Wednesday, 2017-07-12

openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add min_version and max_version to adapter constructors  https://review.openstack.org/48274200:01
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Expose interface as a ListOpt for config files  https://review.openstack.org/48274300:01
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Remove kwargs from adapter.get_endpoint_data  https://review.openstack.org/48274400:01
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add support for next_min_version and not_before  https://review.openstack.org/48274500:01
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add ability to request a microversion in a request  https://review.openstack.org/48274600:02
mordredefried's stuff opened a whole can of worms00:02
mordredbut with that - I shall EOD and pick up the good fight tomorrow00:02
*** thorst has quit IRC00:17
openstackgerritMerged openstack/keystone master: Added configuration references to documentation  https://review.openstack.org/47454300:28
openstackgerritMerged openstack/keystone master: Added configuration options using oslo.config  https://review.openstack.org/47963100:28
*** zhurong has joined #openstack-keystone00:42
*** Shunli has joined #openstack-keystone00:48
*** liujiong has joined #openstack-keystone00:56
*** masuberu has joined #openstack-keystone01:14
openstackgerritwingwj proposed openstack/keystone master: [install] Clarify the paths of the rc files  https://review.openstack.org/48237301:17
*** masber has quit IRC01:18
openstackgerritGage Hugo proposed openstack/keystone master: Trim invalid characters from token authentication  https://review.openstack.org/47042501:30
*** ducttape_ has joined #openstack-keystone01:48
*** masber has joined #openstack-keystone01:57
*** masuberu has quit IRC02:00
*** ducttape_ has quit IRC02:02
openstackgerritMathieu Gagné proposed openstack/keystone master: Fix catalog endpoints format with templated catalog and v3  https://review.openstack.org/48276602:10
*** dtroyer has quit IRC02:11
*** dtroyer has joined #openstack-keystone02:12
*** ducttape_ has joined #openstack-keystone02:19
*** ducttape_ has quit IRC02:25
*** thorst has joined #openstack-keystone02:39
*** thorst has quit IRC02:44
*** jmlowe has joined #openstack-keystone02:50
openstackgerritYaguang Tang proposed openstack/keystonemiddleware master: Remove PKI/PKIZ auth support and tests  https://review.openstack.org/48189502:51
*** zzzeek_ has quit IRC02:52
*** zhurong has quit IRC03:08
*** aojea has joined #openstack-keystone03:13
*** brad[] has quit IRC03:16
*** aojea has quit IRC03:17
*** dave-mccowan has joined #openstack-keystone03:19
*** dave-mccowan has quit IRC03:40
*** zhurong has joined #openstack-keystone03:44
openstackgerritVan Hung Pham proposed openstack/keystonemiddleware master: Replace six.iteritems() with .items()  https://review.openstack.org/48279704:22
*** gongysh has joined #openstack-keystone04:35
*** tbh__ has joined #openstack-keystone04:38
*** tbh__ is now known as tbh_04:38
*** thorst has joined #openstack-keystone04:40
*** pcaruana has joined #openstack-keystone04:41
*** thorst has quit IRC04:45
*** ppiela_ has joined #openstack-keystone04:53
*** ppiela has quit IRC04:55
*** jmlowe has quit IRC04:56
*** pcaruana has quit IRC04:58
*** tobberydberg has joined #openstack-keystone04:59
*** Shunli has quit IRC05:14
*** Shunli has joined #openstack-keystone05:15
*** aojea has joined #openstack-keystone05:26
*** rcernin has joined #openstack-keystone05:33
*** nicolasbock has joined #openstack-keystone05:38
*** rajalokan has joined #openstack-keystone05:42
*** gyee has quit IRC05:52
openstackgerritMerged openstack/keystone master: fix identity:get_identity_providers typo  https://review.openstack.org/48214205:56
openstackgerritwingwj proposed openstack/keystone master: [install] Clarify the paths of the rc files  https://review.openstack.org/48237306:00
