Friday, 2016-07-01

*** fangxu has joined #openstack-keystone00:00
*** fangxu has quit IRC00:06
*** thumpba has joined #openstack-keystone00:07
*** sdake has joined #openstack-keystone00:09
*** catintheroof has joined #openstack-keystone00:13
*** sdake_ has joined #openstack-keystone00:16
*** sdake has quit IRC00:19
*** markvoelker has joined #openstack-keystone00:22
*** fangxu has joined #openstack-keystone00:22
*** ddieterly has joined #openstack-keystone00:24
*** code-R_ has quit IRC00:26
*** browne has quit IRC00:26
*** markvoelker has quit IRC00:27
*** itisha has quit IRC00:30
*** thumpba has quit IRC00:31
*** nkinder has joined #openstack-keystone00:32
*** aastha has joined #openstack-keystone00:35
aasthaCan someone assist me with this error I got while trying to ssh into my instance. nc: getaddrinfo: nodename nor servname provided, or not known00:36
aasthassh_exchange_identification: Connection closed by remote host00:36
*** dan_nguyen has quit IRC00:37
*** ddieterly has quit IRC00:41
*** lamt has quit IRC00:41
*** dan_nguyen has joined #openstack-keystone00:42
*** woodster_ has quit IRC00:49
*** nkinder has quit IRC00:49
*** code-R has joined #openstack-keystone00:49
*** nkinder has joined #openstack-keystone00:50
*** dan_nguyen has quit IRC00:50
openstackgerritSam Leong proposed openstack/keystoneauth: Auth plugin for X.509 tokenless authentication  https://review.openstack.org/28390500:51
*** rcernin has quit IRC00:55
*** spandhe has joined #openstack-keystone01:04
*** chlong has quit IRC01:06
*** tqtran_ has quit IRC01:07
*** sdake_ has quit IRC01:13
openstackgerritRon De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs  https://review.openstack.org/33631801:19
*** EinstCrazy has joined #openstack-keystone01:22
*** julim has quit IRC01:26
*** hoonetorg has joined #openstack-keystone01:32
*** iurygregory is now known as 18WABBNQ201:36
*** iurygregory has joined #openstack-keystone01:36
*** mkoderer__ has joined #openstack-keystone01:36
*** ianw has joined #openstack-keystone01:36
*** ddieterly has joined #openstack-keystone01:38
*** wangqun has joined #openstack-keystone01:38
*** sdake has joined #openstack-keystone01:40
*** 18WABBNQ2 is now known as iurygregory_01:41
*** ddieterly has quit IRC01:43
*** nkinder has quit IRC01:55
*** ddieterly has joined #openstack-keystone01:57
*** EinstCra_ has joined #openstack-keystone02:02
*** EinstCrazy has quit IRC02:05
*** fangxu has quit IRC02:08
*** sdake has quit IRC02:12
*** GB21 has joined #openstack-keystone02:15
*** EinstCra_ has quit IRC02:23
*** EinstCrazy has joined #openstack-keystone02:24
*** markvoelker has joined #openstack-keystone02:24
*** spandhe has quit IRC02:27
*** markvoelker has quit IRC02:28
*** ddieterly has quit IRC02:29
*** chrisshattuck has quit IRC02:33
*** chlong has joined #openstack-keystone02:34
*** chrisshattuck has joined #openstack-keystone02:34
*** GB21 has quit IRC02:42
*** sheel has joined #openstack-keystone02:54
*** catintheroof has quit IRC03:00
*** gyee has quit IRC03:00
*** jamielennox is now known as jamielennox|away03:03
*** TxGVNN has joined #openstack-keystone03:14
*** iurygregory_ has quit IRC03:15
*** wangqun has quit IRC03:19
openstackgerritAndrew Liu proposed openstack/keystone: Added cache for id mapping manager  https://review.openstack.org/32882003:22
*** gsilvis has quit IRC03:24
*** markvoelker has joined #openstack-keystone03:25
*** gsilvis has joined #openstack-keystone03:25
*** links has joined #openstack-keystone03:26
*** markvoelker has quit IRC03:29
*** jamielennox|away is now known as jamielennox03:31
jamielennoxwait - when you get list a project with subprojects each element of the subtree list is of the format {'project': {...}}03:32
jamielennoxwhy....03:32
*** chlong has quit IRC03:34
openstackgerritMerged openstack/oslo.policy: Updated from global requirements  https://review.openstack.org/33621703:36
*** fangxu has joined #openstack-keystone03:38
*** M00nr41n has joined #openstack-keystone03:47
*** M00nr41n has quit IRC03:51
*** M00nr41n has joined #openstack-keystone03:53
*** M00nr41n has quit IRC04:04
*** tqtran has joined #openstack-keystone04:05
*** M00nr41n has joined #openstack-keystone04:06
*** imcsk8 has quit IRC04:10
*** imcsk8 has joined #openstack-keystone04:10
*** tqtran has quit IRC04:10
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/33618204:19
openstackgerritJamie Lennox proposed openstack/keystone: Implement Views and convert credentials  https://review.openstack.org/33542304:23
openstackgerritJamie Lennox proposed openstack/keystone: Implement a whole bunch of views  https://review.openstack.org/33635704:23
openstackgerritOpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/33623004:24
