Author: Ubuntu Git Importer
Author Date: 2018-11-15 16:47:04 UTC

DSC file for 2:15.0.0~b1~git2018111457.b7dfb72a6-0ubuntu1

Author: James Page
Author Date: 2018-11-15 11:32:30 UTC

Import patches-unapplied version 2:15.0.0~b1~git2018111457.b7dfb72a6-0ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 9d5ae049827c724480b07c148afb58597daf6b15

New changelog entries:
  * New upstream snapshot for OpenStack Stein.
  * d/p/*: Refresh.
  * d/control: Align (Build-)Depends with upstream.
  * d/control,python3-keystone.*: Make Python 3 modules the primary runtime
    dependency.
  * d/rules,tests/keystone-shebangs-py3: Use major version only for shebangs.
  * d/control,rules: Switch to Python 3 only.
  * d/tests: Update for Python 3 only.
  * d/keystone-common.install: Drop install of keystone-paste.ini with
    switch to flask.

Author: James Page
Author Date: 2018-11-15 11:32:30 UTC

Import patches-unapplied version 2:15.0.0~b1~git2018111457.b7dfb72a6-0ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 9d5ae049827c724480b07c148afb58597daf6b15

New changelog entries:
  * New upstream snapshot for OpenStack Stein.
  * d/p/*: Refresh.
  * d/control: Align (Build-)Depends with upstream.
  * d/control,python3-keystone.*: Make Python 3 modules the primary runtime
    dependency.
  * d/rules,tests/keystone-shebangs-py3: Use major version only for shebangs.
  * d/control,rules: Switch to Python 3 only.
  * d/tests: Update for Python 3 only.
  * d/keystone-common.install: Drop install of keystone-paste.ini with
    switch to flask.

Author: James Page
Author Date: 2018-11-15 11:32:30 UTC

Import patches-unapplied version 2:15.0.0~b1~git2018111457.b7dfb72a6-0ubuntu1 to ubuntu/disco-proposed

Imported using git-ubuntu import.

Changelog parent: 9d5ae049827c724480b07c148afb58597daf6b15

New changelog entries:
  * New upstream snapshot for OpenStack Stein.
  * d/p/*: Refresh.
  * d/control: Align (Build-)Depends with upstream.
  * d/control,python3-keystone.*: Make Python 3 modules the primary runtime
    dependency.
  * d/rules,tests/keystone-shebangs-py3: Use major version only for shebangs.
  * d/control,rules: Switch to Python 3 only.
  * d/tests: Update for Python 3 only.
  * d/keystone-common.install: Drop install of keystone-paste.ini with
    switch to flask.

Author: Ubuntu Git Importer
Author Date: 2018-11-10 17:29:46 UTC

DSC file for 2:10.0.0-9+deb9u1

Author: Thomas Goirand
Author Date: 2018-07-20 18:56:41 UTC

Import patches-unapplied version 2:10.0.0-9+deb9u1 to debian/stretch

Imported using git-ubuntu import.

Changelog parent: ee3ef0a6ccd40d4089138dba41a998fa3bbe0640

New changelog entries:
  * CVE-2018-14432: authenticated user may discover projects they have no
    authority to access, leaking all projects in the deployment and their
    attributes. Applie upstream patch for Ocata rebased to Newton: "Reduce
    duplication in federated auth APIs (Closes: #904616).

Author: Thomas Goirand
Author Date: 2018-07-20 18:56:41 UTC

Import patches-applied version 2:10.0.0-9+deb9u1 to applied/debian/stretch

Imported using git-ubuntu import.

Changelog parent: 675b30975617e66242d65be987719d975674db18
Unapplied parent: e9ea32e6f532a7bfb6f5b6bc3e14f61a86f28930

New changelog entries:
  * CVE-2018-14432: authenticated user may discover projects they have no
    authority to access, leaking all projects in the deployment and their
    attributes. Applie upstream patch for Ocata rebased to Newton: "Reduce
    duplication in federated auth APIs (Closes: #904616).

Author: Corey Bryant
Author Date: 2018-10-01 15:39:45 UTC

Import patches-unapplied version 2:13.0.1-0ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 71b0aa7d2405707f7fb332c3a372c4c420fa871d

New changelog entries:
  * d/gbp.conf: Create stable/queens branch.
  * New stable point release for OpenStack Queens (LP: #1795424).
  * d/p/msgpack-python-compat.patch: Dropped as package has since been renamed
    to python-msgpack instead of msgpack-python.

Author: Corey Bryant
Author Date: 2018-10-01 15:39:45 UTC

Import patches-unapplied version 2:13.0.1-0ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 71b0aa7d2405707f7fb332c3a372c4c420fa871d

New changelog entries:
  * d/gbp.conf: Create stable/queens branch.
  * New stable point release for OpenStack Queens (LP: #1795424).
  * d/p/msgpack-python-compat.patch: Dropped as package has since been renamed
    to python-msgpack instead of msgpack-python.

Author: Corey Bryant
Author Date: 2018-10-01 15:39:45 UTC

Import patches-unapplied version 2:13.0.1-0ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 71b0aa7d2405707f7fb332c3a372c4c420fa871d

New changelog entries:
  * d/gbp.conf: Create stable/queens branch.
  * New stable point release for OpenStack Queens (LP: #1795424).
  * d/p/msgpack-python-compat.patch: Dropped as package has since been renamed
    to python-msgpack instead of msgpack-python.

Author: Thomas Goirand
Author Date: 2018-10-01 06:50:53 UTC

Import patches-applied version 2:14.0.0-2 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: d810aa857e39c78f06140c264862983121e95a89
Unapplied parent: 813e80ce44a737754a830360839cc5648d177744

New changelog entries:
  * Do not run keystone.tests.unit.test_sql_upgrade tests, as it looks like
    broken if using SQLite (Closes: #909989).
  * Install correctly the examples folder into keystone-doc (ie: no nested
    examples folder).

Author: Thomas Goirand
Author Date: 2018-10-01 06:50:53 UTC

Import patches-unapplied version 2:14.0.0-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: a40fd8d5dc2c67130babf129b5f16e85f140f14d

New changelog entries:
  * Do not run keystone.tests.unit.test_sql_upgrade tests, as it looks like
    broken if using SQLite (Closes: #909989).
  * Install correctly the examples folder into keystone-doc (ie: no nested
    examples folder).

