| *** asettle has joined #openstack-keystone | 00:12 | |
| *** spzala has joined #openstack-keystone | 00:14 | |
| *** asettle has quit IRC | 00:17 | |
| *** guoshan has joined #openstack-keystone | 00:24 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Trivial indentation corrections in mappings doc https://review.openstack.org/408363 | 00:28 |
|---|---|---|
| *** guoshan has quit IRC | 00:28 | |
| *** jamielennox is now known as jamielennox|away | 00:45 | |
| *** tqtran has quit IRC | 00:54 | |
| *** hoangcx has joined #openstack-keystone | 00:54 | |
| *** itisha has quit IRC | 00:59 | |
| *** chrisplo has quit IRC | 01:00 | |
| *** jistr|mtgs has quit IRC | 01:00 | |
| *** jistr has joined #openstack-keystone | 01:00 | |
| *** phalmos has joined #openstack-keystone | 01:08 | |
| *** tovin07 has quit IRC | 01:08 | |
| *** liujiong has joined #openstack-keystone | 01:10 | |
| *** adrian_otto has joined #openstack-keystone | 01:10 | |
| *** davechen has joined #openstack-keystone | 01:11 | |
| *** asettle has joined #openstack-keystone | 01:13 | |
| *** asettle has quit IRC | 01:18 | |
| *** guoshan has joined #openstack-keystone | 01:25 | |
| *** spzala has quit IRC | 01:25 | |
| *** adrian_otto has quit IRC | 01:25 | |
| *** bigjools has quit IRC | 01:25 | |
| *** dave-mccowan has joined #openstack-keystone | 01:26 | |
| *** zhangjl has joined #openstack-keystone | 01:28 | |
| *** bigjools has joined #openstack-keystone | 01:28 | |
| *** bigjools has quit IRC | 01:28 | |
| *** bigjools has joined #openstack-keystone | 01:28 | |
| *** browne has quit IRC | 01:28 | |
| *** spzala has joined #openstack-keystone | 01:34 | |
| *** diazjf has joined #openstack-keystone | 01:47 | |
| *** davechen1 has joined #openstack-keystone | 01:49 | |
| *** jamielennox|away is now known as jamielennox | 01:50 | |
| davechen1 | Anyone knows the possible reason for "None of the configured SessionInitiators handled the request" thrown from Horizon? | 01:53 |
| davechen1 | we are trying to enable SSO with K-K federation but seems the confiugration for the horzion is not correctly set. | 01:54 |
| *** diazjf has quit IRC | 01:57 | |
| *** diazjf has joined #openstack-keystone | 01:58 | |
| *** ayoung has joined #openstack-keystone | 02:03 | |
| *** ChanServ sets mode: +v ayoung | 02:03 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Role Check from Middleware https://review.openstack.org/391624 | 02:07 |
| ayoung | lbragstad, morgan stevemar dstanek that updated version has another special case: if role: "None" then the RBAC check will be skipped for the specified API. | 02:08 |
| *** asettle has joined #openstack-keystone | 02:14 | |
| *** asettle has quit IRC | 02:19 | |
| *** phalmos has quit IRC | 02:28 | |
| *** lamt has joined #openstack-keystone | 02:29 | |
| *** Zer0Byte__ has quit IRC | 02:39 | |
| mfisch | stevemar: M-> N upgrade was non-detectable, no outage | 02:43 |
| mfisch | so thanks guys | 02:43 |
| morgan | ay | 02:49 |
| morgan | ayoung: interesting.. | 02:49 |
| *** spzala has quit IRC | 02:54 | |
| *** asettle has joined #openstack-keystone | 03:15 | |
| *** asettle has quit IRC | 03:20 | |
| *** guoshan has quit IRC | 03:33 | |
| *** edtubill has joined #openstack-keystone | 03:34 | |
| *** guoshan has joined #openstack-keystone | 03:36 | |
| *** edmondsw has joined #openstack-keystone | 03:41 | |
| *** diazjf has quit IRC | 03:43 | |
| *** edmondsw has quit IRC | 03:46 | |
| *** guoshan has quit IRC | 03:52 | |
| *** chrisplo has joined #openstack-keystone | 03:56 | |
| *** chrisplo has quit IRC | 04:01 | |
| *** zhangjl has quit IRC | 04:12 | |
| *** zhangjl has joined #openstack-keystone | 04:12 | |
| *** asettle has joined #openstack-keystone | 04:16 | |
| *** zhangjl has quit IRC | 04:17 | |
| *** dave-mccowan has quit IRC | 04:19 | |
| *** asettle has quit IRC | 04:21 | |
| *** ayoung has quit IRC | 04:34 | |
| *** harlowja has joined #openstack-keystone | 04:37 | |
| *** GB21 has joined #openstack-keystone | 04:37 | |
| *** nicolasbock has quit IRC | 04:48 | |
| *** guoshan has joined #openstack-keystone | 04:53 | |
| *** spzala has joined #openstack-keystone | 04:54 | |
| *** adriant has quit IRC | 04:56 | |
| *** faizy has joined #openstack-keystone | 04:57 | |
| *** guoshan has quit IRC | 04:57 | |
| *** chrisplo has joined #openstack-keystone | 04:59 | |
| *** spzala has quit IRC | 04:59 | |
| *** links has joined #openstack-keystone | 05:05 | |
| *** asettle has joined #openstack-keystone | 05:17 | |
| *** faizy has quit IRC | 05:17 | |
| *** asettle has quit IRC | 05:22 | |
| *** faizy has joined #openstack-keystone | 05:28 | |
| *** harlowja has quit IRC | 05:46 | |
| *** GB21 has quit IRC | 05:49 | |
| *** guoshan has joined #openstack-keystone | 05:54 | |
| *** guoshan has quit IRC | 05:58 | |
| *** tovin07 has joined #openstack-keystone | 05:59 | |
| *** jaosorior has joined #openstack-keystone | 06:05 | |
| *** GB21 has joined #openstack-keystone | 06:09 | |
| *** asettle has joined #openstack-keystone | 06:18 | |
| *** alex_xu has quit IRC | 06:20 | |
| *** davechen has quit IRC | 06:23 | |
| *** asettle has quit IRC | 06:23 | |
| *** davechen has joined #openstack-keystone | 06:23 | |
| *** alex_xu has joined #openstack-keystone | 06:24 | |
| *** udesale has joined #openstack-keystone | 06:26 | |
