commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2014-04-20 11:36:01 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2014-04-14 10:55:04.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2014-04-20 11:36:04.0 +0200 @@ -1,0 +2,6 @@ +Thu Apr 17 12:52:36 UTC 2014 - dmuel...@suse.com + +- update to 2014.1: + * no change + +--- Old: keystone-2014.1.rc2.tar.gz New: keystone-2014.1.tar.gz Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.YRfJRq/_old 2014-04-20 11:36:04.0 +0200 +++ /var/tmp/diff_new_pack.YRfJRq/_new 2014-04-20 11:36:04.0 +0200 @@ -19,7 +19,7 @@ %define component keystone Name: openstack-%{component}-doc -Version:2014.1.rc2 +Version:2014.1 Release:0 Summary:OpenStack Identity Service (Keystone) - Documentation License:Apache-2.0 ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.YRfJRq/_old 2014-04-20 11:36:04.0 +0200 +++ /var/tmp/diff_new_pack.YRfJRq/_new 2014-04-20 11:36:04.0 +0200 @@ -21,7 +21,7 @@ %define username %{component} Name: openstack-%{component} -Version:2014.1.rc2 +Version:2014.1 Release:0 Summary:OpenStack Identity Service (Keystone) License:Apache-2.0 @@ -65,16 +65,16 @@ Requires: logrotate Requires: python-iso8601 >= 0.1.9 Requires: python-keystone = %{version} -Requires: python-oslo.config >= 1.2.0 +Requires: python-oslo.config >= 1.2 BuildRoot: %{_tmppath}/%{name}-%{version}-build # keystone dependencies # To generate a self-signed certificate to be used in demo setups: Requires(post): coreutils Requires(post): crudini Requires(post): python-keystone -Requires(post): python-dogpile.cache >= 0.5.0 +Requires(post): python-dogpile.cache >= 0.5 Requires(post): python-argparse -Requires(post): python-iso8601 >= 0.1.8 +Requires(post): python-iso8601 >= 0.1.9 # NOTE(saschp): We need OpenStack'S fork here: Requires(post): python-sqlalchemy-migrate >= 0.8.2 Requires(post): python-Routes >= 1.12.3 @@ -98,23 +98,23 @@ Requires: python >= 2.6.8 Requires: python-Babel >= 1.3 Requires: python-Paste -Requires: python-PasteDeploy >= 1.5.0 +Requires: python-PasteDeploy >= 1.5 Requires: python-Routes >= 1.12.3 Requires: python-SQLAlchemy >= 0.7.8 Requires: python-WebOb >= 1.2.3 -Requires: python-dogpile.cache >= 0.5.0 -Requires: python-eventlet >= 0.13.0 +Requires: python-dogpile.cache >= 0.5 +Requires: python-eventlet >= 0.13 Requires: python-greenlet >= 0.3.2 Requires: python-iso8601 >= 0.1.9 -Requires: python-jsonschema >= 2.0.0 -Requires: python-keystoneclient >= 0.7.0 +Requires: python-jsonschema >= 2 +Requires: python-keystoneclient >= 0.7 Requires: python-kombu >= 2.4.8 Requires: python-ldap >= 2.3.13 Requires: python-lockfile >= 0.8 Requires: python-lxml >= 2.3 Requires: python-netaddr >= 0.7.6 Requires: python-oauthlib >= 0.6 -Requires: python-oslo.messaging >= 1.3.0a9 +Requires: python-oslo.messaging >= 1.3 Requires: python-pam >= 0.1.4 Requires: python-passlib Requires: python-pbr >= 0.6 @@ -134,13 +134,13 @@ Summary:Testsuite for the OpenStack Keystone Group: Development/Languages/Python Requires: %{name} = %{version} -Requires: python-WebTest >= 2.0 +Requires: python-WebTest >= 2 %if 0%{?suse_version} && 0%{?suse_version} <= 1110 Requires: python-discover %endif Requires: python-fixtures >= 0.3.14 -Requires: python-keystoneclient >= 0.7.0 -Requires: python-mock >= 1.0 +Requires: python-keystoneclient >= 0.7 +Requires: python-mock >= 1 Requires: python-mox >= 0.5.3 Requires: python-pysqlite Requires: python-python-memcached >= 1.48 ++ keystone-2014.1.rc2.tar.gz -> keystone-2014.1.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2014.1.rc2/ChangeLog new/keystone-2014.1/ChangeLog --- old/keystone-2014.1.rc2/ChangeLog 2014-04-08 10:48:06.0 +0200 +++ new/keystone-2014.1/ChangeLog 2014-04-17 11:22:17.0 +0200 @
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2014-04-14 10:55:02 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone-doc.changes 2013-04-29 14:09:43.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone-doc.changes 2014-04-14 10:55:04.0 +0200 @@ -1,0 +2,488 @@ +Wed Apr 9 16:57:38 UTC 2014 - dmuel...@suse.com + +- Update to version keystone-2014.1.dev14.gb07840a: + * Updated from global requirements + * Fix invalid LDAP filter for user ID with comma + +--- +Thu Mar 27 01:40:19 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.2.dev176.g724d056: + * Open Juno development + * Enable lazy translations in httpd/keystone.py + * Avoid using .values() on the indexed columns + * Imported Translations from Transifex + * revert deprecation of v2 API + * Updated from global requirements + * Uses generator expressions instead of filter + +--- +Wed Mar 26 01:41:56 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.1.dev162.g3056dc5: + * exclude disabled services from the catalog + * refactor AuthCatalog tests + * Rename keystone.tests.fixtures + * Change the default version discovery URLs + * Remove extra cache layer debugging + * Fix doc build errors with SQLAlchemy 0.9 + * Sync oslo-incubator db.sqlalchemy b9e2499 + * Always include 'enabled' field in service response + +--- +Tue Mar 25 01:41:45 UTC 2014 - cloud-de...@suse.de + +- Rebased patches: + + 0001-Create-TMPDIR-for-tests-recursively.patch dropped (merged upstream) + +--- +Tue Mar 25 01:41:40 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.1.dev146.ge7b3005: + * Create TMPDIR for tests recursively + * test tcp_keepidle only if it's available on the current platform + * Add dedicated URL for issuing unscoped federation tokens + +--- +Mon Mar 24 01:40:44 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.1.dev141.g0fb0dfd: + * Filter SAML2 assertion parameters with certain prefix + +--- +Sun Mar 23 01:43:22 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.1.dev139.g1e84251: + * Use oslo db.sqlalchemy.session.EngineFacade.from_config + +--- +Sat Mar 22 01:39:59 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.1.dev137.ga3c7553: + * Add support for parallel testr workers in Keystone + * is_revoked check all viable subtrees + * update sample conf + * explicitly import gettext function + * expires_at should be in a tuple not turned into one + * Comparisons should account for instantaneous test execution + * Make domain_id immutable by default + * Do not expose internal data on UnexpectedError + * Filter LDAP dumb member when listing role assignments + +--- +Fri Mar 21 01:06:14 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.1.dev121.gff88763: + * Ability to turn off ldap referral chasing + * Add user_id when calling populate_roles_for_groups + * Store groups ids objects list in the OS-FEDERATION object + * Uses explicit imports for _ + * Rename scope_to_bad_project() to test_scope_to_bad_project() + * Make LIVE Tests configurable with ENV + +--- +Wed Mar 19 01:07:36 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.1.dev109.gd4574a7: + * Move test .conf files to keystone/tests/config_files + * Removal of test .conf files + +--- +Tue Mar 18 10:29:57 UTC 2014 - cloud-de...@suse.de + +- Update to version keystone-2014.1.dev105.gd906f57: + * Filter out nonstring environment variables before rules mapping + * Provide option to make domain_id immutable + * Replace httplib.HTTPSConnection in ec2_token + * Don't automatically enable revocation events + * Ensure v3policysample correctly limits domain_admin access + * Sync db, db.sqlalchemy from oslo-incubator 0a3436f + * Do not use keystone.conf.sample in tests + * Use class attribute to represent 'user' and 'group' + * trust creat