Author: Thomas Goirand
Author Date: 2018-10-01 06:50:53 UTC

Import patches-unapplied version 2:14.0.0-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: a40fd8d5dc2c67130babf129b5f16e85f140f14d

New changelog entries:
  * Do not run keystone.tests.unit.test_sql_upgrade tests, as it looks like
    broken if using SQLite (Closes: #909989).
  * Install correctly the examples folder into keystone-doc (ie: no nested
    examples folder).

Author: Thomas Goirand
Author Date: 2018-10-01 06:50:53 UTC

Import patches-applied version 2:14.0.0-2 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: d810aa857e39c78f06140c264862983121e95a89
Unapplied parent: 813e80ce44a737754a830360839cc5648d177744

New changelog entries:
  * Do not run keystone.tests.unit.test_sql_upgrade tests, as it looks like
    broken if using SQLite (Closes: #909989).
  * Install correctly the examples folder into keystone-doc (ie: no nested
    examples folder).

Author: Corey Bryant
Author Date: 2018-09-20 09:15:39 UTC

Import patches-unapplied version 2:14.0.0-0ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 159b29baddf900de6595bc25ab258ed515fcc496

New changelog entries:
  * d/control: Set min python-oslo.log to rocky version (3.39.0) as
    requirements.txt min version is too low (LP: #1793347).

Author: Corey Bryant
Author Date: 2018-09-20 09:15:39 UTC

Import patches-unapplied version 2:14.0.0-0ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 159b29baddf900de6595bc25ab258ed515fcc496

New changelog entries:
  * d/control: Set min python-oslo.log to rocky version (3.39.0) as
    requirements.txt min version is too low (LP: #1793347).

Author: Corey Bryant
Author Date: 2018-09-20 09:15:39 UTC

Import patches-unapplied version 2:14.0.0-0ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 159b29baddf900de6595bc25ab258ed515fcc496

New changelog entries:
  * d/control: Set min python-oslo.log to rocky version (3.39.0) as
    requirements.txt min version is too low (LP: #1793347).

Author: Corey Bryant
Author Date: 2018-09-20 09:15:39 UTC

Import patches-unapplied version 2:14.0.0-0ubuntu2 to ubuntu/cosmic-proposed

Imported using git-ubuntu import.

Changelog parent: 159b29baddf900de6595bc25ab258ed515fcc496

New changelog entries:
  * d/control: Set min python-oslo.log to rocky version (3.39.0) as
    requirements.txt min version is too low (LP: #1793347).

Author: Thomas Goirand
Author Date: 2018-08-20 12:28:30 UTC

Import patches-unapplied version 2:14.0.0~rc1-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 61660189b433185ba05adced0e831a41053baf71

New changelog entries:
  * New upstream release.
  * Removed patches applied upstream:
    - remove_at_expression_from_tags.patch
    - CVE-2018-14432_Reduce_duplication_in_federated_auth_APIs.patch
  * Fixed (build-)depends for this release.

Author: Thomas Goirand
Author Date: 2018-08-20 12:28:30 UTC

Import patches-applied version 2:14.0.0~rc1-1 to applied/debian/experimental

Imported using git-ubuntu import.

Changelog parent: 7b5b9c454d6343d42ce1f561b055d2ca25ce2c93
Unapplied parent: 2e3cebfe27dd18adce6e285fabe7f89db3d2b0f9

New changelog entries:
  * New upstream release.
  * Removed patches applied upstream:
    - remove_at_expression_from_tags.patch
    - CVE-2018-14432_Reduce_duplication_in_federated_auth_APIs.patch
  * Fixed (build-)depends for this release.

Author: Ubuntu Git Importer
Author Date: 2018-04-03 05:29:46 UTC

pristine-tar data for keystone_13.0.0.orig.tar.gz

Author: Ubuntu Git Importer
Author Date: 2018-04-03 03:30:50 UTC

pristine-tar data for keystone_13.0.0.orig.tar.xz

Author: Corey Bryant
Author Date: 2018-02-28 19:24:54 UTC

Import patches-unapplied version 2:13.0.0-0ubuntu1 to ubuntu/bionic-proposed

Imported using git-ubuntu import.

Changelog parent: 9e8bc33e779627e9e6753edccdaa5ccf62230121

New changelog entries:
  * New upstream release for OpenStack Queens.

Author: Billy Olsen
Author Date: 2018-01-10 21:24:36 UTC

Import patches-unapplied version 2:9.3.0-0ubuntu3.2 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 485d21210630ac4a07811e2d8dcaac0a911754ae

New changelog entries:
  * LDAP backend performance improvements (LP: #1582585)
    - d/p/prevent-error-when-duplicate-mapping-is-created.patch:
      Handle races for creating id mappings.
    - d/p/added-cache-for-id-mapping-manager.patch: Add a cache to
      the id mapping manager to improve performance.
    - d/p/add-mapping_populate-command.patch: Add a keystone-manage
      command to populate id mappings between backend identity
      provider and keystone database.
    - d/p/faster-id-mapping-lookup.patch: Allow querying for all
      public ids in a domain at once instead of N queries (one per
      entity).
    - d/p/fallback-for-custom-id-map-drivers.patch: Add fallback
      path for faster-id-mapping lookup for any customer id mapping
      drivers that may be in use or existing deployments.

Author: Billy Olsen
Author Date: 2018-01-10 21:24:36 UTC

Import patches-unapplied version 2:9.3.0-0ubuntu3.2 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 485d21210630ac4a07811e2d8dcaac0a911754ae

New changelog entries:
  * LDAP backend performance improvements (LP: #1582585)
    - d/p/prevent-error-when-duplicate-mapping-is-created.patch:
      Handle races for creating id mappings.
    - d/p/added-cache-for-id-mapping-manager.patch: Add a cache to
      the id mapping manager to improve performance.
    - d/p/add-mapping_populate-command.patch: Add a keystone-manage
      command to populate id mappings between backend identity
      provider and keystone database.
    - d/p/faster-id-mapping-lookup.patch: Allow querying for all
      public ids in a domain at once instead of N queries (one per
      entity).
    - d/p/fallback-for-custom-id-map-drivers.patch: Add fallback
      path for faster-id-mapping lookup for any customer id mapping
      drivers that may be in use or existing deployments.

Author: Billy Olsen
Author Date: 2018-01-10 21:24:36 UTC

Import patches-unapplied version 2:9.3.0-0ubuntu3.2 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 485d21210630ac4a07811e2d8dcaac0a911754ae

New changelog entries:
  * LDAP backend performance improvements (LP: #1582585)
    - d/p/prevent-error-when-duplicate-mapping-is-created.patch:
      Handle races for creating id mappings.
    - d/p/added-cache-for-id-mapping-manager.patch: Add a cache to
      the id mapping manager to improve performance.
    - d/p/add-mapping_populate-command.patch: Add a keystone-manage
      command to populate id mappings between backend identity
      provider and keystone database.
    - d/p/faster-id-mapping-lookup.patch: Allow querying for all
      public ids in a domain at once instead of N queries (one per
      entity).
    - d/p/fallback-for-custom-id-map-drivers.patch: Add fallback
      path for faster-id-mapping lookup for any customer id mapping
      drivers that may be in use or existing deployments.

