Saturday, 2015-06-27

kfox1111but, I can live with that pain longer.00:00
*** _cjones_ has joined #openstack-keystone00:00
kfox1111the if we can solve most of the problem now, in this way, I'll be happy.00:00
kfox1111we can iterate more later.00:00
kfox1111unfortunatly, this api works counter to the temporary url microservice suggestion.00:02
*** boris-42 has quit IRC00:02
morganfainbergmeh00:02
kfox1111gotta figure out how to work that in if reasonable. :/00:02
*** markvoelker has joined #openstack-keystone00:02
kfox1111I think its a bad idea, but it has strong support rignt now on the nova side. :/00:02
morganfainbergyou can always assert the microservice isn't workable because it doesn't address a secure way to ensure $instance doesn't get $instance_2 data00:03
morganfainbergshort of IP addre/mac-address validation-- which is maybe less workable00:03
kfox1111I would assert that, but I know the response will be, there's no way if you come up wit a temp url long enough. :/00:03
morganfainbergthis is auth data - it must have a close security eye on it00:04
kfox1111thats supposedly what the md server buys you. it does ip/mac address validation for auth.00:04
morganfainbergsecurity through obscurity isn't security00:04
kfox1111which was why I wanted to use it.00:04
kfox1111agreed.00:04
*** pballand has quit IRC00:04
morganfainbergmicroservice is, unless works like MD00:04
morganfainbergisn't going to provide that00:04
kfox1111I agree.00:04
morganfainbergif it works like MD, why is it a thing other than MD00:05
kfox1111just gota get them to see that.00:05
morganfainbergyou can ask those questions00:05
kfox1111k. will do.00:05
morganfainbergand if they say "microservice" then you implemnt a new md service that doesn't suck ;)00:05
morganfainbergand maybe the old one dies00:05
morganfainbergit's also easier to do mac/ip checking etc on linklocal00:05
kfox1111I'm having a hard enough time giving enough time to write a spec 30 times. :/00:05
morganfainbergthan on layer 300:06
kfox1111yeah.00:06
morganfainbergrouted layer300:06
morganfainbergpotentially00:06
bknudsonI don't think we can update requirements... always fails00:06
kfox1111the nova antispoof rules + the neutron header tagging supposidly make that relyable.00:06
morganfainbergbknudson: huh00:06
morganfainbergbknudson: how is it failing now?00:06
bknudsonmorganfainberg: I'll ask on infra00:07
morganfainbergbknudson: looking at the console00:07
morganfainbergthere might be something else up00:07
bknudsonI updated it using the update-requirements script so I don't know how it could be wrong.00:07
bknudsonshould be the same thing that the proposal bot does00:07
morganfainbergbknudson: looks like a typo00:08
morganfainberg pkg_resources.RequirementParseError: Expected ',' or end-of-list in python-ldap>=2.4;python_version=='2.7' at ;python_version=='2.7'00:08
bknudsonI didn't type it00:08
bknudsonalthough maybe the update-requirements script didn't update something?00:08
bknudsonI could try starting from clean00:08
openstackgerritBrant Knudson proposed openstack/keystone: Change mapping model so rules is dict  https://review.openstack.org/19629300:09
morganfainbergthe script that checks the requirements is valid can't handle: python-ldap>=2.4;python_version=='2.7'00:09
morganfainbergthat is broken00:09
openstackgerritBrant Knudson proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/19040500:11
*** dimsum__ has quit IRC00:11
*** dimsum__ has joined #openstack-keystone00:12
*** shaleh has quit IRC00:17
kfox1111morganfainberg: writing up the stuff we talked about in the spec. nothing really changed in the implementation details. though. really just more explenation of the problem, and trying to work through wh ythe other is a bad idea alternative.00:18
