| *** dims has joined #openstack-keystone | 00:00 | |
| *** dims_ has quit IRC | 00:02 | |
| *** richm has quit IRC | 00:04 | |
| *** shaleh|away has quit IRC | 00:10 | |
| *** EinstCrazy has joined #openstack-keystone | 00:16 | |
| *** mylu has joined #openstack-keystone | 00:21 | |
| *** mylu has quit IRC | 00:22 | |
| *** dims has quit IRC | 00:25 | |
| *** EinstCrazy has quit IRC | 00:26 | |
| *** fangzhou is now known as fangxu | 00:28 | |
| *** dims has joined #openstack-keystone | 00:35 | |
| *** RichardRaseley has joined #openstack-keystone | 00:39 | |
| *** pgbridge has quit IRC | 00:39 | |
| *** RichardRaseley has quit IRC | 00:43 | |
| *** ayoung has joined #openstack-keystone | 00:43 | |
| *** ChanServ sets mode: +v ayoung | 00:43 | |
| *** dims has quit IRC | 00:45 | |
| *** gildub has quit IRC | 00:48 | |
| *** gildub_ has quit IRC | 00:48 | |
| *** miyagishi_t has joined #openstack-keystone | 00:48 | |
| *** gildub has joined #openstack-keystone | 00:48 | |
| *** dims has joined #openstack-keystone | 00:51 | |
| *** arunkant_ has quit IRC | 00:54 | |
| *** stevemar_ has joined #openstack-keystone | 00:57 | |
| *** ChanServ sets mode: +o stevemar_ | 00:57 | |
| *** dims has quit IRC | 00:57 | |
| *** jbell8 has quit IRC | 00:59 | |
| *** stevemar_ has quit IRC | 01:00 | |
| *** EinstCrazy has joined #openstack-keystone | 01:00 | |
| *** tellesnobrega_af is now known as tellesnobrega | 01:02 | |
| *** thiagop has joined #openstack-keystone | 01:03 | |
| *** iurygregory has joined #openstack-keystone | 01:03 | |
| *** diegoadolfo has joined #openstack-keystone | 01:04 | |
| *** ericksonsantos has joined #openstack-keystone | 01:05 | |
| *** dims has joined #openstack-keystone | 01:07 | |
| *** btully has quit IRC | 01:08 | |
| *** EinstCrazy has quit IRC | 01:08 | |
| *** spandhe has joined #openstack-keystone | 01:08 | |
| *** mylu has joined #openstack-keystone | 01:13 | |
| *** mylu has quit IRC | 01:14 | |
| *** mylu has joined #openstack-keystone | 01:15 | |
| *** lhcheng has quit IRC | 01:15 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Exclude old Shibboleth options from docs https://review.openstack.org/241863 | 01:16 |
|---|---|---|
| *** Piet_ has joined #openstack-keystone | 01:19 | |
| *** Piet_ has quit IRC | 01:19 | |
| *** mylu has quit IRC | 01:19 | |
| *** EinstCrazy has joined #openstack-keystone | 01:19 | |
| *** EinstCra_ has joined #openstack-keystone | 01:27 | |
| *** EinstCrazy has quit IRC | 01:27 | |
| *** EinstCra_ has quit IRC | 01:30 | |
| *** EinstCrazy has joined #openstack-keystone | 01:31 | |
| *** jbell8 has joined #openstack-keystone | 01:34 | |
| *** r-daneel has quit IRC | 01:40 | |
| *** lhcheng has joined #openstack-keystone | 01:43 | |
| *** ChanServ sets mode: +v lhcheng | 01:43 | |
| *** su_zhang has quit IRC | 01:45 | |
| *** btully has joined #openstack-keystone | 01:47 | |
| *** mylu has joined #openstack-keystone | 01:48 | |
| *** su_zhang has joined #openstack-keystone | 01:49 | |
| *** mylu has quit IRC | 01:53 | |
| *** su_zhang has quit IRC | 01:53 | |
| *** su_zhang has joined #openstack-keystone | 01:53 | |
| *** mylu has joined #openstack-keystone | 01:53 | |
| *** su_zhang has quit IRC | 01:54 | |
| *** mylu has quit IRC | 01:57 | |
| *** mylu has joined #openstack-keystone | 02:04 | |
| *** mylu has quit IRC | 02:11 | |
| *** mylu has joined #openstack-keystone | 02:11 | |
| *** jerrygb_ has joined #openstack-keystone | 02:16 | |
| *** mylu has quit IRC | 02:17 | |
| *** jerrygb has quit IRC | 02:17 | |
| *** nkinder has quit IRC | 02:21 | |
| *** nkinder has joined #openstack-keystone | 02:21 | |
| *** openstackgerrit has quit IRC | 02:22 | |
| *** jerrygb_ has quit IRC | 02:23 | |
| *** openstackgerrit has joined #openstack-keystone | 02:25 | |
| *** jrist has quit IRC | 02:25 | |
| *** dave-mccowan has quit IRC | 02:25 | |
| openstackgerrit | Hao Li proposed openstack/keystone-specs: Fix the link root in identity-api-v3-os-inherit-ext https://review.openstack.org/242355 | 02:26 |
| openstackgerrit | Nathan Kinder proposed openstack/keystone: Remove hardcoded LDAP group schema from emulated enabled mix-in https://review.openstack.org/244173 | 02:27 |
| *** dave-mccowan has joined #openstack-keystone | 02:27 | |
| *** goodygum has quit IRC | 02:28 | |
| *** goodygum has joined #openstack-keystone | 02:28 | |
| *** jrist has joined #openstack-keystone | 02:30 | |
| *** jerrygb has joined #openstack-keystone | 02:30 | |
| *** bigjools_ has joined #openstack-keystone | 02:33 | |
| *** bigjools has quit IRC | 02:33 | |
| *** bigjools_ has quit IRC | 02:33 | |
| *** mylu has joined #openstack-keystone | 02:33 | |
| *** bigjools has joined #openstack-keystone | 02:34 | |
| *** boris-42 has quit IRC | 02:36 | |
| *** samueldmq has quit IRC | 02:37 | |
| *** gsilvis has quit IRC | 02:37 | |
| *** rcernin has quit IRC | 02:38 | |
| *** spandhe has quit IRC | 02:42 | |
| *** gsilvis__ has joined #openstack-keystone | 02:42 | |
| *** boris-42 has joined #openstack-keystone | 02:43 | |
| *** gsilvis has joined #openstack-keystone | 02:44 | |
| *** gsilvis has quit IRC | 02:44 | |
| *** stevemar_ has joined #openstack-keystone | 02:58 | |
| *** ChanServ sets mode: +o stevemar_ | 02:58 | |
| *** stevemar_ has quit IRC | 03:00 | |
| openstackgerrit | Merged openstack/keystone: Move AuthContext middleware into its own file https://review.openstack.org/243882 | 03:03 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/238264 | 03:08 |
| *** mylu has quit IRC | 03:21 | |
| *** mylu has joined #openstack-keystone | 03:27 | |
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/keystone: Use the oslo.utils.reflection to extract the class name https://review.openstack.org/241494 | 03:33 |
| *** gyee has quit IRC | 03:36 | |
| *** markvoelker has quit IRC | 03:39 | |
| *** lnxnut has joined #openstack-keystone | 03:41 | |
| *** jasonsb has joined #openstack-keystone | 03:42 | |
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/keystone: Avoid AttributeError in method _get_callback_info https://review.openstack.org/244981 | 03:53 |
| *** EinstCrazy has quit IRC | 03:54 | |
| *** navid_ has joined #openstack-keystone | 03:54 | |
| *** dims has quit IRC | 03:56 | |
| *** navid_ has quit IRC | 03:58 | |
| *** zqfan_afk has joined #openstack-keystone | 04:10 | |
| *** btully has quit IRC | 04:14 | |
| *** edmondsw has quit IRC | 04:15 | |
| *** mylu has quit IRC | 04:17 | |
| *** mylu has joined #openstack-keystone | 04:17 | |
| *** mylu has quit IRC | 04:22 | |
| *** richm has joined #openstack-keystone | 04:22 | |
| *** EinstCrazy has joined #openstack-keystone | 04:27 | |
| *** mylu has joined #openstack-keystone | 04:29 | |
| *** EinstCrazy has quit IRC | 04:29 | |
| *** mylu has quit IRC | 04:33 | |
| *** samueldmq has joined #openstack-keystone | 04:38 | |
| *** lnxnut has quit IRC | 04:38 | |
| *** markvoelker has joined #openstack-keystone | 04:40 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:40 | |
