Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
Cloud:OpenStack:Icehouse
openstack-keystone-doc
openstack-keystone.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File openstack-keystone.changes of Package openstack-keystone-doc
------------------------------------------------------------------- Fri Jun 26 07:35:03 UTC 2015 - rhafer@suse.com - Updated hybrid backend to include fix for bsc#935892 ------------------------------------------------------------------- Wed Jun 17 15:29:06 UTC 2015 - rhafer@suse.com - Update hybrid backend to include latest fixes for V3 protocol (bsc#928718), this should also resolve the recent V3 related tempest failures in our CI. ------------------------------------------------------------------- Thu Jun 4 00:33:14 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.5.dev11: * Remove oslo.serialization from requirements.txt ------------------------------------------------------------------- Sat May 30 00:33:00 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.5.dev9: * Updated from global requirements ------------------------------------------------------------------- Thu May 28 01:38:15 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.5.dev7: * backend_argument should be marked secret (bnc#929628, CVE-2015-3646) ------------------------------------------------------------------- Sat May 23 01:36:56 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.5.dev6: * Deal with PEP-0476 certificate chaining checking ------------------------------------------------------------------- Thu Apr 9 23:34:18 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.5.dev4: * Updated from global requirements * Work with pymongo 3.0 ------------------------------------------------------------------- Sat Mar 14 00:41:32 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.5.dev1: * Bump stable/icehouse next version to 2014.1.5 2014.1.4 ------------------------------------------------------------------- Thu Mar 12 00:41:26 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev18: * Correct initialization order for logging to use eventlet locks * Additional test coverage for password changes ------------------------------------------------------------------- Sun Mar 8 00:40:29 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev16: * Updated from global requirements ------------------------------------------------------------------- Tue Feb 17 01:42:31 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev15: * Updated from global requirements ------------------------------------------------------------------- Sat Feb 14 01:43:20 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev13: * Fix race on default role creation ------------------------------------------------------------------- Wed Feb 11 01:41:53 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev11: * Keystoneclient tests from venv-installed client ------------------------------------------------------------------- Fri Jan 30 11:10:50 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev10: * Make sure scoping to the project of a disabled domain result in 401 ------------------------------------------------------------------- Wed Jan 28 00:43:50 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev8: * Updated from global requirements ------------------------------------------------------------------- Fri Jan 16 00:42:54 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev7: * Updated from global requirements ------------------------------------------------------------------- Thu Jan 8 00:42:51 UTC 2015 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev6: * Updated from global requirements ------------------------------------------------------------------- Wed Dec 17 01:08:55 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev5.gc82875b: * Updated from global requirements ------------------------------------------------------------------- Tue Dec 16 10:53:25 UTC 2014 - tbechtold@suse.com - Add robust-detection-for-postgresql-connection-errors.patch (bnc#900963) ------------------------------------------------------------------- Sat Dec 6 01:07:06 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev3.g35d937d: * Fix test_provider_token_expiration_validation transient failure ------------------------------------------------------------------- Wed Nov 26 14:50:53 UTC 2014 - iartarisi@suse.com - Add backend_hybrid.conf needed by the hybrid backend's tests (bnc#906544) ------------------------------------------------------------------- Mon Oct 27 17:56:08 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev2.g9aec35a: * Add oslo.serialization for latest keystoneclient ------------------------------------------------------------------- Tue Oct 7 12:57:10 UTC 2014 - dmueller@suse.com - fix cert creation on hosts with broken hostname ------------------------------------------------------------------- Sat Oct 4 00:28:48 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.4.dev1.g9b9c56d: * Bump stable/icehouse next version to 2014.1.4 2014.1.3 ------------------------------------------------------------------- Fri Oct 3 00:27:19 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev33.g89ebfe9: * Fix tests comparing tokens ------------------------------------------------------------------- Sun Sep 28 00:28:33 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev32.g0571621: * Fix typo on cache backend module ------------------------------------------------------------------- Sat Sep 27 00:28:26 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev30.g49ee4eb: * Updated from global requirements * Remove extraenous instantiations of managers ------------------------------------------------------------------- Fri Sep 26 00:28:39 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev26.g2b145a1: * Catalog driver generates v3 catalog from v2 catalog * Remove `with_lockmode` use from Trust SQL backend ------------------------------------------------------------------- Thu Sep 25 08:19:22 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev22.gb126f85: * Set LDAP certificate trust options for LDAPS and TLS * Fixes an issue with the XMLEquals matcher ------------------------------------------------------------------- Tue Sep 16 23:53:31 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev18.g878f12e: * Adds a whitelist for endpoint catalog substitution (bnc#895847, CVE-2014-3621) ------------------------------------------------------------------- Mon Sep 15 23:52:19 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev17.gb31fc6d: * Avoid conversion of binary LDAP values (bnc#897467) ------------------------------------------------------------------- Tue Sep 9 23:37:56 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev15.gbb36e51: * No longer allow listing users by email ------------------------------------------------------------------- Fri Sep 5 00:37:00 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev13.g824f66d: * Ensure token is a string ------------------------------------------------------------------- Thu Aug 28 15:16:52 UTC 2014 - iartarisi@suse.com - Update the hybrid backends to fix bugs: * UnboundLocalError: local variable 'res' * UnboundLocalError when a role could not be found * _get_user AttributeError for LDAP users ------------------------------------------------------------------- Wed Aug 27 12:35:18 UTC 2014 - iartarisi@suse.com - Add alternative hybrid backends for assignment and identity (bnc#897744) ------------------------------------------------------------------- Mon Aug 25 12:59:02 UTC 2014 - jdsn@suse.de - use %_rundir if available, otherwise /var/run ------------------------------------------------------------------- Sun Aug 24 00:37:49 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev12.g7c2bee7: * Add workaround to support tox 1.7.2 * Fixes catalog URL formatting to never return None * Updates keystone.catalog.core.format_url tests * Ignore broken endpoints in get_catalog * Ignore broken endpoints in get_v3_catalog ------------------------------------------------------------------- Wed Aug 20 00:34:31 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.3.dev3.gb812131: * Bump stable/icehouse next version to 2014.1.3 ------------------------------------------------------------------- Tue Aug 19 00:09:02 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev1.gc6cd627: * Implicitly ignore attributes that are mapped to None in LDAP 2014.1.2.1 ------------------------------------------------------------------- Mon Aug 11 12:01:50 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev26.g6cbf835: * Fix revocation event handling with MySQL (bnc#892097, CVE-2014-5251) * Make test_revoke expiry times distinct * Fix revoking a scoped token from an unscoped token * Add a test for revoking a scoped token from an unscoped * Fix revoking domain-scoped tokens * Correct revocation event test for domain_id (bnc#892099, CVE-2014-5253) * Fix for V2 token issued_at time changing (bnc#892095, CVE-2014-5252) * Add tests related to V2 token issued_at time changing * Don't override tox envdir for pep8 ------------------------------------------------------------------- Sat Aug 2 00:08:09 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev17.g3a13f80: * Correct the region table to be InnoDB and UTF8 * Do not log 14+ INFO lines on a broken pipe error (eventlet) ------------------------------------------------------------------- Fri Aug 1 00:08:16 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev13.gc0e70a8: * Updated from global requirements ------------------------------------------------------------------- Sat Jul 19 00:24:33 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev12.g077dd36: * Updated from global requirements ------------------------------------------------------------------- Sat Jul 12 00:38:35 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev10.g6f8c444: * HEAD responses should return same status as GET ------------------------------------------------------------------- Thu Jul 3 00:22:47 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev9.g44555e8: * Ensure that in v2 auth tenant_id matches trust (bnc#885798, CVE-2014-352) ------------------------------------------------------------------- Fri Jun 27 12:15:39 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev8.g381ba4a: * Properly invalidate cache for get_*_by_name methods ------------------------------------------------------------------- Fri Jun 27 00:19:24 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev6.gd03f4ba: * Make sure domains are enabled by default ------------------------------------------------------------------- Wed Jun 25 00:24:11 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.2.dev4.ge3f2d35: * Bump stable/icehouse next version to 2014.1.2 ------------------------------------------------------------------- Tue Jun 17 23:52:15 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.1.dev3.gd68e19c: * Encode/Decode LDAP parameters to/from UTF-8 ------------------------------------------------------------------- Fri Jun 13 23:51:55 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.1.dev1.g7378512: * Block delegation escalation of privilege (bnc#881977, CVE-2014-3476) ------------------------------------------------------------------- Wed Jun 4 00:07:48 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.1.dev11.g2b2c9fb: * sql migration: ensure using innodb utf8 for assignment table ------------------------------------------------------------------- Fri May 30 23:59:38 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.1.dev9.ge16e120: * Removed duplication with list_user_ids_for_project ------------------------------------------------------------------- Fri May 30 00:01:59 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.1.dev7.g1f15f62: * SQL and LDAP fixes for get_roles_for_user_and_project user=group ID (bnc#876902, CVE-2014-0204) * Allow any attributes in mapping and include in results ------------------------------------------------------------------- Sat May 24 00:01:21 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.1.dev3.ge56fe4c: * Updated from global requirements ------------------------------------------------------------------- Tue May 6 13:14:03 UTC 2014 - vuntz@suse.com - Update to version keystone-2014.1.1.dev2.g1716748: * Treat LDAP attribute names as case-insensitive * Opening stable/icehouse - Add missing python-pymongo Requires to python-keystone. - Add missing python-httplib2 and python-keyring Requires to openstack-keystone-test. - Drop python-swift Requires in test subpackage: it's not needed anymore. ------------------------------------------------------------------- Thu Apr 17 12:52:36 UTC 2014 - dmueller@suse.com - update to 2014.1: * no change ------------------------------------------------------------------- Wed Apr 9 16:57:38 UTC 2014 - dmueller@suse.com - Update to version keystone-2014.1.dev14.gb07840a: * Updated from global requirements * Fix invalid LDAP filter for user ID with comma ------------------------------------------------------------------- Tue Apr 8 11:40:18 UTC 2014 - dmueller@suse.com - add 0001-Start-ping-listener-also-for-postgresql.patch ------------------------------------------------------------------- Mon Apr 7 09:20:21 UTC 2014 - dmueller@suse.com - switch to icehouse branch once again ------------------------------------------------------------------- Thu Mar 27 10:10:33 UTC 2014 - dmueller@suse.com - switch to icehouse branch again ------------------------------------------------------------------- Thu Mar 27 01:40:23 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.2.dev176.g724d056: * Open Juno development * Enable lazy translations in httpd/keystone.py * Avoid using .values() on the indexed columns * Imported Translations from Transifex * revert deprecation of v2 API * Updated from global requirements * Uses generator expressions instead of filter ------------------------------------------------------------------- Wed Mar 26 01:41:59 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev162.g3056dc5: * exclude disabled services from the catalog * refactor AuthCatalog tests * Rename keystone.tests.fixtures * Change the default version discovery URLs * Remove extra cache layer debugging * Fix doc build errors with SQLAlchemy 0.9 * Sync oslo-incubator db.sqlalchemy b9e2499 * Always include 'enabled' field in service response ------------------------------------------------------------------- Tue Mar 25 01:41:46 UTC 2014 - cloud-devel@suse.de - Rebased patches: + 0001-Create-TMPDIR-for-tests-recursively.patch dropped (merged upstream) + 0001-Create-TMPDIR-for-tests-recursively.patch dropped (merged upstream) ------------------------------------------------------------------- Tue Mar 25 01:41:44 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev146.ge7b3005: * Create TMPDIR for tests recursively * test tcp_keepidle only if it's available on the current platform * Add dedicated URL for issuing unscoped federation tokens ------------------------------------------------------------------- Mon Mar 24 17:51:47 UTC 2014 - dmueller@suse.com - add 0001-Create-TMPDIR-for-tests-recursively.patch ------------------------------------------------------------------- Mon Mar 24 01:40:47 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev141.g0fb0dfd: * Filter SAML2 assertion parameters with certain prefix ------------------------------------------------------------------- Sun Mar 23 01:43:25 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev139.g1e84251: * Use oslo db.sqlalchemy.session.EngineFacade.from_config ------------------------------------------------------------------- Sat Mar 22 01:40:02 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev137.ga3c7553: * Add support for parallel testr workers in Keystone * is_revoked check all viable subtrees * update sample conf * explicitly import gettext function * expires_at should be in a tuple not turned into one * Comparisons should account for instantaneous test execution * Make domain_id immutable by default * Do not expose internal data on UnexpectedError * Filter LDAP dumb member when listing role assignments ------------------------------------------------------------------- Fri Mar 21 01:06:17 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev121.gff88763: * Ability to turn off ldap referral chasing * Add user_id when calling populate_roles_for_groups * Store groups ids objects list in the OS-FEDERATION object * Uses explicit imports for _ * Rename scope_to_bad_project() to test_scope_to_bad_project() * Make LIVE Tests configurable with ENV ------------------------------------------------------------------- Wed Mar 19 01:07:39 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev109.gd4574a7: * Move test .conf files to keystone/tests/config_files * Removal of test .conf files ------------------------------------------------------------------- Tue Mar 18 10:29:59 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev105.gd906f57: * Filter out nonstring environment variables before rules mapping * Provide option to make domain_id immutable * Replace httplib.HTTPSConnection in ec2_token * Don't automatically enable revocation events * Ensure v3policysample correctly limits domain_admin access * Sync db, db.sqlalchemy from oslo-incubator 0a3436f * Do not use keystone.conf.sample in tests * Use class attribute to represent 'user' and 'group' * trust creation allowed with empty roles list ------------------------------------------------------------------- Mon Mar 17 10:06:26 UTC 2014 - rhafer@suse.com - switch over to non-openstack-prefix'ed users ------------------------------------------------------------------- Sat Mar 15 01:10:27 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev88.gcd3b6f6: * Update sample config * remove hardcoded SQL queries in tests * Fix db_version failed with wrong arguments ------------------------------------------------------------------- Fri Mar 14 00:56:28 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev82.g358674a: * Updated from global requirements * Remove unnecessary oauth1.Manager constructions * Enforce groups presence for federated authn * Very minor cleanup to default_fixtures * Cleanup keystoneclient tests * Cleanup fixture data added to test instances * Cleans up test data from limit tests * Cleanup of instance attrs in core tests * Cleanup backends after each test * Fix include only enabled endpoints in catalog * Add unit tests for disabled endpoints in catalog * Add OS-OAUTH1 to consumers links section ------------------------------------------------------------------- Thu Mar 13 01:26:13 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev58.gcb742d0: * Fixup region description uniqueness ------------------------------------------------------------------- Wed Mar 12 06:20:00 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev56.gbde896b: * Add missing documentation for enabling oauth1 auth plugin * Add missing documentation for enabling federation auth plugin * Configurable temporary directory for tests * Call an existing method in sync cache for revoke events * Remove unnecessary calls to self.config() * Import order is fixed ------------------------------------------------------------------- Tue Mar 11 00:38:46 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev45.gfb8209e: * Use config fixture ------------------------------------------------------------------- Mon Mar 10 15:28:08 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev43.g58bb5e9: * Fix docstrings in federation related modules * Sync db, db.sqlalchemy, gettextutils from oslo-incubator 6ba44fd * V3 xml responses should use v3 namespace 2014.1.b3 * Update ADMIN_TOKEN description in docs * Remove unused function from tests * Don't need session.flush in context managed by session * Remove vim headers * Removes use of timeutils.set_time_override * Removes a redundant test * revocation_list only call isotime on datetime objects * Handle exception messages with six.text_type * Fix webob.exc.HTTPForbidden parameter miss ------------------------------------------------------------------- Fri Mar 7 15:33:31 UTC 2014 - speilicke@suse.com - Use sphinx-build rathern than pbr-infested setup.py build_sphinx ------------------------------------------------------------------- Fri Mar 7 09:46:07 UTC 2014 - speilicke@suse.com - Fix requirements ------------------------------------------------------------------- Thu Mar 6 16:20:19 UTC 2014 - speilicke@suse.com - Update to version keystone-2014.1.dev515.g8c168bc: * v3 endpoint create should require url - Fixed requirements ------------------------------------------------------------------- Thu Mar 6 15:15:29 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev513.g7913636: * Mark revoke as experimental * Imported Translations from Transifex * allow create credential with the system admin token * Always include 'enabled' field in endpoint response * Add the last of the outstanding helpstrings to config * Update curl api example to specify tenant * Update Oslo wiki link in README * Lazy gettextutils behavior * Update Oslo wiki link in README ------------------------------------------------------------------- Thu Mar 6 00:55:42 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev495.g388155c: * Stop gating on up-to-date sample config file * Token Revocation Extension ------------------------------------------------------------------- Wed Mar 5 01:00:29 UTC 2014 - bwiedemann@suse.com - Update to version keystone-2014.1.dev492.g4bec42e: * drop key distribution from icehouse * Limited use trusts * Remove common.sql.migration ------------------------------------------------------------------- Tue Mar 4 01:31:19 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev487.ge9c5a00: * Properly configure OS-EP-FILTER test backend * Add tests for endpoint enabled * Remove the un-used and non-maintained PAM identity backend * SQLAlchemy Change to support more strict dialect checking * Update oslo-incubator log.py to a01f79c ------------------------------------------------------------------- Mon Mar 3 11:55:21 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev477.gfb19984: * deprecate XML support in favor of JSON * Remove unused variable * Replace assertEqual(None, *) with assertIsNone in tests * Fix assertEqual arguments order(_ldap_tls_livetest, backend_kvs, etc) ------------------------------------------------------------------- Mon Mar 3 01:34:40 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev469.g0908a0b: * Remove paste_deploy from test_overrides.conf * Remove "test-only" pam config options * Imported Translations from Transifex * Fix assertEqual arguments order(backend_ldap, cache, v3_protection) * add policy entries for /v3/regions ------------------------------------------------------------------- Sun Mar 2 00:46:13 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev460.g42e2375: * Fix get project users when no user exists * Implement V3 Specific Version of EC2 Contrib * Support authentication via SAML 2.0 assertions * oauth1 extension migration fails with DB2 ------------------------------------------------------------------- Sat Mar 1 01:13:18 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev453.g716c52c: * Fix table name typo in test_sql_upgrade * Cleanup and add more config help strings * Ensure v2 API only returns projects in the default domain * Fix the order of assertEqual arguments(v3_auth, v3_identity) ------------------------------------------------------------------- Thu Feb 27 01:31:04 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev445.g9663fa8: * Support for mongo as dogpile cache backend * Fix issue with DB upgrade to assignment table * Remove duplicated cms file ------------------------------------------------------------------- Wed Feb 26 00:38:53 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev440.g8c8f776: * Unimplemented error on V3 get token * Updated from global requirements * Fix keystone-manage db_version * Remove redundant default value None for dict.get * Always hash passwords on their way into the DB * Refactor tests move assertValidErrorResponse ------------------------------------------------------------------- Tue Feb 25 01:33:08 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev428.gb5a26b3: * Move _BaseController to common/controllers.py * Remove oslo rpc * Uses the venv virtualenv for the pep8 command * Update man pages * Remove auth_token middleware doc ------------------------------------------------------------------- Mon Feb 24 01:10:29 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev418.g8bc0433: * Sync db.exception from Oslo * Add tests for create grant when no group * Add tests for create grant when no user * Add version routes to KDS * KDS fix documented exception * Remove unused method _get_domain_id_from_auth ------------------------------------------------------------------- Sun Feb 23 00:54:53 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev406.g72b794f: * Remove oslo notifier * Keystone doc has wrong keystone-manage command ------------------------------------------------------------------- Sat Feb 22 00:54:44 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev402.g932647d: * Correct a docstring in keystone.common.config * Enable pep8 test against auto-generated configuration * Update config options with helpstrings and generate sample * strengthen assertion for unscoped tokens * bad config user_enable_emulation in mask test * Fix test_provider_token_expiration_validation transient failure * Update oslo-incubator fixture to 81c478 * Mark strings for translation in ldap backends ------------------------------------------------------------------- Fri Feb 21 01:35:58 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev386.g472cc5e: * Fix assertEqual arguments order * Remove sql.Base * Add test for list project users when no user ------------------------------------------------------------------- Thu Feb 20 15:33:49 UTC 2014 - dmueller@suse.com - Update to version keystone-2014.1.dev381.g9fbb60d: * Convert Token Memcache backend to new KeyValueStore Impl * Implement mechanism to provide non-expiring keys in KVS * Rationalize the Assignment Grant Tables * Keystone team uses #openstack-keystone now * Adds model mixin for {to,from}_dict functionality * Adds Cloud Audit (CADF) Support for keystone authentication * Use class attribute to represent 'project' * Switch over to oslosphinx * Replace notifier with oslo.messaging * Clean StatsController unnecesary members * Use global to represent OS-TRUST:trust * Additional notifications for revocations * Use Oslo.db migration * `find_migrate_repo` improvement * Variable 'domain_ref' referenced before assignment * Cleanup Dogpile KVS Memcache backend support * Restructure KDS options to be more like Keystone's options * Setup code for auto-config sample generation * Correct `find_migrate_repo` usage * Make live LDAP user DN match the default from devstack * Set sensible default for keystone's paste * Treat sphinx warnings as errors * Use WebOb directly in ec2_token middleware * Add lockfile and kombu as requirements for keystone * Move filter_limit_query out of sql.Base * List trusts, incorrect self link * LDAP: document enabled_emulation * Provide clearer error when deleting enabled domain * Cleanup oauth tests * Correctly normalize consumer fields on update ------------------------------------------------------------------- Fri Feb 14 15:27:21 UTC 2014 - dmueller@suse.com - added patches: * 0001-Set-sensible-default-for-keystone-s-paste.patch ------------------------------------------------------------------- Fri Feb 14 09:26:01 UTC 2014 - dmueller@suse.com - revert last change - fix keystone-manage.log permissions ------------------------------------------------------------------- Fri Feb 14 08:10:20 UTC 2014 - speilicke@suse.com - Use oauthlib on openSUSE and keep oauth2 for SLE ------------------------------------------------------------------- Fri Feb 14 07:44:06 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev310.ge8f8c17: * Remove s3_token functional tests * Remove copyright from empty files * Syncing policy engine from oslo-incubator * Rename Openstack to OpenStack * Refactor get role for trust * Adds a fixture for setting up the cache * Fixes bug in exception message generation * reverse my preferred mailmap * Notifications upon disable * Move identity logic from controller to manager * Changing testcase name to match our terminology * explicitly expect hints in the @truncated signature * list limit doc cleanup * Correct error class in find_migrate_repo * Enforce current certificate retrieval behaviour * Use WebOb directly for locale testing * Doc - Keystone configuration - moving RBAC section * Do not use auth_info objects for accessing the API * Update kvs assignment backend docs * Remove vim header * Document priority level on Keystone notifications * Uses six.iteritems for Python3 compat * Use message when creating Unauthorized exception * Use passed filter dict param in core sql filtering * Tests use setUp rather than init * Tests remove useless config list cleanup code * Reference dogpile.cache.memcached backend properly * Safe command handling for openssl ------------------------------------------------------------------- Thu Feb 13 13:37:30 UTC 2014 - dmueller@suse.com - remove log_file option setting - added patches: * 0001-Switch-over-to-oslosphinx.patch ------------------------------------------------------------------- Thu Feb 13 01:25:34 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev255.g586a3ff: * Allow specifying region ID when creating region * Cleanup KDS doc build errors * Add in functionality to set key_mangler on dogpile backends * Fix indentation issue * Cleanup invalid token exception text * Fixes a misspelling * Doc - Detailing objects' attributes available for policy.json * Remove unused method _get_domain_conf * Remove unused method _store_protocol * Remove tox locale overrides * Remove unused methods from AuthInfo * Remove unused method _create_metadata * revise example extension directory structure * Update db.sqlalchemy.session from oslo-incubator 018138 * Do not call deprecated functions * Fixes a Python3 syntax error using raise * Uses six.text_type instead of unicode * Removes xrange for Python3 compat * Cleanup sample config * Remove unused variable assignment * Remove legacy diablo and essex test cruft * Enhancing tests to check project deletion in Active Directory * Change assertTrue(isinstance()) by optimal assert * sync oslo-incubator log.py * turn off eventlet.wsgi debug ------------------------------------------------------------------- Wed Feb 12 00:55:24 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev205.gfcc1547: * Adds rule processing for mapping * Limit calls to memcache backend as user token index increases in size * Implement list limiting support in driver backends * Update the default_log_levels defaults * Correct sample config default log levels ------------------------------------------------------------------- Tue Feb 11 14:46:00 UTC 2014 - cloud-devel@suse.de - Update to version keystone-2014.1.dev195.g6ed19c2: * Style the code examples in docs as python * Deprecate s3_token middleware * Update requirements to 661e6 * Fix misspellings in keystone * Removes use of fake_notify and fixes notify test * Remove host from per notification options * Remove default_notification_level from conf * Mock sys.exit in testing * Move v3_to_v2_user from manager to controller * Adds tcp_keepalive and tcp_keepidle config options * clean up keystone-manage man page * Fix indentation errors found by Pep8 1.4.6+ * Fix assignment to not require user or group existence * cleaned up extension development docs * Tests initialize database * Improve forbidden checks * rename templated.TemplatedCatalog to templated.Catalog ------------------------------------------------------------------- Wed Feb 9 15:41:47 UTC 2014 - speilicke@suse.com - Update to version keystone-2014.1.dev161.g211bfc3: * Ensure mapping rule has only local and remote properties * fix grammar error in keystone-manage.rst * Add rules to be a required field for mapping schema * Cleanup docstrings * Removes useless string * Removes duplicate key from test fixtures * Add tests to ensure additional remote properties are not validated * Change 'oauth_extension' to 'oauth1_extension' * Modified keystone endpoint-create default region * Load the federation manager * Sync oslo's policy module * Replace urllib/urlparse with six.moves.