Stronger assertion for test_user_extra_attribute_mapping

The assertion was checking if the value was in the list, but it's
actually the only element in the list.

Change-Id: I8666736ec0eec5a859e646a3e0328a8e6baccde7
no one uses macports

update the dev docs for OS X to use Homebrew instead of macports, and
reflect the necessary dependencies for 10.9 Mavericks (2013) instead of
10.7 Lion (2011).

Change-Id: Ia1a06a15b9f03777fe9d3e77a37eb395f15a4706
Add mailmap entry

Add mailmap entry for my email address

Change-Id: Ia46c28c86ef3f440556b1b027d2bf0a7f3e721c5
Fix version links to docs.openstack.org

Remove PDF link.
Replace deep html links with links to the docs.openstack.org site.

Change-Id: Ic7c2218bf43a221e8d753a910fdfb2243851214d
Closes-Bug: #1313127
Regenerate sample config

The sample config file was out of date, so regenerated it with

 tox -e sample_config

Change-Id: Ib17ebcbc1b4c929da8ce3f1a31df33a3b798522d
remove a few backslash line continuations

Change-Id: I278eeaacf349691d436b17a2bc1f2315c3ab8429
Refactor test_auth trust related tests

The tests in the AuthWithTrust fixture had many dependencies on global
variables that were not necessarily used; for instance, every time the
setUp function is called, there was a new trust created. This was ran
even for classes that don't need the creation of this initial valid
trust.

This commit gets rid of this behaviour, thus making the test less
dependent on the fixture's state (class variables) in favor of a more
on-demand approach to getting trusts and tokens.

Change-Id: I64752702cc8a328463df15591e3f4c082266ef6d
Add note for v3 API clients using auth plugin docs

Change-Id: I3d07c3f27ac38f9ead0481271460b3b3633b8c1d
Closes-Bug: #1311324
Reduce log noise on expired tokens

If a token has expired, we now check the username field exists before
trying to len() it, thus reducing log noise.

Change-Id: Ie463607e4fb7ca671f9dad5559b87fe7721be4bd
Closes-Bug: #1319997
Merge "Add mailmap entry"
Merge "Refactor test_auth trust related tests"
Merge "Add note for v3 API clients using auth plugin docs"
sql migration: ensure using innodb utf8 for assignment table

During migration from 37 to 38, migration fails to create assignment
table if we don't explictly specify InnoDB and UTF8 charset.

Closes-bug #1320855
Signed-off-by: Emilien Macchi <emilien.macchi@enovance.com>

Change-Id: Icd88202d2f020aea02514e49c2d07e349c74949f
SQL fix for get_roles_for_user_and_project user=group ID

When there was a role assigned to a group with the same ID as a
user, the SQL assignment backend would incorrectly return the
assignment to the group when requesting roles for the user via
the get_roles_for_user_and_project method.

With this change, assignments to a group with the same ID are not
returned for the user when calling get_roles_for_user_and_project.

Change-Id: Id3d6f66c995e65e37d909359420d71ecdde86b69
Partial-Bug: #1309228
Mapping engine does not handle regex properly

Currently, if there is more than one assertion value (the list of
group ids returned from the idp). Then when using regex to compare
again the mapping values, only the first values are used.

Change-Id: Iba7d455ef0d5fc2d4ac16f4a7eb553845270fb2c
Closes-Bug: #1321536
Remove all mostly untranslated PO files

We now only import PO files that are at least 75 % translated,
so we can delete now all other PO files. The patch only
removes the mostly untranslated files. Once a file becomes mostly
translated, the bot will import it again.

This patch leaves the mostly translated languages Australian English,
US English and Brazilian Portuguese in.

Change-Id: Ib26bc5147f0dc3d49f9b97bc0b8682a8c62c81b8
Closes-Bug: #1317794
Cleanup of ldap assignment backend

Some minor changes were made.

Change-Id: I1c70f3b3cfd01d79ace3869985841c29b42357e8
Merge "Remove all mostly untranslated PO files"
LDAP fix for get_roles_for_user_and_project user=group ID

When there was a role assigned to a group with the same ID as a
user, the LDAP assignment backend would incorrectly return the
assignment to the group when requesting roles for the user via
the get_roles_for_user_and_project method.

With this change, assignments to a group with the same ID are not
returned for the user when calling get_roles_for_user_and_project.

Functions were added to compare DNs more accurately based on the
LDAP RFCs.

The fakeldap code was changed to normalize the values when
comparing values for checking if the values match the filter.

Co-Authored By: Nathan Kinder <nkinder@redhat.com>
Co-Authored By: Adam Young <ayoung@redhat.com>

Change-Id: Ia6f1ae2e3af1e968f1a393bd4f2f38812a88a5d0
Closes-Bug: #1309228
Merge "Fix version links to docs.openstack.org"