| *** ninag has joined #openstack-keystone | 00:00 | |
| *** ninag has quit IRC | 00:01 | |
| *** BjoernT has joined #openstack-keystone | 00:02 | |
| *** david-lyle has joined #openstack-keystone | 00:02 | |
| *** BjoernT is now known as Bjoern_zZzZzZzZ | 00:02 | |
| *** dan_nguyen has quit IRC | 00:03 | |
| *** Bjoern_zZzZzZzZ has quit IRC | 00:03 | |
| *** edmondsw has quit IRC | 00:06 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Removed duplicate parameter in v2-admin api-ref https://review.openstack.org/345107 | 00:06 |
|---|---|---|
| *** 18VAA56T6 is now known as henrynash | 00:07 | |
| henrynash | dd | 00:08 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Only run KvsTokenCacheInvalidation against uuid https://review.openstack.org/345108 | 00:08 |
| *** gyee has quit IRC | 00:09 | |
| henrynash | tst\ | 00:11 |
| *** henrynash has left #openstack-keystone | 00:12 | |
| *** henrynash has joined #openstack-keystone | 00:13 | |
| *** ChanServ sets mode: +v henrynash | 00:13 | |
| stevemar | henrynash: sdoghdsfkjghdfsiughfskd\ | 00:13 |
| *** samueldmq has quit IRC | 00:13 | |
| henrynash | tes | 00:13 |
| *** jamielennox is now known as jamielennox|away | 00:16 | |
| *** david-lyle has quit IRC | 00:18 | |
| *** spzala has joined #openstack-keystone | 00:29 | |
| *** spzala has quit IRC | 00:29 | |
| *** spzala_ has joined #openstack-keystone | 00:29 | |
| openstackgerrit | Merged openstack/keystone: Fix the errors in params in api-ref for V3 user https://review.openstack.org/342089 | 00:32 |
| *** jerrygb has joined #openstack-keystone | 00:36 | |
| *** jerrygb has quit IRC | 00:41 | |
| *** gagehugo has quit IRC | 00:43 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 00:43 |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 00:47 |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 00:51 |
| *** tqtran has quit IRC | 00:52 | |
| *** ddieterly has joined #openstack-keystone | 00:57 | |
| *** ddieterly has quit IRC | 01:06 | |
| *** davechen has joined #openstack-keystone | 01:23 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 01:29 |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 01:31 |
| *** harlowja has joined #openstack-keystone | 01:35 | |
| *** harlowja has quit IRC | 01:35 | |
| *** harlowja has joined #openstack-keystone | 01:36 | |
| *** jerrygb has joined #openstack-keystone | 01:37 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 01:38 |
| *** spzala_ has quit IRC | 01:40 | |
| *** spzala has joined #openstack-keystone | 01:41 | |
| *** jerrygb has quit IRC | 01:42 | |
| *** spzala has quit IRC | 01:45 | |
| *** woodster_ has quit IRC | 01:59 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 01:59 |
| *** jed56 has quit IRC | 02:05 | |
| *** jerrygb has joined #openstack-keystone | 02:21 | |
| *** nk2527 has quit IRC | 02:23 | |
| *** david-lyle has joined #openstack-keystone | 02:24 | |
| *** EinstCra_ has joined #openstack-keystone | 02:25 | |
| *** EinstCrazy has quit IRC | 02:29 | |
| *** david-lyle has quit IRC | 02:29 | |
| *** hoonetorg has quit IRC | 02:40 | |
| *** harlowja has quit IRC | 02:46 | |
| *** hoonetorg has joined #openstack-keystone | 02:53 | |
| *** anushkrishnamurt has joined #openstack-keystone | 02:55 | |
| *** spzala has joined #openstack-keystone | 03:01 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Clarify V2 API for enabling or disabling user https://review.openstack.org/345137 | 03:05 |
| *** spzala has quit IRC | 03:06 | |
| *** TxGVNN has joined #openstack-keystone | 03:13 | |
| *** EinstCra_ has quit IRC | 03:18 | |
| *** anushkrishnamurt has quit IRC | 03:19 | |
| *** iurygregory_ has quit IRC | 03:23 | |
| *** itisha has joined #openstack-keystone | 03:24 | |
| *** EinstCrazy has joined #openstack-keystone | 03:24 | |
| *** anushkrishnamurt has joined #openstack-keystone | 03:25 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: `password` is not required for updating a user https://review.openstack.org/345143 | 03:25 |
| *** ericksonsantos has quit IRC | 03:27 | |
| *** iurygregory has quit IRC | 03:27 | |
| *** dave-mccowan has quit IRC | 03:27 | |
| *** clenimar has quit IRC | 03:28 | |
| *** davechen has left #openstack-keystone | 03:28 | |
| *** iurygregory has joined #openstack-keystone | 03:29 | |
| *** anushkrishnamurt has quit IRC | 03:29 | |
| *** ericksonsantos has joined #openstack-keystone | 03:31 | |
| *** julim has quit IRC | 03:31 | |
| *** clenimar has joined #openstack-keystone | 03:32 | |
| *** julim has joined #openstack-keystone | 03:44 | |
| openstackgerrit | Merged openstack/keystone: Fix the errors in params in api-ref for V3 region https://review.openstack.org/343250 | 03:48 |
| *** spzala has joined #openstack-keystone | 04:02 | |
| *** richm has quit IRC | 04:04 | |
| *** iurygregory has quit IRC | 04:04 | |
| *** clenimar has quit IRC | 04:04 | |
| *** ericksonsantos has quit IRC | 04:04 | |
| *** julim has quit IRC | 04:05 | |
| *** spzala has quit IRC | 04:07 | |
| *** iurygregory has joined #openstack-keystone | 04:09 | |
| *** ericksonsantos has joined #openstack-keystone | 04:10 | |
| *** clenimar has joined #openstack-keystone | 04:10 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add schema validation to create/update user https://review.openstack.org/345022 | 04:20 |
| *** roxanaghe has joined #openstack-keystone | 04:24 | |
| *** d0ugal has quit IRC | 04:56 | |
| *** d0ugal has joined #openstack-keystone | 04:57 | |
| *** jaosorior has joined #openstack-keystone | 05:01 | |
| *** lamt has quit IRC | 05:01 | |
| *** spzala has joined #openstack-keystone | 05:01 | |
| *** michauds has joined #openstack-keystone | 05:05 | |