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2014-02-19 07:21:47 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2014-01-23 15:50:38.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2014-02-19 07:21:49.0 +0100 @@ -1,0 +2,69 @@ +Thu Feb 13 16:10:02 UTC 2014 - speili...@suse.com + +- Add 0001-Replacing-python-oauth2-by-oauthlib.patch, port from oauth2 to oauthlib + +--- +Thu Feb 6 14:48:02 UTC 2014 - dmuel...@suse.com + +- fix typo in logrotate + +--- +Mon Feb 03 09:23:24 UTC 2014 - cloud-de...@suse.de + +- Rebased patches: + + 0001-Adds-fixture-package-from-oslo.patch dropped (merged upstream) + +--- +Mon Feb 3 09:23:22 UTC 2014 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.2.dev19.g9056b66: + + Remove roles from OS-TRUST list responses + + Adds fixture package from oslo + + Sync log_handler module from Oslo + + Remove netifaces requirement + + list_revoked_tokens sql speedup for havana + +--- +Mon Feb 3 09:21:42 UTC 2014 - dmuel...@suse.com + +- remove 0001-list_revoked_tokens-sql-speedup-for-havana.patch + +--- +Sat Feb 1 01:24:47 UTC 2014 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.2.dev9.g2724951: + + Try decoding string to UTF-8 on error message fail + + Have tox use pip upgrade when installing + + Sync rpc fix from oslo-incubator + +--- +Fri Jan 31 01:37:29 UTC 2014 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.2.dev3.gcecee8e: + + Import strutils from oslo + +--- +Thu Jan 30 17:10:12 UTC 2014 - speili...@suse.com + +- Set common name of example certs to FQDN to make then slightly more + useful (bnc#855446) + +--- +Wed Jan 29 15:49:23 UTC 2014 - dmuel...@suse.com + +- add 0001-list_revoked_tokens-sql-speedup-for-havana.patch, + 0001-Adds-fixture-package-from-oslo.patch +- move token flushing to hourly cron job + +--- +Wed Jan 29 09:12:33 UTC 2014 - speili...@suse.com + +- Add refresh_patches source service + +--- +Thu Jan 23 18:00:28 UTC 2014 - dmuel...@suse.com + +- install cron job to flush expired tokens, otherwise keystone + slows down after a while + +--- @@ -33 +102 @@ - + Fix issues handling trust tokens via ec2tokens API + + Fix issues handling trust tokens via ec2tokens API (bnc#855338, CVE-2013-6391) New: 0001-Replacing-python-oauth2-by-oauthlib.patch Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.nKATxm/_old 2014-02-19 07:21:50.0 +0100 +++ /var/tmp/diff_new_pack.nKATxm/_new 2014-02-19 07:21:50.0 +0100 @@ -19,7 +19,7 @@ %define component keystone Name: openstack-%{component}-doc -Version:2013.2.2.dev1.g0d83e7e +Version:2013.2.2.dev20.gc22f2ed Release:0 Summary:OpenStack Identity Service (Keystone) - Documentation License:Apache-2.0 @@ -29,7 +29,6 @@ BuildRequires: openstack-suse-macros BuildRequires: python-Sphinx BuildRequires: python-base -BuildRequires: python-d2to1 BuildRequires: python-oslo.sphinx BuildRequires: python-pbr BuildArch: noarch @@ -43,7 +42,7 @@ This package contains documentation files for openstack-keystone. %prep -%setup -q -n keystone-2013.2.2.dev1.g0d83e7e +%setup -q -n keystone-2013.2.2.dev20.gc22f2ed %openstack_cleanup_prep %build ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.nKATxm/_old 2014-02-19 07:21:50.0 +0100 +++ /var/tmp/diff_new_pack.nKATxm/_new 2014-02-19 07:21:50.0 +0100 @@ -21,7 +21,7 @@ %define username openstack-%{component} Name: openstack-%{component} -Version:2013.2.2.dev1.g0d83e7e +Version:2013.2.2.dev20.gc22f2ed Release:0 Summary:OpenStack Identity Service (Keystone) License:
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2014-01-20 07:06:04 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-10-18 19:23:20.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2014-01-23 15:50:38.0 +0100 @@ -1,0 +2,80 @@ +Thu Jan 9 08:25:46 UTC 2014 - speili...@suse.com + +- Move to DB-based endpoint catalog. Avoids running out of sync with + upstream changes in the default_catalog.template.sample file and + allows to manipulate via 'keystone' CLI tool. + +--- +Thu Jan 2 10:51:38 UTC 2014 - dmuel...@suse.com + +- remove 0001-Restore-ability-to-create-EC2-tokens-as-admin.patch + +--- +Mon Dec 23 23:58:50 UTC 2013 - dmuel...@suse.com + +- add 0001-Restore-ability-to-create-EC2-tokens-as-admin.patch + +--- +Tue Dec 17 00:44:37 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.2.dev1.g0d83e7e: + + Bump stable/havana next version to 2013.2.2 + +--- +Mon Dec 16 09:28:52 UTC 2013 - dmuel...@suse.com + +- fix requires + +--- +Sun Dec 15 01:02:20 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.1.dev8.g03ed8c3: + + Fix issues handling trust tokens via ec2tokens API + +--- +Sat Dec 14 00:46:13 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.1.dev6.g64ac189: + + Updated from global requirements + +--- +Mon Dec 9 12:46:14 UTC 2013 - speili...@suse.com + +- Drop 0001-Make-ROOTDIR-determination-more-robust.patch: Solved + slightly different upstream +- Update to version 2013.2.1.dev5.gd927273: + + Fix Rootdir determination + +--- +Sat Dec 7 00:40:23 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.1.dev3.g3c25be5: + + Update memcache to match global requirements for stable/havana + +--- +Wed Oct 30 17:20:31 UTC 2013 - rha...@suse.com + +- Add %{python_sitelib}/keystone/tests/tmp symlink to the -test + subpackage allow the unittests to create/locate their database +- Adapt test configuration for the correct location of the example + certificates. (Using relative paths doesn't work with our -test + package layout) + +--- +Tue Oct 29 14:07:44 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.1.dev2.g4221b60: + + Fix remove role assignment adds role using LDAP assignment + +--- +Wed Oct 23 16:07:05 UTC 2013 - iartar...@suse.com + +- Move default tests TMPDIR location to + /var/lib/openstack-keystone-test/tmp + +--- +Tue Oct 22 14:44:28 UTC 2013 - iartar...@suse.com + +- Add python-testtools dependency for test package + +--- Old: 0001-Make-ROOTDIR-determination-more-robust.patch default_catalog.templates keystone-2013.2.tar.gz New: keystone-stable-havana.tar.gz Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.YjRl2e/_old 2014-01-23 15:50:38.0 +0100 +++ /var/tmp/diff_new_pack.YjRl2e/_new 2014-01-23 15:50:38.0 +0100 @@ -1,7 +1,7 @@ # # spec file for package openstack-keystone-doc # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -19,13 +19,13 @@ %define component keystone Name: openstack-%{component}-doc -Version:2013.2 +Version:2013.2.2.dev1.g0d83e7e Release:0 Summary:OpenStack Identity Service (Keystone) - Documentation License:Apache-2.0 Group: Documentation/HTML Url:https://github.com/openstack/keystone -Sour
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-10-18 19:22:41 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-10-03 07:26:38.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-10-18 19:23:20.0 +0200 @@ -1,0 +2,16 @@ +Thu Oct 17 14:38:37 UTC 2013 - dmuel...@suse.com + +- Update to 2013.2 + +--- +Tue Oct 15 08:50:23 UTC 2013 - speili...@suse.com + +- Update to version 2013.2.rc2: + + No changes + +-- +Tue Oct 8 12:15:24 UTC 2013 - dmuel...@suse.com + +- run db_sync before starting keystone server + +--- Old: keystone-2013.2.rc1.tar.gz New: keystone-2013.2.tar.gz Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.dFYpvl/_old 2013-10-18 19:23:21.0 +0200 +++ /var/tmp/diff_new_pack.dFYpvl/_new 2013-10-18 19:23:21.0 +0200 @@ -19,13 +19,13 @@ %define component keystone Name: openstack-%{component}-doc -Version:2013.2.rc1 +Version:2013.2 Release:0 Summary:OpenStack Identity Service (Keystone) - Documentation License:Apache-2.0 Group: Documentation/HTML Url:https://github.com/openstack/keystone -Source: keystone-2013.2.rc1.tar.gz +Source: keystone-2013.2.tar.gz BuildRequires: openstack-suse-macros BuildRequires: python-Sphinx BuildRequires: python-base @@ -43,7 +43,7 @@ This package contains documentation files for openstack-keystone. %prep -%setup -q -n keystone-2013.2.rc1 +%setup -q -n keystone-2013.2 %openstack_cleanup_prep %build ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.dFYpvl/_old 2013-10-18 19:23:21.0 +0200 +++ /var/tmp/diff_new_pack.dFYpvl/_new 2013-10-18 19:23:21.0 +0200 @@ -21,13 +21,13 @@ %define username openstack-%{component} Name: openstack-%{component} -Version:2013.2.rc1 +Version:2013.2 Release:0 Summary:OpenStack Identity Service (Keystone) License:Apache-2.0 Group: Development/Languages/Python Url:https://github.com/openstack/keystone -Source: keystone-2013.2.rc1.tar.gz +Source: keystone-2013.2.tar.gz Source1:%{name}.init Source2:logging.conf Source3:default_catalog.templates @@ -139,7 +139,7 @@ functionality of OpenStack Keystone. %prep -%setup -q -n keystone-2013.2.rc1 +%setup -q -n keystone-2013.2 %patch0 -p1 %openstack_cleanup_prep ++ _service ++ --- /var/tmp/diff_new_pack.dFYpvl/_old 2013-10-18 19:23:21.0 +0200 +++ /var/tmp/diff_new_pack.dFYpvl/_new 2013-10-18 19:23:21.0 +0200 @@ -1,7 +1,6 @@ - -http://tarballs.openstack.org/keystone/keystone-2013.2.rc1.tar.gz +http://tarballs.openstack.org/keystone/keystone-2013.2.tar.gz opensuse-cl...@opensuse.org True ++ keystone-2013.2.rc1.tar.gz -> keystone-2013.2.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2013.2.rc1/AUTHORS new/keystone-2013.2/AUTHORS --- old/keystone-2013.2.rc1/AUTHORS 2013-10-02 13:44:55.0 +0200 +++ new/keystone-2013.2/AUTHORS 2013-10-17 15:58:50.0 +0200 @@ -73,6 +73,7 @@ James E. Blair James Slagle Jamie Lennox +Jamie Lennox Jamie Lennox Jan Provaznik Jaroslav Henner @@ -124,6 +125,7 @@ Mark McLoughlin Maru Newby Mat Grove +Matt Odden Matthew Treinish Michael Basnight Michael J Fork diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2013.2.rc1/ChangeLog new/keystone-2013.2/ChangeLog --- old/keystone-2013.2.rc1/ChangeLog 2013-10-02 13:44:55.0 +0200 +++ new/keystone-2013.2/ChangeLog 2013-10-17 15:58:49.0 +0200 @@ -1,3 +1,141 @@ +commit 1a0297e1f5d1049c9e2dd362f478112cd6691980 +Author: Matt Odden +Date: Tue Oct 1 08:52:15 2013 + + +Disable lazy gettext + +This change disables lazy gettext functionality in Keystone, +due to problems with character encoding and logging +detailed in bug 1225099. + +It is part of a series of commits across all projects with +lazy gettext enabled. + +Change-Id: Ia934a7df9386baf