| *** richm has quit IRC | 04:41 | |
| *** dave-mccowan has quit IRC | 04:43 | |
| *** markvoelker has quit IRC | 04:44 | |
| *** boris-42 has quit IRC | 04:48 | |
| *** links has joined #openstack-keystone | 04:52 | |
| *** stevemar_ has joined #openstack-keystone | 04:59 | |
| *** ChanServ sets mode: +o stevemar_ | 04:59 | |
| *** stevemar_ has quit IRC | 05:02 | |
| *** topol has joined #openstack-keystone | 05:02 | |
| *** ChanServ sets mode: +v topol | 05:02 | |
| openstackgerrit | ayoung proposed openstack/keystone: Remove hardcoded LDAP group schema from emulated enabled mix-in https://review.openstack.org/244173 | 05:02 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Add domain and trust details to user plugin https://review.openstack.org/244987 | 05:07 |
| *** urulama has quit IRC | 05:08 | |
| *** urulama has joined #openstack-keystone | 05:08 | |
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/keystone: Use the oslo.utils.reflection to extract the class name https://review.openstack.org/241494 | 05:11 |
| *** btully has joined #openstack-keystone | 05:13 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Domain Specific Roles https://review.openstack.org/226661 | 05:16 |
| *** miyagishi_t has quit IRC | 05:16 | |
| lhcheng | jamielennox: is there a way to tell if keystone server have federation extension running using KSC? | 05:29 |
| lhcheng | jamielennox: I am adding the support for IdP CRUD in horizon.. thinking if there is a smart way to tell if federation is enabled. Otherwise, I have to add a flag in the horizon settings file. | 05:30 |
| *** hiekazu has joined #openstack-keystone | 05:30 | |
| *** hidekazu has joined #openstack-keystone | 05:31 | |
| *** hiekazu has quit IRC | 05:34 | |
| *** jaosorior has joined #openstack-keystone | 05:43 | |
| *** roxanagh_ has joined #openstack-keystone | 05:45 | |
| *** EinstCrazy has joined #openstack-keystone | 05:52 | |
| *** EinstCrazy has quit IRC | 05:54 | |
| *** EinstCrazy has joined #openstack-keystone | 05:54 | |
| *** andrey-mp has joined #openstack-keystone | 06:02 | |
| *** andrey-mp has quit IRC | 06:08 | |
| *** andrey-mp has joined #openstack-keystone | 06:09 | |
| *** rcernin has joined #openstack-keystone | 06:10 | |
| andrey-mp | core: please review my changes - https://review.openstack.org/#/c/215481/ This patchset already has +2 and it is needed for dependent review in other projects... | 06:11 |
| *** jamielennox is now known as jamielennox|away | 06:17 | |
| *** andrey-mp has quit IRC | 06:26 | |
| *** rcernin_ has joined #openstack-keystone | 06:28 | |
| *** lhcheng has quit IRC | 06:31 | |
| *** lhcheng has joined #openstack-keystone | 06:33 | |
| *** ChanServ sets mode: +v lhcheng | 06:33 | |
| *** markvoelker has joined #openstack-keystone | 06:41 | |
| *** markvoelker has quit IRC | 06:46 | |
| *** roxanagh_ has quit IRC | 06:50 | |
| *** topol has quit IRC | 06:51 | |
| *** topol has joined #openstack-keystone | 06:52 | |
| *** ChanServ sets mode: +v topol | 06:52 | |
| *** josecastroleon has joined #openstack-keystone | 06:53 | |
| *** kiran-r has joined #openstack-keystone | 06:56 | |
| *** topol has quit IRC | 06:56 | |
| *** gildub has quit IRC | 06:56 | |
| *** woodster_ has quit IRC | 06:59 | |
| *** spandhe has joined #openstack-keystone | 07:02 | |
| *** rcernin is now known as Guest16360 | 07:08 | |
| *** rcernin_ has quit IRC | 07:09 | |
| *** Guest16360 has quit IRC | 07:09 | |
| *** rcernin_ has joined #openstack-keystone | 07:10 | |
| *** rcernin_ is now known as rcernin | 07:13 | |
| *** aginwala has joined #openstack-keystone | 07:16 | |
| *** urulama has quit IRC | 07:20 | |
| *** urulama has joined #openstack-keystone | 07:20 | |
| *** wolsen has quit IRC | 07:23 | |
| *** spandhe has quit IRC | 07:27 | |
| *** jasonsb has quit IRC | 07:32 | |
| *** aginwala has quit IRC | 07:38 | |
| *** lsmola has quit IRC | 07:39 | |
| *** lsmola has joined #openstack-keystone | 07:39 | |
| *** fangxu has quit IRC | 07:40 | |
| *** EinstCrazy has quit IRC | 07:50 | |
| *** EinstCrazy has joined #openstack-keystone | 07:51 | |
| *** EinstCrazy has quit IRC | 07:54 | |
| *** henrynash has joined #openstack-keystone | 08:02 | |
| *** ChanServ sets mode: +v henrynash | 08:02 | |
| *** kiran-r has quit IRC | 08:02 | |
| *** jasonsb has joined #openstack-keystone | 08:03 | |
| *** btully has quit IRC | 08:04 | |
| *** btully has joined #openstack-keystone | 08:06 | |
| *** jasonsb has quit IRC | 08:08 | |
| *** andrey-mp has joined #openstack-keystone | 08:13 | |
| *** aginwala has joined #openstack-keystone | 08:13 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Optionally return names in the list assignment API. https://review.openstack.org/240466 | 08:18 |
| *** aginwala_ has joined #openstack-keystone | 08:20 | |
| *** aginwala has quit IRC | 08:20 | |
| *** aginwala_ has quit IRC | 08:22 | |
| *** aginwala has joined #openstack-keystone | 08:22 | |
| *** btully has quit IRC | 08:24 | |
| *** aginwala has quit IRC | 08:24 | |
| *** aginwala has joined #openstack-keystone | 08:25 | |
| *** btully has joined #openstack-keystone | 08:27 | |
| *** lhcheng has quit IRC | 08:35 | |
| *** exploreshaifali has joined #openstack-keystone | 08:41 | |
| *** markvoelker has joined #openstack-keystone | 08:41 | |
| *** aginwala_ has joined #openstack-keystone | 08:43 | |
| *** kodokuu has joined #openstack-keystone | 08:43 | |
| *** aginwala has quit IRC | 08:43 | |
| *** jamielennox|away is now known as jamielennox | 08:43 | |
| *** fhubik has joined #openstack-keystone | 08:45 | |
| *** btully has quit IRC | 08:45 | |
| *** markvoelker has quit IRC | 08:46 | |
| *** btully has joined #openstack-keystone | 08:46 | |
| openstackgerrit | Merged openstack/keystone-specs: Fix the link root in identity-api-v3-os-inherit-ext https://review.openstack.org/242355 | 08:49 |
| *** btully has quit IRC | 08:52 | |
| *** btully has joined #openstack-keystone | 08:54 | |
| *** e0ne has joined #openstack-keystone | 08:57 | |
| *** openstackgerrit has quit IRC | 09:01 | |
| *** openstackgerrit has joined #openstack-keystone | 09:02 | |
| *** e0ne has quit IRC | 09:05 | |
| *** aginwala has joined #openstack-keystone | 09:07 | |
| *** aginwala_ has quit IRC | 09:10 | |
| *** browne has quit IRC | 09:12 | |
| *** browne has joined #openstack-keystone | 09:12 | |
| *** fhubik has quit IRC | 09:21 | |
| openstackgerrit | Merged openstack/keystone: Fix some nits inside validation/config.py https://review.openstack.org/242622 | 09:22 |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/243923 | 09:26 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/238264 | 09:33 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/238264 | 09:35 |
| *** btully has quit IRC | 09:35 | |
| *** kodokuu has quit IRC | 09:35 | |
| *** browne has quit IRC | 09:40 | |
| *** jistr has joined #openstack-keystone | 09:47 | |
| *** bdossant has joined #openstack-keystone | 09:49 | |
| *** fhubik has joined #openstack-keystone | 09:53 | |
