Tuesday, 2015-12-29

openstackgerrithenry-nash proposed openstack/keystone: Add support for strict url safe option on new projects and domains  https://review.openstack.org/25737600:13
*** woodster_ has joined #openstack-keystone00:26
*** david-lyle has quit IRC00:40
*** rdo has quit IRC00:54
openstackgerritRon De Rose proposed openstack/keystone: Shadow users: unified identity  https://review.openstack.org/26204500:55
*** rdo has joined #openstack-keystone00:56
*** EinstCrazy has joined #openstack-keystone00:56
*** EinstCrazy has quit IRC00:56
*** EinstCrazy has joined #openstack-keystone00:56
*** jimbaker has quit IRC01:03
*** davechen has joined #openstack-keystone01:10
*** davechen1 has joined #openstack-keystone01:13
*** lhcheng has joined #openstack-keystone01:14
*** ChanServ sets mode: +v lhcheng01:14
*** markvoelker has joined #openstack-keystone01:14
*** davechen has quit IRC01:16
*** lhcheng has quit IRC01:19
*** davechen has joined #openstack-keystone01:21
*** davechen1 has quit IRC01:23
*** sigmavirus24 is now known as sigmavirus24_awa01:23
*** jasonsb has quit IRC01:29
*** david-lyle has joined #openstack-keystone01:49
davechennotmorgan: hi sir! are you around01:52
notmorgandavechen: sortof01:53
davechennotmorgan: i will given some explaination about this patch - https://review.openstack.org/#/c/261205/01:53
davecheni did the differeratiation based on the impl in the mod wsgi, some methods i list in the comments.01:54
davechenso, it's how mod wsgi handle with the header.01:54
notmorganRight. But mod_wsgi is unhappy with text type right?01:55
davechenit's unappy about text type on python2 but require str on python301:55
davecheni will show another evidence about this.01:55
davechenwe can control keystone to always use binary type in header, but we cannot control other third party lib01:56
davechensuch as webob01:56
davechenwhere it use str 'application/x-www-form-urlencoded' for example in it's code01:57
davechenit's no possbile to enforce every lib to use byte as the header on python301:58
davechenthis might be the reason why mod wsgi did this in this way.01:58
davechentake a look at these methods from mod wsgi pls: wsgi_convert_headers_to_bytes, wsgi_convert_string_to_bytes, wsgi_validate_header_value02:00
davechenmy understanding all mod wsig needs is `str` type in header, it's six.bianry on python2 and it's six.text_type on python3.02:09
*** woodster_ has quit IRC02:36
*** fawadkhaliq has joined #openstack-keystone02:54
*** david-lyle has quit IRC02:57
openstackgerritRon De Rose proposed openstack/keystone: Shadow users: unified identity  https://review.openstack.org/26204502:58
*** GB21 has joined #openstack-keystone03:15
*** fangxu has quit IRC03:18
*** jrist has quit IRC03:20
*** GB21 has quit IRC03:23
*** jasonsb has joined #openstack-keystone03:25
*** david-lyle has joined #openstack-keystone03:26
*** jrist has joined #openstack-keystone03:34
*** agireud has joined #openstack-keystone03:34
*** ccard_ has quit IRC03:35
openstackgerritSteve Martinelli proposed openstack/keystone: document the bootstrapping process  https://review.openstack.org/25973003:37
openstackgerritSteve Martinelli proposed openstack/keystone: document the bootstrapping process  https://review.openstack.org/25973003:38
openstackgerrithenry-nash proposed openstack/keystone-specs: Clarify project hierarchy and parent usage within the API  https://review.openstack.org/20062403:38