*** aojea has quit IRC06:07
*** liujiong has quit IRC06:19
*** liujiong has joined #openstack-keystone06:19
*** Shunli has quit IRC06:20
*** Shunli has joined #openstack-keystone06:21
*** Shunli has quit IRC06:30
*** gongysh has quit IRC06:34
*** thorst has joined #openstack-keystone06:41
*** d0ugal has quit IRC06:44
openstackgerritVan Hung Pham proposed openstack/keystonemiddleware master: Replace six.iteritems() with .items()  https://review.openstack.org/48279706:45
*** thorst has quit IRC06:46
*** belmoreira has joined #openstack-keystone06:47
*** openstackgerrit has quit IRC06:48
*** liujiong_lj has joined #openstack-keystone06:50
-openstackstatus- NOTICE: FYI, ask.openstack.org is down, review.o.o is slow - please have patience until this is fixed06:51
*** kman has joined #openstack-keystone06:53
*** liujiong has quit IRC06:54
*** aloga has quit IRC06:55
*** zhurong has quit IRC06:55
*** tesseract has joined #openstack-keystone07:11
*** aloga has joined #openstack-keystone07:14
*** kman has quit IRC07:17
*** ma9_ has joined #openstack-keystone07:19
ma9_Hi, has the upstream Keystone documentation changes I saved the link to this section which does not exist anymore: https://docs.openstack.org/keystone/latest/#mappings-examples07:20
ma9_I need the mapping examples for multiple groups07:20
ma9_where can I find them now?07:21
*** edmondsw has joined #openstack-keystone07:24
*** aojea has joined #openstack-keystone07:25
cmurphyma9_: here https://docs.openstack.org/keystone/latest/advanced-topics/federation/federated_identity.html#mappings-examples07:27
cmurphyour docs are in the middle of being reorganized07:27
ma9_great! thanks07:29
*** edmondsw has quit IRC07:29
ma9_so in there I read:07:29
ma9_"Groups can have multiple values. Each value must be separated by a ; Example: OIDC_GROUPS=developers;testers"07:29
ma9_does anybody know, can we do the same with projects?07:29
ma9_is there any plan to implement that?07:29
*** pcaruana has joined #openstack-keystone07:31
*** zhurong has joined #openstack-keystone07:33
bretonma9_: that's called auto-provisioning07:34
bretonma9_: read about it in the docs07:35
ma9_hmm I'm afraid that section explains how to 'hardcode' the projects07:41
*** pcaruana has quit IRC07:41
ma9_I need a dynamic list which comes from SAML/OIDC, like OIDC_PROJECTS=developers;testers,whatever07:41
bretonma9_: nope, keystone cannot do it today.07:43
ma9_ok thanks! is that something planned for the future?07:44
*** pcaruana has joined #openstack-keystone07:45
-openstackstatus- NOTICE: Gerrit is going to be restarted, due to low performance07:49
*** tobberydberg has quit IRC07:51
*** tobberydberg has joined #openstack-keystone07:52
-openstackstatus- NOTICE: Gerrit has been successfully restarted07:56
*** tobberydberg has quit IRC07:56
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
*** liujiong_lj is now known as liujiong08:02
*** rajalokan has quit IRC08:04
*** ppiela has joined #openstack-keystone08:05
*** ppiela_ has quit IRC08:07
*** openstackgerrit has joined #openstack-keystone08:07
openstackgerritSamriddhi proposed openstack/keystone master: Improved the keystone federation image  https://review.openstack.org/48283608:07
*** sjain has joined #openstack-keystone08:14
*** tobberydberg has joined #openstack-keystone08:15
*** sjain has quit IRC08:31
*** pcaruana has quit IRC08:33
*** ppiela_ has joined #openstack-keystone08:34
*** ppiela has quit IRC08:35
*** thorst has joined #openstack-keystone08:42
*** dklyle has joined #openstack-keystone08:45
*** david-lyle has quit IRC08:45
*** d0ugal has joined #openstack-keystone08:45
*** pcaruana has joined #openstack-keystone08:46
*** tobberydberg has quit IRC08:46
*** tobberydberg has joined #openstack-keystone08:46
*** thorst has quit IRC08:47
*** liujiong has quit IRC08:47
*** liujiong has joined #openstack-keystone08:47
*** tbh_ has quit IRC08:48
openstackgerritTommyLike proposed openstack/oslo.policy master: Fix parsing bug when config file is empty.  https://review.openstack.org/48247708:48
