-
keystone (1:2015.1.2-0ubuntu2) vivid; urgency=medium
[ Chuck Short ]
* Resynchronize with stable/kilo (8a2da01) (LP: #1506058):
- [8a2da01] Reject rule if assertion type unset
- [9dfad21] Validate domain ownership for v2 tokens
- [8bd9b22] Maintain the expiry of v2 fernet tokens
- [aa3354e] Fernet 'expires' value loses 'ms' after validation
- [0ed33e3] Test to ensure fernet key rotation results in new key sets
- [2f580e4] Reduce number of Fernet log messages
- [6c106e9] Handle non-numeric files in key_repository
- [fb7f4a7] Replace 401 to 404 when token is invalid
- [a1e20fb] Additional Fernet test coverage
- [cfbc0f1] Tests for correct key removed
- [c6ec36b] Add unit test for fernet provider
- [17b7dbc] Add unit test to exercise key rotation
- [7498154] Fix Fernet key rotation
- [1608f72] Refactor: move PKI-specific tests into the appropriate class
- [a9726d2] Don't assume project IDs are UUID format
- [f8afb29] Don't assume group IDs are UUID format
- [b255b8f] Don't fail on converting user ids to bytes
- [0fde127] Properly stub out the V2 and V3 XML middlewares
- [666be4d] Fix for LDAP filter on group search by name
- [bc96d9f] Make sure LDAP filter is constructed correctly
- [0fe2b70] Do not remove expired revocation events on "get"
- [20fd5af] Fix WSGI request logging
- [e9aa267] Add openstack_user_domain to assertion
[ Corey Byrant ]
* d/rules: Prevent dh_python2 from guessing dependencies.
* d/control: Move python-pysaml2 to Depends.
-- Chuck Short <email address hidden> Thu, 15 Oct 2015 08:54:19 -0400
-
keystone (1:2015.1.2-0ubuntu1) vivid; urgency=medium
[ Chuck Short ]
* Resynchronize with stable/kilo (8a2da01) (LP: #1481008):
- [8a2da01] Reject rule if assertion type unset
- [9dfad21] Validate domain ownership for v2 tokens
- [8bd9b22] Maintain the expiry of v2 fernet tokens
- [aa3354e] Fernet 'expires' value loses 'ms' after validation
- [0ed33e3] Test to ensure fernet key rotation results in new key sets
- [2f580e4] Reduce number of Fernet log messages
- [6c106e9] Handle non-numeric files in key_repository
- [fb7f4a7] Replace 401 to 404 when token is invalid
- [a1e20fb] Additional Fernet test coverage
- [cfbc0f1] Tests for correct key removed
- [c6ec36b] Add unit test for fernet provider
- [17b7dbc] Add unit test to exercise key rotation
- [7498154] Fix Fernet key rotation
- [1608f72] Refactor: move PKI-specific tests into the appropriate class
- [a9726d2] Don't assume project IDs are UUID format
- [f8afb29] Don't assume group IDs are UUID format
- [b255b8f] Don't fail on converting user ids to bytes
- [0fde127] Properly stub out the V2 and V3 XML middlewares
- [666be4d] Fix for LDAP filter on group search by name
- [bc96d9f] Make sure LDAP filter is constructed correctly
- [0fe2b70] Do not remove expired revocation events on "get"
- [20fd5af] Fix WSGI request logging
- [e9aa267] Add openstack_user_domain to assertion
[ Corey Byrant ]
* d/rules: Prevent dh_python2 from guessing dependencies.
* d/control: Move python-pysaml2 to Depends.
-- Chuck Short <email address hidden> Thu, 15 Oct 2015 08:54:19 -0400
-
keystone (1:2015.1.1-0ubuntu1) vivid; urgency=medium
* Resynchronize with stable/kilo (54400bf) (LP: #1481008):
- [c4dc133] Mask passwords in debug log on user password operations
- [fba2d5c] Add test showing password logged
- [afaaf11] Fix xmldsig import
- [ec30329] Pass-in domain when testing saml signing
- [0c0bf69] Add openstack_project_domain to assertion
- [dafe5f9] Fix signed_saml2_assertion.xml tests fixture
- [67cda0c] Eventlet green threads not released back to pool
- [54400bf] Remove project association before removing endpoint group
-- Corey Bryant <email address hidden> Mon, 03 Aug 2015 14:30:05 -0400
-
keystone (1:2015.1.0-0ubuntu1) vivid; urgency=medium
* New upstream release for OpenStack kilo. (LP: #1449744)
-- Corey Bryant <email address hidden> Thu, 30 Apr 2015 16:16:32 +0200
-
keystone (1:2015.1~rc1-0ubuntu1) vivid; urgency=medium
[ Chuck Short ]
- New upstream milestone:
- d/control: Align with upstream version requirements.
- d/add-version-info.patch: Refreshed
[ James Page ]
* d/p/pep-0476.patch: Dropped, included upstream.
-- Chuck Short <email address hidden> Wed, 15 Apr 2015 13:57:49 -0400
-
keystone (1:2015.1~b3-0ubuntu1) vivid; urgency=medium
* d/pydist-overrides: Add overrides for oslo packages.