* * Change Continuous Integration Project link * Refactor Auth plugin configuration options * Use self.opt_in_group overrides * Federation IdentityProvider filter fields on update response * Remove unnecessary test methods * Refactor federation controller class hierarchy * Refactor mutable parameter handling * Make error strings translatable * Add required properties field to rules schema * deprecate access log middleware * remove access log middleware from the default paste pipeline * deprecate v2.0 API in multiple choice response * Add a docstring and rename mapping tests * Remove versionId, versionInfo, versionList from examples * Don't set default for a nullable column * Remove autoincrement from String column - Replace git_tarballs source service with download_files and set_version + Use upstream URL as source (enables verification) ------------------------------------------------------------------- Thu Feb 6 14:46:17 UTC 2014 - dmueller@suse.com - fix typo in logrotate ------------------------------------------------------------------- Sun Feb 2 01:30:57 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev134.ge2f8277: + Make error strings translatable + Sync oslo's policy module ------------------------------------------------------------------- Sat Feb 1 01:37:14 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev130.g14a159b: + Use self.opt_in_group overrides + remove access log middleware from the default paste pipeline + Refactor Auth plugin configuration options + Refactor mutable parameter handling + Refactor federation controller class hierarchy + Remove unnecessary test methods + Federation IdentityProvider filter fields on update response + deprecate access log middleware ------------------------------------------------------------------- Fri Jan 31 08:14:28 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev115.g70b2f2a: + Make boolean query filter "False" argument work + deprecate stats middleware + Policy sample - Identity v3 resources management + Drop unsused "extras" dependency + Introduce database functionality into KDS + Add required properties field to rules schema + Add a docstring and rename mapping tests ------------------------------------------------------------------- Thu Jan 30 17:10:12 UTC 2014 - speilicke@suse.com - Set common name of example certs to FQDN to make then slightly more useful ------------------------------------------------------------------- Thu Jan 30 01:38:01 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev101.g4fc6e97: + Fix list_projects_for_endpoint failed bug + Fix federation documentation reference + Fix docstrings in federation controller. + Remove autoincrement from String column. + Don't set default for a nullable column ------------------------------------------------------------------- Wed Jan 29 15:51:59 UTC 2014 - dmueller@suse.com - move cronjob to hourly ------------------------------------------------------------------- Mon Jan 27 12:53:25 UTC 2014 - dmueller@suse.com - fix dependency ------------------------------------------------------------------- Mon Jan 27 10:15:45 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev91.g51602dc: + correct the document links in man documents + Fix test_auth isolation ------------------------------------------------------------------- Mon Jan 27 01:25:11 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev87.g28f43f8: + Use six.text_type to replace unicode + Remove sql.Base.get_session + Move sql.Base.transaction + Don't mask the filter built-in + description is wrong in endpoint filter rst doc + append extension name to trust notifications + Adds support for username to match the v2 spec + build auth context from middleware + Clean up docstrings in contrib.oauth1.core ------------------------------------------------------------------- Sun Jan 26 00:59:23 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev70.g455219d: + Fix reading cache-time before configured + Don't configure on import + Fix typos in documents and comments + Cleanup eventlet setup + use assertEqual instead of assertIs for string comparison + Use six to make dict work in Python 2 and Python 3 + Implement filter support in driver backends + renamed extensions development doc + Allow event callback registration for arbitrary resource types + Unify StringIO usage with six.StringIO ------------------------------------------------------------------- Sat Jan 25 01:16:52 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev50.gdaa44b8: + Sync several modules from oslo-incubator + Sync with global requirements + remove unused LOG + Use six.string_types instead of basestring + derive custom exceptions directly from Exception + Don't duplicate the existing config file list + initialize environment for tests that call popen + Remove unused variables from common.config ------------------------------------------------------------------- Fri Jan 24 13:34:19 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev34.g627141f: + Document running with pdb + Fix sample config external default doc + Subclasses of TestCase don't need to reset conf + Cleanup test_no_admin_token_auth cleanup code + Refactor context trust_id check to wsgi.Application base class + Store trust_id for v3/credentials ec2 keypairs + Store ec2 credentials blob as json + v3 credentials, ensure blob response is json + Enable lazy translation + Move KDS paths file + Update comments in test_v3_protection.py + Identity Providers CRUD operations + Add mapping function to keystone + Switch from 400 to 403 on ImmutableAttributeError + Simple Certificate Extension + Fixup incorrect comment + Remove kwargs from trust_api.create_trust + Implement notifications for trusts + Merge db.sqlalchemy from oslo-incubator af5f710 + Sync oslo strutils.py + Enhance tests for non-default default_domain_id + Remove unused member from KVS assignment + KVS support domain as namespace for users + Enhance auth tests for non-default default_domain_id + Fix using non-default default_domain_id -------------------------------------------------------------------- Thu Jan 23 18:00:28 UTC 2014 - dmueller@suse.com - install cron job to flush expired tokens, otherwise keystone slows down after a while ------------------------------------------------------------------ Wed Jan 22 00:50:17 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev190.gb7b8134: + Removes deprecation warning from run_tests.sh + Removes option to delete test DB from run_tests.sh + Adds run_tests.sh cli option to stop on failure + LDAP Assignment does not support grant v3 API + Remove unused variables ------------------------------------------------------------------- Tue Jan 21 08:44:31 UTC 2014 - dmueller@suse.com - fix requires ------------------------------------------------------------------- Mon Jan 20 10:32:41 UTC 2014 - speilicke@suse.com - Sync requirements: + Replace oauth2 with oauthlib + Use discover only on SLE ------------------------------------------------------------------- Sun Jan 19 00:38:39 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev180.g5b1fa19: + Reduces memory utilization during test runs + Do not append to messages with + + Sync gettextutils from oslo-incubator 997ab277 + Replacing python-oauth2 by oauthlib + Implementation of internal notification callbacks within Keystone + Restructure developing.rst ------------------------------------------------------------------- Sat Jan 18 01:11:41 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev168.g012618c: + Implements regions resource in 3.2 Catalog API ------------------------------------------------------------------- Fri Jan 17 01:40:17 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev166.ge54a6a3: + Documentation cleanup + reduce default token duration to one hour ------------------------------------------------------------------- Thu Jan 16 11:42:49 UTC 2014 - dmueller@suse.com - fix requires ------------------------------------------------------------------- Tue Jan 14 01:11:35 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev162.g9837137: + Flush tokens in batches with DB2 + Convert Token KVS backend to new KeyValueStore Impl ------------------------------------------------------------------- Mon Jan 13 00:58:51 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev159.g5a1a371: + Remove unnecessary line in test_auth + Make common log import consistent + Cleanup test_associate_project_endpoint_extension + Synchronized with oslo db and db.sqlalchemy + Sync oslo-incubator rpc module + Don't need session.flush in context managed by session ------------------------------------------------------------------- Sun Jan 12 01:09:35 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev147.g4759276: + races cause 404 when removing user from project + Remove unused test function + Remove netifaces requirement + Change ListOpt default value from str or None to list + Tests use cleanUp rather than tearDown + Resolve oauth dependency after paste pipeline is loaded + Fix external auth (REMOTE_USER) plugin support ------------------------------------------------------------------- Sat Jan 11 01:27:04 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev133.g89a99de: + Clean up fakeldap logging + Remove noop code ------------------------------------------------------------------- Fri Jan 10 14:35:38 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev129.g53d5f77: + Remove unused code in contrib/ec2/controllers.py + Remove unused imports + Fix typo in test + Introduce basic Pecan/WSME framework for KDS + Cleanup from business logic refactor ------------------------------------------------------------------- Thu Jan 9 08:23:53 UTC 2014 - speilicke@suse.com - Move to DB-based endpoint catalog. Avoids running out of sync with upstream changes in the default_catalog.template.sample file and allows to manipulate via 'keystone' CLI tool. ------------------------------------------------------------------- Thu Jan 9 01:42:55 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev119.gd7eb925: + initialize eventlet for tests + Enhance list_group_users in GroupApi. + Cleanup of new credential_api delete methods + Do not update password when updating grants in Assignment KVS + Move deletion business logic out of controllers + Break dependency of base V3Controller on V2Controller + Remove 'disable user' logic from _delete_domain_contents ------------------------------------------------------------------- Wed Jan 8 00:49:52 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev105.gf33ec9e: + Updated Keystone development install instructions for Ubuntu + Remove unused token.valid index ------------------------------------------------------------------- Tue Jan 7 11:07:50 UTC 2014 - dmueller@suse.com - fix requires ------------------------------------------------------------------- Tue Jan 7 01:08:21 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev101.g11bb081: + Fixes the v2 GET /extensions curl example in the documentation. ------------------------------------------------------------------- Sat Jan 4 01:30:12 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev99.g8d1072f: + Fix IPv6 check ------------------------------------------------------------------- Thu Jan 2 18:21:25 UTC 2014 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev97.gce5fcb1: + Imported Translations from Transifex + Fix variable passed to driver module + Fix use the fact that empty sequences are false. + Reduced parameters not used in _populate_user() ------------------------------------------------------------------- Tue Dec 24 01:03:20 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev90.ga22520b: + Moves keystoneclient master tests in a new class + Stops file descriptor leaking in tests + Updated from global requirements ------------------------------------------------------------------- Mon Dec 23 15:34:14 UTC 2013 - dmueller@suse.com - remove sqlalchemy-08x.diff: we switched back to sqlalchemy 0.7.x ------------------------------------------------------------------- Sat Dec 21 01:01:06 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev84.gde73544: + Remove Identity and Assignment controller interdependancies + Move Assignment Controllers and Routers to be First Class + Re-write comment for ADMIN_TOKEN + Makes the test git checkout info more declaritive ------------------------------------------------------------------- Fri Dec 20 00:44:48 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev76.g5fe6602: + replace "global" roles var names with "all" roles + Use oslo.db sessions + Switch to oslo-incubator mask_password + Replace xrange in for loop with range + Move endpoint_filter extension documentation ------------------------------------------------------------------- Thu Dec 19 00:55:18 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev66.g0d83e3a: + Cleanup duplication in test_backend + Remove roles from OS-TRUST list responses ------------------------------------------------------------------- Wed Dec 18 00:58:49 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev62.g1a96f96: + Uses oslo's deprecated decorator; removes ours + Policy based domain isolation can't be defined. + trustee unable to perform role based operations on trust ------------------------------------------------------------------- Mon Dec 16 00:52:05 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev56.g576f5d9: + Refactor setup_logging + Cleanup backend loading + Fix typo in identity:list_role_assignments policy ------------------------------------------------------------------- Sun Dec 15 01:33:26 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev50.g61a2ad3: + Fixes documentation building + Create user returns 400 without a password + Remove deprecated code ------------------------------------------------------------------- Sat Dec 14 00:40:31 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev44.gf6aa723: + Fix issues handling trust tokens via ec2tokens API (bnc#855338, CVE-2013-6391) + UUID vs PKI docs + Base Implementation of KVS Dogpile Refactor + Add ABCMeta metaclass to token provider + Add assertSetEqual to base test class ------------------------------------------------------------------- Fri Dec 13 01:01:42 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev34.g35242b0: + Sync db.sqlalchemy from oslo-incubator ------------------------------------------------------------------- Thu Dec 12 01:26:10 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev32.g52cb8fe: + Fix errors for create_endpoint api in version2 + Debug env for tox ------------------------------------------------------------------- Wed Dec 11 01:33:20 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev29.g6c7f00d: + Sync versionutils from oslo + token provider cleanup + Sync global requirements to pin sphinx to sphinx>=1.1.2,<1.2 ------------------------------------------------------------------- Tue Dec 10 01:07:53 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev25.g926755a: + refactor test_catalog + Formalize deprecation of token_api.list_tokens ------------------------------------------------------------------- Mon Dec 9 00:52:40 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev21.gc354a38: + Narrow columns used in list_revoked_tokens sql ------------------------------------------------------------------- Sun Dec 8 00:39:15 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev19.g45b8f13: + Add index to cover revoked token list + Allow caching to be disabled and tests still pass + Sync rpc fix from oslo-incubator ------------------------------------------------------------------- Fri Dec 6 10:58:38 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev13.g5acd26b: + Add pycrypto as a test-requirement + Revert "Return a descriptive error message for controllers" + Adds a resource for changing a user's password + Deprecates V2 controllers + don't rebind stdlib's os.chdir function + Dependency cleanup + Updated from global requirements + Enhance tests for assignment create_grant when no user or group + Fix KVS create_grant to not raise NotFound if no user/group + Utilites for manipulating base64 & PEM + Updates .gitignore + One transaction per call to sql assignment backend + Fix typo in keystone + Try decoding string to UTF-8 on error message fail + Sync From OSLO + Refactor assertEqualXML into a testtools matcher + Added documentation to keystone.common.dependency. + Ensure the sample policy file won't diverge + Don't run non-tests + Easy testing with alternate keystoneclient ------------------------------------------------------------------- Sun Dec 1 00:54:50 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev199.gf72f369: + Return a descriptive error message for controllers ------------------------------------------------------------------- Sat Nov 30 01:05:55 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev197.g789cade: + Imported Translations from Transifex ------------------------------------------------------------------- Fri