| *** spzala has quit IRC | 05:08 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Fix up the api-ref request/response parameters for projects https://review.openstack.org/343340 | 05:08 |
| *** jerrygb has quit IRC | 05:09 | |
| *** michauds has quit IRC | 05:10 | |
| *** roxanaghe has quit IRC | 05:10 | |
| *** sharatss has joined #openstack-keystone | 05:17 | |
| sharatss | Hi everyone! | 05:18 |
| *** gyee has joined #openstack-keystone | 05:20 | |
| *** ChanServ sets mode: +v gyee | 05:20 | |
| sharatss | I have a question | 05:21 |
| sharatss | Can anyone pls help me finding answer for that? | 05:21 |
| *** sharatss has left #openstack-keystone | 05:29 | |
| *** afazekas|dentist is now known as afazekas | 05:32 | |
| *** harlowja has joined #openstack-keystone | 05:39 | |
| *** EinstCrazy has quit IRC | 05:43 | |
| *** gyee has quit IRC | 05:49 | |
| *** code-R_ has quit IRC | 05:49 | |
| *** code-R has joined #openstack-keystone | 05:50 | |
| *** gyee has joined #openstack-keystone | 05:58 | |
| *** ChanServ sets mode: +v gyee | 05:58 | |
| openstackgerrit | Merged openstack/keystone: Removed duplicate parameter in v2-admin api-ref https://review.openstack.org/345107 | 06:00 |
| *** spzala has joined #openstack-keystone | 06:03 | |
| *** harlowja has quit IRC | 06:04 | |
| *** ravelar159 has joined #openstack-keystone | 06:04 | |
| *** Murali_ has joined #openstack-keystone | 06:05 | |
| *** gyee has quit IRC | 06:05 | |
| *** Murali has quit IRC | 06:05 | |
| *** Murali_ is now known as Murali | 06:05 | |
| *** spzala has quit IRC | 06:08 | |
| *** ravelar159 has quit IRC | 06:09 | |
| *** dikonoor has joined #openstack-keystone | 06:15 | |
| *** Murali_ has joined #openstack-keystone | 06:18 | |
| *** Murali has quit IRC | 06:19 | |
| *** Murali_ is now known as Murali | 06:20 | |
| *** fifieldt has joined #openstack-keystone | 06:37 | |
| *** tesseract- has joined #openstack-keystone | 06:39 | |
| *** dikonoor has quit IRC | 06:53 | |
| *** pcaruana has joined #openstack-keystone | 07:03 | |
| *** spzala has joined #openstack-keystone | 07:04 | |
| *** davechen has joined #openstack-keystone | 07:05 | |
| openstackgerrit | Swapnil Kulkarni (coolsvap) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 07:07 |
| *** rcernin has joined #openstack-keystone | 07:07 | |
| *** spzala has quit IRC | 07:09 | |
| *** rcernin has quit IRC | 07:10 | |
| *** rcernin has joined #openstack-keystone | 07:10 | |
| *** maestropandy has joined #openstack-keystone | 07:12 | |
| *** d0ugal has quit IRC | 07:37 | |
| *** TxGVNN has quit IRC | 07:40 | |
| *** TxGVNN has joined #openstack-keystone | 07:52 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** mvk has quit IRC | 08:02 | |
| *** sharatss has joined #openstack-keystone | 08:05 | |
| *** spzala has joined #openstack-keystone | 08:05 | |
| *** spzala has quit IRC | 08:10 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 08:10 |
| *** davechen has quit IRC | 08:10 | |
| *** davechen has joined #openstack-keystone | 08:14 | |
| *** rdo has quit IRC | 08:21 | |
| *** rdo has joined #openstack-keystone | 08:24 | |
| *** rdo has quit IRC | 08:28 | |
| *** rdo has joined #openstack-keystone | 08:30 | |
| *** rdo has quit IRC | 08:34 | |
| *** rdo has joined #openstack-keystone | 08:35 | |
| *** jaosorior has quit IRC | 08:59 | |
| *** jaosorior has joined #openstack-keystone | 08:59 | |
| *** mvk has joined #openstack-keystone | 09:02 | |
| *** spzala has joined #openstack-keystone | 09:06 | |
| *** d0ugal has joined #openstack-keystone | 09:10 | |
| *** spzala has quit IRC | 09:10 | |
| *** jerrygb has joined #openstack-keystone | 09:13 | |
| *** jerrygb has quit IRC | 09:18 | |
| *** d0ugal has quit IRC | 09:22 | |
| *** d0ugal has joined #openstack-keystone | 09:28 | |
| *** daemontool has joined #openstack-keystone | 09:39 | |
| *** code-R_ has joined #openstack-keystone | 09:39 | |
| *** code-R has quit IRC | 09:40 | |
| *** daemontool_ has joined #openstack-keystone | 09:44 | |
| *** daemontool has quit IRC | 09:47 | |
| *** d0ugal has quit IRC | 09:56 | |
| *** d0ugal has joined #openstack-keystone | 10:02 | |
| *** d0ugal has quit IRC | 10:03 | |
| *** d0ugal has joined #openstack-keystone | 10:03 | |
| *** spzala has joined #openstack-keystone | 10:06 | |
| *** tsufiev has quit IRC | 10:09 | |
| *** rakhmerov has quit IRC | 10:09 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Add schema for enabling a user https://review.openstack.org/344057 | 10:09 |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 10:10 |
| *** spzala has quit IRC | 10:11 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Add schema for enabling a user https://review.openstack.org/344057 | 10:13 |
| *** jerrygb has joined #openstack-keystone | 10:14 | |
| *** jerrygb has quit IRC | 10:20 | |
| *** davechen has left #openstack-keystone | 10:20 | |
| *** rakhmerov has joined #openstack-keystone | 10:27 | |
| *** maestropandy has quit IRC | 10:28 | |
| *** itisha has quit IRC | 10:30 | |
| *** d0ugal has quit IRC | 10:31 | |
| *** tsufiev has joined #openstack-keystone | 10:31 | |
| *** maestropandy has joined #openstack-keystone | 10:37 | |
| *** maestropandy1 has joined #openstack-keystone | 10:37 | |
| *** maestropandy has quit IRC | 10:41 | |
| *** rodrigods has quit IRC | 10:43 | |
| *** rodrigods has joined #openstack-keystone | 10:44 | |
| *** maestropandy1 has quit IRC | 10:52 | |
| *** code-R has joined #openstack-keystone | 10:54 | |
| *** code-R_ has quit IRC | 10:55 | |
| *** maestropandy has joined #openstack-keystone | 10:59 | |
| *** spzala has joined #openstack-keystone | 11:07 | |
| *** spzala has quit IRC | 11:12 | |
| *** jerrygb has joined #openstack-keystone | 11:16 | |
| *** jerrygb has quit IRC | 11:21 | |
| *** dave-mccowan has joined #openstack-keystone | 11:23 | |