*** d0ugal has quit IRC08:54
*** d0ugal has joined #openstack-keystone08:55
*** d0ugal has quit IRC08:55
*** d0ugal has joined #openstack-keystone08:55
*** ma9_ has quit IRC09:11
*** edmondsw has joined #openstack-keystone09:12
*** liujiong has quit IRC09:15
*** liujiong has joined #openstack-keystone09:15
*** edmondsw has quit IRC09:16
*** ma9_ has joined #openstack-keystone09:17
*** ma9_ has quit IRC09:20
*** pcaruana has quit IRC09:32
*** pcaruana has joined #openstack-keystone09:32
*** thorst has joined #openstack-keystone09:43
*** mvk has joined #openstack-keystone09:44
*** thorst has quit IRC09:47
*** brad[] has joined #openstack-keystone09:57
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add min_version and max_version to adapter constructors  https://review.openstack.org/48274210:18
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Expose interface as a ListOpt for config files  https://review.openstack.org/48274310:18
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add paragraph clarifying major and micro versions  https://review.openstack.org/48271010:18
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add ability to request a microversion in a request  https://review.openstack.org/48274610:18
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Update docs and add a release note  https://review.openstack.org/47756610:18
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Remove kwargs from adapter.get_endpoint_data  https://review.openstack.org/48274410:18
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add support for next_min_version and not_before  https://review.openstack.org/48274510:18
*** liujiong has quit IRC10:23
*** dklyle has quit IRC10:28
*** david-lyle has joined #openstack-keystone10:28
*** zhurong has quit IRC10:41
cmurphyoh good my life has meaning again ^10:48
*** d0ugal has quit IRC10:49
*** sjain has joined #openstack-keystone10:49
*** sjain has quit IRC10:54
*** rajalokan has joined #openstack-keystone10:59
*** rajalokan has quit IRC11:03
*** sjain has joined #openstack-keystone11:06
*** markvoelker has quit IRC11:09
openstackgerritHarry Rybacki proposed openstack/keystone master: Move trust to DocumentedRuleDefault  https://review.openstack.org/44927811:09
*** markvoelker has joined #openstack-keystone11:10
*** markvoelker has quit IRC11:14
*** dave-mccowan has joined #openstack-keystone11:19
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Fix typo from earlier docs patch  https://review.openstack.org/48292511:35
*** thorst has joined #openstack-keystone11:38
*** sjain has quit IRC11:41
samueldmqmorning keystone11:43
samueldmqcmurphy: hehe o/11:43
cmurphymorning samueldmq11:43
*** markvoelker has joined #openstack-keystone11:55
*** raildo has joined #openstack-keystone12:03
*** sjain has joined #openstack-keystone12:08
*** robcresswell has joined #openstack-keystone12:10
robcresswellEr, what happened? It looks like half the channel got banned last week? I only just noticed12:14
robcresswellwait, APRIL? I am slow.12:17
cmurphythere was an accidental kickban mishap12:19
*** kairat has joined #openstack-keystone12:27
*** ducttape_ has joined #openstack-keystone12:29
*** ducttape_ has quit IRC12:32
*** zzzeek_ has joined #openstack-keystone12:32
*** wasmum has quit IRC12:40
*** hrybacki_ has joined #openstack-keystone12:40
*** szaher has quit IRC12:40
bretonrobcresswell: yeah, i know that feel, when you accidentally scroll to the top and forget to scroll down12:41
*** DinaBelova has quit IRC12:41
*** hrybacki has quit IRC12:41
*** eglute_s has quit IRC12:41
*** melwitt has quit IRC12:41
*** hrybacki_ is now known as hrybacki12:41
*** melwitt has joined #openstack-keystone12:41
*** wasmum has joined #openstack-keystone12:41
*** melwitt is now known as Guest8620812:41
*** eglute has joined #openstack-keystone12:42
*** DinaBelova has joined #openstack-keystone12:42
*** timburke has quit IRC12:44
*** szaher has joined #openstack-keystone12:44
*** dgonzalez has quit IRC12:44
*** dgonzalez has joined #openstack-keystone12:46
*** timburke has joined #openstack-keystone12:46
robcresswellbreton: It was actually that I just suddenly noticed I wasn't in the channel any more, then realised my last log was April12:47
