Monday, 2017-10-23

*** edmondsw has joined #openstack-keystone00:02
*** thorst has joined #openstack-keystone00:03
*** edmondsw has quit IRC00:06
*** thorst has quit IRC00:07
*** thorst has joined #openstack-keystone00:07
*** thorst has quit IRC00:08
*** edmondsw has joined #openstack-keystone00:33
*** edmondsw has quit IRC00:56
*** Shunli has joined #openstack-keystone01:07
*** thorst has joined #openstack-keystone01:11
*** thorst has quit IRC01:11
*** fried_rice is now known as efried01:32
*** d0ugal has quit IRC01:36
*** edmondsw has joined #openstack-keystone01:55
*** edmondsw has quit IRC01:59
*** d0ugal has joined #openstack-keystone01:59
*** namnh has joined #openstack-keystone02:21
*** masber has quit IRC02:47
*** thorst has joined #openstack-keystone03:02
*** dave-mccowan has quit IRC03:05
*** thorst has quit IRC03:08
openstackgerritwangxiyuan proposed openstack/keystone-specs master: block diag quota scenarios  https://review.openstack.org/44120303:13
*** aojea has joined #openstack-keystone03:15
*** aojea has quit IRC03:19
*** nicolasbock has quit IRC03:26
*** masber has joined #openstack-keystone03:33
*** wes_dillingham has quit IRC03:34
*** edmondsw has joined #openstack-keystone03:43
*** edmondsw has quit IRC03:47
*** Dinesh_Bhor has joined #openstack-keystone04:19
*** Suramya has joined #openstack-keystone04:36
*** jaosorior has joined #openstack-keystone05:02
*** gvrangan has joined #openstack-keystone05:08
*** edmondsw has joined #openstack-keystone05:31
*** edmondsw has quit IRC05:36
*** spectr has joined #openstack-keystone05:52
*** josecastroleon has joined #openstack-keystone06:17
*** magicboiz has joined #openstack-keystone06:21
*** magicboiz has quit IRC06:26
openstackgerritwangxiyuan proposed openstack/keystone-specs master: WIP: very very early sketch of possible limits API  https://review.openstack.org/45570906:34
*** magicboiz has joined #openstack-keystone06:35
*** josecastroleon has quit IRC06:37
*** ioggstream has joined #openstack-keystone06:55
*** pcaruana has joined #openstack-keystone07:00
*** josecastroleon has joined #openstack-keystone07:05
*** aojea has joined #openstack-keystone07:16
*** edmondsw has joined #openstack-keystone07:19
*** aojea has quit IRC07:20
*** edmondsw has quit IRC07:24
*** jistr is now known as jistr|mtgs07:26
*** tesseract has joined #openstack-keystone07:27
*** AlexeyAbashkin has joined #openstack-keystone07:37
*** Suramya has quit IRC07:46
*** sm_ has joined #openstack-keystone08:10
*** AlexeyAbashkin has quit IRC08:12
*** AlexeyAbashkin has joined #openstack-keystone08:12
*** spectr has quit IRC08:35
*** spectr has joined #openstack-keystone08:49
*** josecastroleon has quit IRC09:02
*** josecastroleon has joined #openstack-keystone09:04
*** jmlowe_ has joined #openstack-keystone09:07
*** edmondsw has joined #openstack-keystone09:08
*** jmlowe has quit IRC09:08
*** sm_ has quit IRC09:09
*** edmondsw has quit IRC09:12
*** arxcruz|off is now known as arxcruz09:19
*** mvk has quit IRC09:27
*** Shunli has quit IRC09:28
*** spectr has quit IRC09:31
*** spectr has joined #openstack-keystone09:31
*** mvk has joined #openstack-keystone10:02
*** spectr has quit IRC10:04
*** Suramya has joined #openstack-keystone10:09
*** magicboiz has quit IRC10:10
*** magicboiz has joined #openstack-keystone10:15
*** aojea has joined #openstack-keystone10:16
*** magicboiz has quit IRC10:19
*** aojea has quit IRC10:20
*** spectr has joined #openstack-keystone10:21
*** namnh has quit IRC10:22
*** magicboiz has joined #openstack-keystone10:26
*** spectr has quit IRC10:45
openstackgerritwangxiyuan proposed openstack/keystone-specs master: block diag quota scenarios  https://review.openstack.org/44120310:46
*** spectr has joined #openstack-keystone10:47
openstackgerritChengwei Yang proposed openstack/keystone master: policy.v3cloudsample.json: remove redundant blank space  https://review.openstack.org/51425711:00
*** dave-mccowan has joined #openstack-keystone11:04
*** nicolasbock has joined #openstack-keystone11:07
openstackgerritOpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements  https://review.openstack.org/47013711:15
TahvokHey guys!11:17
TahvokTrying to get myself around ldap configuration11:17
TahvokI've created another domain and made it work with ldap11:18
TahvokI can create projects in it, and assign groups from ldap - works like a charm11:18
TahvokHowever, I've tried to assign a group as domain admin11:18
TahvokAnd when connecting via horizon as a member from this group, I cannot see any projects of this domain!11:19
TahvokAm I missing something? Isn't domain admin should be ablet to control all projects inside it?11:19