*** agireud has quit IRC03:43
*** agireud has joined #openstack-keystone03:45
*** david-lyle has quit IRC03:52
*** dave-mccowan has quit IRC03:57
*** markvoelker has quit IRC03:58
*** ccard_ has joined #openstack-keystone03:58
*** dims has quit IRC04:25
*** lhcheng has joined #openstack-keystone04:33
*** ChanServ sets mode: +v lhcheng04:33
*** dims has joined #openstack-keystone04:34
*** GB21 has joined #openstack-keystone04:37
*** lhcheng has quit IRC04:38
*** dims has quit IRC04:44
*** dims has joined #openstack-keystone04:52
*** henrynash has quit IRC04:54
*** fawadkhaliq has quit IRC04:56
*** markvoelker has joined #openstack-keystone04:58
*** markvoelker has quit IRC05:03
*** dims has quit IRC05:13
*** fawadkhaliq has joined #openstack-keystone05:21
*** nodir has joined #openstack-keystone05:21
*** dims has joined #openstack-keystone05:23
*** david-lyle has joined #openstack-keystone05:27
*** david-lyle has quit IRC05:58
*** markvoelker has joined #openstack-keystone06:00
*** markvoelker has quit IRC06:04
*** nodir has quit IRC06:08
*** jasonsb has quit IRC06:18
*** jasonsb has joined #openstack-keystone06:19
*** Nirupama has joined #openstack-keystone06:21
*** david-lyle has joined #openstack-keystone06:29
*** markvoelker has joined #openstack-keystone07:00
*** markvoelker has quit IRC07:05
*** agireud has quit IRC07:32
*** fawadk has joined #openstack-keystone07:33
*** fawadkhaliq has quit IRC07:36
*** fawadk has quit IRC07:50
*** shoutm has joined #openstack-keystone07:52
*** boris-42 has quit IRC08:03
*** fawadkhaliq has joined #openstack-keystone08:08
*** fawadkhaliq has quit IRC08:10
*** e0ne has joined #openstack-keystone08:10
*** fawadkhaliq has joined #openstack-keystone08:10
*** spandhe has quit IRC08:14
*** spandhe has joined #openstack-keystone08:15
*** spandhe has quit IRC08:20
*** spandhe has joined #openstack-keystone08:21
*** fangxu has joined #openstack-keystone08:23
*** fangxu has quit IRC08:28
*** fangxu has joined #openstack-keystone08:29
*** Nirupama has quit IRC08:30
*** xek_ is now known as xek08:33
*** Nirupama has joined #openstack-keystone08:46
openstackgerritDave Chen proposed openstack/keystone: Enable `id`, `enabled` attributes filtering for list IdP API  https://review.openstack.org/21504108:49
*** e0ne has quit IRC08:52
*** markvoelker has joined #openstack-keystone09:01
*** shoutm_ has joined #openstack-keystone09:03
*** shoutm has quit IRC09:03
*** markvoelker has quit IRC09:06
*** vgridnev has joined #openstack-keystone09:10
*** _zouyee has joined #openstack-keystone09:29
*** shoutm_ has quit IRC09:30
*** madhuri has joined #openstack-keystone09:30
*** agireud has joined #openstack-keystone09:33
*** agireud has quit IRC09:37
*** fawadkhaliq has quit IRC09:39
*** fawadkhaliq has joined #openstack-keystone09:39
*** Nirupama has quit IRC09:42
*** davechen has left #openstack-keystone09:54
*** Nirupama has joined #openstack-keystone09:57
*** madhuri has quit IRC09:59
*** urulama has quit IRC10:11
*** urulama has joined #openstack-keystone10:11
*** roxanaghe has joined #openstack-keystone10:14
*** roxanaghe has quit IRC10:15
*** e0ne has joined #openstack-keystone10:38
*** shoutm has joined #openstack-keystone10:44
*** markvoelker has joined #openstack-keystone10:47
*** markvoelker has quit IRC10:51
*** fawadkhaliq has quit IRC10:53
*** fawadkhaliq has joined #openstack-keystone10:53
*** shoutm_ has joined #openstack-keystone11:05
*** shoutm has quit IRC11:05
*** GB21 has quit IRC11:06
*** wanghua has quit IRC11:13
*** GB21 has joined #openstack-keystone11:15
*** urulama has quit IRC11:28
*** urulama has joined #openstack-keystone11:28
*** GB21 has quit IRC11:42
*** EinstCrazy has quit IRC11:43
*** e0ne has quit IRC12:04
*** e0ne_ has joined #openstack-keystone12:04
*** xek has quit IRC12:04
*** xek has joined #openstack-keystone12:05
*** david-lyle has quit IRC12:06
*** EinstCrazy has joined #openstack-keystone12:12
*** EinstCra_ has joined #openstack-keystone12:37
*** EinstCrazy has quit IRC12:40
*** _zouyee has quit IRC12:45
*** markvoelker has joined #openstack-keystone12:48
*** markvoelker has quit IRC12:52
*** Nirupama has quit IRC12:59
*** fawadkhaliq has quit IRC13:03
*** david-lyle has joined #openstack-keystone13:09
*** spandhe has quit IRC13:33
*** sudorandom has quit IRC13:36
*** cburgess has quit IRC13:38
*** trey has quit IRC13:38
*** markvoelker has joined #openstack-keystone13:48
*** markvoelker has quit IRC13:53
*** _zouyee has joined #openstack-keystone13:56
*** trey has joined #openstack-keystone13:58
*** sudorandom has joined #openstack-keystone13:58
*** cburgess has joined #openstack-keystone14:01
*** trey has quit IRC14:13
*** trey has joined #openstack-keystone14:14
*** fawadkhaliq has joined #openstack-keystone14:20
*** henrynash has joined #openstack-keystone14:23
*** ChanServ sets mode: +v henrynash14:23
*** urulama has quit IRC14:26
*** urulama has joined #openstack-keystone14:27
*** zqfan has quit IRC14:31
*** markvoelker has joined #openstack-keystone14:49
*** dave-mccowan has joined #openstack-keystone14:49
*** trey has quit IRC14:52
*** markvoelker has quit IRC14:54
*** rderose has joined #openstack-keystone14:54
*** _zouyee has quit IRC14:58
*** sigmavirus24_awa is now known as sigmavirus2415:02
*** trey has joined #openstack-keystone15:02
*** vgridnev has quit IRC15:11
openstackgerritRon De Rose proposed openstack/keystone: Shadow users: unified identity  https://review.openstack.org/26204515:14
openstackgerritAlexander Makarov proposed openstack/keystone: Unified delegation SQL driver  https://review.openstack.org/26068615:14
*** shoutm_ has quit IRC15:20
*** shoutm has joined #openstack-keystone15:21
*** rderose has quit IRC15:22
*** boris-42 has joined #openstack-keystone15:28
*** dslevin has joined #openstack-keystone15:29
*** vgridnev has joined #openstack-keystone15:32
*** alejandrito has joined #openstack-keystone15:45
*** PsionTheory has joined #openstack-keystone16:05
henrynashdavechen: ping16:06
*** fawadkhaliq has quit IRC16:08
*** GB21 has joined #openstack-keystone16:10
*** vgridnev has quit IRC16:12
stevemarhenrynash: too late for davechen :(16:18
henrynashstevemar: oh, yes, right :-)16:19
*** david-lyle has quit IRC16:21
*** GB21 has quit IRC16:27
*** shoutm_ has joined #openstack-keystone16:28
*** shoutm has quit IRC16:28
openstackgerritBrant Knudson proposed openstack/keystone: Use ldap3 for DN comparison  https://review.openstack.org/26072116:30
*** david-lyle has joined #openstack-keystone16:42
*** trevorj has joined #openstack-keystone16:47
trevorjHi everyone, I'm trying to bootstrap a new keystone deployment, but I'm having no luck using the admin_token usng the openstackclient.16:47
trevorjThe liberty setup docs appear to be a bit out of date for Keystone 8.0.1 (ie stable/liberty branch)16:48
trevorjThe openstack client is trying to get an auth token via a POST /v3/auth/tokens, which returns "Could not find token: (my admin_token)"16:48
trevorjWhen I manually do requests using X-Auth-Token, they work fine.16:48
*** david-lyle has quit IRC16:48
openstackgerritBrant Knudson proposed openstack/keystone: Correct DN/encoding in test  https://review.openstack.org/26073116:48
openstackgerritBrant Knudson proposed openstack/keystone: Use ldap3 for DN comparison  https://review.openstack.org/26072116:48