Nov 29 10:45:13 UTC 2013 - dmueller@suse.com - fix test package requires ------------------------------------------------------------------- Fri Nov 29 00:35:01 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev195.g7172737: + PasteConfigNotFound also raised when keystone.conf not found + Sync the DB2 communication error code change from olso + Style improvements to logging format strings + RST fix for os_inherit example + Make HACKING.rst DRYer + Allow downgrade for extensions ------------------------------------------------------------------- Thu Nov 28 00:59:29 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev183.gdbdb94c: + Import strutils from oslo + Skip test_create_update_delete_unicode_project in _ldap_livetest + Add documentation for Read Only LDAP configuration option. + Remove deprecated auth_token middleware + Sync log_handler module from Oslo + Skip test_arbitrary_attributes_* in _ldap_livetest ------------------------------------------------------------------- Wed Nov 27 14:36:07 UTC 2013 - dmueller@suse.com - add sqlalchemy-08x.diff ------------------------------------------------------------------- Wed Nov 27 01:29:08 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev171.g886befa: + Capture debug logging in tests ------------------------------------------------------------------- Mon Nov 25 11:03:38 UTC 2013 - dmueller@suse.com - fix requires ------------------------------------------------------------------- Sat Nov 23 01:14:28 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev170.g607b850: + Update mailmap for Joe Gordon + Add WWW-Authenticate header in 401 responses. + Detangle v3 RestfulTestCase setup + Fix issue deleting ec2-credentials as non-admin user + fix unparseable JSON + Remove obsolete redhat-eventlet.patch + Add memcache options to sample config + Rewrites the serveapp method into a fixture + Proxy Assignment from Identity Deprecated + Return an error when a non-existing tenant is added to a user + Allow use of rules Policy driver + Role NoneType object has no attribute setdefault ------------------------------------------------------------------- Sat Nov 16 01:01:17 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev146.g2ab2c62: + Sync log module from oslo ------------------------------------------------------------------- Fri Nov 15 18:07:52 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev144.ge5416c4: + Updated from global requirements + Issue unscoped token if user's default project is invalid + Do not name variables as builtins + Duplicate delete the user_project_metadata. + AuthInfo use dependency injection + UserAuthInfo use dependency injection ------------------------------------------------------------------- Thu Nov 14 11:55:01 UTC 2013 - speilicke@suse.com - Update to version 2014.1.dev132.g9307dee: + Moves common RestfulTestCase to it's own module. + Change deprecated CLI arguments + Change sample policy files to use policy language + test attribute update edge cases + use different bind addresses for admin and public + Fix newly discovered H302 + Add WSGI environment to context + Removes unused paste appserver instances from tests + trusts raise validation error if expires_at is invalid - Explicitly require OpenStack's fork of sqlalchemy-migrate for the %post scriptlet ------------------------------------------------------------------- Mon Nov 4 01:09:35 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev115.g6751c7d: + Clean up duplicate exceptions in docs for assignment.Driver ------------------------------------------------------------------- Fri Nov 1 01:11:55 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev113.g8de9861: + Enhance tests for delete_grant no user/group + Allow delete user or group at same time as role + Adds fixture package from oslo + proxy removed from identity and changed to assignment + Uses fixtures for mox and stubs + Remove unused DEFAULT_DOMAIN variable + Update my mailmap + Remove duplicated code on test_v3_auth ------------------------------------------------------------------- Thu Oct 31 01:29:40 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev97.geee9fd5: + Removes NoModule from the base testcase + Use abstract base class for token driver + Catch the socket exception and log it. + Use abstract base class for policy driver + Use abstract base class for oauth driver + Use abstract base class for endpoint_filter driver + Document tox instead of run_tests.sh + Documentation on how-to develop Keystone Extensions + Remove obsolete driver test module ------------------------------------------------------------------- Wed Oct 30 15:34:40 UTC 2013 - rhafer@suse.com - Add %{python_sitelib}/keystone/tests/tmp symlink to the -test subpackage allow the unittests to create/located their database ------------------------------------------------------------------- Tue Oct 29 01:54:33 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.dev79.g402060a: + Remove unused config option auth_admin_prefix + remove 8888 port in sample_data.sh + Fixes tox coverage command ------------------------------------------------------------------- Fri Oct 25 23:32:55 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a73.gf4a441c: + Adds tests for user extra attribute behavior ------------------------------------------------------------------- Fri Oct 25 00:18:19 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a71.g11f589d: + Move fakeldap to tests + Treats OS-KSADM:password as password in v2 APIs + Adds decorator to deprecate functions and methods + Adds identity v2 tests to show extra behavior ------------------------------------------------------------------- Thu Oct 24 10:04:02 UTC 2013 - dmueller@suse.com - fix post requires on python-Routes ------------------------------------------------------------------- Wed Oct 23 16:14:53 UTC 2013 - iartarisi@suse.com - Move default tests TMPDIR location to /var/lib/openstack-keystone-test/tmp ------------------------------------------------------------------- Wed Oct 23 14:39:51 UTC 2013 - dmueller@suse.com - switched to testr now, refresh requirements ------------------------------------------------------------------- Tue Oct 22 23:30:08 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a63.g4a100d4: + Enhance tests for deleting a role not assigned + Fix remove role assignment adds role using LDAP assignment + Add external.Base class to external plugins + Implementation of opt-out from catalog data during token validation. ------------------------------------------------------------------- Sun Oct 20 00:09:47 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a57.g2df1b7c: + Move CA key from certs directory to private directory ------------------------------------------------------------------- Fri Oct 18 08:10:43 UTC 2013 - speilicke@suse.com - Update to version 2014.1.a55.ga0e26c1: + Fixes error messaging + Add notifications for groups and roles + Changes to testr as the test runner - Drop 0001-Make-ROOTDIR-determination-more-robust.patch: Solved diffently upstream ------------------------------------------------------------------- Thu Oct 17 18:53:17 UTC 2013 - dmueller@suse.com - update requires ------------------------------------------------------------------- Thu Oct 17 15:45:13 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a49.g060ced4: + remove the nova dependency in the ec2_token middleware + Use abstract base class for auth handler ------------------------------------------------------------------- Wed Oct 16 23:28:47 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a45.g7ee88a0: + Add python-six to requirements + add IRC channel & wiki link to README + Use abstract base class for catalog driver + Adds more uniformity to identity update_user calls + Fixes broken doc references ------------------------------------------------------------------- Wed Oct 16 00:13:48 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a37.g20d6ffb: + Use abstract base class for assignment driver + Fix v2 token user ref with trust impersonation=True + Use abstract base class for credential driver ------------------------------------------------------------------- Mon Oct 14 23:36:08 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a31.gb426fa5: + Handle unicode at the caching layer more elegantly + Use abstract base class for identity driver + Remove unused member + set user_update policy to admin_required + Use abstract base class for trust driver ------------------------------------------------------------------- Mon Oct 14 12:24:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a22.g8ba9898: + Need to use _() to handle i18n string messages + Don't use default value in LimitingReader ------------------------------------------------------------------- Wed Oct 9 00:52:43 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2014.1.a18.gdf0a963: + Sync db.sqlalchemy + Fix mysql checkout handler AttributeError + Handle DB2 disconnect ------------------------------------------------------------------- Tue Oct 8 12:15:24 UTC 2013 - dmueller@suse.com - run db_sync before starting keystone server ------------------------------------------------------------------- Wed Oct 2 19:09:27 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.rc1: + Update tox config + Add tests dir to the coverage omit list + Imports oslo policy to fix test issues ------------------------------------------------------------------- Wed Oct 2 00:09:23 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a100.g1d91334: + Sync with global requirements + Enclose command args in with_venv.sh + Imported Translations from Transifex + Fixes errors logging in as a user with no password ------------------------------------------------------------------- Tue Oct 1 00:19:02 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a92.gec4680a: + sync oslo policy + Validate token calls return 404 on invalid tokens + Eliminate type error on search_s + Fix live LDAP tests + Sync gettextutils from oslo ------------------------------------------------------------------- Mon Sep 30 16:49:43 UTC 2013 - dmueller@suse.com - add missing endpoints to catalog ------------------------------------------------------------------- Sun Sep 29 00:56:54 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a82.ge979323: + Fix error when create user with LDAP backend + Protect oauth controller calls and update policy.json ------------------------------------------------------------------- Fri Sep 27 16:23:19 UTC 2013 - dmueller@suse.com - switch to crudini ------------------------------------------------------------------- Thu Sep 26 10:00:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a79.g2f75699: + upgrade to oslo.config 1.2 final + Modify oauth1 tests to use generated keystone token in a call + Optional dependency injection + oauth using optional dependencies + only run flake8 once (bug 1223023) + Update man pages + Fix updating attributes with ldap backend + Test for backend case sensitivity + Update man page version ------------------------------------------------------------------- Tue Sep 24 23:59:15 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a61.g3130076: + Check token_format for default token providers only. + Sync gettextutils from oslo + Ensure any relevant tokens are revoked when a role is deleted + Add user to project if project ID is changed ------------------------------------------------------------------- Mon Sep 23 23:36:37 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a54.g66d7c2c: + Cleanup of tenantId, tenant_id, and default_project_id + Remove ldap identity domain attribute options ------------------------------------------------------------------- Sat Sep 21 00:15:46 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a50.gbdac547: + Rewrite README.rst + Ensure v2 tokens are correctly invalidated when using BelongsTo + Monkey patch select in environment + check for domain existence before doing any ID work + Add extra test coverage for unscoped token invalidation ------------------------------------------------------------------- Wed Sep 18 23:36:42 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a41.g5a5023b: + Include new notification options in sample config ------------------------------------------------------------------- Wed Sep 18 10:16:32 UTC 2013 - dmueller@suse.com - add 0001-Make-ROOTDIR-determination-more-robust.patch ------------------------------------------------------------------- Tue Sep 17 23:59:24 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a39.gd3460c3: + Rationalize list_user_projects and get_projects_for_user + Fix misused assertTrue in unit tests ------------------------------------------------------------------- Tue Sep 17 00:05:45 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a36.g54b8ec5: + Ignore H803 from Hacking. + fix rst syntax in database schema migrations docs ------------------------------------------------------------------- Sun Sep 15 00:05:37 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a32.gd7eff43: + Move gettextutils installation in tests to core ------------------------------------------------------------------- Fri Sep 13 23:55:11 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a30.g3651879: + Test upgrade migration 16->17 + gate on H304: no relative imports ------------------------------------------------------------------- Thu Sep 12 23:35:16 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a26.g607b115: + test token revocation list API (bug 1202952) + Remove CA key password from cert setup + Cleanup tests imports so not relative + Fixes for user response with LDAP user_enabled_mask ------------------------------------------------------------------- Wed Sep 11 23:58:00 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a18.g1b97529: + Reduce churn of cache on revocation_list + Imported Translations from Transifex ------------------------------------------------------------------- Wed Sep 11 00:15:03 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a15.g33c8025: + Import core.* in keystone.tests + Tests use "from keystone import tests" ------------------------------------------------------------------- Tue Sep 10 00:12:35 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a12.g8dc7ed2: + Close each LDAP connection after it is used, + domain-specific drivers experimental in havana + Fix incorrect test for list_users ------------------------------------------------------------------- Mon Sep 9 12:22:00 UTC 2013 - dmueller@suse.com - update openstack-keystone.init: Set HOME dir correctly for openssl random state preservation ------------------------------------------------------------------- Sat Sep 7 07:46:43 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a7.gdac281a: + Changed header from LLC to Foundation based on trademark policies ------------------------------------------------------------------- Fri Sep 6 00:02:39 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a490.g8d2f53c: + Move _generate_paste_config to tests.core + OAuth authorizing user should propose roles to delegate + Imported Translations from Transifex + Support timezone in memcached token backend + Changes template header for translation catalogs ------------------------------------------------------------------- Thu Sep 5 15:07:05 UTC 2013 - speilicke@suse.com - Fix RUNDIR in init-script ------------------------------------------------------------------- Thu Sep 5 00:21:16 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a481.gd286187: + Modify default file/directory permissions + Utilities to create directores, set ownership & permissions + Update keystone-all man page + Add a oauth1-configuration.rst and extension section to docs + Update keystone wsgi httpd script for oslo logging + Fix the code miss to show the correct error messages ------------------------------------------------------------------- Tue Sep 3 23:39:02 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a469.g36b5df5: + Cleanup cache layer tests + Implement basic caching around assignment CRUD + add 'project' notifications to docs ------------------------------------------------------------------- Mon Sep 2 08:21:36 UTC 2013 - dmueller@suse.com - Update to version 2013.2.a464.g372a062: + Fixes a link in the documentation + Create associations between projects and endpoints + Keystone Caching Layer for Manager Calls + Add defense in ldap:get_roles_for_user_and_project + filter in ldap list_groups_for_user + Implement API protection on target entities + Fix error where