| *** georgem1 has joined #openstack-keystone | 00:01 | |
| *** georgem1 has quit IRC | 00:01 | |
| *** georgem1 has joined #openstack-keystone | 00:02 | |
| *** tonytan4ever has quit IRC | 00:04 | |
| *** iurygregory_ has joined #openstack-keystone | 00:04 | |
| *** georgem1 has quit IRC | 00:04 | |
| *** wasmum has joined #openstack-keystone | 00:05 | |
| *** henrynash has quit IRC | 00:07 | |
| *** dims has quit IRC | 00:14 | |
| *** dims has joined #openstack-keystone | 00:19 | |
| *** tonytan4ever has joined #openstack-keystone | 00:23 | |
| *** code-R has joined #openstack-keystone | 00:24 | |
| *** furface has joined #openstack-keystone | 00:27 | |
| *** code-R has quit IRC | 00:29 | |
| *** sdake_ has joined #openstack-keystone | 00:29 | |
| *** sdake has quit IRC | 00:30 | |
| *** tonytan4ever has quit IRC | 00:39 | |
| *** Guest66394 has quit IRC | 00:40 | |
| *** maxabidi has quit IRC | 00:40 | |
| *** georgem1 has joined #openstack-keystone | 00:47 | |
| *** georgem1 is now known as 17WAAO0LI | 00:47 | |
| *** spzala has quit IRC | 00:51 | |
| *** 17WAAO0LI has quit IRC | 00:53 | |
| *** georgem1 has joined #openstack-keystone | 00:55 | |
| *** sdake has joined #openstack-keystone | 00:56 | |
| *** sdake_ has quit IRC | 00:59 | |
| *** sdake has quit IRC | 01:02 | |
| *** richm has quit IRC | 01:06 | |
| *** doug-fish has joined #openstack-keystone | 01:06 | |
| *** darosale has joined #openstack-keystone | 01:06 | |
| *** spandhe has quit IRC | 01:06 | |
| *** dan_nguyen has quit IRC | 01:07 | |
| *** doug-fish has quit IRC | 01:10 | |
| *** jbell8 has joined #openstack-keystone | 01:23 | |
| *** julim has joined #openstack-keystone | 01:24 | |
| *** TxGVNN has joined #openstack-keystone | 01:30 | |
| *** julim has quit IRC | 01:32 | |
| *** EinstCrazy has joined #openstack-keystone | 01:33 | |
| *** roxanaghe has joined #openstack-keystone | 01:38 | |
| *** itisha has quit IRC | 01:40 | |
| *** doug-fish has joined #openstack-keystone | 01:40 | |
| *** sdake has joined #openstack-keystone | 01:41 | |
| *** sdake has quit IRC | 01:43 | |
| *** doug-fish has quit IRC | 01:44 | |
| *** sdake has joined #openstack-keystone | 01:47 | |
| *** sdake_ has joined #openstack-keystone | 01:48 | |
| *** sdake has quit IRC | 01:51 | |
| *** jbell8 has quit IRC | 01:56 | |
| *** jbell8 has joined #openstack-keystone | 01:57 | |
| *** tqtran has quit IRC | 02:10 | |
| *** julim has joined #openstack-keystone | 02:10 | |
| *** roxanaghe has quit IRC | 02:12 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Config settings to support PCI-DSS https://review.openstack.org/314679 | 02:13 |
|---|---|---|
| *** hogepodge has quit IRC | 02:13 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements https://review.openstack.org/314284 | 02:15 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Change password requirements https://review.openstack.org/320156 | 02:15 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS Password strength requirements https://review.openstack.org/320586 | 02:15 |
| *** hogepodge has joined #openstack-keystone | 02:17 | |
| *** hogepodge has quit IRC | 02:21 | |
| *** agrebennikov has quit IRC | 02:22 | |
| *** eszxy has joined #openstack-keystone | 02:23 | |
| *** code-R has joined #openstack-keystone | 02:25 | |
| *** rderose has quit IRC | 02:26 | |
| *** code-R has quit IRC | 02:30 | |
| *** doug-fish has joined #openstack-keystone | 02:32 | |
| *** darosale has quit IRC | 02:35 | |
| *** amrith is now known as _amrith_ | 02:36 | |
| *** gyee has quit IRC | 02:45 | |
| *** lhcheng has quit IRC | 02:50 | |
| *** sheel has joined #openstack-keystone | 02:51 | |
| *** ayoung has quit IRC | 03:09 | |
| *** doug-fish has quit IRC | 03:11 | |
| *** iurygregory_ has quit IRC | 03:11 | |
| *** roxanaghe has joined #openstack-keystone | 03:16 | |
| *** georgem1 has quit IRC | 03:35 | |
| *** zyxes has joined #openstack-keystone | 03:41 | |
| *** eszxy has quit IRC | 03:45 | |
| *** lhcheng has joined #openstack-keystone | 03:45 | |
| *** ChanServ sets mode: +v lhcheng | 03:45 | |
| *** dave-mccowan has quit IRC | 03:48 | |
| *** lhcheng_ has joined #openstack-keystone | 03:50 | |
| *** eszxy has joined #openstack-keystone | 03:51 | |
| *** zyxes has quit IRC | 03:53 | |
| *** lhcheng has quit IRC | 03:54 | |
| *** edtubill has joined #openstack-keystone | 03:55 | |
| *** links has joined #openstack-keystone | 04:00 | |
| stevemar | notmorgan: just reading the meeting minutes now, and i <3 dolphm's solution to the datacentre problem | 04:02 |
| *** TxGVNN has quit IRC | 04:04 | |
| *** jamielennox is now known as jamielennox|away | 04:08 | |
| *** david-lyle has quit IRC | 04:21 | |
| *** code-R has joined #openstack-keystone | 04:26 | |
| *** code-R has quit IRC | 04:31 | |
| *** darosale has joined #openstack-keystone | 04:34 | |
| *** spandhe has joined #openstack-keystone | 04:39 | |
| *** spandhe_ has joined #openstack-keystone | 04:40 | |
| *** spandhe has quit IRC | 04:44 | |
| *** spandhe_ is now known as spandhe | 04:44 | |
| *** roxanaghe has quit IRC | 04:47 | |
| stevemar | jlk: commented on https://bugs.launchpad.net/keystone/+bug/1555629 | 04:57 |
| openstack | Launchpad bug 1555629 in OpenStack Identity (keystone) "v3/users reports all users in all domains excepts when domain_specific_drivers_enabled is set to true." [Undecided,New] | 04:57 |
| *** EinstCrazy has quit IRC | 05:00 | |
| *** furface has quit IRC | 05:00 | |
| *** rcernin has quit IRC | 05:04 | |
| *** GB21 has joined #openstack-keystone | 05:04 | |
| *** EinstCrazy has joined #openstack-keystone | 05:09 | |
| *** david_cu has joined #openstack-keystone | 05:21 | |
| *** jbell8 has quit IRC | 05:24 | |
| *** code-R has joined #openstack-keystone | 05:28 | |
| *** jbell8 has joined #openstack-keystone | 05:28 | |
| *** code-R_ has joined #openstack-keystone | 05:29 | |
| *** guardianJ has joined #openstack-keystone | 05:30 | |
| *** guardianJ has quit IRC | 05:32 | |
| *** code-R has quit IRC | 05:32 | |
| *** spandhe has quit IRC | 05:34 | |
| *** eszxy has quit IRC | 05:34 | |
| *** eszxy has joined #openstack-keystone | 05:35 | |
| *** spandhe has joined #openstack-keystone | 05:37 | |
| *** spandhe has quit IRC | 05:39 | |
| *** edtubill has quit IRC | 05:40 | |
| *** rcernin has joined #openstack-keystone | 05:43 | |
| *** roxanaghe has joined #openstack-keystone | 05:48 | |
| *** pnavarro has quit IRC | 05:49 | |
| *** sdake has joined #openstack-keystone | 05:52 | |
| *** roxanaghe has quit IRC | 05:52 | |
| *** sdake_ has quit IRC | 05:55 | |
