| *** thorst has quit IRC | 00:02 | |
| *** catintheroof has quit IRC | 00:25 | |
| *** thorst has joined #openstack-keystone | 00:25 | |
| *** thorst has quit IRC | 00:26 | |
| *** Shunli has joined #openstack-keystone | 00:36 | |
| *** zhurong has joined #openstack-keystone | 00:45 | |
| *** zxy has joined #openstack-keystone | 00:50 | |
| *** sbezverk has joined #openstack-keystone | 01:07 | |
| *** thorst has joined #openstack-keystone | 01:26 | |
| *** thorst has quit IRC | 01:31 | |
| *** guoshan has joined #openstack-keystone | 01:39 | |
| *** thorst has joined #openstack-keystone | 01:51 | |
| *** thorst has quit IRC | 01:51 | |
| *** otleimat has quit IRC | 01:54 | |
| openstackgerrit | chenaidong1 proposed openstack/keystone master: Delete rundant code _trustor_trustee_only has been called in function TrustV3::get_trust. It is not necessary to be called again. https://review.openstack.org/496065 | 02:19 |
|---|---|---|
| openstackgerrit | chenaidong1 proposed openstack/keystone master: Delete rundant code https://review.openstack.org/496065 | 02:22 |
| *** aselius has quit IRC | 02:22 | |
| openstackgerrit | chenaidong1 proposed openstack/keystone master: Delete redundant code https://review.openstack.org/496065 | 02:22 |
| *** mjax has quit IRC | 02:24 | |
| *** mjax has joined #openstack-keystone | 02:25 | |
| *** mvk_ has quit IRC | 02:25 | |
| *** mjax has quit IRC | 02:28 | |
| *** catintheroof has joined #openstack-keystone | 02:30 | |
| *** mvk_ has joined #openstack-keystone | 02:36 | |
| *** thorst has joined #openstack-keystone | 02:52 | |
| *** mjax has joined #openstack-keystone | 02:54 | |
| *** mjax has quit IRC | 02:55 | |
| *** nicolasbock has quit IRC | 02:57 | |
| *** thorst has quit IRC | 02:57 | |
| *** catintheroof has quit IRC | 02:57 | |
| *** itlinux has joined #openstack-keystone | 03:04 | |
| *** ayoung has quit IRC | 03:08 | |
| SamYaple | hey all. im looking for an idempotent way to make sure the users password is set to a certain value. does the api offer anyhting that will let me know if the users password matches a certain value? | 03:16 |
| *** itlinux has quit IRC | 03:21 | |
| *** itlinux has joined #openstack-keystone | 03:35 | |
| *** itlinux has quit IRC | 03:36 | |
| *** dave-mccowan has quit IRC | 03:40 | |
| *** afanti has joined #openstack-keystone | 03:43 | |
| *** links has joined #openstack-keystone | 03:51 | |
| *** thorst has joined #openstack-keystone | 03:53 | |
| *** thorst has quit IRC | 03:59 | |
| *** itlinux has joined #openstack-keystone | 04:16 | |
| *** zxy has quit IRC | 04:19 | |
| *** itlinux has joined #openstack-keystone | 04:49 | |
| *** thorst has joined #openstack-keystone | 04:54 | |
| *** markvoelker has quit IRC | 04:54 | |
| *** thorst has quit IRC | 04:58 | |
| *** masber has quit IRC | 05:02 | |
| *** itlinux has quit IRC | 05:17 | |
| *** mvpnitesh has joined #openstack-keystone | 05:22 | |
| *** mkrcmari__ has joined #openstack-keystone | 05:28 | |
| *** links has quit IRC | 05:30 | |
| *** mvk_ has quit IRC | 05:31 | |
| *** links has joined #openstack-keystone | 05:33 | |
| *** hoonetorg has quit IRC | 05:34 | |
| *** edmondsw has joined #openstack-keystone | 05:42 | |
| *** zxy has joined #openstack-keystone | 05:44 | |
| *** zxy has quit IRC | 05:45 | |
| *** zxy has joined #openstack-keystone | 05:45 | |
| *** edmondsw has quit IRC | 05:47 | |
| *** zxy has quit IRC | 05:48 | |
| *** zxy has joined #openstack-keystone | 05:48 | |
| *** hoonetorg has joined #openstack-keystone | 05:49 | |
| *** masber has joined #openstack-keystone | 05:55 | |
| *** thorst has joined #openstack-keystone | 05:55 | |
| *** zxy has quit IRC | 05:58 | |
| *** zxy has joined #openstack-keystone | 05:59 | |
| *** thorst has quit IRC | 05:59 | |
| *** zxy has quit IRC | 06:05 | |
| *** zxy has joined #openstack-keystone | 06:06 | |
| *** hoonetorg has quit IRC | 06:14 | |
| *** hoonetorg has joined #openstack-keystone | 06:21 | |
| openstackgerrit | lu.li proposed openstack/keystone-specs master: Update "priviledged" to "privileged" in doc https://review.openstack.org/496107 | 06:23 |
| *** zxy has quit IRC | 06:35 | |
| *** zxy has joined #openstack-keystone | 06:37 | |
| *** rcernin has joined #openstack-keystone | 06:45 | |
| *** pcaruana has joined #openstack-keystone | 06:45 | |
| *** jistr is now known as jistr|trng | 06:53 | |
| *** zxy has quit IRC | 06:54 | |
| *** markvoelker has joined #openstack-keystone | 06:55 | |
| *** thorst has joined #openstack-keystone | 06:56 | |
| *** thorst has quit IRC | 07:00 | |
| *** tesseract has joined #openstack-keystone | 07:20 | |
| *** ioggstream has joined #openstack-keystone | 07:21 | |
| *** belmoreira has joined #openstack-keystone | 07:29 | |
| *** markvoelker has quit IRC | 07:29 | |
| *** edmondsw has joined #openstack-keystone | 07:30 | |
| *** edmondsw has quit IRC | 07:35 | |
| -openstackstatus- NOTICE: Gerrit is going to be restarted due to slow performance | 07:36 | |
| -openstackstatus- NOTICE: Gerrit has been restarted successfully | 07:40 | |
| *** dikonoor has joined #openstack-keystone | 07:55 | |
| *** thorst has joined #openstack-keystone | 07:57 | |
| *** abhishek has joined #openstack-keystone | 08:00 | |
| *** thorst has quit IRC | 08:01 | |
| *** markvoelker has joined #openstack-keystone | 08:26 | |
| *** aojea has joined #openstack-keystone | 08:32 | |
| *** mvpnitesh has quit IRC | 08:36 | |
| *** mvpnitesh has joined #openstack-keystone | 08:37 | |
| *** mvk_ has joined #openstack-keystone | 08:39 | |
| *** mvpnitesh has quit IRC | 08:41 | |
