Author: Corey Bryant
Revision Date: 2014-10-09 19:38:13 UTC

New upstream release candidate.

Author: Corey Bryant
Revision Date: 2015-01-14 15:46:10 UTC

* Rebuild to pick up pkgos upstart generation fix.
  - d/control: Bump openstack-pkg-tools to ensure upstart fix inclusion.

Author: Corey Bryant
Revision Date: 2015-02-12 17:02:37 UTC

Add dash to python-oslo-* dependencies

Author: JJ Asghar
Revision Date: 2015-03-16 17:08:07 UTC

Updated the conductor.init script to look at the conductor instead of the api

Author: Adam Gandelman
Revision Date: 2014-04-15 23:14:26 UTC

d/control: Fix lintian warnings: bump debhelper version requirement
and standards version.

Author: Adam Gandelman
Revision Date: 2014-04-01 23:07:38 UTC

Set release

Author: Adam Gandelman
Revision Date: 2014-04-02 21:33:40 UTC

Fail build if test suite fails, limit testing concurrency to 1.

Author: Adam Gandelman
Revision Date: 2014-04-04 18:58:26 UTC

releasing package ironic version 2014.1~rc1-0ubuntu1

Author: James Page
Revision Date: 2015-01-05 12:22:16 UTC

releasing package ironic version 2015.1~b1-0ubuntu1

Author: Chuck Short
Revision Date: 2015-05-03 17:50:24 UTC

releasing package ironic version 2015.1.0-0ubuntu1

Author: Chuck Short
Revision Date: 2015-05-07 16:21:45 UTC

debian/control: Open up wily/liberty.

Author: Chuck Short
Revision Date: 2014-01-24 15:01:27 UTC

releasing package ironic version 2014.1~b2-0ubuntu1

Author: Chris Ricker
Revision Date: 2014-11-26 17:47:09 UTC

Bump EVR. I hate PBR

Author: Chuck Short
Revision Date: 2012-04-05 14:42:27 UTC

releasing version 2012.1-0ubuntu1

Author: Chris Ricker
Revision Date: 2013-07-09 04:36:17 UTC

Add patch to disable failing tests

Disable failing tests. See Bug #1190054

Author: Soren Hansen
Revision Date: 2013-02-21 14:58:39 UTC

Refresh patches

Author: Chris Ricker
Revision Date: 2013-06-11 13:57:02 UTC

Bump epoch to force build

Author: Chris Ricker
Revision Date: 2014-02-14 15:32:40 UTC

Add new BRs for 2013.2.2 testing changes

Author: Chris Ricker
Revision Date: 2014-04-18 18:57:05 UTC

Bump EVR and rebuild

Author: Corey Bryant
Revision Date: 2014-04-04 15:14:27 UTC

* Resynchronize with stable/havana (b85a531) (LP: #1302575):
  - [a96d1a4] User a more accurate max_delay for reconnects
  - [a120f25] Fix issue deleting ec2-credentials as non-admin user
  - [181c3c1] SQLAlchemy Change to support more strict dialect checking
  - [b6f0e26] Ensure tokens are added to both Trustor and Trustee indexes
  - [b85a531] Fix list_projects_for_endpoint failed bug

Author: Corey Bryant
Revision Date: 2014-06-13 15:50:11 UTC

* Resynchronize with stable/icehouse (1716748) (LP: #1328134):
  - [4408625] sql migration: ensure using innodb utf8 for assignment table
  - [786af98] SQL and LDAP fixes for get_roles_for_user_and_project user=group ID
  - [e56fe4c] Updated from global requirements
  - [0bd819c] Removed duplication with list_user_ids_for_project
  - [b932321] Allow any attributes in mapping and include in results
  - [1716748] Treat LDAP attribute names as case-insensitive

Author: Corey Bryant
Revision Date: 2014-10-03 13:46:41 UTC

* Resynchronize with stable/icehouse (8485dbc) (LP: #1377136):
  - [89ebfe9] Fix tests comparing tokens
  - [6bf25d0] Fix typo on cache backend module
  - [1c8f9f9] Set LDAP certificate trust options for LDAPS and TLS
  - [878f12e] Adds a whitelist for endpoint catalog substitution
  - [a391713] Remove extraenous instantiations of managers
  - [25cbcf5] Avoid conversion of binary LDAP values
  - [b3765d7] Catalog driver generates v3 catalog from v2 catalog
  - [824f66d] Ensure token is a string
  - [30f9247] Add workaround to support tox 1.7.2
  - [80502d3] Fixes catalog URL formatting to never return None
  - [f3198d8] Updates keystone.catalog.core.format_url tests
  - [c959cbd] Ignore broken endpoints in get_catalog
  - [126440d] Ignore broken endpoints in get_v3_catalog
  - [c48ec38] No longer allow listing users by email
  - [18d4843] Fixes an issue with the XMLEquals matcher
  - [c6cd627] Implicitly ignore attributes that are mapped to None in LDAP
  - [8485dbc] Remove `with_lockmode` use from Trust SQL backend.
* d/p/fix-requirements.patch: Rebased.
* d/p/add-version-info.patch: Rebased.

Author: Corey Bryant
Revision Date: 2014-10-03 13:46:41 UTC

* Resynchronize with stable/icehouse (8485dbc) (LP: #1377136):
  - [89ebfe9] Fix tests comparing tokens
  - [6bf25d0] Fix typo on cache backend module
  - [1c8f9f9] Set LDAP certificate trust options for LDAPS and TLS
  - [878f12e] Adds a whitelist for endpoint catalog substitution
  - [a391713] Remove extraenous instantiations of managers
  - [25cbcf5] Avoid conversion of binary LDAP values
  - [b3765d7] Catalog driver generates v3 catalog from v2 catalog
  - [824f66d] Ensure token is a string
  - [30f9247] Add workaround to support tox 1.7.2
  - [80502d3] Fixes catalog URL formatting to never return None
  - [f3198d8] Updates keystone.catalog.core.format_url tests
  - [c959cbd] Ignore broken endpoints in get_catalog
  - [126440d] Ignore broken endpoints in get_v3_catalog
  - [c48ec38] No longer allow listing users by email
  - [18d4843] Fixes an issue with the XMLEquals matcher
  - [c6cd627] Implicitly ignore attributes that are mapped to None in LDAP
  - [8485dbc] Remove `with_lockmode` use from Trust SQL backend.
* d/p/fix-requirements.patch: Rebased.
* d/p/add-version-info.patch: Rebased.

Author: Corey Bryant
Revision Date: 2014-10-10 13:09:17 UTC

Added python-ldap as install dep (LP: #1364854)

Author: Corey Bryant
Revision Date: 2015-03-20 18:23:50 UTC

* Support new version of Python 2.7 (LP: #1434575):
  - d/p/pep-0476.patch: PEP 476 updates.

Author: Corey Bryant
Revision Date: 2015-03-29 15:14:23 UTC

* d/p/drop-oslo-serialization.patch: Drop oslo.serialization (LP: #1437741).
* d/control: Set minimum python-six dependency to 1.5.2 (LP: #1403114).

Author: Corey Bryant
Revision Date: 2015-06-22 16:01:20 UTC

* Resynchronize with stable/icehouse (91255f1) (LP: #1467533):
  - [a1548eb] backend_argument should be marked secret
  - [e6eba4b] Remove oslo.serialization from requirements.txt
  - [0e0efdb] Work with pymongo 3.0
  - [91255f1] Deal with PEP-0476 certificate chaining checking
* d/p/drop-oslo-serialization.patch: Dropped; Fixed upstream.
* d/p/fix-requirements.patch: Rebased

Author: Corey Bryant
Revision Date: 2014-04-08 12:42:13 UTC

New upstream release. (LP: #1298959)

Author: Corey Bryant
Revision Date: 2014-12-05 15:06:43 UTC

* Resynchronize with stable/juno (d7eb999) (LP: #1398952):
  - [f54fa8f] Prevent infinite loop in token_flush
  - [bd92689] Adds IPv6 url validation support
  - [db291b3] Use newer python-ldap paging control API
  - [d7eb999] Add oslo.serialization for latest keystoneclient

Author: Corey Bryant
Revision Date: 2015-02-09 13:58:05 UTC

* Resynchronize with stable/juno (aa23ce0) (LP: #1418695):
  - [4cdd217] Additional test coverage for password changes
  - [acdf034] explicit namespace prefixes for SAML2 assertion
  - [44c1bd0] Fix modifying a role with same name using LDAP
  - [7fc6585] Add a test for modifying a role to set the name the same
  - [fc6e9e8] Fix disabling entities when enabled is ignored
  - [85c658f] Add tests for enabled attribute ignored
  - [1594c84] Fix update role without name using LDAP
  - [d6ded70] Add test for update role without name
  - [afd4e0d] Exclude domains with inherited roles from user domain list.
  - [eeda52e] Improve testing of exclusion of inherited roles.
  - [e5b660e] Fix project federation tokens for inherited roles.
  - [609c5b3] Improve testing of project federation tokens for inherited roles.
  - [5ec7357] Fix domain federation tokens for inherited roles.
  - [4a914d7] Improve testing of domain federation tokens for inherited roles.
  - [a9a843e] User ids that begin with 0 cannot authenticate through ldap
  - [aa23ce0] Move unit tests from test_backend_ldap
* d/control: Bump minimum python-eventlet to get socket_timeout support.

Author: Corey Bryant
Revision Date: 2015-01-14 15:47:27 UTC

* Rebuild to pick up pkgos upstart generation fix.
  - d/control: Bump openstack-pkg-tools to ensure upstart fix inclusion.

Author: Corey Bryant
Revision Date: 2015-02-12 17:03:10 UTC

Add dash to python-oslo-* dependencies

Author: Corey Bryant
Revision Date: 2015-04-30 14:20:44 UTC

New upstream release for OpenStack kilo.

Author: Corey Bryant
Revision Date: 2015-08-03 19:26:59 UTC

* Resynchronize with stable/kilo (54400bf) (LP: #1481008):
  - [c4dc133] Mask passwords in debug log on user password operations
  - [fba2d5c] Add test showing password logged
  - [afaaf11] Fix xmldsig import
  - [ec30329] Pass-in domain when testing saml signing
  - [0c0bf69] Add openstack_project_domain to assertion
  - [dafe5f9] Fix signed_saml2_assertion.xml tests fixture
  - [67cda0c] Eventlet green threads not released back to pool
  - [54400bf] Remove project association before removing endpoint group

Author: Adam Gandelman
Revision Date: 2012-03-02 03:33:44 UTC

debian/patches/improve_auth_token.patch: Temporarily carry improvements to
auth_token middleware until next upload.

Author: Adam Gandelman
Revision Date: 2012-03-01 02:06:30 UTC

debian/keystone.postinst: Remove create_users stuff, add call to 'db_sync'
on install

Author: Adam Gandelman
Revision Date: 2012-03-01 21:09:44 UTC

debian/control: Add python-lxml to python-keystone Depends + BuildDepends

Author: Adam Gandelman
Revision Date: 2012-12-05 19:17:37 UTC

Drop old manpages.

Author: Adam Gandelman
Revision Date: 2012-03-07 02:11:08 UTC

* debian/patches/keystone-auth.patch: Drop, applied upstream at commit
  29337e66.
* debian/patches/sql_connection.patch: Refresh

Author: Chuck Short
Revision Date: 2012-03-07 14:42:15 UTC

* debian/patches/keystone-auth.patch: Drop, applied upstream at commit
  29337e66.
* debian/patches/sql_connection.patch: Refresh

Author: James Page
Revision Date: 2013-03-01 14:14:56 UTC

d/watch: Update uversionmangle to deal with upstream versioning
changes, remove tarballs.openstack.org.

Author: James Page
Revision Date: 2013-03-11 13:55:32 UTC

d/rules: Stop using packaging specific test overrides when
running unit tests.

Author: James Page
Revision Date: 2013-03-22 13:26:50 UTC

Mark tip UNRELEASED

Author: James Page
Revision Date: 2012-11-25 23:10:56 UTC

d/keystone.upstart: Tweak 'stop on' to be triggered on all
appropriate runlevel transitions, use start-stop-daemon to startup
keystone daemon.

Author: James Page
Revision Date: 2013-02-19 15:50:46 UTC

* Refreshed patches.
* d/keystone.template,po: Removed debconf detritus from packaging.

Author: James Page
Revision Date: 2013-08-15 09:45:22 UTC

* d/patches/fix-ubuntu-tests.patch: Fixup for new tests location.
* d/patches/ubuntu-test-overrides.patch: Override testing defaults
  using patches.
* d/rules: Rework for patching approach for test_overrides.conf.
* d/tests/test_overrides.conf: Dropped - no longer required.
* d/control: Add python-netaddr to BD's.

Author: Dustin Kirkland 
Revision Date: 2011-09-28 22:09:33 UTC

fix copyright file, replace s/glance/keystone/

Author: Mark Washenberger
Revision Date: 2011-12-01 15:11:04 UTC

try out python-pysqlite2--will it override python:Depends?

Author: Martin Pool
Revision Date: 2012-02-13 00:52:21 UTC

Update "db sync" to "sync_database" in postinst. (LP: #930444)

Author: Monty Taylor
Revision Date: 2011-09-09 18:01:32 UTC

Add python-mox as a build depend.

Author: Juan L. Negron
Revision Date: 2011-09-28 18:42:43 UTC

Fix for MySQL/InnoDB foreign key relations issue. LP:861682

Author: Nachi Ueno
Revision Date: 2011-11-16 01:33:19 UTC

Fix postinstall script

Author: Nachi Ueno
Revision Date: 2011-11-16 01:33:19 UTC

Fix postinstall script

Author: Chuck Short
Revision Date: 2011-09-21 13:38:30 UTC

* Install configuration files.
* debian/patches/sql_connection.patch:
  Specify a path for the sqlite database.

Author: Soren Hansen
Revision Date: 2012-03-27 08:03:10 UTC

Merge ubuntu packaging.

Author: Chuck Short
Revision Date: 2012-02-10 13:56:39 UTC

* New upstream release. This release fixes several bugs with usuablitiy
   and have better integration with authentication sevices for Nova, Glance,
   Swift, and Dashboard.
* debian/control:
  * Update build dependencies: Added python-coverage and pep8.
  * Update runtime dependencies: Added python-passlib, python-httplib2,
    python-pastescript, python-webob, python-sqlalchemy, python-sqlite
   * Update copyright
* keystone.install: Install all the configuration files.
* keystone.postinst: Add the keystone group and setup the right permissions.
* Dropped:
   + debian/patches/add-missing-extenstion-files.patch: Accepted upstream
   + debian/patches/foreign_key.patch: Accepted upstream
* debian/patches/sql_connection.patch: Correct keystone.db path, as
  identified by Atul Jha. (LP: #878282)