*** markvoelker has joined #openstack-keystone04:25
*** markvoelker has quit IRC04:30
*** fangxu has quit IRC04:45
*** EinstCrazy has quit IRC04:50
*** EinstCrazy has joined #openstack-keystone04:50
*** M00nr41n has quit IRC04:58
*** fangxu has joined #openstack-keystone05:02
*** ayoung has quit IRC05:09
openstackgerritJamie Lennox proposed openstack/keystone: Implement Views and convert credentials  https://review.openstack.org/33542305:11
openstackgerritJamie Lennox proposed openstack/keystone: Implement a whole bunch of views  https://review.openstack.org/33635705:11
*** imcsk8 has quit IRC05:13
*** imcsk8 has joined #openstack-keystone05:14
*** chlong has joined #openstack-keystone05:15
*** chrisshattuck has quit IRC05:15
*** ianw is now known as ianw_pto05:19
*** markvoelker has joined #openstack-keystone05:26
*** markvoelker has quit IRC05:31
*** fangxu has quit IRC05:32
*** EinstCra_ has joined #openstack-keystone05:32
*** EinstCrazy has quit IRC05:35
*** richm has quit IRC05:38
*** M00nr41n has joined #openstack-keystone05:53
*** tqtran has joined #openstack-keystone05:58
*** tqtran has quit IRC06:03
*** fawadkhaliq has joined #openstack-keystone06:03
*** fawadkhaliq has quit IRC06:09
*** EinstCra_ has quit IRC06:10
*** fawadkhaliq has joined #openstack-keystone06:10
*** EinstCrazy has joined #openstack-keystone06:16
*** reedip has quit IRC06:20
*** browne has joined #openstack-keystone06:24
*** code-R has quit IRC06:24
*** code-R has joined #openstack-keystone06:25
*** markvoelker has joined #openstack-keystone06:27
*** rcernin has joined #openstack-keystone06:29
*** markvoelker has quit IRC06:32
*** jed56 has joined #openstack-keystone06:54
*** pcaruana has joined #openstack-keystone06:57
*** tesseract- has joined #openstack-keystone07:02
openstackgerritJamie Lennox proposed openstack/keystone: Implement Views and convert credentials  https://review.openstack.org/33542307:03
openstackgerritJamie Lennox proposed openstack/keystone: Implement a whole bunch of views  https://review.openstack.org/33635707:03
*** imcsk8 has quit IRC07:03
*** imcsk8 has joined #openstack-keystone07:04
*** belmoreira has joined #openstack-keystone07:05
*** imcsk8 has quit IRC07:07
*** belmoreira has quit IRC07:07
*** imcsk8 has joined #openstack-keystone07:09
*** belmoreira has joined #openstack-keystone07:09
*** jpena|off is now known as jpena07:09
openstackgerritAndrew Liu proposed openstack/keystone: Added cache for id mapping manager  https://review.openstack.org/32882007:10
*** chlong has quit IRC07:23
*** markvoelker has joined #openstack-keystone07:28
openstackgerritSam Morrison proposed openstack/keystone: Handle catalog backends that don't support all functions.  https://review.openstack.org/33640007:28
*** markvoelker has quit IRC07:32
*** openstackgerrit has quit IRC07:33
*** openstackgerrit has joined #openstack-keystone07:33
*** rvba has joined #openstack-keystone07:41
*** rvba has quit IRC07:41
*** rvba has joined #openstack-keystone07:41
*** browne has quit IRC07:44
*** fawadkhaliq has quit IRC07:44
*** amoralej|off is now known as amoralej07:48
*** imcsk8 has quit IRC07:54
*** imcsk8 has joined #openstack-keystone07:54
*** rcernin has quit IRC07:57
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
*** imcsk8 has quit IRC08:06
*** imcsk8 has joined #openstack-keystone08:06
*** spandhe has joined #openstack-keystone08:10
*** imcsk8 has quit IRC08:10
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843508:10
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843508:10
*** imcsk8 has joined #openstack-keystone08:11
*** rcernin has joined #openstack-keystone08:11
*** openstackgerrit has quit IRC08:18
*** openstackgerrit has joined #openstack-keystone08:18
*** pnavarro has joined #openstack-keystone08:19
*** spandhe has quit IRC08:35
*** janonymous has quit IRC08:41
openstackgerritDave Chen proposed openstack/keystone: Return `revoked_at` for list revoke events  https://review.openstack.org/33643909:00
johnthetubaguydolphm: hmm, not sure, I think all our cmd entry points import the mega CONF object. I haven't seen those issues come up, but then we don't really have tests that would expose that.09:01
*** rmizuno has quit IRC09:06
*** EinstCra_ has joined #openstack-keystone09:09
*** EinstCrazy has quit IRC09:13
openstackgerritAndrew Liu proposed openstack/keystone: Added cache for id mapping manager  https://review.openstack.org/32882009:14
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: deprecate grant_type argument  https://review.openstack.org/33046509:15
