Set defaultbranch in .gitreview to stable/folsom

This allows people run git-review without any arguments.

Change-Id: I2b2488ffffd783b64e5c760324e7d4a00d5a39db
Fixed bug 1068851. Refreshed new crypto for the SSL tests.

Change-Id: Ib37547923a9da347835a9b2c51deae6b954e1ead
(cherry picked from commit 4f71ec9e5dd632b1c4586b63f89525a6161c2b57)
replacing PKI token detection from content length to content prefix. (bug 1060389)

Change-Id: I68b0e4126f2e339c04271fd982f5f5dab198c630
bug 1068674

Redo part of bp/sql-identiy-pam that was accidently undone by bug 968519.

We encapsulated the call to utils.check_password with a local method,
_check_password, to make it easier to subclass Identity. This allows us
to use a different password checker without having to replace the entire
authenticate method in our code.  The fix for 968519 accidently removed
the call to the local method. *This* fix puts that call back in.

Updating comment because Jenkins failed due to build timeout in
unrelated test.

(cherry picked from commit 0dc2e9ca37497597aa49439e3d3e71c22f30b515)

Change-Id: I69a3ba2d5a62e4c600edab7ef2cc07413c7360cc
pin sqlalchemy to 0.7

sqlalchemy 0.8.0b1 breaks some dependencies such as sqlalchemy-migrate, pin the version until we fix them

Fixes bug #1073569

Change-Id: I6620276bf8f0a7cbc1d51aa226cd33c512e59a48
Merge "bug 1068674" into stable/folsom
Properly list tokens with a null tenant

We store the tenant as a null value in json, so checking to see
if it exists is not sufficient. This makes the check safer, checking
for existance and not null before continuing.

Fixes bug 1078497

Change-Id: Ida1b958e5df6f93a30efae0d3f71df668751ff81
Ensures User is member of tenant in ec2 validation

It is possible that a user is no longer a member of a tenant when
they attempt to use an ec2 token. This checks to make sure that
the user still has at least one valid role in the tenant before
authenticating them. This should automatically work for the s3
version as well since it is a subclass.

Fixes bug 1064914

Change-Id: Ieb237bae936a7b00ce7ba4d4c59aec6c7a69ec21
Merge "Properly list tokens with a null tenant" into stable/folsom
Ensure token expiration is maintained

Ensure token expiration is maintained. Fixes bug 1079216.

Change-Id: I0ce53f106ab6d95916fdc9797cb9d8bf09132a91
Bump next version to 2012.2.2

Change-Id: I3b1ab6c059d152b59a18d7f7e3c799258e05ec68
Ensure serviceCatalog is list when empty, not dict

Fixes bug 1087405.

Change-Id: I152c7f418a66ccfe541e26efe75b59bffa6c3849
Bump next version to 2012.2.3

2012.2.2 has been released without Keystone so prepare for 2012.2.3.

Change-Id: I8c884b7d6ff38e70326b031cfae9c583c5eeb7e0
Merge "Ensure serviceCatalog is list when empty, not dict" into stable/folsom
Unparseable endpoint URL's should raise friendly error

  fixes bug #1058494

Change-Id: Id89c530e2f4e7dcf0db03515afb8b2a85fbf8077
Fix catalog when services have no URL

This fixes bug #1061736

Change-Id: Ic8f7a45dfabb2e3fb40f6aa6cd4c0f29c13f2c77
Signed-off-by: Julien Danjou <julien@danjou.info>
Test 0.2.0 keystoneclient to avoid new deps

As described here:

  http://lists.openstack.org/pipermail/openstack-dev/2013-January/004240.html

keystone tests check out various different versions of keystoneclient
and uses them to run a set of tests against the keystone API.

A recent change to keystoneclient in version 0.2.1 introduced a new
dependency on the requests module which is not currently listed as
a dependency for keystone's tests.

Rather than chasing latest keystoneclient on stable/folsom, let's
just test the 0.2.0 version.

Change-Id: I730f0d7e227c76ae77fdb012feec9ce41ab8d8d2
Merge "Unparseable endpoint URL's should raise friendly error" into stable/folsom
Merge "Fix catalog when services have no URL" into stable/folsom
Render content-type appropriate 404 (bug 1089987)

Change-Id: I8d6acdaa7f8220341bca15cc4acba807910f6891