consumer is not deleted from sql + Implement Caching for Token Revocation List + Refactor Token Provider to be aware of expired tokens. + Add notifications module + Remove enumerate calls + Drop support for diablo to essex migrations + Use correct filename for index & serial file when setting permissions + Removes KVS references from the documentation + Implement decorator-based notifications for users + Add Memory Isolating Cache Proxy + Add project CRUD to assignment_api Manager + Enable SQL tests for oauth + Add 'cn' to attribute_list for enabled_users/tenants query + Fix role lookup for Active Directory + Bump hacking to 0.7 + Remove kvs backend from oauth1 extension + Add common code from Oslo for work with database + Use common db model class from Oslo + Imported Translations from Transifex + Implement caching for Tokens and Token Validation + Document usage notifications + Use joins instead of multiple lookups in groups sql + Use testtools as base test class. ------------------------------------------------------------------- Mon Aug 26 23:56:06 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a410.g7eed453: + Remove a useless arg in range() + Fix translate static messages in response + Use system locale when Accept-Language header is not provided ------------------------------------------------------------------- Mon Aug 26 08:56:18 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a404.g15a3bde: + Clean up keystone-manage man page ------------------------------------------------------------------- Sun Aug 25 23:59:23 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a402.g361185c: + remove flake8 option from run_tests.sh ------------------------------------------------------------------- Sun Aug 25 00:00:44 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a401.gda26317: + Delete file TODO + change oauth.consumer description into nullable ------------------------------------------------------------------- Sat Aug 24 00:06:10 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a397.g4dbda64: + Ensure username passed by REMOTE_USER can contain '@' + fix the default values for token and password auth + Migrating ec2 credentials to credential. + remove unused function + add foreign key constraint on oauth tables ------------------------------------------------------------------- Fri Aug 23 00:01:08 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a388.gfebab09: + use provider to validate tokens ------------------------------------------------------------------- Thu Aug 22 00:00:59 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a386.gb6f6b57: + Remove User Check from Assignments + Remove an enumerate call + Assignment to reserved built-in symbol: filter + Fix isEnabledFor for compatibility with logging ------------------------------------------------------------------- Wed Aug 21 00:08:51 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a378.g7bc167d: + Refactor Token Providers for better version interfaces + Remove kwargs from manager calls / general cleanup + remove refs to keystone.common.logging + Store hash of access as primary key for ec2 type. + Add test test_deleting_project_delete_grants + Ignore flake issues in build/ directory + Move some logic from update() to BaseLdap + Move affirm_unique() in create() to BaseLdap + Assignment to reserved built-in symbol: dir + Remove Keystone specific logging module ------------------------------------------------------------------- Mon Aug 19 09:37:28 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a358.g9c92d27: + Add support for API message localization ------------------------------------------------------------------- Sat Aug 17 23:59:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a356.g14cba15: + Add delegated_auth support for keystone ------------------------------------------------------------------- Fri Aug 16 23:58:17 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a354.g781c65b: + update usage in run_test.sh for flake8 + Increase length of username in DB + Remove unused import + Set wsgi startup log level to INFO + Add unit test to check non-string password support + Cleaned up a few old crufties from README + Clean hacking errors in advance of hacking update + Implement domain specific Identity backends + More validation in test_user_enable_attribute_mask + Fix LDAP Identity with non-zero user_enabled_default + Fix LDAP Identity get user with user_enabled_mask ------------------------------------------------------------------- Thu Aug 15 23:37:15 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a336.gb0b32d0: + Skip test_create_unicode_user_name in _ldap_livetest + Do not skip test_user_enable_attribute_mask in _ldap_livetest + Fix test_user_enable_attribute_mask so it actually tests + Revoke user tokens when disabling/delete a project + Refactor Keystone to use unified logging from Oslo + Cleaned up pluggable auth docs ------------------------------------------------------------------- Wed Aug 14 07:46:47 UTC 2013 - speilicke@suse.com - Update to version 2013.2.a327.g14e0901: + Drop extra credential indexes + Make pki_setup work with OpenSSL 0.9.x + Add memcache to httpd doc. + Move Babel dependency from test-req to req + Initial implementation of unified-logging + Sync notifier module from Oslo + Move 'tests' directory into 'keystone' package - No need to require shadow-utils anymore, even SLE_11_SP3 has pwdutils - Drop 0001-Make-pki_setup-work-with-OpenSSL-0.9.x.patch: Merged upstream - Fix spec file typo (dependency token) ------------------------------------------------------------------- Tue Aug 13 07:57:51 UTC 2013 - berendt@b1-systems.de - added missing requirement python-Babel - added missing requirement python-netaddr ------------------------------------------------------------------- Mon Aug 12 23:46:51 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a315.g708ccf0: + Sync models with migrations ------------------------------------------------------------------- Mon Aug 12 09:18:18 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a313.g4829de4: + Configurable max password length (bug 1175906) + Sync unified logging solution from Oslo + Abstract out attribute_mapping filling in LDAP driver. + Create default role on demand + Abstract out attribute_ignore assigning in LDAP driver + Run test_mask_password once ------------------------------------------------------------------- Thu Aug 8 23:42:15 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a303.ga4243e1: + Fix select n+1 issue in keystone catalog ------------------------------------------------------------------- Thu Aug 8 20:07:59 UTC 2013 - dmueller@suse.com - switch to python-setuptools - remove python-d2to1 ------------------------------------------------------------------- Wed Aug 7 23:59:53 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a301.gc547eb4: + extension migrations ------------------------------------------------------------------- Wed Aug 7 00:07:48 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a299.gdb9535c: + Handle json data when migrating role metadata. + Raise max header size to accommodate large tokens. + remove swift dependency of s3 middleware -------------------------------------------------------------------- Fri Aug 2 23:59:55 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a293.ged1f967: + Clear out the dependency registry between tests + Handle circular dependencies + Use dependency injection for assignment and identity + use 'exc_info=True' instead of import traceback + .gitignore eggs + add OS-TRUST to links + Sync DB models and migrations in keystone.assignment.backends.sql + Update references with new Mailing List location + V3 API need to check mandatory field when creating resources + Clean up use of token_provider manager in tests + Remove kwargs from manager calls where not needed. + Imported Translations from Transifex + Fix typo: Tenents -> Tenants + Use oslo.sphinx and remove local copy of doc theme -------------------------------------------------------------------- Thu Aug 1 23:38:01 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a265.g0368950: + Use keystone.wsgi.Request for RequestClass + Remove passwords from LDAP queries -------------------------------------------------------------------- Thu Aug 1 00:03:58 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a261.gf1ac78c: + Ec2 credentials table not created during testing + Load backends before deploy app in client tests -------------------------------------------------------------------- Wed Jul 31 00:04:20 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a257.g5958691: + sql.Driver:authenticate() signatures should match -------------------------------------------------------------------- Tue Jul 30 14:47:43 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a255.gc21b458: + default token format/provider handling -------------------------------------------------------------------- Mon Jul 29 23:50:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a253.g10fde8e: + Clear cached engine when global engine changes + Implement exception module i18n support -------------------------------------------------------------------- Fri Jul 26 23:52:02 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a249.g97a5b49: + Remove vestiges of Assignments from LDAP Identity Backend + Scipped tests don't render as ERROR's -------------------------------------------------------------------- Thu Jul 25 00:03:10 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a246.g0a40152: + Fixing broken credential schema in sqlite. -------------------------------------------------------------------- Tue Jul 23 23:55:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a245.gc6b7dd8: + Deprecate kvs token backend + Load app before loading legacy client in tests. + Use assignment_api rather than assignment -------------------------------------------------------------------- Mon Jul 22 00:22:50 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a240.g7fde605: + Regenerate example PKI after change of defaults + Return correct link for effective group roles in GET /role_assignments + Deprecation warning for [signing] token_format + Add [assignment].driver to sample config + Remove an enumerate call + Correct Spelling Mistake -------------------------------------------------------------------- Thu Jul 18 23:48:41 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a228.g53ed50d: + Support token_format for backward compatibility + python3: Introduce py33 to tox.ini -------------------------------------------------------------------- Wed Jul 17 23:49:24 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a225.gc42533f: + grammar fixes in error messages + update requires to prevent version cap -------------------------------------------------------------------- Wed Jul 17 10:13:43 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a221.g2667c77: + Change domain component value to org from com + wsgi.BaseApplication and wsgi.Router factories should use **kwargs + Python 3.x compatible use of print + Add unittest for keystone.identity.backends.sql Models + Don't use deprecated BaseException.message + Implements Pluggable V2 Token Provider + Implement role assignment inheritance (OS-INHERIT extension) + Pluggable Remote User + Fix XML rendering with empty auth payload. + Implemented token creation without catalog response. + Implement Token Binding. ------------------------------------------------------------------- Mon Jul 15 23:34:54 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a202.gdec66cd: + Implements Pluggable V3 Token Provider ------------------------------------------------------------------- Sun Jul 14 23:51:17 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a200.gdf63b9c: + Add version so that pre-release versioning works ------------------------------------------------------------------- Sat Jul 13 23:52:58 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.198.g95a27a8: + Register Extensions + Sync-up crypto from oslo-incubator ------------------------------------------------------------------- Fri Jul 12 23:53:00 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.194.g85a5022: + Add crypto dependency + Sync install_venv_common from oslo + Pass on arguments on Base.get_session + Imported Translations from Transifex + Mixed LDAP/SQL Backend. ------------------------------------------------------------------- Thu Jul 11 23:55:05 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.184.g41ca51c: + Remove a useless arg in range() + Rationalize how we get roles after authentication in the controllers + Do not create LDAP Domains sub tree + Remove context from get_token call in normalize_domain_id + Use InnoDB for MySQL + Move temporary test files into tests/tmp ------------------------------------------------------------------- Tue Jul 9 23:55:53 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.172.gfafdf07: + assignment backend ------------------------------------------------------------------- Tue Jul 9 16:44:01 UTC 2013 - dmueller@suse.com - add 0001-Make-pki_setup-work-with-OpenSSL-0.9.x.patch ------------------------------------------------------------------- Tue Jul 9 10:08:09 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.171.gb556d8a: + Work without admin_token_auth middleware + Move comments in front of dependencies ------------------------------------------------------------------- Mon Jul 8 23:56:23 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.167.g699b483: + Implement GET /role_assignment API call + DB2 migration support + Remove an enumerate call + Fix issue with v3 tokens and group membership roles + Imported Translations from Transifex + Add callbacks for set_global_engine ------------------------------------------------------------------- Sat Jul 6 23:52:19 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.155.g6450f75: + Update paths to pem files in keystone.conf.sample ------------------------------------------------------------------- Fri Jul 5 23:51:16 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.153.g5746f5b: + rename quantum to neutron in docs ------------------------------------------------------------------- Thu Jul 4 08:12:47 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.151.gbb6ebd4: + Fix up some trivial license mismatches ------------------------------------------------------------------- Wed Jul 3 23:57:13 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.149.g62d948a: + Use event.listen() instead of deprecated listeners kwarg ------------------------------------------------------------------- Wed Jul 3 14:01:15 UTC 2013 - naehring@b1-systems.de - adding keystone-paste.ini - the paste configuration has been moved to keystone-paste.ini ------------------------------------------------------------------- Wed Jul 3 08:48:01 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.147.g214df21: + Remove hard tabs and trailing whitespace + Install locales for httpd. ------------------------------------------------------------------- Tue Jul 2 23:58:33 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.143.gda9dc14: + `tox -ecover` failure. Missing entry in tox.ini ------------------------------------------------------------------- Mon Jul 1 23:44:39 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.141.g59ea706: + Add 'application' to keystone.py for WSGI -------------------------------------------------------------------- Fri Jun 28 23:43:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.140.g6362fb7: + Stop passing context to managers (bug 1194938) + check for constraint before dropping + Clean up keystone-all.rst + Manager instead of direct driver -------------------------------------------------------------------- Thu Jun 27 23:42:04 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.133.g6c6d15c: + Revert environment module usage in middleware. + Do not raise NEW exceptions -------------------------------------------------------------------- Wed Jun 26 23:41:10 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.129.g600c38b: + LDAP list group users not fail if user entry deleted -------------------------------------------------------------------- Tue Jun 25 23:41:03 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.128.g31863d1: + Remove explicit distribute depend. -------------------------------------------------------------------- Mon Jun 24 23:40:52 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.126.g95cf470: + Version response compatible with Folsom -------------------------------------------------------------------- Sun Jun 23 23:40:53 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.124.gf1cfbd7: + python WebOb dependency made unpinned. + Initialize logging from HTTPD. + wsgi.Middleware factory should use **kwargs + Consolidate admin_or_owner rule -------------------------------------------------------------------- Sat Jun 22 23:40:47 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.116.g97225ff: + Fix link typo in Sphinx doc + Base.get_engine honor allow_global_engine=False -------------------------------------------------------------------- Fri Jun 21 23:40:38 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.112.gb9e46fb: + Move identity ldap backend from directory to file -------------------------------------------------------------------- Thu Jun 20 23:40:44 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.111.g7ccfac7: + Removing LDAP API Shim -------------------------------------------------------------------- Thu Jun 20 00:02:42 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.110.g7cd0bb0: + Isolate eventlet code into environment. + Set default 'ou' name for LDAP projects to Projects -------------------------------------------------------------------- Tue Jun 18 23:42:35 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.106.ge0834da: + LDAP get_project_users should not return password + Remove how to contribute section in favor of CONTRIBUTING.rst + Imported Translations from Transifex + Http 400 when project enabled is not a boolean + Remove a stat warning log + Correct the resolving api logic in stat middleware + Move user fileds type check to identity.Manager + Adds tests for XML version response + Imported Translations from Transifex -------------------------------------------------------------------- Sun Jun 16 00:00:18 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.88.g3c687d1: + Using sql as default driver for tokens + Imported Translations from Transifex + Correct the default name attribute for role -------------------------------------------------------------------- Sat Jun 15 00:02:46 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.82.g543714b: + drop user and group constraints + Allow request headers access in app context. + Fix token purging for memcache for user token index. + Add checks to test if enabled is bool -------------------------------------------------------------------- Thu Jun 13 23:59:36 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.74.gc963383: + Force simple Bind for authentication + Correct LDAP configuration doc ------------------------------------------------------------------- Thu Jun 13 15:58:02 UTC 2013 - dmueller@suse.com - fix typo in post-install script -------------------------------------------------------------------- Wed Jun 12 09:33:49 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.72.g6111bc9: + Move coverage output dir for Jenkins. + Replace openstack-common with oslo in docs -------------------------------------------------------------------- Tue Jun 11 09:33:09 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.68.g5df7424: + Fix internal doc links (bug 1176211) + Remove bufferedhttp + add ca_key to sample configuration + Commit transaction in migration -------------------------------------------------------------------- Mon Jun 10 13:45:12 UTC 2013 - bmwiedemann@opensuse.org - BuildRequire python-sqlalchemy + migrate for post-build-checks - Update to version 2013.2.b1.60.gb1d4de7: + Add db_version command to keystone-manage + run_tests.sh should use flake8 (bug 1180609) + Require keystone-user/-group for pki_setup + Import eventlet patch from oslo. + Check schema when dropping constraints. + Missing contraction: Its -> It's (bug 1176213) + Raise key length defaults + fix error default policy for create_project + Ignore the .update-venv directory. ------------------------------------------------------------------- Mon Jun 10 13:06:46 UTC 2013 - dmueller@suse.com - remove hybrid keystone backend -------------------------------------------------------------------- Thu Jun 6 00:26:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.42.ge6d551d: + Ignore conflict on v2 auto role assignment (bug 1161963) + split authenticate call + remove_role_from_user_and_project affecting all users (bug 1170649) -------------------------------------------------------------------- Wed Jun 5 00:20:14 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.36.g0c9538d: + Maintain tokens after role assignments (bug 1170186) + typo in 'import pydev' statement -------------------------------------------------------------------- Fri May 31 23:38:54 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.33.gcd34971: + Convert openstack-common.conf to the nicer multiline format. + Rename requires files to standard names. + Test 403 error title + Disable eventlet monkey-patching of DNS + Revert "Set EVENTLET_NO_GREENDNS=yes in tox.ini." + Document size limits + Fixes a typo + Add index on valid column of the SQL token Backend + Add missing oslo module. + Fix incorrect role assignment in migration. + Live SQL migration tests ------------------------------------------------------------------- Fri May 31 09:14:26 UTC 2013 - dmueller@suse.com - avoid warning in post script -------------------------------------------------------------------- Thu May 30 23:39:05 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.b1.11.gfa2f963: + Move auth_token middleware from admin user to an RBAC policy + Improve the performance of tokens deletion for user + Add <version> arg to keystone-manage db_sync + Imported Translations from Transifex -------------------------------------------------------------------- Wed May 29 23:38:58 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.1.rc2.161.gd67e31b: + Add KEYSTONE_LOCALEDIR env variable + Add missing space to error msg + Fix the debug statement. ------------------------------------------------------------------- Wed May 29 11:18:45 UTC 2013 - dmueller@suse.com - remove setBadness call from rpmlintrc -------------------------------------------------------------------- Tue May 28 23:38:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.1.rc2.157.g2879d42: + Replace assertDictContainsSubset with stdlib ver + separate paste-deploy configuration from parameters + Add index on expires column of the SQL token Backend -------------------------------------------------------------------- Mon May 27 10:03:12 UTC 2013 - speilicke@suse.com - Update to version 2013.1.rc2.153.gaf4e969: + Implement Token Flush via keystone-manage. + Documentation about the initial configuration file and sample data. + Imported Translations from Transifex + Read-only default domain for LDAP (bug 1168726) + Add assertNotEmpty to tests and use it. + Fix 403 status response + Use webtest for v2 and v3 API testing. + Consolidate eventlet code + Imported Translations from Transifex + Satisfy flake8 import rules F401 and F403 + Migrate to pbr. + Remove unused variables (flake8 F841) + Enumerate ignored flake8 H* rules + Use TODO(NAME) (flake8 H101) + use the 'not in' operator (flake8 H902) + consistent i18n placeholders (flake8 H701, H702, H703) + eliminate 'except:' (flake8 H201) + one import per line (flake8 H301) + Remove unnecessary commented out code + import only modules (flake8 H302) + imports not in alphabetical order (flake8 H306) + Remove useless private method + Cleanup docstrings (flake8 H401, H402, H403, H404) - More build requirements for for %post section keystone-manage invocation: + python-WebOb + python-passlib + python-routes ------------------------------------------------------------------- Mon May 27 08:50:37 UTC 2013 - dmueller@suse.com - python-pbr/d2to1 requires ------------------------------------------------------------------- Tue May 21 13:54:20 UTC 2013 - iartarisi@suse.com - add missing requirement python-sqlalchemy-migrate -------------------------------------------------------------------- Mon May 20 23:58:12 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a118.g8d2b8e6: + get SQL refs from session (bp sql-query-get) ------------------------------------------------------------------- Sat May 18 13:05:42 UTC 2013 - dmueller@suse.com - update requires based on pip-requires -------------------------------------------------------------------- Sat May 18 00:00:13 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a117.g7b99bd6: + Test listing of tokens with a null tenant + Http 400 when user enabled is not a boolean + extracting credentials + Accept env variables to override default passwords -------------------------------------------------------------------- Wed May 15 23:35:41 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a109.g2e15fe4: + Fix pyflakes and pep8 in prep for flake8. + Migrate to flake8. -------------------------------------------------------------------- Wed May 15 08:54:30 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a105.gcb0ddab: + Enable unicode error message -------------------------------------------------------------------- Fri May 10 23:38:30 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a103.gefc30be: + Disable eventlet monkey-patching of DNS + Set EVENTLET_NO_GREENDNS=yes in tox.ini. + Revert "Disable eventlet monkey-patching of DNS" + Allow backend & client SQL tests on mysql and pg. -------------------------------------------------------------------- Thu May 9 23:38:24 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a99.g693a486: + Remove unused CONF.pam.url + Replace password to "***" in the debug message + Revoke tokens on user delete (bug 1166670) + A minor refactor in wsgi.py -------------------------------------------------------------------- Tue May 7 23:38:10 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a92.g96a816f: + LDAP list groups with missing member entry -------------------------------------------------------------------- Tue May 7 16:18:10 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a90.gb55620d: + Skip IPv6 tests for eventlet dns -------------------------------------------------------------------- Wed May 1 23:37:48 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a89.g22d96b2: + HACKING LDAP -------------------------------------------------------------------- Sat Apr 27 00:01:59 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a87.ga78bc2e: + Allow additional attribute mappings in ldap -------------------------------------------------------------------- Thu Apr 25 23:54:41 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a85.gd9dd876: + Mark LDAP password and admin_token secret ------------------------------------------------------------------- Thu Apr 25 14:24:35 UTC 2013 - dmueller@suse.com - require python-python-memcached 1.31 -------------------------------------------------------------------- Wed Apr 24 23:54:56 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a83.g7617fef: + Remove new constraint from migration downgrade. + Make migration tests postgres & mysql friendly. + Delete extra dict in token controller. -------------------------------------------------------------------- Tue Apr 23 21:58:35 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a77.geefc8e0: + Set empty element to "" + close db migration session + fix undefined variable + fix duplicate option error + Add rule for list_groups_for_user in policy.json + clean up invalid variable reference -------------------------------------------------------------------- Mon Apr 22 23:59:52 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a65.g92e40ce: + test duplicate name + don't migrate as often -------------------------------------------------------------------- Sun Apr 21 23:27:01 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a61.g166a03c: + Rename trust extension (bug 1158980) + use the roles in the token when recreating + keystone commands don't print any version information + keystone commands don't print any version information + Fix test coverage for v2 scoped auth xml response (bug 1160504) + Fix test coverage for v2 scoped auth xml response (bug 1160504) + Mark sql connection with secret flag + Share one engine for more than just sqlite in-memory + Sync with oslo-incubator. + Fix IBM copyright strings + Fix example in documentation. + stop using time.sleep in tests + use the openstack test runner + Fix 401 status response + Add TLS Support for LDAP + catch errors in wsgi.Middleware. + Fix for configuring non-default auth plugins properly + Generate HTTPS certificates with ssl_setup. + Use string for port in default endpoints (bug 1160573) + residual grants after delete action (bug1125637) + Use is_enabled() in folsom->grizzly upgrade (bug 1167421) + Add missing colon for documentation build steps. + Remove un-needed LimitingReader read() function. + Clean up duplicate methods + Fix token ids for memcached + Fixed unicode username user creation error + Fixed logging usage instead of LOG + Removed unused imports + Remove non-production middleware from sample pipelines + What is this for? + bug 1159888 broken links in rst doc + Sync with oslo-incubator copy of setup.py -------------------------------------------------------------------- Mon Mar 25 13:52:34 UTC 2013 - opensuse-cloud@opensuse.org - Update to version 2013.2.a338.gbceee56: + Fix XML handling of member links (bug 1156594) + Test default_project_id scoping (bug 1023502) + Ensure delete domain removes all owned entities + Utilize legacy_endpoint_id column (bug 1154918) + Pass project membership as dict in migration 015. + V2, V3 token intermix for unscoped tokens (bug 1156913) + Revise docs to use keystoneclient.middleware.auth_token + Fix live ldap tests + Support for LDAP groups (bug #1092187) + Correct spacing in warning msg + Validate domains unconditionally (bug 1130236) + Prohibit V3 V2 token intermix for resource in non-default domain (bug 1157430) + Properly handle emulated ldap enablement + Wrap config module and require manual setup (bug 1143998) + Enable emulation for domains + Allow trusts to be optional + Version bump to 2013.2 + Add a dereference option for ldap + Move trusts to extension + Make versions aware of enabled pipelines. + Imported Translations from Transifex + Rework S3Token middleware tests. + Rename trust extension. ------------------------------------------------------------------- Mon Mar 18 10:41:29 UTC 2013 - speilicke@suse.com - Drop +git.$TIMESTAMP.