robcresswellSo it took me 3 months to realise.12:47
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add min_version and max_version to adapter constructors  https://review.openstack.org/48274212:47
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Expose interface as a ListOpt for config files  https://review.openstack.org/48274312:47
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add paragraph clarifying major and micro versions  https://review.openstack.org/48271012:47
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add ability to request a microversion in a request  https://review.openstack.org/48274612:47
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Update docs and add a release note  https://review.openstack.org/47756612:47
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Remove kwargs from adapter.get_endpoint_data  https://review.openstack.org/48274412:47
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add support for next_min_version and not_before  https://review.openstack.org/48274512:47
robcresswellAnyway, I came here to say that I've proposed a merge of Django OpenStack Auth and Horizon12:48
robcresswellhttps://review.openstack.org/#/c/482561/12:48
robcresswellIf anyone's interested, that's the patch12:48
robcresswellWill send out an email later on12:48
* cmurphy celebrates12:50
*** edmondsw has joined #openstack-keystone12:50
*** edmondsw_ has joined #openstack-keystone12:51
*** edmondsw has quit IRC12:52
*** d0ugal has joined #openstack-keystone12:56
lbragstadrobcresswell: welcome back :)13:05
robcresswellHaha, cheers13:06
lbragstadhttps://review.openstack.org/#/c/437441/ closes a bug in case anyone is interested in taking a look13:08
*** zzzeek_ has quit IRC13:12
*** zzzeek_ has joined #openstack-keystone13:13
*** zhurong has joined #openstack-keystone13:14
*** tobberyd_ has joined #openstack-keystone13:18
lbragstadsjain: ping13:18
lbragstadsjain: it looks like the configuration section of our docs needs to be reworked a bit https://docs.openstack.org/keystone/latest/13:19
*** d0ugal has quit IRC13:19
sjainHi lbragstad!13:19
lbragstadsjain: o/13:19
sjainokay13:19
lbragstadsjain: https://docs.openstack.org/keystone/latest/configuration/config-options.html looks great13:19
sjainwhat needs to be done?13:19
lbragstadbut when I click on the policy link13:20
lbragstadi get this https://docs.openstack.org/keystone/latest/configuration/policy.html13:20
lbragstadwhich has configuration stuff in it as well as policy stuff13:20
sjainis this not correct?13:20
sjainoh13:20
lbragstadit's like sphinx is pulling the configuration guide content into the policy section?13:20
sjainI didn't knew about that13:20
lbragstadbut - if you scroll down under the Table of Contents on https://docs.openstack.org/keystone/latest/configuration/policy.html13:21
*** tobberydberg has quit IRC13:21
lbragstadyou do see the statement about policy and the link to the generated policy sample13:21
lbragstadwhich is good13:21
lbragstadsomehow both are getting munged together?13:21
sjainthe sample configuration file?13:22
sjainits a separate file included in the toc tree13:22
lbragstaddoc/source/configuration/config-options.rst and doc/source/configuration/policy.rst13:22
sjainsee the configuration options section here https://github.com/openstack/keystone/blob/master/doc/source/index.rst13:24
sjainafter the two files, there is a link to sample files13:24
sjainare you referring those?13:25
lbragstadsjain: i'm more referring to the middle link13:25
lbragstadbecause it gets rendered like this - https://docs.openstack.org/keystone/latest/configuration/policy.html13:25
sjainokay, it is this file, https://github.com/openstack/keystone/blob/master/doc/source/configuration/policy.rst13:26