*** nicolasbock has quit IRC11:39
*** erlon has joined #openstack-keystone11:42
*** nicolasbock has joined #openstack-keystone11:52
*** thorst has joined #openstack-keystone11:59
*** thorst_ has joined #openstack-keystone12:00
*** thorst_ has quit IRC12:01
*** wes_dillingham has joined #openstack-keystone12:03
*** thorst has quit IRC12:04
*** thorst has joined #openstack-keystone12:04
*** nicolasbock has quit IRC12:05
*** nicolasbock has joined #openstack-keystone12:06
*** josecastroleon has quit IRC12:11
*** raildo has joined #openstack-keystone12:13
*** raildo has quit IRC12:13
*** josecastroleon has joined #openstack-keystone12:14
*** raildo has joined #openstack-keystone12:20
*** edmondsw has joined #openstack-keystone12:21
*** edmondsw has quit IRC12:21
*** edmondsw has joined #openstack-keystone12:22
*** josecastroleon has quit IRC12:22
*** nicolasbock has quit IRC12:39
*** pcaruana has quit IRC12:41
*** nicolasbock has joined #openstack-keystone12:46
*** panbalag has joined #openstack-keystone12:46
*** panbalag has left #openstack-keystone12:47
*** gvrangan has quit IRC13:06
knikollao/13:09
*** McClymontS has joined #openstack-keystone13:21
*** Dave has quit IRC13:22
*** jmlowe_ has quit IRC13:22
*** Dave has joined #openstack-keystone13:27
*** MeltedLux has quit IRC13:30
*** MeltedLux has joined #openstack-keystone13:33
lbragstado/13:43
*** jmlowe has joined #openstack-keystone13:58
openstackgerritMerged openstack/keystone master: policy.v3cloudsample.json: remove redundant blank space  https://review.openstack.org/51425713:58
openstackgerritMerged openstack/keystone master: Refactor test_backend_ldap tests  https://review.openstack.org/50769413:58
*** MeltedLux has quit IRC14:03
*** jaosorior has quit IRC14:08
lbragstadcongrats cmurphy!!14:14
cmurphy:)14:14
*** david-lyle has joined #openstack-keystone14:21
*** wes_dillingham has quit IRC14:31
openstackgerritMerged openstack/keystone master: Remove expired password v2 test  https://review.openstack.org/51396614:32
*** wes_dillingham has joined #openstack-keystone14:33
*** MeltedLux has joined #openstack-keystone14:38
lbragstadis anyone here interested in participating in http://lists.openstack.org/pipermail/openstack-dev/2017-October/123854.html ?14:47
*** MeltedLux has quit IRC14:52
*** jaosorior has joined #openstack-keystone14:57
openstackgerritMerged openstack/keystone master: Remove/update v2 catalog endpoint tests  https://review.openstack.org/51351414:57
*** McClymontS has quit IRC14:59
openstackgerritMerged openstack/keystone master: Remove v2 token test models  https://review.openstack.org/51348115:04
*** McClymontS has joined #openstack-keystone15:05
openstackgerritMerged openstack/keystone master: Correct parameter to follow convention  https://review.openstack.org/51354415:06
openstackgerritMurali Annamneni proposed openstack/keystone master: Enables MySQL Cluster support for Keystone  https://review.openstack.org/43122915:07
lbragstadcould use a stable core review here - https://review.openstack.org/#/c/511096/215:07
lbragstadcc kmalloc stevemar ^15:08
*** MeltedLux has joined #openstack-keystone15:23
gagehugoo/15:25
*** jmlowe has quit IRC15:31
*** AlexeyAbashkin has quit IRC15:37
*** gyee has joined #openstack-keystone15:37
*** jmlowe has joined #openstack-keystone15:40
*** wes_dillingham has quit IRC15:42
*** wes_dillingham has joined #openstack-keystone15:43
*** agrebennikov has joined #openstack-keystone15:44
*** MeltedLux has quit IRC15:45
openstackgerritLance Bragstad proposed openstack/oslo.policy master: Add scope_types to RuleDefault objects  https://review.openstack.org/51022215:50
openstackgerritLance Bragstad proposed openstack/oslo.policy master: Pass creds as a dict in tests  https://review.openstack.org/51436615:50
lbragstaddims: curious to get some input on those ^15:52
openstackgerritLance Bragstad proposed openstack/oslo.policy master: Add functionality to deprecate policies  https://review.openstack.org/50990915:52
*** MeltedLux has joined #openstack-keystone15:57
*** McClymontS has quit IRC15:59
*** erlon has left #openstack-keystone16:09
dimslbragstad : on the first one, is there ever a case where they pass in a system-wide scope instead of project-specific scope (reverse of the scenario mentioned in lines 736-740)16:15
*** itlinux has joined #openstack-keystone16:18
*** jaosorior has quit IRC16:35
*** jaosorior has joined #openstack-keystone16:36
lbragstaddims: in my opinion, a system-wide operation would be something like listing compute hosts16:41
dims@lbragstad : i mean, would we flag that as an error?16:41
lbragstadeventually - once operators and projects are consuming the proper tokens16:42