*** sheel has quit IRC09:25
*** markvoelker has joined #openstack-keystone09:29
*** fawadkhaliq has joined #openstack-keystone09:30
*** fawadkhaliq has quit IRC09:30
*** markvoelker has quit IRC09:34
*** yolanda has quit IRC09:38
*** EinstCra_ has quit IRC09:38
*** yolanda has joined #openstack-keystone09:38
*** EinstCrazy has joined #openstack-keystone09:38
*** david-lyle has quit IRC09:45
*** fawadkhaliq has joined #openstack-keystone09:46
*** yolanda has quit IRC09:47
*** yolanda has joined #openstack-keystone09:49
*** TxGVNN has quit IRC09:53
*** TxGVNN has joined #openstack-keystone09:54
*** david-lyle has joined #openstack-keystone09:59
*** EinstCrazy has quit IRC10:01
*** tqtran has joined #openstack-keystone10:01
*** yolanda has quit IRC10:05
*** tqtran has quit IRC10:05
*** yolanda has joined #openstack-keystone10:06
*** richm has joined #openstack-keystone10:08
*** rcernin has quit IRC10:10
*** henrynash has quit IRC10:12
*** zqfan has quit IRC10:13
*** fawadkhaliq has quit IRC10:22
openstackgerritMerged openstack/keystone: Do not register options on import  https://review.openstack.org/33626810:22
*** fawadkhaliq has joined #openstack-keystone10:23
*** rcernin has joined #openstack-keystone10:23
*** fawadkhaliq has quit IRC10:28
*** fawadkhaliq has joined #openstack-keystone10:29
*** markvoelker has joined #openstack-keystone10:30
*** ntpttr has quit IRC10:33
*** markvoelker has quit IRC10:35
*** jed56 has quit IRC10:35
*** fawadkhaliq has quit IRC10:35
*** fawadkhaliq has joined #openstack-keystone10:37
*** baffle has quit IRC10:39
*** baffle has joined #openstack-keystone10:40
*** fawadkhaliq has quit IRC10:40
*** fawadkhaliq has joined #openstack-keystone10:40
*** fawadk has joined #openstack-keystone10:46
*** fawadkhaliq has quit IRC10:47
*** fawadk has quit IRC10:47
*** fawadkhaliq has joined #openstack-keystone10:47
*** ntpttr has joined #openstack-keystone10:48
*** sdake has joined #openstack-keystone10:51
*** nisha has joined #openstack-keystone10:52
*** fawadk has joined #openstack-keystone10:52
*** fawadkhaliq has quit IRC10:52
*** sdake_ has joined #openstack-keystone10:54
*** sdake has quit IRC10:56
*** yolanda has quit IRC10:57
*** sdake_ has quit IRC10:57
*** fawadkhaliq has joined #openstack-keystone10:58
*** fawadk has quit IRC10:59
*** henrynash has joined #openstack-keystone11:00
*** ChanServ sets mode: +v henrynash11:00
*** sdake has joined #openstack-keystone11:04
*** sdake has quit IRC11:04
*** fawadkhaliq has quit IRC11:05
*** fawadkhaliq has joined #openstack-keystone11:05
*** sdake has joined #openstack-keystone11:07
*** fawadk has joined #openstack-keystone11:07
*** fawadkhaliq has quit IRC11:08
*** fawadkhaliq has joined #openstack-keystone11:11
*** fawadk has quit IRC11:12
*** fawadkhaliq has quit IRC11:12
*** fawadkhaliq has joined #openstack-keystone11:12
*** fawadkhaliq has quit IRC11:14
*** yolanda has joined #openstack-keystone11:14
*** fawadkhaliq has joined #openstack-keystone11:15
*** yolanda has quit IRC11:17
*** fawadkhaliq has quit IRC11:18
*** fawadkhaliq has joined #openstack-keystone11:18
*** rodrigods has quit IRC11:20
*** rodrigods has joined #openstack-keystone11:20
*** bjornar_ has joined #openstack-keystone11:20
*** fawadk has joined #openstack-keystone11:23
*** fawadkhaliq has quit IRC11:23
*** sdake has quit IRC11:25
*** nisha has quit IRC11:25
*** fawadk has quit IRC11:26
*** fawadkhaliq has joined #openstack-keystone11:26
openstackgerritAlvaro Lopez Garcia proposed openstack/keystoneauth: oidc: deprecate grant_type argument  https://review.openstack.org/33046511:27
*** fawadkhaliq has quit IRC11:31
*** fawadkhaliq has joined #openstack-keystone11:31
*** markvoelker has joined #openstack-keystone11:31
*** amoralej is now known as amoralej|lunch11:33
*** yolanda has joined #openstack-keystone11:35
*** markvoelker has quit IRC11:36
*** fawadkhaliq has quit IRC11:37
*** thumpba has joined #openstack-keystone11:37
*** fawadkhaliq has joined #openstack-keystone11:37
*** fawadkhaliq has quit IRC11:39
*** fawadkhaliq has joined #openstack-keystone11:39
*** fawadkhaliq has quit IRC11:42
*** fawadkhaliq has joined #openstack-keystone11:42
stevemaro/11:45
*** fawadk has joined #openstack-keystone11:46
stevemardstanek: dolphm lbragstad notmorgan bknudson_ i'm off today (stat holiday) and monday, woo 4 day weekend11:46
*** fawadkhaliq has quit IRC11:46
openstackgerritMartin Schuppert proposed openstack/keystone: Verify domain_id when get_domain is being called  https://review.openstack.org/33156711:47
*** fawadk has quit IRC11:48
*** fawadkhaliq has joined #openstack-keystone11:48
*** ddieterly has joined #openstack-keystone11:48
*** fawadkhaliq has quit IRC11:50
*** fawadkhaliq has joined #openstack-keystone11:50
*** edmondsw has joined #openstack-keystone11:54
*** itisha has joined #openstack-keystone11:55
*** code-R has quit IRC11:57
*** fawadkhaliq has quit IRC11:58
*** fawadk has joined #openstack-keystone11:58
*** raildo-afk is now known as raildo12:01
*** fawadkhaliq has joined #openstack-keystone12:03
*** fawadk has quit IRC12:04
openstackgerritAlexander Makarov proposed openstack/keystone: Unified delegation model  https://review.openstack.org/20848812:05
