Update federated user display name with shadow_users_api
When a user comes to the cloud for the first time, a shadow user is
created. When the user authenticates again, this shadow user is
fetched and returned. Before it is returned, its display name should
be updated. But the call to update the display name fails because
neither identity manager nor identity drivers have the required
method. However, the required method exists in shadow_users_api.
The issue was hidden because method shadow_federated_user was
cached and while the cache lived, the user could authenticate.
Use the method of shadow_user_api instead of identity_api to update
federated user display name.
Change-Id: I58e65bdf3a953f3ded485003939b81f908738e1e
Closes-Bug: 1566282
(cherry picked from commit 7ad4f8728cce354617b5facefe5076d65af311c6)
commit dba04cdd232ab72704df58cff791d52c1c99bc90
Author: Morgan Fainberg <email address hidden>
Date: Mon Mar 28 10:50:12 2016 -0700
Correct `role_name` constraint dropping
The `role_name` constraint was not properly dropped in some cases
because the unique constraint was not consistently named. In all
cases we must search for the constraint expected, not assume the
name of the constraint will be consistent (especially from older
installs that have been moved forward in releases).
This change fixes migration 88, updates 96 (for backport to
stable/mitaka) This is being overly cautious, but specifically
is to handle the case where someone performed the upgrade and
manually fixed the migration resulting in duplicated constraints
in the role_table. Note that migration 100 was not backported since
it was a placeholder migration.
Without this patch, the keystone-manage command looks for a default
keystone.conf relative to the installed executable. In a developer's
case this is likely to be relative to <venv name>/bin/keystone-manage.
If installed via distro packages this will be something like
/usr/bin/keystone-manage. The keystone developer documentation
instructs the developer to copy the sample config file into the etc/
directory of the keystone source directory[1], which is not necessarily
related to where the keystone-manage executable is installed. This
patch causes the keystone-manage command to search for
etc/keystone.conf relative to the python source file,
keystone/cmd/manage.py, which will always be in the same place relative
to the keystone repo's etc/ directory. If installed via distro packages
this will cause keystone-manage to search for the config in something
like /usr/lib/python2.7/dist-packages, but since it falls back to
searching the standard oslo.cfg directories, the behavior won't change.
oslo.log is going to change to use Newton rather than N so this test
should not make an assumption about the way that
versionutils.deprecated is calling report_deprecated_feature.
Change-Id: I06aa6d085232376811f73597b2d84b5174bc7a8d
Closes-Bug: 1561121
(cherry picked from commit 8556437ee02de028ec5de3b867abaab82533cb91)
Reviewed: https:/ /review. openstack. org/302567 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=a78623a456f c0a657a01aa5a88 7641f0b73d64a8
Committed: https:/
Submitter: Jenkins
Branch: master
commit 3e5fca06c6b7dd6 060721faa39428b 133edd10f0
Author: Boris Bobrov <email address hidden>
Date: Tue Apr 5 18:50:48 2016 +0300
Update federated user display name with shadow_users_api
When a user comes to the cloud for the first time, a shadow user is
created. When the user authenticates again, this shadow user is
fetched and returned. Before it is returned, its display name should
be updated. But the call to update the display name fails because
neither identity manager nor identity drivers have the required
method. However, the required method exists in shadow_users_api.
The issue was hidden because method shadow_ federated_ user was
cached and while the cache lived, the user could authenticate.
Use the method of shadow_user_api instead of identity_api to update
federated user display name.
Change-Id: I58e65bdf3a953f 3ded485003939b8 1f908738e1e 617b5facefe5076 d65af311c6)
Closes-Bug: 1566282
(cherry picked from commit 7ad4f8728cce354
commit dba04cdd232ab72 704df58cff791d5 2c1c99bc90
Author: Morgan Fainberg <email address hidden>
Date: Mon Mar 28 10:50:12 2016 -0700
Correct `role_name` constraint dropping
The `role_name` constraint was not properly dropped in some cases
because the unique constraint was not consistently named. In all
cases we must search for the constraint expected, not assume the
name of the constraint will be consistent (especially from older
installs that have been moved forward in releases).
This change fixes migration 88, updates 96 (for backport to
stable/mitaka) This is being overly cautious, but specifically
is to handle the case where someone performed the upgrade and
manually fixed the migration resulting in duplicated constraints
in the role_table. Note that migration 100 was not backported since
it was a placeholder migration.