Author: Openstack Ubuntu Testing Bot
Revision Date: 2012-04-04 08:13:13 UTC

* Automated Ubuntu testing build:
* [7d08d12] Remove tenant membership during user deletion
* Automated Ubuntu testing build:
* [aa542c4] Add a _ at the end of reseller_prefix default.
* [89e8dc0] Add support to swift_auth for tokenless authz
* [4314ae6] additional logging to support debugging auth issue
* [bc153d5] Fixed misc errors in configuration.rst
* [ada4021] don't duplicate the extra dict in extra
* [1b7aa15] Raise keystone.exception for HTTP 401 (bug 962563)
* [b1336b0] Validate object refs (return 404 instead of 500)
* [d9959d8] tenant-crud 404 (bug 963056)
* [b56e326] role-crud 404 (bug 963056)
* [8037722] Improve swift_auth test coverage + Minor fixes
* [1904228] Check values for EC2.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [7abe0aa] S3 tokens cleanups.
* [1904228] Check values for EC2.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [9feb000] Fix critical typo in endpoint_create (bug 961412)
* [94904e4] Rename tokenauth to authtoken.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d61aeda] unique role name constraint
* [53b3d44] Add test for swift middleware.
* [3a296a4] Spring cleaning, fix PEP8 violations.
* [94904e4] Rename tokenauth to authtoken.
* [80c7936] pass the arguments in when starting keystone-all
* [3e4653a] fix keystone-all's usage of options vs conf
* [009d661] Wrapped unexpected exceptions (bug 955411)
* [5d07cdf] Changing belongsTo validation back to ID
* [6f8752b] Clean up sql connection args
* [ee57716] Improved file logging example (bug 959610)
* [2324247] Swift middleware doc update.
* [193374a] Fixes LP #954089 - Service list templated catalog
* [2146119] Remove nova-specific middlewares
* [239e4f6] Add check for MAX_PASSWORD_LENGTH to utils.
* [2c6a232] Remove glance_auth_token middleware
* [e677327] Support PyPAM in pam backend, update to latest API
* [773f0f8] Fix default port for identity.internalURL
* [00a2392] Installing keystone docs
* [678dcad] Refactor keystone.common.logging use (bug 948224)
* [e7bb737] Add automatically generated code docs.
* [9363d5f] Properly return 501 for unsupported Catalog calls
* [56e4103] docstring cleanup to remove sphinx warnings
* [d2c6e88] Raising unauthorized instead of 500 (bug 954547)
* [f8cbd61] sample_data.sh: check file paths for packaged
  installations
* [6f2c858] Update get_metadata to return {}
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ab6be05] Update username -> name in token response.
* [f4915af] Allow connect to another tenant.
* [a1e0174] Update docs for keystone client cli args
* [d2c6e88] Raising unauthorized instead of 500 (bug 954547)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b03c204] updating documentation for rewrite of auth_token.
* [5b3e05b] added LDAP section to architecture and architecture
* Automated Ubuntu testing build:
* [dc41cb5] Failing to update tenants (bug 953678, bug 954673)
* Automated Ubuntu testing build:
* [5b3e05b] added LDAP section to architecture and architecture
* Automated Ubuntu testing build:
* [e65a22c] Bug #943031 MySQL Server has gone away added docnotes of
  error messages caught for mysql and reference
* [73af033] Improved legacy tenancy resolution (bug 951933)
* Automated Ubuntu testing build:
* [dee8153] making all use of time follow datetime.utcnow() fixes bug
  954057
* [73af033] Improved legacy tenancy resolution (bug 951933)
* Automated Ubuntu testing build:
* [1e07b98] Fix iso8601 import/use and date comparaison.
* Automated Ubuntu testing build:
* [a036b3f] Fix double-quoted service names
* [0c3c27c] Fixes the cli documentation of user/tenant/roles
* Automated Ubuntu testing build:
* [1b64c84] Remove Nova Diablo reference from migrate docs
* [0c3c27c] Fixes the cli documentation of user/tenant/roles
* [2f4fb46] create service endpoints in sample data
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a863c13] Add simple set of tests for auth_token middleware
* [259d938] enables run_test option to skip integration
* [48f2c7d] Add AUTHORS to the tarball.
* Automated Ubuntu testing build:
* [d6631d8] update documention on changing user password
* [259d938] enables run_test option to skip integration
* [48f2c7d] Add AUTHORS to the tarball.
* [94abc7e] Make sure we have a port number before int it.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b5c8b3a] Add token caching via memcache.
* Automated Ubuntu testing build:
* [e05bc6a] Diablo to Essex migration docs (bug 934328)
* Automated Ubuntu testing build:
* [5720730] Added license header (bug 929663)
* [303a10b] Fix EC2 credentials crud after policy backend change
* [524cbd5] add more default catalog templates
* Automated Ubuntu testing build:
* [a2f2274] port common policy code to keystone
* [e422567] rename belongs_to to belongsTo as per the API spec.
* [5c6bccf] fixes lp#949648 change belongsTo validate to name
* [a7472f1] HTTP_AUTHORIZATION was used in proxy mode
* [71aa1db] fix Nova Volume Service in sample data
* [a2f2274] port common policy code to keystone [71aa1db] fix Nova
  Volume Service in sample data [524cbd5] add more default catalog
  templates
* No change rebuild.
* [e422567] rename belongs_to to belongsTo as per the API spec.
  [a7472f1] HTTP_AUTHORIZATION was used in proxy mode
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* [5c6bccf] fixes lp#949648 change belongsTo validate to name
  [d0429ea] Make bind host configurable [989d62f] Improve
  auth_str_equal(). [5c7f3cf] Set default identity driver to sql (bug
  934332)
* No change rebuild.
* No change rebuild.
* [98170a7] fixes bug lp#948439 belongs_to and serviceCatalog behavior
  * removing belongs_to as a kwarg and getting from the context *
  adding a serviceCatalog for belongs_to calls to tokens * adding test
  to validate belongs_to behavior in tokens
* [d0429ea] Make bind host configurable [fd4e961] Isolating backtraces
  to DEBUG (bug 947060)
* [ec35ea8] Fix coverage jobs for Jenkins. [fd4e961] Isolating
  backtraces to DEBUG (bug 947060)
* No change rebuild.
* [b68051c] Renamed sqlite files (bug 944951) [e8fb989] Add reseller
  admin capability. [460c3f3] Remove trailing whitespaces in regular
  file [bc34635] LDAP get_user_by_name
* No change rebuild.
* No change rebuild.
* [fad1a38] updating readme to point to developer setup docs * fixes
  bug 945274 [dd35d2a] standardize ldap and related tests
* No change rebuild.
* No change rebuild.
* [b698855] Added missing import (bug 944905) [dd35d2a] standardize
  ldap and related tests
* debian/keystone.preinst: Create group *before* user
* [ea4999d] add git commit date / sha1 to sphinx html docs [33e6c29]
  improve auth_token middleware [fc63c5d] Add service accounts to
  sample_data.sh
* [845a0de] gitignore follow up for docs/ rename [33e6c29] improve
  auth_token middleware [fc63c5d] Add service accounts to
  sample_data.sh [f8ba5af] Align with project configs.
* [a6105f7] Fixes doc typo s/SERVIVE/SERVICE/ [cfb996d] Align tox jobs
  with project standards.
* [1c24191] Use constant time string comparisons for auth. [49586bd]
  fix pep8 [1c5f3e2] GET /v2.0 (bug 930321) [cfb996d] Align tox jobs
  with project standards. [a7c8e2a] Provide request to
  Middleware.process_response()
* No change rebuild.
* No change rebuild.
* [834b931] Unpythonic code in redux in auth_token.py
* [49586bd] fix pep8
* [83df210] LDAP member defaults
* [089f53a] Handle KeyError in _get_admin_auth_token.
* [5816542] renaming pip-requires-test to test-requires
* [9581809] Add Vary header (bug 928057) [6c60d6c] Set tenantName to
  'admin' in get_admin_auth_token.
* [37d223e] Implement a Catalog SQL backend
* [6c60d6c] Set tenantName to 'admin' in get_admin_auth_token.
* [63437e9] LDAP Identity backend [cdac09e] Support unicode in the
  keystone database. [33a13b7] Add HEAD /tokens/{token_id} (bug
  933587)
* No change rebuild.
* [071f6b3] Implements extension discovery (bug 928054) [cdac09e]
  Support unicode in the keystone database. [c2142af] fleshing out
  architecture docs
* [2124890] XML de/serialization (bug 928058) [e23ecc6] Update
  auth_token middleware so it sets X_USER_ID.
* [c2142af] fleshing out architecture docs
* [e23ecc6] Update auth_token middleware so it sets X_USER_ID.
* [b4d35d6] Adds AUTHORS file generated from git log (and de-
  duplicated). [7530b8e] The default nova compute port is 8774.
  [c4411c1] Fix case of admin role in middleware. [1395bb4] Fix
  MANIFEST.in to include missing files [09a64dd] Create
  tools/sample_data.sh [036b990] Backslash continuations (Keystone)
  [510061e] Removing broken & redundant code (bug 933555)
* No change rebuild.
* [8465ef1] Remove extraneous _validate_claims() arg. [1f119bc] Use
  cfg's new print_help() method [762b461] Remove cfg dict mixin
  [e5a3e09] Update cfg from openstack-common [e6a23e3] fix the style
  guide to match the code
* No change rebuild.
* [baedc45] Correct config name for max_pool_size.
* [d679baf] Move cfg to keystone.openstack.common
* [45d6aa1] Fix copyright dates and remove duplicate Apache licenses.
  [de3ad7a] Add migration path for Nova auth [13dfd21] Fix thinko in
  keystone-all sys.path hack
* [83c7933] some additional style bits [de3ad7a] Add migration path
  for Nova auth [13dfd21] Fix thinko in keystone-all sys.path hack
  Ignore sqlite.db files [43c8bbc] Removing unused imports from
  keystone.cli [fb4f379] Update docs for Swift and S3 middlewares.
* No change rebuild.
* [08a3060] Re-adds admin_pass/user to auth_tok middleware. [77c11b2]
  Implements admin logic for tenant_list call. [73f22e1] Implemented
  get_tenant_users. Fixed bug 933721. [43c8bbc] Removing unused
  imports from keystone.cli [fb4f379] Update docs for Swift and S3
  middlewares.
* [c233b44] cli now returns an exit status cmd is invalid. [77c11b2]
  Implements admin logic for tenant_list call. [73f22e1] Implemented
  get_tenant_users. Fixed bug 933721. [43c8bbc] Removing unused
  imports from keystone.cli [460504f] Remove data_files section from
  setup.py. [1143802] Update Manifest.in [9246e04] fixes #934459
* No change rebuild.
* [faf6866] Set include_package_data=True in setup.py. [460504f]
  Remove data_files section from setup.py. [1143802] Update
  Manifest.in [2feb519] Add migrate.cfg to data_files in setup.py
  Admin version pipeline not utilized (bug 925548) [546f952] Fix
  logging.config import [8712abb] backport some asserts [892ba0f]
  remove pycli [02ef19a] Adds missing argument to add_user_to_tenant
  in create_user. [e238427] Fixes a failure caused by a recent change
  to user update in the client. [3093980] remove executable bit from
  setup.py [484dc24] Raising 'NotImplmented' results in TypeError
  [8d7189f] Added Apache 2.0 License information. [90068b0] Add docs
  on keystone_old -> ksl migration [71436db] Add token expiration
  add catalog export [e1a9a1f] Handle unicode keys in memcache token
  backend [ed793ad] make sure passwords work after migration [b409629]
  add legacy diablo import tests [48f2f65] change password hash
  [aa2656c] add essex test as well [700a397] add sql for import legacy
  tests [63adca3] add import legacy cli command [eb5a939] add
  migration from legacy db [de8c958] remove keystoneclient-based
  manage commands [9f03722] Remove executable bit from auth_token.py
  [6c5c964] Update swift token middleware. [af28360] Add s3_token.
  [0e775d6] Add pagination to GET /tokens [79faa28] Fixes role
  checking for admin check [d049c19] Fix webob exceptions in
  test_middlware [363a5d6] Add tests for core middleware [9028f32] Add
  version description to root path [2c18314] Add TokenNotFound
  exception [ae55fdc] remove diablo tests, they aren't doing much
  [e5ffa74] Fix largest memory leak in ksl tests [05b2583] Add
  memcache token backend [c64a12f] Friendly JSON exceptions (bug
  928061, bug 928062) [26655dc] Fix comment on bcrypt and avoid hard-
  coding 29 as the salt length [c680d7c] Add SQL token backend
  [6013dd8] Add content-type to responses [9528060] Cope with unicode
  passwords or None [a3d21f0] Add auth checks to ec2 credential crud
  operations [51eda01] termie all the things [f9a8827] example in
  hacking was incorrect [f0f8dde] Ensures duplicate users and tenants
  can't be made [3efce6d] make pip requires match nova [aed78aa] fixes
  lp:925721 adds .gitreview for redux branch [fabad5a] remove
  novaclient, fix python syntax [fa5b2e4] We don't need all the deps
  to check pep8. [9dadf01] remove extra line [b6a142d] Make ec2 auth
  actually work [62a92c4] fixing grammar, noting broken enable, adding
  hacking with prefs for project [e0afc0d] Removed unused reference
  [fca3e9c] adding a token service Driver to define the interface
  [6a5c524] Added support for DELETE /tokens/{token_id} [cc37127] ran
  through all commands to verify keywords against current (master)
  keystonelight [32ff03b] updating docs: [4f651ba] updating tox.ini
  with test pip requirements [446b268] use our own logging module
  [433e7db] minor docstring update for new locations [0027f90] Missed
  one more keystone-server. [69bb042] Renamed keystone-server to
  keystone-all based on comments in LP: #910484. [40525e0] be more
  safe with getting json aprams [a703983] skip the two tests where
  testing code is failing [3cfea52] accept POST or PUT for tenant
  update [09bd758] deal with reparsing the config files [37e1c5c]
  don't automatically parse sys.argv for cfg [0b34e5f] deal with tags
  in git checkout [6fd68e1] fix keystoneclient tests [c6e30eb] add
  tests for essex and fix the testing framework [2d2ce8c] Update
  docs/source/developing.rst [ec89d4e] Change the name of keystone to
  keystone-server so the binaries dont conflict with python-
  keystoneclient. [3da6575] Normalize build files with current
  jenkins. [fc3de24] Use gerrit instead of github [cf3f671] Fix pep8
  violations. [666a2b8] Add .gitreview file. [8d695b8] removing unused
  images, cleaning up RST in docstrings from sphinx warnings [d961f7c]
  pep8 cleanup [9d7d898] shifting contents from _static to static
  [d1f4ddc] adding in testing details [22c3f80] moved notes from
  README.rst into docs/architecture.rst [ef8b8f1] updating formating
  for configuration page [1908a2d] format tweaks and moving old docs
  [fec7598] shifting older docs into old/ directory [e643f23] doc
  updates [6b38e3c] moving in all the original docs from keystone
  fixing up PIP requirements for testing and virtualenv [103fc87]
  indents. [3974760] Make it as a subclass. [d6d56e4] fix style and
  termie's comments about comments [726b5ad] invalid params for
  roles.delete [d5443e2] initial stab at requiring adminness [b1cd214]
  Simplify code. [1efee11] add tests that auth with tenant user isn't
  member of [fcea15d] Add s3tokens validation. [d4f2bf5] add a bunch
  of basic tests for the cli [608b9a2] remove this useless catalog
  [de6a98a] move cli code into a module for testing [a6a6124] allow
  class names to be different from attr names [f5dbc98] add ec2
  credentials to the cli [51a2c18] fix middleware [4899210] bcrypt the
  passwords [e344821] fix token vs auth_token [9f0bb49] some quick
  fixes to cli, tests incoming [aaf75e9] fix pep8 [e4a00e0] fix some
  more pass-by-reference bugs [da4f955] strip password before checking
  output [8ad8d88] flip actual and expected to match common api
  [8ffee09] don't allow disabled users to authenticate [5a8a8ae] turn
  off echo [2ebb89b] fix invalid_password, skip ec2 tests [57b24dd]
  strip password from sql backend [3cce41e] raise and catch correct
  authenticate error [c59370e] rely on internal _get_user for update
  calls [36a0190] strip password from kvs backend [86dad07] fix
  user_get/user_list tests [28760bd] removing the sphinx_build from
  setup.py, adding how to run the docs into the README [f943977] ec2
  docs [269159f] simple docstrings for ec2 crud [d8ddc07] get docs
  working [ea78b2e] some cli improvements [c83bcb1] add checks for no
  password attribute [2a91b1c] users with correct credentials but
  disabled are forbidden not unauthorized [f40198d] shimming in basics
  from original keystone [3d2bb3a] test login fails with invalid
  password or disabled user [ffeb0e5] doctry [0df93eb] use
  token_client in token tests [71faa9f] remove duplicate pycli from
  pip-requires [ecabdd1] fix ec2 sql config [21cfcfc] get_client lets
  you send user and tenant [cbc1558] update how user is specified in
  tests [c1fe998] rename ec2 tests to be more explicit [e567fb9] use
  the sql backend for ec2 tests [88b0a4b] more failing ec2 tests
  [f28a03c] add METADATA for boo [7b4c26d] add (failing) tests for
  scoping ec2 crud [781feaf] add some docs that got overwritten last
  night [89c378c] fix pep8 [f226234] update tests [fc79bbe] update
  some names [e2f04f2] fix some imports [ff6af1f] split up sql
  backends too [308a766] split up the services and kvs backends
  [909012a] establish basic structure [f0e3e7f] add docs for various
  service managers [94f78a3] expect sphinx sources to be autogenned
  [bf7e6fb] some tiny docs [e129d5f] fix sphinx [198d168] testing rst
  on github [67d4a7c] updating dependencies for ksl [e75f7be] needed
  to do more for cli opts [76c45b4] make a main in keystone-manage
  [3c10e73] fix pep8 error [9d04ee9] rename apidoc to autodoc
  [53ec23a] Fix typo [f16a262] return to starting directory after git
  work [44c6b69] spacing [1418925] tests for ec2 crud [dae746d] add
  keystoneclient expected format [a0c7c7c] add sql backend, too
  [afd897f] add an ec2 extension [2ed9759] update readme [8c33e66] re-
  indent [c233dc2] re-indent [bd974c9] re-indent [9ab0a42] re-indent
  kvs.py [9d7c5c0] re-indent test.py [6a48676] remove models.py
  [7b0f71b] add some docs to manager [deab5c4] dynamic manager classes
  for now [1bd1349] add a couple more tests [8ea6e8f] add some more
  todos [be52a5e] strip newlines [2a31259] TODO [2d6b348] add role
  refs to validate token [aea09bd] fix token auth [c25155a] check for
  membership [4ae246d] flush that sht [61ecf60] add more middleware
  [ef1a474] fixing WatchedFileHandler [c830305] logging to debugging
  by default for now [2723439] add a noop controller [cd37b05] woops
  [52da891] add glance middleware ?? [47908a4] add legacy middleware
  [ec85749] fix setup.py [d230857] adding #vim to file with changed
  indent [230a003] add id-only flag to return IDs [5961430] rename ks
  to keystone-manage [d940dc4] fixing imports for syslog handlers and
  gettext [c3c05cb] adding gettext [393aedb] adding logging from
  configuration files, default logging per common [6540120] cli using
  keystoneclient [732909a] add a db_sync command to bin/ks, remove
  others [3c88b7f] merge test and default configs [2c60c7f] adding
  project to keystone config to find default config files [1d6334d]
  some more config in bin/keystone [74170ee] in the bin config too
  keystone_compat -> service [75e781a] remove keystone from names,
  remove service [51df8b1] remove default configuration [8f46af0]
  basic service running again [2340dee] rename extras to metadata
  [8362442] version number in setup.py [a84930a] add basic sphinx doc
  bits [1967545] remove references to keystone light [763013c]
  renaming keystonelight to keystone [13ec79b] keystoneclient tests
  working against sql backend [4b4ada2] run all teh keystoneclient
  tests against sql too [0f6a9a7] move everything over to the default
  config [feadf75] config system overhaul [829a96b] add nova's cfg
  framework [8fdcb69] fix pep8 [c8ed28c] missed a file [6495d41] most
  tests working again [119808d] still wip, got migration mostly
  working [775b8ed] get the sql ball rolling, still wip [b766165] add
  sql backend, WIP [9691c0f] tweaking for running regular tests in
  jenkins [205a7b9] finished up services stuff [ebe158f] add the
  various role tests [5c89972] add list users [46943c5] get user tests
  working [ff15e5f] get endpoints test working [c6d6d43] get
  tenant_add_and_remove_user test working [94e9d6b] tenant test
  working again [e396650] copy over the os-ksadm extension [23c6f49]
  example crud extension for create_tenant [63c7934] get some tests
  working again [0e7f06d] merge fixes [30a1146] fixup [c5b1b6f] Made
  tests use both service and admin endpoints [2fb294f] All tests but
  create_tenant pass [f2a9c51] Split keystone compat by admin and
  service endpoints [3eb2adf] Added broken tests to show compatibility
  gaps [4b55fa5] Split keystone compat by admin and service endpoints
  [909770d] move novaclient tests over also [9e8ec25] clean up
  test_identity_api [2e1558e] clean up keystoneclient setup [32aa1de]
  add role crud [a32c73c] speed up tests [8425eab] add basic fixture
  functionality [7541ed4] documentation driven development [b4eba62]
  novaclient now requires prettytable [26a4cde] whitespace [5ff67d7]
  whitespace [82f6445] make create_tenant work for keystone api
  [29e1336] common ks client creation [5e4a877] updating of docs
  [e4428dc] working on a tenant_create test [99f81d5] standardize
  spacing [a0d0669] novaclient uses password instead of apikey
  [b42859f] update to use the correct repo for python-novaclient
  [cad238d] fix tenant auth tests [91f2097] add an example for
  capability rbac [e5d1050] make readme use code style [860aa86] add
  the policy code [63943c9] describe and add a policy backend
  [d820917] policty stub [834301a] re-indent [b0733ca] change array
  syntax [3479575] updates to make compatible with middleware
  handle unscoped requests [20bebd9] adjust default port [17e03b8]
  move noop to identity controller [9024351] allow setting user_id on
  create [776a159] users require a name [c8b28b5] pep8 [8eea6b3]
  update test conf too [1335e4c] cli for adding users, tenants, extras
  [9d99821] adjust paths and use composite apps [2545907] add tests
  for extras [3ab9d87] add tenant crud [f8e6fae] oops, forgot update
  in crud [7035e4a] add crud tests [54f32f9] add crud tests [d0009db]
  add crud tests [8ff5606] add test for create user and get user
  [2c7770f] add test for create user and get user [2d15482] re-indent
  identity.py [9105935] don't pep8 swp files [e8f72ed] accept data as
  kwargs for crud [adbbe01] use the keystone app in the conf [6c84c1b]
  reorg [f2e73bc] re-indent service.py [e10512b] more dyanmic client
  update service to middleware in confs [d7f364e] move around
  middleware [716c450] make a composite app [59c2dea] add crud methods
  to identity manager [570b08d] cli beginnings [64b369f] add admin
  port [4885d4a] add an etc dir [cd712b2] add a default handler for /
  [8ae627a] add a stubby setup.py [3117b41] use paste for the binary
  [3d79099] add a trivial admin-only middleware [8fd8220] update
  keystone sample tests, skip one [3212101] add crud info to readme
  [44a07fd] get novaclient tests working [3439a77] add novaclient,
  intermediate [2bc4376] add run_tests.sh and pep8 stuff [d17e1cf]
  remove italics on Light [29e4e54] modify requirements [6cb7e6c] link
  diagrams [002ae33] whitespace [344d21c] added catalog tests
  [f86bf25] added tests for tokens [3f0137a] test the other methods
  too [912c222] add some tests and get others to pass [4c8a5ac] add
  some failing tests [b514897] add a default conf [4b48845] minor
  whitespace cleanup [f8ec4f6] add some todo [d3cc798] add example
  authenticate and tenants working [2f2465e] working authenticate in
  keystoneclient [3caf2a8] remove test_keystone_compat's catalog tests
  [4ba33be] add templated catalog backend [2ac753e] everything but the
  catalog [583e3c9] get a checkout of keystoneclient [d920d84]
  authenticate working, too [ba4913f] base tests on keystone-
  diablo/stable [a98b2ed] get tenants passing, yay [f886ab9] flow
  working, added debugging [06944e8] add context to calls [ef9f039]
  move diagram into docs dir [7427b1a] refactor keystone compat and
  add catalog service [c8d4e88] added sequence diagrams for keystone
  compat [50d64c3] getting closer, need to match api now [35ec297]
  tests running through, still failing [a200e50] add a test client
  [03b75a5] added a test, need to get it working now [a328b99] working
  with dashboard [8cd7f5c] add get_tenants [9a0ec99] rudimentary login
  working [158dfba] most bits working [419c2cb] initial
* No change rebuild.
* [9452cf0] Fixes bug 924391
* [bfe9abe] Fix "KeyError: 'service-header-mappings'" [9858e08]
  Removes nova middleware and config from keystone [1ea4e4f] Added
  keystone-manage list_role_grants (bug 923933)
* No change rebuild.
* No change rebuild.
* [f76477c] Update auth_token middleware to support creds.
* [d2e6f63] Added shortcut for id=NULL queries (bug 916386) [a86a661]
  Removing __init__ from non-packages (bug 921054) [fd36f1f] add
  instructions for setting up a devenv on openSUSE 11.4 and 12.1
  [2e73dfa] Documented race condition (bug 921634)
* No change rebuild.
* No change rebuild.
* [2efd311] Test coverage for issue described in bug 919335 [fd36f1f]
  add instructions for setting up a devenv on openSUSE 11.4 and 12.1
* [a86a661] Removing __init__ from non-packages (bug 921054) [053345c]
  Forgot to update models (bug 885426) [9e9e7f0] Updating example
  glance paste config.
* [d1a3c5f] Fix race in TestCreateTokenCommand (bug 921634) [053345c]
  Forgot to update models (bug 885426) [9e9e7f0] Updating example
  glance paste config.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* [b1581a1] Migrated 'enabled' int columns to bool for postgres (bug
  885426) [b207a49] Return Version and Tenant in Endpoints
* [8c6e606] Updated bp keystone-configuration for bp keystone-manage2
* [b207a49] Return Version and Tenant in Endpoints
* [23c396d] Updated error message for keystone-manage2
* [e2f8607] Added: "UserWithPassword" Added: "UserWithOnlyEnabled"
  Removed: "UserWithOnlyPassword" [b680202] Fix for bug 921126
* No change rebuild.
* [2dbb2a6] Update Extended Credentials (EC2, S3) [ef6c133] Release
  Notes for E3 [5ce7e70] Restore Console Info Logging - bp keystone-
  logging
* No change rebuild.
* No change rebuild.
* [027782a] Adds keystone auth-n/auth-z for Swift S3 API.
* [5b8682f] Implement cfg.py
* [28dac45] Implement Secure Token Auth [5f69fbb] Fixed: Inserting
  URLs into endpoint version attr
* [92462c8] Suppressed backtraces in tests causes sweaty eyes
* [5f69fbb] Fixed: Inserting URLs into endpoint version attr
* [45b3636] Addresses bug 918608
* [f2726df] Added Vary header to support caching (bug 913895)
  [6362857] Handle EC2 Credentials on /tokens
* No change rebuild.
* [95fb6d1] Implemented subparsers (bp keystone-manage2)
* [9e1e113] Fixed PEP8 violations and disallowed them
* [8b3df32] Implemented bp keystone-manage2
* [8c98285] Fixes 918535: time not properly parsed in auth_token
  middleware [1b44286] fix bug lp:843064
* [159757c] Use dateutil 1.5 [1b44286] fix bug lp:843064
* [70e5a00] Prestage fix - fixed requirement name; python-dateutil,
  not dateutil [7c0529f] Bug #916199: keystone-manage service list
  fails with AttributeError on Service.description [3d08211] Fix LDAP
  Schema Syntax (bug 904380)
* [2d18686] Pre-staging pip requires [7681a01] Exception raise error
  [e03ff6e] Updates to middleware to deprecate X_USER [3d08211] Fix
  LDAP Schema Syntax (bug 904380)
* [7c0529f] Bug #916199: keystone-manage service list fails with
  AttributeError on Service.description [e03ff6e] Updates to
  middleware to deprecate X_USER [3d08211] Fix LDAP Schema Syntax (bug
  904380)
* [7681a01] Exception raise error [eedd271] Revert "Exception raise
  error" [fa95e14] Bug #915544: keystone-manage version 1 commands
  broken when using flags
* [e03ff6e] Updates to middleware to deprecate X_USER [fa95e14] Bug
  #915544: keystone-manage version 1 commands broken when using flags
* [eedd271] Revert "Exception raise error" [fa95e14] Bug #915544:
  keystone-manage version 1 commands broken when using flags
* No change rebuild.
* [45c62a8] Exception raise error [ee617f4] Fix minor typo [3f70358]
  Add 'tenants' to Auth & Validate Response [1c2708f] Fixed Test
  Coverage Handling [73525ac] Adding prettytable dependency [105b908]
  Front-end logging [870c1aa] Implement Role Model [876e309] xsd fixes
  [82852a7] Added decorators for admin and service_admin checks
  [2e3ee14] Initial keystone-manage rewrite (bp keystone-manage2)
  [fe74938] Correct endpoint template URLs in docs.
* No change rebuild.
* debian/patches/temp_fix_keystone_manage.patch: Update
* No change rebuild.
* debian/patches/temp_fix_keystone_manage.patch: Temp. patch to get moving during sprint
* No change rebuild.
* [0762754] Show useful traceback if manage command fails [3f70358]
  Add 'tenants' to Auth & Validate Response [1c2708f] Fixed Test
  Coverage Handling
* [ee617f4] Fix minor typo
* [73525ac] Adding prettytable dependency [105b908] Front-end logging
  [870c1aa] Implement Role Model [876e309] xsd fixes [82852a7] Added
  decorators for admin and service_admin checks [2e3ee14] Initial
  keystone-manage rewrite (bp keystone-manage2) [fe74938] Correct
  endpoint template URLs in docs.
* [73525ac] Adding prettytable dependency [105b908] Front-end logging
  [870c1aa] Implement Role Model [876e309] xsd fixes [82852a7] Added
  decorators for admin and service_admin checks [2e3ee14] Initial
  keystone-manage rewrite (bp keystone-manage2) [fe74938] Correct
  endpoint template URLs in docs.
* [105b908] Front-end logging [870c1aa] Implement Role Model [876e309]
  xsd fixes [82852a7] Added decorators for admin and service_admin
  checks [2e3ee14] Initial keystone-manage rewrite (bp keystone-
  manage2) [fe74938] Correct endpoint template URLs in docs.
* [870c1aa] Implement Role Model [876e309] xsd fixes [82852a7] Added
  decorators for admin and service_admin checks [2e3ee14] Initial
  keystone-manage rewrite (bp keystone-manage2) [fe74938] Correct
  endpoint template URLs in docs.
* [876e309] xsd fixes [82852a7] Added decorators for admin and
  service_admin checks [2e3ee14] Initial keystone-manage rewrite (bp
  keystone-manage2) [fe74938] Correct endpoint template URLs in docs.
* [82852a7] Added decorators for admin and service_admin checks
  [2e3ee14] Initial keystone-manage rewrite (bp keystone-manage2)
  [fe74938] Correct endpoint template URLs in docs.
* [82852a7] Added decorators for admin and service_admin checks

