Changelog for python-keystone-2012.2.4+git.1363796849.255b1d4-3.8.1.noarch.rpm :

* Wed Mar 20 2013 vuntzAATTsuse.com- Update to version 2012.2.4+git.1363796849.255b1d4: + validate from backend (lp#1129713, bnc#809590, CVE-2013-1865)
* Mon Mar 11 2013 vuntzAATTsuse.com- Update 12.3 packages to Folsom as of March 5th. This comes with· security fixes and bug fixes that we need to have OpenStack work nicely. Fix bnc#802278.
* Thu Mar 07 2013 bwiedemannAATTsuse.com- fix logging.conf to be about keystone and have absolute path
* Tue Mar 05 2013 cloud-develAATTsuse.de- Update to version 2012.2.4+git.1362502288.8690166: + Sync timeutils to pick up normalize fix. + Backport of fix for 24-hour failure of pki.
* Fri Feb 22 2013 cloud-develAATTsuse.de- Update to version 2012.2.4+git.1361527873.37b3532: + Disable XML entity parsing (CVE-2013-1664, CVE-2013-1665) + Ensure user and tenant enabled in EC2 (CVE-2013-0282)
* Wed Feb 06 2013 cloud-develAATTsuse.de- Update to version 2012.2.4+git.1360133921.82c87e5: + Bump version to 2012.2.4 + Add size validations for /tokens. (CVE-2013-0247)
* Wed Jan 30 2013 cloud-develAATTsuse.de- Update to version 2012.2.3+git.1359550485.ec7b94d: + Test 0.2.0 keystoneclient to avoid new deps + Unparseable endpoint URL\'s should raise friendly error + Fix catalog when services have no URL + Render content-type appropriate 404 (bug 1089987)
* Wed Jan 30 2013 iartarisiAATTsuse.com- fix last commit\'s hash tag in Version
* Fri Jan 11 2013 iartarisiAATTsuse.com- revert %setup to also unpack hybrid backend tarball
* Fri Jan 11 2013 iartarisiAATTsuse.com- update and re-enable backend hybrid code:
* use sample config for testing
* raise errors in user retrieval code instead of returning None
* Fri Jan 11 2013 saschpeAATTsuse.de- Require WebTest instead of webtest in the test sub-package
* Thu Jan 10 2013 saschpeAATTsuse.de- Add logrotate configuration
* Wed Jan 09 2013 bwiedemannAATTsuse.com- package sample_data.sh for use in quickstart script
* Wed Dec 19 2012 saschpeAATTsuse.de- Move to obs-service-git_tarballs- Update to version 2012.2.3+git.1355917214.0c8c2a3: + Merge commit \'refs/changes/01/17901/1\' of ssh://review.openstack.org:29418/openstack/keystone into stable/folsom + Bump next version to 2012.2.3 + Ensure serviceCatalog is list when empty, not dict
* Mon Dec 10 2012 saschpeAATTsuse.de- Update to version 2012.2.1+git.1354224563.7869c3e: + lp#1064914 Removing user from a tenant isn\'t invalidating user access to tenant + lp#1073569 Jenkins jobs fail because of incompatibility between sqlalchemy-migrate and the newest sqlalchemy-0.8.0b1 + lp#1078497 keystone throws error when removing user from tenant. + lp#1060389 Non PKI Tokens longer than 32 characters can never be valid + lp#1068851 Openssl tests rely on expired certificate + lp#1079216 token expires time incorrect for auth by one token + lp#968519 Object reference validation should occur in drivers + lp#1068674 Redo part of bp/sql-identiy-pam undone by bug 968519
* Wed Dec 05 2012 saschpeAATTsuse.de- Use AATTPARENT_TAGAATT in _service file to automate versioning
* Mon Dec 03 2012 iartarisiAATTsuse.com- fix unittest failure with ssl certificates
* Fri Nov 30 2012 iartarisiAATTsuse.com- fix unittest failure on our version of webob
* Thu Nov 22 2012 iartarisiAATTsuse.com- fix typo in passlib dependency package name
* Thu Nov 22 2012 saschpeAATTsuse.de- Split of doc package into seperate spec file- Comment out hybrid_backend parts for now to fix build- Re-arranged %build section to match other packages- Removed a whole bunch of unneded build requirements- Updated requirements for python module and test sub-packages
* Wed Nov 21 2012 iartarisiAATTsuse.com- disable keystone-hybrid-backend source service
* Tue Nov 20 2012 iartarisiAATTsuse.com- Add source service for keystone-hybrid-backend- Update to latest git (f65604d): + Ensures User is member of tenant in ec2 validation
* Thu Nov 15 2012 saschpeAATTsuse.de- Use openstack-macros
* Thu Nov 08 2012 saschpeAATTsuse.de- Fix malformed changes file entries
* Thu Nov 08 2012 saschpeAATTsuse.de- Update to version 2012.2 (Folsom): + See https://github.com/openstack/keystone/commits/folsom-3- Drop the following upstreamed patches: + keystone-ldap-no-authentication.patch + keystone-log-warn-auth-errors.patch- Rebased the following patches: + keystone-sql-backend-from_dict.patch + keystone-hybrid-conf-scope.patch- BuildRequire python-pam for man-page build- Install new man-pages keystone-all.1 and keystone-manage.1- Introduce temporary FIX-BUILD.patch
* Thu Nov 08 2012 saschpeAATTsuse.de- Drop from_vcs build flag
* Wed Oct 31 2012 saschpeAATTsuse.de- Drop temporary fixes for file permissions and attributes in %post section. They were necessary only to migrate from pre-1.0 packages.
