Wednesday, 2015-10-14

*** geoffarnold has quit IRC00:02
*** geoffarn_ has joined #openstack-keystone00:02
openstackgerritLin Hua Cheng proposed openstack/keystone: Validate user exist when assigning roles in V2  https://review.openstack.org/9398200:02
*** miyagishi_t has joined #openstack-keystone00:03
openstackgerritJamie Lennox proposed openstack/keystonemiddleware: Separate setting catalog on headers from others  https://review.openstack.org/19693200:04
*** mylu_ has joined #openstack-keystone00:05
*** mylu has quit IRC00:08
*** mylu_ has quit IRC00:09
*** mylu has joined #openstack-keystone00:10
*** EinstCrazy has quit IRC00:11
*** dsirrine_ has quit IRC00:12
*** dsirrine has quit IRC00:12
*** chlong has joined #openstack-keystone00:12
*** _cjones_ has quit IRC00:15
*** shaleh has quit IRC00:17
*** shadower has quit IRC00:23
*** shadower has joined #openstack-keystone00:23
*** geoffarn_ has quit IRC00:23
*** geoffarnold has joined #openstack-keystone00:23
*** lhcheng_ has quit IRC00:24
*** spandhe has joined #openstack-keystone00:27
*** mylu_ has joined #openstack-keystone00:28
*** mylu has quit IRC00:31
*** wwwjfy_ has joined #openstack-keystone00:35
*** su_zhang has quit IRC00:36
*** darrenc_afk is now known as darrenc00:36
*** browne has quit IRC00:41
*** sdake has joined #openstack-keystone00:43
*** geoffarnold has quit IRC00:44
*** geoffarnold has joined #openstack-keystone00:45
*** markvoelker has quit IRC00:47
*** jasonsb has quit IRC00:48
*** links has joined #openstack-keystone00:53
*** mylu_ has quit IRC00:57
*** mylu has joined #openstack-keystone00:58
openstackgerritguang-yee proposed openstack/python-keystoneclient: Remove hardcoded endpoint filter for update password  https://review.openstack.org/23174900:58
*** sdake has quit IRC00:58
openstackgerritguang-yee proposed openstack/python-keystoneclient: Remove hardcoded endpoint filter for update password  https://review.openstack.org/23174901:03
*** sdake has joined #openstack-keystone01:03
*** EinstCrazy has joined #openstack-keystone01:05
*** geoffarnold has quit IRC01:06
*** btully has quit IRC01:06
*** geoffarnold has joined #openstack-keystone01:06
*** jbell8 has joined #openstack-keystone01:13
*** yuwen has joined #openstack-keystone01:14
*** jbell8 has quit IRC01:16
*** woodster_ has quit IRC01:19
anteayastevemar_: yay01:21
*** davechen has joined #openstack-keystone01:22
*** geoffarnold has quit IRC01:27
*** geoffarn_ has joined #openstack-keystone01:27
*** davechen1 has joined #openstack-keystone01:28
*** davechen has quit IRC01:29
*** dims has quit IRC01:33
*** dims has joined #openstack-keystone01:34
stevemar_ughhhhhh really https://review.openstack.org/#/c/233857/01:43
morganouch01:43
*** _hrou_ has joined #openstack-keystone01:47
*** markvoelker has joined #openstack-keystone01:48
*** geoffarn_ has quit IRC01:48
*** geoffarnold has joined #openstack-keystone01:48
*** hrou has quit IRC01:50
*** hrou has joined #openstack-keystone01:51
*** _hrou_ has quit IRC01:52
*** markvoelker has quit IRC01:53
*** lhcheng has joined #openstack-keystone01:54
*** ChanServ sets mode: +v lhcheng01:54
*** yuwen has quit IRC01:57
*** topol has joined #openstack-keystone01:57
*** ChanServ sets mode: +v topol01:57
*** topol has quit IRC02:02
*** alex_xu has joined #openstack-keystone02:02
*** spandhe has quit IRC02:02
*** jaosorior has joined #openstack-keystone02:05
*** sdake has quit IRC02:06
*** chlong has quit IRC02:06
*** geoffarnold has quit IRC02:10
openstackgerritguang-yee proposed openstack/keystonemiddleware: Enforce endpoint constraint  https://review.openstack.org/17766102:13
*** yuwen has joined #openstack-keystone02:13
*** gyee has quit IRC02:14
*** browne has joined #openstack-keystone02:19
*** chlong has joined #openstack-keystone02:23
*** boris-42 has quit IRC02:28
*** jaosorior has quit IRC02:29
*** akanksha_ has joined #openstack-keystone02:33
*** ngupta has joined #openstack-keystone02:38
*** gildub has quit IRC02:40
*** yuwen has quit IRC02:41
*** alexpro has quit IRC02:45
*** markvoelker has joined #openstack-keystone02:49
*** markvoelker has quit IRC02:53
*** richm has quit IRC02:55
*** yuwen has joined #openstack-keystone02:56
*** mylu has quit IRC03:01
*** mylu has joined #openstack-keystone03:03
*** mylu has quit IRC03:05
*** gildub has joined #openstack-keystone03:13
*** yuwen has quit IRC03:19
jlkstevemar_: python deps sure are fun!03:22
openstackgerritDave Chen proposed openstack/keystone: Switch to use CA certificate for SAML signing  https://review.openstack.org/23453103:22
stevemar_jlk: the most fun there is03:22
*** mylu has joined #openstack-keystone03:26
*** chlong has quit IRC03:29
openstackgerritDave Chen proposed openstack/keystone: Correct the filename  https://review.openstack.org/23453303:31
davechen1hmm, just some nits.03:32
stevemar_davechen1: thanks for finding nits and fixing them03:33
davechen1stevemar_: hi, master, haven't got a chance to review your patch. :)03:34
*** davechen1 is now known as davechen03:34
davechenstevemar_: now that the gate is broken, still hava a chance to review it.03:35
*** su_zhang has joined #openstack-keystone03:35
stevemar_davechen: the gate is very broken :)03:36
stevemar_:( **03:36
davechenlooks like we have face several times recently.03:36
davechentwo times in KSM.03:37
*** yuwen has joined #openstack-keystone03:41
*** dikonoor has joined #openstack-keystone03:41
*** chlong has joined #openstack-keystone03:45
*** hrou has quit IRC03:47
*** markvoelker has joined #openstack-keystone03:50
*** markvoelker has quit IRC03:54
*** yuwen has quit IRC03:54
*** mylu has quit IRC04:00
openstackgerritSteve Martinelli proposed openstack/keystone: Move federation sql migrations to common  https://review.openstack.org/23453704:01
*** david-lyle has quit IRC04:01
openstackgerritSteve Martinelli proposed openstack/keystone: Move federation sql migrations to common  https://review.openstack.org/23453704:02
openstackgerritSteve Martinelli proposed openstack/keystone: Move federation extension into keystone core  https://review.openstack.org/21477504:04
openstackgerritSteve Martinelli proposed openstack/keystone: Move federation sql migrations to common  https://review.openstack.org/23453704:05
stevemar_jamielennox: around? morgan?04:06
jamielennoxstevemar_: last time i said yes here i got given a bunch of reviews04:06
stevemar_jamielennox: hehe04:07
stevemar_jamielennox: i promise no reviews :)04:07
stevemar_just wanted a sounding board this time04:07
jamielennoxshoot04:07
stevemar_wondering where i should move the oauth1 extension to04:07
stevemar_top level keystone.oauth1 ?04:07
stevemar_or keystone.delegation04:08
morgani am gonna go get food04:08
morganwhats up?04:08
stevemar_morgan: you eat entirely too late04:08
stevemar_morgan: same question as above04:08
jamielennoxi would stick with oauth1, unified delegation is a bigger thing that we should look at but arent at yet04:08
stevemar_and the same question applies for revoke and endpoint_filter04:08
jamielennoxi would say workon on moving things into core first and then worry about naming later04:08
morganuh.04:08
stevemar_jamielennox: thats what i was thinking04:09
morganendpoint_filter is just part of catalog04:09
stevemar_gah right, that makes it weird04:09
morganrevoke is really part of token04:09
stevemar_and revoke is already weird since it's there by default now04:09
* stevemar_ will do oauth1 today since it's easier than those other two04:10
morganoauth1 could be considered federation?04:10
stevemar_morgan: nope, it's straight up delegation04:10
stevemar_another-shun04:10
morganjust move to core then if we make a unified delegation thing04:10