Author: Openstack Ubuntu Testing Bot
Revision Date: 2012-02-16 02:15:35 UTC

* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* [2f554c4] Updating example glance paste config. [44075e1] Removing
  __init__ from non-packages (bug 921054) [8cc0d36] Document & reduce
  potential for race condition (bug 921634)
* [4e38cd6] Forgot to update models (bug 885426) [b1581a1] Migrated
  'enabled' int columns to bool for postgres (bug 885426) [8c6e606]
  Updated bp keystone-configuration for bp keystone-manage2 [b207a49]
  Return Version and Tenant in Endpoints [23c396d] Updated error
  message for keystone-manage2
* No change rebuild.
* No change rebuild.
* No change rebuild.
* No change rebuild.
* [b1581a1] Migrated 'enabled' int columns to bool for postgres (bug
  885426) [b207a49] Return Version and Tenant in Endpoints
* [8c6e606] Updated bp keystone-configuration for bp keystone-manage2
* [b207a49] Return Version and Tenant in Endpoints
* [23c396d] Updated error message for keystone-manage2
* [e2f8607] Added: "UserWithPassword" Added: "UserWithOnlyEnabled"
  Removed: "UserWithOnlyPassword" [b680202] Fix for bug 921126
* No change rebuild.
* [2dbb2a6] Update Extended Credentials (EC2, S3) [ef6c133] Release
  Notes for E3 [5ce7e70] Restore Console Info Logging - bp keystone-
  logging
* No change rebuild.
* No change rebuild.
* [027782a] Adds keystone auth-n/auth-z for Swift S3 API.
* [5b8682f] Implement cfg.py
* [28dac45] Implement Secure Token Auth [5f69fbb] Fixed: Inserting
  URLs into endpoint version attr
* [92462c8] Suppressed backtraces in tests causes sweaty eyes
* [5f69fbb] Fixed: Inserting URLs into endpoint version attr
* [45b3636] Addresses bug 918608
* [f2726df] Added Vary header to support caching (bug 913895)
  [6362857] Handle EC2 Credentials on /tokens
* No change rebuild.
* [95fb6d1] Implemented subparsers (bp keystone-manage2)
* [9e1e113] Fixed PEP8 violations and disallowed them
* [8b3df32] Implemented bp keystone-manage2
* [8c98285] Fixes 918535: time not properly parsed in auth_token
  middleware [1b44286] fix bug lp:843064
* [159757c] Use dateutil 1.5 [1b44286] fix bug lp:843064
* [70e5a00] Prestage fix - fixed requirement name; python-dateutil,
  not dateutil [7c0529f] Bug #916199: keystone-manage service list
  fails with AttributeError on Service.description [3d08211] Fix LDAP
  Schema Syntax (bug 904380)
* [2d18686] Pre-staging pip requires [7681a01] Exception raise error
  [e03ff6e] Updates to middleware to deprecate X_USER [3d08211] Fix
  LDAP Schema Syntax (bug 904380)
* [7c0529f] Bug #916199: keystone-manage service list fails with
  AttributeError on Service.description [e03ff6e] Updates to
  middleware to deprecate X_USER [3d08211] Fix LDAP Schema Syntax (bug
  904380)
* [7681a01] Exception raise error [eedd271] Revert "Exception raise
  error" [fa95e14] Bug #915544: keystone-manage version 1 commands
  broken when using flags
* [e03ff6e] Updates to middleware to deprecate X_USER [fa95e14] Bug
  #915544: keystone-manage version 1 commands broken when using flags
* [eedd271] Revert "Exception raise error" [fa95e14] Bug #915544:
  keystone-manage version 1 commands broken when using flags
* No change rebuild.
* [45c62a8] Exception raise error [ee617f4] Fix minor typo [3f70358]
  Add 'tenants' to Auth & Validate Response [1c2708f] Fixed Test
  Coverage Handling [73525ac] Adding prettytable dependency [105b908]
  Front-end logging [870c1aa] Implement Role Model [876e309] xsd fixes
  [82852a7] Added decorators for admin and service_admin checks
  [2e3ee14] Initial keystone-manage rewrite (bp keystone-manage2)
  [fe74938] Correct endpoint template URLs in docs.
* No change rebuild.
* debian/patches/temp_fix_keystone_manage.patch: Update
* No change rebuild.
* debian/patches/temp_fix_keystone_manage.patch: Temp. patch to get moving during sprint
* No change rebuild.
* [0762754] Show useful traceback if manage command fails [3f70358]
  Add 'tenants' to Auth & Validate Response [1c2708f] Fixed Test
  Coverage Handling
* [ee617f4] Fix minor typo
* [73525ac] Adding prettytable dependency [105b908] Front-end logging
  [870c1aa] Implement Role Model [876e309] xsd fixes [82852a7] Added
  decorators for admin and service_admin checks [2e3ee14] Initial
  keystone-manage rewrite (bp keystone-manage2) [fe74938] Correct
  endpoint template URLs in docs.
* [73525ac] Adding prettytable dependency [105b908] Front-end logging
  [870c1aa] Implement Role Model [876e309] xsd fixes [82852a7] Added
  decorators for admin and service_admin checks [2e3ee14] Initial
  keystone-manage rewrite (bp keystone-manage2) [fe74938] Correct
  endpoint template URLs in docs.
* [105b908] Front-end logging [870c1aa] Implement Role Model [876e309]
  xsd fixes [82852a7] Added decorators for admin and service_admin
  checks [2e3ee14] Initial keystone-manage rewrite (bp keystone-
  manage2) [fe74938] Correct endpoint template URLs in docs.
* [870c1aa] Implement Role Model [876e309] xsd fixes [82852a7] Added
  decorators for admin and service_admin checks [2e3ee14] Initial
  keystone-manage rewrite (bp keystone-manage2) [fe74938] Correct
  endpoint template URLs in docs.
* [876e309] xsd fixes [82852a7] Added decorators for admin and
  service_admin checks [2e3ee14] Initial keystone-manage rewrite (bp
  keystone-manage2) [fe74938] Correct endpoint template URLs in docs.
* [82852a7] Added decorators for admin and service_admin checks
  [2e3ee14] Initial keystone-manage rewrite (bp keystone-manage2)
  [fe74938] Correct endpoint template URLs in docs.
* [82852a7] Added decorators for admin and service_admin checks

Author: Adam Gandelman
Revision Date: 2013-05-23 20:17:30 UTC

* Dropped patches, applied upstream:
  - debian/patches/CVE-2013-2059.patch: [992466d]

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-10-09 02:59:32 UTC

OpenStack Ubuntu Testing commit tracking:
    - [7244e53] Disabling a tenant would not disable a user token LP: 1179955

Author: Adam Gandelman
Revision Date: 2013-06-17 04:59:01 UTC

Rebased to include latest security updates.