*** markvoelker has joined #openstack-keystone16:50
shoutm_trevorj: I had the same error as you. Did you specify OS_AUTH_URL ?16:50
*** shoutm_ is now known as shoutm16:50
trevorjshoutm: Yeah, I did try that16:51
shoutmSeeing https://github.com/openstack/python-openstackclient, when we use openstackclient with OS_TOKEN, what you need is OS_URL16:52
shoutmnot OS_AUTH_URL16:52
trevorjYeah, I know, but the docs are incorrect.16:52
*** e0ne_ is now known as e0ne16:52
trevorjThat or the authentication type selection is wrong16:52
shoutmit's a bug reported here https://bugs.launchpad.net/python-openstackclient/+bug/148437316:53
openstackLaunchpad bug 1484373 in python-openstackclient "token_endpoint authentication no longer working in OSC" [Undecided,Incomplete]16:53
trevorjYeah, that's what I was getting it16:53
trevorjSo, how is any keystone deployment bootstrapped if you can't use token_endpoint authentication?16:53
shoutmI'm stuck at the same place16:54
trevorjI'm using openstackclient 2.0.0, which you'd think would have that fixed16:54
trevorjSince this was supposed to be in 1.6.3 ;)16:54
*** markvoelker has quit IRC16:55
trevorjshoutm: Well, since the client is what's broken, I'm just going to force it, I'll fork it and if you want I can send you my changes when I'm done16:55
shoutmthanks it will help me16:56
stevemartrevorj: can you confirm you are using os-client-config 1.13.0 as well?16:56
stevemari think that may have broken it16:56
trevorjstevemar: yes I am: os-client-config==1.13.016:56
stevemartrevorj: what happens if you use os-client-config 1.12.0?16:56
trevorjstevemar: that works just great!16:58
*** david-lyle has joined #openstack-keystone16:58
trevorjstevemar: Thank you!16:58
trevorjshoutm: better fix, just install os-client-config 1.12.0 as stevemar suggested16:58
trevorjstevemar: Are there plans to get a hotfix release out to PyPi for this?16:59
shoutmtrevorj: stevemar I could confirm it worked too with 1.12.0 :)16:59
*** david-lyle has quit IRC16:59
trevorjstevemar: I ask because I'm sure we're not the only people that will experience this with time17:00
stevemarshoutm: trevorj let me poke the OCC folks and see what they say, i can assign the bug to them17:00
trevorjAnd I don't want people to become disconcerted with openstack simply because they cannot bootstrap keystone17:00
stevemarof course17:00
trevorjstevemar: tyty!17:00
stevemarmordred: ^^ looks like https://github.com/openstack/os-client-config/commit/22d740b7007e1182c99370cb2629322384b17a14 may have borked osc17:01
stevemartrevorj: ah looks like they know: https://review.openstack.org/#/c/260092/17:01
stevemartrevorj: shoutm https://review.openstack.org/#/c/260945/17:02
stevemarit's a known issue then, phew17:02
*** e0ne has quit IRC17:09
openstackgerritBrant Knudson proposed openstack/keystone: Use ldap3 for DN comparison  https://review.openstack.org/26072117:10
stevemarbknudson_: in you're interested, i submitted patches to retire KSA-saml2: https://review.openstack.org/#/q/status:open+branch:master+topic:retire-ksa-saml217:11
bknudson_great. I'm tired of reviewing patches in that repo17:11
stevemarbknudson_: next up is -kerberos17:12
bknudson_we released -kerberos17:13
stevemaryeah :(17:13
stevemari noted that in the meeting17:13
stevemar(for next week)17:13
stevemarthe only project using it is django-openstack-auth-kerberos17:14
stevemari tossed up a patch that adds deprecations to ksc-kerberos17:14
bknudson_you and me both17:15
*** gissi_ has quit IRC17:16
stevemari'll abandon mine then17:16