| *** aginwala has quit IRC | 09:57 | |
| *** aginwala has joined #openstack-keystone | 09:57 | |
| *** gildub has joined #openstack-keystone | 10:01 | |
| *** aginwala has quit IRC | 10:02 | |
| *** e0ne has joined #openstack-keystone | 10:02 | |
| *** markvoelker has joined #openstack-keystone | 10:02 | |
| openstackgerrit | Marek Denis proposed openstack/keystone-specs: Make keystone fully fledged SAML2 Service Provider https://review.openstack.org/244694 | 10:03 |
| *** markvoelker has quit IRC | 10:07 | |
| *** roxanaghe has quit IRC | 10:07 | |
| *** agireud has quit IRC | 10:08 | |
| *** agireud has joined #openstack-keystone | 10:13 | |
| *** marzif has joined #openstack-keystone | 10:14 | |
| *** openstackgerrit has quit IRC | 10:16 | |
| *** openstackgerrit has joined #openstack-keystone | 10:17 | |
| *** lhcheng has joined #openstack-keystone | 10:23 | |
| *** ChanServ sets mode: +v lhcheng | 10:23 | |
| openstackgerrit | Merged openstack/keystone: Use unit.new_role_ref consistently https://review.openstack.org/242704 | 10:24 |
| *** lhcheng has quit IRC | 10:28 | |
| *** henrynash has quit IRC | 10:29 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/238264 | 10:29 |
| *** henrynash has joined #openstack-keystone | 10:35 | |
| *** ChanServ sets mode: +v henrynash | 10:35 | |
| *** jbell8 has quit IRC | 10:45 | |
| *** jbell8 has joined #openstack-keystone | 10:47 | |
| *** BAKfr has quit IRC | 10:54 | |
| *** BAKfr has joined #openstack-keystone | 10:55 | |
| *** exploreshaifali has quit IRC | 10:58 | |
| *** henrynash has quit IRC | 11:02 | |
| *** fawadkhaliq has quit IRC | 11:13 | |
| *** jaosorior has quit IRC | 11:13 | |
| *** fawadkhaliq has joined #openstack-keystone | 11:13 | |
| *** jaosorior has joined #openstack-keystone | 11:13 | |
| *** alexpro has joined #openstack-keystone | 11:15 | |
| *** fawadkhaliq has quit IRC | 11:17 | |
| *** tyagiprince2010 has joined #openstack-keystone | 11:20 | |
| samueldmq | morning keystoners | 11:25 |
| marekd | hey | 11:26 |
| *** gildub has quit IRC | 11:33 | |
| *** jaosorior has quit IRC | 11:39 | |
| *** jaosorior has joined #openstack-keystone | 11:39 | |
| amakarov | o/ | 11:42 |
| marekd | \o | 11:42 |
| marekd | aaaaand...lunch | 11:42 |
| *** topol has joined #openstack-keystone | 11:43 | |
| *** ChanServ sets mode: +v topol | 11:43 | |
| *** stevemar_ has joined #openstack-keystone | 12:04 | |
| *** ChanServ sets mode: +o stevemar_ | 12:04 | |
| *** jasonsb has joined #openstack-keystone | 12:07 | |
| *** marzif has quit IRC | 12:10 | |
| *** jasonsb has quit IRC | 12:11 | |
| *** lhcheng has joined #openstack-keystone | 12:12 | |
| *** ChanServ sets mode: +v lhcheng | 12:12 | |
| *** topol has quit IRC | 12:14 | |
| *** josecastroleon has quit IRC | 12:17 | |
| *** lhcheng has quit IRC | 12:17 | |
| *** topol has joined #openstack-keystone | 12:19 | |
| *** ChanServ sets mode: +v topol | 12:19 | |
| *** topol has quit IRC | 12:23 | |
| *** raildo-afk is now known as raildo | 12:30 | |
| *** markvoelker has joined #openstack-keystone | 12:34 | |
| *** aginwala has joined #openstack-keystone | 12:36 | |
| *** lhcheng has joined #openstack-keystone | 12:36 | |
| *** ChanServ sets mode: +v lhcheng | 12:36 | |
| *** markvoelker has quit IRC | 12:39 | |
| *** dims has joined #openstack-keystone | 12:40 | |
| *** aginwala has quit IRC | 12:40 | |
| *** lhcheng has quit IRC | 12:41 | |
| *** tyagiprince2010 has quit IRC | 12:44 | |
| *** diegoadolfo_ has joined #openstack-keystone | 12:44 | |
| *** links has quit IRC | 12:46 | |
| *** dave-mccowan has joined #openstack-keystone | 12:55 | |
| *** dims has quit IRC | 12:56 | |
| *** dims has joined #openstack-keystone | 12:56 | |
| *** agireud has quit IRC | 13:03 | |
| *** fhubik is now known as fhubik_brb | 13:03 | |
| *** agireud has joined #openstack-keystone | 13:05 | |
| *** fhubik_brb is now known as fhubik | 13:08 | |
| *** henrynash has joined #openstack-keystone | 13:11 | |
| *** ChanServ sets mode: +v henrynash | 13:11 | |
| *** kodokuu has joined #openstack-keystone | 13:12 | |
| kodokuu | Hi, Anyone have idea for this bug ? https://bugs.launchpad.net/django-openstack-auth/+bug/1487372 | 13:12 |
| openstack | Launchpad bug 1487372 in django-openstack-auth "unretrieve project list when switching project" [High,Confirmed] | 13:12 |
| kodokuu | I can help to debug, my infra have this issue now :) | 13:13 |
| *** links has joined #openstack-keystone | 13:13 | |
| *** henrynash has quit IRC | 13:14 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Tests for projects acting as domains https://review.openstack.org/211219 | 13:16 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Manager support for projects acting as domains https://review.openstack.org/213448 | 13:16 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Bye Bye Domain Table https://review.openstack.org/161854 | 13:16 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Remove domain table references https://review.openstack.org/165936 | 13:16 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Projects acting as domains https://review.openstack.org/231289 | 13:16 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Removes project.domain_id FK https://review.openstack.org/233274 | 13:16 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraints https://review.openstack.org/158372 | 13:16 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain parameter to get_project_by_name https://review.openstack.org/210600 | 13:16 |
| *** jerrygb has quit IRC | 13:17 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain in token response https://review.openstack.org/197331 | 13:19 |
| samueldmq | kodokuu: looks to be an issue in horizon and how they deal with tokens, a good place to start debugging is horizon + django_openstack_auth (the library they use to actually use keystone directly) | 13:19 |
| samueldmq | kodokuu: perhaps a better place to ask is in #openstack-horizon | 13:19 |
| *** dims_ has joined #openstack-keystone | 13:23 | |
| *** dims has quit IRC | 13:23 | |
| *** kodokuu has quit IRC | 13:23 | |
| *** gb21 has quit IRC | 13:24 | |
| openstackgerrit | Merged openstack/keystone: Use new_domain_ref instead of manually created ref https://review.openstack.org/244737 | 13:24 |
| htruta | hey marekd, could you take a look at the reply I gave you here: https://review.openstack.org/#/c/236103/ ? | 13:25 |
| *** marzif has joined #openstack-keystone | 13:26 | |
| *** dims_ has quit IRC | 13:27 | |
| *** dims has joined #openstack-keystone | 13:27 | |
| openstackgerrit | Merged openstack/keystone: Use new_region_ref instead of manually created dict https://review.openstack.org/244745 | 13:30 |
| *** gordc has joined #openstack-keystone | 13:33 | |
| *** edmondsw has joined #openstack-keystone | 13:33 | |
| *** gb21 has joined #openstack-keystone | 13:35 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Improves domain name case sensitivity tests https://review.openstack.org/236103 | 13:35 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/238264 | 13:36 |