morganit can move again04:10
morganit's not the end of the world to move it04:10
stevemar_alright04:11
*** ngupta has quit IRC04:12
*** jbell8 has joined #openstack-keystone04:21
*** spandhe has joined #openstack-keystone04:25
*** jasonsb_ has joined #openstack-keystone04:31
openstackgerritSteve Martinelli proposed openstack/keystone-specs: cleanup specs for mitaka release  https://review.openstack.org/23454804:31
*** btully has joined #openstack-keystone04:31
stevemar_morgan: jamielennox poke: https://review.openstack.org/#/c/234548/04:33
stevemar_jamielennox: crap i said no more reviews for you!04:33
stevemar_but it's +10,-2, you can't blame me for trying :)04:34
*** yuwen has joined #openstack-keystone04:38
*** jasonsb_ has quit IRC04:40
*** Kennan2 has quit IRC04:40
*** mylu has joined #openstack-keystone04:41
*** Kennan has joined #openstack-keystone04:41
*** mylu has quit IRC04:45
*** mylu has joined #openstack-keystone04:45
*** chlong has quit IRC04:49
*** markvoelker has joined #openstack-keystone04:50
*** markvoelker has quit IRC04:55
*** mylu has quit IRC05:10
*** yuwen has quit IRC05:11
*** su_zhang has quit IRC05:11
openstackgerritSteve Martinelli proposed openstack/keystone: Move federation sql migrations to common  https://review.openstack.org/23453705:17
davechenstevemar_: hey,05:17
davechenstevemar_: maybe this spec "add-isdomain-to-token.rst" should be renamed as well?05:18
davechensee: https://review.openstack.org/#/c/197331/05:18
stevemar_davechen: oops, looks like i missed that one05:19
*** Nirupama has joined #openstack-keystone05:19
davechenotherwise looks great to me! :);-)05:19
openstackgerritSteve Martinelli proposed openstack/keystone-specs: cleanup specs for mitaka release  https://review.openstack.org/23454805:20
stevemar_thx davechen05:20
davechenmy pleasure, stevemar_05:20
*** su_zhang has joined #openstack-keystone05:22
*** boris-42 has joined #openstack-keystone05:22
stevemar_davechen: did you get your k2k setup up and running?05:25
davechenstevemar_: part of them, i am going to learn from horizon and keystone client.05:26
davechenstevemar_: just need more time to get familer with k-2-k federation.05:26
davechenthanks for asking. :)05:26
*** yuwen has joined #openstack-keystone05:29
*** jbell8 has quit IRC05:33
*** yuwen has quit IRC05:36
*** jbell8 has joined #openstack-keystone05:37
openstackgerritDave Chen proposed openstack/keystonemiddleware: Configuration is outdated  https://review.openstack.org/22054505:38
*** jbell8 has quit IRC05:47
*** henrynash has joined #openstack-keystone05:47
*** ChanServ sets mode: +v henrynash05:47
*** yuwen has joined #openstack-keystone05:47
stevemar_davechen: cool, let me know when you have it up and running05:49
openstackgerritJamie Lennox proposed openstack/keystoneauth: Fix deprecated options in oslo_config  https://review.openstack.org/23457805:50
stevemar_henrynash: you've been away, the gate is borked05:50
henrynashstevemae_:…and I’m still away, this is my ghost05:51
stevemar_henrynash: tell your ghost to get the heck off of irc!05:51
*** markvoelker has joined #openstack-keystone05:51
stevemar_henrynash: in the most loving way possible05:51
henrynashstevemar_: consdier it done….(fades to black)05:52
*** henrynash has quit IRC05:52
*** jbell8 has joined #openstack-keystone05:52
*** markvoelker has quit IRC05:56
openstackgerritDave Chen proposed openstack/keystonemiddleware: Configuration is outdated  https://review.openstack.org/22054505:58
*** spandhe has quit IRC06:10
*** yuwen has quit IRC06:17
*** gildub has quit IRC06:18
*** topol_ has joined #openstack-keystone06:18
*** ChanServ sets mode: +v topol_06:18
*** chlong has joined #openstack-keystone06:20
*** chlong has quit IRC06:27
*** su_zhang has quit IRC06:27
*** kurtrao has quit IRC06:29
*** Nirupama has quit IRC06:35
*** Nirupama has joined #openstack-keystone06:35
*** ParsectiX has joined #openstack-keystone06:37
*** lhcheng has quit IRC06:38
*** topol_ has quit IRC06:44
openstackgerritSteve Martinelli proposed openstack/keystone: Move oauth1 extension into core  https://review.openstack.org/23459806:48
*** pnavarro|off has joined #openstack-keystone06:49
*** markvoelker has joined #openstack-keystone06:52
stevemar_jamielennox: if there is a proposal bot change for ksc and ksm, please +2/A them06:53
stevemar_hoping to get the gate unwedged tomorrow06:53
*** stevemar_ has quit IRC06:53
jamielennoxyou need to release soon?06:53
jamielennoxi'm finding a number of bugs06:53
*** stevemar_ has joined #openstack-keystone06:54
*** ChanServ sets mode: +o stevemar_06:54
*** btully has quit IRC06:56
*** stevemar_ has quit IRC06:56
*** markvoelker has quit IRC06:56
*** yuwen has joined #openstack-keystone06:58
*** tyagiprince2010 has joined #openstack-keystone06:59
tyagiprince2010Hey I just installed keystone. And on running keystone-all command to run keystone, it gives the following error06:59
tyagiprince2010root@princeubuntu-VirtualBox:~/keystone# keystone-all06:59
tyagiprince2010https://titanpad.com/p6x62UQAQd07:01
tyagiprince2010the error with the command is wriiten on the link. Please help me out07:01
*** openstackgerrit has quit IRC07:01
*** openstackgerrit has joined #openstack-keystone07:02
tyagiprince2010<breton> I guess you'll have to help me out again07:02
openstackgerritJamie Lennox proposed openstack/keystoneauth: Copy AccessInfo tests from keystoneclient  https://review.openstack.org/23461107:14
*** ashishjain has joined #openstack-keystone07:23
ashishjainHello07:23
ashishjainNeed some help with keystone auth in kilo07:23
*** browne has quit IRC07:24
ashishjainI am trying to run glance commands but it seems to be failing with the error message "An auth plugin is required to fetch a token"07:24
ashishjainI have changed the auth api version to 2.0 even than I get the error07:24
ashishjainwith v3.0 I get 404 not found07:25
ashishjainI have used v2.0 api for neutron which works fine07:26
*** yuwen has left #openstack-keystone07:34
*** yuwen has joined #openstack-keystone07:34
yuwendavechen07:35
davechenyuwen: hey,07:37
davechenyuwen: good afternoon.07:37
yuwenhi, how about your k2k federation?07:38
davechenyuwen: as to the federation stuff, i am just do it via command, haven't tried it in the brower.07:38
*** jbell8 has quit IRC07:39
davechenyuwen: i am going to try it with horzion and will go through the code in the ksc as well in the following days.07:39
davechenyuwen: here are some doc may help you beside the offical docs provided by keystone.07:39
yuwenyes, keystone SP use ECP, not via web sso, in my opinion07:39
davechenhttps://bigjools.wordpress.com/2015/05/22/saml-federation-with-openstack/ and http://blog.rodrigods.com/it-is-time-to-play-with-keystone-to-keystone-federation-in-kilo07:40
yuwentks07:41
davechenyou may ping rodrigods in this channel when he shows up.07:41
davechenand check stevemar and marek's link posted yesterday, they are quite useful imo. :)07:42
*** fhubik has joined #openstack-keystone07:50
*** yuwen has quit IRC07:51
*** marzif has quit IRC07:52
*** markvoelker has joined #openstack-keystone07:53
*** btully has joined #openstack-keystone07:54
*** david-lyle has joined #openstack-keystone07:57
*** markvoelker has quit IRC07:57
*** btully has quit IRC07:58
*** marzif has joined #openstack-keystone08:06
*** yuwen has joined #openstack-keystone08:08
yuwenso, you have finished k2k?  davechen08:09
*** jistr has joined #openstack-keystone08:18
*** yuwen has quit IRC08:21
*** tjcocozz has quit IRC08:23
*** bapalm has quit IRC08:23
*** fhubik is now known as fhubik_brb08:24
*** tjcocozz has joined #openstack-keystone08:26
*** bapalm has joined #openstack-keystone08:26
davechenyuwen: not yet actually.08:29