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-12-15 23:01:39 UTC

OpenStack Ubuntu Testing commit tracking:
    - [2382569] Pin Sphinx to <1.2

Author: Adam Gandelman
Revision Date: 2013-06-12 18:17:36 UTC

TRIVIAL: d/keystone.install: Fix path to keystone-paste.ini

Author: Openstack Ubuntu Testing Bot
Revision Date: 2014-07-24 22:39:18 UTC

OpenStack Ubuntu Testing commit tracking:
    - [8d008af] qpid driver for oslo.messaging uses 'wrong' address for direct
      publisher LP: 1300318

Author: Yolanda Robla
Revision Date: 2012-12-17 10:49:43 UTC

[ Yolanda Robla Mota ]
* Resynchronize with stable/essex (c17a9992):
  - [8735009] Removing user from a tenant isn't invalidating user access to
    tenant (CVE-2012-5571)
  - [025b1d5] Jenkins jobs fail because of incompatibility between sqlalchemy-
    migrate and the newest sqlalchemy-0.8.0b1 (LP: #1073569)
  - [ddb4019] Open 2012.1.4 development
  - [0e1f05e] memcache driver needs protection against unicode user keys
    (LP: #1056373)
  - [176ee9b] Token invalidation in case of role grant/revoke should be
    limited to affected tenant (LP: #1050025)
  - [58ac669] Token validation includes revoked roles (CVE-2012-4413)
  - [cd1e48a] Memcached Token Backend does not support list tokens
    (LP: #1046905)
  - [5438d3b] Update user's default tenant partially succeeds without authz
    (CVE-2012-3542)
* Dropped, superseeded by new snapshot:
  - debian/patches/CVE-2012-4413.patch [58ac669]
  - debian/patches/CVE-2012-5571.patch [8735009]
  - debian/patches/CVE-2012-3542.patch [5438d3b]
* SECURITY UPDATE: fix for EC2-style credentials invalidation
  - debian/patches/CVE-2012-5571.patch: adjust contrib/ec2/core.py to verify
    that the user is in at least one valid role for the tenant
  - CVE-2012-5571
  - LP: #1064914
* SECURITY UPDATE: Pre-existing tokens continue to be valid after
  granting or revoking a user's access (LP: #1041396)
  - debian/patches/keystone-CVE-2012-4413.patch: invalidate all user
    tokens upon role grant/revoke
  - CVE-2012-4413
* SECURITY UPDATE: tenants are able to be added to users without
  authorization (LP: #1040626)
  - debian/patches/keystone-CVE-2012-3542: require authz to update a
    user's tenant.
  - CVE-2012-3542

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-02-20 12:02:59 UTC

* Automated Ubuntu testing build:
* [7402f5e] Ensure user and tenant enabled in EC2
* Automated Ubuntu testing build:
* [8945567] Disable XML entity parsing
* [7b5b72f] Add size validations for /tokens.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ef1e682] Pin docutils to 0.9.1.
* [8735009] Ensures User is member of tenant in ec2 validation
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [025b1d5] pin sqlalchemy to 0.7
* [8735009] Ensures User is member of tenant in ec2 validation
* [ddb4019] Open 2012.1.4 development
* [0e1f05e] utf-8 encode user keys in memcache (bug 1056373)
* [176ee9b] Limit token revocation to tenant (bug 1050025)
* [58ac669] Delete user tokens after role grant/revoke
* Automated Ubuntu testing build:
* [cd1e48a] List tokens for memcached backend
* Automated Ubuntu testing build:
* [5438d3b] Require authz to update user's tenant (bug 1040626)
* [a130848] Allow overloading of username and tenant name in the
  config files.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ff6df7c] Returning roles from authenticate in ldap backend
* [a130848] Allow overloading of username and tenant name in the
  config files.
* Automated Ubuntu testing build: [708c80e] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [d56a3fb] Import ec2 credentials
  from old keystone db
* Automated Ubuntu testing build: [afc37ae] Open 2012.1.2 development
* Automated Ubuntu testing build: [359c426] Open 2012.1.3 development
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [708c80e] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [5373601] Raise unauthorized if
  tenant disabled (bug 988920)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [708c80e] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [d56a3fb] Import ec2 credentials
  from old keystone db
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [707b725] Set defaultbranch in
  .gitreview to stable/essex
* Automated Ubuntu testing build: [24df3ad] Require authz for service
  CRUD (bug 1006822)
* Automated Ubuntu testing build: [14b136a] Require authz for user
  role list (bug 1006815)
* Automated Ubuntu testing build: [0b95c3c] cleanup dependent data
  upon user/tenant deletion
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d8dbdbc] Monkey patching 'thread'.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [29e74e7] Carrying over token expiry time when token chaining
* [d960043] Invalidate user tokens when a user is disabled
* [ea03d05] Invalidate user tokens when password is changed
* [18513c3] Open 2012.1.1 development
* [f70505c] Fix expired token tests
* Automated Ubuntu testing build:
* [7715d6c] Fix test env for the stable branch
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [aff45d6] Make import_nova_auth only create roles which don't
  already exist
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [7d08d12] Remove tenant membership during user deletion
* [aa542c4] Add a _ at the end of reseller_prefix default.
* [89e8dc0] Add support to swift_auth for tokenless authz
* [4314ae6] additional logging to support debugging auth issue
* [bc153d5] Fixed misc errors in configuration.rst

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-03-21 14:17:58 UTC

* Automated Ubuntu testing build:
* [255b1d4] validate from backend (bug 1129713)
* Automated Ubuntu testing build:
* [8690166] Backport of fix for 24-hour failure of pki.
* Automated Ubuntu testing build:
* [790c87e] Sync timeutils to pick up normalize fix.
* [8a22745] Disable XML entity parsing
* Automated Ubuntu testing build:
* [f0b4d30] Ensure user and tenant enabled in EC2
* Automated Ubuntu testing build:
* [8a22745] Disable XML entity parsing
* [bb2226f] Add size validations for /tokens.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b3bd5fd] Bump version to 2012.2.4
* Automated Ubuntu testing build:
* [ec7b94d] Render content-type appropriate 404 (bug 1089987)
* [9e300b7] Test 0.2.0 keystoneclient to avoid new deps
* [70e55f9] Fix catalog when services have no URL
* [6c95b73] Unparseable endpoint URL's should raise friendly error
* [ec06625] Ensure serviceCatalog is list when empty, not dict
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c387f84] Bump next version to 2012.2.3
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [7869c3e] Bump next version to 2012.2.2
* Automated Ubuntu testing build:
* [f9d4766] Ensure token expiration is maintained
* [80d63c8] Properly list tokens with a null tenant
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [37308dd] Ensures User is member of tenant in ec2 validation
* [bec9b68] bug 1068674
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ee645e6] pin sqlalchemy to 0.7
* Automated Ubuntu testing build:
* [094c494] replacing PKI token detection from content length to
  content prefix. (bug 1060389)
* [3cd343b] Fixed bug 1068851. Refreshed new crypto for the SSL tests.
* [2f9807e] Set defaultbranch in .gitreview to stable/folsom
* [b0bbd8a] Bump next version to 2012.2.1
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* Automated Ubuntu testing build:
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* [af8b031] Fixed trivally true tests (bug 983304)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1a086] Limit token revocation to tenant (bug 1050025)
* [af8b031] Fixed trivally true tests (bug 983304)
* [2c29d4c] LDAP backend attribute fixes
* [1683d84] Document memcached host system time configuration.
* [b6e568e] Implement token endpoint list (bug 1006777)
* [861f27f] LOG.warn all exception.Unauthorized authentication
  failures
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [efb6b3f] Delete user tokens after role grant/revoke
* [235c4ce] Implementation of tenant,user,role list functions for ldap
* [fa9f0f1] Initialize Metadata variable
* [201a109] Cleanup PEP8 errors from Common
* [150413c] List tokens for memcached backend
* [32b82ae] Ignore eclipse files.
* [7d9b239] Sync some misc changes from openstack-common
* [e09a121] Sync latest cfg from openstack-common
* [a9ee611] Remove id_hash column
* [a411412] Fixed: test_default_tenant_uuid_token not running
* [5446577] Upgrade PEP8 to 1.3.3 (bug 1037303)
* [4c32b5c] Expand PEP8 coverage to include docs & tests
* [ac95f83] Removed/fixed unused variable references
* [b82a0e2] HACKING compliance & staticly init module vars
* [685c1c2] PEP8 fix E251
* [7ad8497] PEP8 fix
* [7c93e84] Removed unused imports
* [2759c22] Check for expected cfg impl (bug 1043479)
* [026bea6] Fixed typos in comment
* [8a84c03] HACKING: Import by full module path
* [379354b] HACKING: Use single quotes
* [13ce482] mistake in doc string
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [6b04662] Removed dead code
* [3fa4ba5] Fix auth_token middleware to fetch revocation list as
  admin.
* [98d3a89] Code cleanup in doc/source/conf.py
* [067fcf0] Typo fix in keystone: existant => existent
* [1749644] allow middleware configuration from app config
* [1698094] change verbose and debug to Fasle in keystone.conf.sample
* [ddc8995] add token_format=UUID to keystone.conf.sample
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c13d0ba] Require authz to update user's tenant (bug 1040626)
* [1749644] allow middleware configuration from app config
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [212f13b] PEP8 fix for PAM test.
* [308ca89] Removed stray print statement (bug 1038131)
* [e0a7ebd] Add tests for PAM authentication.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d04e99a] Support running the tests in the debugger.
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [bf45b45] Remove unused variables
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build:
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [bf5ce27] Adding missing files to
  MANIFEST.in
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [37ff759] Simplify the sql backend
  deletion of users and tenants.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [9d5261c] Implement python version
  of migration 002.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [4f3dcb6] Allow overloading of
  username and tenant name in the config files.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ba8f351] Assert adminness on token
  validation (bug 1030968)
* Automated Ubuntu testing build: [4444577] Set default signing_dir
  based on os USER.
* Automated Ubuntu testing build: [2b2d0a1] Log errors when
  signing/verifying.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [f82c7c2] Enabling SQL Catalog tests
  (bug 958950)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [f648819] Set iso8601 module as
  default dependence.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [5ad8086] keystone_manage
  certificate generation
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [c79d93b] Keystone should use
  openstack.common.timeutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [cb74707] Keystone should use
  openstack.common.jsonutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [23ca656] Refactor 404's into
  managers & drivers (bug 968519)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [3f9f77a] Monkey patching 'thread'.
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [79647c6] Reorder imports by full module path
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* Automated Ubuntu testing build:
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [e33a474] Clean up test requires a bit.
* [b2aa78b] Use cfg's new global CONF object
* [b2aa620] Add s3 extension in keystone.conf sample.
* [3ed1caf] Tweak for easier, safer subclassing
* [c785018] Revert file mode to be non-executable
* New release candidate for the Ubuntu Cloud Archive.
* New release candidate for the Ubuntu Cloud Archive.
* New release candidate for the Ubuntu Cloud Archive.
* debian/patches/sql_connection.patch: Refreshed
* Open precise-folsom-proposed.
* Merge with current quantal-folsom-proposed.

Author: Chuck Short
Revision Date: 2012-09-27 20:44:29 UTC

* New release candidate for the Ubuntu Cloud Archive.
* New upstream release.

