Add tests for PAM authentication.

Bug: 1003829

* keystone/config.py
  Define defaults for pam.

* tests/backend_pam.conf
  Defaults to execute pam tests.

* tests/test_backend_pam.py
  New script to test all implemented methods for pam backend.

Change-Id: I891f080c36fbdc1d641d49edf9fe762702b591b6
Adding missing files to MANIFEST.in

Fix MANIFEST.in to include files missing from generated tarballs.
Fixes bug 1037010.

Change-Id: I33a911e77cc364e761de0c45de7046eca58797b1
Remove unused imports

Fixes bug #1037578

Change-Id: I2fdaf83e731e1b839eb0bb2ee2f0f55d7bd40f00
PKI Token revocation

Co-authored-by: Adam Young <ayoung@redhat.com>

Token revocations are captured in the backends,

During upgrade, all previous tickets are defaulted to valid.

Revocation list returned as a signed document and can be fetched in an admin context via HTTP

Change config values for enable diable PKI

In the auth_token middleware,  the revocation list is fetched prior
to validating tokens. Any tokens that are on the revocation list
will be treated as invalid.

Added in PKI token tests that check the same logic as the UUID tests.
Sample data for the tests is read out of the signing directory.

dropped number on sql scripts to pass tests.

Also fixes 1031373

Bug 1037683

Change-Id: Icef2f173e50fe3cce4273c161f69d41259bf5d23
Remove unused variables

'reqs_in' in openstack.common.setup.get_reqs_from_files is unused.
'dialect' in common.sql.migrate_repo.versions.001_add_initial_tables is
unused.

Change-Id: Ic2ae2873cef1978eefe03148861fedd5a4a013b2
Merge "PKI Token revocation"
Removed stray print statement (bug 1038131)

Change-Id: Ice4db491b6040679524e5d034b1bfc7b045b38d1
Merge "Remove unused variables"
Support running the tests in the debugger.

Bug 1039112

Change-Id: I4e449cebe8dbc4e8f591930de6551304354e1dd0
Less information returned with IntegrityError

Fixes bug: #1039552

Change-Id: Ie91ff09cadbbf24dc88b013581ebdd4a37c3b6b0
Merge "Removed stray print statement (bug 1038131)"
Merge "Add tests for PAM authentication."
Add nosehtmloutput as a test dependency.

Adding nosehtmloutput as a test dependency allows nose to output its
results to an html file. This will be used by Jenkins to save logs on
a different server.

Change-Id: Ic19030cc4cc8fcf99ee9442de175f38ac6126776
Demonstrate that authenticate() returns roles.

This is related to lp 1035428; that bug is fixed in folsom,
but this test is also about to appear in stable/essex.

Change-Id: Iadd4091339aab2c3a8d474b44dcd11f8bfd1d510
add token_format=UUID to keystone.conf.sample

Change-Id: I535ddb9e7437cd80e692db13615cbfdc1b918e46
change verbose and debug to Fasle in keystone.conf.sample

fix bug #1039857

verbose and debug is False by default, but they display True in
keystone.conf.sample. It may confuse people who cp
keystone.conf.sample to keystone.conf

Change-Id: I62031b879196da1633a198b6ae1f116485fe783b
PEP8 fix for PAM test.

Change-Id: I2c838989ea1c5f893c37c97cadc4d5d76b36fb6f
allow middleware configuration from app config

From markmc's proposal:
http://lists.openstack.org/pipermail/openstack-dev/2012-July/000277.html

For backward compatiblity, configuration from paste-deploy INI is used
if it exists. If not, section [keystone_authtoken] in  global
configuration is expected, with the same parameter names.

Requires application using global cfg.CONF object (nova and glance since
folsom-2) and before there's openstack.common library, attempts to use
copy/pasted <application>.openstack.common.cfg

DocImpact

Change-Id: If6aa22280f4ce2cc698d99a130b5792dab808363
Typo fix in keystone: existant => existent

Change-Id: Ie6cd74382a7ada603c123968fe5407fddac619fd
Impact: Test comments
Code cleanup in doc/source/conf.py

Code cleanup in doc/source/conf.py and fix some PEP8 issues
to make the code more pretty.

Change-Id: Ifc8bb4bff72f9497080a3f0b3df2161bd9328ab0