a6] Add ACL check using <tenant_id>:<user> format.
* [bcb12ef] Allow other middleware overriding authentication.
* [2ee73cc] Changed arguments in keystone CLI for consistency.
* [012c3d3] One 'ctrl-c' kills keystone.
* [bc803a4] Make sure we parse delay_auth_decision as boolean.
* Automated Ubuntu testing build:
* [f537a82] blueprint 2-way-ssl
* [055d073] Update swift_auth documentation.
* [30654a6] Add ACL check using <tenant_id>:<user> format.
* [bcb12ef] Allow other middleware overriding authentication.
* [2ee73cc] Changed arguments in keystone CLI for consistency.
* [012c3d3] One 'ctrl-c' kills keystone.
* [bc803a4] Make sure we parse delay_auth_decision as boolean.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [bb2fbb7] Fixes some pep8 warning/errors.
* [628149b] Invalidate user tokens when a user is disabled
* [19b6076] Add validations of 'name' field for roles, users and
  tenants.
* [6c5f7d9] notify calling process we are ready to serve
* [c2255ed] Corrects url conversion in export_legacy_catalog
* [fd7df12] Truly handle mailmap entries for all combinations.
* [5ad37eb] fix pam admin user case
* Automated Ubuntu testing build:
* [7a7a0c6] Backslash continuation removal (Keystone folsom-1)
* [56492c2] Nail prettytable test dependency at 0.5.0.
* [628149b] Invalidate user tokens when a user is disabled
* [19b6076] Add validations of 'name' field for roles, users and
  tenants.
* [05d6150] Added 'NormalizingFilter' middleware.
* [6c5f7d9] notify calling process we are ready to serve
* [b69dbc2] Added tenant name validation. Fixes bug 966249.
* [c2255ed] Corrects url conversion in export_legacy_catalog
* [fd7df12] Truly handle mailmap entries for all combinations.
* [5ad37eb] fix pam admin user case
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d3b2e0a] Remove service_* from authtoken examples
* [56492c2] Nail prettytable test dependency at 0.5.0.
* Automated Ubuntu testing build:
* [e0447e4] Fix depricated /users/{user-id}/roles
* [a67b248] Invalidate user tokens when password is changed
* Automated Ubuntu testing build:
* [2e912f4] Flush tenant membership deletion before user
* [a67b248] Invalidate user tokens when password is changed
* [cf1c5e1] Improve the sample keystone.conf
* [812bed8] Add defaults for ldap options
* [9b5d9ad] Set defaults for sql options
* [749dc34] Set defaults for port options
* [ff149be] Add defaults for driver options
* [f58ca2b] Use ConfigOpts.find_file() to locate catalog template
* [fab5844] Use ConfigOpts.find_file() to locate policy.json
* [352839b] Policy doc updates; RST syntax consistency
* [6384281] cleanup dependent data upon user/tenant deletion
* [310c653] Avoid ValueError in 12.04 essex pkg (bug 988523)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8dc3baa] Sync to newer openstack-common
* [352839b] Policy doc updates; RST syntax consistency
* [422aeba] Removed SimpleMatch 'shim'; updated readme
* [4c842ca] Removed old sections; improved syntax consistency
* [db19e0f] Update tests to run servers on 127.0.0.1