| *** zqfan_afk has quit IRC | 13:36 | |
| *** su_zhang has joined #openstack-keystone | 13:37 | |
| *** agireud has quit IRC | 13:39 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/238264 | 13:40 |
| *** agireud has joined #openstack-keystone | 13:42 | |
| *** itlinux has joined #openstack-keystone | 13:48 | |
| *** xek has quit IRC | 13:49 | |
| *** itlinux has quit IRC | 13:53 | |
| *** agireud has quit IRC | 13:56 | |
| *** gordc has quit IRC | 13:57 | |
| *** agireud has joined #openstack-keystone | 13:58 | |
| *** aginwala has joined #openstack-keystone | 13:58 | |
| *** gordc has joined #openstack-keystone | 13:59 | |
| *** pauloewerton has joined #openstack-keystone | 14:00 | |
| *** openstackgerrit has quit IRC | 14:01 | |
| *** aginwala has quit IRC | 14:02 | |
| *** openstackgerrit has joined #openstack-keystone | 14:02 | |
| *** pumaranikar has joined #openstack-keystone | 14:04 | |
| stevemar_ | lbragstad: thanks for the fernet guide | 14:04 |
| breton | anybody going to FOSDEM next year? | 14:07 |
| *** andrey-mp has quit IRC | 14:09 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystonemiddleware: Last sync from oslo-incubator https://review.openstack.org/244813 | 14:11 |
| *** henrynash has joined #openstack-keystone | 14:11 | |
| *** ChanServ sets mode: +v henrynash | 14:11 | |
| *** stevemar_ has quit IRC | 14:17 | |
| *** xek has joined #openstack-keystone | 14:18 | |
| *** henrynash has quit IRC | 14:18 | |
| *** pumaranikar has quit IRC | 14:22 | |
| *** richm has joined #openstack-keystone | 14:25 | |
| *** henrynash has joined #openstack-keystone | 14:28 | |
| *** ChanServ sets mode: +v henrynash | 14:28 | |
| *** petertr7_away is now known as petertr7 | 14:28 | |
| *** dims_ has joined #openstack-keystone | 14:29 | |
| *** itlinux has joined #openstack-keystone | 14:30 | |
| *** dims has quit IRC | 14:32 | |
| *** markvoelker has joined #openstack-keystone | 14:34 | |
| *** itlinux has quit IRC | 14:35 | |
| *** su_zhang has quit IRC | 14:37 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/python-keystoneclient: Last sync from oslo-incubator https://review.openstack.org/244825 | 14:38 |
| *** dave-mccowan has quit IRC | 14:38 | |
| *** markvoelker has quit IRC | 14:39 | |
| *** markvoelker has joined #openstack-keystone | 14:42 | |
| *** topol has joined #openstack-keystone | 14:44 | |
| *** ChanServ sets mode: +v topol | 14:44 | |
| *** btully has joined #openstack-keystone | 14:44 | |
| *** agireud has quit IRC | 14:47 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Tests for projects acting as domains https://review.openstack.org/211219 | 14:48 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain filter to list_projects v3 https://review.openstack.org/158398 | 14:48 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Projects acting as domains https://review.openstack.org/231289 | 14:48 |
| *** topol has quit IRC | 14:50 | |
| *** exploreshaifali has joined #openstack-keystone | 14:51 | |
| *** agireud has joined #openstack-keystone | 14:51 | |
| *** henrynash has quit IRC | 14:53 | |
| *** dave-mccowan has joined #openstack-keystone | 14:53 | |
| *** topol has joined #openstack-keystone | 14:53 | |
| *** ChanServ sets mode: +v topol | 14:53 | |
| *** topol has quit IRC | 14:53 | |
| *** topol has joined #openstack-keystone | 14:53 | |
| *** ChanServ sets mode: +v topol | 14:53 | |
| openstackgerrit | Grzegorz Grasza (xek) proposed openstack/keystone-specs: Online schema migration https://review.openstack.org/245186 | 14:55 |
| *** agireud has quit IRC | 14:55 | |
| *** jerrygb has joined #openstack-keystone | 14:57 | |
| *** pumaranikar has joined #openstack-keystone | 14:58 | |
| *** topol has quit IRC | 14:58 | |
| *** itlinux has joined #openstack-keystone | 14:59 | |
| *** topol has joined #openstack-keystone | 14:59 | |
| *** ChanServ sets mode: +v topol | 14:59 | |
| *** itlinux has quit IRC | 15:03 | |
| *** topol has quit IRC | 15:06 | |
| *** marzif_ has joined #openstack-keystone | 15:08 | |
| *** jaosorior has quit IRC | 15:10 | |
| *** gb21 has quit IRC | 15:11 | |
| *** marzif has quit IRC | 15:12 | |
| *** roxanaghe has joined #openstack-keystone | 15:14 | |
| *** fhubik is now known as fhubik_brb | 15:16 | |
| *** thedodd has joined #openstack-keystone | 15:17 | |
| *** gb21 has joined #openstack-keystone | 15:18 | |
| *** slberger has joined #openstack-keystone | 15:23 | |
| *** fhubik_brb is now known as fhubik | 15:25 | |
| *** timcline has joined #openstack-keystone | 15:25 | |
| *** timcline has quit IRC | 15:25 | |
| *** timcline has joined #openstack-keystone | 15:26 | |
| *** jbell8 has quit IRC | 15:26 | |
| *** jbell8 has joined #openstack-keystone | 15:27 | |
| *** dulek has joined #openstack-keystone | 15:28 | |
| dulek | Hi! Quick question - https://github.com/openstack/cinder/blob/master/cinder/api/contrib/quotas.py#L183 | 15:28 |
| *** roxanaghe has quit IRC | 15:28 | |
| dulek | Should we get project from keystone like that or there's something useful in keystonemiddleware for that purpose? | 15:28 |
| marekd | htruta: i did | 15:31 |
| *** fangxu has joined #openstack-keystone | 15:32 | |
| *** fangxu has quit IRC | 15:37 | |
| *** fangxu_ has joined #openstack-keystone | 15:37 | |
| openstackgerrit | Merged openstack/keystone: Use unit.new_group_ref consistently https://review.openstack.org/243276 | 15:38 |
| *** tonytan4ever has joined #openstack-keystone | 15:40 | |
| *** petertr7 is now known as petertr7_away | 15:44 | |
| *** jistr is now known as jistr|call | 15:44 | |
| *** petertr7_away is now known as petertr7 | 15:44 | |
| *** kashyap has joined #openstack-keystone | 15:45 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/238264 | 15:46 |
| *** davechen has joined #openstack-keystone | 15:48 | |
| *** stevemar_ has joined #openstack-keystone | 15:49 | |
| *** ChanServ sets mode: +o stevemar_ | 15:49 | |
| *** roxanaghe has joined #openstack-keystone | 15:49 | |
| *** boris-42 has joined #openstack-keystone | 16:02 | |
| *** jistr|call is now known as jistr | 16:03 | |
| *** urulama has quit IRC | 16:06 | |
| *** urulama has joined #openstack-keystone | 16:06 | |
| stevemar_ | dstanek poke | 16:06 |
| stevemar_ | dstanek: can you comment on https://review.openstack.org/#/c/218237/ << i'm totally out of the loop on that one | 16:07 |
| *** browne has joined #openstack-keystone | 16:07 | |
| *** rcernin has quit IRC | 16:08 | |
| *** pgbridge has joined #openstack-keystone | 16:11 | |
| htruta | marekd: I saw it. thanks | 16:11 |
| nkinder | stevemar_: should I pull the keystone.conf.sample changes out of my patch? https://review.openstack.org/#/c/244173 | 16:11 |
| stevemar_ | nkinder: it's already gating right | 16:11 |
| stevemar_ | ? | 16:11 |
| nkinder | stevemar_: ah, yes. Missed that. | 16:11 |
| stevemar_ | nkinder: you generated them with `tox -e sample_config` ? | 16:11 |