$COMMITHASH version suffix -------------------------------------------------------------------- Sun Mar 17 11:28:35 UTC 2013 - dmueller@suse.com - Update to version 2013.1.a301.g16b4643+git.1363519715.16b4643: + Explain LDAP page_size & default value + Catch and log server exceptions + Filter out legacy_endpoint_id (bug 1152635) + Ensure tokens are revoked for relevant v3 api calls + Switch to final 1.1.0 oslo.config release + Added test cases to improve LDAP project testing + Migrate roles from metadata to user_project_metadata + duplicated trust tests + quiet route logging on skipped tests + Remove TODO that didn't land in grizzly + No parent exception to wrap + Remove duplicate password/token opts. + Fixes bug 1151747: broken XML translation for resource collections + xml_body returns backtrace on XMLSyntaxError + extracting user and trust ids into normalized fields + Discard null endpoints (bug 1152632) - remove keystone-cs24277.diff: * merged upstream ------------------------------------------------------------------- Wed Mar 13 10:17:48 UTC 2013 - dmueller@suse.com - add keystone-cs24277.diff: * make keystone start again -------------------------------------------------------------------- Wed Mar 13 00:17:24 UTC 2013 - cloud-devel@suse.de - Update to version 2013.1.a271.g45228ca+git.1363133844.45228ca: + cleanup trusts in controllers + remove spurious roles check + add belongs_to check + Improve tests for api protection and filtering ------------------------------------------------------------------- Tue Mar 12 10:44:59 UTC 2013 - dmueller@suse.com - require python-oslo.config -------------------------------------------------------------------- Tue Mar 12 00:10:56 UTC 2013 - cloud-devel@suse.de - Update to version 2013.1.a263.g09e2fc7+git.1363047056.09e2fc7: + Make getting user-domain roles backend independant + Make Keystone return v3 as part of the version api + bug 1133526 + Run keystone server in debug mode. + Fix folsom -> grizzly role table migration issues (bug 1119789) + Revert "from tests import" + Revert "update tests/__init__.py to verify openssl version" -------------------------------------------------------------------- Mon Mar 11 09:59:43 UTC 2013 - cloud-devel@suse.de - Update to version 2013.1.a251.g59757f6+git.1362995983.59757f6: + Unpin pam dependency version + Sync timeutils with oslo + Remove obsolete *page[_marker] methods from LDAP backend. + bug 1134802: fix inconsistent format for expires_at and issued_at + Trusts + Expand v3 trust test coverage + keystone : Use Ec2Signer utility class from keystoneclient + remove unused import + Move auth plugins to 'keystone.auth.plugins' (bug 1136967) + ports should be ints in config (bug 1137696) + mark 2.0 API as stable + Straighten out NotFound raising in LDAP backend. + fix typo in kvs backend + Move get_by_name to LdapBase. + Remove unused methods from LDAP backed. + return 201 Created on POST request (bug1131119) + Delete tokens for user + unable to load certificate should abort request + add missing attributes for group/project tables (bug1126021) + v3 endpoints won't have legacy ID's (bug 1150930) + Change exception raised to Forbidden on trust_id + from tests import ------------------------------------------------------------------- Fri Mar 8 11:01:34 UTC 2013 - vuntz@suse.com - Fix ownership of /var/log/keystone/keystone.log after call to "keystone-manage pki_setup" in %post: if the package is installed for the first time, the log file is owned by root, which breaks keystone (since it can't write to the log file). ------------------------------------------------------------------- Thu Mar 7 16:10:27 UTC 2013 - bwiedemann@suse.com - fix logging.conf to be about keystone and have absolute path -------------------------------------------------------------------- Tue Mar 5 17:22:34 UTC 2013 - cloud-devel@suse.de - Update to version 2013.1.a210.g2515d1b+git.1362504154.2515d1b: + Ensure keystone unittests do not leave CONF.policyfile in bad state + Move handle_conflicts decorator into sql + flatten payload for policy + Convert api to controller + bug 1131840: fix auth and token data for XML translation + domain_id_attributes in config.py have wrong default value + command line switch for short pep8 output. + Setup logging in keystone-manage command. + Imported Translations from Transifex + Enable a parameters on ldap to allow paged_search of ldap queries This fixes bug 1083463 + update tests/__init__.py to verify openssl version ------------------------------------------------------------------- Mon Mar 4 13:38:13 UTC 2013 - iartarisi@suse.com - Move python-ldap requirement to python-keystone subpackage ------------------------------------------------------------------- Thu Feb 28 14:07:54 UTC 2013 - dmueller@suse.com - Fix last change ------------------------------------------------------------------- Mon Feb 25 13:27:40 UTC 2013 - saschpe@suse.de - Ghost /var/run/keystone ------------------------------------------------------------------- Mon Feb 25 10:07:11 UTC 2013 - saschpe@suse.de - Drop sysconfig from init scripts -------------------------------------------------------------------- Sun Feb 24 18:52:11 UTC 2013 - dmueller@suse.com - Update to version 2013.1.a191.g30dbb74+git.1361731931.30dbb74: + Remove test_auth_token_middleware + Silence routes internal debug logging + Workaround Migration issue with PostgreSQL + Add pysqlite as explicit test dep + project membership to role conversion + Remove usage of UserRoleAssociation.id in LDAP + Add an update option to run_tests.sh + make fakeldap._match_query work for an arbitrary number of groups + Update sample_data.sh to match docs + Use oslo-config-2013.1b3 + Remove old, outdated keystone devref docs + Implement name space for domains + Update the Keystone policy engine to the latest openstack common + Ensure user and tenant enabled in EC2 + merging in fix from oslo upstream + Disable XML entity parsing + make LDAP query scope configurable + enabled attribute emulation support + v3 token API + Pass query filter attributes to policy engine + Removed redundant assertion + Update oslo-config version. + domain-scoping + Fix id_to_dn for creating objects + Tests for domain-scoped tokens + Change the default LDAP mapping for description. + Correct SQL migration 017 column name ------------------------------------------------------------------- Fri Feb 22 10:25:20 UTC 2013 - saschpe@suse.de - Require openstack-suse-macros instead of openstack-common-macros ------------------------------------------------------------------- Thu Feb 21 17:08:52 UTC 2013 - iartarisi@suse.com - added oslo-config requirement ------------------------------------------------------------------- Mon Feb 18 11:18:18 UTC 2013 - saschpe@suse.de - Init script cleanup: + Drop useless shell variables + Don't depend on $network facility, we already have $remote_fs (comes after $network) + Source /etc/sysconfig/openstack-keystone (if available), orthogonal to the other init scripts we provide. We're not using this feature ATM though - Default configuration cleanup: + Use openstack-utils to set as much default values in the package as possible (instead of patch/sed/...). Some may be overwritting later on by, .e.g., crowbar - More useful lograte configuration: + Compress + Make sure to keep log files for at least 90 days (i.e. rotate 15 + weekly = 15 weeks). + Add size=1M to avoid getting DoS'ed by wild daemons + Use copytruncate instead of create+postrotate+sharedscripts to avoid a daemon restart -------------------------------------------------------------------- Mon Feb 18 09:37:31 UTC 2013 - cloud-devel@suse.de - Update to version 2013.1.a138.g5a8682d+git.1361180251.5a8682d: + fix unit test when memcache middleware is not configured + Fix bugs with set ldap password. + Cleaned up keystone-all --help output + add missing kvs functionality (bug1119770) + remove unneeded config reloading (it's already done during setUp) + Update to oslo version code. ------------------------------------------------------------------- Thu Feb 14 13:27:29 UTC 2013 - iartarisi@suse.com - Remove unused/upstreamed patches for requests and LDAP scope -------------------------------------------------------------------- Thu Feb 14 11:38:35 UTC 2013 - iartarisi@suse.cz - Update keystone-hybrid-backend to fix unit tests - Update to version 2013.1+git.1360841915.901d079: + Fix normalize identity sql ugrade for Mysql and postgresql + Sync latest cfg from oslo-incubator + Update .coveragerc + Query only attributes strictly required for keystone when using it with existing LDAP servers + remove duplicate model declaration/attribution + import tools/flakes from oslo + Expand dependency injection test coverage + simplify query building logic + Generate apache-style common access logs + Add missing log_format, log_file, log_dir opts. + allow unauthenticated connections to an LDAP server + Missed import for IPv6 tests skip. + Spell accommodate correctly. + Use install_venv_common.py from oslo. + Keystone backend preparation for domain-scoping + Fix spelling mistakes + Fix test_contrib_s3_core unit test + add check for config-dir parameter (bug1101129) + don't create a new, copied list in get_project_users + Tenant update on LDAP breaks if there is no update to apply + adding additional backend tests (bug1101244) ------------------------------------------------------------------- Tue Feb 12 12:13:21 UTC 2013 - dmueller@suse.com - add service-endpoints for Quantum -------------------------------------------------------------------- Mon Feb 11 15:41:59 UTC 2013 - dmueller@suse.com - Update to version 2013.1+git.1360597319.c05041e: + Add --keystone-user/group to keystone-manage pki_setup + UserApi.update not to require all fields in arg + return 400 Bad Request if invalid params supplied (bug1061738) + Relational API links + Adds png versions of all svg image files. Changes reference. ------------------------------------------------------------------- Mon Feb 11 15:41:40 UTC 2013 - dmueller@suse.com - Remove lp-bug-1031372.patch: * Merged upstream ------------------------------------------------------------------- Thu Feb 7 10:15:55 UTC 2013 - iartarisi@suse.com - use in-memory database for hybrid backend unit-tests ------------------------------------------------------------------- Wed Feb 6 16:08:22 UTC 2013 - iartarisi@suse.com - re-enable hybrid backend -------------------------------------------------------------------- Wed Feb 6 15:28:28 UTC 2013 - cloud-devel@suse.de - Update to version 2013.1+git.1360164508.8ec247b: + Document user group LDAP options + Why .pop()'ing urls first is important + Imported Translations from Transifex + Delete Roles for User and Project LDAP + Fixes 'not in' operator usage + Add size validations to token controller. -------------------------------------------------------------------- Mon Feb 4 11:57:14 UTC 2013 - dmueller@suse.com - Update to version 2013.1+git.1359979034.4722c84: + Updates migration 008 to work on PostgreSQL. + Create a default domain (bp default-domain) + tenant to project in the apis + Tenant to Project in Back ends + Enable/disable domains (bug 1100145) + Readme: use 'doc' directory not 'docs' ------------------------------------------------------------------- Thu Jan 31 16:46:36 UTC 2013 - dmueller@suse.com - Add lp-bug-1031372.patch: Rework the way pki_setup is used ------------------------------------------------------------------- Mon Jan 28 13:26:21 UTC 2013 - saschpe@suse.de - Add keystone-requests-compat.patch: Compatiblity with requests>=1.0 -------------------------------------------------------------------- Mon Jan 28 12:49:28 UTC 2013 - dmueller@sue.com - Update to version 2013.1+git.1359377368.56f194a: + rename tenant to project in sql + Fix pep8 error. -------------------------------------------------------------------- Wed Jan 23 16:39:37 UTC 2013 - cloud-devel@suse.de - Update to version 2013.1+git.1358959177.7691276: + Limit the size of HTTP requests. ------------------------------------------------------------------- Wed Jan 23 14:03:35 UTC 2013 - saschpe@suse.de - Clean up %config(noreplace), only logrotate config and *.conf files should be noreplace ------------------------------------------------------------------- Tue Jan 22 13:30:16 UTC 2013 - dmueller@suse.com - use pki_setup to setup initial public/private key pair -------------------------------------------------------------------- Mon Jan 21 09:51:50 UTC 2013 - dmueller@suse.com - Update to version 2013.1+git.1358761910.8748cfa: + Allow running of sql against the live DB. + Test that you can undo & re-apply all migrations + downgrade user and tenant + Auto-detect max SQL migration + Safer data migrations + Sync base identity Driver defs with SQL driver + Fix i18n of string templates. + Enhance wsgi to listen on ipv6 address + add database string field length check + Autoload schema before creating FK's (bug 1098174) + Enable exception format checking in the tests. + reorder tables for delete ------------------------------------------------------------------- Wed Jan 16 15:05:54 UTC 2013 - dmueller@suse.com - copy example ssl cert to the place where keystone expects it - remove apache2 ssl/wsgi wrapper, keystone can do SSL on its own -------------------------------------------------------------------- Mon Jan 14 15:15:38 UTC 2013 - saschpe@suse.de - Update to version 2013.1+git.1358172938.ceec5c0: + Validated URLs in v2 endpoint creation API + Fixes import order nits + Cleanup keystoneclient testing requirements + Correct spelling errors / typos in test names + Keystone server support for user groups + Add missing .po files to tarball + adds keyring to test-requires + Revert "shorten pep8 output" + Upgrade WebOb to 1.2.3 + il8n some strings + Imported Translations from Transifex + Removed unused variables + Removed unused imports + Add pyflakes to tox.ini + Fix spelling typo + shorten pep8 output + Driver registry + Adding a means to connect back to a pydevd debugger. + add in pip requires for requests + Split endpoint records in SQL by interface + Fix typo s/interalurl/internalurl/ + module refactoring + Test for content-type appropriate 404 (bug 1089987) + Imported Translations from Transifex + fixing bug 1046862 + Expand default time delta (bug 1089988) + Add tests for contrib.s3.core. + Test drivers return HTTP 501 Not Implemented + Support non-default role_id_attribute + Remove swift auth. + Move token controller into keystone.token + Import pysqlite2 if sqlite3 is not available. + Remove mentions of essex in docs (bug 1085247) + Ensure serviceCatalog is list when empty, not dict + Adding downgrade steps for migration scripts. + Port to argparse based cfg + Only 'import *' from 'core' modules + use keystone test and change config during setUp + Bug 1075090 -- Fixing log messages in python source code to support internationalization. + Added documentation for the external auth support + check the redirected path on the request, not the response + Validate password type (bug 1081861) + split identities module into logical parts remove unneeded imports from core + Ensure token expiration is maintained (bug 1079216) + normalize identity + Fixes typo in keystone setup doc + Imported Translations from Transifex + Stop using cfg's internal implementation details + syncing run_tests to match tox + Expose auth failure details in debug mode + Utilize policy.json by default (bug 1043758) + Wrap v3 API with RBAC (bug 1023943) + v3 Identity + v3 Catalog + v3 Policies + Import auth_token middleware from keystoneclient + Imported Translations from Transifex + Refix transient test failures + Make the controller addresses configurable. + Expose authn/z failure info to API in debug mode + Refactor TokenController.authenticate() method. + Fix error un fixtures. + Ensures User is member of tenant in ec2 validation + Properly list tokens with a null tenant + Reduce total number of fixtures + Provide config file fields for enable users in LDAP backend (bug1067516) + populate table check. + Run test_keystoneclient_sql in-memory + Make tox.ini run pep8 checks on bin. + tweaking docs to fix link to wiki Keystone page + Various pep8 fixes for keystone. + Use the right subprocess based on os monkeypatch + Fix transient test failures (bug 1077065, bug 1045962) + Rewrite initial migration + Fix default port for identity.internalURL + Improve feedback on test failure + fixes bug 1074172 + SQL upgrade test. + Include 'extra' attributes twice (bug 1076120) + Return non-indexed attrs, not 'extra' (bug 1075376) + bug 1069945: generate certs for the tests in one place + monkeypatch cms Popen + HACKING compliance: consistent use of 'except' + auth_token hash pki key PKI tokens on hash in memcached when accessed by auth_token middelware + key all backends off of hash of pki token. + don't import filter_user name, use it from the identity module + don't modify the passed in dict to from_dict + move hashing user password functions to common/utils + ignore .tox directory for pep8 in runtests + Imported Translations from Transifex + Implements REMOTE_USER authentication support. + pin sqlalchemy to 0.7 + Move 'opentack.context' and 'openstack.params' definitions to keystone.common.wsgi + Removes duplicate flag for token_format. + Raise exception if openssl stderr indicates one. + Ignore keystone.openstack for PEP8 + Fixed typo in log message + Fixes 500 err on authentication for invalid body + Enable Deletion of Services with Endpoints + Exception.message deprecated in py26 (bug 1070890) + Utilize logging instead of print() + stop LdapIdentity.create_user from returning the user's password + Compare token expiry without seconds + Moved SQL backend tests into memory + Add trove classifiers for PyPI + Adding handling for get user/tenant by name + Fixed bug 1068851. Refreshed new crypto for the SSL tests. + move filter_user function to keystone.identity.core + Fixes response for missing credentials in auth + making PKI default token type + Fixes Bug 1063852 + bug 1068674 + Update common. + Extract hardcoded configuration in ldap backend (bug 1052111) + Fix Not Found error, when router not match. + add --config-dir=DIR for keystone-all option + Add --config-dir=DIR in OPTIONS + Delete role does not delete role assignments in tenants (bug 1057436) + replacing PKI token detection from content length to content prefix. (bug 1060389) + Document PKI configuration and management + Raise if we see incorrect keyword args "condition" or "methods" + Filter users in LDAP backend (bug 1052925) + Use setup.py develop to insert code into venv. + Raise 400 if credentials not provided (bug 1044032) + Fix