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-03-28 12:53:24 UTC

* Automated Ubuntu testing build:
* [af31ecd] Fix test coverage for v2 scoped auth xml response (bug
  1160504)
* [4965c83] keystone commands don't print any version information
* Automated Ubuntu testing build:
* [3e55be0] Rename trust extension (bug 1158980)
* Automated Ubuntu testing build:
* [4f75f84] Add a dereference option for ldap
* Automated Ubuntu testing build:
* [63b8a82] Move trusts to extension
* [53450e2] Enable emulation for domains
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* [a6df07e] Version bump to 2013.2
* [53450e2] Enable emulation for domains
* Automated Ubuntu testing build:
* [601d993] Allow trusts to be optional
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [53450e2] Enable emulation for domains
* [533bb01] Correct spacing in warning msg
* [550973b] Prohibit V3 V2 token intermix for resource in non-default
  domain (bug 1157430)
* [3353996] Properly handle emulated ldap enablement
* [cd3f58a] Validate domains unconditionally (bug 1130236)
* Automated Ubuntu testing build:
* [7db01cd] Wrap config module and require manual setup (bug 1143998)
* [550973b] Prohibit V3 V2 token intermix for resource in non-default
  domain (bug 1157430)
* [3353996] Properly handle emulated ldap enablement
* [cd3f58a] Validate domains unconditionally (bug 1130236)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [533bb01] Correct spacing in warning msg
* Automated Ubuntu testing build:
* [5cb8e1f] Support for LDAP groups (bug #1092187)
* Automated Ubuntu testing build:
* [a066b69] Fix live ldap tests
* [975af8d] Pass project membership as dict in migration 015.
* [050ad91] Revise docs to use keystoneclient.middleware.auth_token
* Automated Ubuntu testing build:
* [75637be] V2, V3 token intermix for unscoped tokens (bug 1156913)
* [85910ce] Utilize legacy_endpoint_id column (bug 1154918)
* [050ad91] Revise docs to use keystoneclient.middleware.auth_token
* Automated Ubuntu testing build:
* [975af8d] Pass project membership as dict in migration 015.
* [85910ce] Utilize legacy_endpoint_id column (bug 1154918)
* [7c07de1] Test default_project_id scoping (bug 1023502)
* [167a8b7] Fix XML handling of member links (bug 1156594)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [90fcb99] Ensure delete domain removes all owned entities
* Automated Ubuntu testing build:
* [7c07de1] Test default_project_id scoping (bug 1023502)
* Automated Ubuntu testing build:
* [167a8b7] Fix XML handling of member links (bug 1156594)
* [eb4dd4a] extracting user and trust ids into normalized fields
* Automated Ubuntu testing build:
* [0a81b69] Discard null endpoints (bug 1152632)
* [eb4dd4a] extracting user and trust ids into normalized fields
* [c92b276] Remove duplicate password/token opts.
* [a80a1f8] xml_body returns backtrace on XMLSyntaxError
* [c515073] Fixes bug 1151747: broken XML translation for resource
  collections
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [2295db4] No parent exception to wrap
* [e551104] Migrate roles from metadata to user_project_metadata
* [3209db6] quiet route logging on skipped tests
* [fe28dda] Added test cases to improve LDAP project testing
* [82738b4] Remove TODO that didn't land in grizzly
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8e58384] duplicated trust tests
* [6853e18] Catch and log server exceptions
* [fe28dda] Added test cases to improve LDAP project testing
* [4ceaa57] Switch to final 1.1.0 oslo.config release
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* Automated Ubuntu testing build:
* [e551104] Migrate roles from metadata to user_project_metadata
* [6853e18] Catch and log server exceptions
* [fe28dda] Added test cases to improve LDAP project testing
* [4ceaa57] Switch to final 1.1.0 oslo.config release
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [f5edbae] Ensure tokens are revoked for relevant v3 api calls
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* [a6e2960] Explain LDAP page_size & default value
* Automated Ubuntu testing build:
* [6853e18] Catch and log server exceptions
* [f57f5ba] add belongs_to check
* [a6e2960] Explain LDAP page_size & default value
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b4adb6a] Improve tests for api protection and filtering
* [ca76e86] remove spurious roles check
* [f423429] cleanup trusts in controllers
* Automated Ubuntu testing build:
* [f57f5ba] add belongs_to check
* [ca76e86] remove spurious roles check
* [f423429] cleanup trusts in controllers
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [09e2fc7] Revert "update tests/__init__.py to verify openssl
  version"
* [ceefe7f] Revert "from tests import"
* [6308bf1] Run keystone server in debug mode.
* [806a2ca] bug 1133526
* [42bd756] Fix folsom -> grizzly role table migration issues (bug
  1119789)
* [d8599dc] from tests import
* [26ecdca] Change exception raised to Forbidden on trust_id
* [1e64378] Make getting user-domain roles backend independant
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [2dd6481] Make Keystone return v3 as part of the version api
* [a2c3636] Delete tokens for user
* [d8599dc] from tests import
* [31df378] v3 endpoints won't have legacy ID's (bug 1150930)
* [dd7d4fd] return 201 Created on POST request (bug1131119)
* [0297f6f] add missing attributes for group/project tables
  (bug1126021)
* [9789447] Remove unused methods from LDAP backed.
* [dea5eea] Move get_by_name to LdapBase.
* [38bf87b] fix typo in kvs backend
* [156f474] mark 2.0 API as stable
* [b1474da] unable to load certificate should abort request
* [ddd2216] Move auth plugins to 'keystone.auth.plugins' (bug 1136967)
* [26ecdca] Change exception raised to Forbidden on trust_id
* [be23b79] remove unused import
* [7b2d5a4] ports should be ints in config (bug 1137696)
* [c0f017c] Expand v3 trust test coverage
* [601eeb5] Trusts
* [ab6e552] bug 1134802: fix inconsistent format for expires_at and
  issued_at
* [a14b67e] Straighten out NotFound raising in LDAP backend.
* [1e64378] Make getting user-domain roles backend independant
* [7f20fee] Unpin pam dependency version
* [39f1260] keystone : Use Ec2Signer utility class from keystoneclient
* [eaab3c2] Remove obsolete *page[_marker] methods from LDAP backend.
* Automated Ubuntu testing build:
* [a899227] Sync timeutils with oslo
* [83d08cf] Enable a parameters on ldap to allow paged_search of ldap
  queries This fixes bug 1083463
* [72ec89b] update tests/__init__.py to verify openssl version
* [7f20fee] Unpin pam dependency version
* [a198f59] Setup logging in keystone-manage command.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [bec8b31] Imported Translations from Transifex
* [a198f59] Setup logging in keystone-manage command.
* Automated Ubuntu testing build:
* No change rebuild.
* d/watch: Update uversionmangle to deal with upstream versioning
  changes, remove tarballs.openstack.org.
* d/rules: Stop using packaging specific test overrides when
  running unit tests.
* New upstream release.
* debian/control: Clean-up build-depends
  - Dropped pylint not needed.
  - Dropped python-all-dev and python-support not needed.
  - Renamed python-oslo-config to python-oslo.config.
  - Dropped python-prettytable no longer needed.
  - Dropped pyhthon-novaclient no longer needed.
  - Dropped pep8 no longer needed.
 * debian/control:Clean-up depends:
  - Dropped python-prettytable no longer needed.
 * Update standards
* d/control: Bump python-keystoneclient version requirement to >= 1:0.2.3.
