| *** christx2 has quit IRC | 00:01 | |
| openstackgerrit | Merged openstack/keystone: Spelling correction https://review.openstack.org/202178 | 00:02 |
|---|---|---|
| *** rm_work is now known as rm_work|away | 00:07 | |
| *** jsavak has quit IRC | 00:19 | |
| *** _cjones_ has quit IRC | 00:29 | |
| *** piyanai has joined #openstack-keystone | 00:31 | |
| openstackgerrit | Sam Leong proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 00:49 |
| *** spandhe has quit IRC | 00:57 | |
| *** btully has quit IRC | 01:04 | |
| *** openstack has joined #openstack-keystone | 01:23 | |
| *** raildo has joined #openstack-keystone | 01:23 | |
| *** openstackgerrit has joined #openstack-keystone | 01:23 | |
| *** raildo1 has joined #openstack-keystone | 01:24 | |
| *** btully has joined #openstack-keystone | 01:26 | |
| *** raildo has quit IRC | 01:30 | |
| *** mestery_ is now known as mestery | 01:34 | |
| *** htruta_ has joined #openstack-keystone | 01:34 | |
| *** piyanai has quit IRC | 01:36 | |
| *** jdandrea has quit IRC | 01:38 | |
| *** raildo has joined #openstack-keystone | 01:41 | |
| *** rdo has quit IRC | 01:51 | |
| *** piyanai has joined #openstack-keystone | 01:53 | |
| *** hrou has joined #openstack-keystone | 01:53 | |
| *** dims_ has quit IRC | 01:58 | |
| *** ankita_wagh has joined #openstack-keystone | 01:59 | |
| *** raildo has quit IRC | 02:02 | |
| *** tqtran has quit IRC | 02:03 | |
| *** ankita_wagh has quit IRC | 02:13 | |
| *** ankita_wagh has joined #openstack-keystone | 02:13 | |
| *** ankita_wagh has quit IRC | 02:14 | |
| *** ankita_wagh has joined #openstack-keystone | 02:15 | |
| *** jasonsb_ has quit IRC | 02:17 | |
| *** dims__ has joined #openstack-keystone | 02:18 | |
| *** markvoelker has quit IRC | 02:22 | |
| *** diazjf has joined #openstack-keystone | 02:28 | |
| *** dims__ has quit IRC | 02:30 | |
| *** lhcheng has joined #openstack-keystone | 02:37 | |
| *** ChanServ sets mode: +v lhcheng | 02:37 | |
| openstackgerrit | jiaxi proposed openstack/keystone: Invalid URLs are not suppressed when creating endpoint https://review.openstack.org/200512 | 02:44 |
| *** diazjf has left #openstack-keystone | 02:50 | |
| *** lhcheng_ has joined #openstack-keystone | 02:51 | |
| *** hakimo_ has joined #openstack-keystone | 02:53 | |
| *** lhcheng has quit IRC | 02:54 | |
| *** hakimo has quit IRC | 02:54 | |
| *** hrou has quit IRC | 02:58 | |
| *** htruta_ has quit IRC | 03:04 | |
| *** topol has joined #openstack-keystone | 03:06 | |
| *** ChanServ sets mode: +v topol | 03:06 | |
| *** richm has quit IRC | 03:06 | |
| *** andrewbogott_afk has quit IRC | 03:08 | |
| *** topol has quit IRC | 03:10 | |
| *** crc32 has quit IRC | 03:10 | |
| *** bradjones has quit IRC | 03:14 | |
| *** chenhong has joined #openstack-keystone | 03:17 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Test v2 tokens being deleted by v3 https://review.openstack.org/201738 | 03:17 |
| *** bradjones has joined #openstack-keystone | 03:19 | |
| *** bradjones has quit IRC | 03:19 | |
| *** bradjones has joined #openstack-keystone | 03:19 | |
| *** davechen1 has joined #openstack-keystone | 03:23 | |
| openstackgerrit | Ren Qiaowei proposed openstack/keystone: Remove unnecessary executable permission https://review.openstack.org/202372 | 03:24 |
| *** piyanai has quit IRC | 03:26 | |
| *** spandhe has joined #openstack-keystone | 03:27 | |
| *** piyanai has joined #openstack-keystone | 03:27 | |
| *** spandhe_ has joined #openstack-keystone | 03:30 | |
| *** spandhe has quit IRC | 03:31 | |
| *** spandhe_ is now known as spandhe | 03:31 | |
| *** mylu has joined #openstack-keystone | 03:32 | |
| *** markvoelker has joined #openstack-keystone | 03:33 | |
| *** markvoelker has quit IRC | 03:34 | |
| *** markvoelker has joined #openstack-keystone | 03:34 | |
| *** markvoelker_ has joined #openstack-keystone | 03:37 | |
| *** markvoelker has quit IRC | 03:39 | |
| *** jasonsb has joined #openstack-keystone | 03:42 | |
| *** piyanai has quit IRC | 03:42 | |
| *** Protux has quit IRC | 03:44 | |
| *** briancurtin has quit IRC | 03:45 | |
| *** jraim has quit IRC | 03:45 | |
| *** woodster_ has quit IRC | 03:45 | |
| *** serverascode has quit IRC | 03:45 | |
| *** zhiyan has quit IRC | 03:45 | |
| *** nzeer has quit IRC | 03:45 | |
| *** ctracey has quit IRC | 03:45 | |
| *** h00327910_ has quit IRC | 03:46 | |
| *** boris-42 has quit IRC | 03:46 | |
| *** btully has quit IRC | 03:49 | |
| *** nzeer has joined #openstack-keystone | 03:49 | |
| *** rm_work|away has quit IRC | 03:52 | |
| *** zhiyan has joined #openstack-keystone | 03:54 | |
| *** fangzhou has quit IRC | 03:55 | |
| *** briancurtin has joined #openstack-keystone | 03:56 | |
| *** jraim has joined #openstack-keystone | 03:56 | |
| *** serverascode has joined #openstack-keystone | 03:59 | |
| *** ctracey has joined #openstack-keystone | 04:02 | |
| *** boris-42 has joined #openstack-keystone | 04:07 | |
| *** chenhong has quit IRC | 04:10 | |
| *** h00327910_ has joined #openstack-keystone | 04:10 | |
| *** kiran-r has joined #openstack-keystone | 04:15 | |
| *** belmoreira has joined #openstack-keystone | 04:15 | |
| *** lhcheng_ has quit IRC | 04:16 | |
| *** spandhe_ has joined #openstack-keystone | 04:18 | |
| *** spandhe has quit IRC | 04:19 | |
| *** spandhe_ is now known as spandhe | 04:19 | |
| *** btully has joined #openstack-keystone | 04:25 | |
| *** belmoreira has quit IRC | 04:28 | |
| *** Protux has joined #openstack-keystone | 04:30 | |
| *** woodster_ has joined #openstack-keystone | 04:32 | |
| *** zzzeek has joined #openstack-keystone | 04:37 | |
| *** mylu has quit IRC | 04:40 | |
| *** rm_work has joined #openstack-keystone | 04:40 | |
| *** kiran-r has quit IRC | 04:47 | |
| *** topol has joined #openstack-keystone | 04:49 | |
| *** ChanServ sets mode: +v topol | 04:49 | |
| *** topol has quit IRC | 04:49 | |
| *** markvoelker has joined #openstack-keystone | 04:49 | |
| *** zzzeek has quit IRC | 04:52 | |
| *** amakarov has joined #openstack-keystone | 04:52 | |
| *** markvoelker_ has quit IRC | 04:53 | |
| openstackgerrit | Ren Qiaowei proposed openstack/keystone: Remove unnecessary executable permission https://review.openstack.org/202372 | 04:55 |
| openstackgerrit | Merged openstack/keystone: Fix test method examining scoped federation tokens. https://review.openstack.org/202251 | 05:08 |
| *** kiran-r has joined #openstack-keystone | 05:09 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove unnecessary executable permission https://review.openstack.org/202372 | 05:14 |
| *** bigjools has quit IRC | 05:14 | |
| *** stevemar has joined #openstack-keystone | 05:15 | |
| *** ChanServ sets mode: +v stevemar | 05:15 | |
| *** topol has joined #openstack-keystone | 05:19 | |
| *** ChanServ sets mode: +v topol | 05:19 | |
| *** rm_work is now known as rm_work|away | 05:23 | |
| *** topol has quit IRC | 05:24 | |
| *** bigjools has joined #openstack-keystone | 05:27 | |
| *** _kiran_ has joined #openstack-keystone | 05:33 | |
| *** kiranr has joined #openstack-keystone | 05:35 | |
| *** kiranr has quit IRC | 05:35 | |
| *** amakarov has quit IRC | 05:37 | |
| *** kiran-r has quit IRC | 05:37 | |
| *** _kiran_ has quit IRC | 05:39 | |
| *** rm_work|away is now known as rm_work | 05:56 | |
| *** rm_work is now known as rm_work|away | 05:58 | |
| *** henrynash has quit IRC | 05:58 | |
| *** e0ne has joined #openstack-keystone | 06:00 | |