*** ddieterly has quit IRC12:07
openstackgerritAlexander Makarov proposed openstack/keystone: Unified delegation assignment driver  https://review.openstack.org/29131812:07
*** fawadkhaliq has quit IRC12:07
*** fawadkhaliq has joined #openstack-keystone12:08
dstanekstevemar: enjoy!12:08
*** jed56 has joined #openstack-keystone12:09
openstackgerritMartin Schuppert proposed openstack/keystone: Verify domain_id when get_domain is being called  https://review.openstack.org/33156712:09
*** fawadk has joined #openstack-keystone12:13
*** fawadkhaliq has quit IRC12:14
*** markvoelker has joined #openstack-keystone12:16
*** jpena is now known as jpena|lunch12:17
*** fawadkhaliq has joined #openstack-keystone12:18
*** fawadkhaliq has quit IRC12:18
*** fawadk has quit IRC12:20
*** afazekas_ is now known as afazekas|real12:20
*** ddieterly has joined #openstack-keystone12:24
*** fawadkhaliq has joined #openstack-keystone12:25
*** pauloewerton has joined #openstack-keystone12:27
*** ddieterly has quit IRC12:29
*** henrynash has quit IRC12:29
*** fawadkhaliq has quit IRC12:30
*** yolanda has quit IRC12:35
*** yolanda has joined #openstack-keystone12:36
*** ddieterly has joined #openstack-keystone12:46
*** jsavak has joined #openstack-keystone12:50
*** jaugustine has joined #openstack-keystone12:51
kmARCdstanek, shewless, thanks for the help. I'll try then the developer docs. Altho I still think that the "official" security guide should be fixed too.12:53
kmARChttp://docs.openstack.org/security-guide/identity/federated-keystone.html12:53
*** d0ugal has quit IRC12:54
*** d0ugal has joined #openstack-keystone12:54
*** d0ugal has quit IRC12:54
*** d0ugal has joined #openstack-keystone12:54
*** jsavak has quit IRC12:54
dstanekkmARC: i'll take a deeper look at that. let me know if you have trouble12:54
*** d0ugal has quit IRC12:55
*** d0ugal has joined #openstack-keystone12:55
*** d0ugal has quit IRC12:55
*** d0ugal has joined #openstack-keystone12:55
*** jsavak has joined #openstack-keystone12:55
*** ddieterly has quit IRC12:56
*** d0ugal has quit IRC13:00
*** d0ugal has joined #openstack-keystone13:00
*** d0ugal has quit IRC13:02
*** d0ugal has joined #openstack-keystone13:03
*** d0ugal has quit IRC13:03
*** d0ugal has joined #openstack-keystone13:03
*** d0ugal has quit IRC13:03
*** Guest12790 has joined #openstack-keystone13:03
*** Guest12790 has quit IRC13:04
*** d0ugal has joined #openstack-keystone13:04
bknudson_stevemar: what's happening on monday?13:05
*** amoralej|lunch is now known as amoralej13:11
*** M00nr41n has quit IRC13:14
*** fawadkhaliq has joined #openstack-keystone13:17
*** fawadkhaliq has quit IRC13:21
openstackgerritAlexander Makarov proposed openstack/keystone: Pre-cache new tokens  https://review.openstack.org/30914613:21
*** ayoung has joined #openstack-keystone13:29
*** ChanServ sets mode: +v ayoung13:29
*** jpena|lunch is now known as jpena13:29
*** ddieterly has joined #openstack-keystone13:30
*** ddieterly is now known as ddieterly[away]13:30
stevemarbknudson_: floater13:34
stevemarbknudson_: we want july 4th off too, to help you celebrate13:34
*** code-R has joined #openstack-keystone13:35
*** code-R_ has joined #openstack-keystone13:38
*** ddieterly[away] is now known as ddieterly13:39
openstackgerritSteve Martinelli proposed openstack/keystone: Improve keystone.conf [oauth1] documentation  https://review.openstack.org/33626613:41
*** code-R has quit IRC13:42
*** daemontool has joined #openstack-keystone13:43
*** richm has quit IRC13:45
*** richm has joined #openstack-keystone13:45
openstackgerritMerged openstack/keystonemiddleware: Use extras for oslo.messaging dependency  https://review.openstack.org/27440013:49
*** EinstCrazy has joined #openstack-keystone14:01
dstanekstevemar: you're welcome14:01
*** tonytan4ever has joined #openstack-keystone14:03
*** EinstCrazy has quit IRC14:04
*** yolanda has quit IRC14:04
*** yolanda has joined #openstack-keystone14:05
*** tonytan4ever has quit IRC14:07
*** tonytan4ever has joined #openstack-keystone14:07
*** david-lyle has quit IRC14:10
*** daemontool has quit IRC14:12
*** EinstCrazy has joined #openstack-keystone14:14
*** daemontool has joined #openstack-keystone14:14
*** catintheroof has joined #openstack-keystone14:14
*** spzala has joined #openstack-keystone14:22
*** ravelar159 has joined #openstack-keystone14:23
*** barclaac_ has quit IRC14:23
*** barclaac has joined #openstack-keystone14:23
*** timcline has joined #openstack-keystone14:24
*** links has quit IRC14:25
*** timcline has quit IRC14:27
*** timcline has joined #openstack-keystone14:27
*** links has joined #openstack-keystone14:28
*** M00nr41n has joined #openstack-keystone14:28
*** spzala has quit IRC14:31
*** ravelar159 has quit IRC14:32
*** ravelar159 has joined #openstack-keystone14:32
*** bjornar_ has quit IRC14:32
openstackgerritMerged openstack/keystone: Verify domain_id when get_domain is being called  https://review.openstack.org/33156714:35