* Tue Oct 16 2012 iartarisiAATTsuse.cz- patch sql backend\'s from_dict method to not modify the content of the passed in dict (lp:1066851)
* Wed Oct 10 2012 iartarisiAATTsuse.cz- add hybrid backend test configuration file
* Wed Oct 10 2012 iartarisiAATTsuse.cz- make user search ldap SCOPE configurable in the hybrid backend
* Mon Oct 08 2012 iartarisiAATTsuse.cz- fix LDAP bind with dinamically found user DN
* Fri Oct 05 2012 iartarisiAATTsuse.cz- hybrid backend fixes: + use the DN for the user we just signed in to check for password + fix invalid user error (bnc#783200)
* Tue Oct 02 2012 iartarisiAATTsuse.cz- fix checking for SQL user passwords in the hybrid backend bnc#783036
* Mon Oct 01 2012 jenkinsAATTsuse.de- Update to latest git (0e1f05e): + utf-8 encode user keys in memcache (bug 1056373)
* Wed Sep 26 2012 jdsnAATTsuse.de- make init script start after database (bnc#781798)
* Sun Sep 16 2012 jenkinsAATTsuse.de- Update to latest git (176ee9b): + Require authz to update user\'s tenant (bug 1040626) + List tokens for memcached backend + Delete user tokens after role grant/revoke + Limit token revocation to tenant (bug 1050025)
* Wed Sep 12 2012 vuntzAATTsuse.com- Do not use a sed to modify /usr/bin/gensslcert in %post: this file belongs to another package, and we actually don\'t do any change with the sed... Fix bnc#779747.
* Mon Sep 10 2012 vuntzAATTsuse.com- Add keystone-fix-revoke.patch: fix revoking of roles to also invalidate already existing tokens. Fix bnc#779477, CVE-2012-4413.
* Tue Aug 28 2012 cthielAATTsuse.com- Require authz to update user\'s tenant (lp#1040626, bnc#777664)
* Fri Aug 24 2012 bwiedemannAATTsuse.com- mark hybrid_config.py as config
* Thu Aug 23 2012 jenkinsAATTsuse.de- Update to latest git (a16a0ab): + Allow overloading of username and tenant name in the config files. + Returning roles from authenticate in ldap backend
* Tue Aug 14 2012 iartarisiAATTsuse.cz- Add hybrid identity backend
* Tue Aug 14 2012 iartarisiAATTsuse.cz- Add patch to log all Unauthorized exceptions (authentication failures). Discussed in bnc#753329.