| *** TxGVNN has quit IRC | 11:24 | |
| *** daemontool_ has quit IRC | 11:35 | |
| *** daemontool_ has joined #openstack-keystone | 11:38 | |
| *** pauloewerton has joined #openstack-keystone | 11:50 | |
| *** daemontool__ has joined #openstack-keystone | 12:06 | |
| *** spzala has joined #openstack-keystone | 12:08 | |
| *** daemontool_ has quit IRC | 12:09 | |
| *** d0ugal has joined #openstack-keystone | 12:11 | |
| *** spzala has quit IRC | 12:13 | |
| *** jerrygb has joined #openstack-keystone | 12:17 | |
| *** jerrygb has quit IRC | 12:21 | |
| *** edmondsw has joined #openstack-keystone | 12:28 | |
| *** maestropandy has left #openstack-keystone | 12:37 | |
| *** edmondsw has quit IRC | 12:44 | |
| *** edmondsw has joined #openstack-keystone | 12:45 | |
| *** jed56 has joined #openstack-keystone | 12:52 | |
| *** BjoernT has joined #openstack-keystone | 12:59 | |
| *** reauxmont has joined #openstack-keystone | 12:59 | |
| *** spzala has joined #openstack-keystone | 13:01 | |
| *** julim has joined #openstack-keystone | 13:01 | |
| *** gordc has joined #openstack-keystone | 13:02 | |
| *** TxGVNN has joined #openstack-keystone | 13:05 | |
| *** jsavak has joined #openstack-keystone | 13:10 | |
| *** jerrygb has joined #openstack-keystone | 13:18 | |
| *** jerrygb has quit IRC | 13:22 | |
| reauxmont | is the identity endpoint actually relevant? I seem to be able to use the v3 API although I only have a v2 endpoint configured. | 13:23 |
| *** nk2527 has joined #openstack-keystone | 13:29 | |
| *** edmondsw has quit IRC | 13:31 | |
| *** jerrygb has joined #openstack-keystone | 13:34 | |
| *** richm has joined #openstack-keystone | 13:35 | |
| *** sharatss has quit IRC | 13:37 | |
| *** BigWillie has joined #openstack-keystone | 13:47 | |
| *** ametts has joined #openstack-keystone | 13:47 | |
| *** krotscheck_dcm is now known as krotscheck | 13:50 | |
| *** ebalduf has joined #openstack-keystone | 13:52 | |
| *** itisha has joined #openstack-keystone | 13:57 | |
| *** haplo37_ has joined #openstack-keystone | 13:57 | |
| *** EinstCrazy has joined #openstack-keystone | 13:58 | |
| *** ddieterly has joined #openstack-keystone | 14:03 | |
| *** ericksonsantos has quit IRC | 14:06 | |
| *** ddieterly has quit IRC | 14:13 | |
| *** code-R_ has joined #openstack-keystone | 14:14 | |
| *** daemontool__ is now known as daemontool | 14:16 | |
| *** code-R has quit IRC | 14:17 | |
| *** ravelar159 has joined #openstack-keystone | 14:19 | |
| *** ddieterly has joined #openstack-keystone | 14:19 | |
| *** phalmos has joined #openstack-keystone | 14:22 | |
| *** EinstCrazy has quit IRC | 14:31 | |
| *** EinstCrazy has joined #openstack-keystone | 14:32 | |
| *** sonal has joined #openstack-keystone | 14:32 | |
| *** edmondsw has joined #openstack-keystone | 14:33 | |
| *** michauds has joined #openstack-keystone | 14:44 | |
| *** gagehugo has joined #openstack-keystone | 14:49 | |
| *** spresser has joined #openstack-keystone | 14:55 | |
| *** ebalduf has quit IRC | 14:57 | |
| *** michauds has quit IRC | 14:57 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Use freezegun to increment clock in test_v3_assignment https://review.openstack.org/343860 | 14:59 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Refactor TestAuthExternalDomain to not inherit tests https://review.openstack.org/343886 | 15:00 |
| spresser | Hey, quick question from a relative noob: I'm writing a service that interacts with nova. I want to have it so the user can only interact with instances s/he is an admin for. I think the approach I'm using is correct, but I also want to make sure I'm not violating any best practices. In short, I want to use keystonemiddleware to authenticate the user first, then make a "combined auth" request to nova using novaclien | 15:00 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Don't run TokenCacheInvalidation with Fernet https://review.openstack.org/343932 | 15:00 |
| spresser | Also, it's worth noting that for "reasons", my employer has me working in Kilo. | 15:00 |
| *** pece has joined #openstack-keystone | 15:01 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Run AuthWithToken against all token providers https://review.openstack.org/343935 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: refactor: inherit AuthWithRemoteUser for other providers https://review.openstack.org/345075 | 15:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: refactor: make TestAuthKerberos test pki/pkiz/uuid https://review.openstack.org/345089 | 15:02 |
| *** d0ugal has quit IRC | 15:02 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: refactor: make TestAuthExternalDefaultDomain test uuid/pki/pkiz https://review.openstack.org/345090 | 15:02 |
| *** KevinE has joined #openstack-keystone | 15:02 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: refactor: make TestFetchRevocationList test uuid https://review.openstack.org/345099 | 15:02 |
| *** haplo37_ has quit IRC | 15:02 | |
| *** pcaruana has quit IRC | 15:02 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Use freezegun in OSRevokeTests https://review.openstack.org/345104 | 15:03 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Only run KvsTokenCacheInvalidation against uuid https://review.openstack.org/345108 | 15:03 |
| *** david-lyle has joined #openstack-keystone | 15:04 | |
| *** d0ugal has joined #openstack-keystone | 15:05 | |
| *** jed56 has quit IRC | 15:05 | |
| *** ebalduf has joined #openstack-keystone | 15:09 | |
| *** slberger has joined #openstack-keystone | 15:12 | |
| *** sdake has joined #openstack-keystone | 15:13 | |
| *** haplo37_ has joined #openstack-keystone | 15:14 | |
| *** arunkant_ has joined #openstack-keystone | 15:16 | |