*** marzif has quit IRC08:38
*** marzif has joined #openstack-keystone08:39
*** jamielennox is now known as jamielennox|away08:40
*** yuwen has joined #openstack-keystone08:40
*** fhubik_brb is now known as fhubik08:41
*** markvoelker has joined #openstack-keystone08:53
*** stevemar_ has joined #openstack-keystone08:55
*** ChanServ sets mode: +o stevemar_08:55
*** topol has joined #openstack-keystone08:55
*** ChanServ sets mode: +v topol08:55
*** stevemar_ has quit IRC08:58
*** markvoelker has quit IRC08:58
*** edmondsw has joined #openstack-keystone08:59
*** topol has quit IRC09:00
*** ParsectiX has quit IRC09:07
*** aix has joined #openstack-keystone09:11
*** wolsen has quit IRC09:12
*** dims_ has joined #openstack-keystone09:17
*** marzif has quit IRC09:19
*** marzif has joined #openstack-keystone09:19
*** dims has quit IRC09:20
*** urulama has quit IRC09:21
*** urulama has joined #openstack-keystone09:21
*** links has quit IRC09:22
*** jaosorior has joined #openstack-keystone09:23
*** ParsectiX has joined #openstack-keystone09:25
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/23382009:29
openstackgerritOpenStack Proposal Bot proposed openstack/keystoneauth: Updated from global requirements  https://review.openstack.org/23413009:29
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/23466609:29
*** ParsectiX has quit IRC09:30
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/23467809:33
*** yuwen has quit IRC09:36
*** tyagiprince2010 has quit IRC09:38
openstackgerritDave Chen proposed openstack/keystone: Build endpoint filter's resource relation correctly  https://review.openstack.org/23468509:38
openstackgerritDave Chen proposed openstack/keystone: Build endpoint policy's resource relation correctly  https://review.openstack.org/23468509:39
*** Kennan has quit IRC09:47
*** Kennan has joined #openstack-keystone09:48
*** davechen has left #openstack-keystone09:52
*** markvoelker has joined #openstack-keystone09:54
*** markvoelker has quit IRC09:58
*** martinus__ has quit IRC10:00
*** martinus__ has joined #openstack-keystone10:02
*** chlong has joined #openstack-keystone10:14
*** marzif has quit IRC10:20
*** marzif has joined #openstack-keystone10:20
*** wolsen has joined #openstack-keystone10:26
*** fhubik is now known as fhubik_brb10:37
*** Kennan has left #openstack-keystone10:44
*** marzif has quit IRC10:50
*** marzif has joined #openstack-keystone10:53
*** markvoelker has joined #openstack-keystone10:55
*** stevemar_ has joined #openstack-keystone10:56
*** ChanServ sets mode: +o stevemar_10:56
*** e0ne has joined #openstack-keystone10:56
*** tsufiev_ has quit IRC10:58
*** stevemar_ has quit IRC10:59
*** markvoelker has quit IRC11:00
*** EinstCrazy has quit IRC11:11
*** marzif has quit IRC11:12
*** marzif has joined #openstack-keystone11:13
openstackgerritMerged openstack/oslo.policy: Add cover test requirement  https://review.openstack.org/23428911:21
*** e0ne has quit IRC11:23
*** topol has joined #openstack-keystone11:27
*** ChanServ sets mode: +v topol11:27
*** fhubik_brb is now known as fhubik11:31
*** nisha has joined #openstack-keystone11:31
*** doug-fish_ is now known as doug-fish11:36
*** EinstCrazy has joined #openstack-keystone11:37
*** aix has quit IRC11:46
*** markvoelker has joined #openstack-keystone11:56
*** nisha has quit IRC11:56
*** markvoelker has quit IRC12:00
*** markvoelker has joined #openstack-keystone12:00
*** btully has joined #openstack-keystone12:02
*** ParsectiX has joined #openstack-keystone12:03
*** gordc has joined #openstack-keystone12:10
*** raildo-afk is now known as raildo12:12
*** fhubik is now known as fhubik_brb12:17
*** fhubik_brb is now known as fhubik12:23
*** ayoung has quit IRC12:25
*** pauloewerton has joined #openstack-keystone12:30
*** marzif has quit IRC12:31
*** marzif has joined #openstack-keystone12:31
*** aix has joined #openstack-keystone12:33
samueldmqmorning12:37
*** fhubik is now known as fhubik_brb12:39
*** fhubik_brb is now known as fhubik12:41
*** tjcocozz has left #openstack-keystone12:48
*** csoukup_ has quit IRC12:51
*** su_zhang has joined #openstack-keystone12:56
*** stevemar_ has joined #openstack-keystone12:57
*** ChanServ sets mode: +o stevemar_12:57
*** stevemar_ has quit IRC13:00
*** dsirrine has joined #openstack-keystone13:02
dstanekmarekd: did you see on the dev list that someone is trying to use keystone as a generic IdP?13:03
*** tjcocozz has joined #openstack-keystone13:04
*** dsirrine has quit IRC13:05
*** dsirrine has joined #openstack-keystone13:07
*** Nirupama has quit IRC13:12
*** marzif has quit IRC13:13
*** marzif has joined #openstack-keystone13:16
*** richm has joined #openstack-keystone13:17
*** fhubik is now known as fhubik_brb13:18
*** hrou has joined #openstack-keystone13:22
*** jsavak has joined #openstack-keystone13:23
*** hrou has quit IRC13:33
*** hrou has joined #openstack-keystone13:34
*** fhubik_brb is now known as fhubik13:35
*** petertr7_away is now known as petertr713:35
*** doug-fis_ has joined #openstack-keystone13:36
*** marzif has quit IRC13:37
*** miyagishi_t has quit IRC13:37
*** doug-fish has quit IRC13:39
*** evrardjp has quit IRC13:42
*** evrardjp has joined #openstack-keystone13:45
*** ngupta has joined #openstack-keystone13:46
*** evrardjp has quit IRC13:51
*** samueldmq has quit IRC13:53
*** samueldmq has joined #openstack-keystone13:53
*** jistr is now known as jistr|mtg13:56
bknudsonhopefully we'll have the gate fixed today so that we can have useful office hours tomorrow.13:57
bknudsonoops, that's friday13:57
bknudsonhopefully we can get the gate working today13:57
*** csoukup has joined #openstack-keystone13:57
*** evrardjp has joined #openstack-keystone13:58
lbragstadbknudson looks like your patches to ksa and ksm merged13:58
bknudsonI think we'll need a new release of ksa and ksm13:58
bknudsononce the reqs update to remove the webob cap is merged.13:59
samueldmqbknudson: what is missing now ? ksclient was realeased right ?13:59
lbragstadI don't think we got a new release yet13:59
bknudsonthe ksc that was released yesterday had the webob cap which caused keystone unit tests to fail13:59
bknudsonI guess we weren't supposed to release with that cap on there. nobody told me14:00
lbragstadoh, gotcha14:00
*** dims_ has quit IRC14:01
bknudson    pkg_resources.ContextualVersionConflict: (WebOb 1.5.0 (/opt/stack/keystone/.tox/py27/lib/python2.7/site-packages), Requirement.parse('WebOb<1.5.0,>=1.2.3'), set(['keystonemiddleware']))14:01
*** dims has joined #openstack-keystone14:01
bknudsonthat's what happens in keystone for me.14:01
*** sigmavirus24_awa is now known as sigmavirus2414:02
*** dsirrine is now known as dsirrine|call14:03
*** ParsectiX has quit IRC14:04
*** stevemar_ has joined #openstack-keystone14:07
*** ChanServ sets mode: +o stevemar_14:07
*** marzif has joined #openstack-keystone14:09
*** nate_gone is now known as njohnston14:13
samueldmqbknudson: what does Kilo 2015.1.3 mean ? sorry I am not familiar with the release process14:15
samueldmqbknudson: and I just saw a commit to open it (https://review.openstack.org/#/c/234393)14:15
bknudsonsamueldmq: it's the 3rd release of kilo.14:15
bknudson2015.1.0 was the first release (... so maybe it's the 4th release.)14:16
bknudsonsamueldmq: http://lists.openstack.org/pipermail/openstack-announce/2015-October/000715.html14:16
samueldmqbknudson: so it means it's open to receive backports in that version ?14:16
bknudsonthe next release is going to be 2015.1.314:17
bknudsonand yes, stable/kilo is open now, it was frozen for a few days14:17