| *** mvpnitesh has joined #openstack-keystone | 08:41 | |
| *** mkrcmari__ has quit IRC | 08:43 | |
| *** aojea has quit IRC | 08:44 | |
| *** mvpnitesh has quit IRC | 08:45 | |
| *** mvpnitesh has joined #openstack-keystone | 08:45 | |
| *** mvpnitesh has quit IRC | 08:49 | |
| *** mvpnitesh has joined #openstack-keystone | 08:50 | |
| *** mvpnitesh has quit IRC | 08:53 | |
| *** mvpnitesh has joined #openstack-keystone | 08:54 | |
| *** mkrcmari__ has joined #openstack-keystone | 08:54 | |
| *** mvk_ has quit IRC | 08:57 | |
| *** thorst has joined #openstack-keystone | 08:57 | |
| *** mvpnitesh has quit IRC | 08:58 | |
| *** mvpnitesh has joined #openstack-keystone | 08:58 | |
| *** markvoelker has quit IRC | 09:00 | |
| *** mvpnitesh has quit IRC | 09:02 | |
| *** thorst has quit IRC | 09:02 | |
| *** mvpnitesh has joined #openstack-keystone | 09:02 | |
| *** mvk has joined #openstack-keystone | 09:03 | |
| *** mkrcmari__ has quit IRC | 09:06 | |
| *** mvpnitesh has quit IRC | 09:06 | |
| *** mvpnitesh has joined #openstack-keystone | 09:06 | |
| *** mvpnitesh has quit IRC | 09:11 | |
| *** mvpnitesh has joined #openstack-keystone | 09:11 | |
| *** aojea has joined #openstack-keystone | 09:12 | |
| *** Shunli has quit IRC | 09:30 | |
| *** abhishek has quit IRC | 09:32 | |
| *** abhi89 has joined #openstack-keystone | 09:33 | |
| *** mvpnitesh has quit IRC | 09:38 | |
| *** mvpnitesh has joined #openstack-keystone | 09:39 | |
| *** faizy has joined #openstack-keystone | 09:40 | |
| *** mvpnitesh has quit IRC | 09:46 | |
| *** mvpnitesh has joined #openstack-keystone | 09:46 | |
| *** mvpnitesh has quit IRC | 09:54 | |
| *** nicolasbock has joined #openstack-keystone | 09:56 | |
| *** markvoelker has joined #openstack-keystone | 09:57 | |
| *** thorst has joined #openstack-keystone | 09:58 | |
| *** nicolasbock has quit IRC | 10:01 | |
| *** thorst has quit IRC | 10:03 | |
| *** nicolasbock has joined #openstack-keystone | 10:13 | |
| *** zhurong has quit IRC | 10:17 | |
| *** mvpnitesh has joined #openstack-keystone | 10:21 | |
| *** abhi89 has quit IRC | 10:22 | |
| *** markvoelker has quit IRC | 10:31 | |
| *** guoshan has quit IRC | 10:33 | |
| *** mvpnitesh has quit IRC | 10:51 | |
| *** zeus has quit IRC | 10:59 | |
| *** zeus has joined #openstack-keystone | 11:00 | |
| *** DinaBelova has quit IRC | 11:00 | |
| *** freerunner has quit IRC | 11:00 | |
| *** zeus is now known as Guest90692 | 11:00 | |
| *** DinaBelova has joined #openstack-keystone | 11:00 | |
| *** htruta has quit IRC | 11:00 | |
| *** htruta has joined #openstack-keystone | 11:00 | |
| *** junbo has quit IRC | 11:01 | |
| *** Dinesh_Bhor has quit IRC | 11:01 | |
| *** kukacz has quit IRC | 11:01 | |
| *** Adobeman has quit IRC | 11:01 | |
| *** alex_xu has quit IRC | 11:02 | |
| *** Adobeman has joined #openstack-keystone | 11:03 | |
| *** vryzhenkin has joined #openstack-keystone | 11:04 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 11:05 | |
| *** junbo has joined #openstack-keystone | 11:05 | |
| *** alex_xu has joined #openstack-keystone | 11:06 | |
| *** edmondsw has joined #openstack-keystone | 11:06 | |
| *** thorst has joined #openstack-keystone | 11:07 | |
| *** kukacz has joined #openstack-keystone | 11:07 | |
| *** edmondsw has quit IRC | 11:10 | |
| *** thorst has quit IRC | 11:11 | |
| *** lwanderley has joined #openstack-keystone | 11:24 | |
| *** markvoelker has joined #openstack-keystone | 11:28 | |
| *** raildo has joined #openstack-keystone | 11:34 | |
| *** gokhan has joined #openstack-keystone | 11:40 | |
| gokhan | hi folks, we have a problem in our environment about keystone or mysql. When we reach 120 concurrent connections, we get an exception at this line: https://github.com/ContainX/openstack4j/blob/master/core/src/main/java/org/openstack4j/openstack/identity/v3/internal/UserServiceImpl.java#L58 | 11:44 |
| *** edmondsw has joined #openstack-keystone | 11:45 | |
| gokhan | can help somebody identiffy the problem whether it is from keystone or mysql config | 11:45 |
| *** mberktas has joined #openstack-keystone | 11:51 | |
| *** faizy has quit IRC | 11:55 | |
| *** faizy has joined #openstack-keystone | 11:57 | |
| *** faizy has quit IRC | 11:58 | |
| *** faizy has joined #openstack-keystone | 11:58 | |
| *** markvoelker has quit IRC | 12:01 | |
| *** aojea has quit IRC | 12:07 | |
| *** aojea has joined #openstack-keystone | 12:10 | |
| *** thorst has joined #openstack-keystone | 12:11 | |
| *** faizy has quit IRC | 12:15 | |
| *** abhi89 has joined #openstack-keystone | 12:17 | |
| *** abhi89 has quit IRC | 12:19 | |
| *** abhi89 has joined #openstack-keystone | 12:19 | |
| *** aojea has quit IRC | 12:21 | |
| *** lwanderley has quit IRC | 12:24 | |
| *** lwanderley has joined #openstack-keystone | 12:31 | |
| *** markvoelker has joined #openstack-keystone | 12:32 | |
| lbragstad | gokhan: do you happen to have a trace or an error from keystone? | 12:33 |
| *** dave-mccowan has joined #openstack-keystone | 12:33 | |
| *** aojea has joined #openstack-keystone | 12:36 | |
| mberktas | @lbragstad, yes we have an exception stack trace, i will send a pastebin link in a minute | 12:39 |
| *** rmascena has joined #openstack-keystone | 12:40 | |
| *** jmlowe has joined #openstack-keystone | 12:41 | |
| *** raildo has quit IRC | 12:42 | |
| mberktas | here is the exception trace: http://paste.openstack.org/show/619023/ | 12:42 |
| mberktas | @lbragstad ^^ | 12:42 |
| lbragstad | mberktas: looks like you received a 503 from the server? | 12:43 |
| lbragstad | do you have a trace trace from that? | 12:43 |
