Hello community,

here is the log from the commit of package openstack-keystone for 
openSUSE:Factory checked in at 2014-04-14 10:55:02
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/openstack-keystone (Old)
 and      /work/SRC/openSUSE:Factory/.openstack-keystone.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "openstack-keystone"

Changes:
--------
--- 
/work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone-doc.changes    
    2013-04-29 14:09:43.000000000 +0200
+++ 
/work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone-doc.changes
   2014-04-14 10:55:04.000000000 +0200
@@ -1,0 +2,488 @@
+Wed Apr  9 16:57:38 UTC 2014 - [email protected]
+
+- Update to version keystone-2014.1.dev14.gb07840a:
+  * Updated from global requirements
+  * Fix invalid LDAP filter for user ID with comma
+
+-------------------------------------------------------------------
+Thu Mar 27 01:40:19 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.2.dev176.g724d056:
+  * Open Juno development
+  * Enable lazy translations in httpd/keystone.py
+  * Avoid using .values() on the indexed columns
+  * Imported Translations from Transifex
+  * revert deprecation of v2 API
+  * Updated from global requirements
+  * Uses generator expressions instead of filter
+
+-------------------------------------------------------------------
+Wed Mar 26 01:41:56 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev162.g3056dc5:
+  * exclude disabled services from the catalog
+  * refactor AuthCatalog tests
+  * Rename keystone.tests.fixtures
+  * Change the default version discovery URLs
+  * Remove extra cache layer debugging
+  * Fix doc build errors with SQLAlchemy 0.9
+  * Sync oslo-incubator db.sqlalchemy b9e2499
+  * Always include 'enabled' field in service response
+
+-------------------------------------------------------------------
+Tue Mar 25 01:41:45 UTC 2014 - [email protected]
+
+- Rebased patches:
+  + 0001-Create-TMPDIR-for-tests-recursively.patch dropped (merged upstream)
+
+-------------------------------------------------------------------
+Tue Mar 25 01:41:40 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev146.ge7b3005:
+  * Create TMPDIR for tests recursively
+  * test tcp_keepidle only if it's available on the current platform
+  * Add dedicated URL for issuing unscoped federation tokens
+
+-------------------------------------------------------------------
+Mon Mar 24 01:40:44 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev141.g0fb0dfd:
+  * Filter SAML2 assertion parameters with certain prefix
+
+-------------------------------------------------------------------
+Sun Mar 23 01:43:22 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev139.g1e84251:
+  * Use oslo db.sqlalchemy.session.EngineFacade.from_config
+
+-------------------------------------------------------------------
+Sat Mar 22 01:39:59 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev137.ga3c7553:
+  * Add support for parallel testr workers in Keystone
+  * is_revoked check all viable subtrees
+  * update sample conf
+  * explicitly import gettext function
+  * expires_at should be in a tuple not turned into one
+  * Comparisons should account for instantaneous test execution
+  * Make domain_id immutable by default
+  * Do not expose internal data on UnexpectedError
+  * Filter LDAP dumb member when listing role assignments
+
+-------------------------------------------------------------------
+Fri Mar 21 01:06:14 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev121.gff88763:
+  * Ability to turn off ldap referral chasing
+  * Add user_id when calling populate_roles_for_groups
+  * Store groups ids objects list in the OS-FEDERATION object
+  * Uses explicit imports for _
+  * Rename scope_to_bad_project() to test_scope_to_bad_project()
+  * Make LIVE Tests configurable with ENV
+
+-------------------------------------------------------------------
+Wed Mar 19 01:07:36 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev109.gd4574a7:
+  * Move test .conf files to keystone/tests/config_files
+  * Removal of test .conf files
+
+-------------------------------------------------------------------
+Tue Mar 18 10:29:57 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev105.gd906f57:
+  * Filter out nonstring environment variables before rules mapping
+  * Provide option to make domain_id immutable
+  * Replace httplib.HTTPSConnection in ec2_token
+  * Don't automatically enable revocation events
+  * Ensure v3policysample correctly limits domain_admin access
+  * Sync db, db.sqlalchemy from oslo-incubator 0a3436f
+  * Do not use keystone.conf.sample in tests
+  * Use class attribute to represent 'user' and 'group'
+  * trust creation allowed with empty roles list
+
+-------------------------------------------------------------------
+Sat Mar 15 01:10:23 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev88.gcd3b6f6:
+  * Update sample config
+  * remove hardcoded SQL queries in tests
+  * Fix db_version failed with wrong arguments
+
+-------------------------------------------------------------------
+Fri Mar 14 00:56:25 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev82.g358674a:
+  * Updated from global requirements
+  * Remove unnecessary oauth1.Manager constructions
+  * Enforce groups presence for federated authn
+  * Very minor cleanup to default_fixtures
+  * Cleanup keystoneclient tests
+  * Cleanup fixture data added to test instances
+  * Cleans up test data from limit tests
+  * Cleanup of instance attrs in core tests
+  * Cleanup backends after each test
+  * Fix include only enabled endpoints in catalog
+  * Add unit tests for disabled endpoints in catalog
+  * Add OS-OAUTH1 to consumers links section
+
+-------------------------------------------------------------------
+Thu Mar 13 01:26:10 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev58.gcb742d0:
+  * Fixup region description uniqueness
+
+-------------------------------------------------------------------
+Wed Mar 12 06:19:57 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev56.gbde896b:
+  * Add missing documentation for enabling oauth1 auth plugin
+  * Add missing documentation for enabling federation auth plugin
+  * Configurable temporary directory for tests
+  * Call an existing method in sync cache for revoke events
+  * Remove unnecessary calls to self.config()
+  * Import order is fixed
+
+-------------------------------------------------------------------
+Tue Mar 11 00:38:42 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev45.gfb8209e:
+  * Use config fixture
+
+-------------------------------------------------------------------
+Mon Mar 10 15:28:05 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev43.g58bb5e9:
+  * Fix docstrings in federation related modules
+  * Sync db, db.sqlalchemy, gettextutils from oslo-incubator 6ba44fd
+  * V3 xml responses should use v3 namespace
+  2014.1.b3
+  * Update ADMIN_TOKEN description in docs
+  * Remove unused function from tests
+  * Don't need session.flush in context managed by session
+  * Remove vim headers
+  * Removes use of timeutils.set_time_override
+  * Removes a redundant test
+  * revocation_list only call isotime on datetime objects
+  * Handle exception messages with six.text_type
+  * Fix webob.exc.HTTPForbidden parameter miss
+
+-------------------------------------------------------------------
+Thu Mar  6 16:31:18 UTC 2014 - [email protected]
+
+- Fix requirements
+
+-------------------------------------------------------------------
+Thu Mar  6 16:20:17 UTC 2014 - [email protected]
+
+- Update to version keystone-2014.1.dev515.g8c168bc:
+  * v3 endpoint create should require url
+
+-------------------------------------------------------------------
+Thu Mar  6 15:15:26 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev513.g7913636:
+  * Mark revoke as experimental
+  * Imported Translations from Transifex
+  * allow create credential with the system admin token
+  * Always include 'enabled' field in endpoint response
+  * Add the last of the outstanding helpstrings to config
+  * Update curl api example to specify tenant
+  * Update Oslo wiki link in README
+  * Lazy gettextutils behavior
+  * Update Oslo wiki link in README
+
+-------------------------------------------------------------------
+Thu Mar  6 00:55:38 UTC 2014 -  [email protected]
+
++++ 291 more lines (skipped)
++++ between 
/work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone-doc.changes
++++ and 