| *** spandhe has joined #openstack-keystone | 05:57 | |
| *** darosale has quit IRC | 05:58 | |
| *** woodster_ has quit IRC | 05:58 | |
| *** mvk_ has joined #openstack-keystone | 06:00 | |
| *** mvk has quit IRC | 06:03 | |
| *** yolanda_ has quit IRC | 06:09 | |
| *** yolanda has joined #openstack-keystone | 06:09 | |
| *** sdake has quit IRC | 06:15 | |
| *** belmoreira has joined #openstack-keystone | 06:17 | |
| *** yolanda_ has joined #openstack-keystone | 06:22 | |
| *** eszxy has quit IRC | 06:22 | |
| *** yolanda_ has quit IRC | 06:22 | |
| *** yolanda_ has joined #openstack-keystone | 06:22 | |
| *** eszxy has joined #openstack-keystone | 06:23 | |
| *** markvoelker has quit IRC | 06:24 | |
| *** yolanda has quit IRC | 06:25 | |
| *** EinstCrazy has quit IRC | 06:25 | |
| *** yolanda_ has quit IRC | 06:26 | |
| *** yolanda has joined #openstack-keystone | 06:26 | |
| *** hogepodge has joined #openstack-keystone | 06:31 | |
| *** srushti has joined #openstack-keystone | 06:34 | |
| *** spandhe has quit IRC | 06:38 | |
| *** EinstCrazy has joined #openstack-keystone | 06:42 | |
| *** roxanaghe has joined #openstack-keystone | 06:49 | |
| *** roxanaghe has quit IRC | 06:53 | |
| *** tesseract has joined #openstack-keystone | 07:03 | |
| *** zyxes has joined #openstack-keystone | 07:12 | |
| *** eszxy has quit IRC | 07:16 | |
| *** henrynash has joined #openstack-keystone | 07:20 | |
| *** ChanServ sets mode: +v henrynash | 07:20 | |
| *** pcaruana has joined #openstack-keystone | 07:26 | |
| *** daemontool_ has joined #openstack-keystone | 07:42 | |
| *** lhcheng_ has quit IRC | 07:43 | |
| *** code-R_ has quit IRC | 07:47 | |
| *** roxanaghe has joined #openstack-keystone | 07:49 | |
| *** pnavarro has joined #openstack-keystone | 07:51 | |
| *** roxanaghe has quit IRC | 07:54 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:01 | |
| *** xek has joined #openstack-keystone | 08:01 | |
| *** jbell8 has quit IRC | 08:04 | |
| *** rmizuno has joined #openstack-keystone | 08:06 | |
| *** raddaoui has quit IRC | 08:07 | |
| *** jaosorior has joined #openstack-keystone | 08:08 | |
| *** lmiccini has quit IRC | 08:22 | |
| *** lmiccini has joined #openstack-keystone | 08:31 | |
| *** markvoelker has joined #openstack-keystone | 08:37 | |
| *** dmk0202 has joined #openstack-keystone | 08:38 | |
| *** markvoelker has quit IRC | 08:42 | |
| *** jed56 has joined #openstack-keystone | 08:45 | |
| *** TxGVNN has joined #openstack-keystone | 08:48 | |
| *** dmk0202 has quit IRC | 08:48 | |
| *** roxanaghe has joined #openstack-keystone | 08:50 | |
| *** roxanaghe has quit IRC | 08:50 | |
| *** daemontool_ has quit IRC | 08:58 | |
| *** daemontool has joined #openstack-keystone | 08:59 | |
| *** jaosorior has quit IRC | 09:02 | |
| *** jaosorior has joined #openstack-keystone | 09:02 | |
| *** aurelien__ has joined #openstack-keystone | 09:06 | |
| *** GB21 has quit IRC | 09:06 | |
| *** daemontool has quit IRC | 09:11 | |
| *** daemontool_ has joined #openstack-keystone | 09:11 | |
| *** mvk_ has quit IRC | 09:14 | |
| *** henrynash has quit IRC | 09:29 | |
| *** henrynash has joined #openstack-keystone | 09:30 | |
| *** ChanServ sets mode: +v henrynash | 09:30 | |
| *** mvk has joined #openstack-keystone | 09:32 | |
| *** TxGVNN has quit IRC | 09:34 | |
| *** TxGVNN has joined #openstack-keystone | 09:40 | |
| *** rmizuno has quit IRC | 09:44 | |
| *** jamielennox|away is now known as jamielennox | 09:44 | |
| srushti | sheel: Hi, I want to discuss regarding bug 1586031. | 09:47 |
| openstack | bug 1545736 in OpenStack Identity (keystone) "duplicate for #1586031 keystone role create failed when 4 byte unicode character is provided in name field" [Wishlist,Triaged] https://launchpad.net/bugs/1545736 - Assigned to Sheel Rana (ranasheel2000) | 09:47 |
| sheel | srushti: yes tell me | 09:47 |
| srushti | Are you working to implement the specs for unicode support in MySql? | 09:49 |
| sheel | I have one spec for cross component | 09:50 |
| sheel | which is still in discussion | 09:51 |
| *** roxanaghe has joined #openstack-keystone | 09:51 | |
| sheel | you can refer same here: https://review.openstack.org/#/c/280371/ | 09:51 |
| patchbot | sheel: patch 280371 - openstack-specs - Support for 4-byte unicode characters in MySQL | 09:51 |
| srushti | Yes I have gone through the specs. It looks good but since it is still in progress and may take some time for implementation. | 09:54 |
| *** roxanaghe has quit IRC | 09:55 | |
| srushti | sheel: And user may still face issue until it is implemented. Why not fix this issue at keystone-side? | 09:55 |
| *** julim has quit IRC | 09:55 | |
| sheel | srushti: yep, its ok | 09:56 |
| srushti | sheel: I have already fixed this issue and the patch is ready. Should i push it for community review? | 09:57 |
| sheel | srushti: yep, great.. please go ahead | 09:58 |
| sheel | i will be happy to review it.. | 09:58 |
| srushti | sheel: Yes sure.Thank you. | 09:58 |
| sheel | srushti: np | 09:58 |
| *** daemontool_ has quit IRC | 10:00 | |
| *** belmoreira has quit IRC | 10:00 | |
| *** julim has joined #openstack-keystone | 10:03 | |
| *** EinstCrazy has quit IRC | 10:03 | |
| *** rmizuno has joined #openstack-keystone | 10:08 | |
| rmizuno | Hi, i have a question. | 10:15 |
| rmizuno | In my understanding ,reseller phase 2 will be implemented of the hierarchy of the projects acting as domain. | 10:16 |
| rmizuno | Will it be realized in newton? | 10:16 |
| *** srushti has quit IRC | 10:17 | |
| henrynash_ | rmizuno: no, I doubt it | 10:18 |
| henrynash_ | rmizuno: …and the reason is that in order to really do it securely, we need a few other things to drop into place, e.g. making sure that admin is scoped properly across all the services, and other things like https://review.openstack.org/#/c/310048 | 10:20 |
| *** yolanda has quit IRC | 10:22 | |
| *** yolanda has joined #openstack-keystone | 10:23 | |
| openstackgerrit | Mikhail Nikolaenko proposed openstack/keystone: Added app for policy enforcement https://review.openstack.org/317529 | 10:25 |
| rmizuno | I see. Is the implementation postponed after ocata? | 10:28 |
| *** wasmum has quit IRC | 10:44 | |
| *** rmizuno_ has joined #openstack-keystone | 10:45 | |
| *** rmizuno has quit IRC | 10:47 | |
| *** TxGVNN has quit IRC | 10:48 | |
| *** roxanaghe has joined #openstack-keystone | 10:52 | |
| openstackgerrit | Mikhail Nikolaenko proposed openstack/keystone-specs: Alternative policy enforcement https://review.openstack.org/323791 | 10:55 |
