Add testcase for coverage of 002_add_endpoint_groups

There wasn't unit test coverage for (keystone.contrib.
endpoint_filter.migrate_repo.versions.002_add_endpoint_groups).

Change-Id: I902ff28a82a964f19835d2b16e46501e45fb1371
Fixes code comment to be more accurate

Change-Id: I4aaa57b05e9aab2ff223f62bd1f5fe0f37e7f247
Remove trailing space from string

There was an extra space at the end of the debug log string.

Change-Id: I96a231d136a829e049a4e026ed07ff3730eeb388
improve dependency injection doc strings

This also renames the provider_name argument to better convey it's
status as a kwarg for internal use only.

Change-Id: Ie1afee4e37cfa149ddb73a001985c98aa90b97a5
Correct typos in keystone/common/base64utils.py docstrings

Closes-bug: #1366649
Change-Id: Ic3f4a3eb9da303a4da7d532f02f6c6e82a725924
Fail on empty userId/username before query

Rather than attempting to query the database for an empty userId
that results in an error, just raise an error immediately that
has a better error message than one indicating a missing 'len()'
attribute.

Change-Id: I6db54d8f6114337d37be3cab20f60d7905243cba
Closes-Bug: #1368046
Remove unused cache functions from token.core

With the move of functionality from token.core to token.persistence
the cache functions and import are no longer needed in token.core.

Change-Id: I97c96fff64b5c952155c4054df05b1b3ec3a83c5
add --rebuild option for ssl/pki_setup

Currently, if you run "keystone-manage ssl_setup" more than once,
it does not overwrite existing files under /etc/keystone/ssl, and
does not print or log an error message. Now, we add --rebuild option
for ssl/pki_setup to clean up the exist generated files and rebuild
the configure files. Also, if you run "keystone-manage ssl_setup"
more than once, it will print prompt message to tell you take
--rebuild option to rebuild configure files.

Change-Id: Ia1e6830c4c81d5a53317a522c526b79b67de1bce
Closes-Bug: #1308778
Remove duplicated assertion

"assert_domain_enabled" method is called within "assert_user_enabled", no need perform duplicated assertion

Change-Id: I4a7895bbda614bbf31b3d3c1805389aa4465b2fb
Signed-off-by: Dave Chen <wei.d.chen@intel.com>
Fix a spelling mistake in keystone/common/utils.py

Closes-Bug: 1372287

Change-Id: I3f284c2739ff509cfe50536df095e8f79ec108fe
Update architecture documentation

The architecture docs are very dated, and have several references
to tenants, PAM backends, and controllers that don't exist.

Change-Id: I85de743006e7df4fcf8ddbc3afc1a4bcd69583e6
Adding an index on token.user_id and token.trust_id

This is a performance update to ensure that we are scanning the fewest
number of rows on a user delete (causing token revocations). Without
these indexes it is possible to scan all valid tokens, causing
significant overhead, to find the user or trust matching tokens.

Due to selecting the extra column (needed for other matches in
some cases) this can also cause issues with buffer pool sizes.

Change-Id: I202b5c87a221d8dba99d16b0a1baa7546fef093b
Closes-Bug: 1332666
Clean up the Configuration documentation

Lots of lines that were well over 80 characters; several code
examples were missing code-block syntax. General inconsistencies
between what is actually available vs. what is documented.

Change-Id: I726e13aa7c333973cf92bbe1550b939c634db493
Fix failure of delete domain group grant when identity is LDAP.

When deleting a domain group assignment while using a non
domain-aware backend, such as LDAP, an AttributeError was being
raised when trying to find all the relevent tokens. This was due
to a hang over from when you had to pass domain scope to
list_user_in_group(). This only affected domain group grants,
by luck we got away with it for group project grants.

Change-Id: I47b61886698232a7d3dfb4b502d61723cb0eb786
Closes-Bug: 1373113
New section for CLI examples in docs

In an effort to make 'configuration.rst' less bloated, move
common cli examples to their own section. Changed the titling
so they are no longer subtitles of another section.

Change-Id: I2785cbe8563e5adcae65aebf88152a5e055c28a9
Add version attribute to the SAML2 Assertion object.

Attribute ``version`` in the SAML2 Assertion should be non-empty.

Change-Id: I46f4b0c45e38cc1315e320369a2ba7d2279eb16f
Closes-Bug: #1373961
Mark k2k as experimental

Clearly label that running keystone as an IdP is experimental.

Change-Id: I8eac8b83110aef2fc9cb638eca6784c097bcb22c
Merge "Fix a spelling mistake in keystone/common/utils.py"
Add placeholders for reserved migrations

This patchset should land immediately after the opening of the Kilo
development cycle.

Change-Id: Idec4f797ea117988b71315aa6dc561b8a882183c
Updated from global requirements

Change-Id: I308fe2db811cc97185956ef60a739026ba815013