Hello community,
here is the log from the commit of package openstack-keystone for
openSUSE:Factory checked in at 2014-02-19 07:21:47
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old)
and /work/SRC/openSUSE:Factory/.openstack-keystone.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openstack-keystone"
Changes:
--------
--- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes
2014-01-23 15:50:38.000000000 +0100
+++
/work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes
2014-02-19 07:21:49.000000000 +0100
@@ -1,0 +2,69 @@
+Thu Feb 13 16:10:02 UTC 2014 - [email protected]
+
+- Add 0001-Replacing-python-oauth2-by-oauthlib.patch, port from oauth2 to
oauthlib
+
+-------------------------------------------------------------------
+Thu Feb 6 14:48:02 UTC 2014 - [email protected]
+
+- fix typo in logrotate
+
+-------------------------------------------------------------------
+Mon Feb 03 09:23:24 UTC 2014 - [email protected]
+
+- Rebased patches:
+ + 0001-Adds-fixture-package-from-oslo.patch dropped (merged upstream)
+
+-------------------------------------------------------------------
+Mon Feb 3 09:23:22 UTC 2014 - [email protected]
+
+- Update to version 2013.2.2.dev19.g9056b66:
+ + Remove roles from OS-TRUST list responses
+ + Adds fixture package from oslo
+ + Sync log_handler module from Oslo
+ + Remove netifaces requirement
+ + list_revoked_tokens sql speedup for havana
+
+-------------------------------------------------------------------
+Mon Feb 3 09:21:42 UTC 2014 - [email protected]
+
+- remove 0001-list_revoked_tokens-sql-speedup-for-havana.patch
+
+-------------------------------------------------------------------
+Sat Feb 1 01:24:47 UTC 2014 - [email protected]
+
+- Update to version 2013.2.2.dev9.g2724951:
+ + Try decoding string to UTF-8 on error message fail
+ + Have tox use pip upgrade when installing
+ + Sync rpc fix from oslo-incubator
+
+-------------------------------------------------------------------
+Fri Jan 31 01:37:29 UTC 2014 - [email protected]
+
+- Update to version 2013.2.2.dev3.gcecee8e:
+ + Import strutils from oslo
+
+-------------------------------------------------------------------
+Thu Jan 30 17:10:12 UTC 2014 - [email protected]
+
+- Set common name of example certs to FQDN to make then slightly more
+ useful (bnc#855446)
+
+-------------------------------------------------------------------
+Wed Jan 29 15:49:23 UTC 2014 - [email protected]
+
+- add 0001-list_revoked_tokens-sql-speedup-for-havana.patch,
+ 0001-Adds-fixture-package-from-oslo.patch
+- move token flushing to hourly cron job
+
+-------------------------------------------------------------------
+Wed Jan 29 09:12:33 UTC 2014 - [email protected]
+
+- Add refresh_patches source service
+
+-------------------------------------------------------------------
+Thu Jan 23 18:00:28 UTC 2014 - [email protected]
+
+- install cron job to flush expired tokens, otherwise keystone
+ slows down after a while
+
+-------------------------------------------------------------------
@@ -33 +102 @@
- + Fix issues handling trust tokens via ec2tokens API
+ + Fix issues handling trust tokens via ec2tokens API (bnc#855338,
CVE-2013-6391)
New:
----
0001-Replacing-python-oauth2-by-oauthlib.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ openstack-keystone-doc.spec ++++++
--- /var/tmp/diff_new_pack.nKATxm/_old 2014-02-19 07:21:50.000000000 +0100
+++ /var/tmp/diff_new_pack.nKATxm/_new 2014-02-19 07:21:50.000000000 +0100
@@ -19,7 +19,7 @@
%define component keystone
Name: openstack-%{component}-doc
-Version: 2013.2.2.dev1.g0d83e7e
+Version: 2013.2.2.dev20.gc22f2ed
Release: 0
Summary: OpenStack Identity Service (Keystone) - Documentation
License: Apache-2.0
@@ -29,7 +29,6 @@
BuildRequires: openstack-suse-macros
BuildRequires: python-Sphinx
BuildRequires: python-base
-BuildRequires: python-d2to1
BuildRequires: python-oslo.sphinx
BuildRequires: python-pbr
BuildArch: noarch
@@ -43,7 +42,7 @@
This package contains documentation files for openstack-keystone.