| nkinder | stevemar_: 'tox -e genconfig' IIRC | 16:12 |
| stevemar_ | nkinder: yeah, whatever the thing is nowadays :P | 16:12 |
| stevemar_ | its fine, let it go through :) | 16:12 |
| nkinder | stevemar_: when should that be run if we don't usually include conf sample changes? | 16:13 |
| nkinder | just curious to know for next time :) | 16:13 |
| *** links has quit IRC | 16:13 | |
| *** wolsen has joined #openstack-keystone | 16:13 | |
| stevemar_ | nkinder: we've got a bot for that now | 16:14 |
| stevemar_ | the bot does a tox -e genconfig after each commit to keystone, and if there's a diff, he proposes a patch | 16:14 |
| nkinder | stevemar_: ok, good to know | 16:15 |
| stevemar_ | nkinder: it was so committers would stop clobbering on each other | 16:15 |
| *** marzif_ has quit IRC | 16:16 | |
| *** EinstCrazy has joined #openstack-keystone | 16:18 | |
| *** EinstCrazy has quit IRC | 16:20 | |
| *** bdossant has quit IRC | 16:26 | |
| *** agireud has joined #openstack-keystone | 16:31 | |
| lbragstad | stevemar_ absolutely, anytime! | 16:33 |
| *** agireud has quit IRC | 16:38 | |
| *** EinstCrazy has joined #openstack-keystone | 16:45 | |
| *** diazjf has joined #openstack-keystone | 16:45 | |
| *** jistr is now known as jistr|call | 16:46 | |
| *** agireud has joined #openstack-keystone | 16:49 | |
| *** EinstCrazy has quit IRC | 16:51 | |
| *** fhubik has quit IRC | 16:55 | |
| * davechen slaps hideme_ around a bit with a large fishbot | 16:56 | |
| * davechen slaps hogepodge around a bit with a large fishbot | 16:56 | |
| *** stevemar_ has quit IRC | 16:56 | |
| *** diegoadolfo has quit IRC | 17:01 | |
| *** diegoadolfo_ has quit IRC | 17:01 | |
| openstackgerrit | Merged openstack/keystone: Remove hardcoded LDAP group schema from emulated enabled mix-in https://review.openstack.org/244173 | 17:03 |
| *** diazjf has quit IRC | 17:04 | |
| *** gyee has joined #openstack-keystone | 17:04 | |
| *** ChanServ sets mode: +v gyee | 17:04 | |
| *** diazjf has joined #openstack-keystone | 17:06 | |
| *** marzif has joined #openstack-keystone | 17:07 | |
| *** jistr|call is now known as jistr | 17:08 | |
| *** shaleh has joined #openstack-keystone | 17:09 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/245242 | 17:11 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/243925 | 17:11 |
| *** jistr has quit IRC | 17:12 | |
| *** lsmola has quit IRC | 17:18 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/238264 | 17:18 |
| *** urulama has quit IRC | 17:18 | |
| *** tyagiprince2010 has joined #openstack-keystone | 17:21 | |
| *** shaleh has quit IRC | 17:21 | |
| tyagiprince2010 | hey.. Please tell me what all things do I need to take care of while configuring keystone.. like one of the things is the caching of the token.. | 17:22 |
| tyagiprince2010 | Please provide me with a good link that covers up the cache section of the keystone.. I already read keystone documentation but still things are not pretty clear in my head.. | 17:23 |
| *** Guest12051 has quit IRC | 17:25 | |
| *** tonytan4ever has quit IRC | 17:26 | |
| tyagiprince2010 | I am facing one problem in my setup.. I created a new user.. and then token is assigned to the user.. used some services using this token.. after this I revoked the token and still I was able to use the services using the same token.. I guess it is using the token from the cache... | 17:26 |
| *** e0ne has quit IRC | 17:26 | |
| *** aginwala has joined #openstack-keystone | 17:26 | |
| *** mhickey_ has joined #openstack-keystone | 17:28 | |
| *** daemontool_ has quit IRC | 17:32 | |
| tyagiprince2010 | breton: could you help me out?? | 17:33 |
| *** thiagop has quit IRC | 17:34 | |
| *** jasonsb has joined #openstack-keystone | 17:34 | |
| *** mylu has joined #openstack-keystone | 17:35 | |
| gyee | you probably have caching enabled at the service | 17:35 |
| *** diazjf has quit IRC | 17:37 | |
| *** aginwala has quit IRC | 17:40 | |
| *** aginwala has joined #openstack-keystone | 17:41 | |
| *** daemontool_ has joined #openstack-keystone | 17:42 | |
| *** spandhe has joined #openstack-keystone | 17:42 | |
| *** diazjf has joined #openstack-keystone | 17:44 | |
| *** aginwala has quit IRC | 17:45 | |
| *** daemontool_ has quit IRC | 17:49 | |
| *** tsymanczyk has joined #openstack-keystone | 17:51 | |
| *** BAKfr has quit IRC | 17:51 | |
| *** petertr7 is now known as petertr7_away | 17:51 | |
| *** tsymanczyk is now known as Guest3411 | 17:51 | |
| *** marzif has quit IRC | 17:54 | |
| *** su_zhang has joined #openstack-keystone | 17:54 | |
| *** EinstCrazy has joined #openstack-keystone | 17:56 | |
| *** BAKfr has joined #openstack-keystone | 17:56 | |
| *** Guest3411 has quit IRC | 17:59 | |
| *** topol has joined #openstack-keystone | 17:59 | |
| *** ChanServ sets mode: +v topol | 17:59 | |
| *** jbell8 has quit IRC | 18:00 | |
| *** petertr7_away is now known as petertr7 | 18:01 | |
| *** topol_ has joined #openstack-keystone | 18:04 | |
| *** ChanServ sets mode: +v topol_ | 18:04 | |
| *** timcline has quit IRC | 18:04 | |
| *** diazjf has quit IRC | 18:07 | |
| *** topol has quit IRC | 18:07 | |
| *** topol has joined #openstack-keystone | 18:08 | |
| *** ChanServ sets mode: +v topol | 18:08 | |
| *** pumaranikar has quit IRC | 18:09 | |
| *** topol_ has quit IRC | 18:11 | |
| *** topol_ has joined #openstack-keystone | 18:14 | |
| *** ChanServ sets mode: +v topol_ | 18:14 | |
| *** fawadkhaliq has joined #openstack-keystone | 18:17 | |
| *** topol has quit IRC | 18:18 | |
| *** fangxu_ has quit IRC | 18:19 | |
| *** EinstCrazy has quit IRC | 18:20 | |
| *** topol_ has quit IRC | 18:20 | |
| *** jasonsb has quit IRC | 18:24 | |
| *** haneef has joined #openstack-keystone | 18:26 | |
| *** john5223 is now known as zz_john5223 | 18:32 | |
| *** e0ne has joined #openstack-keystone | 18:32 | |
| *** aginwala has joined #openstack-keystone | 18:34 | |
| *** aginwala has quit IRC | 18:36 | |
| *** aginwala has joined #openstack-keystone | 18:37 | |
| *** jbell8 has joined #openstack-keystone | 18:38 | |
| *** aginwala has quit IRC | 18:38 | |
| *** aginwala has joined #openstack-keystone | 18:38 | |
| *** davechen has quit IRC | 18:39 | |
| *** pumaranikar has joined #openstack-keystone | 18:45 | |
| *** haneef has quit IRC | 18:46 | |
| *** haneef has joined #openstack-keystone | 18:46 | |
| *** timcline has joined #openstack-keystone | 18:47 | |
| *** timcline has quit IRC | 18:47 | |
| *** timcline has joined #openstack-keystone | 18:48 | |
| *** fawadk has joined #openstack-keystone | 18:49 | |
| *** fawadkhaliq has quit IRC | 18:51 | |
| *** stevemar_ has joined #openstack-keystone | 18:55 | |
| *** ChanServ sets mode: +o stevemar_ | 18:55 | |
| *** stevemar_ has quit IRC | 18:55 | |
| *** fangxu has joined #openstack-keystone | 18:55 | |
| *** tonytan4ever has joined #openstack-keystone | 18:56 | |
| *** pumaranikar has quit IRC | 18:58 | |
| *** pumaranikar has joined #openstack-keystone | 18:59 | |