| *** sdake_ has joined #openstack-keystone | 15:17 | |
| *** sdake has quit IRC | 15:19 | |
| *** EinstCrazy has quit IRC | 15:20 | |
| *** KevinE has quit IRC | 15:33 | |
| *** code-R_ has quit IRC | 15:34 | |
| *** jed56 has joined #openstack-keystone | 15:35 | |
| *** michauds has joined #openstack-keystone | 15:35 | |
| *** slberger has quit IRC | 15:38 | |
| *** michauds has quit IRC | 15:40 | |
| *** slberger has joined #openstack-keystone | 15:42 | |
| *** code-R has joined #openstack-keystone | 15:53 | |
| *** woodster_ has joined #openstack-keystone | 15:53 | |
| *** amakarov has joined #openstack-keystone | 15:54 | |
| *** dan_nguyen has joined #openstack-keystone | 15:55 | |
| *** jamielennox|away is now known as jamielennox | 15:59 | |
| jamielennox | stevemar: https://review.openstack.org/#/c/338614/ is the one i need merged for ksa in next release | 15:59 |
| patchbot | jamielennox: patch 338614 - keystoneauth - Add prompt parameter to Opt | 15:59 |
| *** jsavak has quit IRC | 16:03 | |
| *** d0ugal has quit IRC | 16:04 | |
| *** reauxmont has quit IRC | 16:09 | |
| *** lamt has joined #openstack-keystone | 16:10 | |
| *** tesseract- has quit IRC | 16:15 | |
| *** rcernin has quit IRC | 16:19 | |
| *** bknudson_ is now known as bknudson | 16:22 | |
| *** raildo has joined #openstack-keystone | 16:23 | |
| *** browne has joined #openstack-keystone | 16:24 | |
| *** roxanaghe has joined #openstack-keystone | 16:24 | |
| *** ayoung has joined #openstack-keystone | 16:24 | |
| *** ChanServ sets mode: +v ayoung | 16:24 | |
| *** ddieterly is now known as ddieterly[away] | 16:25 | |
| *** ayoung has quit IRC | 16:25 | |
| *** ayoung has joined #openstack-keystone | 16:25 | |
| *** ChanServ sets mode: +v ayoung | 16:25 | |
| ayoung | http://adam.younglogic.com/2016/07/merge-freeipa-undercloud-apache/ jamielennox | 16:25 |
| ayoung | roxanaghe, http://adam.younglogic.com/2016/06/saml-federated-auth-plugin/ | 16:25 |
| *** julim has quit IRC | 16:28 | |
| *** jsavak has joined #openstack-keystone | 16:31 | |
| *** mvk has quit IRC | 16:32 | |
| *** david-lyle has quit IRC | 16:41 | |
| *** d0ugal has joined #openstack-keystone | 16:44 | |
| *** shaleh has joined #openstack-keystone | 16:45 | |
| *** sdake_ has quit IRC | 16:46 | |
| *** sdake has joined #openstack-keystone | 16:49 | |
| *** sonal has quit IRC | 16:53 | |
| *** jaosorior has quit IRC | 16:59 | |
| *** jaosorior has joined #openstack-keystone | 16:59 | |
| *** ddieterly[away] is now known as ddieterly | 17:01 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 17:02 |
| *** jsavak has quit IRC | 17:02 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 17:03 |
| *** ericksonsantos has joined #openstack-keystone | 17:04 | |
| *** KevinE has joined #openstack-keystone | 17:07 | |
| *** jsavak has joined #openstack-keystone | 17:15 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Add performance tuning documentation https://review.openstack.org/345566 | 17:18 |
| dolphm | stevemar: bknudson: henrynash: ^ | 17:19 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone-specs: move old APIs to the attic https://review.openstack.org/342399 | 17:21 |
| stevemar | rderose: can you add https://review.openstack.org/#/c/340964/ to the api-ref too? :( | 17:21 |
| patchbot | stevemar: patch 340964 - keystone-specs - PCI-DSS Adds password_expires_at to API specs (MERGED) | 17:21 |
| *** ddieterly is now known as ddieterly[away] | 17:22 | |
| rderose | stevemar: it already is, here: https://review.openstack.org/#/c/336318/ | 17:23 |
| patchbot | rderose: patch 336318 - keystone - PCI-DSS Adds password_expires_at to API docs | 17:23 |
| stevemar | rderose: <3 | 17:23 |
| rderose | stevemar: v3 only, did you want to add to v2 as well? | 17:24 |
| *** Gorian_ has joined #openstack-keystone | 17:24 | |
| *** julim has joined #openstack-keystone | 17:34 | |
| stevemar | rderose: i hope it's not returned for v2 | 17:42 |
| stevemar | mmm | 17:42 |
| rderose | stevemar: I think it would be | 17:42 |
| stevemar | hence the mmm | 17:42 |
| rderose | :) | 17:43 |
| stevemar | why did we need to return it? | 17:43 |
| *** TxGVNN has quit IRC | 17:43 | |
| stevemar | user show, i can see details about myself, and see when my password expires? | 17:43 |
| stevemar | thats not usual-ish | 17:43 |
| *** harlowja has joined #openstack-keystone | 17:44 | |
| *** spzala has quit IRC | 17:44 | |
| *** spzala has joined #openstack-keystone | 17:45 | |
| *** ericksonsantos has quit IRC | 17:45 | |
| *** mvk has joined #openstack-keystone | 17:45 | |
| *** ebalduf has quit IRC | 17:45 | |
| *** raildo has quit IRC | 17:45 | |
| *** clenimar has quit IRC | 17:45 | |
| *** iurygregory has quit IRC | 17:46 | |
| *** pauloewerton has quit IRC | 17:46 | |
| openstackgerrit | Merged openstack/keystone: `password` is not required for updating a user https://review.openstack.org/345143 | 17:48 |
| openstackgerrit | Merged openstack/keystone: Clarify V2 API for enabling or disabling user https://review.openstack.org/345137 | 17:49 |
| openstackgerrit | Merged openstack/keystone: Fix up the api-ref request/response parameters for projects https://review.openstack.org/343340 | 17:49 |
| *** spzala has quit IRC | 17:49 | |
| *** tmcm has joined #openstack-keystone | 17:51 | |
| tmcm | is anyone here using X.509 Tokenless Authorization? | 17:51 |
| rderose | stevemar: yeah, user show would should password_expires_at | 17:54 |
| rderose | stevemar: we could pull it out of v2 here if we wanted: https://github.com/openstack/keystone/blob/master/keystone/common/controller.py#L302 | 17:54 |
| rderose | * would show password_expires_at | 17:58 |
| *** spzala has joined #openstack-keystone | 17:59 | |
| *** julim_ has joined #openstack-keystone | 18:01 | |