/work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone-doc.changes
--- /work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes    
2014-02-19 07:21:49.000000000 +0100
+++ 
/work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes   
    2014-04-14 10:55:04.000000000 +0200
@@ -2 +2 @@
-Thu Feb 13 16:10:02 UTC 2014 - [email protected]
+Wed Apr  9 16:57:38 UTC 2014 - [email protected]
@@ -4 +4,3 @@
-- Add 0001-Replacing-python-oauth2-by-oauthlib.patch, port from oauth2 to 
oauthlib
+- Update to version keystone-2014.1.dev14.gb07840a:
+  * Updated from global requirements
+    * Fix invalid LDAP filter for user ID with comma
@@ -7 +9 @@
-Thu Feb  6 14:48:02 UTC 2014 - [email protected]
+Tue Apr  8 11:40:18 UTC 2014 - [email protected]
@@ -9 +11,23 @@
-- fix typo in logrotate 
+- add 0001-Start-ping-listener-also-for-postgresql.patch 
+
+-------------------------------------------------------------------
+Mon Apr  7 09:20:21 UTC 2014 - [email protected]
+
+- switch to icehouse branch once again 
+
+-------------------------------------------------------------------
+Thu Mar 27 10:10:33 UTC 2014 - [email protected]
+
+- switch to icehouse branch again 
+
+-------------------------------------------------------------------
+Thu Mar 27 01:40:23 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.2.dev176.g724d056:
+  * Open Juno development
+  * Enable lazy translations in httpd/keystone.py
+  * Avoid using .values() on the indexed columns
+  * Imported Translations from Transifex
+  * revert deprecation of v2 API
+  * Updated from global requirements
+  * Uses generator expressions instead of filter
@@ -12 +36,14 @@
-Mon Feb 03 09:23:24 UTC 2014 - [email protected]
+Wed Mar 26 01:41:59 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev162.g3056dc5:
+  * exclude disabled services from the catalog
+  * refactor AuthCatalog tests
+  * Rename keystone.tests.fixtures
+  * Change the default version discovery URLs
+  * Remove extra cache layer debugging
+  * Fix doc build errors with SQLAlchemy 0.9
+  * Sync oslo-incubator db.sqlalchemy b9e2499
+  * Always include 'enabled' field in service response
+
+-------------------------------------------------------------------
+Tue Mar 25 01:41:46 UTC 2014 - [email protected]
@@ -15 +52,2 @@
-  + 0001-Adds-fixture-package-from-oslo.patch dropped (merged upstream)
+  + 0001-Create-TMPDIR-for-tests-recursively.patch dropped (merged upstream)
+  + 0001-Create-TMPDIR-for-tests-recursively.patch dropped (merged upstream)
@@ -18 +56 @@
-Mon Feb  3 09:23:22 UTC 2014 - [email protected]
+Tue Mar 25 01:41:44 UTC 2014 -  [email protected]
@@ -20,6 +58,4 @@
-- Update to version 2013.2.2.dev19.g9056b66:
-  + Remove roles from OS-TRUST list responses
-  + Adds fixture package from oslo
-  + Sync log_handler module from Oslo
-  + Remove netifaces requirement
-  + list_revoked_tokens sql speedup for havana
+- Update to version keystone-2014.1.dev146.ge7b3005:
+  * Create TMPDIR for tests recursively
+  * test tcp_keepidle only if it's available on the current platform
+  * Add dedicated URL for issuing unscoped federation tokens
@@ -28 +64 @@
-Mon Feb  3 09:21:42 UTC 2014 - [email protected]
+Mon Mar 24 17:51:47 UTC 2014 - [email protected]
@@ -30 +66 @@
-- remove 0001-list_revoked_tokens-sql-speedup-for-havana.patch 
+- add 0001-Create-TMPDIR-for-tests-recursively.patch
@@ -33 +69 @@
-Sat Feb  1 01:24:47 UTC 2014 - [email protected]
+Mon Mar 24 01:40:47 UTC 2014 -  [email protected]
@@ -35,4 +71,2 @@
-- Update to version 2013.2.2.dev9.g2724951:
-  + Try decoding string to UTF-8 on error message fail
-  + Have tox use pip upgrade when installing
-  + Sync rpc fix from oslo-incubator
+- Update to version keystone-2014.1.dev141.g0fb0dfd:
+  * Filter SAML2 assertion parameters with certain prefix
@@ -41 +75 @@
-Fri Jan 31 01:37:29 UTC 2014 - [email protected]
+Sun Mar 23 01:43:25 UTC 2014 -  [email protected]
@@ -43,2 +77,2 @@
-- Update to version 2013.2.2.dev3.gcecee8e:
-  + Import strutils from oslo
+- Update to version keystone-2014.1.dev139.g1e84251:
+  * Use oslo db.sqlalchemy.session.EngineFacade.from_config
@@ -47 +81 @@
-Thu Jan 30 17:10:12 UTC 2014 - [email protected]
+Sat Mar 22 01:40:02 UTC 2014 -  [email protected]
@@ -49,2 +83,188 @@
-- Set common name of example certs to FQDN to make then slightly more