openstackgerritMerged openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/33618414:43
openstackgerritMerged openstack/python-keystoneclient: Updated from global requirements  https://review.openstack.org/33623014:43
stevemardstanek: ?14:45
stevemaroh14:45
stevemarlol14:45
stevemarnvm14:45
dstanekstevemar: :-) your on vacation today right?14:46
openstackgerritMerged openstack/keystone: Remove test_backend_ldap skips for missing tests  https://review.openstack.org/33551414:46
openstackgerritMerged openstack/keystone: Update the nosetests test regex for legacy tests  https://review.openstack.org/33564914:46
openstackgerritMerged openstack/keystone: Adds a skip method to identify useless skips  https://review.openstack.org/33551514:46
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/33618214:46
openstackgerritAlexander Makarov proposed openstack/keystone: Pre-cache new tokens  https://review.openstack.org/30914614:47
openstackgerritMerged openstack/keystone: Improve keystone.conf [policy] documentation  https://review.openstack.org/33626714:47
*** henrynash has joined #openstack-keystone14:51
*** ChanServ sets mode: +v henrynash14:51
*** slberger has joined #openstack-keystone14:52
*** aloga_ has joined #openstack-keystone14:52
*** code-R_ has quit IRC14:54
*** code-R has joined #openstack-keystone14:54
openstackgerritMerged openstack/keystoneauth: Updated from global requirements  https://review.openstack.org/33618314:55
*** yolanda has quit IRC14:56
*** yolanda has joined #openstack-keystone14:57
*** links has quit IRC15:02
*** chrisshattuck has joined #openstack-keystone15:04
*** danpawlik has quit IRC15:05
*** KevinE has joined #openstack-keystone15:06
*** jistr is now known as jistr|mtg15:07
*** pcaruana has quit IRC15:08
*** rcernin has quit IRC15:14
*** EinstCrazy has quit IRC15:14
*** slberger has quit IRC15:16
*** mfisch has quit IRC15:16
*** chrisshattuck has quit IRC15:18
*** pnavarro has quit IRC15:19
*** chrisshattuck has joined #openstack-keystone15:19
*** code-R has quit IRC15:24
*** aloga_ has quit IRC15:25
*** daemontool has quit IRC15:28
*** tesseract- has quit IRC15:28
*** M00nr41n has quit IRC15:32
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [endpoint_filter] documentation  https://review.openstack.org/33563615:34
*** bjornar_ has joined #openstack-keystone15:34
*** belmoreira has quit IRC15:36
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [identity] documentation  https://review.openstack.org/33567315:37
*** spandhe has joined #openstack-keystone15:41
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [catalog] documentation  https://review.openstack.org/33662315:43
*** spzala has joined #openstack-keystone15:43
*** KevinE has quit IRC15:43
*** david-lyle has joined #openstack-keystone15:44
*** spandhe_ has joined #openstack-keystone15:44
*** spandhe has quit IRC15:46
*** spandhe_ is now known as spandhe15:46
*** roxanagh_ has joined #openstack-keystone15:48
*** roxanagh_ has quit IRC15:49
*** jistr|mtg is now known as jistr15:50
*** browne has joined #openstack-keystone15:56
*** david-lyle_ has joined #openstack-keystone15:57
*** david-lyle_ has quit IRC15:57
*** david-lyle_ has joined #openstack-keystone16:00
ayoungHey keystoners, enjoy  https://adam.younglogic.com/2016/07/clear-keystone-env/16:01
*** nkinder has joined #openstack-keystone16:02
*** tqtran has joined #openstack-keystone16:03
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [fernet_tokens] documentation  https://review.openstack.org/33663016:03
*** david-lyle has quit IRC16:04
*** david-lyle_ is now known as david-lyle16:04
*** GB21 has joined #openstack-keystone16:06
*** tqtran has quit IRC16:07
*** edmondsw has quit IRC16:13
*** code-R has joined #openstack-keystone16:14
*** code-R_ has joined #openstack-keystone16:16
*** code-R has quit IRC16:18
*** lhcheng has joined #openstack-keystone16:19
*** ChanServ sets mode: +v lhcheng16:19
bknudson_let's stop using env to configure and use clouds.yaml16:20
*** pushkaru has joined #openstack-keystone16:25
openstackgerritAlexander Makarov proposed openstack/keystone: Pre-cache new tokens  https://review.openstack.org/30914616:26
openstackgerritMerged openstack/keystone: Improve keystone.conf [oauth1] documentation  https://review.openstack.org/33626616:27