sjaincan you please explain again how actually it should be looking13:27
*** zzzeek_ has quit IRC13:29
*** bknudson has joined #openstack-keystone13:29
lbragstadsjain: i'm not quite sure - i was expecting it to only have policy information in it13:30
lbragstadsjain: i'm tinkering with it locally to try and figure out why it is rendering with configuration options13:30
sjainoh as per I know I have included only the keystone-policy-generator.conf, so I thought it will include whatever is predefined there13:32
*** frickler has quit IRC13:33
lbragstadsjain: right - that seems to look fine13:33
*** zzzeek_ has joined #openstack-keystone13:34
sjainlbragstad: btw are you able to run the tests, I was getting this error in oslo_config http://paste.openstack.org/show/615121/, any clues?13:35
lbragstadsjain: hmm - i haven't seen that one yet13:36
lbragstadsjain: i've been running the tests using `tox -e docs`13:36
sjainyeah I did the same, strange, I'll ask Doug13:36
sjainanyway, let me know what change is needed there, do we need to change the config file itself or something13:38
lbragstadsjain: sounds good - i think asking dhellmann would be a good idea13:39
sjainyup13:40
*** frickler has joined #openstack-keystone13:41
openstackgerritLance Bragstad proposed openstack/keystone master: Remove duplicate configuration documentation  https://review.openstack.org/48296913:46
openstackgerritMatthew Edmonds proposed openstack/keystonemiddleware master: strip whitespace from token  https://review.openstack.org/48297113:49
sjainlbragstad: what needs to be done with the policy. json/yaml13:51
sjainI was changing some docs to .yaml13:51
sjainand there is a comment here too, https://review.openstack.org/#/c/482139/13:52
*** catintheroof has joined #openstack-keystone13:57
*** frickler has quit IRC13:57
*** frickler has joined #openstack-keystone14:03
*** jmlowe has joined #openstack-keystone14:09
morganHmm.14:11
*** tobberyd_ has quit IRC14:12
lbragstadsjain: yeah - i just saw that14:12
lbragstadsjain: i think the main concerns is that we change the configuration option as well14:13
lbragstadsjain: https://github.com/openstack/keystone/blob/master/etc/keystone.conf.sample#L216114:13
sjainokay so that also needs to be changed to policy.yaml14:14
sjain?14:14
*** tobberydberg has joined #openstack-keystone14:14
lbragstadsjain: correct14:14
sjainokay, cool!14:15
*** rmascena has joined #openstack-keystone14:16
sjainlbragstad: but here https://github.com/openstack/keystone/tree/master/etc, there is no policy.yaml file too, there is just a policy.v3cloudsample.json14:17
sjainshould we create one?14:17
lbragstadsjain: we should rename policy.v3cloudsample.json to policy.v3cloudsample.yaml and convert it according to the documentation in oslo.policy (suggesting the use of the new yaml format)14:18
*** raildo has quit IRC14:18
sjainokay so its like switching everything to yaml, cool makes sense!14:19
lbragstadsjain: thank you!14:19
sjainthank you, I was actually confused about this :)14:19
*** catintheroof has quit IRC14:20
lbragstadsjain: no problem - the main thing is just to be consistent everywhere14:20
sjainyes14:20
sjainother than that, should I merge these two docs, https://docs.openstack.org/keystone/latest/admin/caching.html and https://docs.openstack.org/keystone/latest/admin/identity-caching-layer.html14:21
sjainthere are two caching layer subsections in admin section14:21
lbragstadsjain: oh - yes14:22
lbragstadsjain: that's be a good contribution14:22
sjaingreat, I'll do that then14:23
gagehugoo/14:23
lbragstadgagehugo: o/14:23
*** zzzeek has quit IRC14:24
*** tobberydberg has quit IRC14:25
*** tobberydberg has joined #openstack-keystone14:25
*** tobberydberg has quit IRC14:29
*** tobberydberg has joined #openstack-keystone14:31
*** tobberydberg has quit IRC14:33
*** tobberydberg has joined #openstack-keystone14:34
*** sjain has quit IRC14:34
lbragstadcmurphy: ping14:45
