os.popen() is deprecated since version 2.6. Resolved with use of
subprocess module.

Change-Id: I53c21d6e8a9d23646c236ae33d652f1aefc20153
Closes-Bug: #1529836

To allow people to use a keystoneauth session with keystoneclient we
need to make it so that any exceptions that keystoneclient catch are the
same as what keystoneauth might throw.

The only practical way to do this is to map the keystoneclient
exceptions onto the keystoneauth equivalents. This is fairly easy as all
these exceptions were extracted from keystoneclient initially.

Closes-Bug: #1515048
Change-Id: I3b74b0ba1e1f9dda937a2d90e2d75ff0b7597a9b

End single quote of is missing. This patch add it.

Change-Id: Ibabde8922d97e1d30f7130574080f56ccb8d6be9

The V3 token plugin should work for v3 identity service

Change-Id: Ic3c53dd94e1fe5d1ab69a02a7f7469735ee4c978

currently there is no release history for keystoneclient, though
sometimes the commits are lacking context, this automated approach
is far better than nothing.

Change-Id: Ibb865b4830cbe1e2e99688103d26f1378d2c32b1

A common case is for Nova (or other service) to create a service
authentication plugin from a configuration file and then have many
greenlet threads that want to reuse that authentication. If a token
expires then many threads all try and fetch a new token to use and can
step over each other.

I was hoping for a way to put a lock in so that all plugins were thread
safe however fixing it for identity plugins solves almost all real world
situations and anyone doing non-identity plugins will have to manage
threads themselves.

Change-Id: Ib6487de7de638abc69660c851bd048a8ec177109
Closes-Bug: #1493835

Sphinx was always using (k)eystoneclient for the prefix so the index
wasn't very useful.

Change-Id: I9f883e1005874b5f5019f9030b94174a2169ed77

These images were used to show how auth_token worked, these images
are now shown on keystonemiddleware's docs, so lets remove them
from here.

Change-Id: I2e882d3580737ee091a5e05cf98b0d652f3fefcb