| *** guoshan has joined #openstack-keystone | 06:28 | |
| *** voelzmo has joined #openstack-keystone | 06:37 | |
| *** voelzmo has quit IRC | 06:38 | |
| *** voelzmo has joined #openstack-keystone | 06:38 | |
| openstackgerrit | chenaidong1 proposed openstack/python-keystoneclient: Use assertIsNone(...) instead of assertEqual(None, ...) https://review.openstack.org/408430 | 06:38 |
| *** richm has quit IRC | 06:40 | |
| *** tsufiev_ is now known as tsufiev | 06:45 | |
| *** jaosorior has quit IRC | 06:48 | |
| *** liujiong_66 has joined #openstack-keystone | 06:48 | |
| *** liujiong has quit IRC | 06:50 | |
| *** pnavarro has joined #openstack-keystone | 06:54 | |
| *** voelzmo has quit IRC | 06:57 | |
| *** tobberydberg has joined #openstack-keystone | 07:00 | |
| *** pnavarro has quit IRC | 07:00 | |
| *** faizy has quit IRC | 07:11 | |
| *** faizy has joined #openstack-keystone | 07:12 | |
| *** asettle has joined #openstack-keystone | 07:19 | |
| *** liujiong_66 is now known as liujiong | 07:23 | |
| *** asettle has quit IRC | 07:23 | |
| *** rcernin has joined #openstack-keystone | 07:26 | |
| *** edtubill has quit IRC | 07:27 | |
| *** magic has joined #openstack-keystone | 07:29 | |
| *** xiaoyang has quit IRC | 07:32 | |
| *** xiaoyang has joined #openstack-keystone | 07:32 | |
| *** magic has quit IRC | 07:33 | |
| *** zhangjl has joined #openstack-keystone | 07:36 | |
| *** GB21 has quit IRC | 07:40 | |
| *** tobberyd_ has joined #openstack-keystone | 07:44 | |
| *** tobberydberg has quit IRC | 07:48 | |
| *** GB21 has joined #openstack-keystone | 07:52 | |
| *** spzala has joined #openstack-keystone | 07:54 | |
| *** spzala has quit IRC | 07:59 | |
| *** xiaoyang has quit IRC | 08:00 | |
| *** arunkant has quit IRC | 08:10 | |
| openstackgerrit | chenaidong1 proposed openstack/python-keystoneclient: Use assertIsNone(...) instead of assertEqual(None, ...) https://review.openstack.org/408430 | 08:10 |
| *** tobberyd_ has quit IRC | 08:16 | |
| *** tobberydberg has joined #openstack-keystone | 08:17 | |
| *** asettle has joined #openstack-keystone | 08:20 | |
| *** asettle has quit IRC | 08:24 | |
| *** jamielennox is now known as jamielennox|away | 08:33 | |
| *** pcaruana has joined #openstack-keystone | 08:58 | |
| *** zzzeek has quit IRC | 09:00 | |
| *** zzzeek has joined #openstack-keystone | 09:00 | |
| *** edmondsw has joined #openstack-keystone | 09:06 | |
| *** zhangjl has quit IRC | 09:10 | |
| openstackgerrit | chenaidong1 proposed openstack/python-keystoneclient: Use assertIsNone(...) instead of assertEqual(None, ...) https://review.openstack.org/408430 | 09:11 |
| *** edmondsw has quit IRC | 09:11 | |
| *** zhangjl has joined #openstack-keystone | 09:11 | |
| *** zhangjl has quit IRC | 09:13 | |
| *** pnavarro has joined #openstack-keystone | 09:22 | |
| *** asettle has joined #openstack-keystone | 09:24 | |
| *** davechen1 has left #openstack-keystone | 09:36 | |
| *** mvk has quit IRC | 09:39 | |
| *** jaosorior has joined #openstack-keystone | 09:41 | |
| *** hogepodge has quit IRC | 09:45 | |
| *** hogepodge has joined #openstack-keystone | 09:46 | |
| *** arunkant has joined #openstack-keystone | 09:54 | |
| *** liujiong has quit IRC | 10:06 | |
| *** Zer0Byte__ has joined #openstack-keystone | 10:06 | |
| *** mvk has joined #openstack-keystone | 10:11 | |
| *** GB21 has quit IRC | 10:11 | |
| *** GB21 has joined #openstack-keystone | 10:34 | |
| *** hoangcx has quit IRC | 10:36 | |
| *** guoshan has quit IRC | 11:00 | |
| *** links has quit IRC | 11:00 | |
| *** hogepodge has quit IRC | 11:01 | |
| *** udesale has quit IRC | 11:04 | |
| *** udesale has joined #openstack-keystone | 11:05 | |
| *** GB21 has quit IRC | 11:06 | |
| *** richm has joined #openstack-keystone | 11:10 | |
| *** links has joined #openstack-keystone | 11:17 | |
| *** udesale has quit IRC | 11:17 | |
| *** Zer0Byte__ has quit IRC | 11:20 | |
| *** hogepodge has joined #openstack-keystone | 11:21 | |
| *** lamt has quit IRC | 11:24 | |
| *** hogepodge has quit IRC | 11:26 | |
| *** udesale has joined #openstack-keystone | 11:31 | |
| *** edtubill has joined #openstack-keystone | 11:33 | |
| *** hogepodge has joined #openstack-keystone | 11:38 | |
| *** voelzmo has joined #openstack-keystone | 11:39 | |
| *** GB21 has joined #openstack-keystone | 11:44 | |
| *** tobberydberg has quit IRC | 11:45 | |
| *** tobberydberg has joined #openstack-keystone | 11:46 | |
| *** hogepodge has quit IRC | 11:48 | |
| *** nicolasbock has joined #openstack-keystone | 11:49 | |
| *** spzala has joined #openstack-keystone | 11:55 | |
| *** GB21 has quit IRC | 11:55 | |
| *** spzala has quit IRC | 11:59 | |
| *** hogepodge has joined #openstack-keystone | 12:00 | |
| *** dave-mccowan has joined #openstack-keystone | 12:02 | |
| *** voelzmo has quit IRC | 12:06 | |
| *** jaosorior has quit IRC | 12:10 | |
| *** edtubill has quit IRC | 12:11 | |
| *** edtubill has joined #openstack-keystone | 12:15 | |
| *** edtubill has quit IRC | 12:21 | |
| samueldmq | morning keystone | 12:24 |
| openstackgerrit | Merged openstack/keystone: Trivial indentation corrections in mappings doc https://review.openstack.org/408363 | 12:26 |
| *** faizy has quit IRC | 12:36 | |
| *** jaosorior has joined #openstack-keystone | 12:37 | |
| *** links has quit IRC | 12:53 | |
| *** udesale has quit IRC | 12:58 | |