| *** spandhe has quit IRC | 06:02 | |
| *** e0ne has quit IRC | 06:02 | |
| openstackgerrit | jiaxi proposed openstack/keystone: when creating a group without specifying a domain should return 400 https://review.openstack.org/201511 | 06:03 |
| *** ParsectiX has joined #openstack-keystone | 06:06 | |
| *** fhubik has joined #openstack-keystone | 06:25 | |
| *** belmoreira has joined #openstack-keystone | 06:25 | |
| *** fhubik is now known as fhubik_afk | 06:34 | |
| *** stevemar has quit IRC | 06:42 | |
| *** fhubik_afk is now known as fhubik | 06:43 | |
| *** btully has quit IRC | 06:52 | |
| *** ankita_wagh has quit IRC | 06:58 | |
| *** ankita_wagh has joined #openstack-keystone | 06:59 | |
| *** ankita_wagh has quit IRC | 07:03 | |
| *** fhubik is now known as fhubik_afk | 07:05 | |
| *** ankita_wagh has joined #openstack-keystone | 07:08 | |
| *** x58 has quit IRC | 07:09 | |
| *** x58 has joined #openstack-keystone | 07:10 | |
| *** fhubik_afk is now known as fhubik | 07:12 | |
| *** ankita_wagh has quit IRC | 07:16 | |
| *** ParsectiX has quit IRC | 07:29 | |
| openstackgerrit | Deepti Ramakrishna proposed openstack/keystone: Add missing "raise" when throwing exception. https://review.openstack.org/199414 | 07:34 |
| *** stevemar has joined #openstack-keystone | 07:42 | |
| *** ChanServ sets mode: +v stevemar | 07:42 | |
| *** stevemar has quit IRC | 07:47 | |
| *** ParsectiX has joined #openstack-keystone | 07:51 | |
| *** rletrocquer has joined #openstack-keystone | 07:51 | |
| *** davechen1 has left #openstack-keystone | 07:55 | |
| *** davechen has joined #openstack-keystone | 07:57 | |
| *** fhubik is now known as fhubik_afk | 07:59 | |
| *** fhubik_afk is now known as fhubik | 07:59 | |
| *** fhubik is now known as fhubik_afk | 08:00 | |
| *** markvoelker has quit IRC | 08:04 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Show helpful message when request body is not provided https://review.openstack.org/195903 | 08:07 |
| openstackgerrit | Dave Chen proposed openstack/keystone: Region creation with id given also need schema validation https://review.openstack.org/201007 | 08:07 |
| *** markvoelker has joined #openstack-keystone | 08:11 | |
| openstackgerrit | jiaxi proposed openstack/keystone: when creating a group without specifying a domain should return 400 https://review.openstack.org/202429 | 08:12 |
| openstackgerrit | jiaxi proposed openstack/keystone: Forbidden adding users from different domain to a group https://review.openstack.org/202430 | 08:12 |
| *** pnavarro has joined #openstack-keystone | 08:14 | |
| *** markvoelker has quit IRC | 08:16 | |
| *** jistr has joined #openstack-keystone | 08:16 | |
| *** topol has joined #openstack-keystone | 08:16 | |
| *** ChanServ sets mode: +v topol | 08:16 | |
| *** markvoelker has joined #openstack-keystone | 08:17 | |
| *** Kiall_ has joined #openstack-keystone | 08:20 | |
| *** Kiall has quit IRC | 08:20 | |
| *** topol has quit IRC | 08:21 | |
| *** markvoelker has quit IRC | 08:25 | |
| *** markvoelker has joined #openstack-keystone | 08:29 | |
| *** fhubik_afk is now known as fhubik | 08:29 | |
| *** boris-42 has quit IRC | 08:32 | |
| *** markvoelker has quit IRC | 08:33 | |
| *** jecarey has quit IRC | 08:36 | |
| *** pnavarro is now known as pnavarro|off | 08:42 | |
| openstackgerrit | jiaxi proposed openstack/keystone: Forbidden adding users from different domain to a group. https://review.openstack.org/202438 | 08:43 |
| *** markvoelker has joined #openstack-keystone | 08:44 | |
| *** rdo has joined #openstack-keystone | 08:45 | |
| openstackgerrit | jiaxi proposed openstack/keystone: Forbidden adding users from different domain to a group. https://review.openstack.org/202438 | 08:46 |
| *** markvoelker has quit IRC | 08:48 | |
| *** aix has joined #openstack-keystone | 08:48 | |
| *** nagyz_ has joined #openstack-keystone | 08:49 | |
| nagyz_ | good morning | 08:49 |
| nagyz_ | can someone point me to a documentation explaining what should and should not be set on other projects (nova, heat) for keystone_authtoken? | 08:49 |
| nagyz_ | it seems pretty inconsistently used across projects and I want to get it in shape in heat | 08:50 |
| nagyz_ | I'm a bit confused because identity_api seems to be used across some projects but it's an option not even mentioned in the developer documentation here: http://docs.openstack.org/developer/keystonemiddleware/middlewarearchitecture.html | 08:51 |
| *** belmoreira has quit IRC | 08:51 | |
| *** ParsectiX has quit IRC | 08:53 | |
| *** topol has joined #openstack-keystone | 08:56 | |
| *** ChanServ sets mode: +v topol | 08:56 | |
| *** markvoelker has joined #openstack-keystone | 08:58 | |
| *** topol has quit IRC | 09:01 | |
| *** markvoelker has quit IRC | 09:03 | |
| *** belmoreira has joined #openstack-keystone | 09:05 | |
| *** fhubik is now known as fhubik_afk | 09:08 | |
| *** fhubik_afk is now known as fhubik | 09:14 | |
| *** christx2 has joined #openstack-keystone | 09:15 | |
| *** ParsectiX has joined #openstack-keystone | 09:19 | |
| nagyz_ | maybe CET morning is not the best time :) | 09:19 |
| *** stevemar has joined #openstack-keystone | 09:24 | |
| *** ChanServ sets mode: +v stevemar | 09:24 | |
| *** alex_xu_ is now known as alex_xu | 09:27 | |
| *** stevemar has quit IRC | 09:28 | |
| *** piyanai has joined #openstack-keystone | 09:34 | |
| *** henrynash has joined #openstack-keystone | 09:35 | |
| *** ChanServ sets mode: +v henrynash | 09:35 | |
| *** scorpio-xiatian has joined #openstack-keystone | 09:39 | |
| *** jaosorior has joined #openstack-keystone | 09:41 | |
| *** pnavarro|off has quit IRC | 09:52 | |
| odyssey4me | marekd I see that lbragstad has indicated a little more more to be done for https://review.openstack.org/202176 - shall I wait for that before testing? | 09:54 |
| *** davechen has left #openstack-keystone | 09:54 | |
| *** kashyap has joined #openstack-keystone | 09:58 | |
| *** aix has quit IRC | 09:58 | |
| *** e0ne has joined #openstack-keystone | 10:02 | |
| *** topol has joined #openstack-keystone | 10:06 | |
| *** ChanServ sets mode: +v topol | 10:06 | |
| openstackgerrit | Hugh Saunders proposed openstack/keystone: Log xmlsec1 output if it fails https://review.openstack.org/202477 | 10:06 |
| *** topol has quit IRC | 10:10 | |
| *** afazekas has joined #openstack-keystone | 10:10 | |
| *** lhcheng has joined #openstack-keystone | 10:23 | |
| *** ChanServ sets mode: +v lhcheng | 10:23 | |
| *** dims_ has joined #openstack-keystone | 10:24 | |
| *** e0ne is now known as e0ne_ | 10:25 | |
| *** aix has joined #openstack-keystone | 10:28 | |
| *** e0ne_ is now known as e0ne | 10:28 | |
| *** afazekas has quit IRC | 10:35 | |
| *** lhcheng has quit IRC | 10:37 | |
| *** dims_ has quit IRC | 10:39 | |
| *** christx2 has quit IRC | 10:44 | |
| *** afazekas has joined #openstack-keystone | 10:48 | |
| *** pas-ha has joined #openstack-keystone | 10:49 | |
| pas-ha | hi guys, most probably noone here but I'll ask anyway | 10:49 |
| pas-ha | does the current role model allows demanding several roles to be assigned to the user at once for making a certain action | 10:49 |
| pas-ha | ? | 10:49 |
| samueldmq | pas-ha: hi, for a single action, have several roles ? | 10:53 |
| samueldmq | pas-ha: this all depends on your policy. What you do with roles depends on what you define there. | 10:53 |
| pas-ha | question is can it be in principle realized? | 10:53 |
