summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | | | | | Merge "Imported Translations from Transifex"OpenStack Jenkins2013-05-3019-1891/+2824
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Imported Translations from TransifexOpenStack Jenkins2013-05-3019-1891/+2824
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Icfaf58f9c2b503f3c664dc67c512de2b96ebb3ee
* | | | | | | | | | Merge "Add <version> arg to keystone-manage db_sync"Jenkins2013-05-305-9/+19
|\ \ \ \ \ \ \ \ \ \ | |_|_|_|_|_|/ / / / |/| | | | | | | | |
| * | | | | | | | | Add <version> arg to keystone-manage db_syncBrian Waldon2013-05-285-9/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This optional <version> argument allows a client of db_sync to indicate to which database version to upgrade or downgrade. Change-Id: I3ccf45eb572a3897e5d3bc5bd17566493a55f393
* | | | | | | | | | Improve the performance of tokens deletion for usergengjh2013-05-304-22/+109
| |/ / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Provide new delete the tokens api 'delete_tokens' to support delete all the tokens for user in one session in the sql backend. For the kvs and memcache, I also provide the corresponding implementation. Fix bug 1178063 Change-Id: I986a583e5900ea04e26cbdb7c49638a33818bca7
* | | | | | | | | Merge "Move auth_token middleware from admin user to an RBAC policy"Jenkins2013-05-306-12/+37
|\ \ \ \ \ \ \ \ \ | |_|_|_|/ / / / / |/| | | | | | | |
| * | | | | | | | Move auth_token middleware from admin user to an RBAC policyJoe Gordon2013-05-166-12/+37
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before this patch auth_token middleware required admin user credentials stored in assorted config files. With this patch only non-admin user credentials are needed. The revocation_list and validate_token commands use an policy.json rule, to only allow these commands if you are in have the service role. Rule used: "service_role": [["role:service"]], "service_or_admin": [["rule:admin_required"], ["rule:service_role"]], Added the policy wrapper on the validate functions. Fixes bug 1153789 Change-Id: I43986e26b16aa5213ad2536a0d07d942bf3dbbbb
* | | | | | | | | Fix the debug statement.Sahdev Zala2013-05-291-1/+1
| |_|_|_|/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes bug1185555 Change-Id: Ia3932bd4ca6cc786e9cc8bdac48f5313c915b228
* | | | | | | | Merge "Add missing space to error msg"Jenkins2013-05-291-1/+1
|\ \ \ \ \ \ \ \
| * | | | | | | | Add missing space to error msgDolph Mathews2013-05-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I782045e4ec58a4ff69be70256e57ab474243113d
* | | | | | | | | Add KEYSTONE_LOCALEDIR env variableMark McLoughlin2013-05-295-8/+30
| |_|_|_|_|/ / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Part of fixing bug #995287 Syncs these two commits from oslo-incubator: Support overriding oslo localedir too Add a gettextutils.install() helper function to get a new gettextutils.install() function which allows the default localedir to be overwritten via an environment variable. A few things to note: - the gettext.install() call is moved from common.config to the toplevel scripts to fix cases (e.g. the legacy auth_token middleware) where keystone code might be imported by a program who's default translation domain is not 'keystone'. - we add a gettext.install() call in keystone.test so that tests have the _() builtin installed. Change-Id: I86562b3a65d371673bb21f7179eecc7602bc0775
* | | | | | | | Add index on expires column of the SQL token BackendSylvain Afchain2013-05-281-0/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add migration script to add the index. bp index-token-expiry Change-Id: I36934c18979df5037d606d4846b29194750847af Fixes: bug #1168399
* | | | | | | | Merge "separate paste-deploy configuration from parameters"Jenkins2013-05-2814-117/+177
|\ \ \ \ \ \ \ \
| * | | | | | | | separate paste-deploy configuration from parametersAlan Pevec2013-05-2614-117/+177
| | |_|_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PasteDeploy configuration contains class names which might change between releases. Keeping it separate from user-configurable parameters allows deployers to move paste-deploy ini file out of configuration directory to a place where it can be safely overwritten on updates e.g. under /usr/share/ DocImpact Change-Id: I9292ca6226c8430b93565dedd45cc842742a23e2