*** daemontool has joined #openstack-keystone16:31
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [kvs] documentation  https://review.openstack.org/33664616:32
*** roxanagh_ has joined #openstack-keystone16:32
*** ravelar159 has quit IRC16:33
*** gyee has joined #openstack-keystone16:33
*** ChanServ sets mode: +v gyee16:33
*** amoralej is now known as amoralej|off16:41
*** thumpba_ has joined #openstack-keystone16:42
*** thumpba has quit IRC16:44
*** KevinE has joined #openstack-keystone16:44
*** M00nr41n has joined #openstack-keystone16:47
*** jsavak has quit IRC16:49
*** pushkaru has quit IRC16:49
*** jsavak has joined #openstack-keystone16:49
stevemarbknudson_: ayoung: this will also work: unset `env | awk -F= '/OS_/ {print $1}' | xargs`16:49
stevemarbut yes +1 for clouds.yaml16:50
amakarovstevemar, hi! quick question: can we chop 3.1.1 tag of keystoneclient?16:51
*** ddieterly is now known as ddieterly[away]16:52
*** ravelar159 has joined #openstack-keystone16:53
*** jpena is now known as jpena|off16:53
*** ravelar159 has quit IRC16:54
*** fangxu has joined #openstack-keystone16:56
*** tonytan4ever has quit IRC16:57
*** ddieterly[away] is now known as ddieterly16:58
*** fangxu has quit IRC16:58
*** lhcheng has quit IRC16:58
*** lhcheng has joined #openstack-keystone16:59
*** ChanServ sets mode: +v lhcheng16:59
*** lhcheng has left #openstack-keystone16:59
ayoungstevemar, clouds.yml is fine, but if people need to work with env vars, they need this17:02
*** pushkaru has joined #openstack-keystone17:05
*** jsavak has quit IRC17:05
*** jsavak has joined #openstack-keystone17:06
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [paste_deploy] documentation  https://review.openstack.org/33667317:09
*** jsavak has quit IRC17:10
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [os_inherit] documentation  https://review.openstack.org/33667617:12
*** tqtran has joined #openstack-keystone17:15
*** amakarov has quit IRC17:16
openstackgerritAlexander Makarov proposed openstack/keystone-specs: Complete RBAC in keystone  https://review.openstack.org/32532617:17
*** ddieterly is now known as ddieterly[away]17:19
*** sdake has joined #openstack-keystone17:30
*** sdake_ has joined #openstack-keystone17:32
stevemardolphm: quick comment on https://review.openstack.org/#/c/336623/117:33
patchbotstevemar: patch 336623 - keystone - Improve keystone.conf [catalog] documentation17:33
*** jsavak has joined #openstack-keystone17:35
*** sdake has quit IRC17:35
*** fawadkhaliq has joined #openstack-keystone17:35
stevemaramakarov, sure, didn't realize we had anything essential in there?17:38
*** fawadkhaliq has quit IRC17:39
*** jaugustine has quit IRC17:39
stevemaramakarov, we can do 3.2.017:41
*** pushkaru has quit IRC17:44
*** jed56 has quit IRC17:45
notmorganjamielennox, stevemar, dolphm: So PCI DSS (1.3.8) says to prevent disclosure of internal ips/routing information to unauthorized users [meaning, as i read it ... the catalog breaks PCI DSS inherantly]17:52
stevemarnotmorgan: yeah, i saw that comment17:52
stevemarhmph17:52
notmorganit's ok i just flat out said we aren't PCI DSS compliant and do not claim to be17:52
notmorgani think once the PCI stuff lands / is finished up17:53
notmorganwe will need to provide a doc that show what bits keystone claims to meet17:53
dstaneknotmorgan: ++ absolutely17:54
tsufievhello, wise keystone folks!17:55
tsufievcould some of you take a look at http://lists.openstack.org/pipermail/openstack-dev/2016-June/098494.html and share your opinion?17:55
tsufievsince nobody from Security team hasn't yet replied17:56
notmorgantsufiev: many people/applications can consume openstack tokens directly17:58
tsufievnotmorgan, you mean, there is no security risk, right?17:59
notmorganthere is always a security risk since they are bearer tokens17:59
notmorganbut..17:59
notmorgananyone with credentials cant get a token17:59
notmorganit isn't assumed you'll only use horizon17:59
*** spzala has quit IRC17:59
notmorganor the python-*-clients17:59
notmorganif you trust the jsclient with the token, it's fine.17:59
tsufievokay18:00
*** TxGVNN has quit IRC18:00
notmorganbarring xss/jsclient specific exploits/leaking of data to other things such as browser extensions18:00
*** daemontool has quit IRC18:00
dstanekmy biggest concern would be if the token were put in a place than may remain after the session has expired. for example, in URL redirects18:00
notmorgandstanek: ++18:00
tsufievhm...18:01
notmorgangenerally, treat the token as "privileged" data.18:01
notmorganit's the equivalent of your session cookie18:01
notmorganwhen logged into a webapp.18:01
dstanekput it in the source of the page and make sure the page is marked as uncacheable18:01