| *** thorst is now known as thorst_afk | 12:49 | |
| mberktas | @lbragstad : in apache2 error.log files we dont have any errors other than this: "[Wed Aug 16 19:48:38.933525 2017] [mpm_event:error] [pid 33627:tid 140064641460096] AH00485: scoreboard is full, not at MaxRequestWorkers" | 12:54 |
| mberktas | do you think that this error is related to our problem? | 12:54 |
| lbragstad | yeah - it could see that causing a 503 | 12:55 |
| lbragstad | looks like the webserver is having a hard time supporting that many clients | 12:55 |
| *** zhurong has joined #openstack-keystone | 12:57 | |
| mberktas | @lbragstad : isn't 120 concurrent clients a bit low for apache2 running on a server having 48 cores and 256 GB ram? | 12:58 |
| mberktas | is this the result of a configuration parameter that we can increase? | 12:58 |
| *** lwanderley has quit IRC | 13:03 | |
| *** aojea has quit IRC | 13:05 | |
| *** aojea has joined #openstack-keystone | 13:10 | |
| *** voelzmo has joined #openstack-keystone | 13:27 | |
| *** ayoung has joined #openstack-keystone | 13:36 | |
| kmalloc | lbragstad: mmmm so my convo went well today, will have some updates and possibly a high-level write up of the DHT keystone concept by the PTG | 13:38 |
| * kmalloc needs more coffffeeeeeeeee | 13:39 | |
| *** gokhan has quit IRC | 13:43 | |
| ayoung | kmalloc, DHT? I thought that was still considered a controlled substance? | 13:45 |
| kmalloc | ayoung: yeah it probably is | 13:46 |
| ayoung | Sriously, tho, what is DHT? | 13:46 |
| kmalloc | distributed hash table | 13:50 |
| kmalloc | just had a very nice convo about some concepts for global keystone data sets that can be validated directly at the endpoints. -- solving some of the "replication" and "project in every region" kind of issues that we keep getting asked about | 13:51 |
| kmalloc | i'll have a brief for it in a week or so. | 13:51 |
| kmalloc | and i plan to chat with a couple folks at the PTG once i've fleshed it out a bit more | 13:52 |
| ayoung | kmalloc, ah, that Blockchain quip you threw out last week? | 13:52 |
| kmalloc | that is part of it | 13:53 |
| ayoung | cool. look forward to seeing it. It makes sense to me | 13:53 |
| kmalloc | :) | 13:53 |
| *** lucasxu has joined #openstack-keystone | 13:54 | |
| ayoung | kmalloc, its actually the exact opposite of PKI tokens. It is PKI everything but the token | 13:54 |
| *** aojea has quit IRC | 13:55 | |
| *** aojea has joined #openstack-keystone | 13:56 | |
| kmalloc | yep | 13:56 |
| *** voelzmo has quit IRC | 14:01 | |
| *** sjain has joined #openstack-keystone | 14:02 | |
| *** jdennis has quit IRC | 14:04 | |
| *** dikonoor has quit IRC | 14:04 | |
| *** jdennis has joined #openstack-keystone | 14:04 | |
| lbragstad | kmalloc: ack - i look forward to reading your writeup | 14:09 |
| lbragstad | kmalloc: you want some time at the ptg to go through it? | 14:09 |
| kmalloc | it probably wont be more than a one-pager | 14:10 |
| kmalloc | there is a lot to cover before it's more in depth | 14:11 |
| lbragstad | kmalloc: are you planning on doing it on an etherpad? | 14:11 |
| kmalloc | i'm going to chat with a couple people hallwaytrack | 14:11 |
| kmalloc | not really much else | 14:11 |
| kmalloc | i don't want folks too excited about it / too dreamy until it becomes more real | 14:11 |
| *** voelzmo has joined #openstack-keystone | 14:11 | |
| *** jmlowe has quit IRC | 14:13 | |
| *** zhurong has quit IRC | 14:19 | |
| *** links has quit IRC | 14:20 | |
| *** gagehugo has joined #openstack-keystone | 14:23 | |
| *** sjain has quit IRC | 14:36 | |
| *** aojea has quit IRC | 14:37 | |
| *** aojea has joined #openstack-keystone | 14:40 | |
| *** jmlowe has joined #openstack-keystone | 14:40 | |
| knikolla | o/ | 14:48 |
| gagehugo | o/ | 14:49 |
| *** aojea has quit IRC | 14:54 | |
| *** aojea has joined #openstack-keystone | 14:55 | |
| lbragstad | knikolla: gagehugo o/ | 15:03 |
| knikolla | lbragstad: o/ | 15:04 |
| *** aojea has quit IRC | 15:05 | |
| knikolla | Almost done reviewing the global role assignment stuff. Spent some time familiarizing myself with the assignment system and policy. | 15:05 |
| lbragstad | nice - that will be useful | 15:05 |
| lbragstad | knikolla: i plan on writing up a patch to do the scoping bits today and tomorrow | 15:05 |
| lbragstad | once i get through a bunch of email and planning related stuff | 15:06 |
| knikolla | Cool. | 15:06 |
| *** aojea has joined #openstack-keystone | 15:08 | |
| *** gyee has joined #openstack-keystone | 15:11 | |
| openstackgerrit | Stephen Finucane proposed openstack/oslo.policy master: generator: Reimplement wrapping of 'description' https://review.openstack.org/485646 | 15:14 |
| *** rcernin has quit IRC | 15:15 | |
| *** aselius has joined #openstack-keystone | 15:16 | |
| *** leitan has joined #openstack-keystone | 15:18 | |
| leitan | Hi guys, i have a quick question regarding keystone token caching | 15:18 |
| leitan | were using fernet as token provider | 15:18 |
| leitan | does the protected api need to share the same memcached backend with the keystone api, in order to "caching" works correctly ? | 15:19 |
| lbragstad | leitan: by protected API do you mean https://github.com/openstack/keystone/blob/master/keystone/identity/controllers.py#L315 ? | 15:20 |
| leitan | lbragstad: sorry, i mean the APi that its consuming keystone as the auth backend, nova, neutron, gnocchi | 15:21 |
| leitan | so basically if the client (gnocchi for example) need to share the same memcached as the keystone server itself | 15:21 |