| *** adelia has joined #openstack-keystone | 18:59 | |
| *** adelia has left #openstack-keystone | 19:01 | |
| *** stevemar_ has joined #openstack-keystone | 19:02 | |
| *** ChanServ sets mode: +o stevemar_ | 19:02 | |
| *** stevemar_ has quit IRC | 19:04 | |
| *** mhickey_ has quit IRC | 19:04 | |
| *** stevemar_ has joined #openstack-keystone | 19:05 | |
| *** ChanServ sets mode: +o stevemar_ | 19:05 | |
| *** tsymanczyk has joined #openstack-keystone | 19:06 | |
| *** tsymanczyk is now known as Guest40128 | 19:06 | |
| *** stevema__ has joined #openstack-keystone | 19:07 | |
| *** ChanServ sets mode: +o stevema__ | 19:07 | |
| *** stevema__ has quit IRC | 19:08 | |
| *** stevema__ has joined #openstack-keystone | 19:09 | |
| *** ChanServ sets mode: +o stevema__ | 19:09 | |
| *** stevemar_ has quit IRC | 19:09 | |
| *** pumaranikar has quit IRC | 19:10 | |
| *** stevema__ has quit IRC | 19:10 | |
| *** Guest40128 has quit IRC | 19:11 | |
| *** petertr7 is now known as petertr7_away | 19:12 | |
| *** topol has joined #openstack-keystone | 19:13 | |
| *** ChanServ sets mode: +v topol | 19:13 | |
| *** albertom has quit IRC | 19:19 | |
| *** mylu has quit IRC | 19:19 | |
| *** fawadkhaliq has joined #openstack-keystone | 19:22 | |
| *** mylu has joined #openstack-keystone | 19:23 | |
| *** topol_ has joined #openstack-keystone | 19:23 | |
| *** ChanServ sets mode: +v topol_ | 19:23 | |
| *** topol has quit IRC | 19:23 | |
| *** fawadk has quit IRC | 19:24 | |
| *** petertr7_away is now known as petertr7 | 19:26 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth: Add argparse registration from Adapter objects https://review.openstack.org/245304 | 19:28 |
| *** topol has joined #openstack-keystone | 19:28 | |
| *** ChanServ sets mode: +v topol | 19:28 | |
| mordred | notmorgan: ^^ there yah go. | 19:28 |
| *** albertom has joined #openstack-keystone | 19:28 | |
| mordred | notmorgan: it needs tests - but I figured I'd toss it up there to make sure it wasn't bonghits before doing those | 19:28 |
| notmorgan | nod | 19:28 |
| *** boris-42 has quit IRC | 19:28 | |
| *** fawadk has joined #openstack-keystone | 19:29 | |
| *** topol has quit IRC | 19:29 | |
| *** pumaranikar has joined #openstack-keystone | 19:30 | |
| *** topol_ has quit IRC | 19:31 | |
| *** fawadkhaliq has quit IRC | 19:31 | |
| *** mylu has quit IRC | 19:32 | |
| *** mylu has joined #openstack-keystone | 19:32 | |
| *** fawadkhaliq has joined #openstack-keystone | 19:33 | |
| *** mylu has quit IRC | 19:33 | |
| *** mylu has joined #openstack-keystone | 19:34 | |
| *** fawadk has quit IRC | 19:35 | |
| *** spandhe has quit IRC | 19:36 | |
| *** fawadk has joined #openstack-keystone | 19:36 | |
| *** fawadkhaliq has quit IRC | 19:38 | |
| *** aginwala has quit IRC | 19:39 | |
| *** aginwala has joined #openstack-keystone | 19:39 | |
| *** tsymancz1k has joined #openstack-keystone | 19:39 | |
| *** zqfan_afk has joined #openstack-keystone | 19:43 | |
| *** spandhe has joined #openstack-keystone | 19:43 | |
| *** zqfan_afk is now known as zqfan | 19:44 | |
| *** EinstCrazy has joined #openstack-keystone | 19:46 | |
| notmorgan | mordred: that doesn't look insane but without seeing an example in use I can't be sure | 19:46 |
| mordred | totes | 19:46 |
| *** diazjf has joined #openstack-keystone | 19:48 | |
| *** zqfan is now known as zqfan_ | 19:48 | |
| *** zqfan_ is now known as zqfan_afk | 19:49 | |
| *** fawadk has quit IRC | 19:52 | |
| *** fawadkhaliq has joined #openstack-keystone | 19:52 | |
| *** aginwala has quit IRC | 19:55 | |
| *** pumaranikar has quit IRC | 19:57 | |
| *** jdandrea has joined #openstack-keystone | 19:58 | |
| *** aginwala has joined #openstack-keystone | 19:58 | |
| *** fawadk has joined #openstack-keystone | 20:00 | |
| *** fawadkhaliq has quit IRC | 20:03 | |
| *** tsymancz1k has quit IRC | 20:03 | |
| *** mylu has quit IRC | 20:07 | |
| *** mylu has joined #openstack-keystone | 20:07 | |
| *** gwei3 has joined #openstack-keystone | 20:09 | |
| *** pumaranikar has joined #openstack-keystone | 20:11 | |
| *** roxanaghe has quit IRC | 20:11 | |
| *** pushkaru has joined #openstack-keystone | 20:14 | |
| *** pumaranikar has quit IRC | 20:14 | |
| *** alejandrito has joined #openstack-keystone | 20:16 | |
| *** mylu has quit IRC | 20:16 | |
| *** su_zhang has quit IRC | 20:17 | |
| *** fawadk has quit IRC | 20:17 | |
| *** EinstCrazy has quit IRC | 20:18 | |
| *** henrynash has joined #openstack-keystone | 20:21 | |
| *** ChanServ sets mode: +v henrynash | 20:21 | |
| jdandrea | Does the openstack client support Keystone v3 groups? Suspecting no but want to see if I'm mistaken. http://docs.openstack.org/cli-reference/content/keystoneclient_commands.html | 20:21 |
| *** henrynash has quit IRC | 20:21 | |
| jdandrea | Answer: Yes! | 20:22 |
| jdandrea | http://docs.openstack.org/developer/python-openstackclient/command-list.html | 20:22 |
| *** jamielennox is now known as jamielennox|away | 20:23 | |
| *** tonytan4ever has quit IRC | 20:31 | |
| *** hidekazu has quit IRC | 20:38 | |
| *** breitz has joined #openstack-keystone | 20:41 | |
| *** petertr7 is now known as petertr7_away | 20:44 | |
| *** jorge_munoz has quit IRC | 20:45 | |
| *** henrynash has joined #openstack-keystone | 20:48 | |
| *** ChanServ sets mode: +v henrynash | 20:48 | |
| jdandrea | Does anyone have a python example that lists keystone groups? Trying to deduce it from the docs and not having much luck yet. | 20:50 |
| jdandrea | keystone.groups.list() gets a SSL exception. | 20:51 |
| *** jorge_munoz has joined #openstack-keystone | 20:53 | |
| *** pauloewerton has quit IRC | 20:53 | |
| *** jbell8 has quit IRC | 20:54 | |
| *** stevemar_ has joined #openstack-keystone | 20:54 | |
| *** ChanServ sets mode: +o stevemar_ | 20:54 | |
| jdandrea | Actually, I'm told I need authentication, except I authenticated. Hmm. | 20:55 |
| mnaser | hm, as an cloud admin, is it possible to create a token on behalf of another user/tenant combination that i dont have access to their credentials? | 20:55 |
| mnaser | aka sorta sudo-like behaviour | 20:55 |
| *** zz_john5223 is now known as john5223 | 20:58 | |
| openstackgerrit | Tom Cocozzello proposed openstack/keystone: fix reuse of variables https://review.openstack.org/245331 | 20:59 |
| *** jorge_munoz has quit IRC | 20:59 | |
| *** stevemar_ has quit IRC | 20:59 | |
| *** jasonsb_ has joined #openstack-keystone | 21:00 | |
| *** jbell8 has joined #openstack-keystone | 21:01 | |
| *** diazjf has quit IRC | 21:01 | |
| *** roxanaghe has joined #openstack-keystone | 21:02 | |
| notmorgan | mnaser: no, not unless that user delegates via a trust (with impersonation) to your admin user | 21:03 |
| *** tyagiprince2010 has quit IRC | 21:04 | |
| mordred | notmorgan: https://review.openstack.org/#/c/241716/ is an old patch that does not use that new ksa patch - and https://review.openstack.org/#/c/241715/ is a patch that consumes it | 21:04 |