kfox1111If you leave before I'm done, thanks for all the help/discussion. I think it was very useful. Have a great weekend. :)00:19
openstackgerritBrant Knudson proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/19040500:19
*** boris-42 has joined #openstack-keystone00:29
*** dimsum__ has quit IRC00:39
*** SpamapS has joined #openstack-keystone00:40
*** browne1 has joined #openstack-keystone00:47
*** browne has quit IRC00:48
*** _cjones_ has quit IRC00:57
*** stevemar has joined #openstack-keystone00:59
*** stevemar has quit IRC01:03
openstackgerritBrant Knudson proposed openstack/keystone: Federation API provides method to evaluate rules  https://review.openstack.org/19630801:03
*** fangzhou has quit IRC01:12
*** stevemar has joined #openstack-keystone01:17
*** richm has quit IRC01:22
*** dimsum__ has joined #openstack-keystone01:23
*** ankita_wagh has joined #openstack-keystone01:39
*** lhcheng has quit IRC01:45
*** spandhe has quit IRC01:49
*** ayoung has quit IRC02:01
*** Kennan2 has joined #openstack-keystone02:02
*** Kennan has quit IRC02:02
*** markvoelker has quit IRC02:03
*** ayoung has joined #openstack-keystone02:14
*** ChanServ sets mode: +v ayoung02:14
*** ankita_wagh has quit IRC02:21
openstackgerritMorgan Fainberg proposed openstack/keystone: Disable migration sanity check  https://review.openstack.org/19632902:21
*** lhcheng has joined #openstack-keystone02:24
*** ChanServ sets mode: +v lhcheng02:24
stevemarmorganfainberg: q about is_domain in keystone-specs02:24
morganfainberg?02:25
morganfainberg?02:25
*** stevemar has quit IRC02:27
*** stevemar has joined #openstack-keystone02:28
*** dimsum__ has quit IRC02:32
*** htruta has joined #openstack-keystone02:36
*** htruta has quit IRC02:36
openstackgerritMerged openstack/keystone-specs: Add is_domain to tokens for projects acting as a domain  https://review.openstack.org/19354302:37
*** dimsum__ has joined #openstack-keystone02:38
stevemarbknudson: https://review.openstack.org/#/c/195872/ just for you02:40
*** ankita_wagh has joined #openstack-keystone02:42
openstackgerritSteve Martinelli proposed openstack/keystone: switch to oslo.cache  https://review.openstack.org/19587302:45
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/19040502:46
*** dimsum__ has quit IRC02:46
*** vilobhmm has joined #openstack-keystone02:49
*** Raildo has joined #openstack-keystone02:49
*** Raildo has quit IRC02:55
*** fangzhou has joined #openstack-keystone03:00
*** markvoelker has joined #openstack-keystone03:04
openstackgerritSteve Martinelli proposed openstack/oslo.policy: Add six and oslo.utils to requirements  https://review.openstack.org/19584603:06
*** lhcheng has quit IRC03:07
*** markvoelker has quit IRC03:10
openstackgerritSteve Martinelli proposed openstack/keystone: Update sample config file  https://review.openstack.org/18213803:11
*** woodster_ has quit IRC03:11
*** boris-42 has quit IRC03:12
stevemarmorganfainberg: or other keystoners... https://review.openstack.org/#/c/182138/ this could use a +A/+203:13
stevemarmorganfainberg: since you're lurking... https://review.openstack.org/#/c/19587203:17
morganfainbergstevemar: but i don't want to03:29
*** sigmavirus24_awa is now known as sigmavirus2403:30
*** fifieldt has quit IRC03:32
*** ankita_wagh has quit IRC03:33
*** spandhe has joined #openstack-keystone03:34
*** sigmavirus24 is now known as sigmavirus24_awa03:38
*** ankita_wagh has joined #openstack-keystone03:40
*** woodster_ has joined #openstack-keystone03:42
stevemarmorganfainberg: thanks anyway :D03:49
*** boris-42 has joined #openstack-keystone03:50
morganfainberg;)03:50
stevemarmorganfainberg: now if only i can get someone to tag a new oslo.cache release :P03:50
morganfainbergcan't help you there03:57