samueldmqwith the backports we add from now until it closes again14:17
samueldmqbknudson: nice, thanks for clarifying14:18
stevemar_samueldmq: you mean 2015.1.3 isn't obvious :)14:21
*** ankurgupta has joined #openstack-keystone14:22
*** browne has joined #openstack-keystone14:22
*** dsirrine|call has quit IRC14:28
*** dsirrine has joined #openstack-keystone14:29
*** pumaranikar has joined #openstack-keystone14:31
*** hrou has quit IRC14:32
*** _hrou_ has joined #openstack-keystone14:32
*** _hrou_ has quit IRC14:32
*** jasonsb_ has joined #openstack-keystone14:32
*** hrou has joined #openstack-keystone14:33
*** weihan has joined #openstack-keystone14:34
*** tonytan4ever has joined #openstack-keystone14:36
*** dikonoor has quit IRC14:40
*** pnavarro|off has quit IRC14:41
*** phalmos has joined #openstack-keystone14:43
*** slberger has joined #openstack-keystone14:44
openstackgerritBoris Bobrov proposed openstack/keystone: Fix exposition of bug about limiting with ldap  https://review.openstack.org/23422614:45
openstackgerritBoris Bobrov proposed openstack/keystone: Simplify LimitTests  https://review.openstack.org/23430014:45
openstackgerritBoris Bobrov proposed openstack/keystone: Use search_ext_s instead of search_s in ldap  https://review.openstack.org/23299514:45
openstackgerritBoris Bobrov proposed openstack/keystone: Make @truncated common for all backends  https://review.openstack.org/23306914:45
openstackgerritBoris Bobrov proposed openstack/keystone: Use @truncated in ldap for users  https://review.openstack.org/23307014:45
*** fhubik has quit IRC14:47
*** stevemar_ has quit IRC14:50
*** ankurgupta has quit IRC14:50
*** stevemar_ has joined #openstack-keystone14:51
*** ChanServ sets mode: +o stevemar_14:51
*** btully has quit IRC14:52
*** stevemar_ has quit IRC14:52
*** stevemar_ has joined #openstack-keystone14:52
*** ChanServ sets mode: +o stevemar_14:52
*** topol has quit IRC14:55
*** topol has joined #openstack-keystone14:58
*** ChanServ sets mode: +v topol14:58
*** topol has quit IRC14:58
*** phalmos has quit IRC15:01
openstackgerritMerged openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/23467815:01
*** btully has joined #openstack-keystone15:01
*** jistr|mtg is now known as jistr15:02
*** ankurgupta has joined #openstack-keystone15:02
openstackgerritMerged openstack/keystoneauth: Updated from global requirements  https://review.openstack.org/23413015:02
*** ashishjain has quit IRC15:03
*** btully has quit IRC15:05
*** pdardeau has joined #openstack-keystone15:08
*** pdardeau has quit IRC15:11
*** ankurgupta has quit IRC15:12
stevemar_bknudson: now to release new stuff!15:13
stevemar_bknudson: i'll post the patch in a minute15:14
openstackgerritMerged openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/23466615:14
*** btully has joined #openstack-keystone15:14
*** ankurgupta has joined #openstack-keystone15:15
*** ankurgupta has left #openstack-keystone15:16
*** btully has quit IRC15:18
stevemar_bknudson: https://review.openstack.org/#/c/234835/15:19
*** urulama has quit IRC15:19
*** urulama has joined #openstack-keystone15:20
*** LukeHinds has joined #openstack-keystone15:21
*** erhudy has joined #openstack-keystone15:21
*** weihan has quit IRC15:22
*** weihan has joined #openstack-keystone15:23
*** pnavarro|off has joined #openstack-keystone15:23
*** pnavarro|off has quit IRC15:24
*** pnavarro has joined #openstack-keystone15:25
*** weihan has quit IRC15:25
*** david-lyle has quit IRC15:25
*** weihan has joined #openstack-keystone15:25
*** david-lyle has joined #openstack-keystone15:27
*** e0ne has joined #openstack-keystone15:27
*** atiwari has joined #openstack-keystone15:28
*** diazjf has joined #openstack-keystone15:31
*** thiagop has joined #openstack-keystone15:33
bknudsonstevemar_: hopefully that will allow https://review.openstack.org/#/c/233800/ to merge and then we'll be fixed (on master)15:34
stevemar_\o/15:35
*** jsavak has quit IRC15:35
stevemar_bknudson: are we good in stable?15:35
bknudsonstevemar_: stable will probably need a backport of https://review.openstack.org/#/c/233800/ , or maybe a cap of oslo.policy15:36
stevemar_no we are not15:36
*** btully has joined #openstack-keystone15:36
bknudsonnot sure why we thought we didn't need to cap libs in stable15:36
* stevemar_ shrugs at bknudson15:37
*** pumaranikar has quit IRC15:38
*** jsavak has joined #openstack-keystone15:38
*** pumaranikar has joined #openstack-keystone15:38
*** pnavarro_ has joined #openstack-keystone15:39
stevemar_bknudson: i like that some guy assigned 1505996 to himself15:39
*** marzif has quit IRC15:39
stevemar_its a bold move15:40
bknudsonI wish he would have fixed it!15:40
*** pumaranikar has quit IRC15:40
bknudsonmaybe he's got some secret sauce15:40
*** pumaranikar has joined #openstack-keystone15:41
*** pnavarro has quit IRC15:42
*** jsavak has quit IRC15:42
marekddstanek: i didnt pay much attention to emails today as i was busy with something else, but yesterday someone asked about that IRC and I ruined his hopes in that matter.15:44
marekddstanek: let me take a look now.15:44
openstackgerritBoris Bobrov proposed openstack/keystone: Fix exposition of bug about limiting with ldap  https://review.openstack.org/23422615:44
openstackgerritBoris Bobrov proposed openstack/keystone: Simplify LimitTests  https://review.openstack.org/23430015:44
openstackgerritBoris Bobrov proposed openstack/keystone: Use search_ext_s instead of search_s in ldap  https://review.openstack.org/23299515:44
openstackgerritBoris Bobrov proposed openstack/keystone: Make @truncated common for all backends  https://review.openstack.org/23306915:44
openstackgerritBoris Bobrov proposed openstack/keystone: Use @truncated in ldap for users  https://review.openstack.org/23307015:44
openstackgerritBoris Bobrov proposed openstack/keystone: Enable limiting in ldap for groups  https://review.openstack.org/23484915:44
*** david-ly_ has joined #openstack-keystone15:46
openstackgerritgordon chung proposed openstack/keystonemiddleware: drop use of norm_ns  https://review.openstack.org/23426515:46
*** david-lyle has quit IRC15:47
*** topol has joined #openstack-keystone15:48
*** ChanServ sets mode: +v topol15:48
stevemar_dammit gordc run your tests before pushing! :)15:49
marekddstanek: yeah, that's the same guy.15:50
gordcstevemar_: that requires work15:50
stevemar_gordc: you think these servers are free? $4 for every patch you push from now on15:51
*** pumaranikar has quit IRC15:52
* lbragstad watches stevemar_ lay down the law15:52
gordcstevemar_: how much if the patch gets merged?15:53
*** kiran-r has joined #openstack-keystone15:53
stevemar_gordc: thats free15:53
* gordc need to do some cost analysis here15:53
*** kiran-r has quit IRC15:53
gordcstevemar_: f it15:53
* gordc abandons patch15:53
stevemar_gordc: but for every 5 patches you merge you get a 6th free15:54
*** david-ly_ is now known as david-lyle15:54
gordcbetter than mcds coffee deal i guess.15:54
lbragstadstevemar_ psh, let's start with a "merge one get one" model15:54
stevemar_lbragstad: bogo eh15:55
lbragstadstevemar_ yes sir!15:55
*** doug-fis_ is now known as doug-fish15:55
*** jsavak has joined #openstack-keystone15:59
*** su_zhang has quit IRC16:03
*** jsavak has quit IRC16:03
morganstevemar_: so if I test patches myself do you pay me $4?16:03
*** jsavak has joined #openstack-keystone16:03
morgan^_^16:03
morganor test your patches16:04
stevemar_morgan: testing your own patches is your civic duty16:04
stevemar_something something startship trooopers16:05
morganBut i am testing your patches16:05
morganSo...$4 each please16:05
morgan>|>16:05