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-10-03 07:26:37 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-09-16 16:23:08.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-10-03 07:26:38.0 +0200 @@ -1,0 +2,109 @@ +Wed Oct 2 19:09:27 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.rc1: + + Update tox config + + Add tests dir to the coverage omit list + + Imports oslo policy to fix test issues + +--- +Wed Oct 2 00:09:23 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a100.g1d91334: + + Sync with global requirements + + Enclose command args in with_venv.sh + + Imported Translations from Transifex + + Fixes errors logging in as a user with no password + +--- +Tue Oct 1 00:19:02 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a92.gec4680a: + + sync oslo policy + + Validate token calls return 404 on invalid tokens + + Eliminate type error on search_s + + Fix live LDAP tests + + Sync gettextutils from oslo + +--- +Mon Sep 30 16:49:43 UTC 2013 - dmuel...@suse.com + +- add missing endpoints to catalog + +--- +Sun Sep 29 00:56:54 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a82.ge979323: + + Fix error when create user with LDAP backend + + Protect oauth controller calls and update policy.json + +--- +Fri Sep 27 16:23:19 UTC 2013 - dmuel...@suse.com + +- switch to crudini + +--- +Thu Sep 26 10:00:12 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a79.g2f75699: + + upgrade to oslo.config 1.2 final + + Modify oauth1 tests to use generated keystone token in a call + + Optional dependency injection + + oauth using optional dependencies + + only run flake8 once (bug 1223023) + + Update man pages + + Fix updating attributes with ldap backend + + Test for backend case sensitivity + + Update man page version + +--- +Tue Sep 24 23:59:15 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a61.g3130076: + + Check token_format for default token providers only. + + Sync gettextutils from oslo + + Ensure any relevant tokens are revoked when a role is deleted + + Add user to project if project ID is changed + +--- +Mon Sep 23 23:36:37 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a54.g66d7c2c: + + Cleanup of tenantId, tenant_id, and default_project_id + + Remove ldap identity domain attribute options + +--- +Sat Sep 21 00:15:46 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a50.gbdac547: + + Rewrite README.rst + + Ensure v2 tokens are correctly invalidated when using BelongsTo + + Monkey patch select in environment + + check for domain existence before doing any ID work + + Add extra test coverage for unscoped token invalidation + +--- +Wed Sep 18 23:36:42 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a41.g5a5023b: + + Include new notification options in sample config + +--- +Wed Sep 18 10:16:32 UTC 2013 - dmuel...@suse.com + +- add 0001-Make-ROOTDIR-determination-more-robust.patch + +--- +Tue Sep 17 23:59:24 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a39.gd3460c3: + + Rationalize list_user_projects and get_projects_for_user + + Fix misused assertTrue in unit tests + +--- +Tue Sep 17 00:05:45 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a36.g54b8ec5: + + Ignore H803 from Hacking. + + fix rst syntax in database schema migrations docs + +--- Old: keystone-master.tar.gz New: 0001-Make-ROOTDIR-determination-more-robust.patch keystone-2013.2.rc1.tar.gz +++
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-09-16 16:23:07 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-09-16 12:37:48.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-09-16 16:23:08.0 +0200 @@ -1,0 +2,29 @@ +Sun Sep 15 00:05:37 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a32.gd7eff43: + + Move gettextutils installation in tests to core + +--- +Fri Sep 13 23:55:11 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a30.g3651879: + + Test upgrade migration 16->17 + + gate on H304: no relative imports + +--- +Thu Sep 12 23:35:16 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a26.g607b115: + + test token revocation list API (bug 1202952) + + Remove CA key password from cert setup + + Cleanup tests imports so not relative + + Fixes for user response with LDAP user_enabled_mask + +--- +Wed Sep 11 23:58:00 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a18.g1b97529: + + Reduce churn of cache on revocation_list + + Imported Translations from Transifex + +--- Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.dhDKXi/_old 2013-09-16 16:23:08.0 +0200 +++ /var/tmp/diff_new_pack.dhDKXi/_new 2013-09-16 16:23:08.0 +0200 @@ -19,7 +19,7 @@ %define component keystone Name: openstack-%{component}-doc -Version:2013.2.a15.g33c8025 +Version:2013.2.a32.gd7eff43 Release:0 Summary:OpenStack Identity Service (Keystone) - Documentation License:Apache-2.0 @@ -43,7 +43,7 @@ This package contains documentation files for openstack-keystone. %prep -%setup -q -n keystone-2013.2.a15.g33c8025 +%setup -q -n keystone-2013.2.a32.gd7eff43 %openstack_cleanup_prep %build ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.dhDKXi/_old 2013-09-16 16:23:08.0 +0200 +++ /var/tmp/diff_new_pack.dhDKXi/_new 2013-09-16 16:23:08.0 +0200 @@ -21,7 +21,7 @@ %define username openstack-%{component} Name: openstack-%{component} -Version:2013.2.a15.g33c8025 +Version:2013.2.a32.gd7eff43 Release:0 Summary:OpenStack Identity Service (Keystone) License:Apache-2.0 @@ -138,7 +138,7 @@ functionality of OpenStack Keystone. %prep -%setup -q -n keystone-2013.2.a15.g33c8025 +%setup -q -n keystone-2013.2.a32.gd7eff43 %openstack_cleanup_prep %build ++ keystone-master.tar.gz ++ 15658 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-09-16 12:37:47 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-08-07 20:47:12.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-09-16 12:37:48.0 +0200 @@ -0,0 +1,265 @@ +--- +Wed Sep 11 00:15:03 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a15.g33c8025: + + Import core.* in keystone.tests + + Tests use "from keystone import tests" + +--- +Tue Sep 10 00:12:35 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a12.g8dc7ed2: + + Close each LDAP connection after it is used, + + domain-specific drivers experimental in havana + + Fix incorrect test for list_users + +--- +Mon Sep 9 12:22:00 UTC 2013 - dmuel...@suse.com + +- update openstack-keystone.init: Set HOME dir correctly + for openssl random state preservation + +--- +Sat Sep 7 07:46:43 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a7.gdac281a: + + Changed header from LLC to Foundation based on trademark policies + +--- +Fri Sep 6 00:02:39 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a490.g8d2f53c: + + Move _generate_paste_config to tests.core + + OAuth authorizing user should propose roles to delegate + + Imported Translations from Transifex + + Support timezone in memcached token backend + + Changes template header for translation catalogs + +--- +Thu Sep 5 15:07:05 UTC 2013 - speili...@suse.com + +- Fix RUNDIR in init-script + +--- +Thu Sep 5 00:21:16 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a481.gd286187: + + Modify default file/directory permissions + + Utilities to create directores, set ownership & permissions + + Update keystone-all man page + + Add a oauth1-configuration.rst and extension section to docs + + Update keystone wsgi httpd script for oslo logging + + Fix the code miss to show the correct error messages + +--- +Tue Sep 3 23:39:02 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a469.g36b5df5: + + Cleanup cache layer tests + + Implement basic caching around assignment CRUD + + add 'project' notifications to docs + +--- +Mon Sep 2 08:21:36 UTC 2013 - dmuel...