Imported Translations from Transifex

Change-Id: Ic3ae662ce418f2548006de27ae22941a31adcb8d
Support timezone in memcached token backend

This patch fixes bug #1221087.

Replaces time.mktime() to calendar.timegm() in utils.unixtime()
to get correct expiration time.

After this patch, Memcached token backend does not depend on timezone.
So remove the section "Memcached and System Time" in configuration manual.

DocImpact

Change-Id: I17233c8a79d01a37abdbd46934ad486ddc8caec9
Merge "Imported Translations from Transifex"
Merge "Support timezone in memcached token backend"
Changes template header for translation catalogs

New translation catalogs will be generated with the organization set to
'OpenStack Foundation' in the header.

Change-Id: I0da323113030c6a68b3c4bbdd94053639312c594
Partial-Bug: #1214176
Changed header from LLC to Foundation based on trademark policies

Fixes: Bug 1214176

Change-Id: Ie937081a53d377671b8b88f422642c8131002f88
Merge "Changed header from LLC to Foundation based on trademark policies"
Fix incorrect test for list_users

The current test would not fail if incorrect data was returned by
the driver.  The list_roles test also has the same issue.

Fixes bug 1222574

Change-Id: Icc5e76e9453436ac208c5f262d0dd4082b700d02
Import core.* in keystone.tests

This will allow us to 'from keystone import tests' to import core
test functions. This is consistent with other modules in Keystone.

Change-Id: I8c3044cad85fee37a237264da198465fcb3c0898
Remove CA key password from cert setup

Password protection in the current implementation is not actually
applied despite the presence of the ca_password config
option. Password protection is of marginal benefit because the
password must be stored in a file using the same protections afforded
to the key file. Password protection currently is not utilized with
externally provided keys.

Remove the ca_password config option and remove the use of the various
password related options to the OpenSSL commands whose net effect was
not actually accomplishing anything.

See the bug report for a thorough description of the issues.

Change-Id: Iaeb97f2338c4d3c6e770b410dee8f1b62778b561
Fixes: Bug #1214016
Close each LDAP connection after it is used,
following python-ldap docs

Fixes bug 1172164

Change-Id: If20e3c1cf3deac5ce4217ce0324f8c91c2e30f92
Fixes for user response with LDAP user_enabled_mask

This fixes a couple of problems with the returned user object
when the Keystone server when the LDAP Identity backend is
configured and the user_enabled_mask setting is not zero.

First, the returned user had the masked value (e.g., 512) when
a user was created rather than the actual enabled value (true
or false).

Second, the Keystone server was returning the enabled_nomask
attribute in the user entry when users were listed or updated.

This change makes it so that the server returns the enabled
value as a Boolean when a user is created. Also, the
enabled_nomask attribute is not returned when users are
listed or updated.

Change-Id: I8a22aec3377ffd335095e645c1b3d65008dd0cf2
Closes-bug: #1220945
domain-specific drivers experimental in havana

Related-Bug: 1218094
Related-Bug: 1217017
Change-Id: I5fecaa8c6531b2b38c914908ecff8a33de67857c
Merge "domain-specific drivers experimental in havana"
Merge "Fix incorrect test for list_users"
Reduce churn of cache on revocation_list

The explicit call to refresh will cause higher-than-average load
under high counts of revocation events.  The simple invalidate ensures
that we don't re-generate the revocation list on revocation event
but only on-demand.

closes-bug: 1220359
Change-Id: I826778843e344be001bbcc832054a0ad446285e7
Merge "Import core.* in keystone.tests"
Tests use "from keystone import tests"

Use "from keystone import tests" rather than
"from keystone.tests import core as test". This is
consistent with how other packages are imported throughout
Keystone.

Change-Id: Ib0b9ace7468c869f226e8d6c5ab1297563463200
Cleanup tests imports so not relative

This change cleans up the imports in tests packages by changing
relative local imports to absolute imports per OpenStack hacking
guidelines.

Change-Id: I63c493b6a263e896f92479996c4fa4f783adff9a
Move gettextutils installation in tests to core

gettextutils.install was done in tests/__init__.py, but this was
not consistent with how test environment setup is done. We have
code to set up the environment in core.py, so other environment
setup should be there. Also, this makes tests/__init__.py cleaner.

Change-Id: I762c8fa715e9c6ec26722fcd9b0ba0f9d613cb43