The openstack-keystone packages have been rebased to version 2014.1.2.1 For more information, refer to https://launchpad.net/keystone/icehouse/2014.1.2 Important bug fixes include: * When a scoped token that was created from an unscoped token was revoked, the original token wound up being revoked as well. This is because the scope wasn't included in the revocation event. By including the scope in the revocation event only the scoped token is revoked. (Launchpad #1347318) * If a domain or project is renamed, the old name remains in a cache. As a result the old name can be used in some requests until cache record is expired. For example, the old domain name can still be used for the authentication after renaming the domain. Cache entries are now properly invalidated for domain and project rename operations. (Launchpad #1311142) * Keystone did not return the same status and headers for HEAD and GET requests, which doesn't follow the HTTP specification. This would lead to different status codes between running keystone-all versus running Keystone in Apache httpd with mod_wsgi. The responses have been corrected to be consistent regardless of the webserver being used. (Launchpad #1334368) * The migration that creates the region table does not explicitly set utf8 so if the database default is not set, then db_sync fails. The migration now detects this condition and corrects the database. (Launchpad #1334779)