lbragstadcmurphy: when you split out the tempest plugin - did you have a specific planning document somewhere or did you just follow the steps as they were written in the goal?14:46
*** nicolasbock has quit IRC14:50
*** zhurong has quit IRC14:53
*** phalmos has joined #openstack-keystone14:55
*** david-lyle has quit IRC14:58
*** david-lyle has joined #openstack-keystone14:58
*** rcernin has quit IRC15:01
cmurphylbragstad: just the steps in the goal, plus an etherpad that is now linked from the goal15:02
openstackgerritChangBo Guo(gcb) proposed openstack/oslo.policy master: Update URLs in documents according to document migration  https://review.openstack.org/48299715:02
*** zzzeek_ has quit IRC15:02
*** catintheroof has joined #openstack-keystone15:03
*** zzzeek has joined #openstack-keystone15:04
lbragstadcmurphy: awesome - thanks15:04
lbragstadcmurphy: https://review.openstack.org/#/c/483000/15:05
*** nicolasbock has joined #openstack-keystone15:10
*** tobberyd_ has joined #openstack-keystone15:11
*** tobberydberg has quit IRC15:14
*** tobberyd_ has quit IRC15:16
cmurphylol i like how we're done with both of the queens goals15:19
*** sjain has joined #openstack-keystone15:20
openstackgerritSamriddhi proposed openstack/keystone master: Merged the caching subsections in admin docs  https://review.openstack.org/48300915:24
*** rmascena is now known as raildo15:29
*** tobberydberg has joined #openstack-keystone15:30
*** belmoreira has quit IRC15:31
*** oorgeron has joined #openstack-keystone15:32
lbragstadcmurphy: me too!15:34
*** edmondsw_ is now known as edmondsw15:34
*** tobberydberg has quit IRC15:34
oorgeronHi folks, I'm looking to get this patch merged https://review.openstack.org/#/c/431229/ . The oslo.db patches have been integrated into 4.24 and now I'm going back and getting patches that were depended merged.15:37
*** mvk has quit IRC15:40
*** aojea has quit IRC15:40
*** sjain has quit IRC15:41
*** jmlowe has quit IRC15:54
hrybackilbragstad: policy mtg today?16:00
*** nishaYadav has joined #openstack-keystone16:02
lbragstadhrybacki: yessir16:02
*** tesseract has quit IRC16:05
*** aselius_ has quit IRC16:29
*** aselius_ has joined #openstack-keystone16:30
*** catintheroof has quit IRC16:30
*** aselius_ has quit IRC16:30
*** aselius has joined #openstack-keystone16:31
*** catintheroof has joined #openstack-keystone16:31
*** Guest86208 is now known as melwitt16:36
*** mvk has joined #openstack-keystone16:42
*** pcaruana has quit IRC16:56
*** jmlowe has joined #openstack-keystone16:59
eanderssonlooks good morgan17:16
*** aojea has joined #openstack-keystone17:16
*** aojea has quit IRC17:21
*** jmlowe has quit IRC17:30
*** aojea has joined #openstack-keystone17:37
*** aojea has quit IRC17:42
*** oorgeron has quit IRC17:42
gagehugoedmondsw I couldn't get https://review.openstack.org/#/c/482971/ to work for me17:52
edmondswgagehugo what were you doing?17:52
*** gyee has joined #openstack-keystone17:53
gagehugocurling keystone17:53
gagehugoand appending '\r' to the end of the x-auth-token17:53
gagehugoedmondsw how did you get it to work?17:54
*** jaosorior has joined #openstack-keystone17:54
edmondswgagehugo same17:54
edmondswcurl -1 -k -X GET https://$OPENSTACK:5000/v3/projects -H "X-Auth-Token: $TOKEN" -H "Accept: application/json"17:54
edmondswwhere TOKEN has a \r on it17:54
gagehugohmm17:54
*** hoonetorg has quit IRC17:54
edmondswthe fix has to be in the middleware, because that's how the token is coming in17:55
gagehugoyeah that makes sense17:55
edmondswcmurphy can you verify that my fix works for you?17:55
*** swain has joined #openstack-keystone18:04
edmondswgagehugo you remembered to restart keystone after making the code change?18:06
*** ducttape_ has joined #openstack-keystone18:06
gagehugoedmondsw yup18:06
edmondswhmm18:07
edmondswI wish I could get on your system :)18:07
gagehugoI'm triple checking everything heh18:07
*** hoonetorg has joined #openstack-keystone18:10
cmurphyedmondsw: will try it later tonight18:10
edmondswcmurphy tx18:11