*** vilobhmm has quit IRC04:05
*** ayoung has quit IRC04:13
openstackgerritSam Leong proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate  https://review.openstack.org/15687004:36
openstackgerritNathan Jewell proposed openstack/keystone: Saves output of run_tests.sh to .log file  https://review.openstack.org/19628504:40
*** ankita_wagh has quit IRC04:46
openstackgerritMerged openstack/keystone: Update sample config file  https://review.openstack.org/18213804:47
*** markvoelker has joined #openstack-keystone04:54
*** markvoelker has quit IRC04:58
*** stevemar has quit IRC05:25
*** stevemar has joined #openstack-keystone05:26
openstackgerritSteve Martinelli proposed openstack/keystone: switch to oslo.cache  https://review.openstack.org/19587305:40
*** fangzhou has quit IRC05:45
*** juvenn1 has joined #openstack-keystone05:45
*** woodster_ has quit IRC05:51
*** Kennan has joined #openstack-keystone06:03
*** Kennan2 has quit IRC06:03
*** browne1 has quit IRC06:04
*** liusheng has joined #openstack-keystone06:06
*** liusheng has quit IRC06:08
*** liusheng has joined #openstack-keystone06:08
*** liusheng has quit IRC06:09
*** liusheng has joined #openstack-keystone06:10
*** liusheng has quit IRC06:12
*** liusheng has joined #openstack-keystone06:12
*** liusheng has quit IRC06:13
*** liusheng has joined #openstack-keystone06:13
*** liusheng has quit IRC06:14
*** liusheng has joined #openstack-keystone06:14
*** liusheng has quit IRC06:15
*** liusheng has joined #openstack-keystone06:15
*** stevemar has quit IRC06:22
*** liusheng has quit IRC06:28
*** juvenn1 has quit IRC06:30
*** liusheng has joined #openstack-keystone06:30
*** browne has joined #openstack-keystone06:31
*** liusheng has quit IRC06:34
*** liusheng has joined #openstack-keystone06:35
*** henrynash has joined #openstack-keystone06:36
*** ChanServ sets mode: +v henrynash06:36
*** browne has quit IRC06:37
*** liusheng has quit IRC06:39
*** liusheng has joined #openstack-keystone06:39
*** liusheng has quit IRC06:40
*** liusheng has joined #openstack-keystone06:40
*** liusheng has quit IRC06:41
*** markvoelker has joined #openstack-keystone06:42
*** liusheng has joined #openstack-keystone06:44
*** markvoelker has quit IRC06:47
*** liusheng has quit IRC06:49
*** liusheng has joined #openstack-keystone06:50
*** liusheng has quit IRC06:56
*** liusheng has joined #openstack-keystone06:56
*** liusheng has quit IRC07:08
*** liusheng has joined #openstack-keystone07:10
*** liusheng has quit IRC07:11
*** liusheng has joined #openstack-keystone07:11
*** liusheng has quit IRC07:12
*** liusheng has joined #openstack-keystone07:13
*** liusheng has quit IRC07:19
*** liusheng has joined #openstack-keystone07:19
*** stevemar has joined #openstack-keystone07:23
*** liusheng has quit IRC07:23
*** liusheng has joined #openstack-keystone07:24
*** lhcheng has joined #openstack-keystone07:25
*** ChanServ sets mode: +v lhcheng07:25
*** stevemar has quit IRC07:26
*** ankita_wagh has joined #openstack-keystone07:29
*** spandhe has quit IRC07:42
*** fangzhou has joined #openstack-keystone07:47
*** liusheng has quit IRC07:53
*** liusheng has joined #openstack-keystone07:54
*** liusheng has quit IRC07:58
*** liusheng has joined #openstack-keystone07:59
*** liusheng has quit IRC08:00
*** liusheng has joined #openstack-keystone08:01
*** ihrachyshka has joined #openstack-keystone08:02
*** ankita_wagh has quit IRC08:05
*** liusheng has quit IRC08:05
*** liusheng has joined #openstack-keystone08:05
*** kiranr has joined #openstack-keystone08:08
*** kiranr is now known as yfried08:08
*** yfried is now known as kiranr08:09
*** kiranr has joined #openstack-keystone08:10
*** _kiran_ has joined #openstack-keystone08:10
*** kiranr has quit IRC08:10
