| Commit message (Collapse) | Author | Age | Files | Lines |
| ... | |
| | | | | |
| | | | |
| | | | |
| | | | | |
Change-Id: I663e9317c2b5eb5fe7190ea6c656fcebff7078fd
|
| |\ \ \ \ \ |
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Sync the following changes from oslo-incubator:
3557d84 Fix ListOpt to trim whitespace
01ab910 Fix set_default() with boolean CLI options
af18eaa Improve cfg's argparse sub-parsers support
f21e1d9 Fix regression with cfg CLI arguments
ceb4aa7 Fix broken --help with CommonConfigOpts
5e9503b Hide the GroupAttr conf and group attributes
b6d24bb updating sphinx documentation
403509e Don't reference argparse._StoreAction
e17deb8 Fix minor coding style issue
0c29e1d Remove ConfigCliParser class
5b9cb41 Add support for positional arguments
dbc72a6 Use stock argparse behaviour for optional args
768a147 Use stock argparse --usage behaviour
ac180b9 Use stock argparse --version behaviour
0787e38 Remove add_option() method
5afead0 Completely remove cfg's disable_interspersed_args()
5f564b2 argparse support for cfg
d7b6397 Add a missing comma in a docstring.
aca1805 cfg: fix required if option has a dash
The main API change affecting keystone is that CONF() no longer returns
unparsed arguments. The keystone-manage command is updated to use
argparse sub-parsers to achieve the same effect.
Change-Id: Ie8972ce851f1247d8710e9e0611bb3e2f843cb45
|
| | |_|_|_|/
|/| | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Fixes bug 1087405.
Change-Id: I152c7f418a66ccfe541e26efe75b59bffa6c3849
|
| |\ \ \ \ \
| | | | | |
| | | | | |
| | | | | | |
internationalization."
|
| | | |/ / /
| |/| | |
| | | | |
| | | | |
| | | | |
| | | | | |
internationalization.
Change-Id: I6b50abaa82effad8feaaac8d85086ca8b5d42590
|
| |\ \ \ \ \ |
|
| | |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
- Renamed identity.controllers.* and identity.routers.* since they
now occopy unique namespaces (thanks ayoung!)
- Moved catalog and policy controllers into their own respective modules
Change-Id: Ib9e277355e0eac15d4d218785c816b718b493b5b
|
| |\ \ \ \ \ |
|
| | |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Also fixes this traceback which I keep getting on devstack:
ERROR: test_create_certs (tests.test_cert_setup.CertSetupTestCase)
----------------------------------------------------------------------
Traceback (most recent call last):
File "/opt/stack/keystone/tests/test_cert_setup.py", line 52, in tearDown
shutil.rmtree(rootdir(SSLDIR))
File "/usr/lib/python2.7/shutil.py", line 237, in rmtree
onerror(os.listdir, path, sys.exc_info())
File "/usr/lib/python2.7/shutil.py", line 235, in rmtree
names = os.listdir(path)
OSError: [Errno 2] No such file or directory: '/opt/stack/keystone/tests/ssl/'
Fixes bug 1086812
Change-Id: Iba10822aaf1284549d610bb1172df03ffc48f363
|
| |/ / / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This covers given authentication using REMOTE_USER and also the way to
implement custom auth with WSGI middleware.
DocImpact
blueprint: pluggable-identity-authentication-handlers
Change-Id: Idbac8c38d1f0be1febbbc8056c929bada6bbb07e
|
| |\ \ \ \ |
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The request object's path changes when it gets redirected. This
behaviour is in tune with the latest WebOb code as well as the
old. The response environ defaults to None in WebOb >= 1.2b1
http://docs.webob.org/en/latest/news.html#b1
Change-Id: I557563ce5407a8ef1b5dae680e456e589285be25
|
| |/ / / /
| | | |
| | | |
| | | |
| | | |
| | | | |
Raise keystone.exception.ValidationError when password type was not string
Change-Id: Ib7538806777db0fe3a3cf9f22bf06a1d505c232f
|
| | |/ /
|/| |
| | |
| | |
| | |
| | | |
remove unneeded imports from core
Change-Id: I02fc2439cc115878d8081e052faf9ff96d20f6ec
|
| | | |
| | |
| | |
| | | |
Change-Id: I95853ec36e9c4cd937cfac7e08b648e830f9efd0
|
| |\ \ \ |
|
| | | |/
| |/|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
modify tables by adding columns, and modify entities
by adding attributes for password, description and enabled
update tests to deal with change from 'False' and 'True' to the
python values False and True
Added a Text type from SQL Alchemy
Bug 1070351
Bug 1023544
Change-Id: I066c788b5d08a8f42a9b5412ea9e29e4fe9ba205
|
| |\ \ \ |
|
| | | |/
| |/|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
fixes bug 1083391
A one character change to fix a typo in setup doc, reported
by a user :s
Change-Id: I4fefec089c9ded4b773f4b3641e30162a4faa2f8
|
| |/ /
| |
| |
| | |
Change-Id: I2cb4f8bd3891b474413eef11aae62188b358d359
|
| |/
|
|
|
|
|
|
|
|
|
|
|
| |
The fact that a cfg opt register using register_opt() is available via
the command line is actually a bug (see bug #1082279).