Author: Marc Deslauriers
Author Date: 2017-08-25 14:41:13 UTC

Import patches-unapplied version 2:9.3.0-0ubuntu3.1 to ubuntu/xenial-security

Imported using git-ubuntu import.

Changelog parent: fe9c629694c6e21b6eb7d243800c707c0730e457

New changelog entries:
  * SECURITY UPDATE: Incorrect role assignment with federated Keystone
    - debian/patches/CVE-2017-2673.patch: do not fetch group assignments
      without groups in keystone/assignment/core.py.
    - CVE-2017-2673
  - debian/patches/fix_requirements.patch: fix ftbfs.

Author: Corey Bryant
Author Date: 2017-09-21 17:41:56 UTC

Import patches-unapplied version 2:11.0.3-0ubuntu1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: e85df30301be3f3f4e0d591d86736a6fbca6e3ad

New changelog entries:
  * d/p/*: Rebased.
  * New upstream version.
  * d/p/0001-Make-flushing-tokens-more-robust.patch: Dropped. Fixed upstream.
  * New stable point release for OpenStack Ocata (LP: #1718730).

Author: Corey Bryant
Author Date: 2017-09-21 17:41:56 UTC

Import patches-unapplied version 2:11.0.3-0ubuntu1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: e85df30301be3f3f4e0d591d86736a6fbca6e3ad

New changelog entries:
  * d/p/*: Rebased.
  * New upstream version.
  * d/p/0001-Make-flushing-tokens-more-robust.patch: Dropped. Fixed upstream.
  * New stable point release for OpenStack Ocata (LP: #1718730).

Author: Corey Bryant
Author Date: 2017-09-21 17:41:56 UTC

Import patches-unapplied version 2:11.0.3-0ubuntu1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: e85df30301be3f3f4e0d591d86736a6fbca6e3ad

New changelog entries:
  * d/p/*: Rebased.
  * New upstream version.
  * d/p/0001-Make-flushing-tokens-more-robust.patch: Dropped. Fixed upstream.
  * New stable point release for OpenStack Ocata (LP: #1718730).

Author: Corey Bryant
Author Date: 2017-08-30 13:29:33 UTC

Import patches-unapplied version 2:12.0.0-0ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 4823c663b4012227a824f4c57963c7e861649f24

New changelog entries:
  * New upstream release for OpenStack Pike.

Author: Corey Bryant
Author Date: 2017-08-30 13:29:33 UTC

Import patches-unapplied version 2:12.0.0-0ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 4823c663b4012227a824f4c57963c7e861649f24

New changelog entries:
  * New upstream release for OpenStack Pike.

Author: Corey Bryant
Author Date: 2017-08-30 13:29:33 UTC

Import patches-unapplied version 2:12.0.0-0ubuntu1 to ubuntu/artful-proposed

Imported using git-ubuntu import.

Changelog parent: 4823c663b4012227a824f4c57963c7e861649f24

New changelog entries:
  * New upstream release for OpenStack Pike.

Author: Jorge Niedbalski
Author Date: 2017-06-07 12:07:50 UTC

Import patches-unapplied version 2:10.0.1-0ubuntu2 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: cc8c84cc185ed28a8b3e0d0655b7e64d7cbe9dc4

New changelog entries:
  * d/p/0001-Make-flushing-tokens-more-robust.patch: Commit token flushes
    between batches in order to lower resource consumption and
    make flushing more robust for replication (LP: #1649616).

Author: Jorge Niedbalski
Author Date: 2017-06-07 12:07:50 UTC

Import patches-unapplied version 2:10.0.1-0ubuntu2 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: cc8c84cc185ed28a8b3e0d0655b7e64d7cbe9dc4

New changelog entries:
  * d/p/0001-Make-flushing-tokens-more-robust.patch: Commit token flushes
    between batches in order to lower resource consumption and
    make flushing more robust for replication (LP: #1649616).

Author: Jorge Niedbalski
Author Date: 2017-06-07 12:07:50 UTC

Import patches-unapplied version 2:10.0.1-0ubuntu2 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: cc8c84cc185ed28a8b3e0d0655b7e64d7cbe9dc4

New changelog entries:
  * d/p/0001-Make-flushing-tokens-more-robust.patch: Commit token flushes
    between batches in order to lower resource consumption and
    make flushing more robust for replication (LP: #1649616).

Author: Corey Bryant
Author Date: 2017-03-09 20:24:46 UTC

Import patches-unapplied version 2:11.0.0-0ubuntu1.1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: a434e7d823dbc2055bf36aacffcddd1afac36ae2

New changelog entries:
  * d/keystone.conf: Fix typo in combined log format (LP: #1671509).

Author: Corey Bryant
Author Date: 2016-10-06 15:00:53 UTC

Import patches-unapplied version 2:10.0.0-0ubuntu1 to ubuntu/yakkety-proposed

Imported using git-ubuntu import.

Changelog parent: 453395415ffc7730aeb226a9938cb5a85a4d0167

New changelog entries:
  * New upstream release for OpenStack Newton.

Author: David Della Vecchia
Author Date: 2016-05-31 17:54:41 UTC

Import patches-unapplied version 2:8.1.2-0ubuntu1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 421f5a69e6c95cd1a4e98ed1323c03f4e17dbcd5

New changelog entries:
  [ James Page ]
  * New upstream version.
  * d/p/*: Refresh.
  [ David Della Vecchia ]
  * New upstream point release for OpenStack Liberty (LP: #1587589).

Author: David Della Vecchia
Author Date: 2016-05-31 17:54:41 UTC

Import patches-unapplied version 2:8.1.2-0ubuntu1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 421f5a69e6c95cd1a4e98ed1323c03f4e17dbcd5

New changelog entries:
  [ James Page ]
  * New upstream version.
  * d/p/*: Refresh.
  [ David Della Vecchia ]
  * New upstream point release for OpenStack Liberty (LP: #1587589).