* New upstream milestone:
- d/p/*: Refreshed.
- d/control: Align with upstream version requirements.
- d/control: Add new dependencies on oslo-log, oslo-policy, cryptography
and msgpack.
* Enable federation support as now part of core pipeline:
- d/control: Add BD on pysaml2.
- d/p/skip-pysaml2.patch: Dropped, no longer required.
* d/keystone.logrotate: Wildcard log file matching to ensure any keystone
log files are rotated, irrespective of naming (LP: #1426530).
* d/python-keystone.install: Install wsgi wrapper as this is now the
recommended deployment option from upstream (LP: #1426462).
-- James Page <email address hidden> Mon, 30 Mar 2015 11:15:48 +0100
-
keystone (1:2015.1~b2-0ubuntu4) vivid; urgency=medium
* d/t/keystone-paste.ini,keystone-daemon: Drop autopkgtest specific ini
file and use package supplied file instead; allow keystone daemons to
start prior to testing for presence.
-- James Page <email address hidden> Mon, 16 Mar 2015 12:39:07 +0000
-
keystone (1:2015.1~b2-0ubuntu3) vivid; urgency=medium
* d/p/skip-pysaml2.patch,d/control: Drop pysaml2 from BD's, restore test
to skip unit tests for now. Ubuntu MIR still outstanding and we need to
fix systemd support for testing.
-- James Page <email address hidden> Mon, 16 Mar 2015 11:28:54 +0000
-
keystone (1:2015.1~b2-0ubuntu2) vivid; urgency=medium
* d/control: Drop python-sqlite from BD's, as it supports optional unit
test cases only.
-- James Page <email address hidden> Thu, 19 Feb 2015 10:38:57 +0000
-
keystone (1:2015.1~b2-0ubuntu1) vivid; urgency=medium
[ Corey Bryant ]
* New upstream release.
- d/control: Align with upstream dependencies.
- d/p/fix-ubuntu-tests.patch: Dropped. Patched code has been removed.
- d/p/sql_connection.patch: Rebased.
- d/p/default-log-dir.patch: Rebased.
- d/p/add-version-info.patch: Rebased.
-- Chuck Short <email address hidden> Thu, 12 Feb 2015 16:12:01 -0500
-
keystone (1:2015.1~b1-0ubuntu3) vivid; urgency=medium
* Rebuild to pick up pkgos upstart generation fix.
- d/control: Bump openstack-pkg-tools to ensure upstart fix inclusion.
-- Corey Bryant <email address hidden> Wed, 14 Jan 2015 16:26:11 +0000
-
keystone (1:2015.1~b1-0ubuntu2) vivid; urgency=medium
* Systemd enablement:
- d/control: Add BD's on openstack-pkg-tools, dh-systemd.
- d/rules: Enable use of dh-systemd and templated init configuration
generation.
- d/keystone.init.in: Cherry pick template configuration from
Debian package (thanks Thomas).
- d/keystone.upstart: Drop in preference to generated file.
* d/control,compat: Bump debhelper compat level to 9.
-- James Page <email address hidden> Thu, 08 Jan 2015 12:14:53 +0000
-
keystone (1:2015.1~b1-0ubuntu1) vivid; urgency=medium
[ Chuck Short ]
* d/control: Add python-oslo.serialization and
python-oslo.concurrency as build dependencies.
* d/patches/skip-pysaml2.patch: Dropped no longer needed.
* d/control: Add python-pysaml2 as a depdendency.
[ James Page ]
* New upstream release:
- d/p/*: Refresh.
- d/control: Align version requirements with upstream release.
* d/watch: Update uversionmangle for kilo milestone versioning.
* d/p/pep-0476.patch: Adapt unit tests to deal with more secure
certificate chain verification introduced in Python 2.7.9.
* d/watch: Bumped Standards-Version to 3.9.6, no changes.
-- James Page <email address hidden> Mon, 05 Jan 2015 14:26:52 +0000
-
keystone (1:2014.2-0ubuntu4) vivid; urgency=medium
* debian/keystone.preinst: Fix shell
* debian/keystone.postinst: Fix database migration.
-- Chuck Short <email address hidden> Tue, 25 Nov 2014 09:33:34 -0500
-
keystone (1:2014.2-0ubuntu3) vivid; urgency=medium
* debian/keystone.postinst: Fix su a bit harder.
-- Chuck Short <email address hidden> Fri, 21 Nov 2014 09:58:55 -0600
-
keystone (1:2014.2-0ubuntu2) vivid; urgency=medium
* Open up for Vivid.
* debian/control: Update bzr branch.
* debian/keystone.postinst: Remove exec when creating keystone databases.
(LP: #1393474)
-- Chuck Short <email address hidden> Mon, 17 Nov 2014 14:41:58 -0600
-
keystone (1:2014.2-0ubuntu1) utopic; urgency=medium
* New upstream release.
-- Chuck Short <email address hidden> Thu, 16 Oct 2014 15:29:56 -0400