stevemari wonder if we really need to give a year before removing it...17:17
bknudson_django-openstack-auth-kerberos would fail if we removed it17:18
bknudson_Has django-openstack-auth-kerberos been changed to use keystoneauth now?17:18
*** Guest84676 is now known as tsymanczyk17:18
stevemari think DOA-kerb is as equally unmaintained as KSC-kerb17:19
stevemarso... no17:19
bknudson_so kerberos is in doa now?17:20
stevemarwhen DOA fully moves over to keystoneauth it'll have kerberos17:21
stevemarhttps://github.com/openstack/django-openstack-auth-kerberos has 2 releases :(17:22
stevemarand a whopping 8 commits17:22
bknudson_1 contributor17:23
bknudson_and you can probably guess his name17:23
openstackgerritMerged openstack/python-keystoneclient-kerberos: Removes MANIFEST.in as it is not needed explicitely by PBR  https://review.openstack.org/25893617:24
*** shoutm_ has joined #openstack-keystone17:24
*** shoutm has quit IRC17:24
openstackgerritMerged openstack/python-keystoneclient-kerberos: Updated from global requirements  https://review.openstack.org/25166417:26
stevemarbknudson_: also this: https://review.openstack.org/#/c/258302/17:26
openstackgerritMerged openstack/python-keystoneclient-kerberos: Deprecate this package  https://review.openstack.org/25320517:27
stevemarbknudson_: the review queue for ksc-kerb is now empty, you can rest easy now, i'll be -2'ing any changes in there17:27
*** shoutm_ has quit IRC17:28
openstackgerritRon De Rose proposed openstack/keystone: Shadow users: unified identity  https://review.openstack.org/26204517:32
bknudson_stevemar: couple of typos in the release notes. Want me to fix them? https://review.openstack.org/#/c/258302/117:35
*** henrynash has quit IRC17:37
*** sigmavirus24 is now known as sigmavirus24_awa17:45
htrutabknudson_, could you please take a look at https://review.openstack.org/#/c/248295/ ?17:47
stevemarbknudson_: sure, i'm heating up food, you can push it through if you want17:50
stevemar(and dealing with slow internet -- tethering from my phone since snowstorm affected my cable internet)17:51
*** trevorjay has joined #openstack-keystone17:52
*** trevorj has quit IRC17:52
*** trevorjay is now known as trevorj17:52
*** fangxu has quit IRC17:53
tjcocozzstevemar, sounds like a great excuse to take the day off :-)17:57
stevemartjcocozz: i did take the day off! nothing to do though!17:57
stevemarnot about to leave the home, it's crazy outside17:58
tjcocozzstevemar, yeah its pretty bad here too. we got roughly 8-10 inches17:59
tjcocozzstevemar, I woke up this morning to this guy sitting there rosting his tires for about 20 minutes, in front of my town home, till i went and helped push him out.18:00
stevemartjcocozz: oof, that's a good dumping18:00
stevemartsk tsk18:00
stevemaryou gotta reverse first, then go forward18:00
tjcocozzlol yeah.  flooring it -> go no where18:01
tjcocozzno meeting today?18:02
stevemartjcocozz: nah, we can meet next week, nothing urgent happening IMO18:03
tjcocozzstevemar, makes sense18:04
*** david-lyle has joined #openstack-keystone18:14
*** jsavak has joined #openstack-keystone18:14
bknudson_htruta: it's on my list18:15
*** e0ne has joined #openstack-keystone18:21
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: remove keystoneclient.apiclient.exceptions  https://review.openstack.org/25830218:21
*** PsionTheory has quit IRC18:23
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Cleanup release note  https://review.openstack.org/26228418:24
*** david-lyle has quit IRC18:24
*** alejandrito has quit IRC18:24
htrutabknudson_, cool. thanks18:25