| *** roxanaghe has quit IRC | 10:56 | |
| *** alexander__ is now known as amakarov | 10:58 | |
| *** henrynash has quit IRC | 11:10 | |
| *** henrynash has joined #openstack-keystone | 11:12 | |
| *** ChanServ sets mode: +v henrynash | 11:12 | |
| *** henrynash has quit IRC | 11:12 | |
| *** raildo-afk is now known as raildo | 11:15 | |
| *** _amrith_ is now known as amrith | 11:27 | |
| *** dave-mccowan has joined #openstack-keystone | 11:27 | |
| *** TxGVNN has joined #openstack-keystone | 11:30 | |
| *** rodrigods has quit IRC | 11:32 | |
| *** rodrigods has joined #openstack-keystone | 11:32 | |
| *** gordc has joined #openstack-keystone | 11:32 | |
| *** links has quit IRC | 11:34 | |
| *** zqfan has quit IRC | 11:43 | |
| *** links has joined #openstack-keystone | 11:47 | |
| *** pnavarro is now known as pnavarro|lunch | 11:48 | |
| *** roxanaghe has joined #openstack-keystone | 11:53 | |
| *** roxanaghe has quit IRC | 11:58 | |
| *** wasmum has joined #openstack-keystone | 12:04 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystonemiddleware: Support local config options https://review.openstack.org/321882 | 12:05 |
| *** openstackgerrit has quit IRC | 12:18 | |
| *** openstackgerrit has joined #openstack-keystone | 12:18 | |
| samueldmq | raildo: hi, see my comment in patch 254436 | 12:19 |
| patchbot | samueldmq: https://review.openstack.org/#/c/254436/ - keystone - Adding role assignment lists unit tests | 12:19 |
| samueldmq | raildo: feel free to pick that up and submit the test for the negative case | 12:20 |
| *** eszhangzxy has joined #openstack-keystone | 12:23 | |
| *** markvoelker has joined #openstack-keystone | 12:24 | |
| *** zyxes has quit IRC | 12:26 | |
| *** pauloewerton has joined #openstack-keystone | 12:30 | |
| *** zqfan has joined #openstack-keystone | 12:30 | |
| *** henrynash has joined #openstack-keystone | 12:32 | |
| *** ChanServ sets mode: +v henrynash | 12:32 | |
| *** gcb has quit IRC | 12:35 | |
| samueldmq | stevemar: morning, about patch 322086, could you take a look at my comments, specially the one about keystone.conf.sample being copied as it is (rather than as keystone.conf) | 12:40 |
| patchbot | samueldmq: https://review.openstack.org/#/c/322086/ - keystone - Simplify & fix configuration file copy in setup.cfg | 12:40 |
| *** henrynash has quit IRC | 12:51 | |
| *** dave-mccowan has quit IRC | 12:52 | |
| *** roxanaghe has joined #openstack-keystone | 12:54 | |
| *** georgem1 has joined #openstack-keystone | 12:56 | |
| *** henrynash has joined #openstack-keystone | 12:57 | |
| *** ChanServ sets mode: +v henrynash | 12:57 | |
| *** roxanaghe has quit IRC | 12:58 | |
| *** richm has joined #openstack-keystone | 12:59 | |
| *** zyxes has joined #openstack-keystone | 13:07 | |
| *** dave-mccowan has joined #openstack-keystone | 13:07 | |
| *** eszhangzxy has quit IRC | 13:09 | |
| *** sdake has joined #openstack-keystone | 13:09 | |
| *** aurelien__ has quit IRC | 13:11 | |
| *** ayoung has joined #openstack-keystone | 13:12 | |
| *** ChanServ sets mode: +v ayoung | 13:12 | |
| *** aurelien__ has joined #openstack-keystone | 13:14 | |
| *** rderose has joined #openstack-keystone | 13:15 | |
| rderose | stevemar rodrigods lbragstad henrynash dstanek For shadowing LDAP users, I decided to break this up into two patches, one for the refactoring I was doing and the other for the new functionality. Unfortunately, I was having trouble doing this with git and ended just having to abandon the old patch and create new ones: | 13:23 |
| rderose | https://review.openstack.org/#/c/323602/ | 13:23 |
| rderose | I apologize for the inconvenience. I believe I've responded to all of your comments, however let me know if you have any questions. | 13:23 |
| patchbot | rderose: patch 323602 - keystone - Shadow LDAP and custom driver users | 13:23 |
| rodrigods | rderose, sure... will take a look tonight | 13:28 |
| rderose | rodrigods: cool, thx | 13:29 |
| *** sdake has quit IRC | 13:34 | |
| *** henrynash has quit IRC | 13:45 | |
| *** edmondsw has joined #openstack-keystone | 13:49 | |
| *** links has quit IRC | 13:52 | |
| *** gagehugo has joined #openstack-keystone | 13:52 | |
| *** roxanaghe has joined #openstack-keystone | 13:54 | |
| *** sdake has joined #openstack-keystone | 13:55 | |
| *** ametts has joined #openstack-keystone | 13:58 | |
| *** roxanaghe has quit IRC | 13:59 | |
| knikolla | morning! o/ | 14:02 |
| *** woodburn has quit IRC | 14:03 | |
| *** martinus__ has quit IRC | 14:04 | |
| *** BjoernT has joined #openstack-keystone | 14:08 | |
| *** dan_nguyen has joined #openstack-keystone | 14:10 | |
| *** aurelien__ has quit IRC | 14:12 | |
| lbragstad | o/ | 14:13 |
| *** pushkaru has joined #openstack-keystone | 14:24 | |
| *** d0ugal has quit IRC | 14:25 | |
| *** raddaoui has joined #openstack-keystone | 14:26 | |
| *** edtubill has joined #openstack-keystone | 14:28 | |
| andreaf | Hi - I have an issue with v3 credentials when used to get tokens from a v2 endpoint - someone familiar with that that could help me? | 14:28 |
| *** ametts has quit IRC | 14:28 | |
| andreaf | Using v3 pre-provisioned creds in a v2 run breaks a number of x-user tests in tempest, such as create server with one user and delete it with another one, which succeeds but it's not supposed to - the same test works fine when executed pure v2 or pure v3 | 14:29 |
| andreaf | but I don't understand why - so I'm looking for any hint that might help | 14:29 |
| *** jbell8 has joined #openstack-keystone | 14:33 | |
| *** d0ugal has joined #openstack-keystone | 14:35 | |
| *** dan_nguyen has quit IRC | 14:36 | |
| *** KevinE has joined #openstack-keystone | 14:36 | |
| *** aurelien__ has joined #openstack-keystone | 14:41 | |
| *** ametts has joined #openstack-keystone | 14:42 | |
| *** d0ugal has quit IRC | 14:48 | |
| *** mfisch has joined #openstack-keystone | 14:48 | |
| *** d0ugal has joined #openstack-keystone | 14:48 | |
| *** mfisch has quit IRC | 14:48 | |
| *** mfisch has joined #openstack-keystone | 14:48 | |
| *** d0ugal has quit IRC | 14:48 | |
| *** d0ugal has joined #openstack-keystone | 14:49 | |
| *** timcline has joined #openstack-keystone | 14:52 | |
| *** spandhe has joined #openstack-keystone | 14:53 | |
| *** diazjf has joined #openstack-keystone | 14:53 | |
| stevemar | samueldmq: for https://review.openstack.org/#/c/322086/3/setup.cfg are you referring to the logging and v3cloud policy being copied over? | 14:54 |
| patchbot | stevemar: patch 322086 - keystone - Simplify & fix configuration file copy in setup.cfg | 14:54 |
