Need to use _() to handle i18n string messages

Partial-Bug: #1220502
Change-Id: If31dd659794743837e2e494a2b6ae4488ef6ca32
Move CA key from certs directory to private directory

Unlike certs which are public keys are private. The CA key file was
improperly located in the certs directory with the public certs. It's
vital to protect the CA key, it's one of the most security sensitive
files in the system. We already had a private directory for keys,
/etc/keystone/ssl/private where the signing key is located. This fix
moves the CA key into /etc/keystone/ssl/private from
/etc/keystone/ssl/certs.

We also update all relevant files to note the change. During so it was
observered etc/keystone.conf.sample used the wrong parent directory
/etc/keystone/pki, the directory /etc/keystone/ssl is the directory in
actual use.

Fixes: bug #1206254

Change-Id: I014e9f79093a6aa59cd5b3bb6cefa4c6dced67a6
Fix mysql checkout handler AttributeError

If the mysql_on_checkout handler encountered an error due to
disconnect, it would fail with an AttributeError,

 AttributeError: 'module' object has no attribute 'warn'

This is because it used the logging module where the LOG logger
should have been used.

Change-Id: Iae8a9bd4aeee6e35508059c20b92d70c36232963
Closes-Bug: #1234873
Handle DB2 disconnect

If the DB2 server was restarted, database connections would fail,
requiring a restart of the Keystone server.

This change adds an on-checkout handler for DB2 similar to the
MySQL handler.

Change-Id: Ie53d9606edac408401961fc6526bb7c99baa836a
Closes-Bug: #1231657
Sync db.sqlalchemy

This brings in db.sqlalchemy from oslo-incubator commit
c2dcf6e81906288d3f3d66e2686635522ac69f71

Change-Id: I35eebedcc12500b6279634a845e5deca0614a642
Fixes broken doc references

The references in configuringservices.rst did not resolve to
html addresses and were not referenced correctly in the browser.
This new fix will use the preferred way to cross reference documents.
Has the disadvantage that if the reference changes, it need to be
updated at severeal places in the document.

Change-Id: I3b8f71a95e66266b569aa1141985e47f1f4554c3
Closes-Bug: 1232878
Catch the socket exception and log it.

Closes-Bug: #1186394
Change-Id: I8aefe54deaa44427c6bb92cf439545e94902fb52
remove the nova dependency in the ec2_token middleware

Change-Id: I34812522b55e38d3ea030638bbae75d65f507c90
Closes-Bug: #1178740
Use abstract base class for identity driver

Use the abc module for managing abstract base classes in the driver
layer.

bp abstract-base-class-drivers

Change-Id: Ifc3b7c158a3a26ca0295e5e133d0108a357b1e37
Use abstract base class for trust driver

Use the abc module for managing abstract base classes in the driver
layer.

bp abstract-base-class-drivers

Change-Id: I84fa24bf636e13d39544c2a811f92f62c538b100
Use abstract base class for assignment driver

Use the abc module for managing abstract base classes in the driver
layer and add missing methods to concrete classes.

bp abstract-base-class-drivers

Change-Id: I91b20ff2f7fd591ea51da619a76044907a7f0c76
Use abstract base class for credential driver

Use the abc module for managing abstract base classes in the driver
layer.

bp abstract-base-class-drivers

Change-Id: Iae65d406bdb65f5ae0fc08f0c1d4b48890eca889
Use abstract base class for catalog driver

Use the abc module for managing abstract base classes in the driver
layer and add missing methods to concrete classes.

bp abstract-base-class-drivers

Change-Id: If66b9bd3ebcfc3a59151b52a46407a36d2a9352b
Use abstract base class for auth handler

Use the abc module for managing abstract base classes in the driver
layer.

bp abstract-base-class-drivers

Change-Id: I302a9bf0ac3aea2a2f687e0ceda7e107c0c11539
Merge "Sync db.sqlalchemy"
Merge "Fix mysql checkout handler AttributeError"
Merge "Handle DB2 disconnect"
Don't use default value in LimitingReader

We can't simply pass the None default on to the read operation as this
default is handled differently between different wsgi implementations.

Change-Id: I337e797b8dee3dfcf9299fe361cf197a176c8fe2
Fixes: bug 1213106
Adds more uniformity to identity update_user calls

 * It was not possible to change a user's name using the KVS driver.
 * The KVS driver was not filtering the user dict before handing it
   back to that caller.
 * Adds a test to the LDAP driver to explicitly show that changing a
   user's name is not allowed.

Related-Bug: #1214686
Change-Id: Ia0951a58ef09833849d3eb5e714c7efbd901f5c5
Merge "Need to use _() to handle i18n string messages"