| pas-ha | like to create a nova flavor user must be ("site_admin" AND "nova_admin") | 10:54 |
| *** chenhong has joined #openstack-keystone | 10:54 | |
| pas-ha | disclaimer - I don't need it, question rose in a review | 10:55 |
| ParsectiX | Guys How can I delete a user using keystone V3 python API ? | 11:00 |
| samueldmq | pas-ha: yes you can set that in the policy, should be 'role:site_admin and role:nova_admin' | 11:01 |
| samueldmq | ParsectiX: hi, I guess it's similar to deleting a project.. and you were doing yesterday :) | 11:01 |
| pas-ha | samueldmq, thanks | 11:01 |
| ParsectiX | I'm trying to follow docs.openstack.org/developer/python-keystoneclient/api/keystoneclient.v3.html#keystoneclient.v3.users.UserManager.delete | 11:02 |
| ParsectiX | samueldmq: I switched to V3 and now I have the opposite problem I can delete project but not user. | 11:02 |
| samueldmq | ParsectiX: even passing the user id ? how are you trying specifically ? | 11:03 |
| samueldmq | ParsectiX: good to have switched to v3 :) ++ | 11:03 |
| *** Daviey has joined #openstack-keystone | 11:03 | |
| ParsectiX | yes I'm passing the UUID | 11:04 |
| *** chenhong has quit IRC | 11:04 | |
| Daviey | nkinder / morganfainberg: Looking back at bug 1350879, it is closed as "not being needed" anymore.. Is that because the user switched to V3, or was there another workaround that was done? | 11:04 |
| openstack | bug 1350879 in Keystone "Keystone V2 API does not use the policy.json for RBAC" [Wishlist,Confirmed] https://launchpad.net/bugs/1350879 | 11:04 |
| *** piyanai has quit IRC | 11:05 | |
| *** chenhong has joined #openstack-keystone | 11:05 | |
| *** pas-ha has left #openstack-keystone | 11:06 | |
| ParsectiX | samueldmq: found the problem. it was a typo... | 11:07 |
| samueldmq | ParsectiX: glad for you have it working, just telling someone else your problem helps sometimes | 11:08 |
| samueldmq | ParsectiX: come back if you have any other question/concern | 11:08 |
| *** scorpio-xiatian has quit IRC | 11:08 | |
| *** christx2 has joined #openstack-keystone | 11:12 | |
| *** e0ne is now known as e0ne_ | 11:13 | |
| *** belmoreira has quit IRC | 11:15 | |
| *** pnavarro|off has joined #openstack-keystone | 11:16 | |
| *** chenhong has quit IRC | 11:17 | |
| samueldmq | henrynash: hi, are you at the midcycle? | 11:26 |
| henrynash | samueldmq: hi, yes indeed | 11:26 |
| samueldmq | henrynash: nice, could you see with the guys if we could get list_role_assignments performance patch merged | 11:26 |
| samueldmq | ? | 11:26 |
| samueldmq | henrynash: that's been ready for a long time, all comments addressed, etc | 11:27 |
| samueldmq | henrynash: it just needs some love :) | 11:27 |
| samueldmq | henrynash: https://review.openstack.org/#/c/137202/ | 11:27 |
| henrynash | samueldmq: so were’be been on specs so far, a bit more of that today, and then we’re switching to code reviews | 11:27 |
| henrynash | samueldmq: I’ll see what I can arrange :-) | 11:27 |
| ParsectiX | samueldmq: :) | 11:28 |
| henrynash | samueldmq: nice demo yesterday, btw | 11:28 |
| samueldmq | henrynash: great thanks :) | 11:28 |
| samueldmq | henrynash: thanks, happy you liked it :) | 11:28 |
| *** fhubik is now known as fhubik_afk | 11:28 | |
| *** jiaxi has joined #openstack-keystone | 11:29 | |
| samueldmq | ParsectiX: hehe, yeah sometimes things in the community are slow, sometimes because people have other priorities, sometimes the developer didn't address the issue in the better way (patches splitting, etc), and other reasons ... | 11:29 |
| *** christx2 has quit IRC | 11:29 | |
| samueldmq | ParsectiX: but that's just part of the fun | 11:29 |
| samueldmq | :) | 11:29 |
| *** e0ne_ is now known as e0ne | 11:30 | |
| ParsectiX | The openstack-sdk project tries to combine all APIs together ? | 11:30 |
| jiaxi | Please help me to review my patch set. visit https://review.openstack.org/#/c/200512/ | 11:31 |
| jiaxi | Thank you. | 11:31 |
| *** janonymous_ has joined #openstack-keystone | 11:31 | |
| janonymous_ | Hi , Could someone help me out the py27 failure on : https://review.openstack.org/#/c/193866/ | 11:31 |
| samueldmq | ParsectiX: yes it's a python API, something like the individual clients, but together | 11:32 |
| samueldmq | ParsectiX: that's as far as I can tell you :-) | 11:32 |
| jiaxi | Look at the log | 11:33 |
| jiaxi | You should run tox, before you submit | 11:33 |
| *** Kiall_ has quit IRC | 11:34 | |
| samueldmq | janonymous_: hi, you can see the failure starting here http://logs.openstack.org/66/193866/10/check/gate-keystone-python27/bcfc010/console.html#_2015-07-15_17_58_54_839 | 11:34 |
| *** Kiall has joined #openstack-keystone | 11:34 | |
| *** pnavarro|off is now known as pnavarro | 11:35 | |
| samueldmq | janonymous_: you should click on the failing gate and then go to the logs, looking at console.html | 11:35 |
| *** topol has joined #openstack-keystone | 11:36 | |
| *** ChanServ sets mode: +v topol | 11:36 | |
| jiaxi | Who can help me to review my patch set ? visit https://review.openstack.org/#/c/200512/ | 11:37 |
| *** amakarov has joined #openstack-keystone | 11:38 | |
| *** belmoreira has joined #openstack-keystone | 11:40 | |
| *** topol has quit IRC | 11:40 | |
| jiaxi | Is there anyone here? | 11:41 |
| samueldmq | jiaxi: hi, keystoners are at the midcycle meetup, someone will be looking at your review soon | 11:41 |
| samueldmq | jiaxi: channel is a bit quiet this week | 11:42 |
| *** flwang has joined #openstack-keystone | 11:43 | |
| nagyz_ | so anybody can give me advise about the expected interaction for other componenents with the authtoken middleware? | 11:44 |
| flwang | hi guys, is there anyway to set a customized property for a user? | 11:44 |
| samueldmq | jiaxi: in addition, people who reviewed your patch already will get notified as submit new patch sets :) | 11:45 |
| flwang | i saw in database, we're using field 'extra' to save the email info, but seems there is no way to add more metadata for a user, right? | 11:45 |
| *** christx2 has joined #openstack-keystone | 11:46 | |
| samueldmq | nagyz_: ksmiddleware is like a filter in which the calls get prior to reachign the service | 11:46 |
| samueldmq | nagyz_: so it does token validation and can already reject the call if configured to do so | 11:46 |
| samueldmq | nagyz_: do you have any specific question on it ? | 11:47 |
| *** lhcheng has joined #openstack-keystone | 11:49 | |
| *** ChanServ sets mode: +v lhcheng | 11:49 | |
| marekd | odyssey4me: if it's a matter of applying the patch and changing the token format maybe you can do the quick test? | 11:51 |
| ParsectiX | Is there any work flow how I can use those services ? | 11:58 |
| *** fhubik_afk is now known as fhubik | 11:58 | |
| marekd | ParsectiX: what do you mean? | 11:59 |
| janonymous_ | samueldmq: sorry to say , i saw that before... but could not the exact reason... | 12:00 |
| janonymous_ | :( | 12:00 |
| *** christx2 has quit IRC | 12:00 | |
| samueldmq | janonymous_: http://logs.openstack.org/66/193866/10/check/gate-keystone-python27/bcfc010/console.html#_2015-07-15_17_58_54_845 | 12:01 |
| samueldmq | janonymous_: you're touching code that affects that test somehow | 12:01 |
| samueldmq | janonymous_: the test is called test_wrong_alias_dereferencing | 12:01 |
| samueldmq | janonymous_: you can run it locally with 'tox -e py27 test_wrong_alias_dereferencing' and debug | 12:01 |