| *** udesale has joined #openstack-keystone | 12:58 | |
| *** guoshan has joined #openstack-keystone | 13:01 | |
| *** edmondsw_ has joined #openstack-keystone | 13:04 | |
| dstanek | samueldmq: morning | 13:04 |
| *** links has joined #openstack-keystone | 13:05 | |
| *** guoshan has quit IRC | 13:05 | |
| *** edmondsw__ has joined #openstack-keystone | 13:06 | |
| *** edmondsw__ has quit IRC | 13:06 | |
| stevemar | dstanek: samueldmq morning! | 13:09 |
| *** AndyWojo has quit IRC | 13:09 | |
| *** boris-42 has quit IRC | 13:09 | |
| *** AndyWojo has joined #openstack-keystone | 13:10 | |
| *** boris-42 has joined #openstack-keystone | 13:10 | |
| dstanek | morning stevemar | 13:10 |
| samueldmq | dstanek: stevemar: hi, morning | 13:12 |
| openstackgerrit | Dougal Matthews proposed openstack/keystone: Correct missspellings of secret https://review.openstack.org/408611 | 13:14 |
| *** itisha has joined #openstack-keystone | 13:17 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Use assertIsNone(...) instead of assertEqual(None, ...) https://review.openstack.org/408430 | 13:19 |
| openstackgerrit | Dougal Matthews proposed openstack/keystone: Correct missspellings of secret https://review.openstack.org/408611 | 13:25 |
| *** ayoung has joined #openstack-keystone | 13:35 | |
| *** ChanServ sets mode: +v ayoung | 13:35 | |
| *** udesale has quit IRC | 13:42 | |
| openstackgerrit | Merged openstack/keystone: Fixed multiple warnings in tox -edocs https://review.openstack.org/408312 | 13:54 |
| *** spzala has joined #openstack-keystone | 14:10 | |
| *** eandersson has joined #openstack-keystone | 14:11 | |
| openstackgerrit | Merged openstack/keystone: Revert "Rename doctor symptom in security_compliance" https://review.openstack.org/407763 | 14:18 |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS https://review.openstack.org/403898 | 14:19 |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS https://review.openstack.org/403898 | 14:24 |
| *** guoshan has joined #openstack-keystone | 14:28 | |
| dstanek | ayoung: i know i've asked this before, but do you know of any good book on policy? (asking for a friend :) | 14:32 |
| *** guoshan has quit IRC | 14:33 | |
| ayoung | dstanek, https://www.amazon.com/U-S-Foreign-Policy-Michael-Cox/dp/0199585814/ref=sr_1_1?ie=UTF8&qid=1481207601&sr=8-1&keywords=us+foreign+policy | 14:33 |
| ayoung | dstanek, actually, I don't think you have asked this before | 14:34 |
| ayoung | and I don't have a recommendation for you. I have a book on Web Services security, but it does not really lay things out. | 14:34 |
| ayoung | dstanek, I have a bunch of links at the bottom of the current spec, and I might suggest you start there | 14:35 |
| dstanek | ayoung: will do thx | 14:36 |
| dstanek | foreign policy just isn't my style anyway | 14:36 |
| dstanek | i have general knowlegde, but was hoping to really dig into theory and advanced implementations | 14:36 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Print domain name in mapping_populate error message https://review.openstack.org/404197 | 14:37 |
| ayoung | dstanek, not sure how advanced the theory is here. Mostly things grow from the principal of least privilege. | 14:38 |
| ayoung | dstanek, think in terms of Python Namespaces | 14:39 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs: Fix a spelling mistake in a PCI-DSS spec https://review.openstack.org/408648 | 14:39 |
| ayoung | its not much different than code: how do you expose only what is required to get the job done, but not some much as to break your working assumptions | 14:40 |
| ayoung | heh, kindof like our discussion about the project ID from Tuesdays meeting | 14:40 |
| *** thiagolib has quit IRC | 14:48 | |
| openstackgerrit | ayoung proposed openstack/keystone: URL pattern based RBAC Management Interface https://review.openstack.org/401808 | 14:48 |
| *** daemontool has joined #openstack-keystone | 14:49 | |
| ayoung | dstanek, which name do you like better for the database table (and the object, API etc) api_access or access_rule? | 14:53 |
| openstackgerrit | Merged openstack/keystone: Add doctor check for debug mode enabled https://review.openstack.org/408218 | 14:55 |
| openstackgerrit | Merged openstack/keystone: Upload service provider metadata to testshib https://review.openstack.org/400747 | 14:55 |
| openstackgerrit | Merged openstack/keystone: Include mapped in the default auth methods https://review.openstack.org/403816 | 14:55 |
| dstanek | ayoung: i don't really have a preference - probably would depend on what fields it contains | 14:57 |
| dstanek | i'm terrible at naming things | 14:57 |
| ayoung | dstanek, it contains: the VERB (GET, PUT POST) and URL pattern for an API, and the role ID for the role that can access it | 14:58 |
| ayoung | dstanek, https://review.openstack.org/#/c/391624/18/specs/keystone/ongoing/role-check-from-middleware.rst line 265 | 14:58 |
| *** lamt has joined #openstack-keystone | 15:01 | |
| *** adrian_otto has joined #openstack-keystone | 15:02 | |
| *** phalmos has joined #openstack-keystone | 15:03 | |
| *** nklenke has joined #openstack-keystone | 15:12 | |
| *** chlong has joined #openstack-keystone | 15:13 | |
| *** links has quit IRC | 15:20 | |
| ayoung | dstanek, another possiblity is api_role | 15:21 |
| ayoung | that might be the most accurate | 15:21 |
