Adds an identity admin client and API tests for keystone roles.

    Added a config option for the [identity] section
     * catalog type - to specify endpoints for the Identity service

    Fixes bug 902389

Change-Id: I429d8bbfe3e6de8432a1a7b79a8676c63925f78f
diff --git a/etc/tempest.conf.sample b/etc/tempest.conf.sample
index 226fa30..aa101d3 100644
--- a/etc/tempest.conf.sample
+++ b/etc/tempest.conf.sample
@@ -3,6 +3,10 @@
 # test clients use when authenticating with different user/tenant
 # combinations
 
+# The type of endpoint for a Identity service. Unless you have a
+# custom Keystone service catalog implementation, you probably want to leave
+# this value as "identity"
+catalog_type = identity
 # Set to True if your test environment's Keystone authentication service should
 # be accessed over HTTPS
 use_ssl = False