Also, using the _cli_values attribute is clearly poking into private
implementation details.
Fix both issues by registering the opt using register_cli_opt() and
accessing its value the normal way.
Change-Id: If170dcd96daae5b4c3d7cdebed914df417c2209b
|
| |\ |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Users can now run keystone with debug = True to reveal detailed messages
about authentication/authorization failures. This is especially useful
for new users setting up OpenStack for the first time.
Example: http://paste.openstack.org/raw/26228/
DocImpact
Change-Id: I0d072d1f0147b53da90cd4214a1e843bf39ee8e4
|
| |\ \ |
|
| | | |
| | |
| | |
| | | |
Change-Id: I03daf10aa4f689fe323e39537c312d1e783db313
|
| |\| |
| |/
|/| |
|
| | |
| |
| |
| | |
Change-Id: Ie77be83054ea88bb0860260e1750196ac5ded650
|
| |\ \
| |/
|/| |
|
| | |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This allows us to raise exceptions with very specific messages:
raise Unauthorized('User name not recognized')
In debug mode, this feedback would be exposed to the API user; without
debug mode, these details are suppressed.
Change-Id: I05c5dce3b1e2ba1123450b302e10b8ba3c265557
|
| |\ \ |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | | |
- v3 identity tests (bug 1023930)
- v3 identity implementation (bug 1023937)
Change-Id: Ic46575afe9760d9da85e262d0cf063ea002d9dcd
|
| |\| | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | | |
- v3 catalog tests (bug 1023933)
- v3 catalog implementation (bug 1023938)
Change-Id: Ie118819d25afbff62327ffc8be5b5fda2ef7f4ed
|
| |\ \ \
| |/ /
|/| | |
|
| | | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
updated docstrings to remove two errors
reformatted front page header to be consistent
added links to autogenerated python documentation
Change-Id: I59fddc12ff458bbd0102a40d4d85903ab6bd6394
|
| |\ \ \ |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
- v3 policy (bp rbac-keystone-api)
- v3 policy tests (bug 1023935)
- v3 policy implementation (bug 1023939)
Change-Id: I163fbb67726c295fe9ed09b68cd18d2273345d29
|
| |\ \ \ \ |
|
| | |/ / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Although the master auth_token file is now in keystoneclient, it will take
some time to get all the paste files to point to it there rather than here.
Hence, we import it back here to provide backward compatibility for a release
or so, after which we will remove it from the server.
Change-Id: Iccdb7839a611cdda233e4ea96f68c64d6d82f49c
|
| |\ \ \ \
| |/ / /
|/| | | |
|
| | | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Commit a10bd7a8eb418a4d9e84a9511ca3f0669e6e02e7 fixed the issue with
transient test failures, but during the rebase of the commit
be754ff2bc05a0d262469edd7ce8fac19d457231 the fix was lost.
Fixes bug 1077065
Change-Id: I14311f56e6dd0103620b58e64bf0c78c7e32f61c
|
| |\ \ \ \ |
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The addresses in sample_data were hard-coded to localhost. This is
a problem when deploying not-so-all-in-one deployment -- one controller
and couple of compute nodes. It was also complicating access from
outside.
Change-Id: Iee53c3f4376c3628e1543afb6dc7e964a3a14ab2
|
| | |/ / /
|/| | |
| | | |
| | | | |
Change-Id: I764e7dbb523c8720598ecbdce3d8ef997c882b2c
|
| |\ \ \ \ |
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
It is possible that a user is no longer a member of a tenant when
they attempt to use an ec2 token. This checks to make sure that
the user still has at least one valid role in the tenant before
authenticating them. This should automatically work for the s3
version as well since it is a subclass.
Fixes bug 1064914
Change-Id: Ieb237bae936a7b00ce7ba4d4c59aec6c7a69ec21
|
| |\ \ \ \ \ |
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | | |
Change-Id: I29710f749c67cf83ccad12deee54fe6b71dd53b8
|
| |\ \ \ \ \ \
| |/ / / / /
|/| | | | | |
|