| *** roxanaghe has joined #openstack-keystone | 14:55 | |
| *** spandhe has quit IRC | 14:57 | |
| *** yolanda_ has joined #openstack-keystone | 14:58 | |
| *** jaosorior has quit IRC | 14:59 | |
| *** roxanaghe has quit IRC | 15:00 | |
| *** yolanda has quit IRC | 15:00 | |
| *** darosale has joined #openstack-keystone | 15:00 | |
| *** yolanda_ is now known as yolanda | 15:01 | |
| *** gagehugo has quit IRC | 15:01 | |
| samueldmq | stevemar: yes, and also keystone.conf.sample was copied as keystone.conf | 15:03 |
| samueldmq | stevemar: but with that patch it will be copied to /etc/keystone.conf.sample ; and consequently keystone server won't find /etc/keystone.conf | 15:04 |
| raildo | samueldmq: hey, sorry, I was afk. sure I'll do that :) | 15:04 |
| *** pcaruana has quit IRC | 15:04 | |
| samueldmq | raildo: sure, np; thanks | 15:04 |
| *** rcernin has quit IRC | 15:09 | |
| *** d0ugal has quit IRC | 15:10 | |
| *** diazjf has quit IRC | 15:10 | |
| *** d0ugal has joined #openstack-keystone | 15:12 | |
| *** diazjf has joined #openstack-keystone | 15:13 | |
| *** zyxes has quit IRC | 15:13 | |
| *** agrebennikov has joined #openstack-keystone | 15:14 | |
| *** yolanda_ has joined #openstack-keystone | 15:14 | |
| *** yolanda has quit IRC | 15:14 | |
| *** yolanda_ is now known as yolanda | 15:16 | |
| stevemar | samueldmq: alright, want to revert the suggestions to the previous patch set? | 15:18 |
| stevemar | looks like i was out voted on this one | 15:18 |
| *** aurelien__ has quit IRC | 15:18 | |
| *** tesseract has quit IRC | 15:18 | |
| notmorgan | stevemar: what were you out voted on? | 15:18 |
| *** aurelien__ has joined #openstack-keystone | 15:18 | |
| *** aurelien__ has quit IRC | 15:19 | |
| stevemar | notmorgan: https://review.openstack.org/#/c/322086/3 | 15:19 |
| patchbot | stevemar: patch 322086 - keystone - Simplify & fix configuration file copy in setup.cfg | 15:19 |
| *** aurelien__ has joined #openstack-keystone | 15:19 | |
| *** amrith is now known as _amrith_ | 15:23 | |
| *** dan_nguyen has joined #openstack-keystone | 15:24 | |
| *** jbell8 has quit IRC | 15:26 | |
| *** jbell8 has joined #openstack-keystone | 15:26 | |
| *** dan_nguyen has quit IRC | 15:30 | |
| *** diazjf has quit IRC | 15:32 | |
| *** permalac has joined #openstack-keystone | 15:32 | |
| permalac | hello guys. | 15:33 |
| permalac | I have the admin and swift password of a keystone I have to use to federate, but I do not know the tenantID. | 15:34 |
| permalac | is there any way to get the tenantID with just this? | 15:34 |
| *** TxGVNN has quit IRC | 15:35 | |
| samueldmq | stevemar: no worries. overall I don't think there is too much we can do in that patch | 15:39 |
| *** henrynash has joined #openstack-keystone | 15:40 | |
| *** ChanServ sets mode: +v henrynash | 15:40 | |
| samueldmq | stevemar: event the 1st patchset was removing the rename, which is necessary | 15:40 |
| samueldmq | notmorgan: have you looked at it ? what do you think ? | 15:40 |
| jlk | stevemar: thanks, I responded. | 15:40 |
| notmorgan | samueldmq: no i have not yet | 15:40 |
| samueldmq | stevemar: so the big issue was not with your suggesiton (include * in etc/keystoen), but what the patch does since the beggining :) | 15:42 |
| edmondsw | is there a way to tell the GET /v3/users API to return the response in pages of a given size, rather than all in one response? | 15:42 |
| notmorgan | edmondsw: pagination is a real issue with things bavked to ldap | 15:44 |
| notmorgan | basically, no not reliabky especially if you use ldap bexause ldap is weird | 15:44 |
| edmondsw | :( | 15:44 |
| notmorgan | the answer is "use filteroing" | 15:44 |
| *** diazjf has joined #openstack-keystone | 15:44 | |
| edmondsw | it's LDAP that I was thinking about | 15:44 |
| edmondsw | notmorgan what filtering? you mean in the conf? | 15:45 |
| edmondsw | group and user filter in the conf? | 15:45 |
| notmorgan | the issue is ldap queries are different order every time and you bave to maintain an acyice cursor to go tk the next page | 15:45 |
| notmorgan | it isnt strictky ordered like sql can be | 15:45 |
| edmondsw | yeah | 15:45 |
| notmorgan | fiktering on the query itself to users | 15:45 |
| edmondsw | notmorgan doesn't look like much filtering is supported there... just a) domain, b) usrename, c) enabled | 15:46 |
| edmondsw | or is the api documentation out of date there? | 15:46 |
| notmorgan | there are some query strings | 15:46 |
| notmorgan | but i need to get off the phone to really look | 15:46 |
| notmorgan | hard to do on this tiny screen | 15:47 |
| notmorgan | edmondsw: henrynash_ might know more off the top of his head | 15:47 |
| *** agrebennikov has quit IRC | 15:47 | |
| notmorgan | edmondsw: but in short pagination ux is hard to do right. we might have more luck once the rest of shadow users lands | 15:48 |
| henrynash | what;s the question? | 15:49 |
| edmondsw | tx | 15:49 |
| edmondsw | henrynash talking about filtering users... the API docs only say you can filter GET /v3/users by a) domain, b) username, c) enabled... are there more options? | 15:50 |
| edmondsw | henrynash or other ways to limit response sizes when you've got a lot of users in LDAP | 15:50 |
| edmondsw | e.g. set user and group filter in conf | 15:50 |
| edmondsw | and I see a list_limit conf setting that I haven't played with... looks like that will cause the list to be truncated if it goes over? | 15:51 |
| henrynash | edmondsw: yes, you can limit the number of entries being returned | 15:51 |
| *** _amrith_ is now known as amrith | 15:51 | |
| notmorgan | but that is just truncating | 15:52 |
| edmondsw | henrynash how? with list_limit conf setting, or is there an API query param? | 15:52 |
| henrynash | notmorganL : yes | 15:52 |
| henrynash | edmondsw: I *think* it;s just a config limit | 15:52 |
| notmorgan | henrynash: it is | 15:52 |
| notmorgan | the filtering qs is i think what edmondsw is looking for | 15:53 |
| edmondsw | is there any indication in the API response that it was truncated? | 15:53 |
| henrynash | edmondsw: yes, there is a “truncated” flag added to the collection | 15:53 |
| edmondsw | ok, tx for the info | 15:53 |
| *** jbell8 has quit IRC | 15:53 | |
| knikolla | stevemar: thanks for reviewing the devstack plugin. :) | 15:54 |
| *** tonytan4ever has joined #openstack-keystone | 15:54 | |
| *** sdake has quit IRC | 15:54 | |
| *** roxanaghe has joined #openstack-keystone | 15:55 | |
| *** KarthikB has joined #openstack-keystone | 16:01 | |