*** fangxu has joined #openstack-keystone18:26
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Cleanup release note  https://review.openstack.org/26228418:27
*** henrynash has joined #openstack-keystone18:38
*** ChanServ sets mode: +v henrynash18:38
*** markvoelker has joined #openstack-keystone18:51
*** lhcheng has joined #openstack-keystone18:51
*** ChanServ sets mode: +v lhcheng18:51
*** lhcheng_ has joined #openstack-keystone18:53
*** jsavak has quit IRC18:56
*** markvoelker has quit IRC18:56
*** lhcheng has quit IRC18:56
*** sigmavirus24_awa is now known as sigmavirus2419:04
*** sudorandom has quit IRC19:14
*** spandhe has joined #openstack-keystone19:14
*** sudorandom has joined #openstack-keystone19:16
*** spandhe_ has joined #openstack-keystone19:17
*** spandhe has quit IRC19:18
*** spandhe_ is now known as spandhe19:18
*** david-lyle has joined #openstack-keystone19:28
*** david-lyle has quit IRC19:33
*** david-lyle has joined #openstack-keystone19:33
stevemarlhcheng_: around?19:39
*** e0ne has quit IRC19:39
*** david-lyle has quit IRC19:42
*** david-lyle has joined #openstack-keystone19:43
stevemarbknudson_: general FYI: https://review.openstack.org/#/q/topic:stop_using_oslo_inc19:51
notmorganstevemar: shhhhhhhhhhhhh be very very quiet19:51
notmorganstevemar: >.>19:51
stevemarnotmorgan: :)19:51
stevemarbknudson_: we should be able to remove all that apiclient crap from keystone soon19:51
*** markvoelker has joined #openstack-keystone19:51
bknudson_we're probably not going to be able to remove the code until the uses have been removed and the releases with the uses are eol19:52
notmorganbknudson_: :(19:52
bknudson_this is the same issue oslo.utils ran into19:52
notmorganstevemar: ugh i can't find my launchpad password :(19:52
* notmorgan sighs and considers a password reset :(19:53
stevemarbknudson_: because someone might have a newer keystone and older client?19:53
bknudson_stevemar: the unit tests on stable/* will fail since they use latest keystoneclient19:54
bknudson_there was some discussion on -dev about this...19:54
stevemarbknudson_: i realized it would take a while when i tossed those patches up19:55
stevemarbut better to get them out early19:55
*** fangxu has quit IRC19:56
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Cleanup release note  https://review.openstack.org/26228419:56
*** markvoelker has quit IRC19:56
stevemarSo clearly the deprecation process is not working as no one looks at the log messages and fix their own projects.19:56
stevemarbknudson_: dims summed it up ^19:56
notmorganstevemar: ... did you just pun off dims ' name?19:56
bknudson_now I'm hungry19:57
notmorganbknudson_: i know, right!?19:57
stevemarthat was not intentional :P19:57
notmorganstevemar: suuuuuuure19:57
bknudson_but yes, it's broken since it takes way too long to remove deprecated function.19:58
stevemarbknudson_: oh, there was also the broken stable/liberty branch of ksm :( https://review.openstack.org/#/c/261706/20:02
stevemari added ^ but i think it's overkill20:02
bknudson_part of the problem is that these projects haven't switched to keystoneauth -- https://review.openstack.org/#/c/261806/1/tackerclient/shell.py20:03
bknudson_people like writing code, I guess.20:04
bknudson_using libraries is hard20:04
stevemarbknudson_: i figured the transition to ksa for most projects could be a two step process20:05
stevemar1) get projects to not use apiclient exceptions, 2) remove apiclient from ksc, 3) transition from ksc to ksa for projects (notmorgan and mordred were looking at that anyway)20:05
