Remove trailing space in tox.ini

Change-Id: Ic523b92861ee1264b29cd12ece3fe12c177eed3f
JSON Home data is required

For the initial implementation, the JSON Home data was optional. Now
that JSON Home is implemented, JSON Home data is required.

bp json-home

Change-Id: I5af70401fba892166cd107264e9d5eafe6bcbd03
Update the federation configuration docs for saml2

Since 'Re-engineered Federation' has merged, we should update the
configuration docs accordingly. We want to expose the mapped
class.

Change-Id: I8c53f7a3da4bdfb563f43cd0eefdf9d66fc57753
Work toward Python 3.4 support and testing

Change-Id: I8d4950000f4c4d0bbc06c8eda78589c40988e5fc
Add rst code-blocks to a bunch of missing examples

Several examples were either missing code-blocks entirely,
this patch added either bash or python, so the rendered HTML
is nicer.

Change-Id: Ia145dc78a871dc27cf0926ea1ef9cf9b6df564b7
Avoid conversion of binary LDAP values

A few of the LDAP searches performed in the identity and assignment
LDAP drivers do not specify the list of attributes to return, which
causes all attributes present in the LDAP entry to be returned.  We
attempt to convery these values from utf8 to unicode, which fails
when we encounter a binary value.  This patch addresses this problem
in two ways.

The first is to only request the attributes that we actually need
returned from the LDAP server.  This avoids potential binary values
that we do not even need to be concerned with.

The second thing this patch does is to make our conversion code
more tolerant by ignoring attributes that contain binary values.  If
a binary value is present, we simply skip over that attribute in
the conversion and log a debug message.  We should not be encounting
binary values in a typical Keystone deployment, but this gives us
some protection just in case we do encounter a binary value.

Closes-bug: #1355489
Change-Id: I62325ab9c75bac67cca329fb7bd3c74aea7d2867
Fix oauth sqlite migration downgrade failure

The oauth migration downgrade was failing because it tried to drop
a constraint which sqlite doesn't support. The code tried to not do
the drop on sqlite but didn't check for the sqlite engine properly.

Change-Id: Ie7900d352a26900f913bdefe1eb93d511283efc0
Closes-Bug: #1366606
Prevent domains creation for the default LDAP+SQL

This patch is supposed to fix the bug 'Unable to delete domain if user
from other domain was added', but because of the recent changes this
should be done by configuring domain-specifc LDAPs. However the original
scenario must not be reproducible.

The rule is that if you have the standard LDAP driver for identity
(without configuring domain-specifc LDAPs), then you can really only
have the default domain. However currently it's possible to create
domains with the folowing configuration:

[identity]
driver = keystone.identity.backends.ldap.Identity
[assignment]
driver = keystone.assignment.backends.sql.Assignment

At the same time such new domains can not be updated nor deleted. This
fix prevents new domains creation for such configuration.

Also this fix adds an additional test to MultiLDAPandSQLIdentity to make
sure that the original bug has gone.

Closes-Bug: #1262360

Change-Id: I3baee40f74cefaae601aea34e75630cc618ac31a
correct typos

Change-Id: Idaeb78d66a7fdb4f75774e8a407d963f34f2bdeb
Fixed typo 'in sane manner' to 'in a sane manner'

Change-Id: I7140d0472f9adc7cd33eae2d089a5ca31fe174a2
Update paste pipelines in configuration docs

Currently we use a really old value for an example paste pipeline,
this patch updates the example text to the most recent value.

Change-Id: I447c16a088f5394e1599018c6011da010f8d3e0d
Merge "Avoid conversion of binary LDAP values"
Fixes formatting error in debug log statement

Closes-Bug: #1366988
Change-Id: Ifceb7c986986e94566bcb10df2f750ae0466f3df
Update the revocation configuration docs

Since the revocation extension is enabled by default, I think we
can drop it's experimental tag, and replace it with an INFO one
that says it's enabled by default.

Change-Id: If24994287381c1edb1d8b7e947d0661e2980b240
Stop skipping LDAP tests

There were some tests that were still being skipped even when the
bug has been fixed.

Some tests still need to be skipped even though the bug they're
skipped for has been fixed.

Some of these tests just don't need to be skipped.

Change-Id: I080c248f4136c8074f232530ad7e5976140471d2
Merge "Fix oauth sqlite migration downgrade failure"
Merge "Work toward Python 3.4 support and testing"
Merge "Remove trailing space in tox.ini"
Merge "Update the federation configuration docs for saml2"
Merge "correct typos"