*** jistr has quit IRC16:06
morganAnnnyway. So uh16:06
*** johnthetubaguy has joined #openstack-keystone16:06
*** pnavarro_ has quit IRC16:06
morganstevemar_: just approved https://review.openstack.org/#/c/226121/16:08
*** pumaranikar has joined #openstack-keystone16:08
morganstevemar_: it probably needs py3 loving now that I think about it. But at the very least it solves the immediate bug16:08
*** petertr7 is now known as petertr7_away16:11
*** diazjf has quit IRC16:11
*** lhcheng has joined #openstack-keystone16:16
*** ChanServ sets mode: +v lhcheng16:16
dstanekmarekd: i was going respond saying keystone really isn't an IdP, but i thought i'd wait16:17
*** _cjones_ has joined #openstack-keystone16:20
stevemar_bknudson: YAY16:28
*** r-daneel has joined #openstack-keystone16:28
stevemar_233800 is passing in zuul16:28
stevemar_dhellmann: *success* ^16:28
openstackgerritTom Cocozzello proposed openstack/keystone: Fix docstring  https://review.openstack.org/23488116:29
*** weihan has quit IRC16:29
dolphmstevemar_: but this failed pretty miserably https://review.openstack.org/#/c/23425516:32
stevemar_dolphm: yowza16:33
stevemar_dolphm: i wonder why, since yesterday is worked16:33
dolphmNo matching distribution found for keystonemiddleware===2.4.1 ?16:33
stevemar_dolphm: oh maybe it was still not available in pypi just yet16:34
dolphmit totally is16:34
stevemar_i think there was a short window of time when it wasn't16:34
dolphmstevemar_: but maybe wasn't when the job started.. just recheck?16:34
stevemar_and i pushed that ... yeah, exactly16:35
stevemar_i did fire off that job right after the releases stuff merged16:35
stevemar_brant ran into a similar issue locally16:35
stevemar_food time16:36
stevemar_dolphm: don't recheck bonanza yet, the policy tests are failing stuff16:36
stevemar_wait for 23380016:36
stevemar_now food time16:36
*** jasonsb_ has quit IRC16:37
*** SamYaple_ has joined #openstack-keystone16:39
bknudsonhttps://review.openstack.org/#/c/234255 might have gotten in a little early.16:39
*** jasondotstar_ has joined #openstack-keystone16:39
bknudsonbefore pypi was updated16:40
*** bigjools_ has joined #openstack-keystone16:40
*** diazjf has joined #openstack-keystone16:41
*** kfjohnson_ has joined #openstack-keystone16:44
*** cburgess_ has joined #openstack-keystone16:44
*** zzzeek_ has joined #openstack-keystone16:46
*** aix has quit IRC16:48
*** e0ne_ has joined #openstack-keystone16:49
*** _cjones_ has quit IRC16:50
*** e0ne has quit IRC16:50
*** csoukup has quit IRC16:50
*** samueldmq has quit IRC16:50
*** tsufiev has quit IRC16:50
*** jimbaker has quit IRC16:50
*** zzzeek has quit IRC16:50
*** cburgess has quit IRC16:50
*** SamYaple has quit IRC16:50
*** rha has quit IRC16:50
*** toddnni has quit IRC16:50
*** sileht has quit IRC16:50
*** bigjools has quit IRC16:50
*** rodrigods has quit IRC16:50
*** kfjohnson has quit IRC16:50
*** jasondotstar has quit IRC16:50
*** dstanek has quit IRC16:50
*** jsavak has quit IRC16:50
*** bapalm has quit IRC16:50
*** lifeless has quit IRC16:50
*** hogepodge has quit IRC16:50
*** mtreinish has quit IRC16:50
*** jbonjean has quit IRC16:50
*** baffle has quit IRC16:50
openstackgerritAlexander Makarov proposed openstack/keystone: Unified delegation model  https://review.openstack.org/20848816:52
openstackgerritAlexander Makarov proposed openstack/keystone: Unified delegation driver  https://review.openstack.org/20960016:52
*** pnavarro has joined #openstack-keystone16:53
*** SamYaple_ is now known as SamYaple16:53
*** gyee has joined #openstack-keystone16:54
*** ChanServ sets mode: +v gyee16:54
*** e0ne_ is now known as e0ne16:55
*** petertr7_away is now known as petertr716:56
*** akanksha_ has quit IRC16:58
*** nisha_ has joined #openstack-keystone16:59
*** jsavak has joined #openstack-keystone16:59
*** bapalm has joined #openstack-keystone16:59
*** lifeless has joined #openstack-keystone16:59
*** hogepodge has joined #openstack-keystone16:59
*** mtreinish has joined #openstack-keystone16:59
*** jbonjean has joined #openstack-keystone16:59
*** baffle has joined #openstack-keystone16:59
*** nisha_ has quit IRC17:00
*** nisha_ has joined #openstack-keystone17:02
*** nisha_ is now known as nisha__17:02
*** nisha__ is now known as nisha_17:03
*** nisha_ has quit IRC17:04
*** jsavak has quit IRC17:06
*** bapalm has quit IRC17:07
*** lifeless has quit IRC17:07
*** hogepodge has quit IRC17:07
*** mtreinish has quit IRC17:07
*** jbonjean has quit IRC17:07
*** baffle has quit IRC17:07
*** jsavak has joined #openstack-keystone17:07
*** spandhe has joined #openstack-keystone17:07
*** rodrigods has joined #openstack-keystone17:07
*** rha has joined #openstack-keystone17:07
*** rha has quit IRC17:07
*** rha has joined #openstack-keystone17:07
*** toddnni has joined #openstack-keystone17:07
*** csoukup has joined #openstack-keystone17:07
*** samueldmq has joined #openstack-keystone17:07
*** jimbaker has joined #openstack-keystone17:07
*** jimbaker has quit IRC17:08
*** jimbaker has joined #openstack-keystone17:08
*** su_zhang has joined #openstack-keystone17:08
*** sileht has joined #openstack-keystone17:08
*** tsufiev has joined #openstack-keystone17:08
*** jaosorior has quit IRC17:09
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489917:09
*** jsavak has quit IRC17:10
*** _cjones_ has joined #openstack-keystone17:10
*** bapalm has joined #openstack-keystone17:10
*** lifeless has joined #openstack-keystone17:10
*** hogepodge has joined #openstack-keystone17:10
*** mtreinish has joined #openstack-keystone17:10
*** jbonjean has joined #openstack-keystone17:10
*** baffle has joined #openstack-keystone17:10
*** jsavak has joined #openstack-keystone17:10
*** petertr7 is now known as petertr7_away17:11
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489917:11
*** pnavarro has quit IRC17:13
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489917:13
*** browne has quit IRC17:15
*** petertr7_away is now known as petertr717:22
*** dstanek_ has joined #openstack-keystone17:22
*** dstanek_ has quit IRC17:23
*** dstanek has joined #openstack-keystone17:24
*** ChanServ sets mode: +v dstanek17:24
*** ayoung has joined #openstack-keystone17:25
*** ChanServ sets mode: +v ayoung17:25
*** jasonsb has joined #openstack-keystone17:26
*** diazjf has quit IRC17:28
*** roxanaghe has joined #openstack-keystone17:31
stevemar_gordc: GDI test_missing_catalog_endpoint_id - 'nova' != 'openstack:nova'17:36
stevemar_lhcheng: if you happen to have a few moments :) https://review.openstack.org/#/c/222471/17:38
gordcstevemar_: God Damn Independent?17:38
stevemar_gordc: something like that17:38
gordci've no idea what you just typed but usre.17:39
gordcsure*17:39
lhchengstevemar_: sure, will do17:39
*** jasondotstar_ is now known as jasondotstar17:39
stevemar_gordc: IT*17:40
openstackgerritHenrique Truta proposed openstack/keystone: Tests for subprojects acting as domains  https://review.openstack.org/23490717:40
gordcstevemar_: fix urbandictionary, the college kids made your acronym incorrect.17:41
*** diazjf has joined #openstack-keystone17:41
*** ayoung has quit IRC17:41
gordcthat test is fixed anyways17:41
stevemar_gordc: damn college kids, ruining everything, i was going for definition #417:42
stevemar_http://www.urbandictionary.com/define.php?term=gdi&defid=671028317:42
gordcnot even close to number of votes.17:44
stevemar_jdennis thanks for dropping federation knowledge bombs on the ML17:45