-  useful (bnc#855446)
+- Update to version keystone-2014.1.dev137.ga3c7553:
+  * Add support for parallel testr workers in Keystone
+  * is_revoked check all viable subtrees
+  * update sample conf
+  * explicitly import gettext function
+  * expires_at should be in a tuple not turned into one
+  * Comparisons should account for instantaneous test execution
+  * Make domain_id immutable by default
+  * Do not expose internal data on UnexpectedError
+  * Filter LDAP dumb member when listing role assignments
+
+-------------------------------------------------------------------
+Fri Mar 21 01:06:17 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev121.gff88763:
+  * Ability to turn off ldap referral chasing
+  * Add user_id when calling populate_roles_for_groups
+  * Store groups ids objects list in the OS-FEDERATION object
+  * Uses explicit imports for _
+  * Rename scope_to_bad_project() to test_scope_to_bad_project()
+  * Make LIVE Tests configurable with ENV
+
+-------------------------------------------------------------------
+Wed Mar 19 01:07:39 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev109.gd4574a7:
+  * Move test .conf files to keystone/tests/config_files
+  * Removal of test .conf files
+
+-------------------------------------------------------------------
+Tue Mar 18 10:29:59 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev105.gd906f57:
+  * Filter out nonstring environment variables before rules mapping
+  * Provide option to make domain_id immutable
+  * Replace httplib.HTTPSConnection in ec2_token
+  * Don't automatically enable revocation events
+  * Ensure v3policysample correctly limits domain_admin access
+  * Sync db, db.sqlalchemy from oslo-incubator 0a3436f
+  * Do not use keystone.conf.sample in tests
+  * Use class attribute to represent 'user' and 'group'
+  * trust creation allowed with empty roles list
+
+-------------------------------------------------------------------
+Mon Mar 17 10:06:26 UTC 2014 - [email protected]
+
+- switch over to non-openstack-prefix'ed users
+
+-------------------------------------------------------------------
+Sat Mar 15 01:10:27 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev88.gcd3b6f6:
+  * Update sample config
+  * remove hardcoded SQL queries in tests
+  * Fix db_version failed with wrong arguments
+
+-------------------------------------------------------------------
+Fri Mar 14 00:56:28 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev82.g358674a:
+  * Updated from global requirements
+  * Remove unnecessary oauth1.Manager constructions
+  * Enforce groups presence for federated authn
+  * Very minor cleanup to default_fixtures
+  * Cleanup keystoneclient tests
+  * Cleanup fixture data added to test instances
+  * Cleans up test data from limit tests
+  * Cleanup of instance attrs in core tests
+  * Cleanup backends after each test
+  * Fix include only enabled endpoints in catalog
+  * Add unit tests for disabled endpoints in catalog
+  * Add OS-OAUTH1 to consumers links section
+
+-------------------------------------------------------------------
+Thu Mar 13 01:26:13 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev58.gcb742d0:
+  * Fixup region description uniqueness
+
+-------------------------------------------------------------------
+Wed Mar 12 06:20:00 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev56.gbde896b:
+  * Add missing documentation for enabling oauth1 auth plugin
+  * Add missing documentation for enabling federation auth plugin
+  * Configurable temporary directory for tests
+  * Call an existing method in sync cache for revoke events
+  * Remove unnecessary calls to self.config()
+  * Import order is fixed
+
+-------------------------------------------------------------------
+Tue Mar 11 00:38:46 UTC 2014 -  [email protected]
+
+- Update to version keystone-2014.1.dev45.gfb8209e:
+  * Use config fixture
+
+-------------------------------------------------------------------
+Mon Mar 10 15:28:08 UTC 2014 -  [email protected]
++++ 1083 more lines (skipped)
++++ between 
/work/SRC/openSUSE:Factory/openstack-keystone/openstack-keystone.changes
++++ and 
/work/SRC/openSUSE:Factory/.openstack-keystone.new/openstack-keystone.changes