| *** woodster_ has joined #openstack-keystone | 16:02 | |
| *** GB21 has joined #openstack-keystone | 16:02 | |
| *** dan_nguyen has joined #openstack-keystone | 16:03 | |
| *** amilling has joined #openstack-keystone | 16:05 | |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: Devstack plugin for Federation https://review.openstack.org/320623 | 16:07 |
| *** gyee has joined #openstack-keystone | 16:09 | |
| *** ChanServ sets mode: +v gyee | 16:09 | |
| *** itisha has joined #openstack-keystone | 16:10 | |
| *** lucas__ has joined #openstack-keystone | 16:12 | |
| *** jbell8 has joined #openstack-keystone | 16:14 | |
| *** sdake has joined #openstack-keystone | 16:19 | |
| *** sdake has quit IRC | 16:23 | |
| *** nisha_ has joined #openstack-keystone | 16:23 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Config settings to support PCI-DSS https://review.openstack.org/314679 | 16:25 |
| *** pnavarro|lunch has quit IRC | 16:26 | |
| nisha_ | hey all! | 16:26 |
| *** amilling has quit IRC | 16:26 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Config settings to support PCI-DSS https://review.openstack.org/314679 | 16:27 |
| KevinE | I've got a question. For things like rally testing, there are all of the tests organized by keystone/authenticate/neutron etc. How do I make the call that I want to add a category (what are those called? Services?) and then put some tests in it | 16:29 |
| *** sdake has joined #openstack-keystone | 16:32 | |
| *** lhcheng has joined #openstack-keystone | 16:33 | |
| *** ChanServ sets mode: +v lhcheng | 16:33 | |
| *** amrith is now known as _amrith_ | 16:34 | |
| *** _amrith_ is now known as amrith | 16:35 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Config settings to support PCI-DSS https://review.openstack.org/314679 | 16:38 |
| *** GB21 has quit IRC | 16:39 | |
| *** spandhe has joined #openstack-keystone | 16:42 | |
| *** aurelien__ has quit IRC | 16:42 | |
| *** wasmum has quit IRC | 16:49 | |
| *** georgem1 has left #openstack-keystone | 16:49 | |
| *** diazjf has quit IRC | 16:52 | |
| *** diazjf has joined #openstack-keystone | 16:55 | |
| *** nisha__ has joined #openstack-keystone | 16:56 | |
| *** nisha_ has quit IRC | 16:56 | |
| *** GB21 has joined #openstack-keystone | 16:57 | |
| *** gyee has quit IRC | 16:58 | |
| *** diazjf has quit IRC | 16:58 | |
| *** links has joined #openstack-keystone | 17:02 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Config settings to support PCI-DSS https://review.openstack.org/314679 | 17:03 |
| amakarov | rderose, you must be hating me already, sorry for that :) | 17:07 |
| *** mou has quit IRC | 17:07 | |
| rderose | amakarov: no, not at all. I like improving things :) | 17:08 |
| amakarov | rderose, I'm writhing a patch based on this one right now :) | 17:09 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Config settings to support PCI-DSS https://review.openstack.org/314679 | 17:09 |
| rderose | amakarov: ah, nice :) | 17:10 |
| rderose | amakarov: just set the default to 1800 seconds | 17:10 |
| *** nisha__ is now known as nisha_ | 17:10 | |
| amakarov | rderose, great! +1 and I'll rebase on it in minutes! | 17:11 |
| rderose | amakarov: do you know if anyone is working on that keystone-coverage-db error? | 17:11 |
| *** tonytan4ever has quit IRC | 17:11 | |
| amakarov | rderose, no. wandering that too :) | 17:12 |
| rderose | amakarov: okay :) | 17:12 |
| *** nisha_ has quit IRC | 17:12 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: WIP/DNM Add failed auth attempts logic to meet PCI-DSS https://review.openstack.org/324029 | 17:16 |
| *** agrebennikov has joined #openstack-keystone | 17:17 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: WIP/DNM Add failed auth attempts logic to meet PCI-DSS https://review.openstack.org/324029 | 17:17 |
| amakarov | rderose, a draft for failed attempts ^ | 17:17 |
| amakarov | can you please review and comment on the concept? | 17:18 |
| rderose | amakarov: sure. in the middle of something now, but will look at this soon. | 17:18 |
| rderose | amakarov: and thank you for helping out with this | 17:18 |
| amakarov | rderose, It'll be really good to know I'm doing that in right place :) I'm introducing a new manager & driver there... | 17:20 |
| rderose | amakarov: okay. do we really need a driver for this? I mean, do we really see clients creating their own custom driver for auto lockout? | 17:21 |
| rderose | amakarov: I don't think so | 17:21 |
| rderose | amakarov: I think this should be like a library and only implemented in sql | 17:21 |
| rderose | amakarov: so you need a backend, I just don't think it needs to be implemented in a way that allows a custom driver. | 17:24 |
| rderose | amakarov: anyway, I'll take a closer look later and give you feedback. | 17:25 |
| *** pushkaru has quit IRC | 17:32 | |
| *** gagehugo has joined #openstack-keystone | 17:35 | |
| *** links has quit IRC | 17:36 | |
| *** wasmum has joined #openstack-keystone | 17:42 | |
| *** mvk has quit IRC | 17:48 | |
| *** tqtran has joined #openstack-keystone | 17:48 | |
| openstackgerrit | Merged openstack/keystoneauth: Updated from global requirements https://review.openstack.org/323893 | 17:50 |
| *** GB21 has quit IRC | 17:53 | |
| knikolla | rderose: quick question off the top of my head. account disabling when a password expires applies to the admin too? | 17:56 |
| rderose | knikolla: yes, it would apply to admins | 17:58 |
| *** notmorgan has quit IRC | 17:58 | |
| *** notmorgan has joined #openstack-keystone | 17:59 | |
| *** notmorgan has quit IRC | 17:59 | |
| *** notmorgan has joined #openstack-keystone | 17:59 | |
| *** notmorgan has quit IRC | 17:59 | |
| knikolla | rderose: so there exists a specific case where database surgery is required to unlock admins. | 18:00 |
| knikolla | rderose: in the case where no admin can do the unlocking. | 18:00 |
| knikolla | rderose: this was just a random thought. | 18:01 |
| bknudson | you could unlock the admin user but they'd just get locked again by the attacker | 18:01 |
| *** gagehugo has quit IRC | 18:01 | |
| rderose | knikolla: database surgery :) hmm... another admin would have to change the password. or, if all admin passwords were expired, then yeah, they would have to either change the password created_at date directly in the database | 18:03 |
| rderose | knikolla: or disable the password expires feature | 18:03 |
| *** tonytan4ever has joined #openstack-keystone | 18:04 | |