| openstackgerrit | henry-nash proposed openstack/keystone: Pass request back into wsgi render_reponse https://review.openstack.org/330720 | 15:22 |
| openstackgerrit | henry-nash proposed openstack/keystone: Pass request back into wsgi render_reponse https://review.openstack.org/330720 | 15:31 |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: API Documentation for user password expires https://review.openstack.org/405574 | 15:31 |
| *** henrynash has joined #openstack-keystone | 15:31 | |
| *** ChanServ sets mode: +v henrynash | 15:31 | |
| *** jaugustine has joined #openstack-keystone | 15:34 | |
| dstanek | ayoung: sounds relatively accurate. I wish I had a better noun for API though | 15:34 |
| ayoung | dstanek, yeah, me too. URL is the resource locator, the Verb is the action. In the past they were RPCs, but for REST the term API seems to be the most accepted | 15:36 |
| *** adrian_otto has quit IRC | 15:40 | |
| *** ravelar has joined #openstack-keystone | 15:48 | |
| *** chris_hultin|AWA is now known as chris_hultin | 15:49 | |
| *** phalmos has quit IRC | 15:49 | |
| *** Marcellin__ has joined #openstack-keystone | 15:50 | |
| *** jaosorior has quit IRC | 15:52 | |
| *** jaosorior has joined #openstack-keystone | 15:53 | |
| *** narasimha_SV has joined #openstack-keystone | 15:55 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Expose idempotency issue with bootstrap https://review.openstack.org/408694 | 15:57 |
| *** henrynash has quit IRC | 15:58 | |
| narasimha_SV | https://review.openstack.org/#/c/395967/ after adding this patch I am able to connect to LDAP and I can use the admin user in LDAP. but getting authorization error while running any keystone command | 15:59 |
| *** phalmos has joined #openstack-keystone | 15:59 | |
| narasimha_SV | http://paste.openstack.org/show/591824/ | 15:59 |
| *** henrynash has joined #openstack-keystone | 15:59 | |
| *** ChanServ sets mode: +v henrynash | 15:59 | |
| *** agrebennikov has joined #openstack-keystone | 16:02 | |
| *** agarner has joined #openstack-keystone | 16:03 | |
| *** phalmos has quit IRC | 16:04 | |
| *** daemontool has quit IRC | 16:05 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Role Check from Middleware https://review.openstack.org/391624 | 16:08 |
| *** ayoung_ has joined #openstack-keystone | 16:09 | |
| *** ayoung_ has quit IRC | 16:09 | |
| *** ayoung_ has joined #openstack-keystone | 16:09 | |
| *** jaosorior has quit IRC | 16:11 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Add unit tests for doctor's database symptoms https://review.openstack.org/407062 | 16:13 |
| *** ayoung has quit IRC | 16:13 | |
| *** ayoung_ is now known as ayoung | 16:14 | |
| *** ayoung_ has joined #openstack-keystone | 16:14 | |
| *** adrian_otto has joined #openstack-keystone | 16:17 | |
| *** pcaruana has quit IRC | 16:19 | |
| *** guoshan has joined #openstack-keystone | 16:29 | |
| *** mvk has quit IRC | 16:30 | |
| *** rcernin has quit IRC | 16:31 | |
| *** guoshan has quit IRC | 16:34 | |
| *** knikolla has quit IRC | 16:42 | |
| *** knikolla has joined #openstack-keystone | 16:42 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Federated authentication via ECP functional tests https://review.openstack.org/324769 | 16:53 |
| *** tobberydberg has quit IRC | 16:55 | |
| *** browne has joined #openstack-keystone | 16:59 | |
| *** alex_xu has quit IRC | 17:00 | |
| *** nklenke has quit IRC | 17:00 | |
| *** alex_xu has joined #openstack-keystone | 17:02 | |
| *** rcernin has joined #openstack-keystone | 17:03 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Make bootstrap idempotent when it needs to be https://review.openstack.org/408719 | 17:03 |
| *** Ephur has joined #openstack-keystone | 17:04 | |
| lbragstad | dolphm ^ | 17:08 |
| lbragstad | it'd be good to have morgan review that, too | 17:09 |
| dolphm | lbragstad: awesome, will review | 17:09 |
| lbragstad | dolphm thanks | 17:09 |
| *** knikolla has quit IRC | 17:11 | |
| *** henrynash has quit IRC | 17:12 | |
| *** knikolla has joined #openstack-keystone | 17:12 | |
| * stevemar grumbles | 17:13 | |
| samueldmq | lbragstad: lgtm, thanks for addressing it quickly | 17:18 |
| *** phalmos has joined #openstack-keystone | 17:18 | |
| samueldmq | ayoung: ayoung_: about your retry on deadlock bug | 17:19 |
| ayoung | samueldmq, I asked for steps to reproduce | 17:19 |
| samueldmq | those kind of deadlocks may happen in write operations to the database, correct ? thus delete/update/create | 17:19 |
| samueldmq | ayoung: ^ should we always retry ? | 17:20 |
| samueldmq | what I mean is, this time it was that operation, tomorrow it'll be another. | 17:21 |
| ayoung | samueldmq, I don't know. It depends on how much info we have at the time | 17:21 |
| ayoung | need to look into what shows in the log, and what is actionable in the exception | 17:21 |
| samueldmq | ayoung: from the logs posted in the bug, I can clearly see it was the delete_user operation | 17:22 |
| samueldmq | ayoung: can't see anything else useful besides that | 17:23 |
| samueldmq | ayoung: just ping me if you need help or someone to discuss on that (since you're the reporter) | 17:23 |
| ayoung | samueldmq, only because the original reporter stuck it in RH Bugzilla but not upstream | 17:24 |
| ayoung | I'm kindof "Meh" about it personally, but due dilligence.... | 17:24 |