Old:
----
  0001-Replacing-python-oauth2-by-oauthlib.patch
  keystone-stable-havana.tar.gz

New:
----
  0001-Start-ping-listener-also-for-postgresql.patch
  keystone-2014.1.rc2.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ openstack-keystone-doc.spec ++++++
--- /var/tmp/diff_new_pack.sNBelQ/_old  2014-04-14 10:55:05.000000000 +0200
+++ /var/tmp/diff_new_pack.sNBelQ/_new  2014-04-14 10:55:05.000000000 +0200
@@ -19,18 +19,26 @@
 %define component keystone
 
 Name:           openstack-%{component}-doc
-Version:        2013.2.2.dev20.gc22f2ed
+Version:        2014.1.rc2
 Release:        0
 Summary:        OpenStack Identity Service (Keystone) - Documentation
 License:        Apache-2.0
 Group:          Documentation/HTML
 Url:            https://github.com/openstack/keystone
-Source:         keystone-stable-havana.tar.gz
+Source:         
http://tarballs.openstack.org/keystone/keystone-%{version}.tar.gz
+BuildRequires:  openstack-keystone
 BuildRequires:  openstack-suse-macros
 BuildRequires:  python-Sphinx
-BuildRequires:  python-base
-BuildRequires:  python-oslo.sphinx
-BuildRequires:  python-pbr
+BuildRequires:  python-WebTest
+BuildRequires:  python-fixtures
+BuildRequires:  python-lockfile
+BuildRequires:  python-mock
+BuildRequires:  python-mox
+BuildRequires:  python-oslo.messaging
+BuildRequires:  python-oslosphinx
+BuildRequires:  python-pycadf
+BuildRequires:  python-testscenarios
+BuildRequires:  python-testtools
 BuildArch:      noarch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 
@@ -42,7 +50,7 @@
 This package contains documentation files for openstack-keystone.
 
 %prep
-%setup -q -n keystone-2013.2.2.dev20.gc22f2ed
+%setup -q -n keystone-%{version}
 %openstack_cleanup_prep
 
 %build

++++++ openstack-keystone.spec ++++++
--- /var/tmp/diff_new_pack.sNBelQ/_old  2014-04-14 10:55:05.000000000 +0200
+++ /var/tmp/diff_new_pack.sNBelQ/_new  2014-04-14 10:55:05.000000000 +0200
@@ -17,49 +17,67 @@
 
 
 %define component keystone
-%define groupname openstack-%{component}
-%define username openstack-%{component}
+%define groupname %{component}
+%define username %{component}
 
 Name:           openstack-%{component}
-Version:        2013.2.2.dev20.gc22f2ed
+Version:        2014.1.rc2
 Release:        0
 Summary:        OpenStack Identity Service (Keystone)
 License:        Apache-2.0
 Group:          Development/Languages/Python
 Url:            https://github.com/openstack/keystone
-Source:         keystone-stable-havana.tar.gz
+Source:         
http://tarballs.openstack.org/keystone/keystone-%{version}.tar.gz
 Source1:        %{name}.init
 Source2:        logging.conf
 Source7:        %{name}.logrotate
-# PATCH-FIX-UPSTREAM [email protected] -- 
https://review.openstack.org/#/c/70750/
-Patch0:         0001-Replacing-python-oauth2-by-oauthlib.patch
+Patch0:         0001-Start-ping-listener-also-for-postgresql.patch
 BuildRequires:  crudini
 BuildRequires:  openstack-suse-macros
-BuildRequires:  python-Babel
+BuildRequires:  python-Paste
+BuildRequires:  python-PasteDeploy >= 1.5.0
+BuildRequires:  python-WebTest >= 2.0
 BuildRequires:  python-base
-BuildRequires:  python-netaddr
-BuildRequires:  python-oslo.config
-BuildRequires:  python-oslo.sphinx
-BuildRequires:  python-pbr
-BuildRequires:  python-setuptools
+BuildRequires:  python-fixtures >= 0.3.14
+BuildRequires:  python-jsonschema >= 2.0.0
+BuildRequires:  python-keystoneclient >= 0.6.0
+BuildRequires:  python-ldap
+BuildRequires:  python-lockfile >= 0.8
+BuildRequires:  python-lxml >= 2.3
+BuildRequires:  python-mock >= 1.0
+BuildRequires:  python-mox >= 0.5.3
+BuildRequires:  python-netaddr >= 0.7.6
+BuildRequires:  python-oauthlib >= 0.6
+BuildRequires:  python-oslo.config >= 1.2.0
+BuildRequires:  python-oslo.messaging >= 1.3.0a4
+BuildRequires:  python-pam >= 0.1.4
+BuildRequires:  python-pbr >= 0.6
+BuildRequires:  python-pycadf >= 0.1.9
+BuildRequires:  python-testscenarios  >= 0.4
+BuildRequires:  python-testtools >= 0.9.34
 # Needed for %%post section keystone-manage invocation:
-BuildRequires:  python-WebOb
+BuildRequires:  python-WebOb >= 1.2.3
 BuildRequires:  python-passlib
-BuildRequires:  python-routes
 # Documentation build requirements:
+BuildRequires:  python-Babel >= 1.3
 BuildRequires:  python-Sphinx
+BuildRequires:  python-oslosphinx
 Requires:       logrotate
-Requires:       python-argparse
-Requires:       python-iso8601 >= 0.1.8
+Requires:       python-iso8601 >= 0.1.9
 Requires:       python-keystone = %{version}
 Requires:       python-oslo.config >= 1.2.0
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
+# keystone dependencies
 # To generate a self-signed certificate to be used in demo setups:
 Requires(post): coreutils
+Requires(post): crudini
 Requires(post): python-keystone
-Requires(post): python-dogpile.cache
+Requires(post): python-dogpile.cache >= 0.5.0
 Requires(post): python-argparse
-Requires(post): python-iso8601
+Requires(post): python-iso8601 >= 0.1.8
+# NOTE(saschp): We need OpenStack'S fork here:
+Requires(post): python-sqlalchemy-migrate >= 0.8.2
+Requires(post): python-Routes >= 1.12.3
 Requires(post): openssl
 Requires(post): sysconfig
 Requires(pre):  pwdutils
@@ -87,20 +105,23 @@
 Requires:       python-dogpile.cache >= 0.5.0
 Requires:       python-eventlet >= 0.13.0
 Requires:       python-greenlet >= 0.3.2
-Requires:       python-iso8601 >= 0.1.8
-Requires:       python-keystoneclient >= 0.3.2
-Requires:       python-ldap
+Requires:       python-iso8601 >= 0.1.9
+Requires:       python-jsonschema >= 2.0.0
+Requires:       python-keystoneclient >= 0.7.0
+Requires:       python-kombu >= 2.4.8
+Requires:       python-ldap >= 2.3.13
+Requires:       python-lockfile >= 0.8
 Requires:       python-lxml >= 2.3
-Requires:       python-netaddr
+Requires:       python-netaddr >= 0.7.6
 Requires:       python-oauthlib >= 0.6
+Requires:       python-oslo.messaging >= 1.3.0a9
 Requires:       python-pam >= 0.1.4
 Requires:       python-passlib
-Requires:       python-pbr >= 0.5.21
-Requires:       python-routes >= 1.12.3
-Requires:       python-sqlalchemy >= 0.7.8
-BuildRequires:  python-sqlalchemy >= 0.7.8
-Requires:       python-sqlalchemy-migrate >= 0.7.2
-BuildRequires:  python-sqlalchemy-migrate >= 0.7.2
+Requires:       python-pbr >= 0.6
+Requires:       python-pycadf >= 0.4.1
+Requires:       python-six >= 1.5.2
+Requires:       python-sqlalchemy-migrate >= 0.8.2
+Requires:       python-stevedore >= 0.14
 