| *** daemontool has quit IRC | 18:01 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 18:01 |
| *** david-lyle has joined #openstack-keystone | 18:04 | |
| *** julim has quit IRC | 18:04 | |
| *** david-lyle_ has joined #openstack-keystone | 18:05 | |
| *** david-lyle has quit IRC | 18:05 | |
| amakarov | jamielennox, ayoung: when RBAC support discussion is planned? | 18:09 |
| *** pauloewerton has joined #openstack-keystone | 18:11 | |
| *** raildo has joined #openstack-keystone | 18:12 | |
| *** clenimar has joined #openstack-keystone | 18:12 | |
| *** ericksonsantos has joined #openstack-keystone | 18:12 | |
| *** iurygregory has joined #openstack-keystone | 18:13 | |
| ayoung | amakarov, about to hit lunch. | 18:16 |
| ayoung | amakarov, is after that too late? | 18:16 |
| amakarov | ayoung: it's 9pm here now, no problem | 18:18 |
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth: Lazy load oauthlib for plugin loading https://review.openstack.org/345600 | 18:19 |
| *** david-lyle_ has quit IRC | 18:22 | |
| *** ddieterly[away] has quit IRC | 18:22 | |
| *** iurygregory has quit IRC | 18:22 | |
| *** zzzeek is now known as zzzeek_afk_but_r | 18:22 | |
| *** ericksonsantos has quit IRC | 18:22 | |
| *** zzzeek_afk_but_r is now known as zzzeek_afk | 18:23 | |
| *** iurygregory has joined #openstack-keystone | 18:23 | |
| *** ericksonsantos has joined #openstack-keystone | 18:23 | |
| *** catintheroof has quit IRC | 18:25 | |
| *** jaosorior has quit IRC | 18:27 | |
| *** eggmaster has quit IRC | 18:28 | |
| *** samueldmq has joined #openstack-keystone | 18:29 | |
| samueldmq | hi all | 18:29 |
| *** ddieterly has joined #openstack-keystone | 18:32 | |
| *** harlowja has quit IRC | 18:35 | |
| *** tmcm has left #openstack-keystone | 18:37 | |
| *** harlowja has joined #openstack-keystone | 18:38 | |
| *** ddieterly is now known as ddieterly[away] | 18:42 | |
| *** tqtran has joined #openstack-keystone | 18:49 | |
| *** michauds has joined #openstack-keystone | 18:51 | |
| *** markvoelker has quit IRC | 18:53 | |
| *** ddieterly[away] is now known as ddieterly | 18:55 | |
| *** spzala has quit IRC | 18:58 | |
| *** harlowja has quit IRC | 18:59 | |
| *** r-daneel has joined #openstack-keystone | 18:59 | |
| *** spzala has joined #openstack-keystone | 19:00 | |
| *** jsavak has quit IRC | 19:04 | |
| *** spzala has quit IRC | 19:05 | |
| *** roxanaghe has quit IRC | 19:05 | |
| *** jsavak has joined #openstack-keystone | 19:06 | |
| *** gagehugo has quit IRC | 19:06 | |
| *** fifieldt has quit IRC | 19:07 | |
| *** tqtran has quit IRC | 19:11 | |
| *** gordc has quit IRC | 19:11 | |
| jamielennox | stevemar: replied to comment on https://review.openstack.org/#/c/338614/ | 19:12 |
| patchbot | jamielennox: patch 338614 - keystoneauth - Add prompt parameter to Opt | 19:12 |
| *** fifieldt has joined #openstack-keystone | 19:18 | |
| *** ddieterly is now known as ddieterly[away] | 19:21 | |
| *** ddieterly[away] is now known as ddieterly | 19:23 | |
| *** ddieterly is now known as ddieterly[away] | 19:27 | |
| *** jsavak has quit IRC | 19:27 | |
| *** spzala has joined #openstack-keystone | 19:30 | |
| *** KevinE has quit IRC | 19:31 | |
| *** jerrygb has quit IRC | 19:32 | |
| *** jed56 has quit IRC | 19:35 | |
| *** sdake_ has joined #openstack-keystone | 19:39 | |
| *** sdake has quit IRC | 19:40 | |
| *** jerrygb has joined #openstack-keystone | 19:40 | |
| dstanek | dolphm: solved https://backchannel.org/blog/friendfeed-schemaless-mysql https://eng.uber.com/schemaless-part-one/ | 19:45 |
| *** ddieterly[away] is now known as ddieterly | 19:50 | |
| *** gagehugo has joined #openstack-keystone | 19:52 | |
| ayoung | amakarov, ready to go? | 19:53 |
| stevemar | dolphm: fallout from your keystone.conf.ldap review: https://review.openstack.org/#/c/344210/ | 20:01 |
| patchbot | stevemar: patch 344210 - keystone - deprecate a few more LDAP config options | 20:01 |
| stevemar | s/fallout/cleanup | 20:01 |
| mfisch | dstanek: ping | 20:02 |
| *** roxanaghe has joined #openstack-keystone | 20:05 | |
| *** jsavak has joined #openstack-keystone | 20:09 | |
| dstanek | mfisch: pong | 20:13 |
| mfisch | dstanek: ive read your email but I dont follow | 20:13 |
| mfisch | wrt memcache | 20:13 |
| dstanek | mfisch: do you have a link to that bug? | 20:13 |
| mfisch | yeah 1 sec | 20:14 |
| dstanek | mfisch: i was also just looking at the other bug too...and i have a question | 20:14 |
| mfisch | https://bugs.launchpad.net/bugs/1570158 | 20:14 |
| openstack | Launchpad bug 1570158 in OpenStack Identity (keystone) liberty "memcache pool reap issue" [Medium,In progress] - Assigned to David Stanek (dstanek) | 20:14 |
| mfisch | dstanek: you wnat to just do a quick google call? | 20:14 |
| mfisch | as soon as this one im on ends | 20:14 |
| dstanek | mfisch: can't at the moment - mid cycling too | 20:15 |
| mfisch | ah | 20:15 |
| mfisch | ok | 20:15 |
| dstanek | mfisch: oh, the reap issue right? | 20:16 |
| mfisch | yeah | 20:16 |
| mfisch | the leaving cruft around | 20:16 |
| mfisch | you told me to try the oslo version or something? | 20:16 |
| dstanek | mfisch: that bug was fixed in oslo.cache | 20:16 |
| dstanek | in mitaka we punted the code over there and fixed it there | 20:16 |
| mfisch | dstanek: thats fine with me | 20:17 |
| mfisch | we've got mitaka in the pipeline | 20:17 |
| mfisch | once we get cinder upgraded it will roll out | 20:17 |
| dstanek | mfisch: cool, then that bug should fix itself for you. | 20:17 |
| mfisch | perfect | 20:18 |
| dstanek | mfisch: i did post a patch for it if you needed it, but it sounds like you don't | 20:18 |
| mfisch | yeah probably not | 20:18 |
| mfisch | I could confirm its fixed in M | 20:18 |
