Update man pages

The man pages were out of date.

Change-Id: I9ce00b06ce2df6fe4f12c3fbeae9ad5ddbdbb13d
Closes-Bug: #1366944
Set LDAP certificate trust options for LDAPS and TLS

We currently only set the LDAP library certificate trust options
when TLS is being used (via startTLS).  If regular LDAPS is being
used, the certificate trust options that are defined in Keystone's
configuration file are never actually set.

This patch sets the certificate trust options for both LDAPS and
TLS cases.

Closes-bug: #1209343
Change-Id: Ieb94b732f623695920feb34995bb863175ddf27a
Update 'Configure Federation' documentation.

Apache 2.4 becomes more and more popular version of HTTP server.
With its release some options required for proper Shibboleth Service
Provider have changed. This patch updates information about ``ShibRequireAll``
options that is no longer valid under Apache 2.4. It also adds
documentation reference so users can read more about configuring Apache
Virtual Hosts along with Shibboleth Service Provider.

Change-Id: Idbec6690fd1d75f078a6bdcaa6388b885387b45d
Add the processutils from oslo-incubator.

This is a module specific add rather than a full sync. The processutils
module will be used to determine the default number of workers for keystone
running under eventlet.

Processutils sync'd from oslo commit hash 6a60f84258

Change-Id: I6cbca7d54ca97cce962d3cc1131388840ddf9a7c
Related-Bug: #1371154
Set the default number of workers when running under eventlet

Keystone now defaults to n-cpu as the number of workers under eventlet with
a minimum number of workers when auto-calculating the number of 2.

This behavior can be overridded by changing the `admin_workers` and
`public_workers` configuration values in the Keystone config file.

Change-Id: I482cfef7ee14e995c6fb206bcef412957c54f491
Closes-Bug: #1371154
Safer check for enabled in trusts

For some LDAP backends, the enable attribute is not
directly set.  Since we have a wrapper function in identity/core,
we can use that instead.

Adds tests that disabling trustor or trustee prevents
trust execution.

Closes-Bug: 1367952

Change-Id: I6d3c26e0e6e6c0d27ea7b910340fae5792eaceda
Updated from global requirements

Change-Id: I457150384920e608998243aeb7d872742125dc22
Merge "Update 'Configure Federation' documentation."
Merge "Add the processutils from oslo-incubator."
Merge "Safer check for enabled in trusts"
Merge "Set the default number of workers when running under eventlet"
Imported Translations from Transifex

Change-Id: I56739d765c631e3fe328f1d36ce26420eada4517
Merge "Updated from global requirements"
Add info about pysaml2 into federation docs.

pysaml2 is only required for Keystone2Keystone federation. Due to code
structure, ``pysaml2`` needs to be installed in order to enable
federation extension. Since federation is an extension all the
dependencies are not in the requirements.txt file and will not be
installed by default. This patch updates federation docs adding
information that the library must be installed by hand.

Change-Id: Icc0b3b5cc0e22950a85bb58bbd3631c911be8621
Merge "Update man pages"
Do not run git-cloned ksc master tests when local client specified

There is no reason to run both the KSC Master test and a locally
specified keystoneclient. If the local keystoneclient path is set
only use the KcOptTestCase not the KcMasterTestCase.

Change-Id: Ib9a1e06b2e760a97e3318263b85631c436e23141
Closes-bug: #1371428
Mock doesn't have assert_called_once()

Mock doesn't provide assert_called_once, switch to the right
function.

Change-Id: I0e97f2e3b5a0e0b36c2ae276bdc67b00e9f2179f
Merge "Imported Translations from Transifex"
Merge "Mock doesn't have assert_called_once()"
Merge "Do not run git-cloned ksc master tests when local client specified"