| samueldmq | ayoung: gotcha. and you're trying to get more info from it | 17:24 |
| ayoung | or if someone else sees something comparable, we have a place to gather data | 17:25 |
| *** diazjf has joined #openstack-keystone | 17:28 | |
| samueldmq | ayoung: there is more info here if you want to compare https://bugs.launchpad.net/keystone/+bug/1604862 | 17:30 |
| openstack | Launchpad bug 1604862 in OpenStack Identity (keystone) "DBDeadlock: (_mysql_exceptions.OperationalError) while deleting user" [Medium,Fix released] - Assigned to Mikhail Nikolaenko (mnikolaenko) | 17:30 |
| samueldmq | ayoung: was it against galera ? | 17:31 |
| ayoung | samueldmq, yeah, but it might not hqave that patch applied | 17:32 |
| samueldmq | ayoung: interesting, because in that other bug it was galera too, see https://bugs.launchpad.net/keystone/+bug/1604862/comments/1 | 17:33 |
| openstack | Launchpad bug 1604862 in OpenStack Identity (keystone) "DBDeadlock: (_mysql_exceptions.OperationalError) while deleting user" [Medium,Fix released] - Assigned to Mikhail Nikolaenko (mnikolaenko) | 17:33 |
| ayoung | rhos-10 was Mitaka based | 17:33 |
| ayoung | samueldmq, I'm going to mark mine a dupe of this one | 17:33 |
| samueldmq | ayoung: I think that fair. In the original one there is more log and we can see the original call was to delete a revocation event. | 17:35 |
| samueldmq | ayoung: in yours there is not enough logging, so it might just be the same | 17:35 |
| ayoung | looks like it | 17:37 |
| ayoung | samueldmq, here's the downstream https://bugzilla.redhat.com/show_bug.cgi?id=1394470 | 17:37 |
| openstack | bugzilla.redhat.com bug 1394470 in openstack-keystone "keystone does not retry on deadlock Transactions [500 Error]" [Unspecified,New] - Assigned to ayoung | 17:37 |
| samueldmq | wow our bot also understands it | 17:41 |
| samueldmq | ayoung: yeah, for me it seems to be a duplicate report. I have commented on your report | 17:42 |
| samueldmq | ayoung: it would be nice if you could just confirm you're not running Newton and mark as duplicate. sounds good? | 17:42 |
| ayoung | samueldmq, its on OSP10. | 17:42 |
| ayoung | that is Newton | 17:42 |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Add doctor check for security_compliance https://review.openstack.org/408743 | 17:43 |
| samueldmq | ayoung: ok, you had mentioned it was on rhos-10 which is Mitaka based | 17:43 |
| ayoung | Er...yeah, it is Mitaka.... | 17:44 |
| ayoung | http://adam.younglogic.com/2015/11/translating-between-rdorhos-and-upstream-openstack-releases/ | 17:44 |
| ayoung | I was wrong again | 17:44 |
| ayoung | 10 is Newton...can't keep it straigh | 17:44 |
| ayoung | t | 17:44 |
| samueldmq | ayoung: ok, and you're sure they've applied N-3 already | 17:45 |
| samueldmq | (just making sure, that was released in N-3) | 17:45 |
| ayoung | No clue...going to leave it as is unless someone bothers me about it. | 17:45 |
| ayoung | Upstream has it fixed, we should be good downstream | 17:46 |
| samueldmq | ayoung: kk | 17:46 |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS https://review.openstack.org/403898 | 17:54 |
| *** browne has quit IRC | 17:56 | |
| breton | ayoung: samueldmq: the deadlock issue was fixed only for revocations | 17:58 |
| breton | afaik | 17:58 |
| ayoung | breton, ah...ok | 17:58 |
| samueldmq | breton: interesting, but the bug it fixes says "[..] while deleting user" | 17:59 |
| breton | samueldmq: well, it seems that 2 deadlocks can happen :) | 17:59 |
| rodrigods | knikolla, around? | 18:03 |
| samueldmq | breton: it seemed odd to me. bug reports user delete, fix is with revocation event :) | 18:03 |
| *** rm_work has quit IRC | 18:16 | |
| *** harlowja has joined #openstack-keystone | 18:17 | |
| oomichi | bknudson: hi, can I help the request jsonschema validation thing I heard from mriedem ? | 18:20 |
| *** harlowja_ has joined #openstack-keystone | 18:20 | |
| *** harlowja has quit IRC | 18:22 | |
| *** rm_work has joined #openstack-keystone | 18:23 | |
| *** tobberydberg has joined #openstack-keystone | 18:25 | |
| narasimha_SV | http://paste.openstack.org/show/591824/ | 18:27 |
| narasimha_SV | anyone working on LDAP support to openstack | 18:27 |
| *** guoshan has joined #openstack-keystone | 18:30 | |
| *** browne has joined #openstack-keystone | 18:30 | |
| *** tqtran has joined #openstack-keystone | 18:33 | |
| *** diazjf has quit IRC | 18:34 | |
| *** guoshan has quit IRC | 18:34 | |
| openstackgerrit | Merged openstack/keystone: Correct missspellings of secret https://review.openstack.org/408611 | 18:36 |
| lbragstad | ravelar have you been able to recreate the py34 failures from https://review.openstack.org/#/c/407062/7 locally? | 18:38 |
| *** tobberydberg has quit IRC | 18:39 | |
| ravelar | lbragstad no but i ran recheck | 18:39 |
| bknudson | oomichi: I proposed it here: https://review.openstack.org/#/c/404962/ | 18:41 |
| bknudson | would be nice to get some quick feedback on whether this is the right way to do it. | 18:42 |
| lbragstad | ravelar hmm - i can't reproduce it locally | 18:45 |
| lbragstad | all the py34 tests passed for me | 18:45 |
| *** dave-mccowan has quit IRC | 18:49 | |
| *** adrian_otto has quit IRC | 18:51 | |
| bknudson | "Correct missspellings of secret" -- was that on purpose?? | 18:51 |