| lbragstad | oh - so does keystone need to share the same memcache instance as the other services? | 15:21 |
| leitan | lbragstad: correct | 15:21 |
| lbragstad | leitan: it does not | 15:21 |
| lbragstad | leitan: it can run separately | 15:22 |
| *** aojea has quit IRC | 15:22 | |
| lbragstad | but - having a pool of memcached servers for a single deployment is beneficial if you're deploying multiple keystone nodes | 15:22 |
| lbragstad | the library that keystone uses to implement caching supports sharding across a cluster of memcached servers | 15:23 |
| leitan | lbragstad: perfect, thats what i tought, im getting a lot of timeouts from keystoneauth1 | 15:23 |
| leitan | lbragstad: yes i have that setup 3 memcached servers | 15:23 |
| lbragstad | hmm | 15:23 |
| leitan | lbragstad: so the question here is, why if its the same token, im going to ask keystone at every single request | 15:23 |
| leitan | probably the reason of the timeouts is that im flooding keystone | 15:24 |
| lbragstad | leitan: you mean why does glance pass the token to keystone after nova just validated it against keystone? | 15:24 |
| leitan | im testing gnocchi, and im using the same token for stressing out the API | 15:24 |
| leitan | and i got a lot of urllib connection pool full, talking to keystone | 15:25 |
| leitan | so im asuming that is going to keystone for each request | 15:25 |
| *** rderose has joined #openstack-keystone | 15:25 | |
| lbragstad | yeah - each service has middleware running in front of it that ensures the token used to make the request is valid | 15:26 |
| leitan | i just run a tcpdump and confirmed | 15:27 |
| leitan | that is going to the 35357 | 15:27 |
| leitan | everytime | 15:27 |
| leitan | is that correct ? | 15:27 |
| lbragstad | if 35357 is referring to the port keystone is running on - yes | 15:27 |
| leitan | lbragstad: yes, is there way to avoid gnocchi going to keystone everytime ? i thouht that caching will prevent this from happening | 15:28 |
| lbragstad | leitan: fwiw - there is caching functionality available in keystonemiddleware, too | 15:28 |
| lbragstad | leitan: there are two different types of caching | 15:28 |
| lbragstad | leitan: it sounds like the caching you want is caching in middleware | 15:28 |
| lbragstad | which makes it so that middleware doesn't have to put the token on the wire to validate it against an identity API server | 15:29 |
| leitan | memcached_servers = 172.31.20.252:11211,172.31.20.182:11211,172.31.29.195:11211 | 15:29 |
| leitan | insecure=true | 15:29 |
| leitan | endpoint_type = internal | 15:29 |
| leitan | memcache_security_strategy = ENCRYPT | 15:29 |
| leitan | memcache_secret_key = lalalala | 15:29 |
| leitan | lbragstad: yes i have that configured on the gnocchi side, pasted above | 15:29 |
| leitan | on the keystone_authtoken section | 15:29 |
| leitan | lbragstad: keystonemiddleware (4.14.0) | 15:30 |
| lbragstad | leitan: have you seen the middleware configuration guide? https://docs.openstack.org/keystonemiddleware/latest/middlewarearchitecture.html#configuration | 15:33 |
| lbragstad | there are suggestions in there about improving performance with caching | 15:33 |
| lbragstad | also - can you confirm the token is actually being stored in memcache? | 15:33 |
| leitan | lbragstad: i can do that | 15:34 |
| leitan | lbragstad: this is my authtoken middleware section on gnocchi -> http://paste.openstack.org/show/E4kQcechThMdPT6Qb3Uz/ | 15:34 |
| leitan | lbragstad: for what i see on the middleware guide, i have everything i need configured there | 15:37 |
| lbragstad | leitan: can you confirm that keystonemiddleware is infact passing the token to memcached? | 15:41 |
| leitan | lbragstad: ill try it now | 15:41 |
| leitan | lbragstad: i see the gnocchi host talking with the 3 memcached when i run the benchmark, ill try to confirm if the key is there, but its encrypted | 15:46 |
| lbragstad | ok - that's a good sign | 15:47 |
| *** otleimat has joined #openstack-keystone | 15:50 | |
| *** nkinder has joined #openstack-keystone | 15:51 | |
| *** belmoreira has quit IRC | 15:55 | |
| *** afanti has quit IRC | 15:55 | |
| *** thorst_afk has quit IRC | 15:55 | |
| leitan | lbragstad: well ... this is embarrasing | 15:56 |
| lbragstad | leitan: is every request to gnocchi using a different token? | 15:57 |
| leitan | lbragstad: no, same token | 15:57 |
| *** thorst_afk has joined #openstack-keystone | 15:57 | |
| lbragstad | leitan: oh - what did you find? | 15:57 |
| leitan | lbragstad: but ... gnocchi was poiting at old memcached servers ... , we changed our local memcached to elasticache ... seems that the jinja template for the memcached servers doesnt got updated | 15:57 |
| lbragstad | ah - so it couldn't establish a connection to the new pool? | 15:58 |
| leitan | lbragstad: now i got 10x the performance | 15:58 |
| lbragstad | leitan: woo! | 15:58 |
| leitan | lbragstad: indeed | 15:58 |
| leitan | lbragstad: sorry to waste your time :( | 15:58 |
| *** lwanderley has joined #openstack-keystone | 15:58 | |
| lbragstad | leitan: sometimes rubber duck debugging is the best | 15:58 |
| lbragstad | leitan: no worries - glad you got it all squared away :) | 15:59 |
| leitan | lbragstad: sometimes you just need a listening shoulder | 15:59 |
| leitan | jajaja | 15:59 |
| leitan | lbragstad: thanks ! | 15:59 |
| lbragstad | leitan: anytime! | 15:59 |
| * leitan feels ashamed | 15:59 | |
| lbragstad | leitan: you fixed the issue - no shame in that | 15:59 |
| leitan | true | 16:00 |
| *** thorst_afk has quit IRC | 16:01 | |
| *** tesseract has quit IRC | 16:04 | |