| ParsectiX | marekd: Now I have downloaded the APIs I looked the code and with some trial and error I created my libraries to handle some openstack operations. I'm not sure if I use the API with the proper way. | 12:02 |
| nagyz_ | samueldmq, I've been digging through a heat but which ended up being an issue with how heat.conf is set up, specifically the authfilter | 12:03 |
| marekd | ParsectiX: which operations? clientlibraries should handle most of the operations - openstackclient is just a cli/wrapper on top of those. What really does API related job are libs like python-keystoneclient, python-glanceclient, python-novaclient etc. | 12:03 |
| nagyz_ | samueldmq, I'm a bit confused because identity_api seems to be used across some projects but it's an option not even mentioned in the developer documentation here: http://docs.openstack.org/developer/keystonemiddleware/middlewarearchitecture.html | 12:03 |
| marekd | ParsectiX: what's your use case? | 12:03 |
| nagyz_ | samueldmq, and I can't find anything about what's the official state of auth_uri... is it replaced by identity_uri? some documentation state that it's deprecated but the developer doc that I linked to above shows it as viable | 12:04 |
| * marekd runs off for ~1h | 12:05 | |
| ParsectiX | marekd: use case: Authenticate as admin. Create a user, create project, add roles for new_user to new_project | 12:07 |
| samueldmq | nagyz_: keystone middleware deprecated ? I've never heard about that before :-) | 12:11 |
| samueldmq | nagyz_: keystone middleware is a piece of keystone that lives in the services, something like that | 12:12 |
| samueldmq | nagyz_: every service needs authentication/authorization, and that's done using keystone tokens in the openstack world | 12:12 |
| samueldmq | nagyz_: that's why every service needs keystone, and that's why it's called 'keystone' :) | 12:13 |
| *** dims_ has joined #openstack-keystone | 12:14 | |
| *** topol has joined #openstack-keystone | 12:16 | |
| *** ChanServ sets mode: +v topol | 12:16 | |
| *** tellesnobrega_ has joined #openstack-keystone | 12:16 | |
| *** tellesnobrega_ has quit IRC | 12:16 | |
| *** topol has quit IRC | 12:21 | |
| *** gordc has joined #openstack-keystone | 12:24 | |
| *** stevemar has joined #openstack-keystone | 12:24 | |
| *** ChanServ sets mode: +v stevemar | 12:24 | |
| *** topol has joined #openstack-keystone | 12:25 | |
| *** ChanServ sets mode: +v topol | 12:25 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Show helpful message when request body is not provided https://review.openstack.org/195903 | 12:25 |
| openstackgerrit | Dave Chen proposed openstack/keystone: Region creation with id given also need schema validation https://review.openstack.org/201007 | 12:25 |
| *** amakarov has quit IRC | 12:27 | |
| nagyz_ | samueldmq, not the middleware, the option :) | 12:27 |
| jiaxi | Who can help me to review my patch set ? visit https://review.openstack.org/#/c/200512/ | 12:27 |
| nagyz_ | samueldmq, sorry if I was unclear about that. | 12:27 |
| nagyz_ | samueldmq, I can't find any pointer about the relationship between auth_uri and identity_uri basically | 12:27 |
| *** henrynash has quit IRC | 12:28 | |
| janonymous_ | samueldmq: Thanks , but a small question : is it an error from an external package ? or something is wrong with the tes | 12:28 |
| janonymous_ | test | 12:28 |
| *** stevemar has quit IRC | 12:29 | |
| *** markvoelker has joined #openstack-keystone | 12:29 | |
| *** lhcheng has quit IRC | 12:30 | |
| *** stevemar has joined #openstack-keystone | 12:30 | |
| *** ChanServ sets mode: +v stevemar | 12:30 | |
| *** dims_ has quit IRC | 12:30 | |
| *** piyanai has joined #openstack-keystone | 12:31 | |
| *** dims__ has joined #openstack-keystone | 12:32 | |
| *** hrou has joined #openstack-keystone | 12:33 | |
| *** henrynash has joined #openstack-keystone | 12:34 | |
| *** ChanServ sets mode: +v henrynash | 12:34 | |
| *** markvoelker has quit IRC | 12:34 | |
| *** stevemar has quit IRC | 12:35 | |
| *** henrynash has quit IRC | 12:36 | |
| *** piyanai has quit IRC | 12:38 | |
| *** piyanai has joined #openstack-keystone | 12:38 | |
| *** ParsectiX has quit IRC | 12:38 | |
| *** piyanai has quit IRC | 12:38 | |
| *** jsavak has joined #openstack-keystone | 12:39 | |
| *** dims__ has quit IRC | 12:39 | |
| *** markvoelker has joined #openstack-keystone | 12:43 | |
| *** topol has quit IRC | 12:45 | |
| *** ParsectiX has joined #openstack-keystone | 12:46 | |
| *** markvoelker has quit IRC | 12:48 | |
| *** lhcheng has joined #openstack-keystone | 12:49 | |
| *** ChanServ sets mode: +v lhcheng | 12:49 | |
| *** stevemar has joined #openstack-keystone | 12:50 | |
| *** ChanServ sets mode: +v stevemar | 12:50 | |
| *** stevemar_ has joined #openstack-keystone | 12:51 | |
| *** ChanServ sets mode: +v stevemar_ | 12:51 | |
| *** stevemar has quit IRC | 12:54 | |
| *** piyanai has joined #openstack-keystone | 12:55 | |
| *** topol has joined #openstack-keystone | 12:55 | |
| *** ChanServ sets mode: +v topol | 12:55 | |
| *** stevemar_ has quit IRC | 12:55 | |
| *** stevemar has joined #openstack-keystone | 12:56 | |
| *** ChanServ sets mode: +v stevemar | 12:56 | |
| *** markvoelker has joined #openstack-keystone | 12:57 | |
| *** stevemar_ has joined #openstack-keystone | 12:57 | |
| *** ChanServ sets mode: +v stevemar_ | 12:57 | |
| *** topol_ has joined #openstack-keystone | 12:58 | |
| *** ChanServ sets mode: +v topol_ | 12:58 | |
| *** piyanai has quit IRC | 12:58 | |
| *** pnavarro has quit IRC | 12:59 | |
| *** topol_ has quit IRC | 12:59 | |
| *** topol has quit IRC | 13:00 | |
| *** stevemar has quit IRC | 13:01 | |
| *** markvoelker has quit IRC | 13:02 | |
| *** pnavarro has joined #openstack-keystone | 13:02 | |
| openstackgerrit | Marek Denis proposed openstack/keystoneauth-saml2: Depend on keystoneauth https://review.openstack.org/186854 | 13:03 |
| *** mylu has joined #openstack-keystone | 13:04 | |
| *** markvoelker has joined #openstack-keystone | 13:05 | |
| *** piyanai has joined #openstack-keystone | 13:06 | |
| *** markvoelker_ has joined #openstack-keystone | 13:06 | |
| *** amakarov has joined #openstack-keystone | 13:09 | |
| *** markvoelker has quit IRC | 13:10 | |
| *** ParsectiX has quit IRC | 13:10 | |
| *** janonymous_ has quit IRC | 13:11 | |
| *** ParsectiX has joined #openstack-keystone | 13:11 | |
| *** ayoung has joined #openstack-keystone | 13:12 | |
| *** ChanServ sets mode: +v ayoung | 13:12 | |
| *** henrynash has joined #openstack-keystone | 13:15 | |
| *** ChanServ sets mode: +v henrynash | 13:15 | |
| *** dims_ has joined #openstack-keystone | 13:16 | |
| *** mylu has quit IRC | 13:18 | |
| *** mylu has joined #openstack-keystone | 13:18 | |
| *** ParsectiX has quit IRC | 13:18 | |
| nagyz_ | samueldmq, does that make sense? | 13:21 |
| *** topol has joined #openstack-keystone | 13:21 | |
| *** ChanServ sets mode: +v topol | 13:21 | |
| *** petertr7_away is now known as petertr7 | 13:21 | |
| *** zzzeek has joined #openstack-keystone | 13:24 | |
| *** bknudson has joined #openstack-keystone | 13:25 | |
| *** ChanServ sets mode: +v bknudson | 13:25 | |
| *** gyee has joined #openstack-keystone | 13:27 | |
| *** ChanServ sets mode: +v gyee | 13:27 | |
| *** richm has joined #openstack-keystone | 13:28 | |
| *** edmondsw has joined #openstack-keystone | 13:28 | |
| jiaxi | Who can help me to review my patch set ? visit https://review.openstack.org/#/c/200512/ | 13:30 |