| *** browne1 has joined #openstack-keystone | 18:53 | |
| *** browne has quit IRC | 18:53 | |
| lbragstad | bknudson i thought the use of secrete was known as "this is just some secret value" | 18:53 |
| bknudson | I was referring to the misspelling in the commit title. | 18:54 |
| lbragstad | oh - lol | 18:55 |
| openstackgerrit | Merged openstack/keystone: Print domain name in mapping_populate error message https://review.openstack.org/404197 | 18:56 |
| openstackgerrit | Merged openstack/keystone: Add test to expose bug 1625230 https://review.openstack.org/407558 | 18:56 |
| openstack | bug 1625230 in OpenStack Identity (keystone) "Role Assignment Incorrectly Reports Inheritance when --name is Used" [Medium,In progress] https://launchpad.net/bugs/1625230 - Assigned to Samuel de Medeiros Queiroz (samueldmq) | 18:56 |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Add unit tests for doctor's database symptoms https://review.openstack.org/407062 | 18:59 |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Update doctor database symptom name and add tests https://review.openstack.org/407062 | 19:02 |
| *** tobberydberg has joined #openstack-keystone | 19:06 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Print name with duplicate error on user creation https://review.openstack.org/405104 | 19:09 |
| *** tobberydberg has quit IRC | 19:10 | |
| openstackgerrit | Merged openstack/keystone: Get assignments with names honors inheritance flag https://review.openstack.org/380973 | 19:11 |
| *** edmondsw_ has quit IRC | 19:17 | |
| *** edmondsw has joined #openstack-keystone | 19:17 | |
| * stevemar grumbles more | 19:21 | |
| samueldmq | lbragstad: replied to https://review.openstack.org/#/c/407062 let me know if you agree | 19:23 |
| lbragstad | stevemar you having a case of the Mondays? | 19:25 |
| *** ravelar has quit IRC | 19:27 | |
| bknudson | lbragstad: probably because the leafs lost. | 19:28 |
| lbragstad | bknudson probably | 19:29 |
| * lbragstad whooop whooop | 19:30 | |
| *** guoshan has joined #openstack-keystone | 19:31 | |
| *** guoshan has quit IRC | 19:35 | |
| lbragstad | wow dubnyk had a good game | 19:36 |
| *** adrian_otto has joined #openstack-keystone | 19:39 | |
| *** agrebennikov_ has joined #openstack-keystone | 19:41 | |
| *** agrebennikov has quit IRC | 19:41 | |
| *** rcernin has quit IRC | 19:43 | |
| stevemar | bknudson: ha | 19:47 |
| stevemar | lbragstad: no, my one appointment in the morning has derailed my entire day | 19:48 |
| lbragstad | stevemar ah | 19:51 |
| *** ravelar has joined #openstack-keystone | 19:52 | |
| *** rcernin has joined #openstack-keystone | 19:57 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Add unit tests for doctor's database symptoms https://review.openstack.org/407062 | 19:59 |
| stevemar | ravelar: is there a reason why you renamed the doctor import to doc_database? meant to ask that earlier | 20:00 |
| ravelar | stevemar isn't there a database import already there? | 20:02 |
| stevemar | ravelar: what the, howd i miss that!? | 20:04 |
| stevemar | ravelar: i swear i looked at the imports earlier.. :) | 20:04 |
| ravelar | stevemar haha no problem:) | 20:04 |
| *** tobberydberg has joined #openstack-keystone | 20:07 | |
| *** henrynash has joined #openstack-keystone | 20:09 | |
| *** ChanServ sets mode: +v henrynash | 20:09 | |
| *** ayoung has quit IRC | 20:12 | |
| *** ayoung_ has quit IRC | 20:12 | |
| *** ayoung has joined #openstack-keystone | 20:12 | |
| *** ChanServ sets mode: +v ayoung | 20:12 | |
| *** jamielennox|away is now known as jamielennox | 20:13 | |
| *** tobberydberg has quit IRC | 20:19 | |
| *** spzala has quit IRC | 20:22 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Deprecate the generic client https://review.openstack.org/407844 | 20:27 |
| *** d0ugal has quit IRC | 20:29 | |
| *** narasimha_SV has quit IRC | 20:30 | |
| *** ravelar has quit IRC | 20:31 | |
| *** ravelar has joined #openstack-keystone | 20:33 | |
| *** d0ugal has joined #openstack-keystone | 20:35 | |
| *** henrynash has quit IRC | 20:36 | |
| *** spzala has joined #openstack-keystone | 20:36 | |
| *** spzala has quit IRC | 20:39 | |
| *** sanagikoki has joined #openstack-keystone | 20:40 | |
| *** sanagikoki has quit IRC | 20:41 | |
| *** adriant has joined #openstack-keystone | 20:42 | |
| *** tobberydberg has joined #openstack-keystone | 20:45 | |
| *** diazjf has joined #openstack-keystone | 20:47 | |
| *** dave-mccowan has joined #openstack-keystone | 20:49 | |
| *** tobberydberg has quit IRC | 20:50 | |
| *** rcernin has quit IRC | 20:51 | |
| *** rcernin has joined #openstack-keystone | 20:51 | |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: API Documentation for user password expires https://review.openstack.org/405574 | 20:52 |
| openstackgerrit | Merged openstack/keystone: Print name with duplicate error on user creation https://review.openstack.org/405104 | 20:54 |
| openstackgerrit | Merged openstack/keystone-specs: Fix a spelling mistake in a PCI-DSS spec https://review.openstack.org/408648 | 20:57 |
| *** itisha has quit IRC | 20:59 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Make bootstrap idempotent when it needs to be https://review.openstack.org/408719 | 21:01 |
| *** lamt has quit IRC | 21:01 | |