@suse.com + +- Update to version 2013.2.a464.g372a062: + + Fixes a link in the documentation + + Create associations between projects and endpoints + + Keystone Caching Layer for Manager Calls + + Add defense in ldap:get_roles_for_user_and_project + + filter in ldap list_groups_for_user + + Implement API protection on target entities + + Fix error where consumer is not deleted from sql + + Implement Caching for Token Revocation List + + Refactor Token Provider to be aware of expired tokens. + + Add notifications module + + Remove enumerate calls + + Drop support for diablo to essex migrations + + Use correct filename for index & serial file when setting permissions + + Removes KVS references from the documentation + + Implement decorator-based notifications for users + + Add Memory Isolating Cache Proxy + + Add project CRUD to assignment_api Manager + + Enable SQL tests for oauth + + Add 'cn' to attribute_list for enabled_users/tenants query + + Fix role lookup for Active Directory + + Bump hacking to 0.7 + + Remove kvs backend from oauth1 extension + + Add common code from Oslo for work with database + + Use common db model class from Oslo + + Imported Translations from Transifex + + Implement caching for Tokens and Token Validation + + Document usage notifications + + Use joins instead of multiple lookups in groups sql + + Use testtools as base test class. + +--- +Mon Aug 26 23:56:06 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a410.g7eed453: + + Remove a useless arg in range() + + Fix translate static messages in response + + Use system locale when Accept-Language header is not provided + +---
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-08-07 20:47:10 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-07-21 11:59:30.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-08-07 20:47:12.0 +0200 @@ -0,0 +1,165 @@ + +Fri Aug 2 23:59:55 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a293.ged1f967: + + Clear out the dependency registry between tests + + Handle circular dependencies + + Use dependency injection for assignment and identity + + use 'exc_info=True' instead of import traceback + + .gitignore eggs + + add OS-TRUST to links + + Sync DB models and migrations in keystone.assignment.backends.sql + + Update references with new Mailing List location + + V3 API need to check mandatory field when creating resources + + Clean up use of token_provider manager in tests + + Remove kwargs from manager calls where not needed. + + Imported Translations from Transifex + + Fix typo: Tenents -> Tenants + + Use oslo.sphinx and remove local copy of doc theme + + +Thu Aug 1 23:38:01 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a265.g0368950: + + Use keystone.wsgi.Request for RequestClass + + Remove passwords from LDAP queries + + +Thu Aug 1 00:03:58 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a261.gf1ac78c: + + Ec2 credentials table not created during testing + + Load backends before deploy app in client tests + + +Wed Jul 31 00:04:20 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a257.g5958691: + + sql.Driver:authenticate() signatures should match + + +Tue Jul 30 14:47:43 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a255.gc21b458: + + default token format/provider handling + + +Mon Jul 29 23:50:12 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a253.g10fde8e: + + Clear cached engine when global engine changes + + Implement exception module i18n support + + +Fri Jul 26 23:52:02 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a249.g97a5b49: + + Remove vestiges of Assignments from LDAP Identity Backend + + Scipped tests don't render as ERROR's + + +Thu Jul 25 00:03:10 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a246.g0a40152: + + Fixing broken credential schema in sqlite. + + +Tue Jul 23 23:55:12 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a245.gc6b7dd8: + + Deprecate kvs token backend + + Load app before loading legacy client in tests. + + Use assignment_api rather than assignment + + +Mon Jul 22 00:22:50 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a240.g7fde605: + + Regenerate example PKI after change of defaults + + Return correct link for effective group roles in GET /role_assignments + + Deprecation warning for [signing] token_format + + Add [assignment].driver to sample config + + Remove an enumerate call + + Correct Spelling Mistake + + +Thu Jul 18 23:48:41 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a228.g53ed50d: + + Support token_format for backward compatibility + + python3: Introduce py33 to tox.ini + + +Wed Jul 17 23:49:24 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a225.gc42533f: + + grammar fixes in error messages + + update requires to prevent version cap + + +Wed Jul 17 10:13:43 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a221.g2667c77: + + Change domain component value to org from com + + wsgi.BaseApplication and wsgi.Router factories should use **kwargs + + Python 3.x compatible use of pr
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-07-21 11:59:29 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-06-13 17:24:05.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-07-21 11:59:30.0 +0200 @@ -0,0 +1,72 @@ +--- +Tue Jul 9 10:08:09 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.171.gb556d8a: + + Work without admin_token_auth middleware + + Move comments in front of dependencies + +--- +Mon Jul 8 23:56:23 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.167.g699b483: + + Implement GET /role_assignment API call + + DB2 migration support + + Remove an enumerate call + + Fix issue with v3 tokens and group membership roles + + Imported Translations from Transifex + + Add callbacks for set_global_engine + +--- +Mon Jul 8 11:40:08 UTC 2013 - naehr...@b1-systems.de + +- switched default_catalog.templates to projects default which works + +--- +Sat Jul 6 23:52:19 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.155.g6450f75: + + Update paths to pem files in keystone.conf.sample + +--- +Fri Jul 5 23:51:16 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.153.g5746f5b: + + rename quantum to neutron in docs + +--- +Thu Jul 4 08:12:47 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.151.gbb6ebd4: + + Fix up some trivial license mismatches + +--- +Wed Jul 3 23:57:13 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.149.g62d948a: + + Use event.listen() instead of deprecated listeners kwarg + +--- +Wed Jul 3 14:01:15 UTC 2013 - naehr...@b1-systems.de + +- adding keystone-paste.ini + - the paste configuration has been moved to keystone-paste.ini + +--- +Wed Jul 3 08:48:01 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.147.g214df21: + + Remove hard tabs and trailing whitespace + + Install locales for httpd. + +--- +Tue Jul 2 23:58:33 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.143.gda9dc14: + + `tox -ecover` failure. Missing entry in tox.ini + +--- +Mon Jul 1 23:44:39 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.141.g59ea706: + + Add 'application' to keystone.py for WSGI + @@ -2 +74 @@ -Sat Jun 8 00:05:26 UTC 2013 - opensuse-cl...@opensuse.org +Fri Jun 28 23:43:12 UTC 2013 - opensuse-cl...@opensuse.org @@ -4,2 +76,5 @@ -- Update to version 2013.1.3.a1.g4b22c02: - + Bump stable/grizzly next version to 2013.1.3 +- Update to version 2013.2.b1.140.g6362fb7: + + Stop passing context to managers (bug 1194938) + + check for constraint before dropping + + Clean up keystone-all.rst + + Manager instead of direct driver @@ -8 +83 @@ -Thu Jun 6 00:06:52 UTC 2013 - opensuse-cl...@opensuse.org +Thu Jun 27 23:42:04 UTC 2013 - opensuse-cl...@opensuse.org @@ -10,3 +85,3 @@ -- Update to version 2013.1.2.a11.g8dd57da: - + remove_role_from_user_and_project affecting all users (bug 1170649) - + Fix incorrect role assignment in migration. +- Update to version 2013.2.b1.133.g6c6d15c: + + Revert environment module usage in middleware. + + Do not raise NEW exceptions @@ -15 +90 @@ -Sat Jun 1 06:15:56 UTC 2013 - opensuse-cl...@opensuse.org +Wed Jun 26 23:41:10 UTC 2013 - opensuse-cl...@opensuse.org @@ -17,2 +92,123 @@ -- Update to version 2013.1.2.a9.g39c4ca1: - + Read-only default domain for LDAP (bug 1168726) +- Update to version 2013.2.b1.129.g600c38b: + + LDAP list group users not fail if user entry deleted + + +Tue Jun 25 23:41:03 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.b1.128.g31863d1: + + Remove explicit distribute depend. + +