* debian/keystone.postinst: Run pki_setup during configure to intitialize
  PKI infrastructure for signed tokens (now enabled by default).
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [9fa6e0a] command line switch for short pep8 output.
* [250e671] bug 1131840: fix auth and token data for XML translation
* [b978211] domain_id_attributes in config.py have wrong default value
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5cfecdd] Convert api to controller
* Automated Ubuntu testing build:
* [f3d2a46] flatten payload for policy
* [1f7f1bd] Ensure keystone unittests do not leave CONF.policyfile in
  bad state
* Automated Ubuntu testing build:
* [547fddd] Move handle_conflicts decorator into sql
* [49a672a] Correct SQL migration 017 column name
* Automated Ubuntu testing build:
* [1f7f1bd] Ensure keystone unittests do not leave CONF.policyfile in
  bad state
* [0e0d5dc] Tests for domain-scoped tokens
* [43adc12] domain-scoping
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* [49a672a] Correct SQL migration 017 column name
* [a791f45] Change the default LDAP mapping for description.
* Automated Ubuntu testing build:
* No change rebuild.
* New upstream version.
* debian/patches/sql_connection.patch: Rediffed
* debian/control: Add python-oslo-config.
* Refreshed patches.
* d/keystone.template,po: Removed debconf detritus from packaging.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5734375] Fix id_to_dn for creating objects
* [329aeca] Pass query filter attributes to policy engine
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* Automated Ubuntu testing build:
* [43adc12] domain-scoping
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* [408a1d5] enabled attribute emulation support
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [329aeca] Pass query filter attributes to policy engine
* [408a1d5] enabled attribute emulation support
* Automated Ubuntu testing build:
* [9f81293] v3 token API
* [408a1d5] enabled attribute emulation support
* [9572bfc] Ensure user and tenant enabled in EC2
* [2afe8e4] Disable XML entity parsing
* [159ffe4] make LDAP query scope configurable
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [f8a32f1] merging in fix from oslo upstream
* [cab6917] Remove old, outdated keystone devref docs
* [a7149c0] Update the Keystone policy engine to the latest openstack
  common
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [909c44a] Use oslo-config-2013.1b3
* Automated Ubuntu testing build:
* [9572bfc] Ensure user and tenant enabled in EC2
* [a7149c0] Update the Keystone policy engine to the latest openstack
  common
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [909c44a] Use oslo-config-2013.1b3
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [cab6917] Remove old, outdated keystone devref docs
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [838069b] Workaround Migration issue with PostgreSQL
* [63f6e87] make fakeldap._match_query work for an arbitrary number of
  groups
* [909c44a] Use oslo-config-2013.1b3
* [fb66ad8] Remove usage of UserRoleAssociation.id in LDAP
* [78b662e] Add an update option to run_tests.sh
* [beaad83] Add pysqlite as explicit test dep
* [8a2a2c7] Silence routes internal debug logging
* Automated Ubuntu testing build:
* [b20302a] project membership to role conversion
* [b1bfca2] Remove test_auth_token_middleware
* [838069b] Workaround Migration issue with PostgreSQL
* [63f6e87] make fakeldap._match_query work for an arbitrary number of
  groups
* [fb66ad8] Remove usage of UserRoleAssociation.id in LDAP
* [78b662e] Add an update option to run_tests.sh
* [beaad83] Add pysqlite as explicit test dep
* [0fb017a] add missing kvs functionality (bug1119770)
* [5e82d94] Update to oslo version code.
* [a6abeb7] adding additional backend tests (bug1101244)
* [83e989f] Cleaned up keystone-all --help output
* [9401709] Fix test_contrib_s3_core unit test
* [98cd383] remove unneeded config reloading (it's already done during
  setUp)
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a2a2c7] Silence routes internal debug logging
* [8a78126] don't create a new, copied list in get_project_users
* [34d0eb3] Fix bugs with set ldap password.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5cd2fa9] fix unit test when memcache middleware is not configured
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a78126] don't create a new, copied list in get_project_users
* Automated Ubuntu testing build:
* [a6abeb7] adding additional backend tests (bug1101244)
* [8a89464] Keystone backend preparation for domain-scoping
* [2ab990b] Use install_venv_common.py from oslo.
* [9401709] Fix test_contrib_s3_core unit test
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a78126] don't create a new, copied list in get_project_users
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ac6ee69] Fix spelling mistakes
* [2ab990b] Use install_venv_common.py from oslo.
* [cccbf8a] Spell accommodate correctly.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [8a89464] Keystone backend preparation for domain-scoping
* [cccbf8a] Spell accommodate correctly.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [2ab990b] Use install_venv_common.py from oslo.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [cccbf8a] Spell accommodate correctly.
* [43ec450] Add missing log_format, log_file, log_dir opts.
* [a5cd95e] simplify query building logic
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [3786352] Generate apache-style common access logs
* Automated Ubuntu testing build:
* [2889a6c] Missed import for IPv6 tests skip.
* [43ec450] Add missing log_format, log_file, log_dir opts.
* [329b00d] Fix normalize identity sql ugrade for Mysql and postgresql
* [c213f48] remove duplicate model declaration/attribution
* [a5cd95e] simplify query building logic
* [41234c0] Expand dependency injection test coverage
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [5342209] return 400 Bad Request if invalid params supplied
  (bug1061738)
* [4624638] UserApi.update not to require all fields in arg
* [31b61e0] Query only attributes strictly required for keystone when
  using it with existing LDAP servers
* [74e0e17] Update .coveragerc
* [8ec247b] Add size validations to token controller.
* [0bc423a] Imported Translations from Transifex
* [74c3e87] Delete Roles for User and Project LDAP
* [4cd7aba] Fixes 'not in' operator usage
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* [e6c5f7f] Adds png versions of all svg image files. Changes
  reference.
* [3786352] Generate apache-style common access logs
* [cdfbbc6] import tools/flakes from oslo
* [49447c2] Sync latest cfg from oslo-incubator
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [1573973] Relational API links
* [5342209] return 400 Bad Request if invalid params supplied
  (bug1061738)
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* Automated Ubuntu testing build:
* [4624638] UserApi.update not to require all fields in arg
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8ec247b] Add size validations to token controller.
* [74c3e87] Delete Roles for User and Project LDAP
* [4cd7aba] Fixes 'not in' operator usage
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [0bc423a] Imported Translations from Transifex
* [0b2ef0d] Document user group LDAP options
* Automated Ubuntu testing build:
* [08baaa4] Why .pop()'ing urls first is important
* [0b2ef0d] Document user group LDAP options
* Automated Ubuntu testing build:
* [4722c84] Updates migration 008 to work on PostgreSQL.
* [5bc46d8] Create a default domain (bp default-domain)