| *** thorst_afk has joined #openstack-keystone | 16:05 | |
| *** voelzmo has quit IRC | 16:06 | |
| *** catintheroof has joined #openstack-keystone | 16:10 | |
| openstackgerrit | Merged openstack/pycadf master: Adding gnocchi_api_audit_map.conf to pycadf https://review.openstack.org/493428 | 16:15 |
| lbragstad | i think we need to remove a couple things from the release notes for Pike https://docs.openstack.org/releasenotes/keystone/pike.html#b1 | 16:18 |
| lbragstad | why does it look like ocata release notes were rendered for Pike? | 16:18 |
| *** vryzhenkin is now known as freerunner | 16:25 | |
| lbragstad | hey team - looks like we're going to have to cut an RC3 | 16:37 |
| *** pcaruana has quit IRC | 16:37 | |
| lbragstad | if you look through the release notes, there are things listed because the release note was updated during the pike cycle | 16:37 |
| lbragstad | https://docs.openstack.org/releasenotes/keystone/pike.html | 16:37 |
| lbragstad | so release notes from ocata or newton are rendering for pike release notes | 16:38 |
| lbragstad | in order to fix - we'll have to do two things | 16:38 |
| lbragstad | backport a patch to update the links for all stable releases | 16:38 |
| lbragstad | that's #1 ^ | 16:38 |
| lbragstad | #2 is to add a patch to stable/pike that ignores specific release notes, like horizon did here https://github.com/openstack/horizon/commit/85fe8f3b5fdf526302831107aee0c372ac5a9fec | 16:39 |
| *** ducttap__ has joined #openstack-keystone | 16:39 | |
| lbragstad | i'll start working on #1 now and ping when i have stable reviews up | 16:39 |
| *** ducttape_ has quit IRC | 16:42 | |
| *** mvk_ has joined #openstack-keystone | 16:45 | |
| *** mvk has quit IRC | 16:48 | |
| lbragstad | stevemar: kmalloc stable reviews https://review.openstack.org/#/q/topic:bug/1710572 | 16:54 |
| kmalloc | lbragstad: +2/+A for all three | 16:56 |
| lbragstad | kmalloc: awesome - thank you | 17:00 |
| lbragstad | kmalloc: working on a patch to stable/pike to ignore the release notes that were updated in the pike release | 17:00 |
| *** thorst_afk has quit IRC | 17:13 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Include a link in release note for bug 1698900 https://review.openstack.org/496322 | 17:15 |
| openstack | bug 1698900 in OpenStack Identity (keystone) "DB check appears to not be working right" [High,Fix released] https://launchpad.net/bugs/1698900 - Assigned to Lance Bragstad (lbragstad) | 17:15 |
| lbragstad | kmalloc: since we have to roll a new rc - we should catch ^ | 17:15 |
| lbragstad | kmalloc: stable review available here - https://review.openstack.org/#/c/496323/ | 17:16 |
| kmalloc | done | 17:17 |
| *** swain has joined #openstack-keystone | 17:30 | |
| knikolla | lbragstad: is one +2 enough for this? https://review.openstack.org/#/c/496322/ | 17:33 |
| lbragstad | knikolla: sometime, even for trivial stuff I wait for another person to take a look, unless it's urgent | 17:35 |
| lbragstad | in this case i'd consider it urgent since it should be in the next rc candidate | 17:36 |
| lbragstad | which we have to cut this week | 17:36 |
| knikolla | lbragstad: approved assuming morgan's +2 on the backport as a "second" review. | 17:36 |
| lbragstad | knikolla: ack - thanks for the review | 17:36 |
| *** ioggstream has quit IRC | 17:46 | |
| lbragstad | gagehugo: around? | 17:47 |
| gagehugo | lbragstad o/ | 17:47 |
| lbragstad | gagehugo: for https://bugs.launchpad.net/keystone/+bug/1652012 it looks like https://review.openstack.org/#/c/438035/ merged but https://github.com/openstack/keystone/commit/4a82ab9065a659bbcb838240da113a0509f651aa was the revert? | 17:48 |
| openstack | Launchpad bug 1652012 in OpenStack Identity (keystone) "token model assumes a token is is_admin_project" [Low,In progress] - Assigned to Gage Hugo (gagehugo) | 17:48 |
| lbragstad | shouldn't https://review.openstack.org/#/c/438035/ have been reverted, too? | 17:48 |
| gagehugo | I think it was? | 17:49 |
| gagehugo | yeah | 17:49 |
| *** thorst_afk has joined #openstack-keystone | 17:49 | |
| lbragstad | gagehugo: it's still in tree https://github.com/openstack/keystone/blob/682cfa5c6d135641797ec9e51299287e8191e858/releasenotes/notes/bug-1652012-b3aea7c0d5affdb6.yaml | 17:50 |
| gagehugo | lbragstad hmm | 17:50 |
| lbragstad | gagehugo: it looks like a related patch was reverted | 17:51 |
| lbragstad | but the patch that closes that bug is still in tree | 17:51 |
| gagehugo | yeah that note should have been removed | 17:51 |
| *** mjax has joined #openstack-keystone | 17:52 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Revert "Change is_admin_project to False by default" https://review.openstack.org/496338 | 17:52 |
| lbragstad | gagehugo: ^ | 17:52 |
| gagehugo | https://review.openstack.org/#/c/464009/ | 17:52 |
| lbragstad | gagehugo: looks like we need a clean up patch that removes the release note | 17:54 |
| gagehugo | yes | 17:54 |
| lbragstad | since it looks like it was missed in the revert | 17:54 |
| lbragstad | gagehugo: can you propose that quick? | 17:54 |
| gagehugo | sure | 17:54 |
| lbragstad | and I'll review | 17:54 |
| knikolla | ++ | 17:54 |
| lbragstad | gagehugo: thanks | 17:54 |
| gagehugo | I was thinking it got set back to "False" accidentally somewhere since then | 17:54 |
| lbragstad | yeah - kinda confusing | 17:55 |
| knikolla | the number of reviews with topic 968696 is impressive | 17:55 |
| openstackgerrit | Merged openstack/pycadf master: changed 'target_endpoint_type' value https://review.openstack.org/493438 | 17:55 |