| *** chenhong has joined #openstack-keystone | 13:30 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable retrieval of default values of domain config options https://review.openstack.org/185650 | 13:31 |
| *** roxanaghe has joined #openstack-keystone | 13:31 | |
| *** mylu has quit IRC | 13:32 | |
| *** petertr7 is now known as petertr7_away | 13:34 | |
| *** TheIntern has joined #openstack-keystone | 13:34 | |
| samueldmq | nagyz_: I am not sure about why we have those as separate options, you may ask jamielennox about that :) | 13:35 |
| samueldmq | nagyz_: sorry for the delay, was in a meeting | 13:35 |
| *** petertr7_away is now known as petertr7 | 13:35 | |
| nagyz_ | no problem | 13:35 |
| nagyz_ | it was actually jamie that patched up heat's usage of those | 13:35 |
| nagyz_ | and I don't know if a configuration without auth_uri should be supported or not... currently if it's not set it runs into a nice python NoneType has no method blahblah error | 13:36 |
| *** marekd has quit IRC | 13:39 | |
| *** ParsectiX has joined #openstack-keystone | 13:40 | |
| *** e0ne is now known as e0ne_ | 13:44 | |
| *** mylu has joined #openstack-keystone | 13:46 | |
| *** jdandrea has joined #openstack-keystone | 13:46 | |
| *** scorpio-xiatian has joined #openstack-keystone | 13:49 | |
| *** e0ne_ is now known as e0ne | 13:49 | |
| *** piyanai has quit IRC | 13:50 | |
| *** piyanai has joined #openstack-keystone | 13:52 | |
| *** piyanai has quit IRC | 13:52 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Fixes HTTP status code when creating/updating endpoints https://review.openstack.org/117341 | 13:55 |
| *** piyanai has joined #openstack-keystone | 13:59 | |
| *** csoukup has joined #openstack-keystone | 14:00 | |
| openstackgerrit | Marek Denis proposed openstack/keystoneauth-saml2: Standardize federated auth token scoping https://review.openstack.org/177227 | 14:02 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:02 | |
| *** Kennan has quit IRC | 14:02 | |
| *** Kennan has joined #openstack-keystone | 14:03 | |
| *** ParsectiX has quit IRC | 14:05 | |
| *** jecarey has joined #openstack-keystone | 14:11 | |
| *** woodster_ has quit IRC | 14:11 | |
| morganfainberg | bknudson: https://review.openstack.org/#/c/202072/ (cc dolphm) | 14:14 |
| *** jlearman has joined #openstack-keystone | 14:14 | |
| *** jlearman has left #openstack-keystone | 14:15 | |
| *** jsavak has quit IRC | 14:15 | |
| stevemar_ | bknudson: ping | 14:16 |
| *** jsavak has joined #openstack-keystone | 14:17 | |
| bknudson | stevemar_: pong | 14:17 |
| stevemar_ | bknudson: https://review.openstack.org/#/c/196297/3/keystoneclient/tests/unit/auth/test_identity_v2.py | 14:17 |
| stevemar_ | whats up with your comments in ps3 about OSC using stuff in KSC? | 14:18 |
| bknudson | stevemar_: keystoneclient auth plugins still need to support being created from config and CLI options | 14:18 |
| *** fifieldt_ has quit IRC | 14:19 | |
| *** btully has joined #openstack-keystone | 14:19 | |
| jiaxi | <jiaxi> Who can help me to review my patch set ? visit https://review.openstack.org/#/c/200512/ | 14:22 |
| *** amolock has joined #openstack-keystone | 14:23 | |
| *** markvoelker_ has quit IRC | 14:24 | |
| amolock | what is the link for adam's presentation yesterday? | 14:25 |
| *** amolock has quit IRC | 14:32 | |
| *** e0ne is now known as e0ne_ | 14:36 | |
| lbragstad | ayoung: ^^ | 14:38 |
| *** piyanai has quit IRC | 14:41 | |
| *** piyanai has joined #openstack-keystone | 14:43 | |
| *** marekd has joined #openstack-keystone | 14:45 | |
| *** ChanServ sets mode: +v marekd | 14:45 | |
| *** marekd has left #openstack-keystone | 14:45 | |
| *** marekd has joined #openstack-keystone | 14:45 | |
| *** ChanServ sets mode: +v marekd | 14:45 | |
| openstackgerrit | guang-yee proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 14:47 |
| gyee | stevemar, ayoung, ^^ | 14:47 |
| *** jsavak has quit IRC | 14:47 | |
| *** jsavak has joined #openstack-keystone | 14:48 | |
| dims_ | gyee: anteaya: left notes on https://review.openstack.org/#/c/177661/ - python-memcached is not py34 compatible yet and our CI vm is running memcached, so it is failing | 14:48 |
| gsilvis | marekd: When do you think you'll be free to work on some K2K stuff? | 14:48 |
| gsilvis | marekd: I should check how it's been going, but I think I'm good to work on it pretty much any time | 14:49 |
| anteaya | dims_: ack | 14:49 |
| gyee | dims_, anteaya, thanks | 14:51 |
| gyee | stevemar rasied a good point though | 14:51 |
| marekd | gsilvis: i think we are going to split into smalle rsubgroups later on, so maybe let's do this post-lunch ? | 14:51 |
| marekd | gsilvis: does it work for you ? | 14:51 |
| gsilvis | marekd: after lunch sounds good | 14:51 |
| *** chenhong has quit IRC | 14:52 | |
| marekd | great! | 14:52 |
| stevemar_ | gyee: you trying to say i don't raise good points? | 14:52 |
| *** markvoelker has joined #openstack-keystone | 14:53 | |
| gyee | stevemar_, good point! | 14:53 |
| anteaya | dims_: you said in your comment: This fails in the CI system because the VM has memcached running, | 14:58 |
| anteaya | dims_: when you say the CI system, do you mean infra jenkins? | 14:58 |
| anteaya | or some other CI system | 14:58 |
| * anteaya juggles CI systems daily | 14:59 | |
| stevemar_ | anteaya: yep, jenkins | 14:59 |
| gyee | hudson | 14:59 |
| anteaya | stevemar_: thanks | 14:59 |
| marekd | lbragstad: did you file a bug for fernet validation ? | 14:59 |
| anteaya | gyee: used to be hudson, yeah | 14:59 |
| lbragstad | marekd: fernet validation with respect to federation? | 15:00 |
| marekd | lbragstad: lack of fernet token validation in tests. | 15:00 |
| gyee | anteaya, yeah, still an evil enterprise twin of jenkins | 15:00 |
| lbragstad | marekd: I haven't open any bugs | 15:00 |
| morganfainberg | stevemar_: https://review.openstack.org/#/c/184379/ | 15:01 |
| lbragstad | s/open/opened/ | 15:01 |
| dims_ | anteaya: yes | 15:03 |
| anteaya | dims_: thanks | 15:03 |
| anteaya | gyee: I can't hear the word hudson without thinking of the movie aliens2 | 15:03 |
| anteaya | s/aliens2/aliens | 15:04 |
| *** e0ne_ is now known as e0ne | 15:05 | |
| *** belmoreira has quit IRC | 15:13 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Move inherited assignments to core, and support new inheritance rules https://review.openstack.org/200434 | 15:13 |
| *** ParsectiX has joined #openstack-keystone | 15:13 | |
| *** slberger has joined #openstack-keystone | 15:17 | |
| *** afazekas has quit IRC | 15:20 | |
| *** diazjf has joined #openstack-keystone | 15:22 | |
| *** e0ne has quit IRC | 15:26 | |
| *** e0ne has joined #openstack-keystone | 15:26 | |
| *** e0ne has quit IRC | 15:27 | |
| *** e0ne has joined #openstack-keystone | 15:27 | |
| *** piyanai has quit IRC | 15:27 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Move inherited assignments to core, and support new inheritance rules https://review.openstack.org/200434 | 15:27 |
| *** e0ne has quit IRC | 15:28 | |
| morganfainberg | stevemar_: https://review.openstack.org/#/c/180769/ | 15:28 |
| *** _________ has joined #openstack-keystone | 15:30 | |
| *** _________ has quit IRC | 15:31 | |
| *** e0ne has joined #openstack-keystone | 15:32 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Switch from deprecated isotime https://review.openstack.org/189147 | 15:34 |