stevemarfeels like all i've done for the last 2 weeks is cleaning crap up -- trying to remove cruft from our own libraries, correct misuses of our library code and trying to prevent future osc breakages20:09
*** david-lyle has quit IRC20:10
notmorganstevemar: stevemar ++20:10
openstackgerrithenry-nash proposed openstack/keystone: Create V9 version of federation driver interface  https://review.openstack.org/26230720:12
notmorgani am happy ksa doesn't have openstack-common stuff in it20:12
notmorganbecause the whole <XXX>.openstack being "public" has been ugly in ksc20:13
stevemarnotmorgan: agreed20:13
openstackgerritMerged openstack/python-keystoneclient: remove keystoneclient.apiclient.exceptions  https://review.openstack.org/25830220:14
*** alejandrito has joined #openstack-keystone20:16
openstackgerrithenry-nash proposed openstack/keystone: Create V9 version of federation driver interface  https://review.openstack.org/26230720:16
notmorganstevemar: https://review.openstack.org/#/c/260945/2 will need a release of OCC as well20:17
stevemarnotmorgan: of course20:22
notmorganstevemar: and i am waiting for confirmation that it is all "fixed"20:22
notmorganalso i am very happy that bootstrap landed.20:22
notmorganas soon as devstack is converted, i plan to mark admin_token deprecated.20:22
notmorganstevemar: i think https://review.openstack.org/#/c/256969/5 followup needs to just have a JSON output of the user/domain/project/etc20:23
notmorganstevemar: and then we can evaluate adding in domain-scopes etc20:24
notmorganif needed.20:24
notmorgan(to support v3cloud policy)20:24
openstackgerritMerged openstack/keystoneauth-saml2: Remove the content of keystoneauth-saml2  https://review.openstack.org/26181920:29
albertomhi guys20:32
albertomI updates to keystone 8.0.120:32
albertomhow do i bootstrap now ?20:32
albertomNotFound: Could not find token: ADMIN (HTTP 404) (Request-ID: req-9f0c0907-50fa-4e7e-848f-70ca8ee7f09f)20:33
albertomI have admin_token = ADMIN in keystone.conf :P20:33
stevemaralbertom: refer to my comments in #openstack :)20:34
*** david-lyle has joined #openstack-keystone20:43
*** e0ne has joined #openstack-keystone20:44
stevemarnotmorgan: bknudson_ thoughts on finally removing the CLI bits from ksc?20:48
notmorganstevemar: uh, +2 :P20:48
stevemarkill it with fire :)20:48
bknudson_gotta do it sometime.20:48
notmorganstevemar: >.>20:48
bknudson_no time like the present20:48
notmorganstevemar: i +2'd that and would love to see it die20:48
notmorganalbertom: there is a bug.20:49
stevemarrelease ksc 5.0.0 and holy crap everything is missing!20:49
notmorganalbertom: fix is proposed, just need to get a core on it and get it approved.20:49
* notmorgan is avoiding pushing the change w/o a second pair of eyes20:49
notmorganand/or confirmation it will fix the issue20:49
notmorganbut... holiday20:49
* notmorgan is tempted to go see the hateful eight today20:50
notmorganand mayyybe starwars20:50
* notmorgan hasn't seen starwars yet :P20:50
*** ChanServ sets mode: +o notmorgan20:51
bknudson_star wars was disappointing.20:51
bknudson_but it was at least interesting... didn't get bored20:51
*** ChanServ changes topic to "~45 days until mitaka-2 is released! see blueprints and bugs at: https://launchpad.net/keystone/+milestone/mitaka-2 | Hey, go relax until 2016!"20:52
*** markvoelker has joined #openstack-keystone20:52
*** notmorgan sets mode: -o notmorgan20:52
bretonyeah, change that "~45 days"20:53
bretonit is wrong almost always20:53
bretonexcept when it's ~45 days.20:53
stevemarbreton: ?20:54
stevemarbreton: did i miss scrollback? your comment confused me20:54