* [02da3af] Enable/disable domains (bug 1100145)
* [3ef0346] Readme: use 'doc' directory not 'docs'
* [a5b7fcf] Update to requests>=1.0.0 for keystoneclient.
* [0b2ef0d] Document user group LDAP options
* Automated Ubuntu testing build:
* [4b2b3af] tenant to project in the apis
* [02da3af] Enable/disable domains (bug 1100145)
* [3ef0346] Readme: use 'doc' directory not 'docs'
* [a5b7fcf] Update to requests>=1.0.0 for keystoneclient.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [31660b1] Tenant to Project in Back ends
* [3ef0346] Readme: use 'doc' directory not 'docs'
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [02da3af] Enable/disable domains (bug 1100145)
* [a7c6427] Fix role delete method in LDAP backend.
* [8eaa3ce] public_endpoint & admin_endpoint configuration
* [64ef907] Skip IPv6 tests if IPv6 is not supported.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [56f194a] rename tenant to project in sql
* Automated Ubuntu testing build:
* [dd35747] Fix pep8 error.
* Automated Ubuntu testing build:
* [7691276] Limit the size of HTTP requests.
* [f6b133d] Test that you can undo & re-apply all migrations
* [52da32c] Auto-detect max SQL migration
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* Automated Ubuntu testing build:
* [ed252e0] Allow running of sql against the live DB.
* [52da32c] Auto-detect max SQL migration
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* Automated Ubuntu testing build:
* [acc810d] downgrade user and tenant normalized tables downgraded
  such that sqlite is supported, too
* [6c6915b] Safer data migrations
* Automated Ubuntu testing build:
* [52da32c] Auto-detect max SQL migration
* [6c6915b] Safer data migrations
* [7a4e373] Enhance wsgi to listen on ipv6 address
* Automated Ubuntu testing build:
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* Automated Ubuntu testing build:
* [7a4e373] Enhance wsgi to listen on ipv6 address
* [9c2c4ec] add database string field length check
* Automated Ubuntu testing build:
* [57f1e30] Autoload schema before creating FK's (bug 1098174)
* [9089d8e] reorder tables for delete
* Automated Ubuntu testing build:
* [42bd9c7] Enable exception format checking in the tests.
* [9089d8e] reorder tables for delete
* [9af1d7b] Fixes import order nits
* [4e1cab8] Cleanup keystoneclient testing requirements
* [24f21f5] Fix issue in test_forbidden_action_exposure.
* [7490cab] Correct spelling errors / typos in test names
* [2c1785a] Update ldap exceptions to pass correct kwargs.
* [8507261] Add _FATAL_EXCEPTION_FORMAT_ERRORS global.
* [617b700] Imported Translations from Transifex
* [ba6b1c3] Revert "shorten pep8 output"
* [949fbbb] Removed unused variables
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [3a38ecf] Validated URLs in v2 endpoint creation API
* [7490cab] Correct spelling errors / typos in test names
* [617b700] Imported Translations from Transifex
* [ba6b1c3] Revert "shorten pep8 output"
* [949fbbb] Removed unused variables
* Automated Ubuntu testing build:
* [9af1d7b] Fixes import order nits
* [4fae928] Keystone server support for user groups
* [3244451] Add missing .po files to tarball
* [ba6b1c3] Revert "shorten pep8 output"
* [64672bd] Upgrade WebOb to 1.2.3
* [949fbbb] Removed unused variables
* [5a81be3] Removed unused imports
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1cab8] Cleanup keystoneclient testing requirements
* [3244451] Add missing .po files to tarball
* [ea282cb] adds keyring to test-requires
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4fae928] Keystone server support for user groups
* [0e5533e] il8n some strings
* [5a81be3] Removed unused imports
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* [64672bd] Upgrade WebOb to 1.2.3
* [5a81be3] Removed unused imports
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* [0e5533e] il8n some strings
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [76af49f] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [a0e06a8] Add pyflakes to tox.ini
* [0f22574] Adding a means to connect back to a pydevd debugger.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [1b3b642] Fix spelling typo
* [a591b30] add in pip requires for requests
* [e577cd6] Remove swift auth.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [03eb280] Driver registry
* [2f85134] Split endpoint records in SQL by interface
* [f74aab2] Expand default time delta (bug 1089988)
* [5b3a74d] Support non-default role_id_attribute
* Automated Ubuntu testing build:
* [a591b30] add in pip requires for requests
* [f74aab2] Expand default time delta (bug 1089988)
* [5b3a74d] Support non-default role_id_attribute
* Automated Ubuntu testing build:
* [2f85134] Split endpoint records in SQL by interface
* [fb963a5] module refactoring
* [f74aab2] Expand default time delta (bug 1089988)
* [8e2a183] Test drivers return HTTP 501 Not Implemented
* [5b3a74d] Support non-default role_id_attribute
* [d17dfe6] Import pysqlite2 if sqlite3 is not available.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [23ba963] Fix typo s/interalurl/internalurl/
* [e093e81] Imported Translations from Transifex
* [6ceb066] fixing bug 1046862
* [e4d61ac] Add tests for contrib.s3.core.
* [8e2a183] Test drivers return HTTP 501 Not Implemented
* [d17dfe6] Import pysqlite2 if sqlite3 is not available.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [be3dcf9] Test for content-type appropriate 404 (bug 1089987)
* [e093e81] Imported Translations from Transifex
* [e4d61ac] Add tests for contrib.s3.core.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* [6ceb066] fixing bug 1046862
* [e4d61ac] Add tests for contrib.s3.core.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* [4e2be8a] Move token controller into keystone.token
* [a800fae] Ensure serviceCatalog is list when empty, not dict
* [0ea864b] Adding downgrade steps for migration scripts.
* [847d591] Port to argparse based cfg
* [c858c1b] Only 'import *' from 'core' modules
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [aaf61a4] Remove mentions of essex in docs (bug 1085247)
* [847d591] Port to argparse based cfg
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a800fae] Ensure serviceCatalog is list when empty, not dict
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* Automated Ubuntu testing build:
* [c858c1b] Only 'import *' from 'core' modules
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* [5b73757] Validate password type (bug 1081861)
* Automated Ubuntu testing build:
* [af8761d] check the redirected path on the request, not the response
* [5b73757] Validate password type (bug 1081861)
* Automated Ubuntu testing build:
* [f57098d] split identities module into logical parts remove unneeded
  imports from core
* Automated Ubuntu testing build:
* [38c7e46] Ensure token expiration is maintained (bug 1079216)
* [d4c4cf0] Fixes typo in keystone setup doc
* [3779c67] Imported Translations from Transifex
* [904af11] Stop using cfg's internal implementation details
* Automated Ubuntu testing build:
* [1012bd4] normalize identity
* [3779c67] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [d4c4cf0] Fixes typo in keystone setup doc
* [3779c67] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [904af11] Stop using cfg's internal implementation details
* [0e23490] Utilize policy.json by default (bug 1043758)
* [84cd8ff] Wrap v3 API with RBAC (bug 1023943)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [01fccdb] Expose auth failure details in debug mode
* [0e23490] Utilize policy.json by default (bug 1043758)