Conflicts:
keystone/ tests/unit/ test_sql_ upgrade. py
Co-Authored-By: "Matthew Thode" <email address hidden> 57d3e9323b281a2 abd2ad0c983 8cbabf9aa9b3bd0 6c6079c415)
Change-Id: Ie0dc3d2449bace
closes-bug: #1562934
(cherry picked from commit 276e57e2083dcad
commit cf1fd9dad7d89d5 0a10ab204aa4876 63ea258988
Author: OpenStack Proposal Bot <email address hidden>
Date: Wed Mar 30 06:16:27 2016 +0000
Imported Translations from Zanata
For more information about this automatic import see: /wiki.openstack .org/wiki/ Translations/ Infrastructure
https:/
Change-Id: Iff9556deb5ebb4 65c7124c120e780 6774c517472
commit c4b08ed2522ee77 1331d53f153bda5 098c9fb9f4
Author: OpenStack Proposal Bot <email address hidden>
Date: Tue Mar 29 06:52:52 2016 +0000
Imported Translations from Zanata
For more information about this automatic import see: /wiki.openstack .org/wiki/ Translations/ Infrastructure
https:/
Change-Id: I1e81320c932549 e38bade5ef8d885 ef426990f40
commit dd38543bdc2a11b 38162fda616fd79 33f1539397
Author: Colleen Murphy <email address hidden>
Date: Tue Mar 22 16:10:06 2016 -0700
Fix keystone-manage config file path
Without this patch, the keystone-manage command looks for a default keystone- manage. bin/keystone- manage. The keystone developer documentation keystone. conf relative to the python source file, cmd/manage. py, which will always be in the same place relative python2. 7/dist- packages, but since it falls back to
keystone.conf relative to the installed executable. In a developer's
case this is likely to be relative to <venv name>/bin/
If installed via distro packages this will be something like
/usr/
instructs the developer to copy the sample config file into the etc/
directory of the keystone source directory[1], which is not necessarily
related to where the keystone-manage executable is installed. This
patch causes the keystone-manage command to search for
etc/
keystone/
to the keystone repo's etc/ directory. If installed via distro packages
this will cause keystone-manage to search for the config in something
like /usr/lib/
searching the standard oslo.cfg directories, the behavior won't change.
[1] http:// docs.openstack. org/developer/ keystone/ developing. html#configurin g-keystone
Closes-bug: #1561099
Change-Id: Icf9caac030e62d eb17ce5df3a8273 7b408591ac0 45e3a7a6a7d1087 a94f402f89)
(cherry picked from commit 139f892fecf4ce6
commit 685116d1a279939 9819ed780679403 e7576e67b5
Author: Brant Knudson <email address hidden>
Date: Thu Mar 10 08:35:13 2016 -0600
Correct test to support changing N release name
oslo.log is going to change to use Newton rather than N so this test s.deprecated is calling report_ deprecated_ feature.
should not make an assumption about the way that
versionutil
Change-Id: I06aa6d08523237 6811f73597b2d84 b5174bc7a8d 8ec5de3b867abaa b82533cb91)
Closes-Bug: 1561121
(cherry picked from commit 8556437ee02de02
commit aa53ad975fdc1a7 0091b87400c85ff 4f1d658d2c
Author: OpenStack Proposal Bot <email address hidden>
Date: Fri Mar 25 06:49:01 2016 +0000
Imported Translations from Zanata
For more information about this automatic import see: /wiki.openstack .org/wiki/ Translations/ Infrastructure
https:/
Change-Id: I0b0de22a9ddca3 cc4b6a4bf5f8478 f884c4c51c3
commit ae068b118dca915 d237d0dde32e951 e0ab48a529
Author: OpenStack Proposal Bot <email address hidden>
Date: Thu Mar 24 06:48:00 2016 +0000
Imported Translations from Zanata
For more information about this automatic import see: /wiki.openstack .org/wiki/ Translations/ Infrastructure
https:/
Change-Id: Id9219af8be8360 d1bb0c9debf376a b2f913a3e5d
commit 8177acdeffcb15a 449c5a17e0b1d8f 13003ca168
Author: OpenStack Proposal Bot <email address hidden>
Date: Wed Mar 23 06:39:31 2016 +0000
Imported Translations from Zanata
For more information about this automatic import see: /wiki.openstack .org/wiki/ Translations/ Infrastructure
https:/
Change-Id: Ie6d41a68a92e02 2f51d332569ca63 db9676bd341
commit e4c8600609b986d 573b6fd643458c3 d925ea6436
Author: OpenStack Proposal Bot <email address hidden>
Date: Tue Mar 22 06:43:45 2016 +0000
Imported Translations from Zanata
For more information about this automatic import see: /wiki.openstack .org/wiki/ Translations/ Infrastructure
https:/
Change-Id: I46289a230712f8 5e9c90a39eec6a1 aa674045f36
commit 02817c5e7fb6fa7 6cf6fb691db25f0 2cd97e928d
Author: OpenStack Proposal Bot <email address hidden>
Date: Sun Mar 20 06:43:03 2016 +0000
Imported Translations from Zanata
For more information about this automatic import see: /wiki.openstack .org/wiki/ Translations/ Infrastructure
https:/
Change-Id: Ie0249eaf672877 fab2b3da72dced9 ba9f3c95c9f
commit ff01c0e2be4be19 a7be1c9e523c0b2 b8e0fea7cd
Author: Boris Bobrov <email address hidden>
Date: Fri Mar 18 12:49:42 2016 +0300
Add release note for list_limit support
Change-Id: I8a91f681b4d1c1 c018bf5d6faf75d 2d841ac0383
Related-Bug: 1501698
commit f7197c7bde2fba6 d1b1254ed5916d1 d2a8349618
Author: OpenStack Proposal Bot <email address hidden>
Date: Fri Mar 18 06:34:21 2016 +0000
Imported Translations from Zanata
For more information about this automatic import see: /wiki.openstack .org/wiki/ Translations/ Infrastructure
https:/
Change-Id: If3792fbea35a79 fb7f7d9fee29af9 24bed3fc604
commit 9692d40a78651f5 9db679def493f97 12c96e0596
Author: Doug Hellmann <email address hidden>
Date: Wed Mar 16 16:40:37 2016 -0400
Update .gitreview for stable/mitaka
Change-Id: Ie89a8030fe133d 12603877778dd4b 27e76e9a886