*** phalmos has joined #openstack-keystone17:47
*** browne has joined #openstack-keystone17:55
*** su_zhang_ has joined #openstack-keystone17:58
*** wasmum- has joined #openstack-keystone17:58
*** mylu has joined #openstack-keystone17:59
*** su_zhang has quit IRC18:01
*** jbell8 has joined #openstack-keystone18:02
*** mylu has quit IRC18:03
*** mylu has joined #openstack-keystone18:04
*** LukeHinds has quit IRC18:06
*** mylu has quit IRC18:08
*** mylu has joined #openstack-keystone18:09
*** edmondsw has quit IRC18:09
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489918:11
*** mylu has quit IRC18:12
*** urulama has quit IRC18:13
*** mylu has joined #openstack-keystone18:14
*** urulama has joined #openstack-keystone18:14
*** e0ne has quit IRC18:15
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489918:15
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489918:16
*** e0ne has joined #openstack-keystone18:20
openstackgerritSteve Martinelli proposed openstack/keystone: Move oauth1 extension into core  https://review.openstack.org/23459818:24
*** edmondsw has joined #openstack-keystone18:28
openstackgerritBrant Knudson proposed openstack/keystone: Update test modules passing on py34  https://review.openstack.org/23163518:33
openstackgerritBrant Knudson proposed openstack/keystone: Handle fernet payload timestamp differences  https://review.openstack.org/23271118:33
openstackgerritBrant Knudson proposed openstack/keystone: Fix fernet key writing for python 3  https://review.openstack.org/23171018:33
openstackgerritBrant Knudson proposed openstack/keystone: Fix fernet padding for python 3  https://review.openstack.org/23171118:33
*** david-lyle has quit IRC18:35
*** david-lyle has joined #openstack-keystone18:39
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489918:39
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489918:40
*** david-ly_ has joined #openstack-keystone18:40
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489918:41
dolphmbknudson: on this one: self.assertEqual(b'=', encrypted_payload[-1:])18:41
dolphmbknudson: i just mean is the slice necessary vs just pulling the index18:41
openstackgerritSteve Martinelli proposed openstack/keystone: Move federation extension into keystone core  https://review.openstack.org/21477518:41
bknudsondolphm: do I know what the index is? it would always have to be the same length18:42
bknudsonI switched it back to use endswith()18:42
openstackgerritSteve Martinelli proposed openstack/keystone: Move federation sql migrations to common  https://review.openstack.org/23453718:42
bknudsonI thought the error I got was because you can't use endswith() on a bytes18:42
dolphmbknudson: encrypted_payload[-1]18:42
bknudsondolphm: ahhh18:42
dolphmbknudson: i thought the assertEquals was totally an improvement though18:43
bknudsonI'll switch it back.18:43
*** david-ly_ has quit IRC18:43
*** david-ly_ has joined #openstack-keystone18:44
*** david-lyle has quit IRC18:44
bknudsonit wasn't going to pass jenkins anyways18:44
openstackgerritSteve Martinelli proposed openstack/keystone: Move oauth1 extension into core  https://review.openstack.org/23459818:45
*** david-ly_ is now known as david-lyle18:45
*** david-lyle has quit IRC18:45
*** su_zhang_ has quit IRC18:45
bknudsondolphm: actually, without the slice you get a byte back, not a byte string.18:46
bknudsonb'abc='[-1]18:47
bknudson6118:47
*** david-lyle has joined #openstack-keystone18:47
bknudsonb'abc='[-1:] == b'='18:47
bknudsonis true18:47
dolphmbknudson: in py3?18:47
bknudsony, Python 3.4.318:47
dolphmbknudson: bah, they're the same in py2718:48
bknudsonthat is weird18:48
bknudsonb'abc='[-1] -> '=' on py27 but it's 61 on py3418:48
*** mylu has quit IRC18:48
*** mylu has joined #openstack-keystone18:49
*** mylu has quit IRC18:49
*** mylu has joined #openstack-keystone18:50
openstackgerritRon De Rose proposed openstack/keystone: keystone-paste.ini docs for deployers are out of date  https://review.openstack.org/23489918:51
dolphmbknudson: uhh, can you explain what ">>> bytes(0x3D)" is doing in py3?18:53
dolphm(the output)18:53
bknudsondolphm: it's creating a string of a length18:54
dolphmoooh.18:54
dolphmthe py27 output for the same thing seems useless18:55
*** su_zhang has joined #openstack-keystone18:55
dolphmit returns a str of "61"18:55
*** roxanaghe has quit IRC18:55
dolphm(was looking for chr() though)18:55
bknudsonon py34 if you do str(10) you get back '10'18:56
bknudsonnot a 10-char string of 0s.18:56
*** su_zhang has quit IRC18:57
bknudsonok, found the docs: https://docs.python.org/3/library/functions.html#bytearray18:58
bknudsonIf it is an integer, the array will have that size and will be initialized with null bytes.18:58
bknudsonwhy would you want that... nobody knows18:58
*** david-lyle has quit IRC19:00
*** david-lyle has joined #openstack-keystone19:08
*** dsirrine has quit IRC19:09
*** dsirrine has joined #openstack-keystone19:10
*** dsirrine_ has joined #openstack-keystone19:13
*** dsirrine has quit IRC19:15
*** ankurgupta1 has joined #openstack-keystone19:17
*** david-lyle has quit IRC19:25
*** david-ly_ has joined #openstack-keystone19:25
*** rderose has joined #openstack-keystone19:26
*** su_zhang has joined #openstack-keystone19:28
*** slberger1 has joined #openstack-keystone19:29
*** slberger has quit IRC19:31
*** su_zhang has quit IRC19:32
*** jsavak has quit IRC19:34
dolphmbknudson: this one looks good, assuming you / lbragstad worked out that we should in fact be using float() instead of int() in the fernet formatter? https://review.openstack.org/#/c/232711/19:34
*** jsavak has joined #openstack-keystone19:34
bknudsondolphm: lbragstad proposed the change to name the tests float and my python3 fix is based on that.19:35
bknudsonI've got to admit I don't know why it needs to be a float... the ttl in int seems like it would make for smaller tokens and be correct19:36
dolphmbknudson: oh okay, i guess we'd need to iterate all the formats to store int(1000000 * x) in the payload anyway19:36
dolphmbknudson: the microseconds are a decimal, for whatever reason19:37
bknudsonthe ttl is seconds in the config, I don't think you can make it microseconds19:37
*** dsirrine_ is now known as dsirrine19:37
dolphmbknudson: ttl? i'm thinking of the expiration timestamp19:37
*** david-ly_ has quit IRC19:38
dolphmbknudson: i think it's a unix timestamp microseconds as a decimal19:38
bknudsonyou can get the expiration timestamp from (issued_at + ttl)19:38
*** pumaranikar has quit IRC19:38
*** david-lyle has joined #openstack-keystone19:38
*** david-lyle has quit IRC19:39
bknudsonwe don't need the whole expiration timestamp in the token, just the diff from issued_at19:39
bknudsonit's not wrong to have the expiration timestamp, just seems like more bytes than we need if all we need is a small unsigned int.19:40
*** david-lyle has joined #openstack-keystone19:41
bknudsonI'd also be fine with having the expiration timestamp be seconds rather than microseconds.19:42
dolphmbknudson: completely agree19:43
dolphmbknudson: but i lost that argument with, i think, morgan, who wanted the expirations in the tokens themselves so that tokens could theoretically carry different expirations19:43
bknudsonthey could theoretically be expired before they're issued :)19:44
dolphmin retrospect, i think the best argument would have been to exclude them now, and add them back if you want that feature later, and just iterate format versions19:44
dolphmbknudson: feature!19:44
dolphm(iterate? there's a better word.)19:44
dolphmincrement!19:44
lbragstaddolphm speaking of microseconds, i found some interesting stuff with cryptography as i was playing with the code yesterday19:45
* lbragstad makes a note to push changes at some point 19:46
dolphmlbragstad: push to keystone or cryptography?19:47
lbragstadcryptography19:47