* [84cd8ff] Wrap v3 API with RBAC (bug 1023943)
* [ddc8c83] v3 Identity
* [ff669f0] v3 Catalog
* [827fc4c] v3 Policies
* [07525b1] Refix transient test failures
* [c7066a9] Expose authn/z failure info to API in debug mode
* [c740090] tweaking docs to fix link to wiki Keystone page
* Automated Ubuntu testing build:
* [e59360d] Import auth_token middleware from keystoneclient
* [07525b1] Refix transient test failures
* [90ebf9f] Make the controller addresses configurable.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a92b1da] Imported Translations from Transifex
* [90ebf9f] Make the controller addresses configurable.
* [be754ff] Refactor TokenController.authenticate() method.
* [2b83d4d] Fix error un fixtures.
* [9d68b40] Ensures User is member of tenant in ec2 validation
* Re-enable gating of package build based on successful unit testing:
  - d/tests/test_overrides.conf: Fixup test configuration to use
    correct certificate locations.
  - d/p/fix-ubuntu-tests.patch: Skip tests for older versions of
    keystoneclient based on checkouts of upstream git repo.
  - d/rules: Re-enable package build failure on test failure.
* d/control: Bump dependencies on python-keystoneclient to >= 1:0.2.
* d/control: Update Vcs-Bzr location to point to correct branch.
* d/control,d/po/*: Setup package templates for translation.
* d/man/*: Corrected spellings in man pages.
* d/keystone.upstart: Tweak 'stop on' to be triggered on all
  appropriate runlevel transitions, use start-stop-daemon to startup
  keystone daemon.
* debian/keystone.manpages: Install sphinx-generated manpages instead
  of our own outdated and unneeded versions. (LP: #1082050)
* New upstream release.
* Remove incomplete/broken dbconfig-common scripts.
* d/control: Added python-novaclient dependency
* d/patches: refreshed patches
* debian/tests/test_overrides.conf: Update for Grizzly test suite.
* debian/control: Drop python-nova.
* New upstream release.
* debian/rules: FTBFS if there is a missing binary.
* debian/rules: Temporarily pass the tests since you need to run
  keystone in order to run the tests.
* debian/patches/*: Refrehsed.
* New upstream release.
* debian/control: Ensure keystoneclient is upgraded with keystone,
  require python-keystoneclient >= 1:0.1.3. (LP: #1073273)
* Automated Ubuntu testing build:
* [ee645e6] pin sqlalchemy to 0.7
* Automated Ubuntu testing build:
* [094c494] replacing PKI token detection from content length to
  content prefix. (bug 1060389)
* [3cd343b] Fixed bug 1068851. Refreshed new crypto for the SSL tests.
* [2f9807e] Set defaultbranch in .gitreview to stable/folsom
* [b0bbd8a] Bump next version to 2012.2.1
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* Automated Ubuntu testing build:
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* [af8b031] Fixed trivally true tests (bug 983304)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1a086] Limit token revocation to tenant (bug 1050025)
* [af8b031] Fixed trivally true tests (bug 983304)
* [2c29d4c] LDAP backend attribute fixes
* [1683d84] Document memcached host system time configuration.
* [b6e568e] Implement token endpoint list (bug 1006777)
* [861f27f] LOG.warn all exception.Unauthorized authentication
  failures
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [efb6b3f] Delete user tokens after role grant/revoke
* [235c4ce] Implementation of tenant,user,role list functions for ldap
* [fa9f0f1] Initialize Metadata variable
* [201a109] Cleanup PEP8 errors from Common
* [150413c] List tokens for memcached backend
* [32b82ae] Ignore eclipse files.
* [7d9b239] Sync some misc changes from openstack-common
* [e09a121] Sync latest cfg from openstack-common
* [a9ee611] Remove id_hash column
* [a411412] Fixed: test_default_tenant_uuid_token not running
* [5446577] Upgrade PEP8 to 1.3.3 (bug 1037303)
* [4c32b5c] Expand PEP8 coverage to include docs & tests
* [ac95f83] Removed/fixed unused variable references
* [b82a0e2] HACKING compliance & staticly init module vars
* [685c1c2] PEP8 fix E251
* [7ad8497] PEP8 fix
* [7c93e84] Removed unused imports
* [2759c22] Check for expected cfg impl (bug 1043479)
* [026bea6] Fixed typos in comment
* [8a84c03] HACKING: Import by full module path
* [379354b] HACKING: Use single quotes
* [13ce482] mistake in doc string
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [6b04662] Removed dead code
* [3fa4ba5] Fix auth_token middleware to fetch revocation list as
  admin.
* [98d3a89] Code cleanup in doc/source/conf.py
* [067fcf0] Typo fix in keystone: existant => existent
* [1749644] allow middleware configuration from app config
* [1698094] change verbose and debug to Fasle in keystone.conf.sample
* [ddc8995] add token_format=UUID to keystone.conf.sample
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c13d0ba] Require authz to update user's tenant (bug 1040626)
* [1749644] allow middleware configuration from app config
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [212f13b] PEP8 fix for PAM test.
* [308ca89] Removed stray print statement (bug 1038131)
* [e0a7ebd] Add tests for PAM authentication.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d04e99a] Support running the tests in the debugger.
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [bf45b45] Remove unused variables
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build:
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [bf5ce27] Adding missing files to
  MANIFEST.in
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [37ff759] Simplify the sql backend
  deletion of users and tenants.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [9d5261c] Implement python version
  of migration 002.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [4f3dcb6] Allow overloading of
  username and tenant name in the config files.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ba8f351] Assert adminness on token
  validation (bug 1030968)
* Automated Ubuntu testing build: [4444577] Set default signing_dir
  based on os USER.
* Automated Ubuntu testing build: [2b2d0a1] Log errors when
  signing/verifying.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [f82c7c2] Enabling SQL Catalog tests
  (bug 958950)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [f648819] Set iso8601 module as
  default dependence.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [5ad8086] keystone_manage
  certificate generation
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [c79d93b] Keystone should use
  openstack.common.timeutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [cb74707] Keystone should use
  openstack.common.jsonutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [23ca656] Refactor 404's into
  managers & drivers (bug 968519)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [3f9f77a] Monkey patching 'thread'.
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [79647c6] Reorder imports by full module path
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* Automated Ubuntu testing build:
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [e33a474] Clean up test requires a bit.
* [b2aa78b] Use cfg's new global CONF object
* [b2aa620] Add s3 extension in keystone.conf sample.
* [3ed1caf] Tweak for easier, safer subclassing
* [c785018] Revert file mode to be non-executable
* New release candidate for the Ubuntu Cloud Archive.
* New release candidate for the Ubuntu Cloud Archive.
* New release candidate for the Ubuntu Cloud Archive.
* debian/patches/sql_connection.patch: Refreshed
* Open precise-folsom-proposed.
* Merge with current quantal-folsom-proposed.