tsufievthanks, that sounds reasonable!18:01
tsufievcould you please leave a few words in a mailing thread to reference it later ;)?18:02
dstanektsufiev: i just pulled it up to comment18:05
openstackgerritMerged openstack/keystone: Use skip_test_overrides in test_backend_ldap  https://review.openstack.org/33551618:05
openstackgerritMerged openstack/keystone: Updated tests that claimed to be blocked by bugs  https://review.openstack.org/33551718:06
dstaneki should probably add a filter for 'security' too18:08
*** jsavak has quit IRC18:08
*** jsavak has joined #openstack-keystone18:09
tsufievor I should have added [keystone] to subj )18:10
*** phalmos has joined #openstack-keystone18:14
*** ddieterly[away] has quit IRC18:19
*** phalmos has quit IRC18:19
*** fangxu has joined #openstack-keystone18:25
*** phalmos has joined #openstack-keystone18:26
dstanektsufiev: :-)18:26
tsufievthank you, dstanek!18:29
openstackgerritMerged openstack/keystone: Improve keystone.conf [identity] documentation  https://review.openstack.org/33567318:30
*** amrith has quit IRC18:30
*** amrith has joined #openstack-keystone18:31
*** GB21 has quit IRC18:36
*** ayoung has quit IRC18:39
dstanektsufiev: i'd love to see the security team weigh in if they have differing opinions18:41
tsufievyep, still waiting for them to appear there, dstanek18:44
*** phalmos has quit IRC18:44
*** GB21 has joined #openstack-keystone18:52
*** samueldmq has joined #openstack-keystone18:56
*** ChanServ sets mode: +v samueldmq18:56
samueldmqhi keystone o/18:56
dstaneksamueldmq: hi18:57
samueldmqdstanek: o/18:57
*** roxanagh_ has quit IRC19:09
*** spandhe has quit IRC19:09
*** ddieterly has joined #openstack-keystone19:09
*** pushkaru has joined #openstack-keystone19:10
openstackgerritDavid Stanek proposed openstack/keystone: Fixes hacking's handling of log hints  https://review.openstack.org/33670819:12
*** chrisshattuck has quit IRC19:13
*** spandhe has joined #openstack-keystone19:17
openstackgerritDavid Stanek proposed openstack/keystone: Fixes hacking's handling of log hints  https://review.openstack.org/33670819:18
*** jefrite_ has quit IRC19:20
*** fangxu has quit IRC19:21
openstackgerritDolph Mathews proposed openstack/keystone: Grammar fix: can -> will  https://review.openstack.org/33671319:27
openstackgerritDolph Mathews proposed openstack/keystone: Grammar fix: will -> can  https://review.openstack.org/33671319:30
*** pushkaru has quit IRC19:33
*** spandhe has quit IRC19:34
*** yolanda has quit IRC19:34
*** imcsk8_ has joined #openstack-keystone19:38
*** code-R has joined #openstack-keystone19:40
*** boris-42 has quit IRC19:41
*** toddnni_ has joined #openstack-keystone19:41
*** tristanC has quit IRC19:41
*** SpamapS has quit IRC19:41
*** itsuugo has quit IRC19:41
*** GB21 has quit IRC19:42
*** code-R_ has quit IRC19:42
*** imcsk8 has quit IRC19:42
*** gsilvis has quit IRC19:42
*** notmyname has quit IRC19:42
*** toddnni has quit IRC19:42
*** toddnni_ is now known as toddnni19:42
*** eglute has quit IRC19:42
*** kevinbenton has quit IRC19:42
*** zeus has quit IRC19:42
*** M00nr41n_ has joined #openstack-keystone19:42
*** M00nr41n has quit IRC19:42
*** mdavidson has quit IRC19:42
*** gabriel-bezerra has quit IRC19:42
*** jidar has quit IRC19:42
*** tristanC has joined #openstack-keystone19:43
*** boris-42 has joined #openstack-keystone19:44
*** gsilvis has joined #openstack-keystone19:44
*** kevinbenton has joined #openstack-keystone19:44
openstackgerritMerged openstack/keystone: Improve keystone.conf [endpoint_filter] documentation  https://review.openstack.org/33563619:45
*** ayoung has joined #openstack-keystone19:46
*** ChanServ sets mode: +v ayoung19:46
*** itsuugo has joined #openstack-keystone19:47
*** zeus has joined #openstack-keystone19:47
*** notmyname has joined #openstack-keystone19:47
*** eglute has joined #openstack-keystone19:47
*** zeus is now known as Guest3196119:47
openstackgerritDolph Mathews proposed openstack/keystone: Refactor: [ldap] suffix should not be an instance attribute  https://review.openstack.org/33671519:49
*** pnavarro has joined #openstack-keystone19:49
*** sdake_ has quit IRC19:50
*** Guest31961 is now known as zeus19:51
*** zeus has joined #openstack-keystone19:51
-openstackstatus- NOTICE: The infrastructure team is taking Gerrit offline for maintenance beginning shortly after 20:00 UTC to upgrade the Zuul and static.openstack.org servers. We aim to have it back online around 22:00 UTC.19:53
*** SpamapS has joined #openstack-keystone19:54
*** jidar has joined #openstack-keystone19:55
*** mdavidson has joined #openstack-keystone19:56
*** gabriel-bezerra has joined #openstack-keystone19:56
openstackgerritMerged openstack/keystone: Improve keystone.conf [kvs] documentation  https://review.openstack.org/33664619:58