| *** sjain has joined #openstack-keystone | 17:57 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Remove missing release note from previous revert https://review.openstack.org/496342 | 17:57 |
| *** rmascena is now known as raildo | 17:58 | |
| lbragstad | https://review.openstack.org/#/c/496343/ | 17:59 |
| lbragstad | ^ kmalloc | 17:59 |
| *** Guest90692 is now known as zeus` | 18:01 | |
| *** lwanderley has quit IRC | 18:02 | |
| *** zeus` is now known as zeus | 18:02 | |
| *** zeus has quit IRC | 18:02 | |
| *** zeus has joined #openstack-keystone | 18:02 | |
| *** itlinux has joined #openstack-keystone | 18:06 | |
| *** ioggstream has joined #openstack-keystone | 18:09 | |
| *** ioggstream has quit IRC | 18:17 | |
| *** mvk_ has quit IRC | 18:18 | |
| *** thorst_a_ has joined #openstack-keystone | 18:18 | |
| *** ioggstream has joined #openstack-keystone | 18:19 | |
| *** thorst_afk has quit IRC | 18:20 | |
| *** rmcall has joined #openstack-keystone | 18:22 | |
| *** itlinux has quit IRC | 18:26 | |
| *** ducttape_ has joined #openstack-keystone | 18:26 | |
| *** ducttap__ has quit IRC | 18:29 | |
| *** raildo has quit IRC | 18:32 | |
| *** raildo has joined #openstack-keystone | 18:32 | |
| *** voelzmo has joined #openstack-keystone | 18:34 | |
| *** itlinux has joined #openstack-keystone | 18:42 | |
| *** sjain has quit IRC | 18:42 | |
| *** voelzmo has quit IRC | 18:46 | |
| *** ioggstream has quit IRC | 18:49 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Revert "Fix wrong links" https://review.openstack.org/496367 | 18:54 |
| knikolla | lbragstad: that yeah. but we need to "ignore" the reverted notes from the "fix wrong links" | 19:00 |
| knikolla | ? | 19:00 |
| *** rbrndt has joined #openstack-keystone | 19:01 | |
| lbragstad | knikolla: oh.. yeah | 19:01 |
| lbragstad | i suppose | 19:01 |
| knikolla | as the files would be touched in master. | 19:02 |
| lbragstad | right... | 19:02 |
| knikolla | at least if my understanding is correct. | 19:02 |
| lbragstad | #startmeeting keystone-office-hours | 19:02 |
| openstack | Meeting started Tue Aug 22 19:02:25 2017 UTC and is due to finish in 60 minutes. The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot. | 19:02 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 19:02 |
| openstack | The meeting name has been set to 'keystone_office_hours' | 19:02 |
| knikolla | o/ reporting for office hours | 19:03 |
| lbragstad | kmalloc: mind lifting your -2 here? https://review.openstack.org/#/c/496343/ | 19:04 |
| lbragstad | we'll need that based on how reno operates | 19:04 |
| kmalloc | in pike? | 19:04 |
| kmalloc | we didn't land the pike change did we? | 19:04 |
| kmalloc | just the master one(s)? | 19:04 |
| lbragstad | we need to ignore those release notes from rendering in pike release notes | 19:05 |
| kmalloc | right, we landed the change in pike?! | 19:05 |
| kmalloc | or just master | 19:05 |
| lbragstad | yes - let me grab the link | 19:05 |
| kmalloc | want to be sure. | 19:05 |
| kmalloc | related: ugh | 19:05 |
| *** abhi89 has quit IRC | 19:05 | |
| lbragstad | #link https://github.com/openstack/keystone/commit/77500b3615ae94ea45837f3fc0d503c8aadcc462 | 19:06 |
| kmalloc | can we just make this a tree of static files instead? [i know not today[] | 19:06 |
| kmalloc | lbragstad: that landed in master 8 days ago | 19:06 |
| kmalloc | stable/pike was already split | 19:06 |
| kmalloc | right? | 19:07 |
| kmalloc | https://review.openstack.org/#/c/496312/ | 19:07 |
| kmalloc | not landed. | 19:07 |
| lbragstad | https://docs.openstack.org/releasenotes/keystone/pike.html | 19:07 |
| lbragstad | ^ they still render there for the pike notes | 19:07 |
| lbragstad | because those links changed | 19:07 |
| kmalloc | how did the links change in the pike branch? | 19:08 |
| kmalloc | we didn't land the change | 19:08 |
| kmalloc | something is broken in the rendering systme not in our repo then | 19:08 |
| kmalloc | it's rendering from master not stable/pike | 19:08 |
| kmalloc | land the ignore in master, we have to do that | 19:08 |
| kmalloc | but we shouldn't need to in pike | 19:08 |
| kmalloc | if we do, something else is broken | 19:09 |
| kmalloc | i think we horked this up becuase i think the reno is always rendered from master | 19:09 |
| kmalloc | meaning we are effecitvely broken | 19:09 |
| kmalloc | on the docs page | 19:09 |
| lbragstad | https://review.openstack.org/#/c/492774/ | 19:10 |
| kmalloc | if we did not land a change to the release notes on stable/pike how are the changed links effecting the release notes | 19:11 |
| kmalloc | this really is not making sense. | 19:11 |
| lbragstad | kmalloc: want me to see if dhellmann will join us here? | 19:12 |
| kmalloc | if those are rendering in pike and the fix landed in master we have a bigger problem. | 19:12 |
| kmalloc | sure. | 19:12 |
| kmalloc | i am guessing things are not rendering from the right places | 19:12 |
| lbragstad | kmalloc: that would appear to be the case | 19:13 |
| *** raildo has quit IRC | 19:16 | |
| *** itlinux has quit IRC | 19:21 | |
| *** ducttap__ has joined #openstack-keystone | 19:27 | |
| *** ducttape_ has quit IRC | 19:30 | |
| *** raildo has joined #openstack-keystone | 19:31 | |
| *** sbezverk has quit IRC | 19:35 | |
| *** sbezverk has joined #openstack-keystone | 19:37 | |
| *** ducttape_ has joined #openstack-keystone | 19:40 | |
| *** ducttap__ has quit IRC | 19:43 | |
| *** itlinux has joined #openstack-keystone | 19:47 | |
| *** portdirect is now known as tintin | 20:03 | |
| *** tintin is now known as portdirect | 20:04 | |
| *** rderose has quit IRC | 20:14 | |