| mfisch | when did the M fix land? | 20:18 |
| mfisch | we're probably a month old now | 20:18 |
| dstanek | mfisch: i think it would have been in the original release | 20:21 |
| mfisch | dstanek: ok | 20:21 |
| mfisch | let me go look in our dev environment | 20:21 |
| mfisch | give me 30 min | 20:21 |
| *** SamYaple has quit IRC | 20:23 | |
| dstanek | mfisch: sure | 20:23 |
| *** SamYaple has joined #openstack-keystone | 20:23 | |
| dstanek | mfisch: the other thing i was wondering is that we see the token entries not expiring....didn't you have another cache that looked like it had different behavior? | 20:24 |
| mfisch | the token validation cache that services like nova, glance etc use | 20:24 |
| mfisch | I believe that was using the oslo implementation? | 20:25 |
| dstanek | mfisch: ah, from auth token? | 20:25 |
| mfisch | yeah | 20:25 |
| mfisch | if you've unified it then you can probably close my other bug | 20:25 |
| mfisch | about encrypting the tokens in cache | 20:25 |
| *** ddieterly is now known as ddieterly[away] | 20:25 | |
| mfisch | I've got 9.0.2-9-ga4be339 in the lab now | 20:25 |
| mfisch | let me check keystone cache | 20:25 |
| dstanek | mfisch: i think the expiration date is by design. the crypto one is different | 20:26 |
| dstanek | i think we could just push our code into olso.cache | 20:26 |
| mfisch | I thought thats what you said you had done in M? | 20:26 |
| dstanek | mfisch: we pushed our keystone memcache pool backend in there, not the keystonemiddleware stuff | 20:27 |
| mfisch | ah ok | 20:28 |
| mfisch | dstanek: so I still see this issue in Mitaka | 20:28 |
| mfisch | same as we discussed on the phone | 20:28 |
| mfisch | in fact I think the lab environment is what I shared stuff with you from | 20:29 |
| dstanek | mfisch: that issue won't change. i bug that i said is fix is the one that shows a traceback because the deque is empty | 20:29 |
| *** jsavak has quit IRC | 20:29 | |
| dstanek | mfisch: https://bugs.launchpad.net/keystone/+bug/1570158 is fixed in oslo.cache | 20:29 |
| openstack | Launchpad bug 1570158 in OpenStack Identity (keystone) liberty "memcache pool reap issue" [Medium,In progress] - Assigned to David Stanek (dstanek) | 20:29 |
| jamielennox | the keystonemiddleware cache stuff is in oslo.cache | 20:29 |
| mfisch | dstanek: ugh ok | 20:29 |
| dstanek | mfisch: https://bugs.launchpad.net/keystone/+bug/1578401 isn't a bug from what i can see | 20:30 |
| openstack | Launchpad bug 1578401 in OpenStack Identity (keystone) "tokens in memcache have no/improper expiration" [Undecided,Incomplete] - Assigned to David Stanek (dstanek) | 20:30 |
| mfisch | dstanek: sorry I read reap as in reap old stuff | 20:30 |
| *** agireud has quit IRC | 20:30 | |
| dstanek | jamielennox: i didn't see our crypto stuff in there | 20:30 |
| mfisch | dstanek: I dont need a backport for the reap issue | 20:30 |
| dstanek | jamielennox: is that actally in there now? | 20:30 |
| mfisch | thanks for the fix | 20:30 |
| jamielennox | we can't easily switch over to using the oslo.cache stuff because the formats are incompatible and we would essentially be dumping the whole cache on update | 20:30 |
| jamielennox | ah - i don't think the memcache security stuff is there | 20:30 |
| mfisch | really wish I could have come out :( | 20:31 |
| dstanek | jamielennox: i am going to put it in there to make it available to keystone | 20:31 |
| shaleh | jamielennox: re: user_agent. In Adapter class the service_name is not "nova" it is something like "compute" correct? | 20:31 |
| jamielennox | dstanek: this is my most recent attempt: https://review.openstack.org/#/c/337929/1/keystonemiddleware/auth_token/_cache.py | 20:31 |
| patchbot | jamielennox: patch 337929 - keystonemiddleware - WIP: Use dogpile.cache for caching | 20:31 |
| jamielennox | dstanek: i've had a couple | 20:31 |
| *** agireud has joined #openstack-keystone | 20:31 | |
| jamielennox | shaleh: service_name in adapter would be "glanceclient" service_name in session would be compute | 20:32 |
| jamielennox | shaleh: we might need a better name for that | 20:32 |
| dstanek | jamielennox: i don't want to change keystone middleware at all. just move that crypto to oslo.cache to add this feature https://bugs.launchpad.net/keystone/+bug/1578466 | 20:32 |
| openstack | Launchpad bug 1578466 in OpenStack Identity (keystone) "keystone token cache should offer encryption like the middleware cache does" [Medium,Triaged] | 20:32 |
| jamielennox | shaleh: in get_endpoint we use service_name and service_type | 20:32 |
| jamielennox | shaleh: actually no - we definetly want to use nova | 20:32 |
| jamielennox | because compute is anything implementing the compute api | 20:33 |
| shaleh | jamielennox: right. In Session is added "agent_name" because that better reflects the use. agent_name="CorpFrobble" or agent_name="nova" for instance | 20:33 |
| jamielennox | and nova is the actual service we run | 20:33 |
| shaleh | s/is/I/ | 20:33 |
| jamielennox | dstanek: this is like the only time i've heard of people using that memcahce encryption | 20:33 |
| mfisch | dstanek: having an invalid/unset expiration time leads to memcache using more memory than it should I thought | 20:33 |
| mfisch | dstanek: because it wont evict anything until its full | 20:33 |
| jamielennox | shaleh: yea, that works for me | 20:34 |
| dstanek | mfisch: once you give it Xgb then it's safe to assume it will use Xgb | 20:34 |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add schema validation to create/update user https://review.openstack.org/345022 | 20:34 |
| mfisch | dstanek: but if you had valid expirations will it reap old stuff or no reaping at all until the limit? | 20:34 |