Author: David Della Vecchia
Author Date: 2016-05-31 17:54:41 UTC

Import patches-unapplied version 2:8.1.2-0ubuntu1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 421f5a69e6c95cd1a4e98ed1323c03f4e17dbcd5

New changelog entries:
  [ James Page ]
  * New upstream version.
  * d/p/*: Refresh.
  [ David Della Vecchia ]
  * New upstream point release for OpenStack Liberty (LP: #1587589).

Author: Corey Bryant
Author Date: 2016-04-07 18:16:00 UTC

Import patches-unapplied version 2:9.0.0-0ubuntu1 to ubuntu/xenial-proposed

Imported using git-ubuntu import.

Changelog parent: 5a41981d6a92e339960dbc091e5fcd739fad4eff

New changelog entries:
  * New upstream release for OpenStack Mitaka.

Author: Chuck Short
Author Date: 2015-10-15 12:54:19 UTC

Import patches-unapplied version 1:2015.1.2-0ubuntu2 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: b144b4b1e75fd71d91e49d7c312cd1bc3d98c038

New changelog entries:
  [ Chuck Short ]
  * Resynchronize with stable/kilo (8a2da01) (LP: #1506058):
    - [8a2da01] Reject rule if assertion type unset
    - [9dfad21] Validate domain ownership for v2 tokens
    - [8bd9b22] Maintain the expiry of v2 fernet tokens
    - [aa3354e] Fernet 'expires' value loses 'ms' after validation
    - [0ed33e3] Test to ensure fernet key rotation results in new key sets
    - [2f580e4] Reduce number of Fernet log messages
    - [6c106e9] Handle non-numeric files in key_repository
    - [fb7f4a7] Replace 401 to 404 when token is invalid
    - [a1e20fb] Additional Fernet test coverage
    - [cfbc0f1] Tests for correct key removed
    - [c6ec36b] Add unit test for fernet provider
    - [17b7dbc] Add unit test to exercise key rotation
    - [7498154] Fix Fernet key rotation
    - [1608f72] Refactor: move PKI-specific tests into the appropriate class
    - [a9726d2] Don't assume project IDs are UUID format
    - [f8afb29] Don't assume group IDs are UUID format
    - [b255b8f] Don't fail on converting user ids to bytes
    - [0fde127] Properly stub out the V2 and V3 XML middlewares
    - [666be4d] Fix for LDAP filter on group search by name
    - [bc96d9f] Make sure LDAP filter is constructed correctly
    - [0fe2b70] Do not remove expired revocation events on "get"
    - [20fd5af] Fix WSGI request logging
    - [e9aa267] Add openstack_user_domain to assertion
  [ Corey Byrant ]
  * d/rules: Prevent dh_python2 from guessing dependencies.
  * d/control: Move python-pysaml2 to Depends.

Author: Chuck Short
Author Date: 2015-10-15 12:54:19 UTC

Import patches-unapplied version 1:2015.1.2-0ubuntu2 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: b144b4b1e75fd71d91e49d7c312cd1bc3d98c038

New changelog entries:
  [ Chuck Short ]
  * Resynchronize with stable/kilo (8a2da01) (LP: #1506058):
    - [8a2da01] Reject rule if assertion type unset
    - [9dfad21] Validate domain ownership for v2 tokens
    - [8bd9b22] Maintain the expiry of v2 fernet tokens
    - [aa3354e] Fernet 'expires' value loses 'ms' after validation
    - [0ed33e3] Test to ensure fernet key rotation results in new key sets
    - [2f580e4] Reduce number of Fernet log messages
    - [6c106e9] Handle non-numeric files in key_repository
    - [fb7f4a7] Replace 401 to 404 when token is invalid
    - [a1e20fb] Additional Fernet test coverage
    - [cfbc0f1] Tests for correct key removed
    - [c6ec36b] Add unit test for fernet provider
    - [17b7dbc] Add unit test to exercise key rotation
    - [7498154] Fix Fernet key rotation
    - [1608f72] Refactor: move PKI-specific tests into the appropriate class
    - [a9726d2] Don't assume project IDs are UUID format
    - [f8afb29] Don't assume group IDs are UUID format
    - [b255b8f] Don't fail on converting user ids to bytes
    - [0fde127] Properly stub out the V2 and V3 XML middlewares
    - [666be4d] Fix for LDAP filter on group search by name
    - [bc96d9f] Make sure LDAP filter is constructed correctly
    - [0fe2b70] Do not remove expired revocation events on "get"
    - [20fd5af] Fix WSGI request logging
    - [e9aa267] Add openstack_user_domain to assertion
  [ Corey Byrant ]
  * d/rules: Prevent dh_python2 from guessing dependencies.
  * d/control: Move python-pysaml2 to Depends.

Author: Chuck Short
Author Date: 2015-10-15 12:54:19 UTC

Import patches-unapplied version 1:2015.1.2-0ubuntu2 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: b144b4b1e75fd71d91e49d7c312cd1bc3d98c038

New changelog entries:
  [ Chuck Short ]
  * Resynchronize with stable/kilo (8a2da01) (LP: #1506058):
    - [8a2da01] Reject rule if assertion type unset
    - [9dfad21] Validate domain ownership for v2 tokens
    - [8bd9b22] Maintain the expiry of v2 fernet tokens
    - [aa3354e] Fernet 'expires' value loses 'ms' after validation
    - [0ed33e3] Test to ensure fernet key rotation results in new key sets
    - [2f580e4] Reduce number of Fernet log messages
    - [6c106e9] Handle non-numeric files in key_repository
    - [fb7f4a7] Replace 401 to 404 when token is invalid
    - [a1e20fb] Additional Fernet test coverage
    - [cfbc0f1] Tests for correct key removed
    - [c6ec36b] Add unit test for fernet provider
    - [17b7dbc] Add unit test to exercise key rotation
    - [7498154] Fix Fernet key rotation
    - [1608f72] Refactor: move PKI-specific tests into the appropriate class
    - [a9726d2] Don't assume project IDs are UUID format
    - [f8afb29] Don't assume group IDs are UUID format
    - [b255b8f] Don't fail on converting user ids to bytes
    - [0fde127] Properly stub out the V2 and V3 XML middlewares
    - [666be4d] Fix for LDAP filter on group search by name
    - [bc96d9f] Make sure LDAP filter is constructed correctly
    - [0fe2b70] Do not remove expired revocation events on "get"
    - [20fd5af] Fix WSGI request logging
    - [e9aa267] Add openstack_user_domain to assertion
  [ Corey Byrant ]
  * d/rules: Prevent dh_python2 from guessing dependencies.
  * d/control: Move python-pysaml2 to Depends.

