summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | | | | | from tests importAdam Young2013-03-0819-24/+24
| | |_|_|_|/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Makes the resolution of local imports work when running individual tests. Bug 1152326 Change-Id: I72f54bdbb60a6d7acf32bdbdc02d7bce69add84e
* | | | | | | | | Merge "Change exception raised to Forbidden on trust_id"Jenkins2013-03-111-3/+2
|\ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / |/| | | | | | | |
| * | | | | | | | Change exception raised to Forbidden on trust_idAdam Young2013-03-061-3/+2
| | |_|/ / / / / | |/| | | | | | | | | | | | | | | | | | | | | | Change-Id: I30f89d52ade45335d2f29b8454438d0dd3b20a97
* | | | | | | | Merge "v3 endpoints won't have legacy ID's (bug 1150930)"Jenkins2013-03-091-1/+1
|\ \ \ \ \ \ \ \
| * | | | | | | | v3 endpoints won't have legacy ID's (bug 1150930)Dolph Mathews2013-03-081-1/+1
| | |/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | Change-Id: I8cc6bac7b0e549db7755df3a993db7d563907324
* | | | | | | | Merge "add missing attributes for group/project tables (bug1126021)"Jenkins2013-03-088-156/+189
|\ \ \ \ \ \ \ \
| * | | | | | | | add missing attributes for group/project tables (bug1126021)Gordon Chung2013-03-078-156/+189
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | add and assign default values for optional attributes to all backends Change-Id: I54fe234b919162c3056c14f1f06c4de876080fb9
* | | | | | | | | Merge "unable to load certificate should abort request"Jenkins2013-03-084-12/+56
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | unable to load certificate should abort requestDavid Höppner2013-03-064-12/+56
| | |_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If openssl returns with a command line error (3), we assume the PKI certificate is not properly installed. Added 'try ... except' blocks to cms_sign_text and cms_sign_token calls. Fixes: bug #1103569 Change-Id: Iad98738e990d3ab1ec0d0015840d76cf948ae560
* | | | | | | | | Delete tokens for userAdam Young2013-03-084-51/+104
| |_|/ / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug 1152283 There was a typo in the function that showed it was untested. This fixes the typo and adds a unit test It also corrects the logic in the KVS backend to ignore the user_id field when listing tokens by trust_id Change-Id: I5325c04e53a09fce68f3d350e7502341a398aa05
* | | | | | | | return 201 Created on POST request (bug1131119)Gordon Chung2013-03-075-13/+45
| |/ / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | correct status code from 200 Ok to 201 Created for v3 POST requests. Fixes: bug #1131119 Change-Id: Iabeb6daf677e0f34defdef5e58d87229fc90346f
* | | | | | | Merge "Remove unused methods from LDAP backed."Jenkins2013-03-071-59/+0
|\ \ \ \ \ \ \
| * | | | | | | Remove unused methods from LDAP backed.Yuriy Taraday2013-03-071-59/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I642a5f3471da00c9e91bc3150beebe345d88187a
* | | | | | | | Merge "Move get_by_name to LdapBase."Jenkins2013-03-072-38/+10
|\| | | | | | |
| * | | | | | | Move get_by_name to LdapBase.Yuriy Taraday2013-03-072-38/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Id75a3c56aeb414c4bee9bcb606033f8f360637bc
* | | | | | | | Merge "fix typo in kvs backend"Jenkins2013-03-071-9/+10
|\ \ \ \ \ \ \ \ | |/ / / / / / / |/| | | | | | |
| * | | | | | | fix typo in kvs backendAdam Young2013-03-071-9/+10
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | Change-Id: I74134bae9abff847d317e0074cae1878cf76aae8
* | | | | | | Merge "Straighten out NotFound raising in LDAP backend."Jenkins2013-03-072-83/+45
|\ \ \ \ \ \ \
| * | | | | | | Straighten out NotFound raising in LDAP backend.Yuriy Taraday2013-03-052-83/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: If5914f34da318d960f5a2ae8e8b0592d1cbab946
* | | | | | | | Merge "mark 2.0 API as stable"Jenkins2013-03-072-6/+6
|\ \ \ \ \ \ \ \
| * | | | | | | | mark 2.0 API as stableAdam Young2013-03-062-6/+6
| | |/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug 1135230 Change-Id: Icb0ae39b5ac4514c04220b846ebbe24d059ba6c1
* | | | | | | | Merge "ports should be ints in config (bug 1137696)"Jenkins2013-03-071-3/+3
|\ \ \ \ \ \ \ \
| * | | | | | | | ports should be ints in config (bug 1137696)Dolph Mathews2013-03-061-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I26c0481f1f8987f310e3c3710be49d541418e3fd
* | | | | | | | | Merge "Move auth plugins to 'keystone.auth.plugins' (bug 1136967)"Jenkins2013-03-074-2/+2
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Move auth plugins to 'keystone.auth.plugins' (bug 1136967)Dolph Mathews2013-03-064-2/+2
| | |/ / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I8c72ee99695b0c039a91f807a13a832ce2c3ff74
* / | | | | | | | remove unused importAdam Young2013-03-061-1/+1
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I82f45c1dca4b96c43387640803a006ac2ab61689
* | | | | | | | Merge "keystone : Use Ec2Signer utility class from keystoneclient"Jenkins2013-03-063-82/+4
|\ \ \ \ \ \ \ \
| * | | | | | | | keystone : Use Ec2Signer utility class from keystoneclientSteven Hardy2013-02-263-82/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The Ec2Signer class has been moved to python-keystoneclient, so we can remove the internal implementation and import the keystoneclient version blueprint ec2signer-to-keystoneclient Change-Id: I19d8575ab8b972467ce280a6197ae762da1ce790