 %description -n python-keystone
 Keystone is an OpenStack project that provides Identity, Token, Catalog
@@ -113,25 +134,22 @@
 Summary:        Testsuite for the OpenStack Keystone
 Group:          Development/Languages/Python
 Requires:       %{name} = %{version}
-Requires:       python-Sphinx >= 1.1.2
 Requires:       python-WebTest >= 2.0
-Requires:       python-coverage >= 3.6
-Requires:       python-flake8 >= 2.0
-Requires:       python-hacking >= 0.5.6
-Requires:       python-keystoneclient >= 0.3.2
+%if 0%{?suse_version} && 0%{?suse_version} <= 1110
+Requires:       python-discover
+%endif
+Requires:       python-fixtures >= 0.3.14
+Requires:       python-keystoneclient >= 0.7.0
+Requires:       python-mock >= 1.0
 Requires:       python-mox >= 0.5.3
-Requires:       python-netifaces >= 0.5
-Requires:       python-nose
-Requires:       python-nosehtmloutput >= 0.0.3
-Requires:       python-nosexcover
-Requires:       python-openstack.nose_plugin >= 0.7
-Requires:       python-pep8 >= 1.4.5
-Requires:       python-pyflakes >= 0.7.2
+Requires:       python-pysqlite
 Requires:       python-python-memcached >= 1.48
+Requires:       python-python-subunit >= 0.0.18
 Requires:       python-requests >= 1.1
 Requires:       python-swift
-Requires:       python-testtools >= 0.9.32
-Requires:       python-unittest2
+Requires:       python-testrepository >= 0.0.18
+Requires:       python-testscenarios >= 0.4
+Requires:       python-testtools >= 0.9.34
 # checkout_vendor in ./keystone/test.py
 Requires:       git-core
 
@@ -140,13 +158,13 @@
 functionality of OpenStack Keystone.
 