Author: Corey Bryant
Author Date: 2015-10-15 16:58:56 UTC

Import patches-unapplied version 2:8.0.0-0ubuntu1 to ubuntu/wily-proposed

Imported using git-ubuntu import.

Changelog parent: 7adf3a497fcd96d955684e78362c9e3831d8841d

New changelog entries:
  * New upstream release for OpenStack Liberty.

Author: Corey Bryant
Author Date: 2015-06-22 14:14:38 UTC

Import patches-unapplied version 1:2014.1.5-0ubuntu1 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 535c053d844e34e6f2b5d1098c3da2fc20c9cb27

New changelog entries:
  * Resynchronize with stable/icehouse (91255f1) (LP: #1467533):
    - [a1548eb] backend_argument should be marked secret
    - [e6eba4b] Remove oslo.serialization from requirements.txt
    - [0e0efdb] Work with pymongo 3.0
    - [91255f1] Deal with PEP-0476 certificate chaining checking
  * d/p/drop-oslo-serialization.patch: Dropped; Fixed upstream.
  * d/p/fix-requirements.patch: Rebased

Author: Corey Bryant
Author Date: 2015-06-22 14:14:38 UTC

Import patches-unapplied version 1:2014.1.5-0ubuntu1 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 535c053d844e34e6f2b5d1098c3da2fc20c9cb27

New changelog entries:
  * Resynchronize with stable/icehouse (91255f1) (LP: #1467533):
    - [a1548eb] backend_argument should be marked secret
    - [e6eba4b] Remove oslo.serialization from requirements.txt
    - [0e0efdb] Work with pymongo 3.0
    - [91255f1] Deal with PEP-0476 certificate chaining checking
  * d/p/drop-oslo-serialization.patch: Dropped; Fixed upstream.
  * d/p/fix-requirements.patch: Rebased

Author: Corey Bryant
Author Date: 2015-06-22 14:14:38 UTC

Import patches-unapplied version 1:2014.1.5-0ubuntu1 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 535c053d844e34e6f2b5d1098c3da2fc20c9cb27

New changelog entries:
  * Resynchronize with stable/icehouse (91255f1) (LP: #1467533):
    - [a1548eb] backend_argument should be marked secret
    - [e6eba4b] Remove oslo.serialization from requirements.txt
    - [0e0efdb] Work with pymongo 3.0
    - [91255f1] Deal with PEP-0476 certificate chaining checking
  * d/p/drop-oslo-serialization.patch: Dropped; Fixed upstream.
  * d/p/fix-requirements.patch: Rebased

Author: Chuck Short
Author Date: 2015-04-21 13:34:08 UTC

Import patches-unapplied version 1:2014.2.3-0ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: ca3f34ccfcc30f5e8eade4f5025a72c6297a33ef

New changelog entries:
  * Resynchronize with stable/juno (5db3733) (LP: #1443429):
    - [e2bbebe] Work with pymongo 3.0
    - [0c7535b] Fix up _ldap_res_to_model for ldap identity backend
    - [e3cfba8] Speed up memcache lock
    - [3db10d0] Correct initialization order for logging to use eventlet locks
    - [2fd68a0] Updated from global requirements
    - [027236c] Don't try to convert LDAP attributes to boolean
    - [ddfa37e] Make identity id mapping handle unicode
    - [a322cee] Improve testing of unicode id mapping
    - [d8b145e] Fix the syntax issue on creating table `endpoint_group`
    - [7a613ae] Keystoneclient tests from venv-installed client
    - [5db3733] Bump stable/juno version to 2014.2.3
    - [b84e22b] Fix race on default role creation
    - [a475757] fix the wrong update logic of catalog kvs driver
    - [75ed605] do parameter check before updating endpoint_group
  * debian/patches/fix-ubuntu-tests.patch: Dropped no longer needed.

Author: Chuck Short
Author Date: 2015-04-21 13:34:08 UTC

Import patches-unapplied version 1:2014.2.3-0ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: ca3f34ccfcc30f5e8eade4f5025a72c6297a33ef

New changelog entries:
  * Resynchronize with stable/juno (5db3733) (LP: #1443429):
    - [e2bbebe] Work with pymongo 3.0
    - [0c7535b] Fix up _ldap_res_to_model for ldap identity backend
    - [e3cfba8] Speed up memcache lock
    - [3db10d0] Correct initialization order for logging to use eventlet locks
    - [2fd68a0] Updated from global requirements
    - [027236c] Don't try to convert LDAP attributes to boolean
    - [ddfa37e] Make identity id mapping handle unicode
    - [a322cee] Improve testing of unicode id mapping
    - [d8b145e] Fix the syntax issue on creating table `endpoint_group`
    - [7a613ae] Keystoneclient tests from venv-installed client
    - [5db3733] Bump stable/juno version to 2014.2.3
    - [b84e22b] Fix race on default role creation
    - [a475757] fix the wrong update logic of catalog kvs driver
    - [75ed605] do parameter check before updating endpoint_group
  * debian/patches/fix-ubuntu-tests.patch: Dropped no longer needed.

Author: Chuck Short
Author Date: 2015-04-21 13:34:08 UTC

Import patches-unapplied version 1:2014.2.3-0ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: ca3f34ccfcc30f5e8eade4f5025a72c6297a33ef

New changelog entries:
  * Resynchronize with stable/juno (5db3733) (LP: #1443429):
    - [e2bbebe] Work with pymongo 3.0
    - [0c7535b] Fix up _ldap_res_to_model for ldap identity backend
    - [e3cfba8] Speed up memcache lock
    - [3db10d0] Correct initialization order for logging to use eventlet locks
    - [2fd68a0] Updated from global requirements
    - [027236c] Don't try to convert LDAP attributes to boolean
    - [ddfa37e] Make identity id mapping handle unicode
    - [a322cee] Improve testing of unicode id mapping
    - [d8b145e] Fix the syntax issue on creating table `endpoint_group`
    - [7a613ae] Keystoneclient tests from venv-installed client
    - [5db3733] Bump stable/juno version to 2014.2.3
    - [b84e22b] Fix race on default role creation
    - [a475757] fix the wrong update logic of catalog kvs driver
    - [75ed605] do parameter check before updating endpoint_group
  * debian/patches/fix-ubuntu-tests.patch: Dropped no longer needed.

Author: Chuck Short
Author Date: 2015-04-15 17:57:49 UTC

Import patches-unapplied version 1:2015.1~rc1-0ubuntu1 to ubuntu/vivid-proposed

Imported using git-ubuntu import.