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-03-28 12:53:24 UTC

* Automated Ubuntu testing build:
* [af31ecd] Fix test coverage for v2 scoped auth xml response (bug
  1160504)
* [4965c83] keystone commands don't print any version information
* Automated Ubuntu testing build:
* [3e55be0] Rename trust extension (bug 1158980)
* Automated Ubuntu testing build:
* [4f75f84] Add a dereference option for ldap
* Automated Ubuntu testing build:
* [63b8a82] Move trusts to extension
* [53450e2] Enable emulation for domains
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* [a6df07e] Version bump to 2013.2
* [53450e2] Enable emulation for domains
* Automated Ubuntu testing build:
* [601d993] Allow trusts to be optional
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [53450e2] Enable emulation for domains
* [533bb01] Correct spacing in warning msg
* [550973b] Prohibit V3 V2 token intermix for resource in non-default
  domain (bug 1157430)
* [3353996] Properly handle emulated ldap enablement
* [cd3f58a] Validate domains unconditionally (bug 1130236)
* Automated Ubuntu testing build:
* [7db01cd] Wrap config module and require manual setup (bug 1143998)
* [550973b] Prohibit V3 V2 token intermix for resource in non-default
  domain (bug 1157430)
* [3353996] Properly handle emulated ldap enablement
* [cd3f58a] Validate domains unconditionally (bug 1130236)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [533bb01] Correct spacing in warning msg
* Automated Ubuntu testing build:
* [5cb8e1f] Support for LDAP groups (bug #1092187)
* Automated Ubuntu testing build:
* [a066b69] Fix live ldap tests
* [975af8d] Pass project membership as dict in migration 015.
* [050ad91] Revise docs to use keystoneclient.middleware.auth_token
* Automated Ubuntu testing build:
* [75637be] V2, V3 token intermix for unscoped tokens (bug 1156913)
* [85910ce] Utilize legacy_endpoint_id column (bug 1154918)
* [050ad91] Revise docs to use keystoneclient.middleware.auth_token
* Automated Ubuntu testing build:
* [975af8d] Pass project membership as dict in migration 015.
* [85910ce] Utilize legacy_endpoint_id column (bug 1154918)
* [7c07de1] Test default_project_id scoping (bug 1023502)
* [167a8b7] Fix XML handling of member links (bug 1156594)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [90fcb99] Ensure delete domain removes all owned entities
* Automated Ubuntu testing build:
* [7c07de1] Test default_project_id scoping (bug 1023502)
* Automated Ubuntu testing build:
* [167a8b7] Fix XML handling of member links (bug 1156594)
* [eb4dd4a] extracting user and trust ids into normalized fields
* Automated Ubuntu testing build:
* [0a81b69] Discard null endpoints (bug 1152632)
* [eb4dd4a] extracting user and trust ids into normalized fields
* [c92b276] Remove duplicate password/token opts.
* [a80a1f8] xml_body returns backtrace on XMLSyntaxError
* [c515073] Fixes bug 1151747: broken XML translation for resource
  collections
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [2295db4] No parent exception to wrap
* [e551104] Migrate roles from metadata to user_project_metadata
* [3209db6] quiet route logging on skipped tests
* [fe28dda] Added test cases to improve LDAP project testing
* [82738b4] Remove TODO that didn't land in grizzly
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8e58384] duplicated trust tests
* [6853e18] Catch and log server exceptions
* [fe28dda] Added test cases to improve LDAP project testing
* [4ceaa57] Switch to final 1.1.0 oslo.config release
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* Automated Ubuntu testing build:
* [e551104] Migrate roles from metadata to user_project_metadata
* [6853e18] Catch and log server exceptions
* [fe28dda] Added test cases to improve LDAP project testing
* [4ceaa57] Switch to final 1.1.0 oslo.config release
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [f5edbae] Ensure tokens are revoked for relevant v3 api calls
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* [a6e2960] Explain LDAP page_size & default value
* Automated Ubuntu testing build:
* [6853e18] Catch and log server exceptions
* [f57f5ba] add belongs_to check
* [a6e2960] Explain LDAP page_size & default value
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b4adb6a] Improve tests for api protection and filtering
* [ca76e86] remove spurious roles check
* [f423429] cleanup trusts in controllers
* Automated Ubuntu testing build:
* [f57f5ba] add belongs_to check
* [ca76e86] remove spurious roles check
* [f423429] cleanup trusts in controllers
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [09e2fc7] Revert "update tests/__init__.py to verify openssl
  version"
* [ceefe7f] Revert "from tests import"
* [6308bf1] Run keystone server in debug mode.
* [806a2ca] bug 1133526
* [42bd756] Fix folsom -> grizzly role table migration issues (bug
  1119789)
* [d8599dc] from tests import
* [26ecdca] Change exception raised to Forbidden on trust_id
* [1e64378] Make getting user-domain roles backend independant
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [2dd6481] Make Keystone return v3 as part of the version api
* [a2c3636] Delete tokens for user
* [d8599dc] from tests import
* [31df378] v3 endpoints won't have legacy ID's (bug 1150930)
* [dd7d4fd] return 201 Created on POST request (bug1131119)
* [0297f6f] add missing attributes for group/project tables
  (bug1126021)
* [9789447] Remove unused methods from LDAP backed.
* [dea5eea] Move get_by_name to LdapBase.
* [38bf87b] fix typo in kvs backend
* [156f474] mark 2.0 API as stable
* [b1474da] unable to load certificate should abort request
* [ddd2216] Move auth plugins to 'keystone.auth.plugins' (bug 1136967)
* [26ecdca] Change exception raised to Forbidden on trust_id
* [be23b79] remove unused import
* [7b2d5a4] ports should be ints in config (bug 1137696)
* [c0f017c] Expand v3 trust test coverage
* [601eeb5] Trusts
* [ab6e552] bug 1134802: fix inconsistent format for expires_at and
  issued_at
* [a14b67e] Straighten out NotFound raising in LDAP backend.
* [1e64378] Make getting user-domain roles backend independant
* [7f20fee] Unpin pam dependency version
* [39f1260] keystone : Use Ec2Signer utility class from keystoneclient
* [eaab3c2] Remove obsolete *page[_marker] methods from LDAP backend.
* Automated Ubuntu testing build:
* [a899227] Sync timeutils with oslo
* [83d08cf] Enable a parameters on ldap to allow paged_search of ldap
  queries This fixes bug 1083463
* [72ec89b] update tests/__init__.py to verify openssl version
* [7f20fee] Unpin pam dependency version
* [a198f59] Setup logging in keystone-manage command.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [bec8b31] Imported Translations from Transifex
* [a198f59] Setup logging in keystone-manage command.
* Automated Ubuntu testing build:
* No change rebuild.
* d/watch: Update uversionmangle to deal with upstream versioning
  changes, remove tarballs.openstack.org.
* d/rules: Stop using packaging specific test overrides when
  running unit tests.
* New upstream release.
* debian/control: Clean-up build-depends
  - Dropped pylint not needed.
  - Dropped python-all-dev and python-support not needed.
  - Renamed python-oslo-config to python-oslo.config.
  - Dropped python-prettytable no longer needed.
  - Dropped pyhthon-novaclient no longer needed.
  - Dropped pep8 no longer needed.
 * debian/control:Clean-up depends:
  - Dropped python-prettytable no longer needed.
 * Update standards
* d/control: Bump python-keystoneclient version requirement to >= 1:0.2.3.
* debian/keystone.postinst: Run pki_setup during configure to intitialize
  PKI infrastructure for signed tokens (now enabled by default).
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [9fa6e0a] command line switch for short pep8 output.
* [250e671] bug 1131840: fix auth and token data for XML translation
* [b978211] domain_id_attributes in config.py have wrong default value
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5cfecdd] Convert api to controller
* Automated Ubuntu testing build:
* [f3d2a46] flatten payload for policy
* [1f7f1bd] Ensure keystone unittests do not leave CONF.policyfile in
  bad state
* Automated Ubuntu testing build:
* [547fddd] Move handle_conflicts decorator into sql
* [49a672a] Correct SQL migration 017 column name
* Automated Ubuntu testing build:
* [1f7f1bd] Ensure keystone unittests do not leave CONF.policyfile in
  bad state
* [0e0d5dc] Tests for domain-scoped tokens
* [43adc12] domain-scoping
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* [49a672a] Correct SQL migration 017 column name
* [a791f45] Change the default LDAP mapping for description.
* Automated Ubuntu testing build:
* No change rebuild.
* New upstream version.
* debian/patches/sql_connection.patch: Rediffed
* debian/control: Add python-oslo-config.
* Refreshed patches.
* d/keystone.template,po: Removed debconf detritus from packaging.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5734375] Fix id_to_dn for creating objects
* [329aeca] Pass query filter attributes to policy engine
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* Automated Ubuntu testing build:
* [43adc12] domain-scoping
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* [408a1d5] enabled attribute emulation support
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [329aeca] Pass query filter attributes to policy engine
* [408a1d5] enabled attribute emulation support
* Automated Ubuntu testing build:
* [9f81293] v3 token API
* [408a1d5] enabled attribute emulation support
* [9572bfc] Ensure user and tenant enabled in EC2
* [2afe8e4] Disable XML entity parsing
* [159ffe4] make LDAP query scope configurable
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [f8a32f1] merging in fix from oslo upstream
* [cab6917] Remove old, outdated keystone devref docs
* [a7149c0] Update the Keystone policy engine to the latest openstack
  common
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [909c44a] Use oslo-config-2013.1b3
* Automated Ubuntu testing build:
* [9572bfc] Ensure user and tenant enabled in EC2
* [a7149c0] Update the Keystone policy engine to the latest openstack
  common
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [909c44a] Use oslo-config-2013.1b3
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [cab6917] Remove old, outdated keystone devref docs
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [838069b] Workaround Migration issue with PostgreSQL
* [63f6e87] make fakeldap._match_query work for an arbitrary number of
  groups
* [909c44a] Use oslo-config-2013.1b3
* [fb66ad8] Remove usage of UserRoleAssociation.id in LDAP
* [78b662e] Add an update option to run_tests.sh
* [beaad83] Add pysqlite as explicit test dep
* [8a2a2c7] Silence routes internal debug logging
* Automated Ubuntu testing build:
* [b20302a] project membership to role conversion
* [b1bfca2] Remove test_auth_token_middleware
* [838069b] Workaround Migration issue with PostgreSQL
* [63f6e87] make fakeldap._match_query work for an arbitrary number of
  groups
* [fb66ad8] Remove usage of UserRoleAssociation.id in LDAP
* [78b662e] Add an update option to run_tests.sh
* [beaad83] Add pysqlite as explicit test dep
* [0fb017a] add missing kvs functionality (bug1119770)
* [5e82d94] Update to oslo version code.
* [a6abeb7] adding additional backend tests (bug1101244)
* [83e989f] Cleaned up keystone-all --help output
* [9401709] Fix test_contrib_s3_core unit test
* [98cd383] remove unneeded config reloading (it's already done during
  setUp)
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a2a2c7] Silence routes internal debug logging
* [8a78126] don't create a new, copied list in get_project_users
* [34d0eb3] Fix bugs with set ldap password.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5cd2fa9] fix unit test when memcache middleware is not configured
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a78126] don't create a new, copied list in get_project_users
* Automated Ubuntu testing build:
* [a6abeb7] adding additional backend tests (bug1101244)
* [8a89464] Keystone backend preparation for domain-scoping
* [2ab990b] Use install_venv_common.py from oslo.
* [9401709] Fix test_contrib_s3_core unit test
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a78126] don't create a new, copied list in get_project_users
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ac6ee69] Fix spelling mistakes
* [2ab990b] Use install_venv_common.py from oslo.
* [cccbf8a] Spell accommodate correctly.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [8a89464] Keystone backend preparation for domain-scoping
* [cccbf8a] Spell accommodate correctly.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [2ab990b] Use install_venv_common.py from oslo.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [cccbf8a] Spell accommodate correctly.
* [43ec450] Add missing log_format, log_file, log_dir opts.
* [a5cd95e] simplify query building logic
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [3786352] Generate apache-style common access logs
* Automated Ubuntu testing build:
* [2889a6c] Missed import for IPv6 tests skip.
* [43ec450] Add missing log_format, log_file, log_dir opts.
* [329b00d] Fix normalize identity sql ugrade for Mysql and postgresql
* [c213f48] remove duplicate model declaration/attribution
* [a5cd95e] simplify query building logic
* [41234c0] Expand dependency injection test coverage
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [5342209] return 400 Bad Request if invalid params supplied
  (bug1061738)
* [4624638] UserApi.update not to require all fields in arg
* [31b61e0] Query only attributes strictly required for keystone when
  using it with existing LDAP servers
* [74e0e17] Update .coveragerc
* [8ec247b] Add size validations to token controller.
* [0bc423a] Imported Translations from Transifex
* [74c3e87] Delete Roles for User and Project LDAP
* [4cd7aba] Fixes 'not in' operator usage
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* [e6c5f7f] Adds png versions of all svg image files. Changes
  reference.
* [3786352] Generate apache-style common access logs
* [cdfbbc6] import tools/flakes from oslo
* [49447c2] Sync latest cfg from oslo-incubator
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [1573973] Relational API links
* [5342209] return 400 Bad Request if invalid params supplied
  (bug1061738)
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* Automated Ubuntu testing build:
* [4624638] UserApi.update not to require all fields in arg
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8ec247b] Add size validations to token controller.
* [74c3e87] Delete Roles for User and Project LDAP
* [4cd7aba] Fixes 'not in' operator usage
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [0bc423a] Imported Translations from Transifex
* [0b2ef0d] Document user group LDAP options
* Automated Ubuntu testing build:
* [08baaa4] Why .pop()'ing urls first is important
* [0b2ef0d] Document user group LDAP options
* Automated Ubuntu testing build:
* [4722c84] Updates migration 008 to work on PostgreSQL.
* [5bc46d8] Create a default domain (bp default-domain)
* [02da3af] Enable/disable domains (bug 1100145)
* [3ef0346] Readme: use 'doc' directory not 'docs'
* [a5b7fcf] Update to requests>=1.0.0 for keystoneclient.
* [0b2ef0d] Document user group LDAP options
* Automated Ubuntu testing build:
* [4b2b3af] tenant to project in the apis
* [02da3af] Enable/disable domains (bug 1100145)
* [3ef0346] Readme: use 'doc' directory not 'docs'
* [a5b7fcf] Update to requests>=1.0.0 for keystoneclient.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [31660b1] Tenant to Project in Back ends
* [3ef0346] Readme: use 'doc' directory not 'docs'
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [02da3af] Enable/disable domains (bug 1100145)
* [a7c6427] Fix role delete method in LDAP backend.
* [8eaa3ce] public_endpoint & admin_endpoint configuration
* [64ef907] Skip IPv6 tests if IPv6 is not supported.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [56f194a] rename tenant to project in sql
* Automated Ubuntu testing build:
* [dd35747] Fix pep8 error.
* Automated Ubuntu testing build:
* [7691276] Limit the size of HTTP requests.
* [f6b133d] Test that you can undo & re-apply all migrations
* [52da32c] Auto-detect max SQL migration
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* Automated Ubuntu testing build:
* [ed252e0] Allow running of sql against the live DB.
* [52da32c] Auto-detect max SQL migration
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* Automated Ubuntu testing build:
* [acc810d] downgrade user and tenant normalized tables downgraded
  such that sqlite is supported, too
* [6c6915b] Safer data migrations
* Automated Ubuntu testing build:
* [52da32c] Auto-detect max SQL migration
* [6c6915b] Safer data migrations
* [7a4e373] Enhance wsgi to listen on ipv6 address
* Automated Ubuntu testing build:
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* Automated Ubuntu testing build:
* [7a4e373] Enhance wsgi to listen on ipv6 address
* [9c2c4ec] add database string field length check
* Automated Ubuntu testing build:
* [57f1e30] Autoload schema before creating FK's (bug 1098174)
* [9089d8e] reorder tables for delete
* Automated Ubuntu testing build:
* [42bd9c7] Enable exception format checking in the tests.
* [9089d8e] reorder tables for delete
* [9af1d7b] Fixes import order nits
* [4e1cab8] Cleanup keystoneclient testing requirements
* [24f21f5] Fix issue in test_forbidden_action_exposure.
* [7490cab] Correct spelling errors / typos in test names
* [2c1785a] Update ldap exceptions to pass correct kwargs.
* [8507261] Add _FATAL_EXCEPTION_FORMAT_ERRORS global.
* [617b700] Imported Translations from Transifex
* [ba6b1c3] Revert "shorten pep8 output"
* [949fbbb] Removed unused variables
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [3a38ecf] Validated URLs in v2 endpoint creation API
* [7490cab] Correct spelling errors / typos in test names
* [617b700] Imported Translations from Transifex
* [ba6b1c3] Revert "shorten pep8 output"
* [949fbbb] Removed unused variables
* Automated Ubuntu testing build:
* [9af1d7b] Fixes import order nits
* [4fae928] Keystone server support for user groups
* [3244451] Add missing .po files to tarball
* [ba6b1c3] Revert "shorten pep8 output"
* [64672bd] Upgrade WebOb to 1.2.3
* [949fbbb] Removed unused variables
* [5a81be3] Removed unused imports
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1cab8] Cleanup keystoneclient testing requirements
* [3244451] Add missing .po files to tarball
* [ea282cb] adds keyring to test-requires
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4fae928] Keystone server support for user groups
* [0e5533e] il8n some strings
* [5a81be3] Removed unused imports
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* [64672bd] Upgrade WebOb to 1.2.3
* [5a81be3] Removed unused imports
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* [0e5533e] il8n some strings
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [76af49f] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [a0e06a8] Add pyflakes to tox.ini
* [0f22574] Adding a means to connect back to a pydevd debugger.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [1b3b642] Fix spelling typo
* [a591b30] add in pip requires for requests
* [e577cd6] Remove swift auth.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [03eb280] Driver registry
* [2f85134] Split endpoint records in SQL by interface
* [f74aab2] Expand default time delta (bug 1089988)
* [5b3a74d] Support non-default role_id_attribute
* Automated Ubuntu testing build:
* [a591b30] add in pip requires for requests
* [f74aab2] Expand default time delta (bug 1089988)
* [5b3a74d] Support non-default role_id_attribute
* Automated Ubuntu testing build:
* [2f85134] Split endpoint records in SQL by interface
* [fb963a5] module refactoring
* [f74aab2] Expand default time delta (bug 1089988)
* [8e2a183] Test drivers return HTTP 501 Not Implemented
* [5b3a74d] Support non-default role_id_attribute
* [d17dfe6] Import pysqlite2 if sqlite3 is not available.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [23ba963] Fix typo s/interalurl/internalurl/
* [e093e81] Imported Translations from Transifex
* [6ceb066] fixing bug 1046862
* [e4d61ac] Add tests for contrib.s3.core.
* [8e2a183] Test drivers return HTTP 501 Not Implemented
* [d17dfe6] Import pysqlite2 if sqlite3 is not available.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [be3dcf9] Test for content-type appropriate 404 (bug 1089987)
* [e093e81] Imported Translations from Transifex
* [e4d61ac] Add tests for contrib.s3.core.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* [6ceb066] fixing bug 1046862
* [e4d61ac] Add tests for contrib.s3.core.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* [4e2be8a] Move token controller into keystone.token
* [a800fae] Ensure serviceCatalog is list when empty, not dict
* [0ea864b] Adding downgrade steps for migration scripts.
* [847d591] Port to argparse based cfg
* [c858c1b] Only 'import *' from 'core' modules
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [aaf61a4] Remove mentions of essex in docs (bug 1085247)
* [847d591] Port to argparse based cfg
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a800fae] Ensure serviceCatalog is list when empty, not dict
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* Automated Ubuntu testing build:
* [c858c1b] Only 'import *' from 'core' modules
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* [5b73757] Validate password type (bug 1081861)
* Automated Ubuntu testing build:
* [af8761d] check the redirected path on the request, not the response
* [5b73757] Validate password type (bug 1081861)
* Automated Ubuntu testing build:
* [f57098d] split identities module into logical parts remove unneeded
  imports from core
* Automated Ubuntu testing build:
* [38c7e46] Ensure token expiration is maintained (bug 1079216)
* [d4c4cf0] Fixes typo in keystone setup doc
* [3779c67] Imported Translations from Transifex
* [904af11] Stop using cfg's internal implementation details
* Automated Ubuntu testing build:
* [1012bd4] normalize identity
* [3779c67] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [d4c4cf0] Fixes typo in keystone setup doc
* [3779c67] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [904af11] Stop using cfg's internal implementation details
* [0e23490] Utilize policy.json by default (bug 1043758)
* [84cd8ff] Wrap v3 API with RBAC (bug 1023943)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [01fccdb] Expose auth failure details in debug mode
* [0e23490] Utilize policy.json by default (bug 1043758)
* [84cd8ff] Wrap v3 API with RBAC (bug 1023943)
* [ddc8c83] v3 Identity
* [ff669f0] v3 Catalog
* [827fc4c] v3 Policies
* [07525b1] Refix transient test failures
* [c7066a9] Expose authn/z failure info to API in debug mode
* [c740090] tweaking docs to fix link to wiki Keystone page
* Automated Ubuntu testing build:
* [e59360d] Import auth_token middleware from keystoneclient
* [07525b1] Refix transient test failures
* [90ebf9f] Make the controller addresses configurable.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a92b1da] Imported Translations from Transifex
* [90ebf9f] Make the controller addresses configurable.
* [be754ff] Refactor TokenController.authenticate() method.
* [2b83d4d] Fix error un fixtures.
* [9d68b40] Ensures User is member of tenant in ec2 validation
* Re-enable gating of package build based on successful unit testing:
  - d/tests/test_overrides.conf: Fixup test configuration to use
    correct certificate locations.
  - d/p/fix-ubuntu-tests.patch: Skip tests for older versions of
    keystoneclient based on checkouts of upstream git repo.
  - d/rules: Re-enable package build failure on test failure.
* d/control: Bump dependencies on python-keystoneclient to >= 1:0.2.
* d/control: Update Vcs-Bzr location to point to correct branch.
* d/control,d/po/*: Setup package templates for translation.
* d/man/*: Corrected spellings in man pages.
* d/keystone.upstart: Tweak 'stop on' to be triggered on all
  appropriate runlevel transitions, use start-stop-daemon to startup
  keystone daemon.
* debian/keystone.manpages: Install sphinx-generated manpages instead
  of our own outdated and unneeded versions. (LP: #1082050)
* New upstream release.
* Remove incomplete/broken dbconfig-common scripts.
* d/control: Added python-novaclient dependency
* d/patches: refreshed patches
* debian/tests/test_overrides.conf: Update for Grizzly test suite.
* debian/control: Drop python-nova.
* New upstream release.
* debian/rules: FTBFS if there is a missing binary.
* debian/rules: Temporarily pass the tests since you need to run
  keystone in order to run the tests.
* debian/patches/*: Refrehsed.
* New upstream release.
* debian/control: Ensure keystoneclient is upgraded with keystone,
  require python-keystoneclient >= 1:0.1.3. (LP: #1073273)
* Automated Ubuntu testing build:
* [ee645e6] pin sqlalchemy to 0.7
* Automated Ubuntu testing build:
* [094c494] replacing PKI token detection from content length to
  content prefix. (bug 1060389)
* [3cd343b] Fixed bug 1068851. Refreshed new crypto for the SSL tests.
* [2f9807e] Set defaultbranch in .gitreview to stable/folsom
* [b0bbd8a] Bump next version to 2012.2.1
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* Automated Ubuntu testing build:
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* [af8b031] Fixed trivally true tests (bug 983304)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1a086] Limit token revocation to tenant (bug 1050025)
* [af8b031] Fixed trivally true tests (bug 983304)
* [2c29d4c] LDAP backend attribute fixes
* [1683d84] Document memcached host system time configuration.
* [b6e568e] Implement token endpoint list (bug 1006777)
* [861f27f] LOG.warn all exception.Unauthorized authentication
  failures
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [efb6b3f] Delete user tokens after role grant/revoke
* [235c4ce] Implementation of tenant,user,role list functions for ldap
* [fa9f0f1] Initialize Metadata variable
* [201a109] Cleanup PEP8 errors from Common
* [150413c] List tokens for memcached backend
* [32b82ae] Ignore eclipse files.
* [7d9b239] Sync some misc changes from openstack-common
* [e09a121] Sync latest cfg from openstack-common
* [a9ee611] Remove id_hash column
* [a411412] Fixed: test_default_tenant_uuid_token not running
* [5446577] Upgrade PEP8 to 1.3.3 (bug 1037303)
* [4c32b5c] Expand PEP8 coverage to include docs & tests
* [ac95f83] Removed/fixed unused variable references
* [b82a0e2] HACKING compliance & staticly init module vars
* [685c1c2] PEP8 fix E251
* [7ad8497] PEP8 fix
* [7c93e84] Removed unused imports
* [2759c22] Check for expected cfg impl (bug 1043479)
* [026bea6] Fixed typos in comment
* [8a84c03] HACKING: Import by full module path
* [379354b] HACKING: Use single quotes
* [13ce482] mistake in doc string
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [6b04662] Removed dead code
* [3fa4ba5] Fix auth_token middleware to fetch revocation list as
  admin.
* [98d3a89] Code cleanup in doc/source/conf.py
* [067fcf0] Typo fix in keystone: existant => existent
* [1749644] allow middleware configuration from app config
* [1698094] change verbose and debug to Fasle in keystone.conf.sample
* [ddc8995] add token_format=UUID to keystone.conf.sample
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c13d0ba] Require authz to update user's tenant (bug 1040626)
* [1749644] allow middleware configuration from app config
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [212f13b] PEP8 fix for PAM test.
* [308ca89] Removed stray print statement (bug 1038131)
* [e0a7ebd] Add tests for PAM authentication.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d04e99a] Support running the tests in the debugger.
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [bf45b45] Remove unused variables
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build:
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [bf5ce27] Adding missing files to
  MANIFEST.in
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [37ff759] Simplify the sql backend
  deletion of users and tenants.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [9d5261c] Implement python version
  of migration 002.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [4f3dcb6] Allow overloading of
  username and tenant name in the config files.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ba8f351] Assert adminness on token
  validation (bug 1030968)
* Automated Ubuntu testing build: [4444577] Set default signing_dir
  based on os USER.
* Automated Ubuntu testing build: [2b2d0a1] Log errors when
  signing/verifying.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [f82c7c2] Enabling SQL Catalog tests
  (bug 958950)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [f648819] Set iso8601 module as
  default dependence.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [5ad8086] keystone_manage
  certificate generation
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [c79d93b] Keystone should use
  openstack.common.timeutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [cb74707] Keystone should use
  openstack.common.jsonutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [23ca656] Refactor 404's into
  managers & drivers (bug 968519)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [3f9f77a] Monkey patching 'thread'.
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [79647c6] Reorder imports by full module path
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* Automated Ubuntu testing build:
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [e33a474] Clean up test requires a bit.
* [b2aa78b] Use cfg's new global CONF object
* [b2aa620] Add s3 extension in keystone.conf sample.
* [3ed1caf] Tweak for easier, safer subclassing
* [c785018] Revert file mode to be non-executable
* New release candidate for the Ubuntu Cloud Archive.
* New release candidate for the Ubuntu Cloud Archive.
* New release candidate for the Ubuntu Cloud Archive.
* debian/patches/sql_connection.patch: Refreshed
* Open precise-folsom-proposed.
* Merge with current quantal-folsom-proposed.