* Fri Aug 10 2012 jenkinsAATTsuse.de- Update to latest git (359c426): + Open 2012.1.3 development
* Wed Aug 08 2012 jenkinsAATTsuse.de- Update to latest git (afc37ae): + Open 2012.1.2 development
* Tue Aug 07 2012 bwiedemannAATTsuse.com- drop executable bit from config file
* Tue Jul 31 2012 jenkinsAATTsuse.de- Update to latest git (f65604d): + fix variable names to coincide with the ones in common.ldap + Import ec2 credentials from old keystone db + Raise unauthorized if tenant disabled (bug 988920)
* Tue Jul 31 2012 iartarisiAATTsuse.cz- Remove fix-ldap-varnames patch after being accepted upstream
* Wed Jul 25 2012 saschpeAATTsuse.de- Secure file permissions for Apache SSL certificate files
* Thu Jul 19 2012 cthielAATTsuse.com- drop keystone-cleanup-user-tenant-deletion.patch, which has been merged upstream: https://review.openstack.org/#/c/7482/
* Tue Jul 17 2012 saschpeAATTsuse.de- Fix WSGI app names, use the \'composite\' apps to get the correct routes mapping
* Tue Jul 17 2012 saschpeAATTsuse.de- Forward keystone WSGI log events to mod_wsgi
* Tue Jul 17 2012 iartarisiAATTsuse.cz- Fix some variable names in the LDAP backend which were causing NameErrors- Don\'t require authentication for LDAP
* Mon Jul 16 2012 iartarisiAATTsuse.cz- Fix bnc#755426 cleanup dependent data upon user/tenant deletion
* Mon Jul 09 2012 saschpeAATTsuse.de- Provide Apache2 SSL-proxy example configuration based on mod_wsgi- Provide self-signed SSL certificates to be used for non-production setups (like openstack-quickstart)- Fix /var/lib/keystone permissions to 0755
* Mon Jul 02 2012 saschpeAATTsuse.de- Drop runtime requirement on openstack-glance- Change requirement for openstack-swift to python-swift, keystone only seems to use it in the S3-compatibility code- Change requirement for openstack-nova to python-nova, keystone only seems to use it in the EC2-compatibility code
* Wed Jun 27 2012 saschpeAATTsuse.de- Change versioning scheme to $release+git.$AUTHORDATE.$COMMITREV- Simplify from_vcs macros
* Wed Jun 27 2012 vuntzAATTsuse.com- Really drop unused disable-tests.patch: not needed anymore.
* Tue Jun 26 2012 saschpeAATTsuse.de- Consistent package summaries- Use upstream description and correct URL- Macro cleanup: + Package is noarch except for SLE-11 + No need to redefine %_initddir, SLE-11 works correctly
* Mon Jun 25 2012 saschpeAATTsuse.de- Also install documentation and manpage when build- No need for \"fixing\" the %_initddir macro
* Tue Jun 12 2012 saschpeAATTsuse.de- Use \'openstack-keystone\' system user instead of \'keystone\'
* Wed Jun 06 2012 saschpeAATTsuse.de- Add %restart_on_update to %post section for openstack-keystone (daemons should be restarted after package update)- Fix some rpmlint warnings- Added rpmlintrc for non-issues
* Thu May 24 2012 jfehligAATTsuse.com- Add \'Requires: python >= 2.6.8\' to openstack-keystone and python-keystone subpackage
* Thu Mar 29 2012 bwiedemannAATTsuse.com- use latest upstream default_catalog.templates to fix nova-volume problems
* Tue Feb 14 2012 bwiedemannAATTsuse.com- run as keystone user
* Wed Feb 08 2012 rhaferAATTsuse.de- Updated to the lastest git checkout
* Thu Jan 26 2012 rhaferAATTsuse.de- Fixed try-restart implementation in init-script
* Thu Jan 26 2012 rhaferAATTsuse.de- Fixed init script dependencies
* Thu Jan 26 2012 rhaferAATTsuse.de- removed no longer needed workaround for lp#921054- patch for lp#921634 is upstreamed- refreshed config file patch
* Tue Jan 24 2012 rhaferAATTsuse.de- Added workaround for doc/, examples/ and tools/ dirs showing up in site-packages/ (https://bugs.launchpad.net/keystone/+bug/921054)- Include examples into the -doc subpackage
* Tue Jan 24 2012 rhaferAATTsuse.de- cleaned up more dependencies
* Mon Jan 23 2012 rhaferAATTsuse.de- run testsuite during build
* Fri Jan 20 2012 rhaferAATTsuse.de- Updated to today\'s git snapshot- Removed some unneeded conditionals- Updated dependencies
* Mon Jan 16 2012 prusnakAATTopensuse.org- fix initscript scriptlets
* Tue Jan 10 2012 bwiedemannAATTsuse.com- use spdx.org License name Apache-2.0
* Tue Dec 13 2011 mlinAATTsuse.com- Enabled build from git- Removed unnecessary dependencies- Separate python-keystone- Fix rpmlint warning- Enabled build for Fedora
* Mon Dec 05 2011 prusnakAATTopensuse.org- added preun and postun sections to handle initscripts
* Mon Dec 05 2011 prusnakAATTopensuse.org- spec cleanup