| *** ravelar has quit IRC | 21:03 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add reason to notifications for PCI-DSS https://review.openstack.org/396752 | 21:04 |
| stevemar | lbragstad: nooooo ravelar is gone | 21:06 |
| lbragstad | stevemar like the wind.... | 21:07 |
| stevemar | lbragstad: had comments on https://review.openstack.org/#/c/405104/ -- i'll bug him to follow up on them | 21:07 |
| *** rcernin has quit IRC | 21:09 | |
| *** Ephur has quit IRC | 21:09 | |
| *** chlong has quit IRC | 21:10 | |
| *** rcernin has joined #openstack-keystone | 21:11 | |
| lbragstad | breton do you know if we have a list of all places where deadlocks happen (re: https://bugs.launchpad.net/keystone/+bug/1648542) | 21:16 |
| openstack | Launchpad bug 1648542 in OpenStack Identity (keystone) "keystone does not retry on deadlock Transactions [500 Error]" [Medium,Confirmed] | 21:16 |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS https://review.openstack.org/403898 | 21:17 |
| *** lamt has joined #openstack-keystone | 21:19 | |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: API Documentation for user password expires https://review.openstack.org/405574 | 21:20 |
| *** ravelar has joined #openstack-keystone | 21:26 | |
| lbragstad | stevemar ravelar | 21:27 |
| lbragstad | ravelar stevemar | 21:27 |
| ravelar | lbragstad o/ | 21:27 |
| lbragstad | ravelar did you happen to see the comments from stevemar on https://review.openstack.org/#/c/405104/ ? | 21:28 |
| ravelar | lbragstad just saw it, arent some of those like policy and trust unable to create duplicates from an operator perspective? | 21:29 |
| ravelar | I mean, I know one can be created if the id is not unique, but an operator cannot dictate what the id is for those? | 21:29 |
| stevemar | ravelar: hmm maybe, so why do we even have the conflict wrapper there :O | 21:31 |
| *** guoshan has joined #openstack-keystone | 21:32 | |
| ravelar | stevemar from what I could see, it would get raised if an id was duplicate but I couldn't get it to give me a duplicated error when creating duplicate trusts/policies with the same info. :/ | 21:32 |
| *** mvk has joined #openstack-keystone | 21:33 | |
| lbragstad | ravelar the only thing an operator can dictate an id for is regions I think | 21:33 |
| *** guoshan has quit IRC | 21:36 | |
| ravelar | lbragstad right, so how are things like trust supposed to raise a duplicate error if having the same project, role, trustor and trustee on "trust create" doesn't raise one? | 21:40 |
| lbragstad | the unique constraint in those situations from come the fact the id is the primary key of the table | 21:41 |
| ravelar | lbragstad so can an operator cause a duplicate error? | 21:42 |
| ravelar | stevemar: I will get to the remaining changes from your comments and add the tests as well for the remaining objects | 21:42 |
| lbragstad | they could if they create enough trusts :) | 21:42 |
| ravelar | lbragstad where ids would overlap? | 21:42 |
| lbragstad | right | 21:44 |
| ravelar | lbragstad ahh okay :) | 21:45 |
| lbragstad | ravelar http://stackoverflow.com/questions/4306420/math-question-regarding-pythons-uuid4 | 21:45 |
| antwash | ravelar : you'll be great one day haha | 21:46 |
| *** tobberydberg has joined #openstack-keystone | 21:46 | |
| *** lamt has quit IRC | 21:48 | |
| breton | lbragstad: no, i've only seen it in revocations | 21:48 |
| breton | lbragstad: and ayoung now ran into it in identity backend | 21:49 |
| *** lamt has joined #openstack-keystone | 21:49 | |
| breton | lbragstad: this is a pretty rare thing and happens only when many items gets deleted/updates | 21:49 |
| ayoung | breton, I didn't...was just reported by someone in RH Bugzilla,. with no steps to repro | 21:49 |
| ayoung | think rally, though | 21:49 |
| lbragstad | breton hmmm - i'm going to update it to be identity specific then | 21:49 |
| breton | ayoung: i think rally too | 21:50 |
| breton | lbragstad: sql specific | 21:50 |
| breton | lbragstad: i think it can happen on any sql backend | 21:50 |
| lbragstad | breton and sql specific | 21:50 |
| lbragstad | breton it can - but for fixing that case it should only be in the identity backend, right/ | 21:50 |
| lbragstad | breton i was contemplating making the bug generic enough so that a patch to address all the conflicts would close it - but if we don't know what all of those are, then I'd say let's fix them independently | 21:51 |
| lbragstad | s/conflict/deadlocks/ | 21:52 |
| lbragstad | antwash i like the positivity ;) | 21:52 |
| lbragstad | antwash and ravelar is already great! | 21:52 |
| antwash | lbragstad : yeah he's great man, just messing with him he's over here beating his head on the keyboard lol | 21:53 |
| openstackgerrit | Merged openstack/keystone: Add unit tests for doctor's database symptoms https://review.openstack.org/407062 | 21:53 |
| lbragstad | antwash lol - you sit next to him now? | 21:54 |
| antwash | lbragstad : If that happened I wouldn't get no work done lol -- he's was at my desk showing me the cool keystone stuff he gets to do. | 21:55 |
| ravelar | lbragstad don't encourage him ha. | 21:55 |
| lbragstad | antwash lob a nerf dart at ravelar for me please ;p | 21:56 |
| stevemar | antwash: ravelar keystone has cool stuff? | 21:56 |
| antwash | lbragstad : haha most def, specially when he's going on his keystone pep8 failing rant! | 21:57 |