Author: James Page
Revision Date: 2012-11-19 12:15:33 UTC

Merged in latest proposed packaging from raring

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-03-20 16:33:26 UTC

* Automated Ubuntu testing build:
* [255b1d4] validate from backend (bug 1129713)
* Automated Ubuntu testing build:
* [8690166] Backport of fix for 24-hour failure of pki.
* Automated Ubuntu testing build:
* [790c87e] Sync timeutils to pick up normalize fix.
* [8a22745] Disable XML entity parsing
* Automated Ubuntu testing build:
* [f0b4d30] Ensure user and tenant enabled in EC2
* Automated Ubuntu testing build:
* [8a22745] Disable XML entity parsing
* [bb2226f] Add size validations for /tokens.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b3bd5fd] Bump version to 2012.2.4
* Automated Ubuntu testing build:
* [ec7b94d] Render content-type appropriate 404 (bug 1089987)
* [9e300b7] Test 0.2.0 keystoneclient to avoid new deps
* [70e55f9] Fix catalog when services have no URL
* [6c95b73] Unparseable endpoint URL's should raise friendly error
* [ec06625] Ensure serviceCatalog is list when empty, not dict
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c387f84] Bump next version to 2012.2.3
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [7869c3e] Bump next version to 2012.2.2
* [f9d4766] Ensure token expiration is maintained
* [80d63c8] Properly list tokens with a null tenant
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [37308dd] Ensures User is member of tenant in ec2 validation
* [bec9b68] bug 1068674
* Automated Ubuntu testing build:
* [ee645e6] pin sqlalchemy to 0.7
* [bec9b68] bug 1068674
* [094c494] replacing PKI token detection from content length to
  content prefix. (bug 1060389)
* [3cd343b] Fixed bug 1068851. Refreshed new crypto for the SSL tests.
* [2f9807e] Set defaultbranch in .gitreview to stable/folsom
* Automated Ubuntu testing build:
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* [af8b031] Fixed trivally true tests (bug 983304)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1a086] Limit token revocation to tenant (bug 1050025)
* [af8b031] Fixed trivally true tests (bug 983304)
* [2c29d4c] LDAP backend attribute fixes
* [1683d84] Document memcached host system time configuration.
* [b6e568e] Implement token endpoint list (bug 1006777)
* [861f27f] LOG.warn all exception.Unauthorized authentication
  failures
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [efb6b3f] Delete user tokens after role grant/revoke
* [201a109] Cleanup PEP8 errors from Common
* Automated Ubuntu testing build:
* [235c4ce] Implementation of tenant,user,role list functions for ldap
* [201a109] Cleanup PEP8 errors from Common
* [685c1c2] PEP8 fix E251
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [fa9f0f1] Initialize Metadata variable
* [150413c] List tokens for memcached backend
* [32b82ae] Ignore eclipse files.
* [7d9b239] Sync some misc changes from openstack-common
* [e09a121] Sync latest cfg from openstack-common
* [a9ee611] Remove id_hash column
* [5446577] Upgrade PEP8 to 1.3.3 (bug 1037303)
* [4c32b5c] Expand PEP8 coverage to include docs & tests
* [ac95f83] Removed/fixed unused variable references
* [b82a0e2] HACKING compliance & staticly init module vars
* [685c1c2] PEP8 fix E251
* [7ad8497] PEP8 fix
* [7c93e84] Removed unused imports
* [026bea6] Fixed typos in comment
* [8a84c03] HACKING: Import by full module path
* [379354b] HACKING: Use single quotes
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a411412] Fixed: test_default_tenant_uuid_token not running
* [b82a0e2] HACKING compliance & staticly init module vars
* [7ad8497] PEP8 fix
* Automated Ubuntu testing build:
* [2759c22] Check for expected cfg impl (bug 1043479)
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* Automated Ubuntu testing build:
* [13ce482] mistake in doc string
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [6b04662] Removed dead code
* [3fa4ba5] Fix auth_token middleware to fetch revocation list as
  admin.
* [98d3a89] Code cleanup in doc/source/conf.py
* [067fcf0] Typo fix in keystone: existant => existent
* [1749644] allow middleware configuration from app config
* [1698094] change verbose and debug to Fasle in keystone.conf.sample
* [ddc8995] add token_format=UUID to keystone.conf.sample
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c13d0ba] Require authz to update user's tenant (bug 1040626)
* [1749644] allow middleware configuration from app config
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [212f13b] PEP8 fix for PAM test.
* [308ca89] Removed stray print statement (bug 1038131)
* [e0a7ebd] Add tests for PAM authentication.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d04e99a] Support running the tests in the debugger.
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [bf45b45] Remove unused variables
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build:
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [bf5ce27] Adding missing files to
  MANIFEST.in
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [37ff759] Simplify the sql backend
  deletion of users and tenants.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [9d5261c] Implement python version
  of migration 002.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [4f3dcb6] Allow overloading of
  username and tenant name in the config files.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [bf49594] fix sphinx warnings
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [002dd42] Fixed marker & limit
  computation (bug 1006055)
* Automated Ubuntu testing build: [bd94b4b] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [39b20ac] pep8 v1.3.3 compliance
  (bug 1019498)
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [0b5cf00] documenting models
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [abc0671] notify calling process we
  are ready to serve
* Automated Ubuntu testing build: [7297afc] Return a 409 error when
  adding a second time a role to user/tenant
* Automated Ubuntu testing build: [c3696ba] Use sdist tarball instead
  of zipball.
* Automated Ubuntu testing build: [81cb2ab] Move monkey patch to
  keystone-all startup.
* Automated Ubuntu testing build: [04df79b] Run pep8 for tests.
* Automated Ubuntu testing build: [c411125] pep8 for openssl
* Automated Ubuntu testing build: [e923518] Make sure user dict has id
  key before checking against it
* Automated Ubuntu testing build: [7cdae1b] Fixing pep8 errors in
  tests/*py
* Automated Ubuntu testing build: [4ab47ad] Adding user password
  setting api call
* Automated Ubuntu testing build: [2a909ee] Making docs pretty!
* Automated Ubuntu testing build: [8a94a9c] Removed redundant /
  excessively verbose debug
* Automated Ubuntu testing build: [9625c55] adding keystoneclient test
* Automated Ubuntu testing build: [60fa32b] updating testing
  documentation
* Automated Ubuntu testing build: [ae0515c] Admin Auth URI prefix
* Automated Ubuntu testing build: [86177df] Prevent service catalog
  injection in auth_token.
* Automated Ubuntu testing build: [4b97716] Webob needs body to calc
  Content-Length (bug 1016171)
* Automated Ubuntu testing build: [d061599] Fix the wrong infomation
  in keystone-manage.rst
* Automated Ubuntu testing build: [2a78594] Implementation of LDAP
  functions
* Automated Ubuntu testing build: [9b31383] Files for Apache-HTTPD
* Automated Ubuntu testing build: [4ebfdfa] Raise unauthorized if
  tenant disabled (bug 988920)
* Automated Ubuntu testing build: [0abf6ba] Debug output may include
  passwords (bug 1004114)
* Automated Ubuntu testing build: [ec363ac] Import ec2 credentials
  from old keystone db
* Automated Ubuntu testing build: [2806181] Added user name
  validation. Fixes bug 966251.
* Automated Ubuntu testing build: [5adb018] Sync jsonutils from
  openstack-common
* Automated Ubuntu testing build: [bcc0f6d] Cryptographically Signed
  tokens
* Automated Ubuntu testing build: [d2ecd61] Typo error in
  keystone/doc/source/configuration.rst.
* Automated Ubuntu testing build: [dada197] Test for Cert by name
* Automated Ubuntu testing build: [ba8f351] Assert adminness on token
  validation (bug 1030968)
* Automated Ubuntu testing build: [4444577] Set default signing_dir
  based on os USER.
* Automated Ubuntu testing build: [2b2d0a1] Log errors when
  signing/verifying.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [f82c7c2] Enabling SQL Catalog tests
  (bug 958950)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [f648819] Set iso8601 module as
  default dependence.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [5ad8086] keystone_manage
  certificate generation
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [c79d93b] Keystone should use
  openstack.common.timeutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [cb74707] Keystone should use
  openstack.common.jsonutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [23ca656] Refactor 404's into
  managers & drivers (bug 968519)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [a68d530] Fixed typo in routing
  conditions (bug 1006793)
* Automated Ubuntu testing build: [cc91786] Pass serviceCatalog in
  auth_token middleware
* Automated Ubuntu testing build: [79647c6] Reorder imports by full
  module path
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [3f9f77a] Monkey patching 'thread'.
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [79647c6] Reorder imports by full module path
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [e33a474] Clean up test requires a bit.
* [3ed1caf] Tweak for easier, safer subclassing
* [375838c] Carrying over token expiry time when token chaining
* Automated Ubuntu testing build:
* [b2aa78b] Use cfg's new global CONF object
* [3ed1caf] Tweak for easier, safer subclassing
* [375838c] Carrying over token expiry time when token chaining
* [8680549] Require authz for user role list (bug 1006815)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b2aa620] Add s3 extension in keystone.conf sample.
* [b71fb3d] fix importing of optional modules in auth_token
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c785018] Revert file mode to be non-executable
* [1d146f5] Require authz for service CRUD (bug 1006822)
* [d2619f1] Use cfg's new behavior of reset() clearing overrides
* [65ec652] Use cfg's new group autocreation feature
* [dd14b16] Sync with latest version of openstack.common.cfg
* [daf395b] Use X_USER_NAME and X_ROLES headers.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [17723a6] Keystone should use openstack.common.importutils
* Automated Ubuntu testing build:
* [4bfa203] PEP8 fixes
* [bb2fbb7] Fixes some pep8 warning/errors.
* [055d073] Update swift_auth documentation.
* [30654a6] Add ACL check using <tenant_id>:<user> format.
* [bcb12ef] Allow other middleware overriding authentication.
* [2ee73cc] Changed arguments in keystone CLI for consistency.
* [012c3d3] One 'ctrl-c' kills keystone.
* [bc803a4] Make sure we parse delay_auth_decision as boolean.
* Automated Ubuntu testing build:
* [f537a82] blueprint 2-way-ssl
* [055d073] Update swift_auth documentation.
* [30654a6] Add ACL check using <tenant_id>:<user> format.
* [bcb12ef] Allow other middleware overriding authentication.
* [2ee73cc] Changed arguments in keystone CLI for consistency.
* [012c3d3] One 'ctrl-c' kills keystone.
* [bc803a4] Make sure we parse delay_auth_decision as boolean.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [bb2fbb7] Fixes some pep8 warning/errors.
* [628149b] Invalidate user tokens when a user is disabled
* [19b6076] Add validations of 'name' field for roles, users and
  tenants.
* [6c5f7d9] notify calling process we are ready to serve
* [c2255ed] Corrects url conversion in export_legacy_catalog
* [fd7df12] Truly handle mailmap entries for all combinations.
* [5ad37eb] fix pam admin user case
* Automated Ubuntu testing build:
* [7a7a0c6] Backslash continuation removal (Keystone folsom-1)
* [56492c2] Nail prettytable test dependency at 0.5.0.
* [628149b] Invalidate user tokens when a user is disabled
* [19b6076] Add validations of 'name' field for roles, users and
  tenants.
* [05d6150] Added 'NormalizingFilter' middleware.
* [6c5f7d9] notify calling process we are ready to serve
* [b69dbc2] Added tenant name validation. Fixes bug 966249.
* [c2255ed] Corrects url conversion in export_legacy_catalog
* [fd7df12] Truly handle mailmap entries for all combinations.
* [5ad37eb] fix pam admin user case
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d3b2e0a] Remove service_* from authtoken examples
* [56492c2] Nail prettytable test dependency at 0.5.0.
* Automated Ubuntu testing build:
* [e0447e4] Fix depricated /users/{user-id}/roles
* [a67b248] Invalidate user tokens when password is changed
* Automated Ubuntu testing build:
* [2e912f4] Flush tenant membership deletion before user
* [a67b248] Invalidate user tokens when password is changed
* [cf1c5e1] Improve the sample keystone.conf
* [812bed8] Add defaults for ldap options
* [9b5d9ad] Set defaults for sql options
* [749dc34] Set defaults for port options
* [ff149be] Add defaults for driver options
* [f58ca2b] Use ConfigOpts.find_file() to locate catalog template
* [fab5844] Use ConfigOpts.find_file() to locate policy.json
* [352839b] Policy doc updates; RST syntax consistency
* [6384281] cleanup dependent data upon user/tenant deletion
* [310c653] Avoid ValueError in 12.04 essex pkg (bug 988523)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8dc3baa] Sync to newer openstack-common
* [352839b] Policy doc updates; RST syntax consistency
* [422aeba] Removed SimpleMatch 'shim'; updated readme
* [4c842ca] Removed old sections; improved syntax consistency
* [db19e0f] Update tests to run servers on 127.0.0.1

Author: Adam Gandelman
Revision Date: 2012-10-31 16:34:40 UTC

Update changelog format to cater to stable/folsom git entries.