%prep
-%setup -q -n keystone-2013.2.2.dev1.g0d83e7e
+%setup -q -n keystone-2013.2.2.dev20.gc22f2ed
%openstack_cleanup_prep
%build
++++++ openstack-keystone.spec ++++++
--- /var/tmp/diff_new_pack.nKATxm/_old 2014-02-19 07:21:50.000000000 +0100
+++ /var/tmp/diff_new_pack.nKATxm/_new 2014-02-19 07:21:50.000000000 +0100
@@ -21,7 +21,7 @@
%define username openstack-%{component}
Name: openstack-%{component}
-Version: 2013.2.2.dev1.g0d83e7e
+Version: 2013.2.2.dev20.gc22f2ed
Release: 0
Summary: OpenStack Identity Service (Keystone)
License: Apache-2.0
@@ -31,6 +31,8 @@
Source1: %{name}.init
Source2: logging.conf
Source7: %{name}.logrotate
+# PATCH-FIX-UPSTREAM [email protected] --
https://review.openstack.org/#/c/70750/
+Patch0: 0001-Replacing-python-oauth2-by-oauthlib.patch
BuildRequires: crudini
BuildRequires: openstack-suse-macros
BuildRequires: python-Babel
@@ -90,7 +92,7 @@
Requires: python-ldap
Requires: python-lxml >= 2.3
Requires: python-netaddr
-Requires: python-oauth2
+Requires: python-oauthlib >= 0.6
Requires: python-pam >= 0.1.4
Requires: python-passlib
Requires: python-pbr >= 0.5.21
@@ -138,7 +140,8 @@
functionality of OpenStack Keystone.
%prep
-%setup -q -n keystone-2013.2.2.dev1.g0d83e7e
+%setup -q -n keystone-2013.2.2.dev20.gc22f2ed
+%patch0 -p1
%openstack_cleanup_prep
%build
@@ -159,6 +162,13 @@
cp etc/policy.json %{buildroot}%{_sysconfdir}/keystone/
install -p -D -m 644 %{SOURCE7} %{buildroot}%{_sysconfdir}/logrotate.d/%{name}
+# Cron jobs
+mkdir -p %{buildroot}%{_sysconfdir}/cron.hourly/
+cat - > %{buildroot}%{_sysconfdir}/cron.hourly/%name <<EOF
+#!/bin/bash
+su openstack-keystone -s /bin/bash -c "/usr/bin/keystone-manage --config-file
/etc/keystone/keystone.conf token_flush" || :
+EOF
+
### init scripts
install -p -D -m 755 %{SOURCE1} %{buildroot}%{_initddir}/%{name}
mkdir -p %{buildroot}%{_sbindir}
@@ -203,6 +213,10 @@
exit 0
%post
+if [ $1 -eq 1 ] ; then
+ %define keystone_conf %{_sysconfdir}/keystone/keystone.conf
+ crudini --set %{keystone_conf} signing cert_subject
/C=US/ST=Unset/L=Unset/O=Unset/CN=$(hostname -f) || :
+fi
# create an example.com certificate if not available already
if ! [ -r /etc/keystone/ssl/certs/signing_cert.pem ]; then
if [ -r /etc/keystone/ssl/certs/index.txt ]; then
@@ -246,6 +260,7 @@
%{_bindir}/keystone-all
%{_bindir}/keystone-manage
%{_mandir}/man1/keystone*
+%attr(0755, root, %{groupname}) %{_sysconfdir}/cron.hourly/%name
%doc tools/sample_data.sh
%files -n python-keystone
++++++ 0001-Replacing-python-oauth2-by-oauthlib.patch ++++++
++++ 760 lines (skipped)
++++++ _service ++++++
--- /var/tmp/diff_new_pack.nKATxm/_old 2014-02-19 07:21:50.000000000 +0100
+++ /var/tmp/diff_new_pack.nKATxm/_new 2014-02-19 07:21:50.000000000 +0100
@@ -4,4 +4,8 @@
<param name="email">[email protected]</param>
<param name="plain-version">True</param>
</service>
+
+ <service name="refresh_patches" mode="disabled">
+ <param name="changesgenerate">enable</param>
+ </service>
</services>
++++++ keystone-stable-havana.tar.gz ++++++
++++ 39444 lines of diff (skipped)
++++++ openstack-keystone.logrotate ++++++
--- /var/tmp/diff_new_pack.nKATxm/_old 2014-02-19 07:21:50.000000000 +0100
+++ /var/tmp/diff_new_pack.nKATxm/_new 2014-02-19 07:21:50.000000000 +0100
@@ -6,7 +6,7 @@
weekly
dateext
missingok
- notifyempty
+ notifempty
su openstack-keystone openstack-keystone
copytruncate
sharedscripts
--
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