| mordred | notmorgan: and this: https://review.openstack.org/#/c/245200/ is what that looks like passed through to legacy clients | 21:04 |
| mordred | notmorgan: (handwaving - the novaclient patch needs a ton of work still) | 21:04 |
| notmorgan | mnaser: I mean.. you can always muck around in the db, but that kind of voids the warranty | 21:04 |
| notmorgan | mnaser: and is not ever recommended | 21:05 |
| notmorgan | mordred: *waves hands emphatically* | 21:05 |
| *** tonytan4ever has joined #openstack-keystone | 21:05 | |
| mordred | notmorgan: yup | 21:06 |
| * notmorgan looks at Pasadena and is amazed he is leaving it on a permanent basis tomorrow. | 21:06 | |
| jdandrea | Clue, please. What am I doing wrong? :/ http://paste.openstack.org/show/478842/ | 21:06 |
| jdandrea | type(keystone) is <class 'keystoneclient.v3.client.Client'> | 21:06 |
| notmorgan | mordred: cool. yeah novaclient is kinda beastly in some ways | 21:06 |
| *** petertr7_away is now known as petertr7 | 21:06 | |
| mordred | jdandrea: you need to be admin. are you admin? | 21:06 |
| jdandrea | Yes. | 21:06 |
| * jdandrea but he's going to double check anyway *grin* | 21:07 | |
| *** gordc has quit IRC | 21:07 | |
| jdandrea | mordred: Yep, I'm an admin in that project. | 21:07 |
| mordred | jdandrea: k. so - you may want to poke here: http://git.openstack.org/cgit/openstack-infra/shade/tree/shade/operatorcloud.py#n1109 (although that's fairly obfuscated due to indirection and stuff) | 21:08 |
| mordred | using python keystoneclient directly is harder than you expect | 21:08 |
| mnaser | notmorgan .. that's what i thought.. what if when provisioning users, I generate trusts for each newly generated user .. would that be more of a cleaner path? | 21:08 |
| jdandrea | mordred: Yep, already there. It's not just group, it's anything, even userlist. | 21:08 |
| jdandrea | Suspecting pilot error but I'm not sure what. :/ | 21:08 |
| notmorgan | mnaser: you can do that, but remember trusts are very specifically scoped. blanket sudo like mechanisms kind of break the whole openstack security model | 21:09 |
| notmorgan | mnaser: you can as a cloud admin just grant yourself a role on a project when you need to do something in that scope. | 21:10 |
| *** tsymanczyk has joined #openstack-keystone | 21:10 | |
| *** tsymanczyk is now known as Guest265 | 21:11 | |
| notmorgan | mnaser: and then the audit trail would be easier to follow. | 21:11 |
| mordred | jdandrea: try this: http://paste.openstack.org/show/478843/ | 21:11 |
| notmorgan | jdandrea: what mordred said. unfortunately keystone client is not as easy to directly use. but it is a long story as to why. | 21:11 |
| mordred | jdandrea: after having sourced your openrc | 21:11 |
| mordred | jdandrea: it should get you a properly set up keystoneclient | 21:12 |
| mordred | jdandrea: (you'll need to pip install os-client-config) | 21:12 |
| jdandrea | mordred: I wonder if os-client-config install has any side effects? Could use a venv. | 21:13 |
| mordred | jdandrea: you could use a venv | 21:13 |
| jdandrea | k | 21:13 |
| notmorgan | mnaser: acting specifically as a user in OpenStack is only super important to debug very narrow error cases. simply acting in the scope of the project as your admin user via a role granted to the admin user will most likely be sufficient in 99% of the cases. | 21:13 |
| mordred | jdandrea: it should not have any side effects - it only depends on keystoneauth and pyyaml | 21:13 |
| mordred | jdandrea: but better safe while you're experimenting | 21:13 |
| notmorgan | mnaser: trusts are good when you are delegating authz to a non-admin | 21:13 |
| * jdandrea nods | 21:14 | |
| mnaser | notmorgan: maybe I should take another approach, but the idea is to have a way that I can supply tokens to a user if they are already pre-auth'd in another system | 21:14 |
| jdandrea | Appreciated. This all came about because I've been asked to look at Keystone Groups a bit more closely. | 21:14 |
| mnaser | ex: they're logged into customer area, i want to give them access to their tenant/project, give them a token without having to store their own actual credentials (which would not be ieal obviously) | 21:14 |
| openstackgerrit | Ronald Bradford proposed openstack/keystone: Use oslo.log provided method for log levels https://review.openstack.org/245338 | 21:15 |
| mnaser | ideally we'd just implement keystone auth to use the same as the customer center but that comes with it's own set of problems as well | 21:15 |
| jdandrea | Also, that's for kilo on up (with the CLI, at least), yes? How about for the python libs? Not sure if that can be used under juno (suspecting no). | 21:15 |
| * jdandrea is on liberty anyway, but not everyone else has caught up *grin* | 21:15 | |
| notmorgan | mnaser: federated auth seems like a good fit for that | 21:16 |
| mordred | jdandrea: I have verified that for me this works: http://paste.openstack.org/show/478844/ to get a solid keystoneclient instance (with a proper password) | 21:17 |
| notmorgan | mnaser: there are other ways around it. I highly recommend against using trusts like that, it has potential to really expose you if there is ever an issue | 21:17 |
| jdandrea | mordred: Awesome. I'm in a venv and being told keystoneclient isn't there. I may just need to add it to the venv. | 21:17 |
| mordred | jdandrea: yes. you will want to add it in the venv | 21:18 |
| mnaser | notmorgan: got it, i'll do more reading about the federated auth | 21:19 |
| *** Guest265 has quit IRC | 21:20 | |
| *** bill_az has joined #openstack-keystone | 21:21 | |
| jdandrea | mordred: Not sure how to get my domain id. Hmm. | 21:22 |
| mnaser | notmorgan thanks for the federated auth idea... it looks like the perfect fit in this case, im going to read more into it | 21:23 |
| mordred | jdandrea: if you don't know what your domain id is - then you're likely not using keystone v3 - OR - it's 'default' | 21:23 |
| jdandrea | mordred: It was 'default' :) | 21:24 |
| mordred | jdandrea: \o/ | 21:24 |
| *** diazjf has joined #openstack-keystone | 21:25 | |
| jdandrea | mordred: Thanks a bunch. I don't think I would have figured that out solo. | 21:25 |
| jdandrea | 'preciated. | 21:25 |
| mordred | jdandrea: so it works now? awesome | 21:26 |
| jdandrea | mordred: yep, I can do client.users.list() (and I get a list), and client.groups.list() (and I get nothing ... because we have none yet) | 21:27 |
| mordred | woot! | 21:27 |
| jdandrea | (well, an empty list, not nothing) | 21:27 |
| jdandrea | \0/ | 21:27 |
| mordred | notmorgan: look ^^ I helped | 21:27 |
| jdandrea | See? See? | 21:27 |
| jdandrea | lol | 21:27 |
| * mordred dances around just a bit | 21:27 | |
| openstackgerrit | Dan Nguyen proposed openstack/python-keystoneclient: Add include_subtree to role_list_assignments call https://review.openstack.org/188184 | 21:27 |
| notmorgan | mnaser: make sure to bug marekd and stevemar if you get stuck | 21:28 |
| notmorgan | they are super knowledgeable | 21:28 |