Changelog parent: e999c28ae6c5f481e074b9d4bfca24845755293a

New changelog entries:
  [ Chuck Short ]
  - New upstream milestone:
    - d/control: Align with upstream version requirements.
    - d/add-version-info.patch: Refreshed
  [ James Page ]
  * d/p/pep-0476.patch: Dropped, included upstream.

Author: Thomas Goirand
Author Date: 2015-01-08 23:05:48 UTC

Import patches-applied version 2014.1.3-6 to applied/debian/sid

Imported using git-ubuntu import.

Changelog parent: 4353b4ed5cc4a56d193474454ecf1ef54a448848
Unapplied parent: dce4c918969bd97cb4ef785e7fd02cfdab8e9657

New changelog entries:
  * unmask systemd service before starting the init script / unit file.
  * Removed dbc_upgrade = true check before pkgos_dbc_postinst and
    db_sync calls (Closes: #767715).

Author: Thomas Goirand
Author Date: 2015-01-08 23:05:48 UTC

Import patches-unapplied version 2014.1.3-6 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 9776ccc4516d9ba48e8221737d8a935b5f886314

New changelog entries:
  * unmask systemd service before starting the init script / unit file.
  * Removed dbc_upgrade = true check before pkgos_dbc_postinst and
    db_sync calls (Closes: #767715).

Author: Marc Deslauriers
Author Date: 2014-10-21 16:13:36 UTC

Import patches-unapplied version 1:2014.1.3-0ubuntu2.1 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 01882da94759d6f70408771d75a034e91cad9fd6

New changelog entries:
  * No change rebuild for security:
    - [878f12e] Adds a whitelist for endpoint catalog substitution
      + CVE-2014-3621
      + LP: #1354208

Author: Chuck Short
Author Date: 2014-10-16 19:29:56 UTC

Import patches-unapplied version 1:2014.2-0ubuntu1 to ubuntu/utopic-proposed

Imported using git-ubuntu import.

Changelog parent: 18d0f0513ba4b521c54eb8073b4790deaf2f38c3

New changelog entries:
  * New upstream release.

Author: Corey Bryant
Author Date: 2014-04-04 14:58:26 UTC

Import patches-unapplied version 1:2013.2.3-0ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 04869b0b9248682dd646d76aa34a49fc5a8bf362

New changelog entries:
  * Resynchronize with stable/havana (b85a531) (LP: #1302575):
    - [a96d1a4] User a more accurate max_delay for reconnects
    - [a120f25] Fix issue deleting ec2-credentials as non-admin user
    - [181c3c1] SQLAlchemy Change to support more strict dialect checking
    - [b6f0e26] Ensure tokens are added to both Trustor and Trustee indexes
    - [b85a531] Fix list_projects_for_endpoint failed bug

Author: Corey Bryant
Author Date: 2014-04-04 14:58:26 UTC

Import patches-unapplied version 1:2013.2.3-0ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 04869b0b9248682dd646d76aa34a49fc5a8bf362

New changelog entries:
  * Resynchronize with stable/havana (b85a531) (LP: #1302575):
    - [a96d1a4] User a more accurate max_delay for reconnects
    - [a120f25] Fix issue deleting ec2-credentials as non-admin user
    - [181c3c1] SQLAlchemy Change to support more strict dialect checking
    - [b6f0e26] Ensure tokens are added to both Trustor and Trustee indexes
    - [b85a531] Fix list_projects_for_endpoint failed bug

Author: Corey Bryant
Author Date: 2014-04-04 14:58:26 UTC

Import patches-unapplied version 1:2013.2.3-0ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 04869b0b9248682dd646d76aa34a49fc5a8bf362

New changelog entries:
  * Resynchronize with stable/havana (b85a531) (LP: #1302575):
    - [a96d1a4] User a more accurate max_delay for reconnects
    - [a120f25] Fix issue deleting ec2-credentials as non-admin user
    - [181c3c1] SQLAlchemy Change to support more strict dialect checking
    - [b6f0e26] Ensure tokens are added to both Trustor and Trustee indexes
    - [b85a531] Fix list_projects_for_endpoint failed bug

Author: James Page
Author Date: 2014-04-17 09:18:51 UTC

Import patches-unapplied version 1:2014.1-0ubuntu1 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: bbdebb05937b716cedf773e8851e2bb0779c9d28

New changelog entries:
  * New upstream release (LP: #1298959).

Author: Jamie Strandboge
Author Date: 2013-12-19 19:45:15 UTC

Import patches-unapplied version 1:2013.2-0ubuntu1.2 to ubuntu/saucy-security

Imported using git-ubuntu import.

Changelog parent: 0855af80bf307f1ad6f2e5078a588a86976f6ad0

New changelog entries:
  * SECURITY UPDATE: Keystone trust circumvention through EC2-style tokens
    - debian/patches/CVE-2013-6391.patch: addjust to store the trust_id with
      the ec2 keypair and pass this with metadata when requesting v2 token
    - CVE-2013-6391
    - LP: #1242597

Author: Jamie Strandboge
Author Date: 2013-11-05 15:09:26 UTC

Import patches-unapplied version 1:2013.1.4-0ubuntu1.1 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: a99505d24e7a9f45f875f25b8470720e142ce483

New changelog entries:
  * SECURITY UPDATE: don't add role when attempting to remove a non-existent
    role
    - debian/patches/CVE-2013-4477.patch: raise RoleNotFound with exception
      ldap.NO_SUCH_OBJECT
    - CVE-2013-4477
    - LP: #1242855

Author: Jamie Strandboge
Author Date: 2013-11-05 15:09:26 UTC

Import patches-unapplied version 1:2013.1.4-0ubuntu1.1 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: a99505d24e7a9f45f875f25b8470720e142ce483

New changelog entries:
  * SECURITY UPDATE: don't add role when attempting to remove a non-existent
    role
    - debian/patches/CVE-2013-4477.patch: raise RoleNotFound with exception
      ldap.NO_SUCH_OBJECT
    - CVE-2013-4477
    - LP: #1242855

Author: Jamie Strandboge
Author Date: 2013-11-05 15:43:11 UTC

Import patches-unapplied version 2012.2.4-0ubuntu3.3 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: 28f20aaeb55e1359bc517e90f9dc67cb6042c862

New changelog entries:
  * SECURITY UPDATE: don't add role when attempting to remove a non-existent
    role
    - debian/patches/CVE-2013-4477.patch: raise RoleNotFound with exception
      ldap.NO_SUCH_OBJECT
    - CVE-2013-4477
    - LP: #1242855

Author: Jamie Strandboge
Author Date: 2013-11-05 15:43:11 UTC

Import patches-unapplied version 2012.2.4-0ubuntu3.3 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: 28f20aaeb55e1359bc517e90f9dc67cb6042c862

New changelog entries:
  * SECURITY UPDATE: don't add role when attempting to remove a non-existent
    role
    - debian/patches/CVE-2013-4477.patch: raise RoleNotFound with exception
      ldap.NO_SUCH_OBJECT
    - CVE-2013-4477
    - LP: #1242855

Author: Jamie Strandboge
Author Date: 2013-11-05 15:43:11 UTC

Import patches-unapplied version 2012.2.4-0ubuntu3.3 to ubuntu/quantal-security

Imported using git-ubuntu import.