 %prep
-%setup -q -n keystone-2013.2.2.dev20.gc22f2ed
-%patch0 -p1
+%setup -q -n %{component}-%{version}
+%patch0
 %openstack_cleanup_prep
 
 %build
 python setup.py build
-python setup.py build_sphinx -b man
+sphinx-build -b man doc/source doc/build/man
 
 %install
 python setup.py install --prefix=%{_prefix} --root=%{buildroot}
@@ -166,7 +184,7 @@
 mkdir -p %{buildroot}%{_sysconfdir}/cron.hourly/
 cat - > %{buildroot}%{_sysconfdir}/cron.hourly/%name <<EOF
 #!/bin/bash
-su openstack-keystone -s /bin/bash -c "/usr/bin/keystone-manage --config-file 
/etc/keystone/keystone.conf token_flush" || :
+su %{username} -s /bin/bash -c "/usr/bin/keystone-manage --config-file 
/etc/keystone/keystone.conf token_flush" || :
 EOF
 
 ### init scripts
@@ -184,13 +202,8 @@
 # the tests and we want to keep it out of /usr/lib/
 # https://review.openstack.org/#q,I9b02a5273dd27db963e9a26085b7456f4c5f6a41,n,z
 mkdir -p %{buildroot}%{_localstatedir}/lib/%{name}-test/tmp
-sed -i -e "s/TMPDIR = .*/TMPDIR = os.path.join(ROOTDIR, 'tmp')/" 
%{buildroot}%{python_sitelib}/%{component}/tests/core.py
 ln -s %{_localstatedir}/lib/%{name}-test/tmp 
%{buildroot}%{python_sitelib}/%{component}/tests/tmp
-# Allow the unittests to find the signing certs
-%define keystone_test_overrides 
%{buildroot}%{python_sitelib}/%{component}/tests/test_overrides.conf
-crudini --set %{keystone_test_overrides} signing certfile 
%{_localstatedir}/lib/%{name}-test/examples/pki/certs/signing_cert.pem
-crudini --set %{keystone_test_overrides} signing keyfile 
%{_localstatedir}/lib/%{name}-test/examples/pki/private/signing_key.pem
-crudini --set %{keystone_test_overrides} signing ca_certs 
%{_localstatedir}/lib/%{name}-test/examples/pki/certs/cacert.pem
+sed -i -e "s/TMPDIR = .*/TMPDIR = os.path.join(ROOTDIR, 'tmp')/" 
%{buildroot}%{python_sitelib}/%{component}/tests/core.py
 
 ### create keystone ssl dirs
 install -d %{buildroot}%{_sysconfdir}/keystone/ssl/private
@@ -201,22 +214,17 @@
 ### set default configuration (mostly applies to package-only setups and 
quickstart, i.e. not generally crowbar)
 %define keystone_conf %{buildroot}%{_sysconfdir}/keystone/keystone.conf
 crudini --set %{keystone_conf} DEFAULT verbose True
-crudini --set %{keystone_conf} DEFAULT log_file keystone.log
 crudini --set %{keystone_conf} DEFAULT log_dir /var/log/keystone
 crudini --set %{keystone_conf} catalog driver 
keystone.catalog.backends.sql.Catalog
 #TODO/FIXME(saschpe): Do we want to use sqlite per default or demand 
PostgreSQL right away?
 crudini --set %{keystone_conf} sql connection 
sqlite:////var/lib/keystone/keystone.db
 
 %pre
-getent group %{groupname} >/dev/null || groupadd -r %{groupname}
-getent passwd %{username} >/dev/null || useradd -r -g %{groupname} -d 
%{_localstatedir}/lib/keystone -s /sbin/nologin -c "OpenStack keystone Daemon" 
%{username}
-exit 0
+%openstack_pre_user_group_create %{username} %{groupname}
 