lbragstadbut that enforce_scope bit would be true for both cases (using a project-scoped token to do something system wide and using a system-scoped token to do something project based)16:43
*** jmlowe has quit IRC16:43
lbragstadit should raise an exception if True for both cases, or at least log a useful warning16:43
dims++16:44
lbragstadin thinking about that though, i wonder if that toggle should be exposed through configuration of the service16:45
lbragstadthat way operators can enforce scope checking once they stop seeing those warnings, or educate their users about the different types of scope16:45
lbragstaddims: also - i'm wondering if there is a better way to test this...16:45
*** mvk has quit IRC16:49
*** AlexeyAbashkin has joined #openstack-keystone17:13
*** tsufiev has quit IRC17:16
*** AlexeyAbashkin has quit IRC17:17
*** gvrangan has joined #openstack-keystone17:17
*** tesseract has quit IRC17:18
*** tsufiev has joined #openstack-keystone17:20
openstackgerritLance Bragstad proposed openstack/oslo.policy master: Add scope_types to RuleDefault objects  https://review.openstack.org/51022217:21
lbragstaddims: added scope to sample generations ^17:22
*** jmlowe has joined #openstack-keystone17:26
*** rmascena has joined #openstack-keystone17:28
*** raildo has quit IRC17:30
*** mvk has joined #openstack-keystone17:32
*** ioggstream has quit IRC17:40
*** ayoung has quit IRC17:51
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Outline policy goals  https://review.openstack.org/46034418:12
lbragstadcc knikolla ^18:12
openstackgerritNicolas Helgeson proposed openstack/keystonemiddleware master: Use oslo_cache in auth_token middleware  https://review.openstack.org/51386218:14
*** ayoung has joined #openstack-keystone18:14
*** aojea has joined #openstack-keystone18:24
*** gvrangan has quit IRC18:30
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Add policy roadmap for security  https://review.openstack.org/46273318:36
lbragstadknikolla: addressed your comments in ^ too18:37
*** rmcallis has joined #openstack-keystone18:38
*** McClymontS has joined #openstack-keystone18:48
*** McClymontS has quit IRC18:51
*** itlinux has quit IRC18:52
*** harlowja has joined #openstack-keystone18:53
*** itlinux has joined #openstack-keystone18:56
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Specification for system roles  https://review.openstack.org/46476319:06
*** aojea has quit IRC19:16
*** aojea has joined #openstack-keystone19:31
*** aojea has quit IRC19:33
*** aojea has joined #openstack-keystone19:34
*** prashkre has joined #openstack-keystone19:38
*** itlinux has quit IRC19:39
*** aojea has quit IRC19:43
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Specification for system roles  https://review.openstack.org/46476319:46
*** wes_dillingham has quit IRC19:56
*** AlexeyAbashkin has joined #openstack-keystone19:58
*** AlexeyAbashkin has quit IRC20:02
*** jmlowe has quit IRC20:14
*** nicolasbock has quit IRC20:48
*** rmascena has quit IRC20:50
*** prashkre has quit IRC20:55
*** prashkre has joined #openstack-keystone20:57
*** prashkre has quit IRC21:01
*** thorst has quit IRC21:02
*** jmlowe has joined #openstack-keystone21:15
*** edmondsw has quit IRC21:20
*** rderose has joined #openstack-keystone21:24
*** rderose has quit IRC21:26
*** rderose has joined #openstack-keystone21:26
*** thorst has joined #openstack-keystone21:27
*** dave-mccowan has quit IRC21:28
*** thorst has quit IRC21:31
*** MasterOfBugs has joined #openstack-keystone21:34
*** pramodrj07 has joined #openstack-keystone21:34
*** aselius has joined #openstack-keystone21:40
*** wes_dillingham has joined #openstack-keystone21:41
*** jmlowe has quit IRC21:50
openstackgerritLance Bragstad proposed openstack/keystone master: Add system grant policies  https://review.openstack.org/51447122:00
openstackgerritLance Bragstad proposed openstack/keystone master: Implement controller logic for system roles  https://review.openstack.org/51447222:00
*** jmlowe has joined #openstack-keystone22:08
*** aloga has quit IRC22:08
*** aloga has joined #openstack-keystone22:09
*** aloga has quit IRC22:19
*** rderose has quit IRC22:23
*** jmlowe has quit IRC22:24
*** jmlowe has joined #openstack-keystone22:24
*** aloga has joined #openstack-keystone22:30
*** Suramya has quit IRC22:38
*** aloga has quit IRC22:40
*** thorst has joined #openstack-keystone22:46
*** edmondsw has joined #openstack-keystone22:48
*** dave-mccowan has joined #openstack-keystone22:48
*** thorst has quit IRC22:51
*** edmondsw has quit IRC22:52
*** aloga has joined #openstack-keystone23:08
*** agrebennikov has quit IRC23:19
*** dave-mccowan has quit IRC23:27
*** gmann has joined #openstack-keystone23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!