| mfisch | if the latter then yeah, close it | 20:34 |
| shaleh | I can use the Adapter object's service_name if it is set though. So on Adapter we use service_name and on Session agent_name? | 20:34 |
| jamielennox | dstanek: ok, so i had an oslo.cache proxy in that review that i would have moved over to oslo.cache if i got it all working | 20:34 |
| shaleh | jamielennox: open to bikeshedding here | 20:34 |
| mfisch | ask jamielennox he knows cache | 20:35 |
| mfisch | cache rules everything around him | 20:35 |
| mfisch | (how does a wu tang reference work with this crowd) | 20:35 |
| dstanek | mfisch: not sure. i think dogpile just assumes that since you explicitly give it a certain amount of memory that you assume it can and will use it | 20:35 |
| dstanek | jamielennox: do in that review you are moving from oslo.cache to dogpile? is that because oslo.cache limits the tweaking that can be done to dogpile? | 20:36 |
| gagehugo | mfisch: I liked it | 20:36 |
| mfisch | glad I could be of service | 20:39 |
| *** harlowja has joined #openstack-keystone | 20:39 | |
| *** jsavak has joined #openstack-keystone | 20:40 | |
| jamielennox | mfisch: notmorgan is the oslo.cache person | 20:42 |
| mfisch | we'll call you guys Rza and Gza then | 20:43 |
| dstanek | mfisch: jamielennox: this isn't even an oslo.cache thing it's what dogpile does | 20:43 |
| dstanek | it appears to me that it just encodes the expiration data in the retrieved object and never tells memcached what it should be | 20:43 |
| dstanek | that way it can make decisions about how stale can the data be | 20:43 |
| *** tqtran has joined #openstack-keystone | 20:45 | |
| jamielennox | dstanek: oh? i was under the impression that the expiry was still handled my memcache | 20:45 |
| jamielennox | there is a dict backend that obviously must manage it itself, but for memcache i thought it was handled | 20:45 |
| jamielennox | mfisch: is that another wu tang reference? i'm completely guessing | 20:46 |
| mfisch | haha yeah sorry | 20:47 |
| mfisch | interesting day here, i'll stop bugging you | 20:47 |
| jamielennox | dstanek: now keystone/keystonemiddleware definetly includes the expiry in the token seperate to the memcache validation | 20:47 |
| jamielennox | dstanek: your token can be valid for another few hours but its only cached for 15 minutes | 20:47 |
| mfisch | jamielennox: confirmed | 20:48 |
| mfisch | thats the behavior I saw | 20:49 |
| mfisch | that cache works differently | 20:49 |
| mfisch | keystone's cache doesnt set expiration times on cache entries but the authtoken stuff does | 20:49 |
| dstanek | from what i see dogpile doen't ever set the expiration date | 20:49 |
| jamielennox | that's at least intentional, particularly when we were dealing with revocations we only wanted to short term cache a response | 20:49 |
| dstanek | mfisch: how are you able to tell that? | 20:49 |
| jamielennox | and then check revocation after the fact | 20:50 |
| mfisch | dstanek: you can look at the entries and they have a timestamp | 20:50 |
| mfisch | give me 3 mins to show you | 20:50 |
| dstanek | jamielennox: dogpile won't give you the stale data by default | 20:50 |
| jamielennox | dstanek: but it just doesn't set the memcache expiry? that's dumb | 20:51 |
| mfisch | also some examples in the bug | 20:51 |
| mfisch | jamielennox: hence my bug ^ | 20:51 |
| dstanek | jamielennox: agreed...after this meeting we can talk more verbally :-) | 20:51 |
| mfisch | ITEM tokens/uZ3A4NBmFcVWWsduoLstAg== [768 b; 1469124404 s] | 20:52 |
| mfisch | thats a token from the authtoken cache | 20:52 |
| mfisch | every token in there has a different expiration time | 20:52 |
| mfisch | Keystone's cache on the other hand, they all have the time set to the same value | 20:52 |
| mfisch | the 1469...s part | 20:52 |
| mfisch | jamielennox: dstanek ping me if you have questions/etc | 20:52 |
| jamielennox | mfisch: yea, i would want to run through and confirm what dogpile is doing | 20:53 |
| mfisch | jamielennox: cool let me know | 20:54 |
| mfisch | thanks | 20:54 |
| *** BigWillie has quit IRC | 20:55 | |
| *** raildo has quit IRC | 20:56 | |
| *** ddieterly[away] is now known as ddieterly | 20:57 | |
| *** gordc has joined #openstack-keystone | 20:58 | |
| *** ametts has quit IRC | 20:59 | |
| *** woodster_ has quit IRC | 20:59 | |
| *** haplo37_ has quit IRC | 21:00 | |
| *** tonytan4ever has quit IRC | 21:06 | |
| *** dan_nguyen has quit IRC | 21:06 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: WIP! Check revocation in database https://review.openstack.org/345668 | 21:06 |
| *** jsavak has quit IRC | 21:07 | |
| dstanek | jamielennox: mfisch: oh, crap... i have an idea... | 21:07 |
| *** jsavak has joined #openstack-keystone | 21:08 | |
| *** tonytan4ever has joined #openstack-keystone | 21:08 | |
| *** ddieterly has quit IRC | 21:10 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 21:12 |
| jamielennox | dstanek: and... | 21:12 |
| dstanek | jamielennox: the obvious.... keystonemiddleware doesn't use oslo.cache or dogpile :-) | 21:14 |
| dstanek | something i know, but somehow forot | 21:14 |
| *** julim_ has quit IRC | 21:14 | |
| *** ravelar159 has quit IRC | 21:20 | |
| *** phalmos has quit IRC | 21:32 | |
| dstanek | dolphm: http://git.openstack.org/cgit/openstack/openstack-ansible-os_keystone/tree/defaults/main.yml#n57 | 21:34 |
| *** gagehugo has quit IRC | 21:37 | |
| *** dave-mccowan has quit IRC | 21:37 | |
| *** timcline has joined #openstack-keystone | 21:39 | |
| *** spzala has quit IRC | 21:41 | |
| *** harlowja has quit IRC | 21:41 | |
| *** slberger1 has joined #openstack-keystone | 21:42 | |
| *** slberger has quit IRC | 21:43 | |
| *** spzala has joined #openstack-keystone | 21:44 | |