| *** petertr7 is now known as petertr7_away | 15:34 | |
| *** gyee has quit IRC | 15:34 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Switch from deprecated oslo_utils.timeutils.strtime https://review.openstack.org/196853 | 15:35 |
| dolphm | marekd: i have a patch for that that i need to revive | 15:35 |
| *** petertr7_away is now known as petertr7 | 15:35 | |
| dolphm | marekd: it addresses a couple other bugs as well, and increases test coverfage substantially | 15:36 |
| dolphm | marekd: if you want to open specific bugs, i'd be happy to track against them. my patch needs to be broken down into several steps anyway | 15:36 |
| *** scorpio-xiatian has quit IRC | 15:38 | |
| *** gyee has joined #openstack-keystone | 15:39 | |
| *** ChanServ sets mode: +v gyee | 15:39 | |
| *** fhubik is now known as fhubik_afk | 15:40 | |
| *** ig0r_ has quit IRC | 15:40 | |
| openstackgerrit | Brant Knudson proposed openstack/keystonemiddleware: Fix rst https://review.openstack.org/202659 | 15:40 |
| *** afazekas has joined #openstack-keystone | 15:44 | |
| *** jorge_munoz has quit IRC | 15:44 | |
| *** jorge_munoz has joined #openstack-keystone | 15:45 | |
| topol | keystone! | 15:45 |
| topol | keystone | 15:46 |
| david-lyle | keystone? | 15:46 |
| stevemar_ | david-lyle: testing preferences for irc :) | 15:47 |
| stevemar_ | david-lyle: but yeah, keystone is still around | 15:47 |
| david-lyle | was trying to figure out the rules to the game | 15:47 |
| david-lyle | not as fun as I hoped ;) | 15:48 |
| stevemar_ | david-lyle: much like its namesake, the keystone game has no rules | 15:48 |
| *** piyanai has joined #openstack-keystone | 15:50 | |
| *** tsymanczyk has quit IRC | 15:56 | |
| gyee | KEYSTONE! | 15:58 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Fernet payloads for federated scoped tokens. https://review.openstack.org/202176 | 16:00 |
| lbragstad | Keith Stone! | 16:00 |
| gyee | Kate Spade! | 16:00 |
| stevemar_ | Stone Keith? | 16:01 |
| gsilvis | stevemar_: California isn't exactly walking distance from here, is it | 16:02 |
| stevemar_ | gsilvis: not unless you are the flash | 16:02 |
| lbragstad | marekd: I think I fixed that issue ^^ | 16:02 |
| lbragstad | marekd: running all the tests now | 16:03 |
| *** tsymanczyk has joined #openstack-keystone | 16:03 | |
| *** fhubik_afk is now known as fhubik | 16:04 | |
| *** fhubik is now known as fhubik_afk | 16:04 | |
| *** fhubik_afk is now known as fhubik | 16:04 | |
| *** TheIntern has quit IRC | 16:04 | |
| *** jsavak has quit IRC | 16:06 | |
| *** jsavak has joined #openstack-keystone | 16:06 | |
| ayoung | https://review.openstack.org/#/c/173558/ | 16:08 |
| anteaya | henrynash Geoff Arnold I'm in #openstack-doc | 16:10 |
| anteaya | and let them know to expect to hear from you | 16:10 |
| *** crc32 has joined #openstack-keystone | 16:11 | |
| *** petertr7 is now known as petertr7_away | 16:18 | |
| *** jsavak has quit IRC | 16:18 | |
| openstackgerrit | Merged openstack/keystone: Switch from MySQL-python to PyMySQL https://review.openstack.org/184379 | 16:18 |
| *** woodster_ has joined #openstack-keystone | 16:20 | |
| *** tsymanczyk has quit IRC | 16:21 | |
| bknudson | flask+marshmallow: http://flask-marshmallow.readthedocs.org/en/latest/ | 16:22 |
| bknudson | flask+sqlalchemy: http://flask-sqlalchemy.pocoo.org/2.0/ | 16:22 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Refactor: rename Fernet's unscoped federated payload https://review.openstack.org/202190 | 16:25 |
| *** edmondsw has quit IRC | 16:26 | |
| *** jsavak has joined #openstack-keystone | 16:28 | |
| *** jsavak has quit IRC | 16:29 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Initial view of Flask app factories https://review.openstack.org/202686 | 16:29 |
| *** dims_ has quit IRC | 16:30 | |
| *** topol has quit IRC | 16:30 | |
| *** _cjones_ has joined #openstack-keystone | 16:30 | |
| *** henrynash has quit IRC | 16:30 | |
| *** henrynash has joined #openstack-keystone | 16:31 | |
| *** ChanServ sets mode: +v henrynash | 16:31 | |
| *** piyanai has quit IRC | 16:32 | |
| *** dims_ has joined #openstack-keystone | 16:32 | |
| *** stevemar_ has quit IRC | 16:32 | |
| *** dims_ has quit IRC | 16:32 | |
| *** henrynash has quit IRC | 16:32 | |
| *** ankita_wagh has joined #openstack-keystone | 16:33 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraint https://review.openstack.org/158372 | 16:33 |
| *** roxanaghe has quit IRC | 16:34 | |
| *** spandhe has joined #openstack-keystone | 16:34 | |
| *** gyee has quit IRC | 16:35 | |
| *** amakarov has quit IRC | 16:35 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Send the correct user-agent to Keystone https://review.openstack.org/180769 | 16:37 |
| *** crc32 has quit IRC | 16:38 | |
| *** crc32 has joined #openstack-keystone | 16:39 | |
| *** mylu has quit IRC | 16:39 | |
| *** mylu has joined #openstack-keystone | 16:41 | |
| *** jsavak has joined #openstack-keystone | 16:41 | |
| *** pnavarro has quit IRC | 16:42 | |
| *** mylu has quit IRC | 16:42 | |
| *** piyanai has joined #openstack-keystone | 16:43 | |
| *** rwsu has quit IRC | 16:44 | |
| *** mylu has joined #openstack-keystone | 16:49 | |
| *** jkomg has joined #openstack-keystone | 16:50 | |
| *** mylu has quit IRC | 16:51 | |
| *** ParsectiX has quit IRC | 16:53 | |
| *** crc32 has quit IRC | 16:56 | |
| *** piyanai has quit IRC | 16:57 | |
| *** aix has quit IRC | 17:00 | |
| *** jistr has quit IRC | 17:00 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/202282 | 17:01 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/197254 | 17:02 |
| *** piyanai has joined #openstack-keystone | 17:02 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraint https://review.openstack.org/158372 | 17:02 |
| *** mylu has joined #openstack-keystone | 17:02 | |
| *** TheIntern has joined #openstack-keystone | 17:03 | |
| *** petertr7_away is now known as petertr7 | 17:09 | |
| *** e0ne has quit IRC | 17:09 | |
| *** rm_work|away is now known as rm_work | 17:13 | |
| *** fangzhou has joined #openstack-keystone | 17:16 | |
| *** petertr7 is now known as petertr7_away | 17:19 | |
| *** topol has joined #openstack-keystone | 17:30 | |
| *** ChanServ sets mode: +v topol | 17:30 | |
| *** dims_ has joined #openstack-keystone | 17:32 | |
| *** topol has quit IRC | 17:35 | |
| *** dims_ has quit IRC | 17:39 | |
| openstackgerrit | Deepti Ramakrishna proposed openstack/keystone: Add missing "raise" when throwing exception. https://review.openstack.org/199414 | 17:42 |
| *** geoffarnold has joined #openstack-keystone | 17:43 | |
| *** bknudson has quit IRC | 17:45 | |
| lbragstad | dstanek: https://github.com/lbragstad/keystone-deploy/blob/federation/test_federation_exercises.py#L25-L27 | 17:45 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraint https://review.openstack.org/158372 | 17:45 |
| *** htruta_ has joined #openstack-keystone | 17:46 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: List projects filtering by is_domain flag https://review.openstack.org/158398 | 17:49 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraint https://review.openstack.org/158372 | 17:49 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Honor domain operations in project table https://review.openstack.org/143763 | 17:49 |
