Add testcase for coverage of 002_add_endpoint_groups

There wasn't unit test coverage for (keystone.contrib.
endpoint_filter.migrate_repo.versions.002_add_endpoint_groups).

Change-Id: I902ff28a82a964f19835d2b16e46501e45fb1371
Updates package comment to be more accurate.

Change-Id: I980b9fb37516f5775f11a01d93e82d5349b8850a
Refactor FakeLdap to share delete code

FakeLdap is changed to implement delete_s using delete_ext_s.

Change-Id: Ibf63f6e13da830b57a9f7ea5b9689d52d7bdf690
Remove unused cache functions from token.core

With the move of functionality from token.core to token.persistence
the cache functions and import are no longer needed in token.core.

Change-Id: I97c96fff64b5c952155c4054df05b1b3ec3a83c5
Remove duplicated assertion

"assert_domain_enabled" method is called within "assert_user_enabled", no need perform duplicated assertion

Change-Id: I4a7895bbda614bbf31b3d3c1805389aa4465b2fb
Signed-off-by: Dave Chen <wei.d.chen@intel.com>
Handle default string values when using user_enabled_invert

When the user_enabled_invert setting is being used, values returned
from LDAP are ultimately converted to a bool type when we reach the
inversion logic.  If the user_enabled_default value is used due to
no value being returned from LDAP, the type is a string.  This causes
the inversion logic to be evaluated incorrectly, as 'not' will return
False for any non-empty string.  This results in disabled accounts
that should be enabled.

Change-Id: Id7b024c12815748305458ca05fc8f8a6324c1908
Closes-bug: #1376053
Fix tests comparing tokens

There were tests that verified that the PKI token body could be
encrypted with CMS and compared to the token ID in the response.
This test isn't safe because the token body may be different than
the token encrypted with CMS since the order of items in the dict
can change.

The fix is to change the test to decode the PKI token ID and
compare that to the response body JSON instead.

Change-Id: Icc649b96071ff084d5c76f2ea2bcf3ecb08a0351
revise docs on default _member_ role

Closes-Bug: 1330132
Change-Id: I3d9647ee6e537b304191dfa5e34e56122c11cd68
Merge "Handle default string values when using user_enabled_invert"
Merge "Remove duplicated assertion"
Add an XML code directive to a shibboleth example

By using the code directive the doc generated adds some basic
syntax highlighting, making it much easier to read.

Change-Id: I865085b833dbeba841a4de9111167d5e7aafba98
Merge "Remove unused cache functions from token.core"
Remove identity and assignment kvs backends

As part of deprecating the kvs backends, this patch removes those
for identity and assignment.

Partially implements: bp removed-as-of-kilo

Change-Id: I02566b3168b5f1792149b67e582d8e97ff02f8a6
Remove OS-STATS monitoring

One time change to fully remove anything OS-STATS related.

implements bp removed-as-of-kilo

Change-Id: I31416d3e9bd4ea68f56f12269a3c68191403f197
Remove images directory from docs

I can't find a single place these images are used in our docs.
Best I can tell is that middleware docs have a few of them:
http://docs.openstack.org/developer/keystonemiddleware/middlewarearchitecture.html

Change-Id: I6dc36b506452f99488c2a202da5eea518cc51b68
Merge "Fix tests comparing tokens"
Remove deprecated TemplatedCatalog class

Use keystone.catalog.backends.templated.Catalog instead

implements bp removed-as-of-kilo

Change-Id: I0415852991e504677d1d1a81740c72f0bd8fc8bb
Switch LdapIdentitySqlAssignment to use oslo.mockpatch

Referenced bug has been fixed in oslotest 1.1.0

Change-Id: I355798d1024399aca194e826ed8048812e44612b
Fixes an error deleting an endpoint group project

Deleting a endpoint group project fails because the router specifies
a controller method that doesn't exist. This returns a 500 error to
the user for what should be a successful operation.

Change-Id: I3b91d8023d31555893fb944da73633a69d8e286f
Closes-bug: #1377304
Validates controller methods exist when specified

It was possible to specify an invalid controller method in a router.
This will not cause an error until runtime. This change catches the
error much earlier in the application lifecycle. In fact with this
change errors should not be able to pass unit tests even if there is
no specific test for the behavior.

Related-bug: #1377304
Change-Id: Icc5646c143a234127a8b4ac8a74342ef3dca7e80