*** _kiran_ has quit IRC08:17
*** fangzhou has quit IRC08:17
*** _kiran_ has joined #openstack-keystone08:18
*** markvoelker has joined #openstack-keystone08:31
*** markvoelker has quit IRC08:35
*** liusheng has quit IRC08:37
*** liusheng has joined #openstack-keystone08:38
*** liusheng has quit IRC08:39
*** liusheng has joined #openstack-keystone08:42
*** _kiran_ has quit IRC08:44
*** rushiagr_away is now known as rushiagr08:44
*** liusheng has quit IRC08:46
*** liusheng has joined #openstack-keystone08:48
*** liusheng has quit IRC08:53
*** liusheng has joined #openstack-keystone08:54
*** rushiagr is now known as rushiagr_away08:54
*** liusheng has quit IRC09:00
*** liusheng has joined #openstack-keystone09:00
*** henrynash has quit IRC09:03
*** henrynash has joined #openstack-keystone09:04
*** ChanServ sets mode: +v henrynash09:04
*** stevemar has joined #openstack-keystone09:12
*** stevemar has quit IRC09:15
*** liusheng has quit IRC09:15
*** arunkant_ has joined #openstack-keystone09:15
*** arunkant has quit IRC09:17
*** liusheng has joined #openstack-keystone09:17
*** ihrachyshka has quit IRC09:26
*** liusheng has quit IRC09:26
*** liusheng has joined #openstack-keystone09:27
*** liusheng has quit IRC09:29
*** liusheng has joined #openstack-keystone09:29
*** liusheng has quit IRC09:35
*** liusheng has joined #openstack-keystone09:36
*** henrynash has quit IRC10:11
*** henrynash has joined #openstack-keystone10:15
*** ChanServ sets mode: +v henrynash10:15
*** liusheng has quit IRC10:16
*** liusheng has joined #openstack-keystone10:17
*** markvoelker has joined #openstack-keystone10:20
*** markvoelker has quit IRC10:25
*** lhcheng has quit IRC10:31
*** e0ne has joined #openstack-keystone10:39
*** liusheng has quit IRC10:48
*** e0ne has quit IRC10:54
*** stevemar has joined #openstack-keystone11:01
*** stevemar has quit IRC11:05
*** xtrack has joined #openstack-keystone11:19
xtrackHi there. I have a simple question. How can I set enabled=false for registered users using curl command? I execute curl '...:5000/v3/users/' + str(user_id)... but I got error: resource not found.11:22
xtrackAny idea?11:28
*** markvoelker has joined #openstack-keystone11:36
xtrackHow can I set enabled=false for registered users using curl command?11:36
*** markvoelker has quit IRC11:40
*** dimsum__ has joined #openstack-keystone11:53
*** xtrack has quit IRC11:55
*** dims_ has joined #openstack-keystone11:57
*** dimsum__ has quit IRC12:00
*** lhcheng has joined #openstack-keystone12:20
*** ChanServ sets mode: +v lhcheng12:20
*** e0ne has joined #openstack-keystone12:22
*** lhcheng has quit IRC12:24
*** e0ne has quit IRC12:29
*** arunkant__ has joined #openstack-keystone12:35
*** markvoelker has joined #openstack-keystone12:36
*** arunkant_ has quit IRC12:39
*** markvoelker has quit IRC12:41
*** stevemar has joined #openstack-keystone12:50
*** vilobhmm has joined #openstack-keystone12:51
*** stevemar has quit IRC12:53
*** vilobhmm has quit IRC12:55
openstackgerritliusheng proposed openstack/keystone: Remove the unused config_files parameter of service entry  https://review.openstack.org/18698713:05
*** dimsum__ has joined #openstack-keystone13:11
*** dims_ has quit IRC13:12
*** dims_ has joined #openstack-keystone13:24
*** dimsum__ has quit IRC13:24
*** henrynash has quit IRC13:35
*** dimsum__ has joined #openstack-keystone13:35
*** dims_ has quit IRC13:35
*** edmondsw has joined #openstack-keystone13:46
*** edmondsw has quit IRC13:46
*** dimsum__ has quit IRC13:48
*** dimsum__ has joined #openstack-keystone13:48
*** dims_ has joined #openstack-keystone14:03
*** dimsum__ has quit IRC14:03
*** radez is now known as radez_g0n314:04
*** timsim has joined #openstack-keystone14:11
*** henrynash has joined #openstack-keystone14:21