Author: Chuck Short
Revision Date: 2013-03-22 13:16:35 UTC

releasing version 1:2013.1~rc1-0ubuntu1

Author: James Page
Revision Date: 2013-03-22 13:26:50 UTC

Mark tip UNRELEASED

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-03-21 14:17:58 UTC

* Automated Ubuntu testing build:
* [255b1d4] validate from backend (bug 1129713)
* Automated Ubuntu testing build:
* [8690166] Backport of fix for 24-hour failure of pki.
* Automated Ubuntu testing build:
* [790c87e] Sync timeutils to pick up normalize fix.
* [8a22745] Disable XML entity parsing
* Automated Ubuntu testing build:
* [f0b4d30] Ensure user and tenant enabled in EC2
* Automated Ubuntu testing build:
* [8a22745] Disable XML entity parsing
* [bb2226f] Add size validations for /tokens.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b3bd5fd] Bump version to 2012.2.4
* Automated Ubuntu testing build:
* [ec7b94d] Render content-type appropriate 404 (bug 1089987)
* [9e300b7] Test 0.2.0 keystoneclient to avoid new deps
* [70e55f9] Fix catalog when services have no URL
* [6c95b73] Unparseable endpoint URL's should raise friendly error
* [ec06625] Ensure serviceCatalog is list when empty, not dict
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c387f84] Bump next version to 2012.2.3
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [7869c3e] Bump next version to 2012.2.2
* Automated Ubuntu testing build:
* [f9d4766] Ensure token expiration is maintained
* [80d63c8] Properly list tokens with a null tenant
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [37308dd] Ensures User is member of tenant in ec2 validation
* [bec9b68] bug 1068674
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ee645e6] pin sqlalchemy to 0.7
* Automated Ubuntu testing build:
* [094c494] replacing PKI token detection from content length to
  content prefix. (bug 1060389)
* [3cd343b] Fixed bug 1068851. Refreshed new crypto for the SSL tests.
* [2f9807e] Set defaultbranch in .gitreview to stable/folsom
* [b0bbd8a] Bump next version to 2012.2.1
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* Automated Ubuntu testing build:
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* [af8b031] Fixed trivally true tests (bug 983304)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1a086] Limit token revocation to tenant (bug 1050025)
* [af8b031] Fixed trivally true tests (bug 983304)
* [2c29d4c] LDAP backend attribute fixes
* [1683d84] Document memcached host system time configuration.
* [b6e568e] Implement token endpoint list (bug 1006777)
* [861f27f] LOG.warn all exception.Unauthorized authentication
  failures
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [efb6b3f] Delete user tokens after role grant/revoke
* [235c4ce] Implementation of tenant,user,role list functions for ldap
* [fa9f0f1] Initialize Metadata variable
* [201a109] Cleanup PEP8 errors from Common
* [150413c] List tokens for memcached backend
* [32b82ae] Ignore eclipse files.
* [7d9b239] Sync some misc changes from openstack-common
* [e09a121] Sync latest cfg from openstack-common
* [a9ee611] Remove id_hash column
* [a411412] Fixed: test_default_tenant_uuid_token not running
* [5446577] Upgrade PEP8 to 1.3.3 (bug 1037303)
* [4c32b5c] Expand PEP8 coverage to include docs & tests
* [ac95f83] Removed/fixed unused variable references
* [b82a0e2] HACKING compliance & staticly init module vars
* [685c1c2] PEP8 fix E251
* [7ad8497] PEP8 fix
* [7c93e84] Removed unused imports
* [2759c22] Check for expected cfg impl (bug 1043479)
* [026bea6] Fixed typos in comment
* [8a84c03] HACKING: Import by full module path
* [379354b] HACKING: Use single quotes
* [13ce482] mistake in doc string
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [6b04662] Removed dead code
* [3fa4ba5] Fix auth_token middleware to fetch revocation list as
  admin.
* [98d3a89] Code cleanup in doc/source/conf.py
* [067fcf0] Typo fix in keystone: existant => existent
* [1749644] allow middleware configuration from app config
* [1698094] change verbose and debug to Fasle in keystone.conf.sample
* [ddc8995] add token_format=UUID to keystone.conf.sample
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c13d0ba] Require authz to update user's tenant (bug 1040626)
* [1749644] allow middleware configuration from app config
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [212f13b] PEP8 fix for PAM test.
* [308ca89] Removed stray print statement (bug 1038131)
* [e0a7ebd] Add tests for PAM authentication.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d04e99a] Support running the tests in the debugger.
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [bf45b45] Remove unused variables
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build:
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [bf5ce27] Adding missing files to
  MANIFEST.in
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [37ff759] Simplify the sql backend
  deletion of users and tenants.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [9d5261c] Implement python version
  of migration 002.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [4f3dcb6] Allow overloading of
  username and tenant name in the config files.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ba8f351] Assert adminness on token
  validation (bug 1030968)
* Automated Ubuntu testing build: [4444577] Set default signing_dir
  based on os USER.
* Automated Ubuntu testing build: [2b2d0a1] Log errors when
  signing/verifying.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [f82c7c2] Enabling SQL Catalog tests
  (bug 958950)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [f648819] Set iso8601 module as
  default dependence.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [5ad8086] keystone_manage
  certificate generation
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [c79d93b] Keystone should use
  openstack.common.timeutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [cb74707] Keystone should use
  openstack.common.jsonutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [23ca656] Refactor 404's into
  managers & drivers (bug 968519)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [3f9f77a] Monkey patching 'thread'.
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [79647c6] Reorder imports by full module path
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* Automated Ubuntu testing build:
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [e33a474] Clean up test requires a bit.
* [b2aa78b] Use cfg's new global CONF object
* [b2aa620] Add s3 extension in keystone.conf sample.
* [3ed1caf] Tweak for easier, safer subclassing
* [c785018] Revert file mode to be non-executable
* New release candidate for the Ubuntu Cloud Archive.
* New release candidate for the Ubuntu Cloud Archive.
* New release candidate for the Ubuntu Cloud Archive.
* debian/patches/sql_connection.patch: Refreshed
* Open precise-folsom-proposed.
* Merge with current quantal-folsom-proposed.