| mnaser | perfect, i will do that | 21:29 |
| *** aginwala has quit IRC | 21:30 | |
| jdandrea | mordred: Follow-up to that. This works on kilo. Would it work on juno? Suspecting no, but I want to make sure. | 21:30 |
| mordred | it should | 21:31 |
| mordred | jdandrea: if your kilo has keystone v3 | 21:31 |
| jdandrea | mordred: Exactly, got it, makes sense. | 21:31 |
| mordred | jdandrea: if it doesn't, just omit the two domain_id params and the same code will work | 21:31 |
| jdandrea | mordred: Ah, good to know, ty | 21:31 |
| *** stevemar_ has joined #openstack-keystone | 21:32 | |
| *** ChanServ sets mode: +o stevemar_ | 21:32 | |
| mordred | jdandrea: my pleasure! | 21:32 |
| jdandrea | mordred: Ah, wait, you wrote "if your *kilo* has keystone v3." It does. What about a juno installation though? | 21:33 |
| *** stevemar_ has quit IRC | 21:33 | |
| *** david-lyle has quit IRC | 21:34 | |
| *** exploreshaifali has quit IRC | 21:34 | |
| mordred | same thing goes | 21:34 |
| jdandrea | mordred: ok | 21:34 |
| mordred | the client code you have there should be the same no matter openstack version | 21:35 |
| mordred | only difference will be that if it's a cloud without keystone v3, you'll want to not pass domain arguments | 21:35 |
| * jdandrea nodnod | 21:35 | |
| *** e0ne has quit IRC | 21:38 | |
| jdandrea | mordred: Another bit of weirdness is that python-openstackclient (on our kilo install) doesn't show "openstack group" in their commands. Odd. | 21:39 |
| jdandrea | (for the CLI end) | 21:39 |
| *** stevemar_ has joined #openstack-keystone | 21:39 | |
| *** ChanServ sets mode: +o stevemar_ | 21:39 | |
| mordred | well - that's an old python-openstackclient | 21:41 |
| notmorgan | jdandrea: OpenStack common cli has progressed a lot in the liberty cycle. it has been a bit wierd until recently (still good but it has gotten a lot better) | 21:41 |
| jdandrea | mordred: Wait! I got it! export OS_IDENTITY_API_VERSION=3 | 21:41 |
| jdandrea | :) | 21:41 |
| mordred | you're always in good shape to install latest python-openstackclient | 21:41 |
| mordred | jdandrea: yah | 21:41 |
| mordred | that'll do it | 21:41 |
| jdandrea | +notmorgan: +1 | 21:41 |
| notmorgan | jdandrea: oh yes. make sure you are using v3! | 21:42 |
| jdandrea | Sorta kinda crucial. :) | 21:42 |
| * notmorgan notes it is kind of wierd that it is mordred and notmorgan answering keystone questions today. | 21:42 | |
| notmorgan | vs the usual suspects. | 21:43 |
| jdandrea | notmorgan: Well it sure helped me. Hope to pay it forward. | 21:43 |
| *** stevemar_ has quit IRC | 21:43 | |
| notmorgan | jdandrea: happy to help! I just have been taking a break from keystone since I'm not the PTL anymore. :) | 21:43 |
| jdandrea | +notmorgan: Ahhh. :) | 21:44 |
| notmorgan | but auth lib is kind of my baby still so, I try and keep my eyes on things like this. | 21:44 |
| * notmorgan is about a full month on break so far and feeling a lot less burned out. | 21:45 | |
| jdandrea | +1 | 21:45 |
| notmorgan | but now, I need to go pack my car, moving 1000mi north tomorrow :) | 21:45 |
| mordred | notmorgan: you're sounding less burned out too | 21:46 |
| jdandrea | Safe travels | 21:46 |
| notmorgan | mordred: it is amazing how skipping every single IRC meeting helps ;) | 21:46 |
| jdandrea | lol | 21:48 |
| *** gwei31 has joined #openstack-keystone | 21:49 | |
| dtroyer_zz | notmorgan: that was my August…it is amazing… | 21:50 |
| *** gwei3 has quit IRC | 21:51 | |
| notmorgan | dtroyer_zz: I am def still mostly paged out of OpenStack things. but I don't feel like looking at OpenStack is weighing me down like a boat anchor | 21:51 |
| *** shaleh has joined #openstack-keystone | 21:51 | |
| notmorgan | dtroyer_zz: it has been hard. but PTL is an insane job. so the break is good. | 21:51 |
| notmorgan | also, throwing out easily 600 lbs of crap (yes into the trash/recycle) has been amazingly liberating | 21:52 |
| dtroyer_zz | notmorgan: you had a nearly insane project (from an amount-of-work-and-people point of view) | 21:53 |
| dtroyer_zz | fortunately for me OSC is a much calmer place to hang out | 21:53 |
| notmorgan | dtroyer_zz: I learned that managing 100+ people is very very hard. | 21:53 |
| notmorgan | esp across as many companies as are involved. | 21:54 |
| * dtroyer_zz nods | 21:55 | |
| *** jbell8 has quit IRC | 21:55 | |
| *** timcline has quit IRC | 21:57 | |
| *** topol has joined #openstack-keystone | 21:59 | |
| *** ChanServ sets mode: +v topol | 21:59 | |
| *** thedodd has quit IRC | 22:03 | |
| *** topol has quit IRC | 22:04 | |
| *** kashyap has left #openstack-keystone | 22:06 | |
| *** lhcheng has joined #openstack-keystone | 22:07 | |
| *** ChanServ sets mode: +v lhcheng | 22:07 | |
| *** aginwala has joined #openstack-keystone | 22:11 | |
| *** davechen has joined #openstack-keystone | 22:12 | |
| *** davechen has quit IRC | 22:14 | |
| *** henrynash has quit IRC | 22:14 | |
| *** gwei31 has quit IRC | 22:15 | |
| *** jbell8 has joined #openstack-keystone | 22:15 | |
| *** tsymanczyk has joined #openstack-keystone | 22:17 | |
| *** tsymanczyk is now known as Guest29518 | 22:18 | |
| *** petertr7 is now known as petertr7_away | 22:19 | |
| *** su_zhang has joined #openstack-keystone | 22:21 | |
| *** jbell8 has quit IRC | 22:22 | |
| *** breitz has quit IRC | 22:25 | |
| *** breitz has joined #openstack-keystone | 22:25 | |
| *** timcline has joined #openstack-keystone | 22:28 | |
| mordred | it's funny when you talk to employers | 22:29 |
| mordred | and they're like "what size team have you managed" | 22:29 |
| mordred | and you look at OpenStack, then back at them | 22:29 |
| mordred | and just laugh | 22:29 |
| *** Guest29518 has quit IRC | 22:31 | |
| *** alejandrito has quit IRC | 22:32 | |
| *** timcline has quit IRC | 22:33 | |
| *** dave-mccowan has quit IRC | 22:40 | |
| notmorgan | mordred: seriously | 22:42 |
| notmorgan | mordred: "so have you managed a team before" | 22:42 |
| notmorgan | mordred: i... *deep breath* "yes" | 22:42 |
| *** pushkaru has quit IRC | 22:44 | |
| *** tsymancz1k has joined #openstack-keystone | 22:47 | |
| *** diazjf has quit IRC | 23:10 | |
| *** diazjf has joined #openstack-keystone | 23:12 | |
| *** diazjf has quit IRC | 23:13 | |
| *** breitz has quit IRC | 23:16 | |
| *** jbell8 has joined #openstack-keystone | 23:17 | |
| *** dims_ has quit IRC | 23:17 | |
| *** jbell8 has quit IRC | 23:18 | |
| *** timcline has joined #openstack-keystone | 23:29 | |
| *** tonytan4ever has quit IRC | 23:31 | |
| *** timcline has quit IRC | 23:34 | |
| *** agireud has quit IRC | 23:35 | |
| *** agireud has joined #openstack-keystone | 23:38 | |
| *** slberger has left #openstack-keystone | 23:47 | |
| *** su_zhang has quit IRC | 23:47 | |
| *** su_zhang_ has joined #openstack-keystone | 23:48 | |
| *** su_zhang_ has quit IRC | 23:51 | |
| *** su_zhang has joined #openstack-keystone | 23:51 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!