| lbragstad | antwash lol | 21:57 |
| ravelar | antwash: you're a good liar, you'd be great for this game called "resistance" lbragstad was destroying me at it ha | 21:57 |
| *** ayoung has quit IRC | 21:57 | |
| lbragstad | ravelar ++ | 21:58 |
| ravelar | stevemar: its cool when it works ha | 21:58 |
| lbragstad | ravelar or when you remember to run pep8 checks before pushing patches to gerrit ;) | 21:58 |
| stevemar | ravelar: keystone works? o_O | 21:58 |
| lbragstad | oh - shots fired! | 21:58 |
| *** tobberydberg has quit IRC | 21:58 | |
| antwash | ravelar : Your new job is showing me the ins & outs of keystone -- need to get some patches up :) | 21:59 |
| stevemar | ravelar: you know i went 3 for 3 when playing resistance with lbragstad | 21:59 |
| *** adrian_otto has quit IRC | 21:59 | |
| * lbragstad high-fives stevemar | 21:59 | |
| stevemar | no one ever expects the canadian to be the spy | 21:59 |
| antwash | hahah the resistance game, I heard about that! | 21:59 |
| lbragstad | topol's still trying to figure out what happened | 22:00 |
| ravelar | stevemar: haha that's awesome, lbragstad was giving me so much grief. All he would do is stare at me and everyone immediately became suspicious of me | 22:00 |
| *** chris_hultin is now known as chris_hultin|AWA | 22:01 | |
| lbragstad | ravelar it didn't help that you giggled the *whole* game | 22:01 |
| lbragstad | me: ravelar are you lying? | 22:05 |
| lbragstad | ravelar : <giggles> no! | 22:05 |
| lbragstad | it was all mighty suspicious | 22:05 |
| knikolla | rodrigods: yeah, still around? | 22:06 |
| ravelar | lbragstad cause you cant expect me not to when I know how it looked. You would say "I don't trust you" and it was more likely that me, the new keystone member at the time, we going to come under scrutiny | 22:08 |
| lbragstad | baha! | 22:08 |
| lbragstad | sounds like we need a rematch - but with more people | 22:09 |
| ravelar | lbragstad ready this time! and maybe ease up on the alcohol ha | 22:09 |
| lbragstad | booze + the resistance = great team bonding | 22:09 |
| ravelar | lbragstad ++ just 6 people was great. can only imagine 10-12 | 22:10 |
| *** diazjf has quit IRC | 22:13 | |
| lbragstad | it's a blast - i try to remember to bring my cards every time I travel somewhere | 22:13 |
| *** lamt has quit IRC | 22:14 | |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS https://review.openstack.org/403898 | 22:16 |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: API Documentation for user password expires https://review.openstack.org/405574 | 22:21 |
| *** diazjf has joined #openstack-keystone | 22:21 | |
| *** tobberydberg has joined #openstack-keystone | 22:25 | |
| *** phalmos has quit IRC | 22:25 | |
| *** jamielennox is now known as jamielennox|away | 22:29 | |
| lbragstad | stevemar dolphm https://review.openstack.org/#/c/408834/1 | 22:31 |
| lbragstad | and https://review.openstack.org/#/c/408835/1 | 22:31 |
| lbragstad | stable/mitaka https://review.openstack.org/#/c/408837/ and https://review.openstack.org/#/c/408838/ | 22:34 |
| *** jamielennox|away is now known as jamielennox | 22:34 | |
| *** tobberydberg has quit IRC | 22:36 | |
| *** ravelar has quit IRC | 22:39 | |
| *** spzala has joined #openstack-keystone | 22:39 | |
| stevemar | lbragstad: done | 22:41 |
| *** spzala has quit IRC | 22:44 | |
| *** henrynash has joined #openstack-keystone | 22:44 | |
| *** ChanServ sets mode: +v henrynash | 22:44 | |
| *** edmondsw has quit IRC | 22:45 | |
| * dolphm salutes lbragstad | 22:45 | |
| *** chris_hultin|AWA is now known as chris_hultin | 22:48 | |
| *** jaugustine has quit IRC | 22:51 | |
| lbragstad | dolphm stevemar thanks for the quick reviews | 22:52 |
| *** henrynash has quit IRC | 22:55 | |
| *** agrebennikov_ has quit IRC | 22:55 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Remove exception from v2 validation path https://review.openstack.org/404977 | 22:57 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Move V2TokenDataHelper to the v2.0 controller https://review.openstack.org/389383 | 22:57 |
| *** pnavarro has quit IRC | 23:00 | |
| *** tobberydberg has joined #openstack-keystone | 23:03 | |
| *** david-lyle_ has joined #openstack-keystone | 23:05 | |
| *** david-lyle has quit IRC | 23:07 | |
| *** chrisplo_ has joined #openstack-keystone | 23:08 | |
| *** chrisplo has quit IRC | 23:11 | |
| *** chris_hultin is now known as chris_hultin|AWA | 23:11 | |
| *** rcernin has quit IRC | 23:11 | |
| *** tobberydberg has quit IRC | 23:13 | |
| *** chris_hultin|AWA is now known as chris_hultin | 23:15 | |
| *** ravelar has joined #openstack-keystone | 23:15 | |
| *** ravelar has quit IRC | 23:20 | |
| *** chris_hultin is now known as chris_hultin|AWA | 23:21 | |
| *** ayoung has joined #openstack-keystone | 23:24 | |
| *** ChanServ sets mode: +v ayoung | 23:24 | |
| *** guoshan has joined #openstack-keystone | 23:32 | |
| *** rcernin has joined #openstack-keystone | 23:33 | |
| *** david-lyle_ is now known as david-lyle | 23:35 | |
| *** guoshan has quit IRC | 23:37 | |
| *** tobberydberg has joined #openstack-keystone | 23:40 | |
| *** rcernin has quit IRC | 23:49 | |
| *** jamielennox is now known as jamielennox|away | 23:49 | |
| *** tobberydberg has quit IRC | 23:53 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!