Expose TLS options for LDAP
Merge pull request #239 from dirkmueller/fixup_keystone_ad

Expose TLS options for LDAP
When we have the cached value of keystone settings, return it directly

No need to execute some other code.
Cache keystone node per instance when fetching keystone settings

Since keystone settings depend on each cookbook (due to the service
user/password), we can't cache the settings per keystone instance.
However, we can avoid searching for the keystone node all the time by
caching the node per instance.
Reorganize KeystoneHelper.keystone_settings
Use helpers from new crowbar-openstack cookbook
Fallback to "default" instance of keystone on fetch of keystone settings
Merge pull request #240 from vuntz/improve-cache

Make cache in KeystoneHelper.keystone_settings more useful
Merge pull request #241 from vuntz/openstack-helper

Use helpers from new crowbar-openstack cookbook
Make keystone.conf owned by root:keystone, instead of keystone:root

We don't want the keystone user to be able to write the file.

Also, don't have keystone own directories it doesn't need to own.
Merge pull request #242 from vuntz/fix-owner

Make keystone.conf owned by root:keystone, instead of keystone:root