 %post
-if [ $1 -eq 1 ] ; then
-  %define keystone_conf %{_sysconfdir}/keystone/keystone.conf
-  crudini --set %{keystone_conf} signing cert_subject 
/C=US/ST=Unset/L=Unset/O=Unset/CN=$(hostname -f) || :
-fi
+%define keystone_conf %{_sysconfdir}/keystone/keystone.conf
+crudini --set %{keystone_conf} signing cert_subject 
/C=US/ST=Unset/L=Unset/O=Unset/CN=$(hostname -f)
 # create an example.com certificate if not available already
 if ! [ -r /etc/keystone/ssl/certs/signing_cert.pem ]; then
   if [ -r /etc/keystone/ssl/certs/index.txt ]; then
@@ -227,7 +235,9 @@
   fi
   /usr/bin/keystone-manage pki_setup --keystone-user %{username} 
--keystone-group %{groupname}
   # keystone-manage will create a keystone.log file owned by root; fix that
-  test -f %{_localstatedir}/log/keystone/keystone.log && chown 
%{username}:%{groupname} %{_localstatedir}/log/keystone/keystone.log
+  test -f %{_localstatedir}/log/keystone/keystone-manage.log && {
+    chown %{username}:%{groupname} 
%{_localstatedir}/log/keystone/keystone-manage.log
+  }
 fi
 %fillup_and_insserv %{name}
 %restart_on_update %{name}

++++++ 0001-Start-ping-listener-also-for-postgresql.patch ++++++
--- keystone/openstack/common/db/sqlalchemy/session.py
+++ keystone/openstack/common/db/sqlalchemy/session.py
@@ -367,7 +367,7 @@
             return [columns]
         return columns[len(uniqbase):].split("0")[1:]
 
-    if engine_name not in ["ibm_db_sa", "mysql", "sqlite", "postgresql"]:
+    if engine_name not in ("ibm_db_sa", "mysql", "sqlite", "postgresql"):
         return
 
     # FIXME(johannes): The usage of the .message attribute has been
@@ -489,7 +489,7 @@
 
 
 def _ping_listener(engine, dbapi_conn, connection_rec, connection_proxy):
-    """Ensures that MySQL and DB2 connections are alive.
+    """Ensures that MySQL, PostgreSQL or DB2 connections are alive.
 
     Borrowed from:
     http://groups.google.com/group/sqlalchemy/msg/a4ce563d802c929f
@@ -645,7 +645,7 @@
 
     sqlalchemy.event.listen(engine, 'checkin', _thread_yield)
 
-    if engine.name in ['mysql', 'ibm_db_sa']:
+    if engine.name in ('ibm_db_sa', 'mysql', 'postgresql'):
         ping_callback = functools.partial(_ping_listener, engine)
         sqlalchemy.event.listen(engine, 'checkout', ping_callback)
         if engine.name == 'mysql':
++++++ _service ++++++
--- /var/tmp/diff_new_pack.sNBelQ/_old  2014-04-14 10:55:05.000000000 +0200
+++ /var/tmp/diff_new_pack.sNBelQ/_new  2014-04-14 10:55:05.000000000 +0200
@@ -1,10 +1,12 @@
 <services>
-  <service name="git_tarballs" mode="disabled">
-    <param 
name="url">http://tarballs.openstack.org/keystone/keystone-stable-havana.tar.gz</param>
-    <param name="email">[email protected]</param>
-    <param name="plain-version">True</param>
+  <service mode="disabled" name="download_files"> 
+    <param name="changesgenerate">enable</param>
+  </service>
+  <service mode="disabled" name="set_version">
+    <param name="basename">keystone</param>
+  </service>
+  <service mode="disabled" name="python_requires">
   </service>
-
   <service name="refresh_patches" mode="disabled">
     <param name="changesgenerate">enable</param>
   </service>

++++++ openstack-keystone.init ++++++
--- /var/tmp/diff_new_pack.sNBelQ/_old  2014-04-14 10:55:05.000000000 +0200
+++ /var/tmp/diff_new_pack.sNBelQ/_new  2014-04-14 10:55:05.000000000 +0200
@@ -12,7 +12,7 @@
 # Description:       OpenStack Identity (Keystone)
 ### END INIT INFO
 
-USER="openstack-keystone"
+USER="keystone"
 CONFFILE="/etc/keystone/keystone.conf"
 RUNDIR="/var/run/keystone"
 

++++++ openstack-keystone.logrotate ++++++
--- /var/tmp/diff_new_pack.sNBelQ/_old  2014-04-14 10:55:05.000000000 +0200
+++ /var/tmp/diff_new_pack.sNBelQ/_new  2014-04-14 10:55:05.000000000 +0200
@@ -7,7 +7,7 @@
     dateext
     missingok
     notifempty
-    su openstack-keystone openstack-keystone
+    su keystone keystone
     copytruncate
     sharedscripts
 }

-- 
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to