Mark strings for translation in ldap backends

There were several human-language strings not marked for
translation in the ldap backends.

Change-Id: I6e1d1f27bcd4bacf6534e5cb4982e9401dde3f36
Refactor tests move assertValidErrorResponse

assertValidErrorResponse wasn't used in the test_catalog module
anymore; it's used in the rest module.

Change-Id: I0442e1e07b6c5693ebed29a57dbe8e070b367c44
Remove auth_token middleware doc

The auth_token middleware is in python-keystoneclient now so the
docs for it should be there.

Change-Id: I9811b648e92e16b099764f40aa67dd084f445088
Update oslo-incubator fixture to 81c478

This updates the oslo-incubator fixture module level to commit
hash 81c478

 $ git checkout 81c478
 $ python update.py --nodeps --base keystone \
     --dest-dir ../keystone --modules fixture

The changes include a new feature in the Config fixture to
register new config options.

Change-Id: Ia01062d160b6daaa12c87cc77166017be3fa2f30
Add test for list project users when no user

There was no test that shows what happens when you list project users
(GET /v2.0/tenants/{tenant_id}/users) and a user with a role on the
project doesn't exist. The server returns a 404 Not Found for the user.

bp no-check-id

Change-Id: Iba8836200c22eb5d744b42114cc8c6e864c3e02f
Remove unused method _get_domain_id_from_auth

The _get_domain_id_from_auth method in
keystone.token.controllers.Auth is not used or tested, so remove it.

Change-Id: Ifb20d419f32cbddf7e3fb126b5b8ecfaa50b582b
KDS fix documented exception.

The set_key method raises GroupStatusChanged when you try to
change the 'group' of an existing key.

Change-Id: Ibe398a539a9a9574612e0ca0505322edab76b1c5
Fix test_provider_token_expiration_validation transient failure

The keystone.tests.test_token_provider.TestTokenProvider.
test_provider_token_expiration_validation test would fail if the
tests weren't run before the sample token expired. This could
happen if the system was slow and the previous tests took a long
time causing a potential transient failure.

Change-Id: Ia662fcdc0cd26568fa8ea9f27d0a34cb1bfe46e6
Closes-Bug: #1278550
Add version routes to KDS

Add the first real endpoints to the KDS server starting with the version
discovery endpoints.

Blueprint: key-distribution-server
Change-Id: If359a683e1c9614855d7c20e9f8009c2198a05f7
bad config user_enable_emulation in mask test

Use the correct key user_enabled_emulation in the test.
Closes-Bug: #1282306

Change-Id: I8cd2248a9bcff12489de30368f5f54d02f0854c4
Always hash passwords on their way into the DB

Way back in ed793ad5 a feature was added to detect if a password was
already hashed. If it looked like it was already hashed the password
was put into the database as is. It appears that this was added to
support a migration that was using the identity API to store users
instead of direct database inserts.

Change-Id: I37b575e4db2fa7090c5171b8bc32cf2c57ad6e03
Fixes-bug: #1279849
Remove sql.Base

With the change to use oslo's db.sqlalchemy.sessions, the
sql.Base class isn't doing enough to justify its continued
existence.

This change removes sql.Base.

Part of bp use-common-oslo-db-code

Change-Id: I2fec97187bdca920757585994810f6a8065be4c4
strengthen assertion for unscoped tokens

previously, unscoped tokens with the following structure would have
passed testing:

    {"access": {"token": {"tenant": null}}}

... which wasn't the desired behavior.

Change-Id: I16a718a8936bb155d68510dcf9db8eb4d4223bf4
Fix assertEqual arguments order

assertEqual method's arguments should be in
('expected', 'actual') order.

This patch fixes this problem of the following modules:

* keystone/tests/test_auth.py
* keystone/tests/test_sizelimit.py
* keystone/tests/test_ssl.py

Partially Close-bug: #1277104

Change-Id: Ic1bd330544fa954cd683ece75b953259e70440fe
Merge "Fix assertEqual arguments order"
Keystone doc has wrong keystone-manage command

Fixed the keystone-manage command (--extension should be placed after db_sync)

Amend: making it more readable by seperating command from text

Change-Id: Iaf8dcacaa38cdcbaa867bb6e374a87c00cd45ac3
backport: none
Closes-bug: 1281819
Merge "Add test for list project users when no user"
Merge "Update oslo-incubator fixture to 81c478"
Merge "strengthen assertion for unscoped tokens"
Update config options with helpstrings and generate sample

Restructure the common config to include many help strings to
support using the oslo.config auto-generated sample config file.

Closes-Bug: #1229941
Change-Id: If352b3b816b1e7dc8b5fc3b9c1cb2adab187ffda