openstackgerritMerged openstack/keystone: Improve keystone.conf [paste_deploy] documentation  https://review.openstack.org/33667319:58
openstackgerritDavid Stanek proposed openstack/keystone: Use skip_test_overrides everywhere we feature skip  https://review.openstack.org/33671819:58
*** samueldmq has quit IRC20:01
*** ddieterly is now known as ddieterly[away]20:03
-openstackstatus- NOTICE: Gerrit is offline for maintenance until approximately 22:00 UTC20:05
*** ChanServ changes topic to "Gerrit is offline for maintenance until approximately 22:00 UTC"20:05
*** roxanagh_ has joined #openstack-keystone20:10
*** KevinE has quit IRC20:10
*** timcline has quit IRC20:10
*** jefrite has joined #openstack-keystone20:18
*** fangxu has joined #openstack-keystone20:21
*** chrisshattuck has joined #openstack-keystone20:24
*** ddieterly[away] is now known as ddieterly20:26
*** woodster_ has joined #openstack-keystone20:27
*** imcsk8_ is now known as imcsk820:32
*** iurygregory has quit IRC20:38
*** aloga_ has joined #openstack-keystone20:40
*** jsavak has quit IRC20:40
*** jsavak has joined #openstack-keystone20:41
*** timcline has joined #openstack-keystone20:41
*** aloga_ has quit IRC20:44
*** timcline has quit IRC20:46
*** code-R has quit IRC20:57
*** jsavak has quit IRC20:58
*** raildo is now known as raildo-afk21:01
*** sdake has joined #openstack-keystone21:10
*** fangxu has quit IRC21:15
*** pauloewerton has quit IRC21:16
*** timcline has joined #openstack-keystone21:17
*** jsavak has joined #openstack-keystone21:25
*** code-R has joined #openstack-keystone21:26
*** jsavak has quit IRC21:32
*** jsavak has joined #openstack-keystone21:33
*** timcline has quit IRC21:33
*** tonytan4ever has joined #openstack-keystone21:35
*** catintheroof has quit IRC21:36
*** jsavak has quit IRC21:39
*** jsavak has joined #openstack-keystone21:39
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [ldap] documentation  https://review.openstack.org/33671921:41
*** pnavarro has quit IRC21:46
*** patchbot has quit IRC21:47
*** patchbot` has joined #openstack-keystone21:47
*** patchbot` is now known as patchbot21:48
*** ddieterly is now known as ddieterly[away]21:49
*** david-lyle has quit IRC21:51
*** tristanC_ has joined #openstack-keystone21:51
*** gsilvis_ has joined #openstack-keystone21:51
*** afazekas|real has quit IRC21:53
*** harlowja has quit IRC21:53
*** sigmavirus24 has quit IRC21:53
*** afazekas has joined #openstack-keystone21:53
*** BlackDex has quit IRC21:53
*** tristanC has quit IRC21:53
*** BlackDex has joined #openstack-keystone21:53
*** harlowja has joined #openstack-keystone21:53
*** gsilvis has quit IRC21:57
*** sigmavirus24 has joined #openstack-keystone21:57
*** jsavak has quit IRC21:58
*** jsavak has joined #openstack-keystone21:59
*** tonytan4ever has quit IRC22:01
*** tonytan4ever has joined #openstack-keystone22:01
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [catalog] documentation  https://review.openstack.org/33662322:03
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [fernet_tokens] documentation  https://review.openstack.org/33663022:05
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [os_inherit] documentation  https://review.openstack.org/33667622:07
*** ddieterly[away] is now known as ddieterly22:12
*** thumpba_ has quit IRC22:14
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [resource] documentation  https://review.openstack.org/33672822:21
openstackgerritDolph Mathews proposed openstack/keystone: Improve keystone.conf [revoke] documentation  https://review.openstack.org/33673122:26
*** jsavak has quit IRC22:32
*** tonytan4ever has quit IRC22:48
*** fangxu has joined #openstack-keystone22:51
*** tonytan4ever has joined #openstack-keystone22:51
*** mvk has quit IRC22:53
*** ddieterly is now known as ddieterly[away]22:55
*** harlowja_ has joined #openstack-keystone22:55
*** ddieterly[away] has quit IRC22:55
*** tristanC_ is now known as tristanC22:58
*** harlowja has quit IRC22:59
*** zzzeek has quit IRC23:01
*** zzzeek has joined #openstack-keystone23:02
*** roxanagh_ has quit IRC23:06
*** roxanagh_ has joined #openstack-keystone23:09
*** zzzeek has quit IRC23:11
*** zzzeek has joined #openstack-keystone23:14
*** chrisshattuck has quit IRC23:15
*** phalmos has joined #openstack-keystone23:23
*** tonytan4ever has quit IRC23:27
*** gyee has quit IRC23:33
openstackgerritMerged openstack/keystone: Use min to avoid checking < 1 max fernet keys  https://review.openstack.org/33584023:37
*** phalmos has quit IRC23:43
*** chrisshattuck has joined #openstack-keystone23:57
*** chrisshattuck has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!