| *** edmondsw has joined #openstack-keystone | 17:49 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Remove domain table references https://review.openstack.org/165936 | 17:49 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Restrict inherited role assignments to subdomains https://review.openstack.org/164180 | 17:49 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Bye Bye Domain Table https://review.openstack.org/161854 | 17:50 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain in token response https://review.openstack.org/197331 | 17:50 |
| lbragstad | dstanek: these are the roles I'm using to attempt setting up k2k https://github.com/lbragstad/keystone-deploy/blob/federation/playbooks/apache-keystone.yaml | 17:50 |
| *** edmondsw has quit IRC | 17:51 | |
| *** edmondsw has joined #openstack-keystone | 17:51 | |
| *** dims_ has joined #openstack-keystone | 17:52 | |
| *** dims_ has quit IRC | 17:53 | |
| *** rletrocquer has quit IRC | 17:54 | |
| *** jk|osx has joined #openstack-keystone | 17:55 | |
| *** gyee has joined #openstack-keystone | 17:57 | |
| *** ChanServ sets mode: +v gyee | 17:57 | |
| *** henriquetruta has joined #openstack-keystone | 17:57 | |
| *** dims_ has joined #openstack-keystone | 17:57 | |
| *** henriquetruta has quit IRC | 17:58 | |
| *** jkomg has quit IRC | 17:58 | |
| *** amakarov has joined #openstack-keystone | 17:59 | |
| *** topol has joined #openstack-keystone | 17:59 | |
| *** ChanServ sets mode: +v topol | 17:59 | |
| *** Kennan has quit IRC | 18:02 | |
| gyee | lets get it started | 18:03 |
| *** Kennan has joined #openstack-keystone | 18:03 | |
| *** topol has quit IRC | 18:04 | |
| lbragstad | dstanek: do you have link to the devstack keystone service provider config you've done? | 18:05 |
| *** topol has joined #openstack-keystone | 18:05 | |
| *** ChanServ sets mode: +v topol | 18:05 | |
| *** roxanaghe has joined #openstack-keystone | 18:07 | |
| *** stevemar has joined #openstack-keystone | 18:08 | |
| *** ChanServ sets mode: +v stevemar | 18:08 | |
| *** piyanai has quit IRC | 18:08 | |
| *** piyanai has joined #openstack-keystone | 18:08 | |
| marekd | gsilvis: is your friend online atm? | 18:09 |
| marekd | (i am sorry, forgot her name) | 18:09 |
| *** petertr7_away is now known as petertr7 | 18:09 | |
| gsilvis | marekd: mylu's here | 18:09 |
| marekd | mylu: hi :-) | 18:10 |
| mylu | ? | 18:10 |
| mylu | marekd: hey :D | 18:10 |
| dstanek | lbragstad: maybe https://review.openstack.org/#/c/151311/8/dsvm/federation/devstack/files/shibboleth2.xml ? | 18:10 |
| *** piyanai has quit IRC | 18:11 | |
| *** piyanai has joined #openstack-keystone | 18:12 | |
| *** Dave has quit IRC | 18:16 | |
| *** htruta_ has quit IRC | 18:18 | |
| openstackgerrit | guang-yee proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 18:18 |
| *** Ephur has joined #openstack-keystone | 18:19 | |
| *** crc32 has joined #openstack-keystone | 18:24 | |
| marekd | mylu: what happens when you create cinder client class with auth=None,authenticated=False ? | 18:26 |
| mylu | marekd: it gives require a auth plugin error | 18:26 |
| marekd | mylu: which is strange. | 18:27 |
| *** TheIntern has quit IRC | 18:27 | |
| mylu | marekd: it's weird that it doesn't have keystone as default auth plugin | 18:27 |
| mylu | marekd: the exact error message is "An auth plugin required to fetch a token" | 18:28 |
| mylu | marekd: I think its calling auth.get_auth_ref(session) which is authenticating the token and fetching a new token | 18:29 |
| openstackgerrit | guang-yee proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 18:38 |
| *** Dave has joined #openstack-keystone | 18:43 | |
| dstanek | gyee: what's more URL friendly than hex? | 18:44 |
| *** rm_work is now known as rm_work|away | 18:45 | |
| *** jaosorior has quit IRC | 18:46 | |
| *** jasonsb has quit IRC | 18:49 | |
| gyee | hash does not produce hex right? | 18:50 |
| *** petertr7 is now known as petertr7_away | 18:50 | |
| *** dims_ has quit IRC | 18:51 | |
| *** dims_ has joined #openstack-keystone | 18:52 | |
| nagyz_ | so since jamielennox is not here I thought I'd ask again: does anybody can link me to any official description of auth_uri vs identity_uri? | 18:52 |
| *** petertr7_away is now known as petertr7 | 18:52 | |
| *** dims_ has quit IRC | 18:56 | |
| *** bknudson has joined #openstack-keystone | 18:59 | |
| *** ChanServ sets mode: +v bknudson | 18:59 | |
| *** ParsectiX has joined #openstack-keystone | 19:01 | |
| *** jecarey_ has joined #openstack-keystone | 19:01 | |
| *** jecarey has quit IRC | 19:02 | |
| *** piyanai has quit IRC | 19:03 | |
| *** htruta_ has joined #openstack-keystone | 19:04 | |
| *** TheIntern has joined #openstack-keystone | 19:04 | |
| *** crc32 has left #openstack-keystone | 19:05 | |
| gyee | dstanek, you still object to base64? | 19:06 |
| dstanek | gyee: i don't object; i just see it as extra work | 19:11 |
| dstanek | is base64 always url safe? if contains = | 19:12 |
| *** ankita_wagh has quit IRC | 19:13 | |
| *** ankita_wagh has joined #openstack-keystone | 19:15 | |
| *** ParsectiX has quit IRC | 19:17 | |
| *** fangzhou has quit IRC | 19:18 | |
| *** belmoreira has joined #openstack-keystone | 19:18 | |
| dstanek | gyee: http://paste.openstack.org/show/381582/ | 19:18 |
| *** ParsectiX has joined #openstack-keystone | 19:18 | |
| *** bknudson has quit IRC | 19:19 | |
| marekd | mylu: let's wait for the end of this discussion and we can try again. | 19:19 |
| gsilvis | itt no one understands regions | 19:20 |
| *** htruta_ has quit IRC | 19:21 | |
| *** jk|osx has quit IRC | 19:22 | |
| dstanek | gsilvis: regions are a myth | 19:22 |
| gsilvis | dstanek: regions of unusual size? I don't think they exist! | 19:22 |
| *** petertr7 is now known as petertr7_away | 19:23 | |
| *** petertr7_away is now known as petertr7 | 19:23 | |
| mylu | marekd: I think I found a way there's this fuction call _needs_reauthenticate(), if I pass in auth_ref then nova won't try to re-authenticate | 19:24 |
| gyee | dstanek, ya're right | 19:24 |
| gyee | hexdigest is better | 19:24 |
| gyee | however, it produces string len of 64, that's the max allowed length for the IdP ID field | 19:25 |
| *** piyanai has joined #openstack-keystone | 19:25 | |
| gyee | which is fine since hash256 should be safe till we retired | 19:25 |
| *** piyanai has quit IRC | 19:26 | |
| *** dguerri` is now known as dguerri | 19:26 | |
| *** piyanai has joined #openstack-keystone | 19:27 | |
| * gsilvis -gentoo rharwood is nepeta | 19:27 | |
| gsilvis | crap, I'm bad at IRC apparently | 19:27 |
| rharwood | uh | 19:27 |
| rharwood | hi | 19:27 |
| *** jsavak has quit IRC | 19:28 | |
| *** spandhe has quit IRC | 19:29 | |
| *** petertr7 is now known as petertr7_away | 19:31 | |
| *** fhubik has quit IRC | 19:31 | |
| *** spandhe has joined #openstack-keystone | 19:31 | |
| *** topol has quit IRC | 19:34 | |
| *** amolock has joined #openstack-keystone | 19:35 | |
| *** ankita_w_ has joined #openstack-keystone | 19:36 | |
| *** ankita_wagh has quit IRC | 19:36 | |
| *** piyanai has quit IRC | 19:36 | |
| *** topol has joined #openstack-keystone | 19:40 | |
| *** ChanServ sets mode: +v topol | 19:40 | |
| *** topol has quit IRC | 19:40 | |
| *** piyanai has joined #openstack-keystone | 19:41 | |
| *** mylu has quit IRC | 19:43 | |
| *** nkinder has quit IRC | 19:45 | |
| *** jasonsb has joined #openstack-keystone | 19:48 | |
| *** harlowja has joined #openstack-keystone | 19:49 | |
| *** harlowja_ has quit IRC | 19:49 | |