| *** rmcall has quit IRC | 20:30 | |
| *** rmcall has joined #openstack-keystone | 20:31 | |
| *** lucasxu has quit IRC | 20:31 | |
| *** jmlowe has quit IRC | 20:32 | |
| *** MasterOfBugs has joined #openstack-keystone | 20:36 | |
| openstackgerrit | Merged openstack/keystone master: Include a link in release note for bug 1698900 https://review.openstack.org/496322 | 20:37 |
| openstack | bug 1698900 in OpenStack Identity (keystone) "DB check appears to not be working right" [High,Fix released] https://launchpad.net/bugs/1698900 - Assigned to Lance Bragstad (lbragstad) | 20:37 |
| *** ayoung has quit IRC | 20:38 | |
| *** jmlowe has joined #openstack-keystone | 20:41 | |
| *** jmlowe has quit IRC | 20:43 | |
| *** rcernin has joined #openstack-keystone | 20:50 | |
| *** flwang has quit IRC | 20:54 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Clarify documentation for release notes https://review.openstack.org/496417 | 20:55 |
| lbragstad | cc kmalloc ^ | 20:56 |
| lbragstad | i also had to update https://review.openstack.org/#/c/496343/ | 20:56 |
| *** flwang has joined #openstack-keystone | 20:57 | |
| *** dave-mccowan has quit IRC | 20:58 | |
| openstackgerrit | Merged openstack/keystone master: Remove missing release note from previous revert https://review.openstack.org/496342 | 20:59 |
| *** StefanPaetowJisc has joined #openstack-keystone | 20:59 | |
| *** itlinux has quit IRC | 20:59 | |
| lbragstad | sweet - https://review.openstack.org/#/c/496343/ is the only thing we need for rc3 | 21:01 |
| *** aojea has joined #openstack-keystone | 21:02 | |
| *** dave-mccowan has joined #openstack-keystone | 21:02 | |
| *** jmlowe has joined #openstack-keystone | 21:04 | |
| *** itlinux has joined #openstack-keystone | 21:06 | |
| mjax | Anyone know what the middleware module in keystone does? I'm having some trouble with understanding its functionality | 21:09 |
| *** jmccrory has quit IRC | 21:13 | |
| *** jmccrory has joined #openstack-keystone | 21:14 | |
| lbragstad | mjax: are you referencing https://github.com/openstack/keystone/tree/master/keystone/middleware or https://github.com/openstack/keystonemiddleware ? | 21:17 |
| mjax | lbragstad: /keystone/keystone/middleware | 21:17 |
| lbragstad | mjax: ah - so that's "middleware" that runs in the paste pipeline in front of keystone | 21:18 |
| mjax | lbragstad: is it mainly in charge of interacting with wsgi? Does it have any specific connection to keystonemiddleware? | 21:19 |
| lbragstad | mjax: no - not really, keystonemiddleware is a separate project that is designed to run in front of other services | 21:19 |
| lbragstad | mjax: for example json_body middleware runs in front of keystone | 21:20 |
| lbragstad | as noted in the paste pipeline | 21:20 |
| lbragstad | https://github.com/openstack/keystone/blob/master/etc/keystone-paste.ini#L16 | 21:20 |
| lbragstad | and following the entry point here - https://github.com/openstack/keystone/blob/master/setup.cfg#L195 | 21:21 |
| mjax | lbragstad: I see, was curious because of the shared name and the import in auth.py | 21:21 |
| *** thorst_a_ has quit IRC | 21:21 | |
| lbragstad | mjax: yeah - keystone/middleware is specific to keystone | 21:22 |
| lbragstad | keystonemiddleware is a generic middleware for other openstack services to use | 21:22 |
| lbragstad | (e.g. keystonemiddleware is what sits in front of nova or cinder) | 21:22 |
| *** aahh has joined #openstack-keystone | 21:23 | |
| *** thorst_afk has joined #openstack-keystone | 21:24 | |
| mjax | lbragstad: thanks, got it. By the way is the /keystone/auth the first point where keystone tries to authenticate a user? Will services also authenticate from there | 21:24 |
| lbragstad | both services and users interact with the same endpoint for authentication | 21:25 |
| mjax | which endpoint is that? | 21:25 |
| lbragstad | either /v2.0/tokens or /v3/auth/tokens | 21:26 |
| lbragstad | GET /v3/auth/tokens is validate token | 21:26 |
| lbragstad | and POST /v3/auth/tokens is authenticate for token | 21:26 |
| mjax | hmm I see, will the token differ depending on whether its a service or user trying to authenticate | 21:26 |
| lbragstad | no - keystone doesn't know if it's a service or a user authenticating | 21:27 |
| *** thorst_afk has quit IRC | 21:28 | |
| lbragstad | services like nova have a service account (e.g. a user named nova) that they use to make API requests | 21:28 |
| mjax | right - how do the service account's password and credentials get set or passed? If I were to write an auth plugin that expects a password to an external SSO for that user, would I just have to include multiple case statements to catch the special case for users? | 21:32 |
| lbragstad | mjax: those are included in each services configuration file | 21:32 |
| mjax | also, it is /keystone/auth that handles the requests to the authentication endpoint right? | 21:33 |
| mjax | oh so thats how it works! | 21:34 |
| lbragstad | mjax: as in how does nova authenticate to keystone? | 21:34 |
| lbragstad | nova uses the keystoneauth1 library to authenticate to keystone | 21:34 |
| lbragstad | and keystonemiddleware to run process tokens before they reach nova's api | 21:34 |
| mjax | when you make a request to /auth/v3/tokens a json request body is passed in right? which module is in charge of breaking that down to do the authentication | 21:35 |
| lbragstad | that's this endpoint | 21:37 |
| lbragstad | https://github.com/openstack/keystone/blob/master/keystone/auth/routers.py#L27 | 21:37 |