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-03-20 16:33:26 UTC

* Automated Ubuntu testing build:
* [255b1d4] validate from backend (bug 1129713)
* Automated Ubuntu testing build:
* [8690166] Backport of fix for 24-hour failure of pki.
* Automated Ubuntu testing build:
* [790c87e] Sync timeutils to pick up normalize fix.
* [8a22745] Disable XML entity parsing
* Automated Ubuntu testing build:
* [f0b4d30] Ensure user and tenant enabled in EC2
* Automated Ubuntu testing build:
* [8a22745] Disable XML entity parsing
* [bb2226f] Add size validations for /tokens.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b3bd5fd] Bump version to 2012.2.4
* Automated Ubuntu testing build:
* [ec7b94d] Render content-type appropriate 404 (bug 1089987)
* [9e300b7] Test 0.2.0 keystoneclient to avoid new deps
* [70e55f9] Fix catalog when services have no URL
* [6c95b73] Unparseable endpoint URL's should raise friendly error
* [ec06625] Ensure serviceCatalog is list when empty, not dict
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c387f84] Bump next version to 2012.2.3
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [7869c3e] Bump next version to 2012.2.2
* [f9d4766] Ensure token expiration is maintained
* [80d63c8] Properly list tokens with a null tenant
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [37308dd] Ensures User is member of tenant in ec2 validation
* [bec9b68] bug 1068674
* Automated Ubuntu testing build:
* [ee645e6] pin sqlalchemy to 0.7
* [bec9b68] bug 1068674
* [094c494] replacing PKI token detection from content length to
  content prefix. (bug 1060389)
* [3cd343b] Fixed bug 1068851. Refreshed new crypto for the SSL tests.
* [2f9807e] Set defaultbranch in .gitreview to stable/folsom
* Automated Ubuntu testing build:
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* [af8b031] Fixed trivally true tests (bug 983304)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1a086] Limit token revocation to tenant (bug 1050025)
* [af8b031] Fixed trivally true tests (bug 983304)
* [2c29d4c] LDAP backend attribute fixes
* [1683d84] Document memcached host system time configuration.
* [b6e568e] Implement token endpoint list (bug 1006777)
* [861f27f] LOG.warn all exception.Unauthorized authentication
  failures
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [efb6b3f] Delete user tokens after role grant/revoke
* [201a109] Cleanup PEP8 errors from Common
* Automated Ubuntu testing build:
* [235c4ce] Implementation of tenant,user,role list functions for ldap
* [201a109] Cleanup PEP8 errors from Common
* [685c1c2] PEP8 fix E251
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [fa9f0f1] Initialize Metadata variable
* [150413c] List tokens for memcached backend
* [32b82ae] Ignore eclipse files.
* [7d9b239] Sync some misc changes from openstack-common
* [e09a121] Sync latest cfg from openstack-common
* [a9ee611] Remove id_hash column
* [5446577] Upgrade PEP8 to 1.3.3 (bug 1037303)
* [4c32b5c] Expand PEP8 coverage to include docs & tests
* [ac95f83] Removed/fixed unused variable references
* [b82a0e2] HACKING compliance & staticly init module vars
* [685c1c2] PEP8 fix E251
* [7ad8497] PEP8 fix
* [7c93e84] Removed unused imports
* [026bea6] Fixed typos in comment
* [8a84c03] HACKING: Import by full module path
* [379354b] HACKING: Use single quotes
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a411412] Fixed: test_default_tenant_uuid_token not running
* [b82a0e2] HACKING compliance & staticly init module vars
* [7ad8497] PEP8 fix
* Automated Ubuntu testing build:
* [2759c22] Check for expected cfg impl (bug 1043479)
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* Automated Ubuntu testing build:
* [13ce482] mistake in doc string
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [6b04662] Removed dead code
* [3fa4ba5] Fix auth_token middleware to fetch revocation list as
  admin.
* [98d3a89] Code cleanup in doc/source/conf.py
* [067fcf0] Typo fix in keystone: existant => existent
* [1749644] allow middleware configuration from app config
* [1698094] change verbose and debug to Fasle in keystone.conf.sample
* [ddc8995] add token_format=UUID to keystone.conf.sample
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c13d0ba] Require authz to update user's tenant (bug 1040626)
* [1749644] allow middleware configuration from app config
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [212f13b] PEP8 fix for PAM test.
* [308ca89] Removed stray print statement (bug 1038131)
* [e0a7ebd] Add tests for PAM authentication.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d04e99a] Support running the tests in the debugger.
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [bf45b45] Remove unused variables
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build:
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [bf5ce27] Adding missing files to
  MANIFEST.in
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [37ff759] Simplify the sql backend
  deletion of users and tenants.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [9d5261c] Implement python version
  of migration 002.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [4f3dcb6] Allow overloading of
  username and tenant name in the config files.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [bf49594] fix sphinx warnings
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [002dd42] Fixed marker & limit
  computation (bug 1006055)
* Automated Ubuntu testing build: [bd94b4b] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [39b20ac] pep8 v1.3.3 compliance
  (bug 1019498)
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [0b5cf00] documenting models
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [abc0671] notify calling process we
  are ready to serve
* Automated Ubuntu testing build: [7297afc] Return a 409 error when
  adding a second time a role to user/tenant
* Automated Ubuntu testing build: [c3696ba] Use sdist tarball instead
  of zipball.
* Automated Ubuntu testing build: [81cb2ab] Move monkey patch to
  keystone-all startup.
* Automated Ubuntu testing build: [04df79b] Run pep8 for tests.
* Automated Ubuntu testing build: [c411125] pep8 for openssl
* Automated Ubuntu testing build: [e923518] Make sure user dict has id
  key before checking against it
* Automated Ubuntu testing build: [7cdae1b] Fixing pep8 errors in
  tests/*py
* Automated Ubuntu testing build: [4ab47ad] Adding user password
  setting api call
* Automated Ubuntu testing build: [2a909ee] Making docs pretty!
* Automated Ubuntu testing build: [8a94a9c] Removed redundant /
  excessively verbose debug
* Automated Ubuntu testing build: [9625c55] adding keystoneclient test
* Automated Ubuntu testing build: [60fa32b] updating testing
  documentation
* Automated Ubuntu testing build: [ae0515c] Admin Auth URI prefix
* Automated Ubuntu testing build: [86177df] Prevent service catalog
  injection in auth_token.
* Automated Ubuntu testing build: [4b97716] Webob needs body to calc
  Content-Length (bug 1016171)
* Automated Ubuntu testing build: [d061599] Fix the wrong infomation
  in keystone-manage.rst
* Automated Ubuntu testing build: [2a78594] Implementation of LDAP
  functions
* Automated Ubuntu testing build: [9b31383] Files for Apache-HTTPD
* Automated Ubuntu testing build: [4ebfdfa] Raise unauthorized if
  tenant disabled (bug 988920)
* Automated Ubuntu testing build: [0abf6ba] Debug output may include
  passwords (bug 1004114)
* Automated Ubuntu testing build: [ec363ac] Import ec2 credentials
  from old keystone db
* Automated Ubuntu testing build: [2806181] Added user name
  validation. Fixes bug 966251.
* Automated Ubuntu testing build: [5adb018] Sync jsonutils from
  openstack-common
* Automated Ubuntu testing build: [bcc0f6d] Cryptographically Signed
  tokens
* Automated Ubuntu testing build: [d2ecd61] Typo error in
  keystone/doc/source/configuration.rst.
* Automated Ubuntu testing build: [dada197] Test for Cert by name
* Automated Ubuntu testing build: [ba8f351] Assert adminness on token
  validation (bug 1030968)
* Automated Ubuntu testing build: [4444577] Set default signing_dir
  based on os USER.
* Automated Ubuntu testing build: [2b2d0a1] Log errors when
  signing/verifying.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [f82c7c2] Enabling SQL Catalog tests
  (bug 958950)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [f648819] Set iso8601 module as
  default dependence.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [5ad8086] keystone_manage
  certificate generation
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [c79d93b] Keystone should use
  openstack.common.timeutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [cb74707] Keystone should use
  openstack.common.jsonutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [23ca656] Refactor 404's into
  managers & drivers (bug 968519)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [a68d530] Fixed typo in routing
  conditions (bug 1006793)
* Automated Ubuntu testing build: [cc91786] Pass serviceCatalog in
  auth_token middleware
* Automated Ubuntu testing build: [79647c6] Reorder imports by full
  module path
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [3f9f77a] Monkey patching 'thread'.
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [79647c6] Reorder imports by full module path
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [e33a474] Clean up test requires a bit.
* [3ed1caf] Tweak for easier, safer subclassing
* [375838c] Carrying over token expiry time when token chaining
* Automated Ubuntu testing build:
* [b2aa78b] Use cfg's new global CONF object
* [3ed1caf] Tweak for easier, safer subclassing
* [375838c] Carrying over token expiry time when token chaining
* [8680549] Require authz for user role list (bug 1006815)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b2aa620] Add s3 extension in keystone.conf sample.
* [b71fb3d] fix importing of optional modules in auth_token
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c785018] Revert file mode to be non-executable
* [1d146f5] Require authz for service CRUD (bug 1006822)
* [d2619f1] Use cfg's new behavior of reset() clearing overrides
* [65ec652] Use cfg's new group autocreation feature
* [dd14b16] Sync with latest version of openstack.common.cfg
* [daf395b] Use X_USER_NAME and X_ROLES headers.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [17723a6] Keystone should use openstack.common.importutils
* Automated Ubuntu testing build:
* [4bfa203] PEP8 fixes
* [bb2fbb7] Fixes some pep8 warning/errors.
* [055d073] Update swift_auth documentation.
* [30654a6] Add ACL check using <tenant_id>:<user> format.
* [bcb12ef] Allow other middleware overriding authentication.
* [2ee73cc] Changed arguments in keystone CLI for consistency.
* [012c3d3] One 'ctrl-c' kills keystone.
* [bc803a4] Make sure we parse delay_auth_decision as boolean.
* Automated Ubuntu testing build:
* [f537a82] blueprint 2-way-ssl
* [055d073] Update swift_auth documentation.
* [30654a6] Add ACL check using <tenant_id>:<user> format.
* [bcb12ef] Allow other middleware overriding authentication.
* [2ee73cc] Changed arguments in keystone CLI for consistency.
* [012c3d3] One 'ctrl-c' kills keystone.
* [bc803a4] Make sure we parse delay_auth_decision as boolean.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [bb2fbb7] Fixes some pep8 warning/errors.
* [628149b] Invalidate user tokens when a user is disabled
* [19b6076] Add validations of 'name' field for roles, users and
  tenants.
* [6c5f7d9] notify calling process we are ready to serve
* [c2255ed] Corrects url conversion in export_legacy_catalog
* [fd7df12] Truly handle mailmap entries for all combinations.
* [5ad37eb] fix pam admin user case
* Automated Ubuntu testing build:
* [7a7a0c6] Backslash continuation removal (Keystone folsom-1)
* [56492c2] Nail prettytable test dependency at 0.5.0.
* [628149b] Invalidate user tokens when a user is disabled
* [19b6076] Add validations of 'name' field for roles, users and
  tenants.
* [05d6150] Added 'NormalizingFilter' middleware.
* [6c5f7d9] notify calling process we are ready to serve
* [b69dbc2] Added tenant name validation. Fixes bug 966249.
* [c2255ed] Corrects url conversion in export_legacy_catalog
* [fd7df12] Truly handle mailmap entries for all combinations.
* [5ad37eb] fix pam admin user case
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d3b2e0a] Remove service_* from authtoken examples
* [56492c2] Nail prettytable test dependency at 0.5.0.
* Automated Ubuntu testing build:
* [e0447e4] Fix depricated /users/{user-id}/roles
* [a67b248] Invalidate user tokens when password is changed
* Automated Ubuntu testing build:
* [2e912f4] Flush tenant membership deletion before user
* [a67b248] Invalidate user tokens when password is changed
* [cf1c5e1] Improve the sample keystone.conf
* [812bed8] Add defaults for ldap options
* [9b5d9ad] Set defaults for sql options
* [749dc34] Set defaults for port options
* [ff149be] Add defaults for driver options
* [f58ca2b] Use ConfigOpts.find_file() to locate catalog template
* [fab5844] Use ConfigOpts.find_file() to locate policy.json
* [352839b] Policy doc updates; RST syntax consistency
* [6384281] cleanup dependent data upon user/tenant deletion
* [310c653] Avoid ValueError in 12.04 essex pkg (bug 988523)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8dc3baa] Sync to newer openstack-common
* [352839b] Policy doc updates; RST syntax consistency
* [422aeba] Removed SimpleMatch 'shim'; updated readme
* [4c842ca] Removed old sections; improved syntax consistency
* [db19e0f] Update tests to run servers on 127.0.0.1