Changelog parent: 28f20aaeb55e1359bc517e90f9dc67cb6042c862

New changelog entries:
  * SECURITY UPDATE: don't add role when attempting to remove a non-existent
    role
    - debian/patches/CVE-2013-4477.patch: raise RoleNotFound with exception
      ldap.NO_SUCH_OBJECT
    - CVE-2013-4477
    - LP: #1242855

Author: Jamie Strandboge
Author Date: 2013-11-05 15:09:26 UTC

Import patches-unapplied version 1:2013.1.4-0ubuntu1.1 to ubuntu/raring-security

Imported using git-ubuntu import.

Changelog parent: a99505d24e7a9f45f875f25b8470720e142ce483

New changelog entries:
  * SECURITY UPDATE: don't add role when attempting to remove a non-existent
    role
    - debian/patches/CVE-2013-4477.patch: raise RoleNotFound with exception
      ldap.NO_SUCH_OBJECT
    - CVE-2013-4477
    - LP: #1242855

Author: Adam Gandelman
Author Date: 2013-10-17 20:52:59 UTC

Import patches-unapplied version 1:2013.1.4-0ubuntu1 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: 1744b6b67354a60768a4ae717633803622446e2a

New changelog entries:
  * Resynchronize with stable/grizzly (9666fc0) (LP: #1241202):
    - [6792499] periodic-keystone-python27-stable-grizzly fails due to"No
      module named netaddr" LP: 1212939
    - [775d7a7] Fix and test token revocation list API
    - [0876ea2] N+1 lookups in groups SQL LP: 1218675
    - [afbc75b] Disabling a tenant would not disable a user token LP: 1179955
    - [9666fc0] User operations with LDAP Identity and
      enabled_mask/user_enabled_default fail LP: 1210175

Author: Chuck Short
Author Date: 2013-10-16 16:09:40 UTC

Import patches-unapplied version 1:2013.2~rc4-0ubuntu1 to ubuntu/saucy-proposed

Imported using git-ubuntu import.

Changelog parent: 34b06a776e5befc119eda3c7ce487595a67f00f3

New changelog entries:
  * New upstream release candidate (LP: #1240592).

Author: Thomas Goirand
Author Date: 2013-05-10 02:09:14 UTC

Import patches-applied version 2012.1.1-13+wheezy1 to applied/debian/jessie

Imported using git-ubuntu import.

Changelog parent: 7223402da2cf8657b1b7efc366f6ce5f4b923fe4
Unapplied parent: fd4e4693cb7767549dfbda25f59cb51ae6b27ab7

New changelog entries:
  * CVE-2013-2059: Keystone tokens not immediately invalidated when user is
    deleted [OSSA 2013-011]. Added backported to Essex patch which I picked-up
    from Launchpad. Thanks to the Canonical security team (Closes: #707598).

Author: Thomas Goirand
Author Date: 2013-05-10 02:09:14 UTC

Import patches-unapplied version 2012.1.1-13+wheezy1 to debian/jessie

Imported using git-ubuntu import.

Changelog parent: 06b6127ee9998482b9b5c864604131bfe5b61a8f

New changelog entries:
  * CVE-2013-2059: Keystone tokens not immediately invalidated when user is
    deleted [OSSA 2013-011]. Added backported to Essex patch which I picked-up
    from Launchpad. Thanks to the Canonical security team (Closes: #707598).

Author: James Page
Author Date: 2013-05-29 19:59:34 UTC

Import patches-unapplied version 2012.2.4-0ubuntu3 to ubuntu/quantal-proposed

Imported using git-ubuntu import.

Changelog parent: 3ea2eaab9cd818cee47fd9caa8e3f4294bb1a5ee

New changelog entries:
  * debian/patches/update_certs.patch: Fix FTBFS. Original SSL certs
    for test suite expired May 18 2013. Cherry-picked regenerated certs
    from stable/folsom commit c14f2789.

Author: Jamie Strandboge
Author Date: 2013-05-15 19:41:06 UTC

Import patches-unapplied version 2012.1.3+stable-20130423-f48dd0fc-0ubuntu1.1 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: f8113a3f67b2340447d2b506f74317b3106d2311

New changelog entries:
  * SECURITY UPDATE: delete user token immediately upon delete when using v2
    API
    - CVE-2013-2059.patch: adjust keystone/identity/core.py to call
      token_api.delete_token() during delete. Also update test suite.
    - CVE-2013-2059
    - LP: #1166670

Author: Jamie Strandboge
Author Date: 2013-05-15 19:41:06 UTC

Import patches-unapplied version 2012.1.3+stable-20130423-f48dd0fc-0ubuntu1.1 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: f8113a3f67b2340447d2b506f74317b3106d2311

New changelog entries:
  * SECURITY UPDATE: delete user token immediately upon delete when using v2
    API
    - CVE-2013-2059.patch: adjust keystone/identity/core.py to call
      token_api.delete_token() during delete. Also update test suite.
    - CVE-2013-2059
    - LP: #1166670

Author: Jamie Strandboge
Author Date: 2013-05-15 19:41:06 UTC

Import patches-unapplied version 2012.1.3+stable-20130423-f48dd0fc-0ubuntu1.1 to ubuntu/precise-security

Imported using git-ubuntu import.

Changelog parent: f8113a3f67b2340447d2b506f74317b3106d2311

New changelog entries:
  * SECURITY UPDATE: delete user token immediately upon delete when using v2
    API
    - CVE-2013-2059.patch: adjust keystone/identity/core.py to call
      token_api.delete_token() during delete. Also update test suite.
    - CVE-2013-2059
    - LP: #1166670

Author: Yolanda Robla
Author Date: 2013-04-23 08:30:16 UTC

Import patches-unapplied version 2012.1.3+stable-20130423-f48dd0fc-0ubuntu1 to ubuntu/precise-proposed

Imported using git-ubuntu import.