| knikolla | rderose: do you think it's worth handling this case with a keystone-manage command? i don't have any strong opinions | 18:05 |
| *** notmorgan has joined #openstack-keystone | 18:06 | |
| *** notmorgan has quit IRC | 18:06 | |
| *** notmorgan has joined #openstack-keystone | 18:06 | |
| rderose | knikolla bknudson: sorry, I thought you were talking about user failing auth due to passwords expiring | 18:06 |
| rderose | knikolla bknudson: we could add a feature to allow an admin to unlock a user, this might require a new API | 18:08 |
| rderose | knikolla: maybe... | 18:09 |
| rderose | knikolla: amakarov is working on this feature: #link https://review.openstack.org/#/c/324029/ | 18:10 |
| patchbot | rderose: patch 324029 - keystone - WIP/DNM Add failed auth attempts logic to meet PCI... | 18:10 |
| *** pushkaru has joined #openstack-keystone | 18:11 | |
| *** neophy has joined #openstack-keystone | 18:11 | |
| rderose | knikolla: but it's good point, we'll need a way for admins to unlock users | 18:11 |
| *** notmorgan has quit IRC | 18:12 | |
| *** notmorgan has joined #openstack-keystone | 18:13 | |
| *** diazjf has joined #openstack-keystone | 18:13 | |
| knikolla | rderose: i'm not sure of any implementation that would prevent abuse of the lockout feature on failed attempts (as bknudson said). so i was talking about expiring password which seems a more solveable issue. :P | 18:13 |
| *** roxanaghe has quit IRC | 18:13 | |
| rderose | knikolla: :) | 18:14 |
| *** roxanaghe has joined #openstack-keystone | 18:17 | |
| rderose | knikolla: so yeah, if all admin passwords were expired, they could disable the password expires feature or hack into the db | 18:17 |
| rderose | knikolla: not a very eloquent way of dealing with it; open to suggestions :) | 18:18 |
| knikolla | rderose: suggestions range from: one sentence in the docs about this case and encouraging people to change admin passwords (even service account for orchestration engines), to a keystone-manage cli command to reset the date or set a new password for an account. | 18:22 |
| rderose | knikolla: I like the keystone-manage cli idea | 18:24 |
| rderose | knikolla: I think we do want service account passwords to expire for some use cases, but we may want an option to filter these out so that service account passwords don't expire | 18:25 |
| *** rdo has quit IRC | 18:26 | |
| *** pushkaru has quit IRC | 18:28 | |
| knikolla | rderose: i think i'm against filtering. | 18:28 |
| rderose | knikolla: why? | 18:29 |
| rderose | knikolla: service accounts don't expire today | 18:29 |
| openstackgerrit | Merged openstack/oslo.policy: Updated from global requirements https://review.openstack.org/323909 | 18:30 |
| knikolla | rderose: sorry, i forgot to clarify. by service accounts i meant puppet,ansible and credentials people may use in their orchestration engines. i agree that nova/cinder/etc. shouldn't require enforcing. | 18:32 |
| rderose | knikolla: I see | 18:32 |
| knikolla | rderose: how will we identity the accounts which don't require enforcing? I don't think there is anything that sets them apart today? | 18:33 |
| stevemar | rderose: i'm wondering if we should have a list of user ids that aren't subject to compliance? | 18:34 |
| *** darosale has quit IRC | 18:34 | |
| stevemar | rderose: random thought while i was out for a walk | 18:34 |
| knikolla | stevemar: that's what i was thinking too. | 18:34 |
| stevemar | knikolla: it's not a pretty solution, but it'll work | 18:35 |
| rderose | knikolla stevemar: currently, we don't have a way to set them apart. a list of user ids would be an option because you could add your service accounts, as well as specific admin accounts | 18:35 |
| openstackgerrit | Merged openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/323917 | 18:36 |
| rderose | knikolla stevemar: let me give it some thought, but I kind of like it :) | 18:36 |
| knikolla | stevemar: it's actually quite elegant. it's explicit and requires no other assumptions. | 18:37 |
| *** rdo has joined #openstack-keystone | 18:39 | |
| *** mvk has joined #openstack-keystone | 18:39 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone-specs: Mapping shadow users into projects and roles https://review.openstack.org/324055 | 18:40 |
| knikolla | will be impossible to prepopulate though, as the id will be different across installations. | 18:40 |
| knikolla | so will require some kind of script | 18:40 |
| lbragstad | rderose amakarov see dolphm's spec ^ | 18:43 |
| lbragstad | amakarov that is the spec dolphm owes you from yesterday's meeting :) | 18:44 |
| *** mvk_ has joined #openstack-keystone | 18:44 | |
| rderose | lbragstad: ++ | 18:44 |
| *** lucas__ has quit IRC | 18:46 | |
| *** lucas__ has joined #openstack-keystone | 18:47 | |
| *** mvk has quit IRC | 18:48 | |
| *** lucas__ has quit IRC | 18:48 | |
| *** mvk has joined #openstack-keystone | 18:48 | |
| *** mvk_ has quit IRC | 18:48 | |
| *** lucas__ has joined #openstack-keystone | 18:50 | |
| *** timcline has quit IRC | 18:51 | |
| *** lucas__ has quit IRC | 18:51 | |
| lhcheng | exit | 18:51 |
| *** lucas__ has joined #openstack-keystone | 18:51 | |
| lhcheng | sorry, wrong window :) | 18:51 |
| *** timcline has joined #openstack-keystone | 18:51 | |
| *** mvk_ has joined #openstack-keystone | 18:52 | |
| *** lucas__ has quit IRC | 18:55 | |
| *** timcline has quit IRC | 18:56 | |
| *** mvk has quit IRC | 18:56 | |
| *** lucas__ has joined #openstack-keystone | 18:59 | |
| *** tqtran has quit IRC | 19:00 | |
| *** tonytan4ever has quit IRC | 19:00 | |
| *** tqtran has joined #openstack-keystone | 19:00 | |
| *** diazjf has quit IRC | 19:02 | |
| *** ebalduf_ has joined #openstack-keystone | 19:03 | |
| *** diazjf has joined #openstack-keystone | 19:03 | |
| *** lucas__ has quit IRC | 19:04 | |
| KevinE | agrebennikov: hello! | 19:04 |
| agrebennikov | hi there | 19:04 |
| KevinE | I'm getting an error in the formatting of this Json but I don't know enough to fix it. Can anyone take a look it's small http://pastebin.com/RCqXuCq3 | 19:06 |
| bknudson | KevinE: https://jsonformatter.curiousconcept.com/ might hlep | 19:07 |
| bknudson | help | 19:07 |
| *** timcline has joined #openstack-keystone | 19:07 | |
| KevinE | Yeah I can see where the error is, between the true and the }, but I just don't know what it wants me to do to fix it | 19:08 |
| bknudson | KevinE: remove the trailing , | 19:08 |
| KevinE | oh okay easy, thanks! Also is there any difference between True and true? | 19:09 |