gagehugoedmondsw: http://paste.openstack.org/show/615198/18:14
gagehugoIf I remove the '\r' it works18:15
openstackgerritMerged openstack/keystone master: Improved the keystone federation image  https://review.openstack.org/48283618:16
gagehugolbragstad I think https://bugs.launchpad.net/keystone/+bug/1703917 may be related to https://bugs.launchpad.net/keystone/+bug/170221118:17
openstackLaunchpad bug 1703917 in OpenStack Identity (keystone) "Sometimes test_update_user_password fails with Unauthorized" [Undecided,New]18:17
openstackLaunchpad bug 1702211 in OpenStack Identity (keystone) "test_password_history_not_enforced_in_admin_reset failed in tempest test" [Undecided,Confirmed]18:17
gagehugorandom failures18:17
lbragstadgagehugo: yeah  - that wouldn't surprise me18:19
lbragstadgagehugo: something tells me there is a timing issue in there somewhere18:20
lbragstadbut i haven't poked at it too hard18:20
gagehugolbragstad yeah I took a look and got 1702211 to sometimes fail, but didn't look into the logs yet18:20
jaosoriorraildo: ping18:28
raildojaosorior, hey18:28
openstackgerritMatthew Edmonds proposed openstack/keystone master: remove default rule  https://review.openstack.org/48216418:29
edmondswlbragstad I had to respin ^ to fix a UT issue18:32
lbragstadsounds good18:32
*** nishaYadav has quit IRC18:33
edmondswgagehugo instead of hardcoding the token into your curl command, how about making that dynamic like with the script I pasted into the bug?18:44
edmondswmaybe the shell is doing something funky, or that token you're specifying has expired, or...18:44
gagehugoedmondsw I'll try that18:45
gagehugoedmondsw the token was fine, it worked right after if I removed the '\r'18:45
edmondswgagehugo yeah, I worry more about the \r being taken literally as 2 chars instead of as a control character18:46
edmondswmaybe?18:46
edmondswI don't know... just grasping at straws :)18:46
gagehugoedmondsw that could be18:46
*** jmlowe has joined #openstack-keystone18:49
morganedmondsw: I don't think that's how that works :p19:00
edmondswmorgan yeah, I don't really either... like I said, grasping at straws19:01
edmondswit works for me...19:01
edmondswit works in the UT...19:01
edmondswno idea why it's not working for gagehugo19:01
gagehugoI usually assume I am missing something19:02
*** aojea has joined #openstack-keystone19:03
edmondswgagehugo I tried what you did, and that doesn't work for me either... so it's something to do with how you added the \r19:05
gagehugoedmondsw I'm getting a 400 when I try to curl keystone using the awk'd token19:06
gagehugoTOKEN does have a carriage return though19:10
edmondswgagehugo 400?19:11
edmondswhow did you verify that it has a carriage return?19:11
gagehugo[[ $TOKEN == *$'\r'* ]] && echo yes || echo no19:11
edmondswinstead, try this:19:11
edmondswecho $TOKEN$TOKEN19:11
*** jmlowe has quit IRC19:11
edmondswand see that the second one overwrites part of the first19:11
gagehugoyes19:12
edmondswcool19:12
edmondswso... how does your script differ from mine?19:12
gagehugoNot sure I copy/pasted19:12
gagehugoand changed OPENSTACK accordingly19:12
edmondswyeah, same here...19:13
edmondswI did just confirm that adding \r on the shell doesn't work... the \ is somehow eaten and you end up with token + r instead of token + \r19:13
edmondswso that's why what you were first trying didn't work19:14
gagehugoah19:14
gagehugodoes \\r work?19:14
edmondswno, that just appends a \ and an r... not a carriage return19:14
gagehugook19:14
edmondswusing the script with awk... did the neutron command work or also 400?19:15
gagehugoI don't have neutron setup on this box, it's standalone keystone19:15
edmondswso did you comment that out?19:15
gagehugoI can switch back to devstack box19:15
gagehugoyeah19:15
edmondswweird, man, I don't know19:16
*** nicolasbock has quit IRC19:16
edmondswmaybe you're running keystone differently than I am, and whatever server you're using doesn't tolerate \r like mine does19:17