Author: Chuck Short
Revision Date: 2012-05-15 15:33:14 UTC

Refreshed patch

Author: Openstack Ubuntu Testing Bot
Revision Date: 2013-03-28 13:07:33 UTC

* Automated Ubuntu testing build:
* [af31ecd] Fix test coverage for v2 scoped auth xml response (bug
  1160504)
* [4965c83] keystone commands don't print any version information
* [3e55be0] Rename trust extension (bug 1158980)
* [4f75f84] Add a dereference option for ldap
* Automated Ubuntu testing build:
* [63b8a82] Move trusts to extension
* [53450e2] Enable emulation for domains
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* [a6df07e] Version bump to 2013.2
* [53450e2] Enable emulation for domains
* Automated Ubuntu testing build:
* [601d993] Allow trusts to be optional
* Automated Ubuntu testing build:
* [53450e2] Enable emulation for domains
* [7db01cd] Wrap config module and require manual setup (bug 1143998)
* [533bb01] Correct spacing in warning msg
* [550973b] Prohibit V3 V2 token intermix for resource in non-default
  domain (bug 1157430)
* [3353996] Properly handle emulated ldap enablement
* [5cb8e1f] Support for LDAP groups (bug #1092187)
* [cd3f58a] Validate domains unconditionally (bug 1130236)
* [a066b69] Fix live ldap tests
* [75637be] V2, V3 token intermix for unscoped tokens (bug 1156913)
* [975af8d] Pass project membership as dict in migration 015.
* [85910ce] Utilize legacy_endpoint_id column (bug 1154918)
* [7c07de1] Test default_project_id scoping (bug 1023502)
* [167a8b7] Fix XML handling of member links (bug 1156594)
* [050ad91] Revise docs to use keystoneclient.middleware.auth_token
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [90fcb99] Ensure delete domain removes all owned entities
* Automated Ubuntu testing build:
* [7c07de1] Test default_project_id scoping (bug 1023502)
* Automated Ubuntu testing build:
* [167a8b7] Fix XML handling of member links (bug 1156594)
* [eb4dd4a] extracting user and trust ids into normalized fields
* Automated Ubuntu testing build:
* [0a81b69] Discard null endpoints (bug 1152632)
* [eb4dd4a] extracting user and trust ids into normalized fields
* [c92b276] Remove duplicate password/token opts.
* [a80a1f8] xml_body returns backtrace on XMLSyntaxError
* [c515073] Fixes bug 1151747: broken XML translation for resource
  collections
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [2295db4] No parent exception to wrap
* [e551104] Migrate roles from metadata to user_project_metadata
* [3209db6] quiet route logging on skipped tests
* [fe28dda] Added test cases to improve LDAP project testing
* [82738b4] Remove TODO that didn't land in grizzly
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8e58384] duplicated trust tests
* [6853e18] Catch and log server exceptions
* [fe28dda] Added test cases to improve LDAP project testing
* [4ceaa57] Switch to final 1.1.0 oslo.config release
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* Automated Ubuntu testing build:
* [e551104] Migrate roles from metadata to user_project_metadata
* [6853e18] Catch and log server exceptions
* [fe28dda] Added test cases to improve LDAP project testing
* [4ceaa57] Switch to final 1.1.0 oslo.config release
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [f5edbae] Ensure tokens are revoked for relevant v3 api calls
* [d2635d5] Filter out legacy_endpoint_id (bug 1152635)
* [a6e2960] Explain LDAP page_size & default value
* Automated Ubuntu testing build:
* [6853e18] Catch and log server exceptions
* [f57f5ba] add belongs_to check
* [a6e2960] Explain LDAP page_size & default value
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b4adb6a] Improve tests for api protection and filtering
* [ca76e86] remove spurious roles check
* [f423429] cleanup trusts in controllers
* Automated Ubuntu testing build:
* [f57f5ba] add belongs_to check
* [ca76e86] remove spurious roles check
* [f423429] cleanup trusts in controllers
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [09e2fc7] Revert "update tests/__init__.py to verify openssl
  version"
* [ceefe7f] Revert "from tests import"
* [6308bf1] Run keystone server in debug mode.
* [806a2ca] bug 1133526
* [42bd756] Fix folsom -> grizzly role table migration issues (bug
  1119789)
* [d8599dc] from tests import
* [26ecdca] Change exception raised to Forbidden on trust_id
* [1e64378] Make getting user-domain roles backend independant
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [2dd6481] Make Keystone return v3 as part of the version api
* [a2c3636] Delete tokens for user
* [d8599dc] from tests import
* [31df378] v3 endpoints won't have legacy ID's (bug 1150930)
* [dd7d4fd] return 201 Created on POST request (bug1131119)
* [0297f6f] add missing attributes for group/project tables
  (bug1126021)
* [9789447] Remove unused methods from LDAP backed.
* [dea5eea] Move get_by_name to LdapBase.
* [38bf87b] fix typo in kvs backend
* [156f474] mark 2.0 API as stable
* [b1474da] unable to load certificate should abort request
* [ddd2216] Move auth plugins to 'keystone.auth.plugins' (bug 1136967)
* [26ecdca] Change exception raised to Forbidden on trust_id
* [be23b79] remove unused import
* [7b2d5a4] ports should be ints in config (bug 1137696)
* [c0f017c] Expand v3 trust test coverage
* [601eeb5] Trusts
* [ab6e552] bug 1134802: fix inconsistent format for expires_at and
  issued_at
* [a14b67e] Straighten out NotFound raising in LDAP backend.
* [1e64378] Make getting user-domain roles backend independant
* [7f20fee] Unpin pam dependency version
* [39f1260] keystone : Use Ec2Signer utility class from keystoneclient
* [eaab3c2] Remove obsolete *page[_marker] methods from LDAP backend.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a899227] Sync timeutils with oslo
* [83d08cf] Enable a parameters on ldap to allow paged_search of ldap
  queries This fixes bug 1083463
* [72ec89b] update tests/__init__.py to verify openssl version
* [7f20fee] Unpin pam dependency version
* [a198f59] Setup logging in keystone-manage command.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [bec8b31] Imported Translations from Transifex
* [a198f59] Setup logging in keystone-manage command.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [9fa6e0a] command line switch for short pep8 output.
* [250e671] bug 1131840: fix auth and token data for XML translation
* [b978211] domain_id_attributes in config.py have wrong default value
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5cfecdd] Convert api to controller
* Automated Ubuntu testing build:
* [f3d2a46] flatten payload for policy
* [1f7f1bd] Ensure keystone unittests do not leave CONF.policyfile in
  bad state
* Automated Ubuntu testing build:
* [547fddd] Move handle_conflicts decorator into sql
* [49a672a] Correct SQL migration 017 column name
* Automated Ubuntu testing build:
* [1f7f1bd] Ensure keystone unittests do not leave CONF.policyfile in
  bad state
* [0e0d5dc] Tests for domain-scoped tokens
* [43adc12] domain-scoping
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* [49a672a] Correct SQL migration 017 column name
* [a791f45] Change the default LDAP mapping for description.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5734375] Fix id_to_dn for creating objects
* [329aeca] Pass query filter attributes to policy engine
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* Automated Ubuntu testing build:
* [43adc12] domain-scoping
* [6780dbe] Removed redundant assertion
* [5653e8f] Update oslo-config version.
* [408a1d5] enabled attribute emulation support
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [329aeca] Pass query filter attributes to policy engine
* [408a1d5] enabled attribute emulation support
* Automated Ubuntu testing build:
* [9f81293] v3 token API
* [408a1d5] enabled attribute emulation support
* [9572bfc] Ensure user and tenant enabled in EC2
* [2afe8e4] Disable XML entity parsing
* [159ffe4] make LDAP query scope configurable
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [f8a32f1] merging in fix from oslo upstream
* [cab6917] Remove old, outdated keystone devref docs
* [a7149c0] Update the Keystone policy engine to the latest openstack
  common
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [909c44a] Use oslo-config-2013.1b3
* Automated Ubuntu testing build:
* [9572bfc] Ensure user and tenant enabled in EC2
* [a7149c0] Update the Keystone policy engine to the latest openstack
  common
* [ec326b3] Implement name space for domains
* [d6f7cbc] Update sample_data.sh to match docs
* [909c44a] Use oslo-config-2013.1b3
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [cab6917] Remove old, outdated keystone devref docs
* [d6f7cbc] Update sample_data.sh to match docs
* [838069b] Workaround Migration issue with PostgreSQL
* [63f6e87] make fakeldap._match_query work for an arbitrary number of
  groups
* [909c44a] Use oslo-config-2013.1b3
* [fb66ad8] Remove usage of UserRoleAssociation.id in LDAP
* [78b662e] Add an update option to run_tests.sh
* [beaad83] Add pysqlite as explicit test dep
* [8a2a2c7] Silence routes internal debug logging
* Automated Ubuntu testing build:
* [b20302a] project membership to role conversion
* [b1bfca2] Remove test_auth_token_middleware
* [838069b] Workaround Migration issue with PostgreSQL
* [63f6e87] make fakeldap._match_query work for an arbitrary number of
  groups
* [fb66ad8] Remove usage of UserRoleAssociation.id in LDAP
* [78b662e] Add an update option to run_tests.sh
* [beaad83] Add pysqlite as explicit test dep
* [0fb017a] add missing kvs functionality (bug1119770)
* [5e82d94] Update to oslo version code.
* [a6abeb7] adding additional backend tests (bug1101244)
* [83e989f] Cleaned up keystone-all --help output
* [9401709] Fix test_contrib_s3_core unit test
* [98cd383] remove unneeded config reloading (it's already done during
  setUp)
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a2a2c7] Silence routes internal debug logging
* [8a78126] don't create a new, copied list in get_project_users
* [34d0eb3] Fix bugs with set ldap password.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [5cd2fa9] fix unit test when memcache middleware is not configured
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a78126] don't create a new, copied list in get_project_users
* Automated Ubuntu testing build:
* [a6abeb7] adding additional backend tests (bug1101244)
* [8a89464] Keystone backend preparation for domain-scoping
* [2ab990b] Use install_venv_common.py from oslo.
* [9401709] Fix test_contrib_s3_core unit test
* [2930a28] Tenant update on LDAP breaks if there is no update to
  apply
* [a9d53dc] add check for config-dir parameter (bug1101129)
* [8a78126] don't create a new, copied list in get_project_users
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [ac6ee69] Fix spelling mistakes
* [2ab990b] Use install_venv_common.py from oslo.
* [cccbf8a] Spell accommodate correctly.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [8a89464] Keystone backend preparation for domain-scoping
* [cccbf8a] Spell accommodate correctly.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [2ab990b] Use install_venv_common.py from oslo.
* [2889a6c] Missed import for IPv6 tests skip.
* Automated Ubuntu testing build:
* [cccbf8a] Spell accommodate correctly.
* [43ec450] Add missing log_format, log_file, log_dir opts.
* [a5cd95e] simplify query building logic
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [3786352] Generate apache-style common access logs
* Automated Ubuntu testing build:
* [2889a6c] Missed import for IPv6 tests skip.
* [c213f48] remove duplicate model declaration/attribution
* [a5cd95e] simplify query building logic
* [41234c0] Expand dependency injection test coverage
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [31b61e0] Query only attributes strictly required for keystone when
  using it with existing LDAP servers
* [3786352] Generate apache-style common access logs
* [cdfbbc6] import tools/flakes from oslo
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [43ec450] Add missing log_format, log_file, log_dir opts.
* [329b00d] Fix normalize identity sql ugrade for Mysql and postgresql
* [c213f48] remove duplicate model declaration/attribution
* [a5cd95e] simplify query building logic
* [41234c0] Expand dependency injection test coverage
* [cfb3fdb] allow unauthenticated connections to an LDAP server
* [5342209] return 400 Bad Request if invalid params supplied
  (bug1061738)
* [4624638] UserApi.update not to require all fields in arg
* [31b61e0] Query only attributes strictly required for keystone when
  using it with existing LDAP servers
* [74e0e17] Update .coveragerc
* [8ec247b] Add size validations to token controller.
* [0bc423a] Imported Translations from Transifex
* [74c3e87] Delete Roles for User and Project LDAP
* [4cd7aba] Fixes 'not in' operator usage
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* [e6c5f7f] Adds png versions of all svg image files. Changes
  reference.
* [3786352] Generate apache-style common access logs
* [cdfbbc6] import tools/flakes from oslo
* [49447c2] Sync latest cfg from oslo-incubator
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [1573973] Relational API links
* [5342209] return 400 Bad Request if invalid params supplied
  (bug1061738)
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* Automated Ubuntu testing build:
* [4624638] UserApi.update not to require all fields in arg
* [ca2b2cb] Add --keystone-user/group to keystone-manage pki_setup
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8ec247b] Add size validations to token controller.
* [0bc423a] Imported Translations from Transifex
* [74c3e87] Delete Roles for User and Project LDAP
* [08baaa4] Why .pop()'ing urls first is important
* [4cd7aba] Fixes 'not in' operator usage
* [4722c84] Updates migration 008 to work on PostgreSQL.
* [5bc46d8] Create a default domain (bp default-domain)
* [02da3af] Enable/disable domains (bug 1100145)
* [3ef0346] Readme: use 'doc' directory not 'docs'
* [a5b7fcf] Update to requests>=1.0.0 for keystoneclient.
* [0b2ef0d] Document user group LDAP options
* Automated Ubuntu testing build:
* [4b2b3af] tenant to project in the apis
* [02da3af] Enable/disable domains (bug 1100145)
* [3ef0346] Readme: use 'doc' directory not 'docs'
* [a5b7fcf] Update to requests>=1.0.0 for keystoneclient.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [31660b1] Tenant to Project in Back ends
* [3ef0346] Readme: use 'doc' directory not 'docs'
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [02da3af] Enable/disable domains (bug 1100145)
* [a7c6427] Fix role delete method in LDAP backend.
* [8eaa3ce] public_endpoint & admin_endpoint configuration
* [64ef907] Skip IPv6 tests if IPv6 is not supported.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [56f194a] rename tenant to project in sql
* Automated Ubuntu testing build:
* [dd35747] Fix pep8 error.
* Automated Ubuntu testing build:
* [7691276] Limit the size of HTTP requests.
* [f6b133d] Test that you can undo & re-apply all migrations
* [52da32c] Auto-detect max SQL migration
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* Automated Ubuntu testing build:
* [ed252e0] Allow running of sql against the live DB.
* [f6b133d] Test that you can undo & re-apply all migrations
* [acc810d] downgrade user and tenant normalized tables downgraded
  such that sqlite is supported, too
* [52da32c] Auto-detect max SQL migration
* [6c6915b] Safer data migrations
* [36c3b2e] Sync base identity Driver defs with SQL driver
* [f237a67] Fix i18n of string templates.
* [7a4e373] Enhance wsgi to listen on ipv6 address
* [9c2c4ec] add database string field length check
* [57f1e30] Autoload schema before creating FK's (bug 1098174)
* [9089d8e] reorder tables for delete
* Automated Ubuntu testing build:
* [42bd9c7] Enable exception format checking in the tests.
* [24f21f5] Fix issue in test_forbidden_action_exposure.
* [2c1785a] Update ldap exceptions to pass correct kwargs.
* [8507261] Add _FATAL_EXCEPTION_FORMAT_ERRORS global.
* [617b700] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [9089d8e] reorder tables for delete
* [9af1d7b] Fixes import order nits
* [4e1cab8] Cleanup keystoneclient testing requirements
* [24f21f5] Fix issue in test_forbidden_action_exposure.
* [7490cab] Correct spelling errors / typos in test names
* [2c1785a] Update ldap exceptions to pass correct kwargs.
* [8507261] Add _FATAL_EXCEPTION_FORMAT_ERRORS global.
* [617b700] Imported Translations from Transifex
* [ba6b1c3] Revert "shorten pep8 output"
* [949fbbb] Removed unused variables
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [3a38ecf] Validated URLs in v2 endpoint creation API
* [7490cab] Correct spelling errors / typos in test names
* [ba6b1c3] Revert "shorten pep8 output"
* [949fbbb] Removed unused variables
* Automated Ubuntu testing build:
* [9af1d7b] Fixes import order nits
* [4fae928] Keystone server support for user groups
* [3244451] Add missing .po files to tarball
* [ba6b1c3] Revert "shorten pep8 output"
* [64672bd] Upgrade WebOb to 1.2.3
* [949fbbb] Removed unused variables
* [5a81be3] Removed unused imports
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1cab8] Cleanup keystoneclient testing requirements
* [3244451] Add missing .po files to tarball
* [ea282cb] adds keyring to test-requires
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4fae928] Keystone server support for user groups
* [0e5533e] il8n some strings
* [5a81be3] Removed unused imports
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* [64672bd] Upgrade WebOb to 1.2.3
* [5a81be3] Removed unused imports
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [0e5533e] il8n some strings
* [1f01d30] shorten pep8 output
* Automated Ubuntu testing build:
* [76af49f] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [a0e06a8] Add pyflakes to tox.ini
* [0f22574] Adding a means to connect back to a pydevd debugger.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [1b3b642] Fix spelling typo
* [a591b30] add in pip requires for requests
* [e577cd6] Remove swift auth.
* Automated Ubuntu testing build:
* [03eb280] Driver registry
* [2f85134] Split endpoint records in SQL by interface
* [f74aab2] Expand default time delta (bug 1089988)
* [5b3a74d] Support non-default role_id_attribute
* [e577cd6] Remove swift auth.
* Automated Ubuntu testing build:
* [a591b30] add in pip requires for requests
* [f74aab2] Expand default time delta (bug 1089988)
* [5b3a74d] Support non-default role_id_attribute
* Automated Ubuntu testing build:
* [2f85134] Split endpoint records in SQL by interface
* [fb963a5] module refactoring
* [f74aab2] Expand default time delta (bug 1089988)
* [8e2a183] Test drivers return HTTP 501 Not Implemented
* [5b3a74d] Support non-default role_id_attribute
* [d17dfe6] Import pysqlite2 if sqlite3 is not available.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [23ba963] Fix typo s/interalurl/internalurl/
* [e093e81] Imported Translations from Transifex
* [6ceb066] fixing bug 1046862
* [e4d61ac] Add tests for contrib.s3.core.
* [8e2a183] Test drivers return HTTP 501 Not Implemented
* [d17dfe6] Import pysqlite2 if sqlite3 is not available.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [be3dcf9] Test for content-type appropriate 404 (bug 1089987)
* [e093e81] Imported Translations from Transifex
* [e4d61ac] Add tests for contrib.s3.core.
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* [6ceb066] fixing bug 1046862
* [4e2be8a] Move token controller into keystone.token
* [18a49ae] syncing run_tests to match tox
* Automated Ubuntu testing build:
* [e4d61ac] Add tests for contrib.s3.core.
* Automated Ubuntu testing build:
* [4e2be8a] Move token controller into keystone.token
* [a800fae] Ensure serviceCatalog is list when empty, not dict
* [0ea864b] Adding downgrade steps for migration scripts.
* [847d591] Port to argparse based cfg
* [c858c1b] Only 'import *' from 'core' modules
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [aaf61a4] Remove mentions of essex in docs (bug 1085247)
* [847d591] Port to argparse based cfg
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a800fae] Ensure serviceCatalog is list when empty, not dict
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* Automated Ubuntu testing build:
* [c858c1b] Only 'import *' from 'core' modules
* [77dee93] use keystone test and change config during setUp
* [84a0b2d] Bug 1075090 -- Fixing log messages in python source code
  to support internationalization.
* [8c15e3e] Added documentation for the external auth support
* [5b73757] Validate password type (bug 1081861)
* Automated Ubuntu testing build:
* [af8761d] check the redirected path on the request, not the response
* [5b73757] Validate password type (bug 1081861)
* Automated Ubuntu testing build:
* [f57098d] split identities module into logical parts remove unneeded
  imports from core
* Automated Ubuntu testing build:
* [38c7e46] Ensure token expiration is maintained (bug 1079216)
* [d4c4cf0] Fixes typo in keystone setup doc
* [3779c67] Imported Translations from Transifex
* [904af11] Stop using cfg's internal implementation details
* Automated Ubuntu testing build:
* [1012bd4] normalize identity
* [3779c67] Imported Translations from Transifex
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d4c4cf0] Fixes typo in keystone setup doc
* [3779c67] Imported Translations from Transifex
* Automated Ubuntu testing build:
* [904af11] Stop using cfg's internal implementation details
* [0e23490] Utilize policy.json by default (bug 1043758)
* [84cd8ff] Wrap v3 API with RBAC (bug 1023943)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [01fccdb] Expose auth failure details in debug mode
* [0e23490] Utilize policy.json by default (bug 1043758)
* [84cd8ff] Wrap v3 API with RBAC (bug 1023943)
* [ddc8c83] v3 Identity
* [ff669f0] v3 Catalog
* [827fc4c] v3 Policies
* [07525b1] Refix transient test failures
* [c7066a9] Expose authn/z failure info to API in debug mode
* [c740090] tweaking docs to fix link to wiki Keystone page
* Automated Ubuntu testing build:
* [e59360d] Import auth_token middleware from keystoneclient
* [07525b1] Refix transient test failures
* [90ebf9f] Make the controller addresses configurable.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a92b1da] Imported Translations from Transifex
* [90ebf9f] Make the controller addresses configurable.
* [9d68b40] Ensures User is member of tenant in ec2 validation
* [cdd7d65] populate table check.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [be754ff] Refactor TokenController.authenticate() method.
* [cdd7d65] populate table check.
* Automated Ubuntu testing build:
* [2b83d4d] Fix error un fixtures.
* [36c880e] Reduce total number of fixtures
* [411dde1] Run test_keystoneclient_sql in-memory
* [e19a62c] Make tox.ini run pep8 checks on bin.
* Automated Ubuntu testing build:
* [ac2d5b8] Properly list tokens with a null tenant
* [36c880e] Reduce total number of fixtures
* [001f708] Provide config file fields for enable users in LDAP
  backend (bug1067516)
* [411dde1] Run test_keystoneclient_sql in-memory
* [e19a62c] Make tox.ini run pep8 checks on bin.
* [8dcafd8] Various pep8 fixes for keystone.
* [164326b] Use the right subprocess based on os monkeypatch
* [a10bd7a] Fix transient test failures (bug 1077065, bug 1045962)
* [84e69a4] Rewrite initial migration
* [b446a77] Fix default port for identity.internalURL
* [28c52ac] Improve feedback on test failure
* [7cc02c8] fixes bug 1074172
* [0478276] SQL upgrade test.
* [2eea455] Include 'extra' attributes twice (bug 1076120)
* [fddacf7] bug 1069945: generate certs for the tests in one place
* [ef65550] monkeypatch cms Popen
* [5761a2c] HACKING compliance: consistent use of 'except'
* [3733170] Fixed typo in log message
* [399cb4c] Identity API v3 Config, Routers, Controllers
* Automated Ubuntu testing build:
* [df148a0] Return non-indexed attrs, not 'extra' (bug 1075376)
* [1eb9947] don't import filter_user name, use it from the identity
  module
* [fdcb856] don't modify the passed in dict to from_dict
* [0d02e12] move hashing user password functions to common/utils
* [d95d6bf] ignore .tox directory for pep8 in runtests
* [23bb7ec] Imported Translations from Transifex
* [f79f701] Implements REMOTE_USER authentication support.
* [27ae477] Ignore keystone.openstack for PEP8
* Automated Ubuntu testing build:
* [75496bb] auth_token hash pki key PKI tokens on hash in memcached
  when accessed by auth_token middelware
* [1eb9947] don't import filter_user name, use it from the identity
  module
* [fdcb856] don't modify the passed in dict to from_dict
* [0d02e12] move hashing user password functions to common/utils
* [d95d6bf] ignore .tox directory for pep8 in runtests
* [23bb7ec] Imported Translations from Transifex
* [f79f701] Implements REMOTE_USER authentication support.
* [27ae477] Ignore keystone.openstack for PEP8
* Automated Ubuntu testing build:
* [23aa49e] key all backends off of hash of pki token.
* [1eb9947] don't import filter_user name, use it from the identity
  module
* [fdcb856] don't modify the passed in dict to from_dict
* [0d02e12] move hashing user password functions to common/utils
* [d95d6bf] ignore .tox directory for pep8 in runtests
* Re-enable gating of package build based on successful unit testing:
  - d/tests/test_overrides.conf: Fixup test configuration to use
    correct certificate locations.
  - d/p/fix-ubuntu-tests.patch: Skip tests for older versions of
    keystoneclient based on checkouts of upstream git repo.
  - d/rules: Re-enable package build failure on test failure.
* d/control: Bump dependencies on python-keystoneclient to >= 1:0.2.
* d/control: Update Vcs-Bzr location to point to correct branch.
* d/control,d/po/*: Setup package templates for translation.
* d/man/*: Corrected spellings in man pages.
* d/keystone.upstart: Tweak 'stop on' to be triggered on all
  appropriate runlevel transitions, use start-stop-daemon to startup
  keystone daemon.
* debian/keystone.manpages: Install sphinx-generated manpages instead
  of our own outdated and unneeded versions. (LP: #1082050)
* New upstream release.
* Remove incomplete/broken dbconfig-common scripts.
* d/control: Added python-novaclient dependency
* d/patches: refreshed patches
* debian/tests/test_overrides.conf: Update for Grizzly test suite.
* debian/control: Drop python-nova.
* New upstream release.
* debian/rules: FTBFS if there is a missing binary.
* debian/rules: Temporarily pass the tests since you need to run
  keystone in order to run the tests.
* debian/patches/*: Refrehsed.
* New upstream release.
* debian/control: Ensure keystoneclient is upgraded with keystone,
  require python-keystoneclient >= 1:0.1.3. (LP: #1073273)
* Automated Ubuntu testing build:
* [8154492] utf-8 encode user keys in memcache (bug 1056373)
* [af8b031] Fixed trivally true tests (bug 983304)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [4e1a086] Limit token revocation to tenant (bug 1050025)
* [af8b031] Fixed trivally true tests (bug 983304)
* [2c29d4c] LDAP backend attribute fixes
* [1683d84] Document memcached host system time configuration.
* [b6e568e] Implement token endpoint list (bug 1006777)
* [861f27f] LOG.warn all exception.Unauthorized authentication
  failures
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [efb6b3f] Delete user tokens after role grant/revoke
* [201a109] Cleanup PEP8 errors from Common
* Automated Ubuntu testing build:
* [235c4ce] Implementation of tenant,user,role list functions for ldap
* [201a109] Cleanup PEP8 errors from Common
* [685c1c2] PEP8 fix E251
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [fa9f0f1] Initialize Metadata variable
* [150413c] List tokens for memcached backend
* [32b82ae] Ignore eclipse files.
* [7d9b239] Sync some misc changes from openstack-common
* [e09a121] Sync latest cfg from openstack-common
* [a9ee611] Remove id_hash column
* [5446577] Upgrade PEP8 to 1.3.3 (bug 1037303)
* [4c32b5c] Expand PEP8 coverage to include docs & tests
* [ac95f83] Removed/fixed unused variable references
* [b82a0e2] HACKING compliance & staticly init module vars
* [685c1c2] PEP8 fix E251
* [7ad8497] PEP8 fix
* [7c93e84] Removed unused imports
* [026bea6] Fixed typos in comment
* [8a84c03] HACKING: Import by full module path
* [379354b] HACKING: Use single quotes
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [a411412] Fixed: test_default_tenant_uuid_token not running
* [b82a0e2] HACKING compliance & staticly init module vars
* [7ad8497] PEP8 fix
* Automated Ubuntu testing build:
* [2759c22] Check for expected cfg impl (bug 1043479)
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* Automated Ubuntu testing build:
* [13ce482] mistake in doc string
* [861670e] pep8 1.3.3 cleanup removing unused imports
* [6b04662] Removed dead code
* [3fa4ba5] Fix auth_token middleware to fetch revocation list as
  admin.
* [98d3a89] Code cleanup in doc/source/conf.py
* [067fcf0] Typo fix in keystone: existant => existent
* [1749644] allow middleware configuration from app config
* [1698094] change verbose and debug to Fasle in keystone.conf.sample
* [ddc8995] add token_format=UUID to keystone.conf.sample
* [af52ef1] Demonstrate that authenticate() returns roles.
* [3974105] Add nosehtmloutput as a test dependency.
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c13d0ba] Require authz to update user's tenant (bug 1040626)
* [1749644] allow middleware configuration from app config
* [dcb1e84] Less information returned with IntegrityError
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [212f13b] PEP8 fix for PAM test.
* [308ca89] Removed stray print statement (bug 1038131)
* [e0a7ebd] Add tests for PAM authentication.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d04e99a] Support running the tests in the debugger.
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [bf45b45] Remove unused variables
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build:
* [7b70818] PKI Token revocation
* Automated Ubuntu testing build:
* [64bbaf5] Remove unused imports
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [bf5ce27] Adding missing files to
  MANIFEST.in
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [bdc8e76] fix broken link
* Automated Ubuntu testing build: [bc12215] Set example key_size to
  1024.
* Automated Ubuntu testing build: [37ff759] Simplify the sql backend
  deletion of users and tenants.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [9d5261c] Implement python version
  of migration 002.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [4f3dcb6] Allow overloading of
  username and tenant name in the config files.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [bf49594] fix sphinx warnings
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [002dd42] Fixed marker & limit
  computation (bug 1006055)
* Automated Ubuntu testing build: [bd94b4b] fix variable names to
  coincide with the ones in common.ldap
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [39b20ac] pep8 v1.3.3 compliance
  (bug 1019498)
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [0b5cf00] documenting models
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [abc0671] notify calling process we
  are ready to serve
* Automated Ubuntu testing build: [7297afc] Return a 409 error when
  adding a second time a role to user/tenant
* Automated Ubuntu testing build: [c3696ba] Use sdist tarball instead
  of zipball.
* Automated Ubuntu testing build: [81cb2ab] Move monkey patch to
  keystone-all startup.
* Automated Ubuntu testing build: [04df79b] Run pep8 for tests.
* Automated Ubuntu testing build: [c411125] pep8 for openssl
* Automated Ubuntu testing build: [e923518] Make sure user dict has id
  key before checking against it
* Automated Ubuntu testing build: [7cdae1b] Fixing pep8 errors in
  tests/*py
* Automated Ubuntu testing build: [4ab47ad] Adding user password
  setting api call
* Automated Ubuntu testing build: [2a909ee] Making docs pretty!
* Automated Ubuntu testing build: [8a94a9c] Removed redundant /
  excessively verbose debug
* Automated Ubuntu testing build: [9625c55] adding keystoneclient test
* Automated Ubuntu testing build: [60fa32b] updating testing
  documentation
* Automated Ubuntu testing build: [ae0515c] Admin Auth URI prefix
* Automated Ubuntu testing build: [86177df] Prevent service catalog
  injection in auth_token.
* Automated Ubuntu testing build: [4b97716] Webob needs body to calc
  Content-Length (bug 1016171)
* Automated Ubuntu testing build: [d061599] Fix the wrong infomation
  in keystone-manage.rst
* Automated Ubuntu testing build: [2a78594] Implementation of LDAP
  functions
* Automated Ubuntu testing build: [9b31383] Files for Apache-HTTPD
* Automated Ubuntu testing build: [4ebfdfa] Raise unauthorized if
  tenant disabled (bug 988920)
* Automated Ubuntu testing build: [0abf6ba] Debug output may include
  passwords (bug 1004114)
* Automated Ubuntu testing build: [ec363ac] Import ec2 credentials
  from old keystone db
* Automated Ubuntu testing build: [2806181] Added user name
  validation. Fixes bug 966251.
* Automated Ubuntu testing build: [5adb018] Sync jsonutils from
  openstack-common
* Automated Ubuntu testing build: [bcc0f6d] Cryptographically Signed
  tokens
* Automated Ubuntu testing build: [d2ecd61] Typo error in
  keystone/doc/source/configuration.rst.
* Automated Ubuntu testing build: [dada197] Test for Cert by name
* Automated Ubuntu testing build: [ba8f351] Assert adminness on token
  validation (bug 1030968)
* Automated Ubuntu testing build: [4444577] Set default signing_dir
  based on os USER.
* Automated Ubuntu testing build: [2b2d0a1] Log errors when
  signing/verifying.
* Automated Ubuntu testing build: [ac4dcfd] Use user home dir as
  default for cache
* Automated Ubuntu testing build: [f82c7c2] Enabling SQL Catalog tests
  (bug 958950)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [e0136d2] setting up babel for i18n
  work blueprint start-keystone-i18n
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [33104d2] don't assume that the LDAP
  server require authentication
* Automated Ubuntu testing build: [58105d8] Correct Tree DN
* Automated Ubuntu testing build: [a7417e2] Reorder test imports by
  full import path
* Automated Ubuntu testing build: [94481ab] Fixed user-only role
  deletion error.
* Automated Ubuntu testing build: [f648819] Set iso8601 module as
  default dependence.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [d3058a1] Do not crash when trying
  to remove a user role (without a tenant)
* Automated Ubuntu testing build: [4202f70] Use PyPI for
  keystoneclient.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [5ad8086] keystone_manage
  certificate generation
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [b9e8d0f] Fix order of returned
  tuple elements in pam authenticate
* Automated Ubuntu testing build: [e72c276] Add .mailmap file.
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [c79d93b] Keystone should use
  openstack.common.timeutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [ef58425] Basic request stats
  monitoring & reporting
* Automated Ubuntu testing build: [79f5f7c] fix man page build
* Automated Ubuntu testing build: [cb74707] Keystone should use
  openstack.common.jsonutils
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: No change rebuild.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [23ca656] Refactor 404's into
  managers & drivers (bug 968519)
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [a68d530] Fixed typo in routing
  conditions (bug 1006793)
* Automated Ubuntu testing build: [cc91786] Pass serviceCatalog in
  auth_token middleware
* Automated Ubuntu testing build: [79647c6] Reorder imports by full
  module path
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [94f45da] Utilize newer changes in
  openstack-common.
* Automated Ubuntu testing build:
* Automated Ubuntu testing build: [3f9f77a] Monkey patching 'thread'.
* Automated Ubuntu testing build: [991a618] Removed unused import
* Automated Ubuntu testing build:
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [79647c6] Reorder imports by full module path
* Automated Ubuntu testing build:
* [cc91786] Pass serviceCatalog in auth_token middleware
* [a68d530] Fixed typo in routing conditions (bug 1006793)
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [489c6b6] 400 on unrecognized content type (bug 1012282)
* [5c35a84] Speed up SQL unit tests.
* [66a0b63] PEP8 fixes
* Automated Ubuntu testing build:
* [e33a474] Clean up test requires a bit.
* [3ed1caf] Tweak for easier, safer subclassing
* [375838c] Carrying over token expiry time when token chaining
* Automated Ubuntu testing build:
* [b2aa78b] Use cfg's new global CONF object
* [3ed1caf] Tweak for easier, safer subclassing
* [375838c] Carrying over token expiry time when token chaining
* [8680549] Require authz for user role list (bug 1006815)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [b2aa620] Add s3 extension in keystone.conf sample.
* [b71fb3d] fix importing of optional modules in auth_token
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [c785018] Revert file mode to be non-executable
* [1d146f5] Require authz for service CRUD (bug 1006822)
* [d2619f1] Use cfg's new behavior of reset() clearing overrides
* [65ec652] Use cfg's new group autocreation feature
* [dd14b16] Sync with latest version of openstack.common.cfg
* [daf395b] Use X_USER_NAME and X_ROLES headers.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [17723a6] Keystone should use openstack.common.importutils
* Automated Ubuntu testing build:
* [4bfa203] PEP8 fixes
* [bb2fbb7] Fixes some pep8 warning/errors.
* [055d073] Update swift_auth documentation.
* [30654a6] Add ACL check using <tenant_id>:<user> format.
* [bcb12ef] Allow other middleware overriding authentication.
* [2ee73cc] Changed arguments in keystone CLI for consistency.
* [012c3d3] One 'ctrl-c' kills keystone.
* [bc803a4] Make sure we parse delay_auth_decision as boolean.
* Automated Ubuntu testing build:
* [f537a82] blueprint 2-way-ssl
* [055d073] Update swift_auth documentation.
* [30654a6] Add ACL check using <tenant_id>:<user> format.
* [bcb12ef] Allow other middleware overriding authentication.
* [2ee73cc] Changed arguments in keystone CLI for consistency.
* [012c3d3] One 'ctrl-c' kills keystone.
* [bc803a4] Make sure we parse delay_auth_decision as boolean.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [bb2fbb7] Fixes some pep8 warning/errors.
* [628149b] Invalidate user tokens when a user is disabled
* [19b6076] Add validations of 'name' field for roles, users and
  tenants.
* [6c5f7d9] notify calling process we are ready to serve
* [c2255ed] Corrects url conversion in export_legacy_catalog
* [fd7df12] Truly handle mailmap entries for all combinations.
* [5ad37eb] fix pam admin user case
* Automated Ubuntu testing build:
* [7a7a0c6] Backslash continuation removal (Keystone folsom-1)
* [56492c2] Nail prettytable test dependency at 0.5.0.
* [628149b] Invalidate user tokens when a user is disabled
* [19b6076] Add validations of 'name' field for roles, users and
  tenants.
* [05d6150] Added 'NormalizingFilter' middleware.
* [6c5f7d9] notify calling process we are ready to serve
* [b69dbc2] Added tenant name validation. Fixes bug 966249.
* [c2255ed] Corrects url conversion in export_legacy_catalog
* [fd7df12] Truly handle mailmap entries for all combinations.
* [5ad37eb] fix pam admin user case
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [d3b2e0a] Remove service_* from authtoken examples
* [56492c2] Nail prettytable test dependency at 0.5.0.
* Automated Ubuntu testing build:
* [e0447e4] Fix depricated /users/{user-id}/roles
* [a67b248] Invalidate user tokens when password is changed
* Automated Ubuntu testing build:
* [2e912f4] Flush tenant membership deletion before user
* [a67b248] Invalidate user tokens when password is changed
* [cf1c5e1] Improve the sample keystone.conf
* [812bed8] Add defaults for ldap options
* [9b5d9ad] Set defaults for sql options
* [749dc34] Set defaults for port options
* [ff149be] Add defaults for driver options
* [f58ca2b] Use ConfigOpts.find_file() to locate catalog template
* [fab5844] Use ConfigOpts.find_file() to locate policy.json
* [352839b] Policy doc updates; RST syntax consistency
* [6384281] cleanup dependent data upon user/tenant deletion
* [310c653] Avoid ValueError in 12.04 essex pkg (bug 988523)
* Automated Ubuntu testing build:
* No change rebuild.
* Automated Ubuntu testing build:
* [8dc3baa] Sync to newer openstack-common
* [352839b] Policy doc updates; RST syntax consistency
* [422aeba] Removed SimpleMatch 'shim'; updated readme
* [4c842ca] Removed old sections; improved syntax consistency
* [db19e0f] Update tests to run servers on 127.0.0.1