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-06-13 17:24:03 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-04-29 14:09:43.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-06-13 17:24:05.0 +0200 @@ -0,0 +1,94 @@ + +Sat Jun 8 00:05:26 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.3.a1.g4b22c02: + + Bump stable/grizzly next version to 2013.1.3 + + +Thu Jun 6 00:06:52 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.2.a11.g8dd57da: + + remove_role_from_user_and_project affecting all users (bug 1170649) + + Fix incorrect role assignment in migration. + + +Sat Jun 1 06:15:56 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.2.a9.g39c4ca1: + + Read-only default domain for LDAP (bug 1168726) + +--- +Fri May 31 09:29:37 UTC 2013 - dmuel...@suse.com + +- remove pylint dependency + +--- +Fri May 31 09:14:26 UTC 2013 - dmuel...@suse.com + +- avoid warning in post script + +-- +Wed May 29 10:28:42 UTC 2013 - dmuel...@suse.com + +- update test requires +- remove setBadness call from rpmlintrc + + +Wed May 22 23:35:38 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.2.a8.gf509179: + + Accept env variables to override default passwords + + LDAP list groups with missing member entry + + Add rule for list_groups_for_user in policy.json + +--- +Tue May 21 13:48:53 UTC 2013 - iartar...@suse.com + +- add missing python-sqlalchemy-migrate requirement + +--- +Sat May 18 13:30:18 UTC 2013 - dmuel...@suse.com + +- update requires based on pip-requires + + +Fri May 10 23:59:35 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.2.a3.g2e5cab9: + + use swift stable branch + + +Thu May 9 23:58:59 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.2.a1.gaea73a7: + + Revoke tokens on user delete (bug 1166670) + + Bump stable/grizzly next version to 2013.1.2 + + +Tue May 7 23:58:22 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.1.a11.gb874c8f: + + Skip IPv6 tests for eventlet dns + + +Fri May 3 00:00:43 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.1.a10.g3aa0f45: + + Fix token ids for memcached + + residual grants after delete action (bug1125637) + + Mark LDAP password and admin_token secret + + Set defaultbranch in .gitreview to stable/grizzly + +--- +Fri Apr 26 14:37:45 UTC 2013 - dmuel...@suse.com + +- add 0001-fix-duplicate-option-error.patch +- Require the new python-python-memcached version (1.48) + + +Wed Apr 24 23:52:27 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.1.1.a4.g5929850: + + Use is_enabled() in folsom->grizzly upgrade (bug 1167421) + + Fix for configuring non-default auth plugins properly + Old: keystone-cs24277.diff New: 0001-fix-duplicate-option-error.patch Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.KxuAMb/_old 2013-06-13 17:24:05.0 +0200 +++ /var/tmp/diff_new_pack.KxuAMb/_new 2013-06-13 17:24:05.0 +0200 @@ -19,7 +19,7 @@ %define component keystone Name: openstack-%{component}-doc -Version:2013.1.1.a1.gec9115b +Version:2013.1.3.a1.g4b22c02 Release:0 Summary:OpenStack Identity Service (Keystone) - Documentation License:Apache-2.0 @@ -40,7 +40,7 @@ This package contains documentation files for openstack-key
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-04-29 14:09:42 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "radma...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone-doc.changes 2013-01-17 15:14:51.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone-doc.changes 2013-04-29 14:09:43.0 +0200 @@ -1,0 +2,10 @@ +Mon Mar 18 10:41:35 UTC 2013 - speili...@suse.com + +- Drop +git.$TIMESTAMP.$COMMITHASH version suffix + +--- +Fri Feb 22 10:25:35 UTC 2013 - sasc...@suse.de + +- Require openstack-suse-macros instead of openstack-macros + +--- --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-04-17 23:13:05.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-04-29 14:09:43.0 +0200 @@ -0,0 +1,82 @@ +--- +Thu Apr 4 16:27:44 UTC 2013 - dmuel...@suse.com + +- update to grizzly branch + +--- +Tue Apr 2 08:48:35 UTC 2013 - speili...@suse.com + +- Update to version 2013.1.rc3 + +--- +Thu Mar 28 10:49:54 UTC 2013 - dmuel...@suse.com + +- update to 2013.1.rc2 + +--- +Tue Mar 26 12:44:27 UTC 2013 - dmuel...@suse.com + +- downgrade to 2013.1 + + +Mon Mar 25 13:52:34 UTC 2013 - opensuse-cl...@opensuse.org + +- Update to version 2013.2.a338.gbceee56: + + Fix XML handling of member links (bug 1156594) + + Test default_project_id scoping (bug 1023502) + + Ensure delete domain removes all owned entities + + Utilize legacy_endpoint_id column (bug 1154918) + + Pass project membership as dict in migration 015. + + V2, V3 token intermix for unscoped tokens (bug 1156913) + + Revise docs to use keystoneclient.middleware.auth_token + + Fix live ldap tests + + Support for LDAP groups (bug #1092187) + + Correct spacing in warning msg + + Validate domains unconditionally (bug 1130236) + + Prohibit V3 V2 token intermix for resource in non-default domain (bug 1157430) + + Properly handle emulated ldap enablement + + Wrap config module and require manual setup (bug 1143998) + + Enable emulation for domains + + Allow trusts to be optional + + Version bump to 2013.2 + + Add a dereference option for ldap + + Move trusts to extension + + Make versions aware of enabled pipelines. + + Imported Translations from Transifex + + Rework S3Token middleware tests. + + Rename trust extension. + +--- +Mon Mar 18 10:41:29 UTC 2013 - speili...@suse.com + +- Drop +git.$TIMESTAMP.$COMMITHASH version suffix + + +Sun Mar 17 11:28:35 UTC 2013 - dmuel...@suse.com + +- Update to version 2013.1.a301.g16b4643+git.1363519715.16b4643: + + Explain LDAP page_size & default value + + Catch and log server exceptions + + Filter out legacy_endpoint_id (bug 1152635) + + Ensure tokens are revoked for relevant v3 api calls + + Switch to final 1.1.0 oslo.config release + + Added test cases to improve LDAP project testing + + Migrate roles from metadata to user_project_metadata + + duplicated trust tests + + quiet route logging on skipped tests + + Remove TODO that didn't land in grizzly + + No parent exception to wrap + + Remove duplicate password/token opts. + + Fixes bug 1151747: broken XML translation for resource collections + + xml_body returns backtrace on XMLSyntaxError + + extracting user and trust ids into normalized fields + + Discard null endpoints (bug 1152632) +- remove keystone-cs24277.diff: + * merged upstream + +--- +Wed Mar 13 10:17:48 UTC 2013 - dmuel...@suse.com + +- add keystone-cs24277.diff: + * make keystone start again + @@ -2 +84 @@ -Wed Mar 20 16:27:29 UTC 2013 - vu...@suse.com +Wed Mar 13 00:17:24 UTC 2013 - cloud-de...@suse.de @@ -4,2 +86,57 @@ -- Update to version 2012.2.4+git.1363796849.255b1d4: - + validate from backend (lp#1129713, bnc#809590, CVE-2013-1865) +- Update to version 2013.1.a271.g45228ca+git.1363133844.45228ca: + + cleanup trusts in controllers + + remove spurious roles check + + add belongs_to check +
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-04-17 23:12:51 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "radma...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-03-15 10:43:04.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-04-17 23:13:05.0 +0200 @@ -0,0 +1,6 @@ + +Wed Mar 20 16:27:29 UTC 2013 - vu...@suse.com + +- Update to version 2012.2.4+git.1363796849.255b1d4: + + validate from backend (lp#1129713, bnc#809590, CVE-2013-1865) + Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.PyXYVK/_old 2013-04-17 23:13:08.0 +0200 +++ /var/tmp/diff_new_pack.PyXYVK/_new 2013-04-17 23:13:08.0 +0200 @@ -19,7 +19,7 @@ %define component keystone Name: openstack-%{component}-doc -Version:2012.2.4+git.1362502288.8690166 +Version:2012.2.4+git.1363796849.255b1d4 Release:0 License:Apache-2.0 Summary:OpenStack Identity Service (Keystone) - Documentation ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.PyXYVK/_old 2013-04-17 23:13:08.0 +0200 +++ /var/tmp/diff_new_pack.PyXYVK/_new 2013-04-17 23:13:08.0 +0200 @@ -23,7 +23,7 @@ %define hybrid keystone-hybrid-backend-folsom Name: openstack-%{component} -Version:2012.2.4+git.1362502288.8690166 +Version:2012.2.4+git.1363796849.255b1d4 Release:0 License:Apache-2.0 Summary:OpenStack Identity Service (Keystone) ++ keystone-hybrid-backend-folsom.tar.gz ++ ++ keystone-stable-folsom.