*** ChanServ sets mode: +v henrynash14:21
*** markvoelker has joined #openstack-keystone14:25
*** markvoelker has quit IRC14:29
*** stevemar has joined #openstack-keystone14:31
*** browne has joined #openstack-keystone14:54
*** woodster_ has joined #openstack-keystone15:05
*** belmoreira has joined #openstack-keystone15:16
*** stevemar has quit IRC15:18
*** markvoelker has joined #openstack-keystone16:14
*** dimsum__ has joined #openstack-keystone16:18
*** markvoelker has quit IRC16:18
*** dims_ has quit IRC16:19
*** spandhe has joined #openstack-keystone16:30
*** boris-42 has quit IRC16:32
*** david-ly_ has joined #openstack-keystone16:38
*** david-lyle has quit IRC16:40
*** fangzhou has joined #openstack-keystone16:49
*** fangzhou has quit IRC16:55
*** stevemar has joined #openstack-keystone17:07
*** stevemar has quit IRC17:09
*** browne has quit IRC17:27
*** rm_work is now known as rm_work|away17:30
*** ankita_wagh has joined #openstack-keystone17:39
*** iamjarvo has joined #openstack-keystone17:48
*** dimsum__ has quit IRC17:50
*** markvoelker has joined #openstack-keystone18:03
*** markvoelker has quit IRC18:07
*** stevemar has joined #openstack-keystone18:08
*** stevemar has quit IRC18:12
*** iamjarvo has quit IRC18:19
*** iamjarvo has joined #openstack-keystone18:39
*** piyanai has joined #openstack-keystone18:44
*** stevemar has joined #openstack-keystone18:46
*** iamjarvo has quit IRC18:51
openstackgerritSteve Martinelli proposed openstack/keystone: switch to oslo.cache  https://review.openstack.org/19587318:57
*** stevemar has quit IRC19:01
*** piyanai has quit IRC19:28
*** edmondsw has joined #openstack-keystone19:30
*** edmondsw has quit IRC19:30
*** henrynash has quit IRC19:31
*** piyanai has joined #openstack-keystone19:38
*** piyanai has quit IRC19:41
*** markvoelker has joined #openstack-keystone19:51
*** markvoelker has quit IRC19:56
*** dimsum__ has joined #openstack-keystone20:16
*** dimsum__ has quit IRC20:19
*** dimsum__ has joined #openstack-keystone20:20
*** dimsum__ has quit IRC20:31
*** dimsum__ has joined #openstack-keystone20:31
*** pnavarro|off has joined #openstack-keystone20:32
*** boris-42 has joined #openstack-keystone20:34
*** stevemar has joined #openstack-keystone20:50
*** stevemar has quit IRC20:52
*** markvoelker has joined #openstack-keystone20:52
*** markvoelker has quit IRC20:56
*** dimsum__ has quit IRC20:58
*** dimsum__ has joined #openstack-keystone20:59
*** dims has joined #openstack-keystone21:10
*** dimsum__ has quit IRC21:10
*** dims_ has joined #openstack-keystone21:13
*** dims has quit IRC21:15
*** dims_ has quit IRC21:22
*** henrynash has joined #openstack-keystone21:31
*** ChanServ sets mode: +v henrynash21:31
*** clayton has quit IRC21:33
*** clayton has joined #openstack-keystone21:43
*** stevemar has joined #openstack-keystone21:51
*** stevemar has quit IRC21:53
*** pnavarro|off has quit IRC22:03
*** belmoreira has quit IRC22:15
*** stevemar has joined #openstack-keystone22:22
*** dims has joined #openstack-keystone22:23
*** markvoelker has joined #openstack-keystone22:38
*** stevemar has quit IRC22:40
*** markvoelker has quit IRC22:43
*** henrynash has quit IRC22:45
*** dims has quit IRC22:46
*** dims has joined #openstack-keystone22:47
*** tellesnobrega has joined #openstack-keystone22:54
*** dims has quit IRC22:57
*** ankita_wagh has quit IRC23:00
*** tellesnobrega has quit IRC23:11
*** dims has joined #openstack-keystone23:11
*** Kiall has quit IRC23:22
*** dims has quit IRC23:27
*** Kiall has joined #openstack-keystone23:31
*** jamielennox|away is now known as jamielennox23:32
*** markvoelker has joined #openstack-keystone23:39
*** markvoelker has quit IRC23:43

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!