catalog when services have no URL + Unparseable endpoint URL's should raise friendly error + Configurable actions on LDAP backend in users Active Directory (bug 1052929) + Unable to delete tenant if contains roles in LDAP backend (bug 1057407) + Replaced underscores with dashes + fixes bug 1058429 + Command line switch for standard threads. + Remove run_test.py in favor of stock nose. + utf-8 encode user keys in memcache (bug 1056373) + Convert database schemas to use utf8 character set. + Return a meaningful Error when token_id is missing + Backslash continuation cleanup + notify calling process we are ready to serve + add Swift endpoint in sample data + Updated Fix for duplicated entries on LDAP backend for get_tenant_users + Fix wsgi config file access for HTTPD + Bump version to 2013.1 + add Quantum endpoint in sample data + Add XML namespace support for OSADM service api. + Identity API v3 Config, Routers, Controllers - Updated requirements - Dropped patches (merged upstream): + keystone-certs-test.patch + keystone-sql-backend-from_dict.patch + keystone-webob-empty-resp-environ.patch - Dropped FIX-BUILD.patch, we should fix that finally - Disabled hybrid LDAP backend ------------------------------------------------------------------- Fri Jan 11 15:39:23 UTC 2013 - iartarisi@suse.com - revert %setup to also unpack hybrid backend tarball ------------------------------------------------------------------- Fri Jan 11 15:12:13 UTC 2013 - iartarisi@suse.com - update and re-enable backend hybrid code: * use sample config for testing * raise errors in user retrieval code instead of returning None ------------------------------------------------------------------- Fri Jan 11 11:23:40 UTC 2013 - saschpe@suse.de - Require WebTest instead of webtest in the test sub-package ------------------------------------------------------------------- Thu Jan 10 12:52:41 UTC 2013 - saschpe@suse.de - Add logrotate configuration ------------------------------------------------------------------- Wed Jan 9 15:36:36 UTC 2013 - bwiedemann@suse.com - package sample_data.sh for use in quickstart script -------------------------------------------------------------------- Wed Dec 19 12:40:14 UTC 2012 - saschpe@suse.de - Move to obs-service-git_tarballs - Update to version 2012.2.3+git.1355917214.0c8c2a3: + Merge commit 'refs/changes/01/17901/1' of ssh://review.openstack.org:29418/openstack/keystone into stable/folsom + Bump next version to 2012.2.3 + Ensure serviceCatalog is list when empty, not dict ------------------------------------------------------------------- Mon Dec 10 23:57:58 UTC 2012 - saschpe@suse.de - Update to version 2012.2.1+git.1354224563.7869c3e: + lp#1064914 Removing user from a tenant isn't invalidating user access to tenant + lp#1073569 Jenkins jobs fail because of incompatibility between sqlalchemy-migrate and the newest sqlalchemy-0.8.0b1 + lp#1078497 keystone throws error when removing user from tenant. + lp#1060389 Non PKI Tokens longer than 32 characters can never be valid + lp#1068851 Openssl tests rely on expired certificate + lp#1079216 token expires time incorrect for auth by one token + lp#968519 Object reference validation should occur in drivers + lp#1068674 Redo part of bp/sql-identiy-pam undone by bug 968519 ------------------------------------------------------------------- Wed Dec 5 09:36:14 UTC 2012 - saschpe@suse.de - Use @PARENT_TAG@ in _service file to automate versioning ------------------------------------------------------------------- Mon Dec 3 11:34:01 UTC 2012 - iartarisi@suse.com - fix unittest failure with ssl certificates ------------------------------------------------------------------- Fri Nov 30 13:59:57 UTC 2012 - iartarisi@suse.com - fix unittest failure on our version of webob ------------------------------------------------------------------- Thu Nov 22 12:35:37 UTC 2012 - iartarisi@suse.com - fix typo in passlib dependency package name ------------------------------------------------------------------- Thu Nov 22 10:41:39 UTC 2012 - saschpe@suse.de - Split of doc package into seperate spec file - Comment out hybrid_backend parts for now to fix build - Re-arranged %build section to match other packages - Removed a whole bunch of unneded build requirements - Updated requirements for python module and test sub-packages ------------------------------------------------------------------- Wed Nov 21 12:59:17 UTC 2012 - iartarisi@suse.com - disable keystone-hybrid-backend source service ------------------------------------------------------------------- Tue Nov 20 14:50:26 UTC 2012 - iartarisi@suse.com - Add source service for keystone-hybrid-backend - Update to latest git (f65604d): + Ensures User is member of tenant in ec2 validation ------------------------------------------------------------------- Thu Nov 15 13:55:59 UTC 2012 - saschpe@suse.de - Use openstack-macros ------------------------------------------------------------------- Thu Nov 8 13:50:26 UTC 2012 - saschpe@suse.de - Fix malformed changes file entries ------------------------------------------------------------------- Thu Nov 8 13:03:54 UTC 2012 - saschpe@suse.de - Update to version 2012.2 (Folsom): + See https://github.com/openstack/keystone/commits/folsom-3 - Drop the following upstreamed patches: + keystone-ldap-no-authentication.patch + keystone-log-warn-auth-errors.patch - Rebased the following patches: + keystone-sql-backend-from_dict.patch + keystone-hybrid-conf-scope.patch - BuildRequire python-pam for man-page build - Install new man-pages keystone-all.1 and keystone-manage.1 - Introduce temporary FIX-BUILD.patch ------------------------------------------------------------------- Thu Nov 8 11:44:18 UTC 2012 - saschpe@suse.de - Drop from_vcs build flag ------------------------------------------------------------------- Wed Oct 31 15:15:16 UTC 2012 - saschpe@suse.de - Drop temporary fixes for file permissions and attributes in %post section. They were necessary only to migrate from pre-1.0 packages. ------------------------------------------------------------------- Tue Oct 16 11:08:47 CEST 2012 - iartarisi@suse.cz - patch sql backend's from_dict method to not modify the content of the passed in dict (lp:1066851) ------------------------------------------------------------------- Wed Oct 10 14:56:49 CEST 2012 - iartarisi@suse.cz - add hybrid backend test configuration file ------------------------------------------------------------------- Wed Oct 10 14:10:43 CEST 2012 - iartarisi@suse.cz - make user search ldap SCOPE configurable in the hybrid backend ------------------------------------------------------------------- Mon Oct 8 14:38:58 CEST 2012 - iartarisi@suse.cz - fix LDAP bind with dinamically found user DN ------------------------------------------------------------------- Fri Oct 5 12:46:20 CEST 2012 - iartarisi@suse.cz - hybrid backend fixes: + use the DN for the user we just signed in to check for password + fix invalid user error (bnc#783200) ------------------------------------------------------------------- Tue Oct 2 13:57:41 CEST 2012 - iartarisi@suse.cz - fix checking for SQL user passwords in the hybrid backend bnc#783036 ------------------------------------------------------------------- Mon Oct 1 09:26:15 UTC 2012 - jenkins@suse.de - Update to latest git (0e1f05e): + utf-8 encode user keys in memcache (bug 1056373) ------------------------------------------------------------------- Wed Sep 26 09:57:47 UTC 2012 - jdsn@suse.de - make init script start after database (bnc#781798) ------------------------------------------------------------------- Sun Sep 16 18:24:07 UTC 2012 - jenkins@suse.de - Update to latest git (176ee9b): + Require authz to update user's tenant (bug 1040626) + List tokens for memcached backend + Delete user tokens after role grant/revoke + Limit token revocation to tenant (bug 1050025) ------------------------------------------------------------------- Wed Sep 12 11:07:31 UTC 2012 - vuntz@suse.com - Do not use a sed to modify /usr/bin/gensslcert in %post: this file belongs to another package, and we actually don't do any change with the sed... Fix bnc#779747. ------------------------------------------------------------------- Mon Sep 10 08:26:18 UTC 2012 - vuntz@suse.com - Add keystone-fix-revoke.patch: fix revoking of roles to also invalidate already existing tokens. Fix bnc#779477, CVE-2012-4413. ------------------------------------------------------------------- Tue Aug 28 21:40:12 UTC 2012 - cthiel@suse.com - Require authz to update user's tenant (lp#1040626, bnc#777664) ------------------------------------------------------------------- Fri Aug 24 13:44:39 UTC 2012 - bwiedemann@suse.com - mark hybrid_config.py as config ------------------------------------------------------------------- Thu Aug 23 09:08:38 UTC 2012 - jenkins@suse.de - Update to latest git (a16a0ab): + Allow overloading of username and tenant name in the config files. + Returning roles from authenticate in ldap backend ------------------------------------------------------------------- Tue Aug 14 17:40:08 CEST 2012 - iartarisi@suse.cz - Add hybrid identity backend ------------------------------------------------------------------- Tue Aug 14 14:22:19 CEST 2012 - iartarisi@suse.cz - Add patch to log all Unauthorized exceptions (authentication failures). Discussed in bnc#753329. ------------------------------------------------------------------- Fri Aug 10 22:08:44 UTC 2012 - jenkins@suse.de - Update to latest git (359c426): + Open 2012.1.3 development ------------------------------------------------------------------- Wed Aug 8 14:12:01 UTC 2012 - jenkins@suse.de - Update to latest git (afc37ae): + Open 2012.1.2 development ------------------------------------------------------------------- Tue Aug 7 11:53:19 UTC 2012 - bwiedemann@suse.com - drop executable bit from config file ------------------------------------------------------------------- Tue Jul 31 22:12:53 UTC 2012 - jenkins@suse.de - Update to latest git (f65604d): + fix variable names to coincide with the ones in common.ldap + Import ec2 credentials from old keystone db + Raise unauthorized if tenant disabled (bug 988920) ------------------------------------------------------------------- Tue Jul 31 15:56:43 CEST 2012 - iartarisi@suse.cz - Remove fix-ldap-varnames patch after being accepted upstream ------------------------------------------------------------------- Wed Jul 25 11:23:57 UTC 2012 - saschpe@suse.de - Secure file permissions for Apache SSL certificate files ------------------------------------------------------------------- Thu Jul 19 20:20:59 UTC 2012 - cthiel@suse.com - drop keystone-cleanup-user-tenant-deletion.patch, which has been merged upstream: https://review.openstack.org/#/c/7482/ ------------------------------------------------------------------- Tue Jul 17 13:02:33 UTC 2012 - saschpe@suse.de - Fix WSGI app names, use the 'composite' apps to get the correct routes mapping ------------------------------------------------------------------- Tue Jul 17 12:18:32 UTC 2012 - saschpe@suse.de - Forward keystone WSGI log events to mod_wsgi ------------------------------------------------------------------- Tue Jul 17 11:05:49 CEST 2012 - iartarisi@suse.cz - Fix some variable names in the LDAP backend which were causing NameErrors - Don't require authentication for LDAP ------------------------------------------------------------------- Mon Jul 16 14:22:53 CEST 2012 - iartarisi@suse.cz - Fix bnc#755426 cleanup dependent data upon user/tenant deletion ------------------------------------------------------------------- Mon Jul 9 14:50:53 UTC 2012 - saschpe@suse.de - Provide Apache2 SSL-proxy example configuration based on mod_wsgi - Provide self-signed SSL certificates to be used for non-production setups (like openstack-quickstart) - Fix /var/lib/keystone permissions to 0755 ------------------------------------------------------------------- Mon Jul 2 12:33:42 UTC 2012 - saschpe@suse.de - Drop runtime requirement on openstack-glance - Change requirement for openstack-swift to python-swift, keystone only seems to use it in the S3-compatibility code - Change requirement for openstack-nova to python-nova, keystone only seems to use it in the EC2-compatibility code ------------------------------------------------------------------- Wed Jun 27 10:29:24 UTC 2012 - saschpe@suse.de - Change versioning scheme to $release+git.$AUTHORDATE.$COMMITREV - Simplify from_vcs macros ------------------------------------------------------------------- Wed Jun 27 10:35:56 CEST 2012 - vuntz@suse.com - Really drop unused disable-tests.patch: not needed anymore. ------------------------------------------------------------------- Tue Jun 26 12:23:35 UTC 2012 - saschpe@suse.de - Consistent package summaries - Use upstream description and correct URL - Macro cleanup: + Package is noarch except for SLE-11 + No need to redefine %_initddir, SLE-11 works correctly ------------------------------------------------------------------- Mon Jun 25 12:49:58 UTC 2012 - saschpe@suse.de - Also install documentation and manpage when build - No need for "fixing" the %_initddir macro ------------------------------------------------------------------- Tue Jun 12 10:48:49 UTC 2012 - saschpe@suse.de - Use 'openstack-keystone' system user instead of 'keystone' ------------------------------------------------------------------- Wed Jun 6 13:22:43 UTC 2012 - saschpe@suse.de - Add %restart_on_update to %post section for openstack-keystone (daemons should be restarted after package update) - Fix some rpmlint warnings - Added rpmlintrc for non-issues ------------------------------------------------------------------- Thu May 24 10:36:40 MDT 2012 - jfehlig@suse.com - Add 'Requires: python >= 2.6.8' to openstack-keystone and python-keystone subpackage ------------------------------------------------------------------- Thu Mar 29 09:11:01 UTC 2012 - bwiedemann@suse.com - use latest upstream default_catalog.templates to fix nova-volume problems ------------------------------------------------------------------- Tue Feb 14 18:22:37 UTC 2012 - bwiedemann@suse.com - run as keystone user ------------------------------------------------------------------- Wed Feb 8 12:59:05 UTC 2012 - rhafer@suse.de - Updated to the lastest git checkout ------------------------------------------------------------------- Thu Jan 26 12:51:28 UTC 2012 - rhafer@suse.de - Fixed try-restart implementation in init-script ------------------------------------------------------------------- Thu Jan 26 10:25:09 UTC 2012 - rhafer@suse.de - Fixed init script dependencies ------------------------------------------------------------------- Thu Jan 26 10:12:27 UTC 2012 - rhafer@suse.de - removed no longer needed workaround for lp#921054 - patch for lp#921634 is upstreamed - refreshed config file patch ------------------------------------------------------------------- Tue Jan 24 16:37:58 UTC 2012 - rhafer@suse.de - Added workaround for doc/, examples/ and tools/ dirs showing up in site-packages/ (https://bugs.launchpad.net/keystone/+bug/921054) - Include examples into the -doc subpackage ------------------------------------------------------------------- Tue Jan 24 14:14:02 UTC 2012 - rhafer@suse.de - cleaned up more dependencies ------------------------------------------------------------------- Mon Jan 23 15:46:33 UTC 2012 - rhafer@suse.de - run testsuite during build ------------------------------------------------------------------- Fri Jan 20 14:51:35 UTC 2012 - rhafer@suse.de - Updated to today's git snapshot - Removed some unneeded conditionals - Updated dependencies ------------------------------------------------------------------- Mon Jan 16 16:03:20 UTC 2012 - prusnak@opensuse.org - fix initscript scriptlets ------------------------------------------------------------------- Tue Jan 10 13:38:58 UTC 2012 - bwiedemann@suse.com - use spdx.org License name Apache-2.0 ------------------------------------------------------------------- Tue Dec 13 15:31:49 UTC 2011 - mlin@suse.com - Enabled build from git - Removed unnecessary dependencies - Separate python-keystone - Fix rpmlint warning - Enabled build for Fedora ------------------------------------------------------------------- Mon Dec 5 11:27:09 UTC 2011 - prusnak@opensuse.org - added preun and postun sections to handle initscripts ------------------------------------------------------------------- Mon Dec 5 11:16:58 UTC 2011 - prusnak@opensuse.org - spec cleanup
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