Author: Chuck Short
Revision Date: 2012-11-15 00:37:06 UTC

debian/rules: Temporarily pass the tests since you need to run
keystone in order to run the tests.

Author: Pavel Kirpichyov
Revision Date: 2014-07-31 12:01:36 UTC

We do not want change this requirements

Author: Soren Hansen
Revision Date: 2012-03-21 16:22:55 UTC

Refresh patches

Author: Sam Morrison
Revision Date: 2012-08-06 01:23:00 UTC

Sent output of keystone restart in logrotate to /dev/null

Fixes bug #1029766

Author: Chuck Short
Revision Date: 2012-02-13 16:34:07 UTC

debian/keystone.postinst: Admin -> admin. (LP: #930255)

Author: Chuck Short
Revision Date: 2012-02-10 13:56:39 UTC

* New upstream release. This release fixes several bugs with usuablitiy
   and have better integration with authentication sevices for Nova, Glance,
   Swift, and Dashboard.
* debian/control:
  * Update build dependencies: Added python-coverage and pep8.
  * Update runtime dependencies: Added python-passlib, python-httplib2,
    python-pastescript, python-webob, python-sqlalchemy, python-sqlite
   * Update copyright
* keystone.install: Install all the configuration files.
* keystone.postinst: Add the keystone group and setup the right permissions.
* Dropped:
   + debian/patches/add-missing-extenstion-files.patch: Accepted upstream
   + debian/patches/foreign_key.patch: Accepted upstream
* debian/patches/sql_connection.patch: Correct keystone.db path, as
  identified by Atul Jha. (LP: #878282)

Author: Chuck Short
Revision Date: 2012-04-05 14:42:27 UTC

releasing version 2012.1-0ubuntu1

Author: Chuck Short
Revision Date: 2012-03-02 15:15:20 UTC

debian/control: Add python-ldap and python-lxml.

Author: Chuck Short
Revision Date: 2012-07-06 14:52:22 UTC

New upstream version.

Author: Chuck Short
Revision Date: 2014-03-24 16:52:35 UTC

2013.1.5

Author: Corey Bryant
Revision Date: 2014-04-07 00:26:15 UTC

Resynchronize with stable/havana

Author: Chuck Short
Revision Date: 2015-06-23 01:03:30 UTC

releasing package keystone version 1:2014.1.5-0ubuntu1

Author: Corey Bryant
Revision Date: 2015-12-09 17:17:48 UTC

releasing package keystone version 1:2014.2.4-0ubuntu1~cloud2

Author: Corey Bryant
Revision Date: 2016-05-11 12:05:52 UTC

releasing package keystone version 1:2015.1.4-0ubuntu1

Author: Chuck Short
Revision Date: 2015-05-07 16:24:05 UTC

debian/control: Open for wily/liberty.

Author: Chuck Short
Revision Date: 2012-04-05 14:42:27 UTC

releasing version 2012.1-0ubuntu1

Author: Chuck Short
Revision Date: 2012-03-26 17:42:24 UTC

dropped swift as a depends.

Author: Chuck Short
Revision Date: 2012-04-05 14:42:27 UTC

releasing version 2012.1-0ubuntu1

Author: Chuck Short
Revision Date: 2012-08-16 18:59:31 UTC

releasing version 2012.2~f3-0ubuntu1

Author: Chuck Short
Revision Date: 2012-04-05 14:42:27 UTC

releasing version 2012.1-0ubuntu1

Author: Vincent Ladeuil
Revision Date: 2012-02-06 07:55:34 UTC

Put python-prettytable in the keystone Depends section. (LP: #922954)

Author: Ubuntu
Revision Date: 2013-01-22 17:33:23 UTC

skipping failing tests

Author: Yolanda Robla
Revision Date: 2013-06-03 14:07:45 UTC

modified import keystone

Author: Yolanda Robla
Revision Date: 2013-12-10 13:16:48 UTC

debian/keystone.conf: add extra_headers section

Author: Yolanda Robla
Revision Date: 2013-04-11 07:45:30 UTC

[ Jamie Strandboge ]
* SECURITY UPDATE: fix token creation error handling
  - debian/patches/CVE-2013-0247.patch: validate size of user_id, username,
    password, tenant_name, tenant_id and token size to help guard against a
    denial of service via large log files filling the disk
  - CVE-2013-0247
    LP: 1121494 (CVE-2013-0282)
  - [8945567] DoS through XML entity expansion (CVE-2013-1664, CVE-2013-1665)
  - LP: 1100282, LP: 1100279
    tenant (LP: #1064914) - CVE-2012-5571
    (LP: #1040626) CVE-2012-3542