* dolphm moves to coffee shop before traffic, brb19:47
lbragstadit's possible to convert a floating point epoch to a long unsigned integer and back again (time.time() for example), but it all depends on the original length...19:48
*** e0ne has quit IRC19:49
*** mylu has quit IRC19:51
*** tonytan4ever has quit IRC19:51
morgandolphm: not following the conversation really :(19:52
morganWhat argument did I make?19:52
morganThat expiration isnt created+ttl on validate?19:54
*** stevemar_ is now known as stevemar_jays19:55
* stevemar_jays will be unavailable for the next few hours, probably gordc too19:55
lbragstadstevemar_jays nice, have fun!19:55
bknudsonmust be a hockey game on19:55
stevemar_jaysbknudson: still sour about your twins eh19:56
*** j_king has joined #openstack-keystone19:56
*** david-lyle has quit IRC19:56
bknudsonstevemar_jays ouch. it's worse because they were so close.19:56
stevemar_jaysbknudson: i was cheering for them to bump rangers or yanks19:56
lbragstadstevemar_jays thursday, december 3rd...19:57
*** mylu has joined #openstack-keystone19:58
bknudsontexas must be going nuts over baseball19:58
*** david-lyle has joined #openstack-keystone19:58
bknudsontotally forgotten about football19:58
*** dsirrine has quit IRC19:58
*** david-lyle_ has joined #openstack-keystone19:58
bknudsonjust like canada forgot about hockey19:58
lbragstadbknudson nope... mn wild against toronto19:58
*** tonytan4ever has joined #openstack-keystone20:00
*** david-ly_ has joined #openstack-keystone20:01
*** dsirrine has joined #openstack-keystone20:01
*** david-lyle has quit IRC20:03
*** david-ly_ is now known as david-lyle__20:03
*** david-lyle__ is now known as david-lyle___20:03
gyeesince when we start adding stuff to the revocation_event table on token revocation, regardless whenever the events are being consumed or not?20:03
gyeeI thought we don't put stuff there if revoke_by_id is set to true20:05
*** david-lyle has joined #openstack-keystone20:06
*** david-lyle___ has quit IRC20:06
*** csoukup has quit IRC20:10
*** rderose has quit IRC20:11
*** su_zhang has joined #openstack-keystone20:12
*** petertr7 is now known as petertr7_away20:14
*** petertr7_away is now known as petertr720:16
samueldmqtox -e py34 wasn't working for me20:18
samueldmquntil I realized I needed to install python3-dev on ubuntu20:18
samueldmq:-)20:19
samueldmqbknudson: are you around ?20:22
bknudsonsamueldmq: yes20:23
samueldmqbknudson: I downloaded https://review.openstack.org/#/c/231635 and a couple of tests failed20:23
samueldmqbknudson: and that's very weird, because they aren't related to your change20:23
*** rbowen has joined #openstack-keystone20:23
samueldmqbknudson: http://paste.openstack.org/show/476305/20:23
bknudsonsamueldmq: probably related to this: https://review.openstack.org/#/c/233800/20:24
*** ayoung has joined #openstack-keystone20:26
*** ChanServ sets mode: +v ayoung20:26
samueldmqbknudson: perfect!20:26
*** su_zhang has quit IRC20:26
samueldmqbknudson: thanks20:27
ayoungPeople really want things to stay broken.20:29
*** wwwjfy_ has quit IRC20:29
*** su_zhang has joined #openstack-keystone20:29
*** roxanaghe has joined #openstack-keystone20:30
*** njohnston is now known as nate_gone20:30
samueldmqayoung: hey, what's broken? and what's wanted to stay taht wya ?20:32
samueldmqthat way*20:32
samueldmq:-)20:32
*** topol has quit IRC20:33
openstackgerritayoung proposed openstack/keystone: Strip admin roles from non-admin projects and domains  https://review.openstack.org/23348020:35
ctraceywhats up keystone peeps20:35
ayoungsamueldmq, same thing as always bug 96869620:35
openstackbug 968696 in Keystone ""admin"-ness not properly scoped" [High,In progress] https://launchpad.net/bugs/968696 - Assigned to Adam Young (ayoung)20:35
stevemar_jaysctracey: o/20:35
dolphmlbragstad: does pypi/cryptography use the acceptance tests straight out of the fernet repo, by chance?20:35
ayoungthe response is always "lets just boil the ocean."20:35
*** wwwjfy_ has joined #openstack-keystone20:35
ctraceyi have an "interesting" use case question...wondering if someone knew the answer...save me some time :_)20:36
*** mylu has quit IRC20:36
stevemar_jaysctracey: long lived clients?20:36
ctraceylong-lived keystone client instances...like longer than token expiration time...will they reauth?20:36
ayoungctracey, yes20:36
stevemar_jaysctracey: jamielennox|away knows all the client answers20:37
ayoungctracey, they are supposed to.  There is a check to see if the token will expire soon...defined within a minute I think20:37
stevemar_jaysbut apparently they do reauth20:37
ayoungctracey, test it out:  run devstack and set the expiry to something wicked short20:38
* ayoung just drove home from Boston, feeling wicked Bostonian20:38
ctraceysorry - boss man called...one second20:40
*** diazjf has quit IRC20:40
*** su_zhang has quit IRC20:47
*** jsavak has quit IRC20:52
*** jsavak has joined #openstack-keystone20:52
*** pumaranikar has joined #openstack-keystone20:52
samueldmqbknudson: ping - https://review.openstack.org/#/c/232711/20:54
samueldmqbknudson: running '.tox/py34/bin/nosetests keystone.tests.unit.token.test_fernet_provider' on this20:55
samueldmqbknudson: I got a lot of TypeError: Unicode-objects must be encoded before hashing20:55
openstackgerritMerged openstack/keystonemiddleware: drop use of norm_ns  https://review.openstack.org/23426520:55
bknudsonsamueldmq: from caching?20:55
bknudsony, I can't fix that.20:55
bknudsonIt might be fixed by switching to oslo.cache20:55
samueldmqbknudson: althought the other previous issues were fixed20:56
bknudsonsamueldmq: the proposed change to switch to oslo.cache is here: https://review.openstack.org/#/c/195873/20:56
samueldmqbknudson: okay .. but why is that caught by running it that way and are not by runing 'tox -e py34' ?20:56
samueldmqbknudson: maybe py34 env doesn't include those tests ? (yeah the answer can be simple enough)20:57
bknudsonsamueldmq: not all files are run when you do tox -e py34, only a select list of them.20:57
samueldmqbknudson: ++20:57
bknudsonsamueldmq: http://git.openstack.org/cgit/openstack/keystone/tree/tox.ini#n1620:57
bknudsonis the list20:57
bknudsonsomeday that will be all the tests20:57
bknudsonbut it's a short list when caching doesn't work.20:58
samueldmqbknudson: how far are we from that day ?20:58
samueldmqbknudson: ah nice20:58
*** raildo is now known as raildo-afk20:59
samueldmqbknudson: -2K lines .. omg, such a nice change20:59
*** pnavarro has joined #openstack-keystone21:00
bknudsona few more changes like that and we'll be done.21:01
*** edmondsw has quit IRC21:01
*** su_zhang has joined #openstack-keystone21:02
ctraceysorry peeps...I will test this out21:02
*** su_zhang has quit IRC21:02
ctraceywas just trying to save some cycles21:02
*** su_zhang has joined #openstack-keystone21:03
ctraceyhave a 3 node Ursula-Vagrant cluster I can bang against21:03
*** su_zhang has quit IRC21:03
*** csoukup has joined #openstack-keystone21:06
*** petertr7 is now known as petertr7_away21:07
samueldmqbknudson: nice, I will take a look at that switch to oslo.cache later, I am not familiar with taht .. so it's an opportunity to learn21:07
samueldmq+1'ed that whole chain, looks neat :)21:07
*** dsirrine has quit IRC21:08
*** david-lyle_ has quit IRC21:14
ctraceyI might need to fix this:21:21
ctraceykeystoneclient.exceptions.Unauthorized: User b3383f3163264bffbf7984023fe027c3 is unauthorized for tenant admin (Disable debug mode to suppress these details.) (HTTP 401)21:21
ctraceytenant_id vs. tenant_name...UUID's vs. names in openstack is painful21:22