Changelog parent: 13a28253df23bc0c9ebfeee17cac5449e19c4609

New changelog entries:
  * Resynchronize with stable/essex (LP: #1089488):
    - [7402f5e] EC2 authentication does not ensure user or tenant is enabled
      LP: 1121494
    - [8945567] DoS through XML entity expansion (CVE-2013-1664) LP: 1100282
    - [7b5b72f] Add size validations for /tokens.
    - [ef1e682] docutils 0.10 incompatible with sphinx 1.1.3 LP: 1091333
    - [8735009] Removing user from a tenant isn't invalidating user access to
      tenant (LP: #1064914)
    - [025b1d5] Jenkins jobs fail because of incompatibility between sqlalchemy-
      migrate and the newest sqlalchemy-0.8.0b1 (LP: #1073569)
    - [ddb4019] Open 2012.1.4 development
    - [0e1f05e] memcache driver needs protection against unicode user keys
      (LP: #1056373)
    - [176ee9b] Token invalidation in case of role grant/revoke should be
      limited to affected tenant (LP: #1050025)
    - [58ac669] Token validation includes revoked roles (CVE-2012-4413)
      (LP: #1041396)
    - [cd1e48a] Memcached Token Backend does not support list tokens
      (LP: #1046905)
    - [5438d3b] Update user's default tenant partially succeeds without authz
      (LP: #1040626)
  * Dropped patches, superseeded by new snapshot:
    - debian/patches/CVE-2013-0282.patch [7402f5e]
    - debian/patches/CVE-2013-1664+1665.patch [8945567]
    - debian/patches/keystone-CVE-2012-5571.patch [8735009]
    - debian/patches/keystone-CVE-2012-4413.patch [58ac669]
    - debian/patches/keystone-CVE-2012-3542.patch [5438d3b]
  * Refreshed patches:
    - debian/patches/CVE-2013-0247.patch
    - debian/patches/fix-ubuntu-tests.patch

Author: Chuck Short
Author Date: 2013-04-06 03:32:17 UTC

Import patches-unapplied version 1:2013.1-0ubuntu1 to ubuntu/raring-proposed

Imported using git-ubuntu import.

Changelog parent: 5355c2e8c96b04b0c31bc01b676ced30eca5f2a5

New changelog entries:
  [ Adam Gandelman ]
  * debian/patches/sql_connection.patch: Ensure SQL by default for all
    backends. (LP: #1158563)
  * debian/rules: Reinstate use of test_overrides.conf to target upstream
    defaults when running unit tests.
  [ Chuck Short ]
  * New upstream release.

Author: Chuck Short
Author Date: 2012-09-27 17:22:07 UTC

Import patches-unapplied version 2012.2-0ubuntu1 to ubuntu/quantal

Imported using git-ubuntu import.

Changelog parent: 0115421682cf80e68ac5b43161555f2cbe739021

New changelog entries:
  * New upstream release.

Author: Chuck Short
Author Date: 2012-04-05 14:42:24 UTC

Import patches-unapplied version 2012.1-0ubuntu1 to ubuntu/precise

Imported using git-ubuntu import.

Changelog parent: ea7dde7c702457fbefa9271f596985f5f164bd49

New changelog entries:
  * New upstream version.
  * debian/man/keystone.8: Mention that there is a lack of ssl support.

Author: Dave Walker
Author Date: 2011-10-21 12:17:51 UTC

Import patches-unapplied version 1.0~d4~20110909.1108-0ubuntu3.1 to ubuntu/oneiric-proposed

Imported using git-ubuntu import.

Changelog parent: 7a06ce66be5f2f907ab80fc5d4b2657b4bbe7295

New changelog entries:
  * debian/patches/sql_connection.patch: Correct keystone.db path, as
    identified by Atul Jha. (LP: #878282)

Author: Dave Walker
Author Date: 2011-10-21 12:17:51 UTC

Import patches-unapplied version 1.0~d4~20110909.1108-0ubuntu3.1 to ubuntu/oneiric-proposed

Imported using git-ubuntu import.

Changelog parent: 7a06ce66be5f2f907ab80fc5d4b2657b4bbe7295

New changelog entries:
  * debian/patches/sql_connection.patch: Correct keystone.db path, as
    identified by Atul Jha. (LP: #878282)

Author: Dave Walker
Author Date: 2011-10-21 12:17:51 UTC

Import patches-unapplied version 1.0~d4~20110909.1108-0ubuntu3.1 to ubuntu/oneiric-proposed

Imported using git-ubuntu import.

Changelog parent: 7a06ce66be5f2f907ab80fc5d4b2657b4bbe7295

New changelog entries:
  * debian/patches/sql_connection.patch: Correct keystone.db path, as
    identified by Atul Jha. (LP: #878282)

Author: Brian Thomason
Author Date: 2011-09-28 19:30:19 UTC

Import patches-unapplied version 1.0~d4~20110909.1108-0ubuntu3 to ubuntu/oneiric

Imported using git-ubuntu import.

Changelog parent: 524b7cbd8f2406c32d031509844baab054c61f77

New changelog entries:
  [Juan Negron]
  * Added debian/patches/foreign_key.patch: Fixed bug which attempted to to
    obtain a service_id by passing an Integer rather than a String to the
    Column function in models.py. (LP: #861682)
  [Brian Thomason]
  * Removed "|| true" from test execution in debian/rules as it was masking a
    failure. After investigating the failure further, it was found that two
    files were missing from the contrib/extensions/service/raxkey dir that were
    a part of trunk at the time. (LP: #861813)
    - added keystone/contrib/extensions/service/raxkey/extension.xml
    - added keystone/contrib/extensions/service/raxkey/extension.json

Author: Chuck Short
Author Date: 2011-08-23 14:18:22 UTC

Import patches-applied version 1.0~d4~20110823.1078-0ubuntu1 to applied/ubuntu/oneiric

Imported using git-ubuntu import.

Unapplied parent: d46d0437a33f3f50facbea10a09a6843e2347ef0

Author: Chuck Short
Author Date: 2011-08-23 14:18:22 UTC

Import patches-applied version 1.0~d4~20110823.1078-0ubuntu1 to applied/ubuntu/oneiric

Imported using git-ubuntu import.

Unapplied parent: d46d0437a33f3f50facbea10a09a6843e2347ef0

Author: Chuck Short
Author Date: 2011-08-23 14:18:22 UTC

Import patches-applied version 1.0~d4~20110823.1078-0ubuntu1 to applied/ubuntu/oneiric

Imported using git-ubuntu import.

Unapplied parent: d46d0437a33f3f50facbea10a09a6843e2347ef0