* / | | | | | | Replace assertDictContainsSubset with stdlib verYuriy Taraday2013-05-272-15/+33
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Code copied and adopted from unittest.TestCase class from CPython 2.7 stdlib. Change-Id: Ifae16f947600f7a9d1f8d1a879fd914d0cf4d65e
* | | | | | | Cleanup docstrings (flake8 H401, H402, H403, H404)Dolph Mathews2013-05-2431-203/+190
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - docstring should not start with a space (flake8 H401) - one line docstring needs punctuation (flake8 H402) - multi line docstring end on new line (flake8 H403) - multi line docstring should start with a summary (flake8 H404) Change-Id: I69b414395930bda739aa01b785ac619fa8bb7d9b
* | | | | | | Merge "Remove useless private method"Jenkins2013-05-241-4/+1
|\ \ \ \ \ \ \
| * | | | | | | Remove useless private methodDolph Mathews2013-05-221-4/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: If0fbd3ad484128432e0564e37ae9a144cda822b5
* | | | | | | | imports not in alphabetical order (flake8 H306)Dolph Mathews2013-05-2426-34/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I0f6c5fc27b0bb2da553e9345a8ac4949ce46e685
* | | | | | | | import only modules (flake8 H302)Dolph Mathews2013-05-246-15/+13
| |_|_|/ / / / |/| | | | | | | | | | | | | | | | | | | | Change-Id: I0fa6fc6bf9d51b60fa987a0040168f3f0ef78a4a
* | | | | | | Merge "Remove unnecessary commented out code"Jenkins2013-05-241-2/+0
|\ \ \ \ \ \ \
| * | | | | | | Remove unnecessary commented out codeLance Bragstad2013-05-231-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit removes unnecessary commented out code in keystone/identity/backends/ldap/core.py. This change introduces no functional change Change-Id: Ia84d59c0e336a80d11821b11788d36cdb36032c4
* | | | | | | | one import per line (flake8 H301)Dolph Mathews2013-05-232-21/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Idb93169a0b64861bff22d06304c020865dd0a0ab
* | | | | | | | eliminate 'except:' (flake8 H201)Dolph Mathews2013-05-233-7/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Ic53b43b96c490557352be212ac79a7e8a249c21a
* | | | | | | | consistent i18n placeholders (flake8 H701, H702, H703)Dolph Mathews2013-05-2310-50/+70
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - eliminates ambiguously defined keywords in i18n strings which may become incorrectly ordered in a corresponding translation. - ensures formatting operations occur outside of i18n calls - use bare multiline string concatenation instead of 'ab' + \n 'cd' - eliminates an 'empty localization string' (passing a variable to i18n function) Change-Id: I0d78b978cc730e5fb892b80dfacaaf6687cd80be
* | | | | | | | use the 'not in' operator (flake8 H902)Dolph Mathews2013-05-234-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ... when evaluating membership in a collection. Change-Id: I3fd3d5b5d5ea505833be50193b8969f8c4feb135
* | | | | | | | Use TODO(NAME) (flake8 H101)Dolph Mathews2013-05-2313-31/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Ic47bdd61d9818f203a88ae16f97c2b61b1c1bd8c
* | | | | | | | Enumerate ignored flake8 H* rulesDolph Mathews2013-05-231-1/+17
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We were previously ignoring all H* rules; this patch specifically identifies them so that we can eliminate them one by one, without introducing regressions along the way. Change-Id: I3f18f8f9aec8657697c711f5fbb23ec687ce28f0
* | | | | | | Merge "Remove unused variables (flake8 F841)"Jenkins2013-05-2316-127/+78
|\ \ \ \ \ \ \
| * | | | | | | Remove unused variables (flake8 F841)Dolph Mathews2013-05-2316-127/+78
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I716a6b61c2b3faaa23cc79f58c6c6e01cfc232f2
* | | | | | | | Merge "Migrate to pbr."Jenkins2013-05-2311-567/+69
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | |
| * | | | | | | Migrate to pbr.Monty Taylor2013-05-2311-567/+69
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Closes bug 1179007 Change-Id: I9d2a0190bb8dc31ea481909a4e0af3008aa976bf
* | | | | | | | Satisfy flake8 import rules F401 and F403Dolph Mathews2013-05-2328-32/+29
|/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Removed unused imports - Ignore wildcard and unused imports from core modules (and avoid wildcard imports otherwise) to __init__ modules Change-Id: Ie2e5f61ae37481f5d248788cfd83dc92ffddbd91