| lbragstad | which routes the request based on the request method (GET, POST, etc.) | 21:37 |
| lbragstad | to the appropriate controller method | 21:37 |
| lbragstad | so when you do a POST /v3/auth/tokens you can see the router wire the call to authenticate_for_token() | 21:38 |
| lbragstad | https://github.com/openstack/keystone/blob/master/keystone/auth/routers.py#L30 | 21:38 |
| lbragstad | which is found here - https://github.com/openstack/keystone/blob/master/keystone/auth/controllers.py#L107 | 21:38 |
| mjax | That clears up a lot! Thank you | 21:39 |
| lbragstad | mjax: yep | 21:40 |
| lbragstad | fwiw - that pattern can be applied to all apis in keystone | 21:40 |
| lbragstad | traffic comes in from the router -> controller -> core -> backend | 21:41 |
| mjax | lbragstad: then the controller calls the corresponding core's methods which make use of the relevant backend? Makes sense | 21:42 |
| lbragstad | yep - it's a pretty straight forward app | 21:43 |
| mjax | lbragstad: I'm still quite a newbie to dev and design patterns, so this is really helpful! Thanks again for going over it for me | 21:44 |
| aahh | hi , could someone shed some light on how to store users locally who are authorized using a custom identity backend which is not implemented via a saml or oauth protocol | 21:50 |
| lbragstad | mjax: anytime! | 21:53 |
| lbragstad | aahh: what release are you using? | 21:54 |
| aahh | @lbragstad : ocata | 21:54 |
| lbragstad | aahh: are you familiar with shadow users? | 21:54 |
| aahh | not yet , had been reading the specs docs on the ocata release. would be helpful on how its created and mapped | 21:55 |
| lbragstad | aahh: that works started in ocata | 21:55 |
| lbragstad | http://specs.openstack.org/openstack/keystone-specs/specs/keystone/mitaka/shadow-users.html | 21:55 |
| lbragstad | and continued into newton | 21:56 |
| lbragstad | http://specs.openstack.org/openstack/keystone-specs/specs/keystone/newton/shadow-users-newton.html | 21:56 |
| lbragstad | but the idea was that users should have some sort of reference stored within keystone regardless of where they authenticate from | 21:56 |
| lbragstad | meaning they could be authenticated through federation using a SAML assertion of some sort, or an external LDAP instance | 21:56 |
| lbragstad | assuming the authentication is successful - a user reference is created for that user | 21:57 |
| lbragstad | and stored within keystone | 21:57 |
| aahh | could you point to me the relevant files where this happens ?? | 21:58 |
| lbragstad | aahh: yeah - so all of that should be pretty self contained in keystone's identity API | 21:58 |
| lbragstad | which is here - https://github.com/openstack/keystone/tree/3e8f16dec47907bdded68e58880779a74bbeffef/keystone/identity | 21:58 |
| lbragstad | er - it starts there | 21:58 |
| lbragstad | aahh: from there you can see how the shadow_user_api is used in the business logic for identity - https://github.com/openstack/keystone/blob/3e8f16dec47907bdded68e58880779a74bbeffef/keystone/identity/core.py#L442 | 21:59 |
| lbragstad | the interfaces and backend for storing shadow users is kept here - https://github.com/openstack/keystone/tree/3e8f16dec47907bdded68e58880779a74bbeffef/keystone/identity/shadow_backends | 22:00 |
| *** leitan has quit IRC | 22:01 | |
| *** catintheroof has quit IRC | 22:01 | |
| lbragstad | #endmeeting | 22:01 |
| openstack | Meeting ended Tue Aug 22 22:01:36 2017 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 22:01 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/keystone_office_hours/2017/keystone_office_hours.2017-08-22-19.02.html | 22:01 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/keystone_office_hours/2017/keystone_office_hours.2017-08-22-19.02.txt | 22:01 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/keystone_office_hours/2017/keystone_office_hours.2017-08-22-19.02.log.html | 22:01 |
| *** StefanPaetowJisc has quit IRC | 22:01 | |
| *** thorst_afk has joined #openstack-keystone | 22:02 | |
| lbragstad | knikolla: i got a little swamped today - i'll plan to pickup the GR stuff tomorrow | 22:02 |
| *** itlinux has quit IRC | 22:03 | |
| *** ayoung has joined #openstack-keystone | 22:03 | |
| *** thorst_afk has quit IRC | 22:06 | |
| *** thorst_afk has joined #openstack-keystone | 22:08 | |
| *** ducttap__ has joined #openstack-keystone | 22:16 | |
| *** edmondsw has quit IRC | 22:17 | |
| *** thorst_afk has quit IRC | 22:18 | |
| *** thorst_afk has joined #openstack-keystone | 22:18 | |
| *** ducttape_ has quit IRC | 22:19 | |
| *** swain has quit IRC | 22:20 | |
| *** thorst_afk has quit IRC | 22:22 | |
| *** rcernin has quit IRC | 22:32 | |
| *** ducttape_ has joined #openstack-keystone | 22:38 | |
| *** ducttap__ has quit IRC | 22:38 | |
| *** ducttap__ has joined #openstack-keystone | 22:43 | |
| *** ducttape_ has quit IRC | 22:46 | |
| *** itlinux has joined #openstack-keystone | 22:54 | |
| *** rbrndt has quit IRC | 22:57 | |
| *** rbrndt has joined #openstack-keystone | 22:57 | |
| *** rbrndt has quit IRC | 22:57 | |
| *** thorst_afk has joined #openstack-keystone | 23:00 | |
| *** aojea has quit IRC | 23:05 | |
| *** ducttape_ has joined #openstack-keystone | 23:23 | |
| *** ducttap__ has quit IRC | 23:26 | |
| *** efried has quit IRC | 23:42 | |
| *** itlinux has quit IRC | 23:47 | |
| *** dave-mccowan has quit IRC | 23:48 | |
| *** gyee has quit IRC | 23:53 | |
| *** edmondsw has joined #openstack-keystone | 23:55 | |
| *** efried has joined #openstack-keystone | 23:56 | |
| *** gyee has joined #openstack-keystone | 23:57 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!