* | | | | | | | | Merge "Expand v3 trust test coverage"Jenkins2013-03-065-329/+727
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Expand v3 trust test coverageDolph Mathews2013-03-055-329/+727
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: Ie697e19c2fa0e4ac203ff24aa9efa23c25ea6ccd
* | | | | | | | | | Merge "Trusts"Jenkins2013-03-0636-99/+1645
|\| | | | | | | | |
| * | | | | | | | | TrustsAdam Young2013-03-0536-99/+1645
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Blueprint trusts creates a trust. Using a trust, one user (the trustee), can then create tokens with a subset of another user's (the trustor) roles and projects. If the impersonate flag in the trust is set, the token user_id is set to the trustor's user ID If the impersonate flag is not set, the token's user_is is set to the trustee's user ID check that both trustor and trustee are enabled prior to creating the trust token. sql and kvs backends sql upgrade scripts unit tests for backends, auth and v3 api modifications to the trust controller for creating tokens Authenticates that only user can be trustor in create Deleting a trust invalidates all tokens created from that trust Adds the trust id and the id of the trustee to the header of the token policy rules for trust This version has a workaround for testing against the KVS version of the Service catalog Change-Id: I5745f4d9a4180b59671a143a55ed87019e98ec76
* | | | | | | | | | Merge "bug 1134802: fix inconsistent format for expires_at and issued_at"Jenkins2013-03-063-29/+52
|\| | | | | | | | |
| * | | | | | | | | bug 1134802: fix inconsistent format for expires_at and issued_atGuang Yee2013-03-053-29/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Notice we have to use fraction of second precision to prevent PKI token ID overlap. Change-Id: Icfc192c08ab5b4db02547ef6f077fa7f32210835
* | | | | | | | | | Merge "Remove obsolete *page[_marker] methods from LDAP backend."Jenkins2013-03-062-78/+0
|\ \ \ \ \ \ \ \ \ \ | | |_|_|/ / / / / / | |/| | | | | | | |
| * | | | | | | | | Remove obsolete *page[_marker] methods from LDAP backend.Yuriy Taraday2013-02-232-78/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I87a75c9f1cd3f6cb3f233df6e54125f35ae4631c
* | | | | | | | | | Merge "Sync timeutils with oslo"Jenkins2013-03-051-9/+58
|\ \ \ \ \ \ \ \ \ \ | | |/ / / / / / / / | |/| | / / / / / / | |_|_|/ / / / / / |/| | | | | | | |
| * | | | | | | | Sync timeutils with osloAdam Young2013-03-051-9/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Necessary for the microsecond precision changes Change-Id: I2571af24b338a5245bc62944a891ed889cf30d4d
* | | | | | | | | Merge "Unpin pam dependency version"Jenkins2013-03-051-1/+1
|\ \ \ \ \ \ \ \ \ | |/ / / / / / / / |/| | | | | | | |
| * | | | | | | | Unpin pam dependency versionMark McLoughlin2013-02-261-1/+1
| | |/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes bug #1133240 keystone has always pinned the pam dependency to 0.1.4 pam>=0.1.4 this version was released in November 2009 and there hasn't been a release since. I can't even find a version control repo for the project. There's no particular reason to expect a future version would break us and, indeed, we want to find out about it if it happens. Change-Id: I2becf47c9d2566e2c3496ae15ca886b737006a92
* | | | | | | | Merge "update tests/__init__.py to verify openssl version"Jenkins2013-03-051-0/+41
|\ \ \ \ \ \ \ \ | |_|_|_|_|_|_|/ |/| | | | | | |
| * | | | | | | update tests/__init__.py to verify openssl versiontermie2013-02-281-0/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | keystone uses `openssl cms` which does not exist before openssl 1.0.0, older systems and versions of OS X ship with 0.9.8 Change-Id: I30d58e8d60796536d5d2ed632d32674f216647c3
* | | | | | | | Merge "Enable a parameters on ldap to allow paged_search of ldap queries ↵Jenkins2013-03-043-4/+57
|\ \ \ \ \ \ \ \ | | |_|_|_|/ / / | |/| | | | / / | |_|_|_|_|/ / |/| | | | | | This fixes bug 1083463"
| * | | | | | Enable a parameters on ldap to allow paged_search of ldap queriesJose Castro Leon2013-03-013-4/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes bug 1083463 Change-Id: Ie7ec7f2214b51766d3108a4557c096d9e6989b6b
* | | | | | | Merge "Imported Translations from Transifex"OpenStack Jenkins2013-03-041-59/+135
|\ \ \ \ \ \ \ | |_|_|_|_|/ / |/| | | | | |
| * | | | | | Imported Translations from TransifexOpenStack Jenkins2013-03-041-59/+135
| |/ / / / / | | | | | | | | | | | | | | | | | | Change-Id: I347fa92210ee1f3187841bc194eba11053f8c1ef
* | | | | | Merge "Setup logging in keystone-manage command."Jenkins2013-03-041-0/+1
|\ \ \ \ \ \ | |/ / / / / |/| | | | |
| * | | | | Setup logging in keystone-manage command.Yuriy Taraday2013-02-231-0/+1
| | |_|/ / | |/| | | | | | | | | | | | | Change-Id: I7739fa0e2715b00f4a8c1bbdecac00768b5c36d6
* | | | | command line switch for short pep8 output.Adam Young2013-02-271-1/+17
| |/ / / |/| | | | | | | | | | | Change-Id: I65e9ce051012b3afc9a088423f9d805927604331
* | | | Merge "domain_id_attributes in config.py have wrong default value"Jenkins2013-02-272-2/+6
|\ \ \ \