Avoid ValueError in 12.04 essex pkg (bug 988523)

Change-Id: Icafe3e877efcfb326b607462de493739b2395365
cleanup dependent data upon user/tenant deletion

fixes bug 974199
fixes bug 973243

* upon deletion of tenant also delete user tenant relations
* upon deletion of tenant or user also delete corresponding metadata
* add foreign keys in metadata to ensure consistency

see also: https://bugs.launchpad.net/keystone/+bug/959294/comments/16

Change-Id: I264714fe82b727e3e0f5273bcb781a580a3f3826
Use ConfigOpts.find_file() to locate policy.json

Use cfg's new helper method to find policy config file. The basic
behavior is "look alongside the config file" with a fall back to
the standard default config paths.

Change-Id: Ic2a7187378eab9c9066118132465280993778a5e
Use ConfigOpts.find_file() to locate catalog template

Fixes bug #983734

Use cfg's new helper method to find the catalog template file. The basic
behavior is "look alongside the config file" with a fall back to the
standard default config paths.

Change-Id: Ia25fefafaa2c387d0207d630e5613389be364628
Add defaults for driver options

Avoid relying on the options being set in the config file.

Change-Id: Ib5859604492096c99c6428c63b3c1d03b3fbf621
Set defaults for port options

Avoid relying on the options being set in the config file.

Change-Id: I32c80be8601a502f3c65cacc1d0a7add3b2f652c
Set defaults for sql options

Avoid relying on the options being set in the config file.

Change-Id: I01db140ac757325a80f493b732064fa0f437df23
Add defaults for ldap options

Avoid relying on the options being set in the config file.

However, most of the defaults are probably not all that useful here
except maybe the objectClass and id attribute options.

Change-Id: Iaa31cec64be66ed6e7a9b8111f6c8a3fd96731cb
Improve the sample keystone.conf

Make sure all the available options are include in the file, add
some more documentation and, rather than set any of the defaults,
just include them as comments.

Change-Id: I2cb6060f47ea88349b1862d4d995c80cf9237066
Merge "Avoid ValueError in 12.04 essex pkg (bug 988523)"
Merge changes I2cb6060f,Iaa31cec6,I01db140a,I32c80be8,Ib5859604,Ia25fefaf,Ic2a71873

* changes:
  Improve the sample keystone.conf
  Add defaults for ldap options
  Set defaults for sql options
  Set defaults for port options
  Add defaults for driver options
  Use ConfigOpts.find_file() to locate catalog template
  Use ConfigOpts.find_file() to locate policy.json
Invalidate user tokens when password is changed

Fixes bug 996595

This commit will cause all valid tokens to be deleted for a user
who's password is changed (implemented for the sql and kvs backends)

Change-Id: I6ad7da8957b7041983a3fc91d9ba9368667d06ac
Merge "cleanup dependent data upon user/tenant deletion"
Flush tenant membership deletion before user

Ensure user tenant membership is *actually* removed before deleting
user.

Fixes bug 998137.  This should be proposed to stable/essex as well.

Change-Id: I097456e603177646d62ebf08ca71af1fd7f787bf
Merge "Invalidate user tokens when password is changed"
Merge "Flush tenant membership deletion before user"
Added Security backend and its SQL implementation.

Initial work for Security backend.

Change-Id: Id1b93efeb117781f3d96fa546b6439e441e4aa6b

Working on 'SecurityMiddleware':
* Moving 'SecurityMiddleware' to 'keystone/contrib/security/'.
* Implementing SQL backend.
* Updating the API.
* Added MailConsecutive401 middleware.

Change-Id: I10be0a27b24bbd3a3b1935074387e43448e8d8ab