| *** topol has joined #openstack-keystone | 19:50 | |
| *** ChanServ sets mode: +v topol | 19:50 | |
| *** mylu has joined #openstack-keystone | 19:50 | |
| *** jecarey_ has quit IRC | 19:52 | |
| *** harlowja has quit IRC | 19:52 | |
| *** jecarey has joined #openstack-keystone | 19:52 | |
| *** harlowja has joined #openstack-keystone | 19:53 | |
| *** jecarey_ has joined #openstack-keystone | 19:53 | |
| *** flwang has quit IRC | 19:53 | |
| *** jecarey has quit IRC | 19:57 | |
| *** jsavak has joined #openstack-keystone | 19:58 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Support for running functional federation tests https://review.openstack.org/139137 | 19:59 |
| openstackgerrit | David Stanek proposed openstack/keystone: enables bashate checking on dsvm code https://review.openstack.org/151309 | 19:59 |
| openstackgerrit | David Stanek proposed openstack/keystone: adds a devstack plugin for running a pysaml2 IdP https://review.openstack.org/151310 | 19:59 |
| openstackgerrit | David Stanek proposed openstack/keystone: adds a devstack plugin for setting up federation https://review.openstack.org/151311 | 19:59 |
| *** ParsectiX has quit IRC | 20:01 | |
| *** ParsectiX has joined #openstack-keystone | 20:04 | |
| *** Zanatoz has quit IRC | 20:06 | |
| *** rm_work|away is now known as rm_work | 20:07 | |
| *** belmoreira has quit IRC | 20:11 | |
| openstackgerrit | guang-yee proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 20:19 |
| gyee | dstanek, stevemar, ayoung ^^^ | 20:19 |
| stevemar | gyee: -2 | 20:22 |
| *** ParsectiX has quit IRC | 20:23 | |
| *** spandhe has quit IRC | 20:24 | |
| * marekd stevemar preparing for PTL role :D | 20:26 | |
| stevemar | marekd: i am? | 20:27 |
| marekd | -2! | 20:27 |
| *** e0ne has joined #openstack-keystone | 20:27 | |
| *** Ephur has quit IRC | 20:27 | |
| *** topol has quit IRC | 20:28 | |
| *** ParsectiX has joined #openstack-keystone | 20:31 | |
| ParsectiX | guys apologies in advance from the silly question. From http://docs.openstack.org/developer/python-keystoneclient/using-api-v3.html | 20:32 |
| ParsectiX | keystone = client.Client(...) | 20:32 |
| ParsectiX | what it's the keystone ? a python object ? | 20:33 |
| gyee | -4? | 20:33 |
| *** topol has joined #openstack-keystone | 20:33 | |
| *** ChanServ sets mode: +v topol | 20:33 | |
| *** nkinder has joined #openstack-keystone | 20:34 | |
| *** piyanai has quit IRC | 20:34 | |
| stevemar | ParsectiX: yes, it's a Client instance, a python object | 20:35 |
| ParsectiX | stevemar: Thanks! | 20:35 |
| *** topol__ has joined #openstack-keystone | 20:36 | |
| *** dims_ has joined #openstack-keystone | 20:37 | |
| *** piyanai has joined #openstack-keystone | 20:37 | |
| *** topol__ has quit IRC | 20:37 | |
| stevemar | np | 20:37 |
| *** topol__ has joined #openstack-keystone | 20:38 | |
| *** topol has quit IRC | 20:38 | |
| *** topol has joined #openstack-keystone | 20:39 | |
| *** ChanServ sets mode: +v topol | 20:39 | |
| *** tsymanczyk has joined #openstack-keystone | 20:41 | |
| gyee | next token provider must produce tokens starting with SHITYEAH | 20:42 |
| *** topol__ has quit IRC | 20:42 | |
| *** geoffarnold has quit IRC | 20:42 | |
| *** geoffarnold has joined #openstack-keystone | 20:43 | |
| *** geoffarnold has quit IRC | 20:43 | |
| *** topol has quit IRC | 20:43 | |
| stevemar | gyee: it'll use the Shittey algorithm for encryption | 20:44 |
| *** geoffarnold has joined #openstack-keystone | 20:45 | |
| openstackgerrit | guang-yee proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 20:47 |
| gyee | lhcheung ^^ | 20:47 |
| *** geoffarnold has quit IRC | 20:49 | |
| *** flwang has joined #openstack-keystone | 20:53 | |
| openstackgerrit | Alexey Miroshkin proposed openstack/keystone: Implement backend filtering on membership queries https://review.openstack.org/179758 | 20:53 |
| *** piyanai has quit IRC | 20:55 | |
| *** piyanai has joined #openstack-keystone | 20:59 | |
| *** gyee has quit IRC | 21:02 | |
| anteaya | back at my hotel | 21:02 |
| anteaya | in the middle of a panic attack | 21:03 |
| anteaya | I won't be going out again tonight | 21:03 |
| anteaya | morganfainberg: you are welcome to call/stop in when you come back to the hotel | 21:03 |
| *** piyanai has quit IRC | 21:04 | |
| *** lhcheng has quit IRC | 21:04 | |
| *** roxanaghe has quit IRC | 21:08 | |
| *** amolock has quit IRC | 21:09 | |
| *** stevemar has quit IRC | 21:09 | |
| *** flwang1 has joined #openstack-keystone | 21:10 | |
| flwang1 | ayoung: ping | 21:11 |
| *** pnavarro has joined #openstack-keystone | 21:11 | |
| *** stevemar has joined #openstack-keystone | 21:12 | |
| *** ChanServ sets mode: +v stevemar | 21:12 | |
| *** e0ne has quit IRC | 21:16 | |
| *** amakarov has quit IRC | 21:17 | |
| *** stevemar has quit IRC | 21:17 | |
| *** ayoung has quit IRC | 21:17 | |
| *** mylu has quit IRC | 21:18 | |
| anteaya | playing a recording of 7.83Hz and my heart is unwinding | 21:19 |
| *** hrou has quit IRC | 21:20 | |
| *** hrou has joined #openstack-keystone | 21:20 | |
| *** TheIntern has quit IRC | 21:31 | |
| *** piyanai has joined #openstack-keystone | 21:33 | |
| *** gordc has quit IRC | 21:33 | |
| *** amakarov has joined #openstack-keystone | 21:37 | |
| *** boris-42 has joined #openstack-keystone | 21:42 | |
| *** gordc has joined #openstack-keystone | 21:42 | |
| *** pnavarro has quit IRC | 21:44 | |
| *** edmondsw has quit IRC | 21:45 | |
| *** slberger has left #openstack-keystone | 21:56 | |
| *** diazjf has left #openstack-keystone | 21:57 | |
| *** TheIntern has joined #openstack-keystone | 22:01 | |
| *** jecarey_ has quit IRC | 22:01 | |
| *** amakarov has quit IRC | 22:09 | |
| *** fangzhou has joined #openstack-keystone | 22:10 | |
| *** amakarov has joined #openstack-keystone | 22:10 | |
| *** kfjohnson has joined #openstack-keystone | 22:12 | |
| *** piyanai has quit IRC | 22:12 | |
| openstackgerrit | Ian Cordasco proposed openstack/keystoneauth: Fix test-requirements for python 2.6 https://review.openstack.org/202816 | 22:16 |
| openstackgerrit | Ian Cordasco proposed openstack/keystoneauth: py34 not py33 is tested and supported https://review.openstack.org/201088 | 22:16 |
| *** tsymanczyk has quit IRC | 22:18 | |
| *** gordc has quit IRC | 22:26 | |
| *** ankita_wagh has joined #openstack-keystone | 22:30 | |
| *** amakarov has quit IRC | 22:33 | |
| *** ankita_w_ has quit IRC | 22:34 | |
| *** amakarov has joined #openstack-keystone | 22:34 | |
| *** csoukup has quit IRC | 22:37 | |
| *** amakarov has quit IRC | 22:41 | |
| *** csoukup has joined #openstack-keystone | 22:41 | |
| *** hogepodge has quit IRC | 23:02 | |
| *** zzzeek has quit IRC | 23:08 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/202282 | 23:16 |
| *** hrou has quit IRC | 23:19 | |
| *** zigo has quit IRC | 23:21 | |
| *** ankita_wagh has quit IRC | 23:21 | |
| *** ankita_wagh has joined #openstack-keystone | 23:22 | |
| *** zigo has joined #openstack-keystone | 23:22 | |
| *** csoukup has quit IRC | 23:23 | |
| jamielennox | hey, can someone raise https://review.openstack.org/#/c/199339/ at the midcycle | 23:23 |
| *** openstackstatus has joined #openstack-keystone | 23:34 | |
| *** ChanServ sets mode: +v openstackstatus | 23:34 | |
| *** jsavak has quit IRC | 23:42 | |
| *** ParsectiX has quit IRC | 23:53 | |
| *** dguerri is now known as dguerri` | 23:54 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!