*** su_zhang has joined #openstack-keystone21:22
*** su_zhang has quit IRC21:23
*** ankurgupta1 has left #openstack-keystone21:24
lbragstaddolphm cryptography uses test vectors out of the fernet spec, pes21:27
lbragstadyes*21:27
lbragstaddolphm https://github.com/fernet/spec/blob/master/generate.json and https://github.com/pyca/cryptography/blob/master/vectors/cryptography_vectors/fernet/generate.json21:28
lbragstaddolphm the test code in crypto is pretty interesting..21:29
*** pnavarro has quit IRC21:31
*** diazjf has joined #openstack-keystone21:31
*** thiagop has quit IRC21:32
*** diazjf has left #openstack-keystone21:33
*** jtomasek has quit IRC21:33
*** su_zhang has joined #openstack-keystone21:34
*** pauloewerton has quit IRC21:38
*** mylu has joined #openstack-keystone21:40
*** mylu has quit IRC21:42
lbragstaddolphm basically, what I found when I was playing with the code, was the I can convert datetimes to microsecond integers, keeping the format of the spec the same. The solution I used, which might not be right, was to do time.time() * 1e621:42
dolphmlbragstad: sure, but that's a different spec21:42
*** mylu has joined #openstack-keystone21:43
dolphmchange to* the spec21:43
lbragstaddolphm you mean storing the token creation time as microseconds instead of seconds21:43
*** phalmos has quit IRC21:43
dolphmlbragstad: yes21:43
*** mylu_ has joined #openstack-keystone21:44
lbragstaddolphm agreed, i was just saying that was i doing probably wasn't right because dividing by 1e6 doesn't work for all timestamps21:44
*** mylu has quit IRC21:44
dolphmlbragstad: cryptography.fernet needs to be able to decode/validate both, but i imagine it should just start issuing tokens with microseconds?21:44
lbragstaddolphm in that case, it would be worth looking into passing a float instead21:44
lbragstadof an unsigned integer21:44
dolphmfloat of an unsigned integer?21:45
lbragstadwe store the creation time as a float21:45
lbragstadso current_time = int(time.time()) turns into current_time = time.time()21:45
lbragstadand we get something like 1444859155.44701521:46
*** mylu_ has quit IRC21:46
*** mylu has joined #openstack-keystone21:47
*** mylu has quit IRC21:47
*** mylu has joined #openstack-keystone21:47
dolphmlbragstad: "we" - you're talking about cryptography, right?21:49
lbragstaddolphm yes21:50
lbragstadas in, 'we would help contribute this to cryptography'21:50
lbragstadi guess it where i was coming from21:50
lbragstadis*21:50
dolphmlbragstad: but yes, 0x81 timestamp would be int(time.time() * 1e6)21:50
lbragstaddolphm I think that will fail the spec21:51
lbragstador the spec testing data21:51
lbragstad"1985-10-26T01:20:00-07:00" is the time used for all the testing in the fernet/spec21:51
dolphmlbragstad: we'll have to add 0x81 tests next21:51
lbragstadand the total microseconds from 1985 is much less than now,21:51
dolphmmust be someone's birthday or somesthing lol21:52
*** bigjools_ is now known as bigjools21:52
*** bigjools has quit IRC21:52
*** bigjools has joined #openstack-keystone21:52
lbragstadso dividing the current time.time() by 1e6 works fine, but it translates into the wrong year on the validate path21:52
dolphmlbragstad: i'll recreate all the examples with 0x81 and "1985-10-26T01:20:00-07:00.123456" then?21:52
dolphmlbragstad: that's because you're not handling the different versions yet?21:53
lbragstaddolphm correct, i did most of this yesterday morning21:53
lbragstadi didn't create a new version yet21:53
dolphmlbragstad: is it on github?21:53
lbragstaddolphm it can be, one sec21:53
lbragstaddolphm https://github.com/lbragstad/cryptography/tree/add-subsecond-precision21:54
lbragstaddolphm ^ that will actually give you a fernet token with microsecond precision21:55
lbragstaddolphm but it will fail the fernet tests21:55
dolphmrandom, if anyone is interested... i ran a bunch of tests and found all the reviews in keystone that will conflict if one of them lands http://cdn.pasteraw.com/dhu5vgh1tbipaqkmhtq6bw7ykyfl77521:55
*** lhcheng has quit IRC21:56
*** lhcheng has joined #openstack-keystone22:02
*** ChanServ sets mode: +v lhcheng22:02
*** sigmavirus24 is now known as sigmavirus24_awa22:02
*** jbell8 has quit IRC22:03
*** jsavak has quit IRC22:06
*** roxanaghe has quit IRC22:07
*** pumaranikar has quit IRC22:07
*** jamielennox|away is now known as jamielennox22:07
bknudsontox -e py27 ldap -- Ran: 3006 tests in 166.0000 sec.22:09
bknudsonRan: 5681 tests in 301.0000 sec.22:09
bknudson> 1/2 test time is ldap tests22:10
jamielennoxstevemar_jays: any chance of including https://review.openstack.org/#/c/234578/1 and https://review.openstack.org/#/c/234611/ before ksa release22:15
dolphmlbragstad: added 0x81 tests across the board, but haven't created a single token by hand yet. i figure do this one by hand, and generate the rest? https://github.com/dolph/fernet-spec/blob/master/generate.json22:17
*** tonytan4ever has quit IRC22:20
dolphmlbragstad: i'm thinking about proposing removing the padding characters as part of 0x81 too22:20
ayoungIf I don't get some +1s in support of https://review.openstack.org/#/c/233480/  I'ma rage quit.22:20
*** roxanaghe has joined #openstack-keystone22:21
*** josecastroleon has quit IRC22:22
*** Ephur has quit IRC22:23
*** jbell8 has joined #openstack-keystone22:27
*** jbell8 has quit IRC22:30
*** jbell8 has joined #openstack-keystone22:30
openstackgerritBrant Knudson proposed openstack/keystone: switch to oslo.cache  https://review.openstack.org/19587322:31
*** markvoelker has quit IRC22:43
*** openstackgerrit has quit IRC22:46
*** openstackgerrit has joined #openstack-keystone22:47
*** csoukup has quit IRC22:50
*** rdo has quit IRC22:50
*** markvoelker has joined #openstack-keystone22:53
*** urulama has quit IRC22:54
*** urulama has joined #openstack-keystone22:54
*** ngupta_ has joined #openstack-keystone23:05
openstackgerritJamie Lennox proposed openstack/keystoneauth: Specify default_domain to generic plugin  https://review.openstack.org/23501423:05
*** su_zhang has quit IRC23:05
*** su_zhang has joined #openstack-keystone23:06
openstackgerritMerged openstack/keystone: Remove oslo.policy implementation tests from keystone  https://review.openstack.org/23380023:08
*** su_zhang has quit IRC23:08
*** ngupta has quit IRC23:08
*** ngupta_ has quit IRC23:09
*** su_zhang has joined #openstack-keystone23:09
*** su_zhang has quit IRC23:12
*** su_zhang has joined #openstack-keystone23:12
*** gildub has joined #openstack-keystone23:13
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file  https://review.openstack.org/23501623:13
*** dims_ has joined #openstack-keystone23:19
*** dims has quit IRC23:22
*** su_zhang has quit IRC23:24
openstackgerritMerged openstack/keystone-specs: cleanup specs for mitaka release  https://review.openstack.org/23454823:27
*** atiwari1 has joined #openstack-keystone23:35
*** mylu has quit IRC23:35
*** atiwari has quit IRC23:38
*** mylu has joined #openstack-keystone23:38
*** markvoelker has quit IRC23:38
*** erhudy has quit IRC23:39
*** su_zhang has joined #openstack-keystone23:46
gyeeayoung, commented on https://review.openstack.org/#/c/233480/23:49
*** agireud has quit IRC23:51
*** gyee has quit IRC23:54
gordcstevemar_jays: !!!23:55
*** gordc has quit IRC23:55
*** agireud has joined #openstack-keystone23:57
*** urulama has quit IRC23:57
*** hrou has quit IRC23:57
*** urulama has joined #openstack-keystone23:57
*** _hrou_ has joined #openstack-keystone23:57
*** edmondsw has joined #openstack-keystone23:58
*** doug-fis_ has joined #openstack-keystone23:58
*** urulama_ has joined #openstack-keystone23:59
*** urulama has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!