Merge "Update sample keystone.conf file"
Merge "fix flake8 issues"
Merge "Updated from global requirements"
Merge "Properly invalidate cache for get_*_by_name methods"
Fix the typo and reformat the comments for the added option

Change-Id: I01c471976f2c6d80bfe629b61ab75b81d6cabb1a
Related-Bug: #1175904
Only emit disable notifications for project/domain on disable

Now that the original (pre-update) version of the project or domain
is available, before a 'disable' notification is emitted, check to
see if the project or domain is already disabled. There is no reason
to perform the 'disable' actions and emit a 'disable' notification
unless the project or domain is changing state from 'enabled'.

Change-Id: I4a7b6a5c638f9faf6bd525553c81e379be562471
Merge "Fix the typo and reformat the comments for the added option"
Merge "Fix 500 error if request body is not JSON object"
Document pkiz as provider in config

The pkiz provider wasn't documented as an option in the sample
config file.

Change-Id: I2657f46cb02d5bf044c6b9974257b41a0e839995
Merge "Ignore broken endpoints in get_catalog"
Merge "Document pkiz as provider in config"
test REMOTE_USER  does not authenticate

if external (and all other methods) are missing  this test ensures
that  a request with REMOTE_USER set  that the token would come
through as unauthenticated

Change-Id: I08a0117773bd4efd8e220306de7ba82df73f7403
Kerberos as method name

To date kerberos has been supported by the "external" method
name.  However, the Client plugin architecture needs to refer to the
method name, and we do not want to expose to the client the
difference between kerberos as performed by an external module or
an eventual kerberos-in-eventlet style implementation.

If the "external" plugin is missing, the old code would throw an
exception attempting to process "REMOTE_USER" behavior.  Now, if only
'kerberos' is specified, this is checked and skipped.

Blueprint: kerberos-authentication
SecurityImpact:  Minimal, as Kerberos is already used via external,
                 this  just changes the main way it is named.

Change-Id: If698fc1d0751cded556825b081539da4dd51275e
Test `common.sql` initialization

Change-Id: I335dec0fe8bde0121324da80087b761bbf8104f7
oslo.db implementation

Use oslo.db library instead of common.db code.

Change-Id: I3019e35bf961b50cbd3d9737ba7c08b3f20536a0
Merge "test REMOTE_USER  does not authenticate"
Merge "Kerberos as method name"
Migrate ID generation for users/groups from controller to manager

The implementation of multi-backend unique IDs requires that the
manager layer is in charge of ID generation.  This patch lays that
ground work.  No functional change should be observed from this patch.

Partially Implements: blueprint multi-backend-uuids

Change-Id: I2253aa9872d1c9950ef35851bd3f11d7ab5e433b
Don't set sqlite_db default

Keystone doesn't use oslo.db's sqlite_db option so there's no need
to set the option. Setting the default was required with
oslo-incubator's db code but it's now optional so we can remove it.

Change-Id: I7a012f40f924f83b878ee325f8ca26bdbdb9ac1d
Merge "remove unneeded definitions of Python Source Code Encoding"