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.4/ChangeLog new/keystone-2012.2.4/ChangeLog --- old/keystone-2012.2.4/ChangeLog 2013-03-05 15:24:55.0 +0100 +++ new/keystone-2012.2.4/ChangeLog 2013-03-20 16:37:10.0 +0100 @@ -1,3 +1,18 @@ +commit 255b1d43500f5d98ec73a0056525b492b14fec05 +Author: Adam Young +Date: Wed Mar 20 09:49:32 2013 -0500 + +validate from backend (bug 1129713) + +In certain cases we were depending on CMS to validate PKI tokens +but that is not necessary, and by passes the revocation check + +Change-Id: I9d7e60b074aa8c8859971618fed20c8cde2220c4 + + keystone/service.py | 19 ++ + tests/test_service.py | 51 + + 2 files changed, 57 insertions(+), 13 deletions(-) + commit 86901664189c62fce6f8f81619da0896cce469a1 Author: Joe Heck Date: Thu Nov 1 15:36:31 2012 -0700 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.4/keystone/service.py new/keystone-2012.2.4/keystone/service.py --- old/keystone-2012.2.4/keystone/service.py 2013-03-05 15:22:06.0 +0100 +++ new/keystone-2012.2.4/keystone/service.py 2013-03-20 16:34:21.0 +0100 @@ -490,20 +490,13 @@ """ # TODO(termie): this stuff should probably be moved to middleware self.assert_admin(context) +data = self.token_api.get_token(context=context, token_id=token_id) +if belongs_to: +if (not data.get('tenant') or data['tenant'].get('id') != +belongs_to): +raise exception.Unauthorized() -if cms.is_ans1_token(token_id): -data = json.loads(cms.cms_verify(cms.token_to_cms(token_id), - config.CONF.signing.certfile, - config.CONF.signing.ca_certs)) -data['access']['token']['user'] = data['access']['user'] -data['access']['token']['metadata'] = data['access']['metadata'] -if belongs_to: -assert data['access']['token']['tenant']['id'] == belongs_to -token_ref = data['access']['token'] -else: -token_ref = self.token_api.get_token(context=context, - token_id=token_id) -return token_ref +return data # admin only def validate_token_head(self, context, token_id): diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.4/tests/test_service.py new/keystone-2012.2.4/tests/test_service.py --- old/keystone-2012.2.4/tests/test_ser
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-03-15 10:43:03 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "radma...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-03-08 09:29:08.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-03-15 10:43:04.0 +0100 @@ -0,0 +1,5 @@ +--- +Thu Mar 7 16:10:27 UTC 2013 - bwiedem...@suse.com + +- fix logging.conf to be about keystone and have absolute path + Other differences: -- openstack-keystone.spec: same change ++ logging.conf ++ --- /var/tmp/diff_new_pack.zEW8p5/_old 2013-03-15 10:43:07.0 +0100 +++ /var/tmp/diff_new_pack.zEW8p5/_new 2013-03-15 10:43:07.0 +0100 @@ -1,5 +1,5 @@ [loggers] -keys=root,api,registry,combined +keys=root,api,combined [formatters] keys=normal,normal_with_name,debug @@ -14,17 +14,12 @@ [logger_api] level=DEBUG handlers=devel -qualname=glance-api - -[logger_registry] -level=DEBUG -handlers=devel -qualname=glance-registry +qualname=keystone-api [logger_combined] level=DEBUG handlers=devel -qualname=glance-combined +qualname=keystone-combined [handler_production] class=handlers.SysLogHandler @@ -36,7 +31,7 @@ class=FileHandler level=DEBUG formatter=normal_with_name -args=('glance.log', 'w') +args=('/var/log/keystone/keystone.log', 'w') [handler_devel] class=StreamHandler -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-03-08 09:29:07 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "radma...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-02-22 16:55:56.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-03-08 09:29:08.0 +0100 @@ -1,0 +2,7 @@ +Tue Mar 5 16:51:28 UTC 2013 - cloud-de...@suse.de + +- Update to version 2012.2.4+git.1362502288.8690166: + + Sync timeutils to pick up normalize fix. + + Backport of fix for 24-hour failure of pki. + + Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.GJMiEy/_old 2013-03-08 09:29:09.0 +0100 +++ /var/tmp/diff_new_pack.GJMiEy/_new 2013-03-08 09:29:09.0 +0100 @@ -19,7 +19,7 @@ %define component keystone Name: openstack-%{component}-doc -Version:2012.2.4+git.1361527873.37b3532 +Version:2012.2.4+git.1362502288.8690166 Release:0 License:Apache-2.0 Summary:OpenStack Identity Service (Keystone) - Documentation ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.GJMiEy/_old 2013-03-08 09:29:09.0 +0100 +++ /var/tmp/diff_new_pack.GJMiEy/_new 2013-03-08 09:29:09.0 +0100 @@ -23,7 +23,7 @@ %define hybrid keystone-hybrid-backend-folsom Name: openstack-%{component} -Version:2012.2.4+git.1361527873.37b3532 +Version:2012.2.4+git.1362502288.8690166 Release:0 License:Apache-2.0 Summary:OpenStack Identity Service (Keystone) ++ keystone-hybrid-backend-folsom.tar.gz ++ ++ keystone-stable-folsom.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.4/ChangeLog new/keystone-2012.2.4/ChangeLog --- old/keystone-2012.2.4/ChangeLog 2013-02-20 02:12:22.0 +0100 +++ new/keystone-2012.2.4/ChangeLog 2013-03-05 15:24:55.0 +0100 @@ -1,3 +1,44 @@ +commit 86901664189c62fce6f8f81619da0896cce469a1 +Author: Joe Heck +Date: Thu Nov 1 15:36:31 2012 -0700 + +Backport of fix for 24-hour failure of pki. + +A 401 from the admin token was being treated as an invalid user token +and the admin token was never re-requested. This would cause all +services to incorrectly report all tokens as invalid after the service +had been running for 24 hours. This change re-requests the admin token +and attempts to revalidate instead of returning 401. + +Original commit message follows: + +fixes bug 1074172 + +updated diablo token based on output from diablo/stable keystone +added expiry to example tokens for test_auth_middleware +added a stack based HTTP response to test_auth_middleware to verify +sequencing + +Change-Id: I738b0e9c1a0e62ad86adb95ec0b73f621513f7d4 +(cherry picked from commit 7cc02c80cfb1976271fa8b6271091fcd35c1cb34) + + keystone/middleware/auth_token.py | 38 ++-- + tests/test_auth_token_middleware.py | 85 +++ + 2 files changed, 120 insertions(+), 3 deletions(-) + +commit 790c87e8bc401ef202e715a324a6053aaa9e2d5e +Author: Vishvananda Ishaya +Date: Mon Mar 4 13:37:46 2013 -0800 + +Sync timeutils to pick up normalize fix. + +Required to backport fix for bug 1074172. + +Change-Id: I6003abedcfc6ba9d287cabda35c0bbc821519008 + + keystone/openstack/common/timeutils.py | 15 ++- + 1 file changed, 10 insertions(+), 5 deletions(-) + commit 37b3532884f30fc979f633abe9be2b694d16887a Merge: 8a22745 f0b4d30 Author: Jenkins diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.4/keystone/middleware/auth_token.py new/keystone-2012.2.4/keystone/middleware/auth_token.py --- old/keystone-2012.2.4/keystone/middleware/auth_token.py 2013-02-20 02:08:12.0 +0100 +++ new/keystone-2012.2.4/keystone/middleware/auth_token.py 2013-03-05 15:22:06.0 +0100 @@ -159,6 +159,16 @@ CONF.register_opts(opts, group='keystone_authtoken') +def will_expire_soon(expiry): +""" Determines if expiration is about to occur. + +:param expiry: a datetime of the expected expiration +:returns: boolean : true if expiration is within 30 seconds +""" +soon = (timeutils.utcnow() + datetime.timedelta(seconds=30)) +return expi
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-02-22 16:55:54 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "radma...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-02-08 07:13:00.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-02-22 16:55:56.0 +0100 @@ -1,0 +2,7 @@ +Fri Feb 22 10:11:13 UTC 2013 - cloud-de...@suse.de + +- Update to version 2012.2.4+git.1361527873.37b3532: + + Disable XML entity parsing (CVE-2013-1664, CVE-2013-1665) + + Ensure user and tenant enabled in EC2 (CVE-2013-0282) + + Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.O6QhFl/_old 2013-02-22 16:55:58.0 +0100 +++ /var/tmp/diff_new_pack.O6QhFl/_new 2013-02-22 16:55:58.0 +0100 @@ -19,7 +19,7 @@ %define component keystone Name: openstack-%{component}-doc -Version:2012.2.4+git.1360133921.82c87e5 +Version:2012.2.4+git.1361527873.37b3532 Release:0 License:Apache-2.0 Summary:OpenStack Identity Service (Keystone) - Documentation ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.O6QhFl/_old 2013-02-22 16:55:58.0 +0100 +++ /var/tmp/diff_new_pack.O6QhFl/_new 2013-02-22 16:55:58.0 +0100 @@ -23,7 +23,7 @@ %define hybrid keystone-hybrid-backend-folsom Name: openstack-%{component} -Version:2012.2.4+git.1360133921.82c87e5 +Version:2012.2.4+git.1361527873.37b3532 Release:0 License:Apache-2.0 Summary:OpenStack Identity Service (Keystone) ++ keystone-hybrid-backend-folsom.tar.gz ++ ++ keystone-stable-folsom.