Setup logging in keystone-manage command.

Change-Id: I7739fa0e2715b00f4a8c1bbdecac00768b5c36d6
Remove obsolete *page[_marker] methods from LDAP backend.

Change-Id: I87a75c9f1cd3f6cb3f233df6e54125f35ae4631c
Rework S3Token middleware tests.

- Split between good and bad tests.
- Add more tests to get to 100% coverage.

Change-Id: Iffd00c2b557e54b122f29f8b0ec7f7ab7a92d16e
keystone : Use Ec2Signer utility class from keystoneclient

The Ec2Signer class has been moved to python-keystoneclient,
so we can remove the internal implementation and import the
keystoneclient version

blueprint ec2signer-to-keystoneclient

Change-Id: I19d8575ab8b972467ce280a6197ae762da1ce790
Unpin pam dependency version

Fixes bug #1133240

keystone has always pinned the pam dependency to 0.1.4

  pam>=0.1.4

this version was released in November 2009 and there hasn't been a
release since. I can't even find a version control repo for the
project.

There's no particular reason to expect a future version would break us
and, indeed, we want to find out about it if it happens.

Change-Id: I2becf47c9d2566e2c3496ae15ca886b737006a92
command line switch for short pep8 output.

Change-Id: I65e9ce051012b3afc9a088423f9d805927604331
update tests/__init__.py to verify openssl version

keystone uses `openssl cms` which does not exist before openssl 1.0.0,
older systems and versions of OS X ship with 0.9.8

Change-Id: I30d58e8d60796536d5d2ed632d32674f216647c3
Enable a parameters on ldap to allow paged_search of ldap queries
This fixes bug 1083463

Change-Id: Ie7ec7f2214b51766d3108a4557c096d9e6989b6b
Imported Translations from Transifex

Change-Id: I347fa92210ee1f3187841bc194eba11053f8c1ef
Merge "Setup logging in keystone-manage command."
Explain LDAP page_size & default value

Change-Id: If7746bf92c29e824369777764877a414dc7a5d6e
Make getting user-domain roles backend independant

There is nothing backend specific in geting the list of roles
for a user-domain, so we should move this function into backends
core.  This also has the affect of now ensuring that the kvs and ldap
support will work, provided the specific backend supports roles on
users and domains.  This is true today for kvs, but support in ldap
for domains is gated by other bugs.

Fixes bug #1131769

Change-Id: Id99accb33fd7cd8d6c37e64e140552c5bfe68349
Merge "Imported Translations from Transifex"
Remove TODO that didn't land in grizzly

This was intended to be removed during grizzly by utilizing centralized
policy storage on /v3/policies -- but such a feature hasn't been
implemented yet beyond the API.

Change-Id: Ie696bc671fc1d6fd05cc1dda376d2be945097845
Merge "Enable a parameters on ldap to allow paged_search of ldap queries This fixes bug 1083463"
Merge "update tests/__init__.py to verify openssl version"
Straighten out NotFound raising in LDAP backend.

Change-Id: If5914f34da318d960f5a2ae8e8b0592d1cbab946
Sync timeutils with oslo

Necessary for the microsecond precision changes

Change-Id: I2571af24b338a5245bc62944a891ed889cf30d4d
Merge "Unpin pam dependency version"
bug 1134802: fix inconsistent format for expires_at and issued_at

Notice we have to use fraction of second precision to prevent PKI token ID
overlap.

Change-Id: Icfc192c08ab5b4db02547ef6f077fa7f32210835