Author: Chuck Short
Revision Date: 2013-03-18 20:21:10 UTC

Add bug number

Author: Soren Hansen
Revision Date: 2013-02-21 14:58:39 UTC

Refresh patches

Author: James Page
Revision Date: 2013-03-11 13:55:32 UTC

d/rules: Stop using packaging specific test overrides when
running unit tests.

Author: Chuck Short
Revision Date: 2013-03-07 16:06:41 UTC

Re-add swift

Author: James Page
Revision Date: 2013-03-01 14:14:56 UTC

d/watch: Update uversionmangle to deal with upstream versioning
changes, remove tarballs.openstack.org.

Author: Chuck Short
Revision Date: 2013-02-25 13:44:59 UTC

* New upstream release for the Ubuntu Cloud Archive.
* New upstream version.
* debian/patches/sql_connection.patch: Rediffed
* debian/control: Add python-oslo-config.
* Refreshed patches.
* d/keystone.template,po: Removed debconf detritus from packaging.
* d/control: Added python-novaclient dependency
* d/patches: refreshed patches

Author: Chuck Short
Revision Date: 2013-02-22 14:28:37 UTC

releasing version 2013.1.g3-0ubuntu1

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-02-20 12:02:59 UTC

* Automated Ubuntu testing build:
* [7402f5e] Ensure user and tenant enabled in EC2
* Automated Ubuntu testing build:
* [8945567] Disable XML entity parsing
* [7b5b72f] Add size validations for /tokens.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ef1e682] Pin docutils to 0.9.1.
* [8735009] Ensures User is member of tenant in ec2 validation
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [025b1d5] pin sqlalchemy to 0.7
* [8735009] Ensures User is member of tenant in ec2 validation
* [ddb4019] Open 2012.1.4 development
* [0e1f05e] utf-8 encode user keys in memcache (bug 1056373)
* [176ee9b] Limit token revocation to tenant (bug 1050025)
* [58ac669] Delete user tokens after role grant/revoke
* Automated Ubuntu testing build:
* [cd1e48a] List tokens for memcached backend
* Automated Ubuntu testing build:
* [5438d3b] Require authz to update user's tenant (bug 1040626)
* [a130848] Allow overloading of username and tenant name in the
  config files.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ff6df7c] Returning roles from authenticate in ldap backend
* [a130848] Allow overloading of username and tenant name in the
  config files.
* Automated Ubuntu testing build: [708c80e] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [d56a3fb] Import ec2 credentials
  from old keystone db
* Automated Ubuntu testing build: [afc37ae] Open 2012.1.2 development
* Automated Ubuntu testing build: [359c426] Open 2012.1.3 development
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [708c80e] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [5373601] Raise unauthorized if
  tenant disabled (bug 988920)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [708c80e] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [d56a3fb] Import ec2 credentials
  from old keystone db
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [707b725] Set defaultbranch in
  .gitreview to stable/essex
* Automated Ubuntu testing build: [24df3ad] Require authz for service
  CRUD (bug 1006822)
* Automated Ubuntu testing build: [14b136a] Require authz for user
  role list (bug 1006815)
* Automated Ubuntu testing build: [0b95c3c] cleanup dependent data
  upon user/tenant deletion
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d8dbdbc] Monkey patching 'thread'.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [29e74e7] Carrying over token expiry time when token chaining
* [d960043] Invalidate user tokens when a user is disabled
* [ea03d05] Invalidate user tokens when password is changed
* [18513c3] Open 2012.1.1 development
* [f70505c] Fix expired token tests
* Automated Ubuntu testing build:
* [7715d6c] Fix test env for the stable branch
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [aff45d6] Make import_nova_auth only create roles which don't
  already exist
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [7d08d12] Remove tenant membership during user deletion
* [aa542c4] Add a _ at the end of reseller_prefix default.
* [89e8dc0] Add support to swift_auth for tokenless authz
* [4314ae6] additional logging to support debugging auth issue
* [bc153d5] Fixed misc errors in configuration.rst

Author: James Page
Revision Date: 2013-02-19 15:50:46 UTC

* Refreshed patches.
* d/keystone.template,po: Removed debconf detritus from packaging.

Author: Chuck Short
Revision Date: 2013-02-12 14:40:54 UTC

Refresh

Author: Chuck Short
Revision Date: 2013-02-04 17:58:12 UTC

debian/patches/sql_connection.patch: Rediffed

Author: Chuck Short
Revision Date: 2013-01-25 16:24:03 UTC

Fix changelog

Author: Ubuntu
Revision Date: 2013-01-22 17:33:23 UTC

skipping failing tests

Author: Chuck Short
Revision Date: 2013-01-11 14:47:30 UTC

releasing version 2013.1~g2-0ubuntu1

Author: Yolanda Robla
Revision Date: 2012-12-17 10:49:43 UTC

[ Yolanda Robla Mota ]
* Resynchronize with stable/essex (c17a9992):
  - [8735009] Removing user from a tenant isn't invalidating user access to
    tenant (CVE-2012-5571)
  - [025b1d5] Jenkins jobs fail because of incompatibility between sqlalchemy-
    migrate and the newest sqlalchemy-0.8.0b1 (LP: #1073569)
  - [ddb4019] Open 2012.1.4 development
  - [0e1f05e] memcache driver needs protection against unicode user keys
    (LP: #1056373)
  - [176ee9b] Token invalidation in case of role grant/revoke should be
    limited to affected tenant (LP: #1050025)
  - [58ac669] Token validation includes revoked roles (CVE-2012-4413)
  - [cd1e48a] Memcached Token Backend does not support list tokens
    (LP: #1046905)
  - [5438d3b] Update user's default tenant partially succeeds without authz
    (CVE-2012-3542)
* Dropped, superseeded by new snapshot:
  - debian/patches/CVE-2012-4413.patch [58ac669]
  - debian/patches/CVE-2012-5571.patch [8735009]
  - debian/patches/CVE-2012-3542.patch [5438d3b]
* SECURITY UPDATE: fix for EC2-style credentials invalidation
  - debian/patches/CVE-2012-5571.patch: adjust contrib/ec2/core.py to verify
    that the user is in at least one valid role for the tenant
  - CVE-2012-5571
  - LP: #1064914
* SECURITY UPDATE: Pre-existing tokens continue to be valid after
  granting or revoking a user's access (LP: #1041396)
  - debian/patches/keystone-CVE-2012-4413.patch: invalidate all user
    tokens upon role grant/revoke
  - CVE-2012-4413
* SECURITY UPDATE: tenants are able to be added to users without
  authorization (LP: #1040626)
  - debian/patches/keystone-CVE-2012-3542: require authz to update a
    user's tenant.
  - CVE-2012-3542

Author: Chuck Short
Revision Date: 2012-12-11 16:12:12 UTC

fix up based on comments

Author: Adam Gandelman
Revision Date: 2012-12-05 19:17:37 UTC

Drop old manpages.

Author: James Page
Revision Date: 2012-11-25 23:10:56 UTC

d/keystone.upstart: Tweak 'stop on' to be triggered on all
appropriate runlevel transitions, use start-stop-daemon to startup
keystone daemon.

Author: James Page
Revision Date: 2012-11-19 12:15:33 UTC

Merged in latest proposed packaging from raring

Author: Chuck Short
Revision Date: 2012-11-15 00:37:06 UTC

debian/rules: Temporarily pass the tests since you need to run
keystone in order to run the tests.

Author: Adam Gandelman
Revision Date: 2012-10-31 16:34:40 UTC

Update changelog format to cater to stable/folsom git entries.

Author: Chuck Short
Revision Date: 2012-09-27 20:44:29 UTC

* New release candidate for the Ubuntu Cloud Archive.
* New upstream release.

Author: Chuck Short
Revision Date: 2012-04-05 14:42:27 UTC

releasing version 2012.1-0ubuntu1

Author: Chuck Short
Revision Date: 2012-08-16 18:59:31 UTC

releasing version 2012.2~f3-0ubuntu1

Author: Sam Morrison
Revision Date: 2012-08-06 01:23:00 UTC

Sent output of keystone restart in logrotate to /dev/null

Fixes bug #1029766

Author: Chuck Short
Revision Date: 2012-07-06 14:52:22 UTC

New upstream version.