| bknudson | KevinE: here's the spec for JSON: http://www.json.org/ | 19:09 |
| bknudson | True is not valid JSON | 19:09 |
| KevinE | bknudson: great thanks for your help | 19:10 |
| *** lucas__ has joined #openstack-keystone | 19:13 | |
| *** spzala has joined #openstack-keystone | 19:17 | |
| *** clenimar has joined #openstack-keystone | 19:17 | |
| *** jaugustine has joined #openstack-keystone | 19:26 | |
| *** permalac has quit IRC | 19:30 | |
| *** zqfan has quit IRC | 19:33 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Simplify & fix configuration file copy in setup.cfg https://review.openstack.org/322086 | 19:33 |
| lbragstad | rderose around? | 19:34 |
| rderose | lbragstad: yeah, what's up | 19:34 |
| lbragstad | quick question on https://review.openstack.org/#/c/284943/45 | 19:35 |
| patchbot | lbragstad: patch 284943 - keystone - Concrete role assignments for federated users | 19:35 |
| lbragstad | we previously supported the ability to use groups for role assignment for federated users | 19:35 |
| lbragstad | we are going to deprecate that in favor or always having concrete role assignments on shadowed users, right? | 19:36 |
| rderose | lbragstad: no, we'll support both, but relax the requirement that a federated user has to be mapped to a group | 19:37 |
| dolphm | lbragstad: why would we need to deprecate it? | 19:38 |
| lbragstad | I was hoping to get rid of https://github.com/openstack/keystone/blob/c90c525aacfb8a46677673d735a1dfec3f9e9c20/keystone/token/providers/fernet/core.py#L84-L137 | 19:38 |
| lbragstad | but if we are going to support role assignment via groups moving forward - then those methods will have to remain in place in order for Fernet to fill that requirement | 19:39 |
| lbragstad | which is fine - it was just something I thought about as i was review rderose's patch | 19:39 |
| notmorgan | lbragstad: or dolphm ping (testing something in my irc setup) | 19:39 |
| dolphm | notmorgan: pong | 19:39 |
| lbragstad | notmorgan pong | 19:39 |
| lbragstad | o/ | 19:39 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone-specs: Mapping shadow users into projects and roles https://review.openstack.org/324055 | 19:40 |
| notmorgan | hmm ok bell isnt working. will fix soon | 19:40 |
| rderose | lbragstad: we'll drop support for "federated" tokens | 19:40 |
| notmorgan | but for android users: juicessh (mosh protocol) + tmux + weechat, is pretty good | 19:40 |
| lbragstad | rderose hmmmm in order for fernet tokens to work for groups and federation the group ids need to be packed into the fernet payload | 19:41 |
| rderose | lbragstad: I didn't say it was going to be easy :) | 19:42 |
| lbragstad | rderose hah i was looking for easy | 19:42 |
| rderose | lbragstad: yeah, I don't the impact yet, but that is part of the spec to drop support for federated tokens | 19:42 |
| lbragstad | as in not support group membership :) | 19:42 |
| *** lucas__ has quit IRC | 19:45 | |
| rderose | lbragstad: as in removing the group ids from the unscoped token | 19:45 |
| *** sheel has quit IRC | 19:45 | |
| lbragstad | rderose ah - i see what you mean | 19:46 |
| *** dave-mccowan has quit IRC | 19:46 | |
| lbragstad | rderose i'm thinking about removing the Federated payload from the Fernet provider (i.e. getting rid of the fernet token bloat problem) | 19:46 |
| lbragstad | rderose what's the reason for this guy being WIP? https://review.openstack.org/#/c/296639/ | 19:48 |
| patchbot | lbragstad: patch 296639 - keystone - WIP - Drop EPHEMERAL user type | 19:48 |
| *** lucas__ has joined #openstack-keystone | 19:48 | |
| lbragstad | is it waiting for other changes to land first? | 19:48 |
| rderose | lbragstad: I started this, but then did sort of reset as it was changing the API. So I'm sort of backtracking and thinking that this will be some refactoring; trying to get to treating federated users like any other user | 19:50 |
| rderose | lbragstad: but been caught up in the PCI stuff | 19:50 |
| rderose | lbragstad: no, it's not dependent on any other patches | 19:51 |
| lbragstad | rderose gotcah | 19:51 |
| rderose | lbragstad: this one is ready :) #link https://review.openstack.org/#/c/320156/ | 19:53 |
| patchbot | rderose: patch 320156 - keystone - PCI-DSS Change password requirements | 19:53 |
| lbragstad | rderose sweet - it's on deck | 19:53 |
| lbragstad | i'll review it next | 19:53 |
| rderose | lbragstad: cool | 19:53 |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Drop Support for Driver Versioning https://review.openstack.org/324081 | 19:57 |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Drop Support for Driver Versioning https://review.openstack.org/324081 | 20:00 |
| *** dave-mccowan has joined #openstack-keystone | 20:04 | |
| *** david-lyle has joined #openstack-keystone | 20:05 | |
| SamYaple | are subdomains implemented in keystone? I thought they were but this code disagrees... https://github.com/openstack/keystone/blob/master/keystone/resource/core.py#L107-110 | 20:06 |
| *** joaotargino has joined #openstack-keystone | 20:07 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Drop Support for Driver Versioning https://review.openstack.org/324081 | 20:09 |
| *** diazjf has quit IRC | 20:10 | |
| *** diazjf has joined #openstack-keystone | 20:10 | |
| *** joaotargino has quit IRC | 20:11 | |
| *** joaotargino has joined #openstack-keystone | 20:12 | |
| *** lucas__ has quit IRC | 20:24 | |
| *** roxanaghe has quit IRC | 20:26 | |
| *** roxanaghe has joined #openstack-keystone | 20:26 | |
| *** pushkaru has joined #openstack-keystone | 20:28 | |
| *** tonytan4ever has joined #openstack-keystone | 20:34 | |
| dolphm | before i go dig too deep, anyone know if keystoneclient / keystoneauth request content compression (like accept-encoding: gzip) in requests to keystone? | 20:37 |
| *** spzala has quit IRC | 20:43 | |
| *** sdake has quit IRC | 20:49 | |
| *** david-lyle has quit IRC | 20:51 | |
| *** iurygregory has quit IRC | 20:51 | |
| *** neophy has quit IRC | 20:52 | |
| openstackgerrit | werner mendizabal proposed openstack/keystone: Support encryption of credentials in Keystone https://review.openstack.org/317169 | 20:53 |
| *** neophy has joined #openstack-keystone | 20:53 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Drop Support for Driver Versioning https://review.openstack.org/324081 | 20:53 |
| *** ayoung has quit IRC | 20:55 | |
| openstackgerrit | Roxana Gherle proposed openstack/keystone: Return 404 instead of 401 for tokens w/o roles https://review.openstack.org/322280 | 20:59 |
