Use oslo-config-2013.1b3

The cfg API is now available via the oslo-config library, so switch to
it and remove the copied-and-pasted version.

Add the 2013.1b3 tarball to tools/pip-requires - this will be changed
to 'oslo-config>=2013.1' when oslo-config is published to pypi. This
will happen in time for grizzly final.

Remove the 'deps = pep8==1.3.3' from tox.ini as it means all the other
deps get installed with easy_install which can't install oslo-config
from the URL.

Change-Id: I4815aeb8a9341a31a250e920157f15ee15cfc5bc
make LDAP query scope configurable

Get the DN from the LDAP server itself rather than hardcoding its format.

Fixes bug 1122181

Change-Id: I6f70c480b5c6f1b064e74d3cbd2cd8ca5ee82b0a
Update sample_data.sh to match docs

Confirm more with the "OpenStack Install and Deploy Manual."

Change-Id: I46ab7e8e5ccdf389cbc60fee84c063f289155781
Fixes: bug #1073291
Implement name space for domains

Creates a separate name space for each domain for the name attribute of
user, groups and projects - meaning that the names of these entities
only have to be unique within that domain.

Implementation of this within the SQL backends is handled by simply
changing the uniqueness constraints on the relevant attributes.  KVS
and LDAP backends do not yet support domain separation (blocked by
existing restrictions, already raised as bugs).

An issue exists for the downward migration with this change in that
if the database has been used and populated with the name space in place
then the downward migration may fail due to clashing names when you
try and revert to a global name space (raised as a separate bug)

This patch also improves the group support in the KVS backend and
cleans up string quoting in the 016 migration fucntions, and fixes an
issue where the SQL update_project was not updating a change in domain_id.

Change-Id: I8f0df0e1bf84bfd26b8ef5505fe5fafd930dc78b
Update the Keystone policy engine to the latest openstack common

Fixes Bug #1126037

Change-Id: I246bc9c0c2eb0f4af97c11588c80e4bcea06e747
Remove old, outdated keystone devref docs

The doc/source/old directory contained several docs
that were marked as 'old' and hadn't been updated for more
than a year.

This patch simply removes them - they aren't referred to in
any way noticable on keystone.openstack.org.

Change-Id: Ida57e0321be09aa8ddcb966f386132946017cdcb
Disable XML entity parsing

Fixes bug 1100282 and bug 1100279.

Change-Id: I6a7c9e7110e1c7890205d6e4550ab46295c68906
Ensure user and tenant enabled in EC2

Fixes bug 1121494.

Change-Id: If7277f0b4a55aa5be81b354cd4c7ed338a600a62
Merge "Update sample_data.sh to match docs"
Merge "Use oslo-config-2013.1b3"
Merge "Remove old, outdated keystone devref docs"
Merge "Implement name space for domains"
Merge "Update the Keystone policy engine to the latest openstack common"
merging in fix from oslo upstream

Change-Id: I61ae24b305df086a5c48a6d033046d84296023b2
Merge "Ensure user and tenant enabled in EC2"
Merge "merging in fix from oslo upstream"
Merge "Disable XML entity parsing"
Merge "make LDAP query scope configurable"