*** ChanServ sets mode: +o notmorgan20:54
*** notmorgan changes topic to "Relax until 2016! | Mitaka 2 soon! (check schedule) - see blueprints and bugs at: https://launchpad.net/keystone/+milestone/mitaka-2"20:54
*** notmorgan sets mode: -o notmorgan20:54
notmorganstevemar: don't worry i got it20:54
notmorganstevemar: see topic20:55
* notmorgan has to go run errands :(20:55
notmorganhey stevemar can you have someone poke at https://review.openstack.org/#/c/260945/ and confirm it "works"20:56
* notmorgan would like to get that bug closed soon20:56
* notmorgan is happy to push it and do a release if we know it solves the issue20:56
*** markvoelker has quit IRC20:57
stevemari guess i didn't update the topic for a while :P21:01
stevemarnotmorgan: i can try to poke at it tonight21:01
stevemarnotmorgan: i dont have people to poke at to do stuff for me :P21:01
*** henrynash has quit IRC21:01
*** henrynash has joined #openstack-keystone21:02
*** ChanServ sets mode: +v henrynash21:02
notmorganYeah that would be great.21:03
openstackgerritRon De Rose proposed openstack/keystone: Shadow users: unified identity  https://review.openstack.org/26204521:04
*** jsavak has joined #openstack-keystone21:08
*** openstackgerrit has quit IRC21:17
*** openstackgerrit has joined #openstack-keystone21:17
*** jasonsb has quit IRC21:20
albertomnotmorgan: the patch worked for me so I have it a +1 :D21:23
*** jsavak has quit IRC21:32
bknudson_I might have to switch to gertty21:38
*** alejandrito has quit IRC21:41
*** dave-mccowan has quit IRC21:44
*** EinstCra_ has quit IRC21:48
*** EinstCrazy has joined #openstack-keystone21:48
*** markvoelker has joined #openstack-keystone21:53
*** markvoelker has quit IRC21:58
*** fangxu has joined #openstack-keystone22:00
lhcheng_stevemar: looking for me?22:26
*** david-lyle has quit IRC22:28
*** david-lyle has joined #openstack-keystone22:36
*** fangxu has quit IRC22:41
tsymanczykIf I want to fix a bug that I filed against keystone but the correct fix belongs in oslo_policy - what is the correct procedure? Should I file another bug against oslo.policy and link them? Or is it sufficient to fix it in oslo_policy and link back to the keystone bug?22:44
bknudson_tsymanczyk: add oslo.policy to the bug report22:45
bknudson_then you can remove keystone or mark it invalid in keystone22:45
tsymanczykwhich of those would you prefer? the bug manifests in keystone.22:45
bknudson_mark it invalid in keystone22:46
tsymanczykwill do. thanks.22:46
*** david-lyle has quit IRC22:50
*** lhcheng_ has quit IRC22:58
*** fangxu has joined #openstack-keystone23:04
openstackgerritTimothy Symanczyk proposed openstack/oslo.policy: Don't crash on RoleCheck when roles not present  https://review.openstack.org/26232923:05
mordredstevemar: did you look at https://review.openstack.org/#/c/260945/ ?23:10
mordredstevemar: oh, wait. notmorgan already poked you23:10
mordredstevemar: ignore me :)23:10
*** sigmavirus24 is now known as sigmavirus24_awa23:11
*** e0ne has quit IRC23:12
*** shoutm has joined #openstack-keystone23:46
*** shoutm has quit IRC23:46
*** shoutm has joined #openstack-keystone23:47
openstackgerrithenry-nash proposed openstack/keystone: Create V9 version of federation driver interface  https://review.openstack.org/26230723:51
*** markvoelker has joined #openstack-keystone23:54
openstackgerritBrant Knudson proposed openstack/keystone: Escape DN in enabled query  https://review.openstack.org/26233423:54
*** david-lyle has joined #openstack-keystone23:55
*** markvoelker has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!