| *** pece has quit IRC | 21:45 | |
| *** gordc has quit IRC | 21:45 | |
| *** jsavak has quit IRC | 21:46 | |
| *** clenimar has quit IRC | 21:47 | |
| *** pauloewerton has quit IRC | 21:47 | |
| openstackgerrit | Merged openstack/keystone: deprecate a few more LDAP config options https://review.openstack.org/344210 | 21:47 |
| *** iurygregory has quit IRC | 21:47 | |
| *** ericksonsantos has quit IRC | 21:47 | |
| *** harlowja has joined #openstack-keystone | 21:48 | |
| *** harlowja has quit IRC | 21:48 | |
| *** timcline has quit IRC | 21:53 | |
| *** iurygregory has joined #openstack-keystone | 21:54 | |
| *** timcline has joined #openstack-keystone | 21:54 | |
| *** gagehugo has joined #openstack-keystone | 21:55 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Run AuthWithToken against all token providers https://review.openstack.org/343935 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: refactor: make TestFetchRevocationList test uuid https://review.openstack.org/345099 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Refactor TestAuthExternalDomain to not inherit tests https://review.openstack.org/343886 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Don't run TokenCacheInvalidation with Fernet https://review.openstack.org/343932 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Use freezegun in OSRevokeTests https://review.openstack.org/345104 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: refactor: make TestAuthKerberos test pki/pkiz/uuid https://review.openstack.org/345089 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: refactor: inherit AuthWithRemoteUser for other providers https://review.openstack.org/345075 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: refactor: make TestAuthExternalDefaultDomain test uuid/pki/pkiz https://review.openstack.org/345090 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Only run KvsTokenCacheInvalidation against uuid https://review.openstack.org/345108 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Use freezegun to increment clock in test_v3_assignment https://review.openstack.org/343860 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Use freezegun in AssignmentInheritanceTestCase https://review.openstack.org/345684 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Make it so federated tokens are validated on v2.0 https://review.openstack.org/345685 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Make AuthWithToken testable against uuid and fernet https://review.openstack.org/345686 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Allow V2TestCase to be tested against fernet and uuid https://review.openstack.org/345687 | 21:55 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Switch fernet to be the default token provider. https://review.openstack.org/345688 | 21:55 |
| lbragstad | ugh - my brain hurts... | 21:56 |
| dstanek | my mac just complained about the volume of notifications for irc that it just got. | 21:56 |
| *** amakarov has quit IRC | 21:57 | |
| *** timcline has quit IRC | 21:58 | |
| *** iurygregory_ has joined #openstack-keystone | 22:02 | |
| * lbragstad cracks a beer | 22:02 | |
| stevemar | lbragstad: *frain burts* | 22:02 |
| *** clenimar has joined #openstack-keystone | 22:02 | |
| notmorgan | dstanek: oh so what you're saying is I should write a bot that pings you continuously? | 22:02 |
| lbragstad | stevemar exactly | 22:02 |
| stevemar | oh wait... | 22:02 |
| *** ericksonsantos has joined #openstack-keystone | 22:03 | |
| stevemar | *frain bried* | 22:03 |
| lbragstad | stevemar that works too | 22:03 |
| rderose | ayoung henrynash: https://github.com/openstack/keystone/blob/master/keystone/identity/core.py#L882 | 22:06 |
| * notmorgan looks around and feels remarkably refreshed | 22:12 | |
| *** jsavak has joined #openstack-keystone | 22:17 | |
| *** dan_nguyen has joined #openstack-keystone | 22:17 | |
| * stevemar waves at notmorgan | 22:20 | |
| *** spzala has quit IRC | 22:23 | |
| *** sdake_ has quit IRC | 22:24 | |
| *** ntpttr- has quit IRC | 22:31 | |
| *** ntpttr- has joined #openstack-keystone | 22:36 | |
| *** ddieterly has joined #openstack-keystone | 22:43 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 22:43 |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add schema validation to create role https://review.openstack.org/345700 | 22:46 |
| *** sdake has joined #openstack-keystone | 22:49 | |
| *** spzala has joined #openstack-keystone | 22:50 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs: Extended Password Auth with optional MFA https://review.openstack.org/345113 | 22:50 |
| *** spzala has quit IRC | 22:51 | |
| *** spzala has joined #openstack-keystone | 22:51 | |
| *** spzala has quit IRC | 22:54 | |
| *** jerrygb has quit IRC | 22:55 | |
| *** zzzeek_afk is now known as zzzeek | 23:00 | |
| *** slberger1 has quit IRC | 23:01 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add schema validation to create/update user https://review.openstack.org/345022 | 23:03 |
| *** browne has quit IRC | 23:05 | |
| *** edmondsw has quit IRC | 23:06 | |
| *** jsavak has quit IRC | 23:07 | |
| *** slberger has joined #openstack-keystone | 23:13 | |
| *** tqtran has quit IRC | 23:16 | |
| openstackgerrit | Merged openstack/oslo.policy: Add note about not all APIs support policy enforcement by user_id https://review.openstack.org/325645 | 23:18 |
| *** ddieterly has quit IRC | 23:20 | |
| *** r-daneel has quit IRC | 23:23 | |
| *** BjoernT has quit IRC | 23:25 | |
| *** Gorian_ has quit IRC | 23:31 | |
| *** BjoernT has joined #openstack-keystone | 23:43 | |
| *** BjoernT has quit IRC | 23:47 | |
| *** code-R has quit IRC | 23:49 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!