Make getting user-domain roles backend independant

There is nothing backend specific in geting the list of roles
for a user-domain, so we should move this function into backends
core.  This also has the affect of now ensuring that the kvs and ldap
support will work, provided the specific backend supports roles on
users and domains.  This is true today for kvs, but support in ldap
for domains is gated by other bugs.

Fixes bug #1131769

Change-Id: Id99accb33fd7cd8d6c37e64e140552c5bfe68349
Change exception raised to Forbidden on trust_id

Change-Id: I30f89d52ade45335d2f29b8454438d0dd3b20a97
unable to load certificate should abort request

If openssl returns with a command line error (3), we assume
the PKI certificate is not properly installed.  Added
'try ... except' blocks to cms_sign_text and cms_sign_token
calls.

Fixes: bug #1103569
Change-Id: Iad98738e990d3ab1ec0d0015840d76cf948ae560
add missing attributes for group/project tables (bug1126021)

add and assign default values for optional attributes to all backends

Change-Id: I54fe234b919162c3056c14f1f06c4de876080fb9
v3 endpoints won't have legacy ID's (bug 1150930)

Change-Id: I8cc6bac7b0e549db7755df3a993db7d563907324
from tests import

Makes the resolution of local imports work
when running individual tests.

Bug 1152326

Change-Id: I72f54bdbb60a6d7acf32bdbdc02d7bce69add84e
Delete tokens for user

Bug 1152283

There was a typo in the function that showed it
was untested.  This fixes the typo and adds a unit test

It also corrects the logic in the KVS backend to ignore
the user_id field when listing tokens by trust_id

Change-Id: I5325c04e53a09fce68f3d350e7502341a398aa05
Merge "unable to load certificate should abort request"
Merge "add missing attributes for group/project tables (bug1126021)"
Merge "v3 endpoints won't have legacy ID's (bug 1150930)"
bug 1133526

modify "expires" to "expires_at", most of the changes were
already done by Guang-yee, added a pki-token-id test

Change-Id: Ib3f39620db18aaea6b0cb5d0ae9c290afd870605
Run keystone server in debug mode.

keystone currently not able be to started in
debug mode because pydev package in
pycharm-debug.egg is removed. Fix is provided
with the correct import statement.

Fixes Bug #1135306

Change-Id: I5588b768a4807b79ae1dabd7550cbee7d2c7505e
Make Keystone return v3 as part of the version api

The keystone "get version" api currently fails to list v3
as a supported api.  It should now do this, along with v2 (which is,
of course, still supported)

Fixes Bug #1148186

Change-Id: Ie88bf941123702d2f7e2ecf6cecb1fa937ca1e52
Merge "Change exception raised to Forbidden on trust_id"
Merge "from tests import"
Merge "Make getting user-domain roles backend independant"
Merge "Make Keystone return v3 as part of the version api"
Merge "bug 1133526"
Merge "Run keystone server in debug mode."