| *** julim has quit IRC | 21:00 | |
| openstackgerrit | Roxana Gherle proposed openstack/keystone: Return 404 instead of 401 for tokens w/o roles https://review.openstack.org/322280 | 21:01 |
| *** david-lyle has joined #openstack-keystone | 21:01 | |
| *** raildo is now known as raildo-afk | 21:03 | |
| *** diazjf has quit IRC | 21:05 | |
| *** neophy has quit IRC | 21:05 | |
| *** diazjf has joined #openstack-keystone | 21:06 | |
| *** jbell8 has quit IRC | 21:06 | |
| henrynash | dolphm: hi | 21:11 |
| *** jaugustine has quit IRC | 21:12 | |
| *** pushkaru has quit IRC | 21:18 | |
| notmorgan | dolphm: afaik it doesn't support that yet(now). | 21:24 |
| notmorgan | dolphm: i'd totally be for adding that | 21:24 |
| *** jbell8 has joined #openstack-keystone | 21:31 | |
| *** pauloewerton has quit IRC | 21:32 | |
| *** KarthikB has quit IRC | 21:34 | |
| *** KarthikB has joined #openstack-keystone | 21:37 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Drop Support for Driver Versioning https://review.openstack.org/324081 | 21:40 |
| *** KarthikB has quit IRC | 21:41 | |
| stevemar | rderose: yay for rm driver versioning! | 21:44 |
| *** brad_behle has joined #openstack-keystone | 21:44 | |
| rderose | stevemar: ++ | 21:44 |
| stevemar | rderose: it's become burdensome | 21:45 |
| rodrigods | +1000 | 21:45 |
| rderose | stevemar: yeah, totally. I just don't like the approach and wonder if it's actually helping anyone | 21:45 |
| stevemar | rderose: yeah, i really question it's usefulness *shrugs* | 21:46 |
| *** edmondsw has quit IRC | 21:50 | |
| *** sdake has joined #openstack-keystone | 21:50 | |
| *** jbell8 has quit IRC | 21:53 | |
| lhcheng | stevemar: did operators found it not useful? or no feedback at all? | 21:56 |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Drop Support for Driver Versioning https://review.openstack.org/324081 | 21:57 |
| *** henrynash has quit IRC | 21:58 | |
| *** sdake_ has joined #openstack-keystone | 22:01 | |
| *** david-lyle has quit IRC | 22:01 | |
| rderose | lhcheng: see Dolph's comment #link https://review.openstack.org/#/c/324081/ | 22:01 |
| patchbot | rderose: patch 324081 - keystone-specs - Drop Support for Driver Versioning | 22:01 |
| *** sdake has quit IRC | 22:03 | |
| *** KevinE_ has joined #openstack-keystone | 22:04 | |
| *** KevinE_ has quit IRC | 22:05 | |
| *** JayF has left #openstack-keystone | 22:08 | |
| *** KevinE has quit IRC | 22:08 | |
| *** diazjf has quit IRC | 22:09 | |
| *** ebalduf_ has quit IRC | 22:10 | |
| *** tonytan4ever has quit IRC | 22:11 | |
| *** edtubill has quit IRC | 22:12 | |
| *** KarthikB has joined #openstack-keystone | 22:15 | |
| *** david-lyle has joined #openstack-keystone | 22:16 | |
| *** KarthikB has quit IRC | 22:18 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Drop Support for Driver Versioning https://review.openstack.org/324081 | 22:18 |
| *** KarthikB has joined #openstack-keystone | 22:19 | |
| jamielennox | dolphm: it will default to whatever requests does, but you can pass that through headers if you need it somewhere | 22:20 |
| *** sdake_ has quit IRC | 22:21 | |
| rderose | amakarov: I didn't get a chance to review your patch today, I'll do it first thing tomorrow morning (San Antonio time that is) :) | 22:23 |
| lhcheng | rderose: interesting, thanks! | 22:27 |
| rderose | lhcheng: np | 22:29 |
| *** ametts has quit IRC | 22:30 | |
| *** sdake has joined #openstack-keystone | 22:31 | |
| *** darrenc is now known as darrenc_afk | 22:32 | |
| *** darrenc_afk is now known as darrenc | 22:39 | |
| *** jbell8 has joined #openstack-keystone | 22:39 | |
| *** jbell8 has quit IRC | 22:43 | |
| *** jbell8 has joined #openstack-keystone | 22:45 | |
| *** timcline has quit IRC | 22:48 | |
| *** timcline has joined #openstack-keystone | 22:49 | |
| *** timcline has quit IRC | 22:53 | |
| *** iurygregory has joined #openstack-keystone | 23:00 | |
| *** KarthikB has quit IRC | 23:01 | |
| *** roxanaghe has quit IRC | 23:03 | |
| *** tqtran has quit IRC | 23:03 | |
| *** roxanaghe has joined #openstack-keystone | 23:10 | |
| *** zqfan has joined #openstack-keystone | 23:16 | |
| notmorgan | stevemar: it was far more useful/important when we had many folks doing custom drivers | 23:16 |
| notmorgan | stevemar: it seems that we have reduced that number by existing longer than the BUs doing custom backend drivers. | 23:16 |
| notmorgan | lhcheng: operators *cough* HP *cough* found it useful | 23:17 |
| lhcheng | notmorgan: lol I have the same *cough* :P | 23:19 |
| lhcheng | added guang in the patch | 23:19 |
| *** roxanaghe has quit IRC | 23:25 | |
| openstackgerrit | Merged openstack/keystone: Add .mo files to MANIFEST.in https://review.openstack.org/318527 | 23:29 |
| *** roxanaghe has joined #openstack-keystone | 23:33 | |
| *** roxanaghe has quit IRC | 23:33 | |
| *** gordc has quit IRC | 23:33 | |
| jamielennox | didn't we only just do versioned drivers? | 23:43 |
| bknudson | jamielennox: we've had versioned drivers for a couple of releases | 23:44 |
| jamielennox | a couple now? ok | 23:44 |
| notmorgan | jamielennox: yeah since... kilo? | 23:45 |
| notmorgan | jamielennox: i think. | 23:45 |
| jamielennox | yea, i guess that sounds right, just still felt kind of new to be killing it :) | 23:46 |
| notmorgan | jamielennox: well if it isn't providing value *shrug* | 23:46 |
| jamielennox | oh, yea, if no one wants them scrap it | 23:47 |
| bknudson | who was asking for it to begin with? | 23:47 |
| bknudson | it's part of keystone's interface so seems like it should be stable just like other interfaces | 23:47 |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/323894 | 23:51 |
| *** afazekas has quit IRC | 23:52 | |
| *** agrebennikov has quit IRC | 23:53 | |
| *** sdake_ has joined #openstack-keystone | 23:54 | |
| *** afazekas has joined #openstack-keystone | 23:56 | |
| stevemar | jamielennox: oh, you gonna tag a keystone release? | 23:57 |
| jamielennox | stevemar: i have had no contact from people on that | 23:58 |
| jamielennox | when's it due? | 23:58 |
| *** sdake has quit IRC | 23:58 | |
| stevemar | jamielennox: it's this week, bunch of other projects have already tagged stuff: https://review.openstack.org/#/q/project:openstack/releases | 23:58 |
| *** david-lyle has quit IRC | 23:59 | |
| * jamielennox failing like the only job | 23:59 | |
| stevemar | jamielennox: i meant to bug you about that earlier... :P | 23:59 |
| stevemar | hehe | 23:59 |
| stevemar | no worries | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!