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.4/AUTHORS new/keystone-2012.2.4/AUTHORS --- old/keystone-2012.2.4/AUTHORS 2013-02-05 17:24:46.0 +0100 +++ new/keystone-2012.2.4/AUTHORS 2013-02-20 02:12:23.0 +0100 @@ -84,6 +84,7 @@ Mohammed Naser monsterxx03 Monty Taylor +Nathanael Burton Pádraig Brady Pádraig Brady Paul McMillan diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.4/ChangeLog new/keystone-2012.2.4/ChangeLog --- old/keystone-2012.2.4/ChangeLog 2013-02-05 17:24:46.0 +0100 +++ new/keystone-2012.2.4/ChangeLog 2013-02-20 02:12:22.0 +0100 @@ -1,3 +1,36 @@ +commit 37b3532884f30fc979f633abe9be2b694d16887a +Merge: 8a22745 f0b4d30 +Author: Jenkins +Date: Wed Feb 20 00:49:06 2013 + + +Merge "Ensure user and tenant enabled in EC2" into stable/folsom + +commit f0b4d300db5cc61d4f079f8bce9da8e8bea1081a +Author: Nathanael Burton +Date: Tue Feb 19 09:27:04 2013 -0600 + +Ensure user and tenant enabled in EC2 + +Fixes bug 1121494. + +Change-Id: Icc90d581691b5aa63754e076ce983dfa2885a1dc + + keystone/contrib/ec2/core.py | 22 +- + 1 file changed, 17 insertions(+), 5 deletions(-) + +commit 8a2274595ac628b2373eab0cb14690f866b7a024 +Author: Dolph Mathews +Date: Tue Feb 19 09:04:11 2013 -0600 + +Disable XML entity parsing + +Fixes bug 1100282 and bug 1100279. + +Change-Id: Ibf2d73bca17b689cfa2dfd29eb15ea6e7458a123 + + keystone/common/serializer.py | 15 +-- + 1 file changed, 13 insertions(+), 2 deletions(-) + commit 82c87e5638ebaf9f166a9b07a0155291276d6fdc Merge: b3bd5fd bb2226f Author: Jenkins diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.4/keystone/common/serializer.py new/keystone-2012.2.4/keystone/common/serializer.py --- old/keystone-2012.2.4/keystone/common/serializer.py 2013-02-05 17:22:07.0 +0100 +++ new/keystone-2012.2.4/keystone/common/serializer.py 2013-02-20 02:08:12.0 +0100 @@ -29,6 +29,16 @@ DOCTYPE = '' XMLNS = 'http://docs.openstack.org/identity/api/v2.0' +PARSER = etree.XMLParser( +resolve_entities=False, +remove_comments=True, +remove_pis=True) + +# NOTE(dolph): lxml.etree.Entity() is just a callable that currently returns an +# lxml.etree._Entity instance, which doesn't appear to be part of the +# public API, so we discover the type dynamically to be safe +ENTITY_TYPE = type(etree.Entity('x')) + def from_xml(xml): """Deserialize XML to a dictionary.""" @@ -51,7 +61,7 @@ class XmlDeserializ
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-02-08 07:12:57 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "radma...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-01-20 08:09:11.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-02-08 07:13:00.0 +0100 @@ -0,0 +1,21 @@ + +Wed Feb 6 06:58:41 UTC 2013 - cloud-de...@suse.de + +- Update to version 2012.2.4+git.1360133921.82c87e5: + + Bump version to 2012.2.4 + + Add size validations for /tokens. (CVE-2013-0247) + + +Wed Jan 30 12:54:45 UTC 2013 - cloud-de...@suse.de + +- Update to version 2012.2.3+git.1359550485.ec7b94d: + + Test 0.2.0 keystoneclient to avoid new deps + + Unparseable endpoint URL's should raise friendly error + + Fix catalog when services have no URL + + Render content-type appropriate 404 (bug 1089987) + +--- +Wed Jan 30 12:07:49 UTC 2013 - iartar...@suse.com + +- fix last commit's hash tag in Version + Other differences: -- ++ openstack-keystone-doc.spec ++ --- /var/tmp/diff_new_pack.dzKXWF/_old 2013-02-08 07:13:02.0 +0100 +++ /var/tmp/diff_new_pack.dzKXWF/_new 2013-02-08 07:13:02.0 +0100 @@ -19,7 +19,7 @@ %define component keystone Name: openstack-%{component}-doc -Version:2012.2.3+git.1355917214.0c8c2a3 +Version:2012.2.4+git.1360133921.82c87e5 Release:0 License:Apache-2.0 Summary:OpenStack Identity Service (Keystone) - Documentation @@ -40,7 +40,7 @@ This package contains documentation files for openstack-keystone. %prep -%setup -q -n keystone-2012.2.3 +%setup -q -n keystone-2012.2.4 %openstack_cleanup_prep %build ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.dzKXWF/_old 2013-02-08 07:13:02.0 +0100 +++ /var/tmp/diff_new_pack.dzKXWF/_new 2013-02-08 07:13:02.0 +0100 @@ -23,7 +23,7 @@ %define hybrid keystone-hybrid-backend-folsom Name: openstack-%{component} -Version:2012.2.3+git.1355917214.0c8c2a3 +Version:2012.2.4+git.1360133921.82c87e5 Release:0 License:Apache-2.0 Summary:OpenStack Identity Service (Keystone) @@ -137,7 +137,7 @@ %prep # unpack the backend hybrid in addition to the main keyston source -%setup -q -T -D -b0 -a6 -n keystone-2012.2.3 +%setup -q -T -D -b0 -a6 -n keystone-2012.2.4 %patch1 -p1 %patch2 -p1 %patch3 -p1 ++ keystone-hybrid-backend-folsom.tar.gz ++ ++ keystone-stable-folsom.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.3/AUTHORS new/keystone-2012.2.4/AUTHORS --- old/keystone-2012.2.3/AUTHORS 2012-12-18 00:28:21.0 +0100 +++ new/keystone-2012.2.4/AUTHORS 2013-02-05 17:24:46.0 +0100 @@ -64,6 +64,7 @@ Joseph W. Breu Josh Kearney Julien Danjou +Julien Danjou Justin Santa Barbara Justin Shepherd Ken Thomas @@ -83,7 +84,6 @@ Mohammed Naser monsterxx03 Monty Taylor -OpenStack Jenkins Pádraig Brady Pádraig Brady Paul McMillan @@ -110,6 +110,7 @@ sirish bitra Sirish Bitra Sony K. Philip +Stef T Syed Armani termie Thierry Carrez diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-2012.2.3/ChangeLog new/keystone-2012.2.4/ChangeLog --- old/keystone-2012.2.3/ChangeLog 2012-12-18 00:28:21.0 +0100 +++ new/keystone-2012.2.4/ChangeLog 2013-02-05 17:24:46.0 +0100 @@ -1,9 +1,137 @@ -commit 0c8c2a3aff17a5c22bc7504c3087714c0c40d363 +commit 82c87e5638ebaf9f166a9b07a0155291276d6fdc +Merge: b3bd5fd bb2226f +Author: Jenkins +Date: Tue Feb 5 16:17:24 2013 + + +Merge "Add size validations for /tokens." into stable/folsom + +commit b3bd5fdc952a436171173edabd9d20353d8027cc +Author: Mark McLoughlin +Date: Thu Jan 31 21:33:22 2013 + + +Bump version to 2012.2.4 + +Change-Id: I9dab1dc62e41cdb4143a3c8083e65c4b13a22eb4 + + setup.py |2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +commit bb2226f944aaa38beb7fc08ce0a78796e51e2680 +Author: Dan Prince +Date: Thu Jan 10 15:31:28 2013 -0500 + +Add size validations for /tokens. + +Updates /tokens controller so that it explicitly checks the max +size of userId,
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-01-20 08:09:09 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "radma...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2013-01-17 15:14:51.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-01-20 08:09:11.0 +0100 @@ -1,0 +2,12 @@ +Fri Jan 11 15:39:23 UTC 2013 - iartar...@suse.com + +- revert %setup to also unpack hybrid backend tarball + +--- +Fri Jan 11 15:12:13 UTC 2013 - iartar...@suse.com + +- update and re-enable backend hybrid code: + * use sample config for testing + * raise errors in user retrieval code instead of returning None + +--- Other differences: -- ++ openstack-keystone.spec ++ --- /var/tmp/diff_new_pack.dWADvV/_old 2013-01-20 08:09:12.0 +0100 +++ /var/tmp/diff_new_pack.dWADvV/_new 2013-01-20 08:09:12.0 +0100 @@ -136,7 +136,8 @@ functionality of OpenStack Keystone. %prep -%setup -q -n keystone-2012.2.3 +# unpack the backend hybrid in addition to the main keyston source +%setup -q -T -D -b0 -a6 -n keystone-2012.2.3 %patch1 -p1 %patch2 -p1 %patch3 -p1 @@ -187,11 +188,10 @@ install -D %{SOURCE5} %{buildroot}%{_localstatedir}/lib/keystone/wsgi/main.wsgi ### Keystone hybrid identity backend -#TODO: Fix -#install -D -m 644 %{hybrid}/hybrid.py %{buildroot}%{python_sitelib}/keystone/identity/backends/ -#install -m 644 %{hybrid}/hybrid_config.py %{buildroot}%{python_sitelib}/keystone/identity/backends/ -#install -D -m 644 %{hybrid}/test_backend_hybrid.py %{buildroot}%{_localstatedir}/lib/openstack-keystone-test/tests/ -#install -D -m 644 %{hybrid}/backend_hybrid.conf %{buildroot}%{_localstatedir}/lib/openstack-keystone-test/tests/ +install -D -m 644 %{hybrid}/hybrid.py %{buildroot}%{python_sitelib}/keystone/identity/backends/ +install -m 644 %{hybrid}/hybrid_config.py %{buildroot}%{python_sitelib}/keystone/identity/backends/ +install -D -m 644 %{hybrid}/test_backend_hybrid.py %{buildroot}%{_localstatedir}/lib/openstack-keystone-test/tests/ +install -D -m 644 %{hybrid}/backend_hybrid.conf %{buildroot}%{_localstatedir}/lib/openstack-keystone-test/tests/ %pre getent group %{groupname} >/dev/null || groupadd -r %{groupname} ++ keystone-hybrid-backend-folsom.tar.gz ++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-hybrid-backend-folsom/README.md new/keystone-hybrid-backend-folsom/README.md --- old/keystone-hybrid-backend-folsom/README.md2012-11-20 16:07:21.0 +0100 +++ new/keystone-hybrid-backend-folsom/README.md2012-11-21 12:28:56.0 +0100 @@ -1,4 +1,21 @@ keystone-hybrid-backend === -hybrid SQL + LDAP backend for openstack keystone \ No newline at end of file +hybrid SQL + LDAP backend for openstack keystone + +Note: the hybrid backend currently relies on a new configuration option for determining the LDAP scope of the user query: + +```diff +diff -ruN a/keystone/config.py b/keystone/config.py +--- a/keystone/config.py 2012-11-08 13:02:07.0 +0100 b/keystone/config.py 2012-11-08 13:11:06.0 +0100 +@@ -163,7 +163,7 @@ + register_str('suffix', group='ldap', default='cn=example,cn=com') + register_bool('use_dumb_member', group='ldap', default=False) + register_str('user_name_attribute', group='ldap', default='sn') +- ++register_int('user_search_scope', group='ldap', default=1) + + register_str('user_tree_dn', group='ldap', default=None) + register_str('user_objectclass', group='ldap', default='inetOrgPerson') +``` \ No newline at end of file diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/keystone-hybrid-backend-folsom/backend_hybrid.conf new/keystone-hybrid-backend-folsom/backend_hybrid.conf --- old/keystone-hybrid-backend-folsom/backend_hybrid.conf 1970-01-01 01:00:00.0 +0100 +++ new/keystone-hybrid-backend-folsom/backend_hybrid.conf 2012-11-20 17:01:31.0 +0100 @@ -0,0 +1,13 @@ +[sql] +connection = sqlite:///test.db +idle_timeout = 200 + +[ldap] +url = fake://memory +user = cn=Admin +password = password +backend_entities = ['Tenant', 'User', 'UserRoleAssociation', 'Role'] +tree_dn = cn=example,cn=com + +[identity] +driver = keystone.identity.backends.hybrid.Identity diff -urN '--exclude=CVS' '-
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2013-01-17 15:14:48 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "cth...@suse.com" Changes: New Changes file: --- /dev/null 2013-01-09 19:40:42.352580873 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone-doc.changes 2013-01-17 15:14:51.0 +0100 @@ -0,0 +1,19 @@ +--- +Wed Dec 19 15:37:39 UTC 2012 - sasc...@suse.de + +- It's a noarch package + + +Wed Dec 19 12:40:14 UTC 2012 - sasc...@suse.de + +- Move to obs-service-git_tarballs +- Update to version 2012.2.3+git.1355917214.0c8c2a3: + + Merge commit 'refs/changes/01/17901/1' of ssh://review.openstack.org:29418/openstack/keystone into stable/folsom + + Bump next version to 2012.2.3 + + Ensure serviceCatalog is list when empty, not dict + +--- +Thu Nov 22 10:41:32 UTC 2012 - sasc...@suse.de + +- Initial version + --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2012-11-20 20:16:34.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2013-01-17 15:14:51.0 +0100 @@ -1,0 +2,85 @@ +Fri Jan 11 11:23:40 UTC 2013 - sasc...@suse.de + +- Require WebTest instead of webtest in the test sub-package + +--- +Thu Jan 10 12:52:41 UTC 2013 - sasc...@suse.de + +- Add logrotate configuration + +--- +Wed Jan 9 15:36:36 UTC 2013 - bwiedem...@suse.com + +- package sample_data.sh for use in quickstart script + + +Wed Dec 19 12:40:14 UTC 2012 - sasc...@suse.de + +- Move to obs-service-git_tarballs +- Update to version 2012.2.3+git.1355917214.0c8c2a3: + + Merge commit 'refs/changes/01/17901/1' of ssh://review.openstack.org:29418/openstack/keystone into stable/folsom + + Bump next version to 2012.2.3 + + Ensure serviceCatalog is list when empty, not dict + +--- +Mon Dec 10 23:57:58 UTC 2012 - sasc...@suse.de + +- Update to version 2012.2.1+git.1354224563.7869c3e: + + lp#1064914 Removing user from a tenant isn't invalidating user access to +tenant + + lp#1073569 Jenkins jobs fail because of incompatibility between +sqlalchemy-migrate and the newest sqlalchemy-0.8.0b1 + + lp#1078497 keystone throws error when removing user from tenant. + + lp#1060389 Non PKI Tokens longer than 32 characters can never be valid + + lp#1068851 Openssl tests rely on expired certificate + + lp#1079216 token expires time incorrect for auth by one token + + lp#968519 Object reference validation should occur in drivers + + lp#1068674 Redo part of bp/sql-identiy-pam undone by bug 968519 + +--- +Wed Dec 5 09:36:14 UTC 2012 - sasc...@suse.de + +- Use @PARENT_TAG@ in _service file to automate versioning + +--- +Mon Dec 3 11:34:01 UTC 2012 - iartar...@suse.com + +- fix unittest failure with ssl certificates + +--- +Fri Nov 30 13:59:57 UTC 2012 - iartar...@suse.com + +- fix unittest failure on our version of webob + +--- +Thu Nov 22 12:35:37 UTC 2012 - iartar...@suse.com + +- fix typo in passlib dependency package name + +--- +Thu Nov 22 10:41:39 UTC 2012 - sasc...@suse.de + +- Split of doc package into seperate spec file +- Comment out hybrid_backend parts for now to fix build +- Re-arranged %build section to match other packages +- Removed a whole bunch of unneded build requirements +- Updated requirements for python module and test sub-packages + +--- +Wed Nov 21 12:59:17 UTC 2012 - iartar...@suse.com + +- disable keystone-hybrid-backend source service + +--- +Tue Nov 20 14:50:26 UTC 2012 - iartar...@suse.com + +- Add source service for keystone-hybrid-backend +- Update to latest git (f65604d): + + Ensures User is member of tenant in ec2 validation + +--- +Thu Nov 15 13:55:59 UTC 2012 - sasc...@suse.de + +
commit openstack-keystone for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-keystone for openSUSE:Factory checked in at 2012-11-20 20:16:31 Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old) and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New) Package is "openstack-keystone", Maintainer is "cth...@suse.com" Changes: --- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes 2012-01-25 15:02:32.0 +0100 +++ /work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes 2012-11-20 20:16:34.0 +0100 @@ -2 +2 @@ -Mon Jan 23 11:24:03 UTC 2012 - prus...@opensuse.org +Thu Nov 8 13:50:26 UTC 2012 - sasc...@suse.de @@ -4 +4,284 @@ -- fix ifdef around Source0 +- Fix malformed changes file entries + +--- +Thu Nov 8 13:30:05 UTC 2012 - sasc...@suse.de + +- Drop from_vcs build flag + +--- +Tue Oct 16 11:08:47 CEST 2012 - iartar...@suse.cz + +- patch sql backend's from_dict method to not modify the content of the + passed in dict (lp:1066851) + +--- +Wed Oct 10 14:56:49 CEST 2012 - iartar...@suse.cz + + - add hybrid backend test configuration file + +--- +Wed Oct 10 14:10:43 CEST 2012 - iartar...@suse.cz + + - make user search ldap SCOPE configurable in the hybrid backend + +--- +Mon Oct 8 14:38:58 CEST 2012 - iartar...@suse.cz + + - fix LDAP bind with dinamically found user DN + +--- +Fri Oct 5 12:46:20 CEST 2012 - iartar...@suse.cz + + - hybrid backend fixes: + + use the DN for the user we just signed in to check for password + + fix invalid user error (bnc#783200) + +--- +Tue Oct 2 13:57:41 CEST 2012 - iartar...@suse.cz + + - fix checking for SQL user passwords in the hybrid backend bnc#783036 + +--- +Mon Oct 1 09:26:15 UTC 2012 - jenk...@suse.de + +- Update to latest git (0e1f05e): + + utf-8 encode user keys in memcache (bug 1056373) + +--- +Wed Sep 26 09:57:47 UTC 2012 - j...@suse.de + +- make init script start after database (bnc#781798) + +--- +Sun Sep 16 18:24:07 UTC 2012 - jenk...@suse.de + +- Update to latest git (176ee9b): + + Require authz to update user's tenant (bug 1040626) + + List tokens for memcached backend + + Delete user tokens after role grant/revoke + + Limit token revocation to tenant (bug 1050025) + +--- +Wed Sep 12 11:07:31 UTC 2012 - vu...@suse.com + +- Do not use a sed to modify /usr/bin/gensslcert in %post: this + file belongs to another package, and we actually don't do any + change with the sed... Fix bnc#779747. + +--- +Mon Sep 10 08:26:18 UTC 2012 - vu...@suse.com + +- Add keystone-fix-revoke.patch: fix revoking of roles to also + invalidate already existing tokens. Fix bnc#779477, + CVE-2012-4413. + +--- +Tue Aug 28 21:40:12 UTC 2012 - cth...@suse.com + +- Require authz to update user's tenant (lp#1040626, bnc#777664) + +--- +Fri Aug 24 13:44:39 UTC 2012 - bwiedem...@suse.com + +- mark hybrid_config.py as config + +--- +Thu Aug 23 09:08:38 UTC 2012 - jenk...@suse.de + +- Update to latest git (a16a0ab): + + Allow overloading of username and tenant name in the config files. + + Returning roles from authenticate in ldap backend + +--- +Tue Aug 14 17:40:08 CEST 2012 - iartar...@suse.cz + +- Add hybrid identity backend + +--- +Tue Aug 14 14:22:19 CEST 2012 - iartar...@suse.cz + +- Add patch to log all Unauthorized exceptions (authentication + failures). Discussed in bnc#753329. + +--- +Fri Aug 10 22:08:44 UTC 2012 - jenk...@suse.de + +- Update to latest git (359c426): + + Open 2012.1.3 development + +--- +Wed Aug 8 14:12:01 UTC 2012 - jenk...@suse.de + +- Update to latest git (afc37ae): + + Open 2012.1.2 development + +-