gagehugomaybe?19:17
*** harlowja has quit IRC19:17
edmondswI'm running in httpd on RHEL 7.219:17
gagehugoah19:17
gagehugoim doing apache on debian19:17
*** david-lyle has quit IRC19:17
*** david-lyle has joined #openstack-keystone19:17
edmondswand cmurphy said she was using uwsgi19:18
edmondswso we'll see what she see there :)19:18
gagehugolemme try uwsgi19:18
gagehugo!19:21
gagehugouwsgi works19:21
gagehugointeresting19:21
*** ducttap__ has joined #openstack-keystone19:23
openstackgerritMerged openstack/oslo.policy master: Update URLs in documents according to document migration  https://review.openstack.org/48299719:24
gagehugoedmondsw aselius says it fails on apache for him19:25
edmondswgagehugo I think morgan had said something about he didn't think \r would be valid in headers for some web servers19:26
gagehugoso cmurphy's comment about it was correct with apache19:26
*** ducttape_ has quit IRC19:26
edmondswI'm httpd, she's uwsgi, you're apache19:27
gagehugoedmondsw I'll update my comment on the change19:27
edmondswodd that httpd (rhel) and apache (debian) aren't acting the same... thought that was the same codebase19:27
edmondswprobably different versions19:27
gagehugocould be19:28
edmondswrhel always uses old stuff19:28
edmondswe.g. still on py2.7.5 :(19:28
gagehugohmm19:30
gagehugonow I'm getting a 40119:31
gagehugothis is weird19:34
*** lucasxu has joined #openstack-keystone19:51
aseliusedmondsw im getting a 401 on uwsgi now too hmm20:00
edmondswI've never used uwsgi, so I don't know20:00
*** harlowja has joined #openstack-keystone20:02
gagehugoedmondsw gonna try nginx on fedora20:02
*** ducttape_ has joined #openstack-keystone20:03
gagehugoedmondsw my log message in keystonemiddleware didn't show up in the uwsgi logs20:03
*** ducttap__ has quit IRC20:06
openstackgerritSamuel Pilla proposed openstack/python-keystoneclient master: WIP: Add project tags to keystoneclient  https://review.openstack.org/48122320:07
*** lucasxu has quit IRC20:08
gagehugoedmondsw nginx running uwsgi on fedora works20:11
*** raildo has quit IRC20:12
openstackgerritMerged openstack/keystone master: Validate rolling upgrade is run in order  https://review.openstack.org/43744120:15
*** swain has quit IRC20:42
*** mdrabe has joined #openstack-keystone21:00
*** mdrabe has left #openstack-keystone21:03
*** dave-mccowan has quit IRC21:09
*** jmlowe has joined #openstack-keystone21:12
*** edmondsw has quit IRC21:12
*** edmondsw has joined #openstack-keystone21:13
*** edmondsw_ has joined #openstack-keystone21:14
*** edmondsw has quit IRC21:14
*** edmondsw_ has quit IRC21:15
*** bknudson has quit IRC21:15
*** edmondsw has joined #openstack-keystone21:15
*** edmondsw has quit IRC21:20
*** phalmos has quit IRC21:21
*** aojea has quit IRC21:23
*** thorst has quit IRC21:23
*** aojea has joined #openstack-keystone21:32
*** ducttape_ has quit IRC21:32
*** ducttape_ has joined #openstack-keystone21:41
*** zzzeek_ has joined #openstack-keystone21:42
*** edmondsw has joined #openstack-keystone21:46
*** catintheroof has quit IRC21:46
*** edmondsw has quit IRC21:50
*** aojea has quit IRC21:53
*** jmlowe has quit IRC21:54
*** jaosorior has quit IRC22:03
*** agrebennikov has joined #openstack-keystone22:11
*** zzzeek_ has quit IRC22:15
*** zzzeek_ has joined #openstack-keystone22:17
*** zzzeek has quit IRC22:18
*** d34dh0r53 has quit IRC22:32
*** d34dh0r53 has joined #openstack-keystone22:32
*** rm_work has quit IRC22:32
*** rm_work has joined #openstack-keystone22:32
*** szaher has quit IRC22:37
*** szaher has joined #openstack-keystone22:37
*** thorst has joined #openstack-keystone22:45
*** jmlowe has joined #openstack-keystone23:02
*** jmlowe has quit IRC23:09
*** ducttape_ has quit IRC23:11
*** d0ugal has joined #openstack-keystone23:11
openstackgerritNicolas Helgeson proposed openstack/keystone master: WIP: Add project tags  https://review.openstack.org/47031723:12
*** agrebennikov has quit IRC23:52

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!