* | | | | | | Merge "Imported Translations from Transifex"OpenStack Jenkins2013-05-2319-399/+1560
|\ \ \ \ \ \ \
| * | | | | | | Imported Translations from TransifexOpenStack Jenkins2013-05-2219-399/+1560
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Change-Id: Id63395d062ae1246c77d3d52fa10efc470a56908
* | | | | | | Merge "Consolidate eventlet code"Jenkins2013-05-234-92/+127
|\ \ \ \ \ \ \
| * | | | | | | Consolidate eventlet codeBrant Knudson2013-05-214-92/+127
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change consolidates eventlet code to a single module. Importing eventlet drags along alot of other behavior changes (such as replacing gettaddr with a version that doesn't support IPv6), so it's safer if all the eventlet code is in one place so it doesn't get imported when it's not needed, such as when running under httpd. blueprint extract-eventlet Part of fix for bug 1178732 Change-Id: Ia557f8df7f856d7707a9d8c19800ddc36f1572ed
* | | | | | | | Merge "Use webtest for v2 and v3 API testing."Jenkins2013-05-227-244/+232
|\ \ \ \ \ \ \ \
| * | | | | | | | Use webtest for v2 and v3 API testing.Jamie Lennox2013-05-227-244/+232
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The intention is to remain as close as possible to the original implementation and so leaves a number of easy cleanups and optimisations until a later patch. In writing tests their are a number of changes for API tests that are a result of webob/webtest restrictions: * response.body is now the string body and response.result is the parsed dictionary. * response.status is now a string eg. '200 OK', use response.status_code to get the integer * response.getheader no longer exists. response.headers is a dictionary like object that can be accessed (case independently) with [] or .get() Working towards: blueprint extract-eventlet Change-Id: I393b4bad2fd6eacc0b8ae98fc204d1323014b5e4
* | | | | | | | | Merge "Fix 403 status response"Jenkins2013-05-221-1/+1
|\ \ \ \ \ \ \ \ \ | | |_|_|_|_|/ / / | |/| | | | | | |
| * | | | | | | | Fix 403 status responseSahdev Zala2013-05-021-1/+1
| | |_|_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes Bug1153082 Change-Id: I1305d885751d4fa746e49cd5a76100c1900a9a53
* | | | | | | | Merge "Add assertNotEmpty to tests and use it."Jenkins2013-05-223-23/+26
|\ \ \ \ \ \ \ \ | | |/ / / / / / | |/| | / / / / | |_|_|/ / / / |/| | | | | |
| * | | | | | Add assertNotEmpty to tests and use it.Jamie Lennox2013-05-213-23/+26
| | |_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Extract the use of assertTrue(len(...)) into a method. The docs for assertTrue say that it equates to bool(expr) is True and so the format is correct however it reads inconsistently. Change-Id: I75acf75f6eaac9b7f92fd452cc60ab0cfd447c7f
* | | | | | Merge "Read-only default domain for LDAP (bug 1168726)"Jenkins2013-05-214-168/+176
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | |
| * | | | | Read-only default domain for LDAP (bug 1168726)Dolph Mathews2013-05-214-168/+176
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | A proper fix to the above was also blocked by bug 1117356, so that's fixed here as well (updates properly return the resulting entities). Change-Id: I672b90e67545cc1fe65b05ef7f8af5b42ca6afc3
* | | | | Merge "Imported Translations from Transifex"OpenStack Jenkins2013-05-2117-223/+8351
|\ \ \ \ \
| * | | | | Imported Translations from TransifexOpenStack Jenkins2013-05-2117-223/+8351
| | |/ / / | |/| | | | | | | | | | | | | Change-Id: I28403102c86512d1d934e6d1b065ef3b9e3949d6
* | | | | Merge "Documentation about the initial configuration file and sample data."Jenkins2013-05-211-2/+30
|\ \ \ \ \
| * | | | | Documentation about the initial configuration file and sample data.James Slagle2013-04-231-2/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The initial configuration file and sample data are both are helpful in getting setup with a keystone development environment. Change-Id: Ic100177abe8dda1510a183463e61e0b757986e97
* | | | | | Implement Token Flush via keystone-manage.Jamie Lennox2013-05-218-0/+78
| |/ / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Creates a cli entry 'token_flush' which removes all expired tokens. Fixes: bug 1032633 Implements: blueprint keystone-manage-token-flush Change-Id: I47eab99b577ff9e9ee74fee08e18fd07c4af5aad