Identity API v3 Config, Routers, Controllers

Provides configuration to deploy the v3 API identically across both:

http://[...]:5000/v3/
http://[...]:35357/v3/

Change-Id: I97c5a2f7a84e3fca0adaea020697f958e04f5753
Update common.

Change-Id: I161ee53e0e087da963b62ac5353d3bdf04b5cc22
Utilize logging instead of print()

+ A bit of HACKING compliance

Change-Id: I9e18401d9555cc316523d1b14542cd5d3ad16fe8
Exception.message deprecated in py26 (bug 1070890)

In the case of IntegrityError (e), e is wrapping a DBAPIError[1] with more
information about the context of the exception -- context that we do NOT
want to expose to our own API users (however, that context should still
be logged). In the case of an integrity error, str(e.orig) will produce
exactly what we're producing with e.message today: a user-friendly
message such as 'column name is not unique'

This change should not impact what is logged or returned to the API
user -- just eliminate the deprecation warning.

[1]: http://docs.sqlalchemy.org/en/rel_0_7/core/exceptions.html#sqlalchemy.exc.DBAPIError

Change-Id: Ie3a5d93fbb5a7b90ad3b205bc8610f28b1626431
Enable Deletion of Services with Endpoints

fixes Bug #1019475

Allows the user to delete a service that has endpoints.

Change-Id: If2d669e50f73ea5bb7b269f941a3b2710808a98a
Fixes 500 err on authentication for invalid body

1. This fixes the 500 error on authentication when invalid request body is
provided, a 400 Bad Request response is returned instead.
2. Also added unit test coverage.

Fixes LP: #1060709

Change-Id: I7f2916e0b91de1e299d2dc7a245ff6c2bc548afd
Fixed typo in log message

Change-Id: I8b6bf6f8012fb8119b32a93305cf3e1d3996f3ed
Merge "Update common."
Merge "Enable Deletion of Services with Endpoints"
Merge "Fixes 500 err on authentication for invalid body"
Merge "Exception.message deprecated in py26 (bug 1070890)"
Merge "Utilize logging instead of print()"
Ignore keystone.openstack for PEP8

tox.ini already ignores keystone.openstack, so run_tests.sh should as
well.

- Fixed: No files were being ignored
- Removed non-existent files from ignored list
- Using commas to seperate ignored files

  Colons didn't work at all for me, and the pep8 man page illustrates
  the use of commas.

Change-Id: Icd260ba5c0fa37040f66d1f913fc7940d69eda68
Raise exception if openssl stderr indicates one.

The cms module calls openssl and raises a CalledProcessError if the
return code is non zero. However, I've observed issues where the return
code is zero but the std err shows the command failed. This commit
changes the test to also look for the text "Error" in openssl's stderr
and raise CalledProcessError in that event as well.

It also removes the keyword arg "output" to CalledProcessError as it
wasn't being found.

Change-Id: I2b2a9c026557632d0c71dd6f987eaa263f387242
Removes duplicate flag for token_format.

The token_format settings defaults to PKI, but both the
"PKI" and "UUID" lines were still in the sample config file.
This patch removes the duplicate and leaves only the
correct default.

Change-Id: Ib8560952ec2aee6d6b6eda944c6ec1f96fdc5c4c
Move 'opentack.context' and 'openstack.params' definitions to keystone.common.wsgi

Change-Id: Idc4f6765cba20e7baadb61e355076695f36d66ea
pin sqlalchemy to 0.7

sqlalchemy 0.8.0b1 breaks some dependencies such as sqlalchemy-migrate, pin the version until we fix them

Fixes bug #1073569

Change-Id: I6620276bf8f0a7cbc1d51aa226cd33c512e59a48
Merge "Ignore keystone.openstack for PEP8"
Implements REMOTE_USER authentication support.

Adds support for non-identity authentication via REMOTE_USER environ
context variable thereby permitting external services (paste pipeline,
web fronting or other) to authenticate a request.

Also fixes a pep8 issue.

This change is in support for blueprint
pluggable-identity-authentication-handlers

Change-Id: Ib0a36b14f135dd87601e3c6d28f7874193d66b34
Imported Translations from Transifex

Change-Id: If6ca1bf71b45b0e453b484ce756b926beb7d4f7f