| *** phalmos_ has quit IRC | 00:02 | |
| *** nkinder has quit IRC | 00:20 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/519781 | 00:24 |
|---|---|---|
| *** aojea has joined #openstack-keystone | 00:28 | |
| *** wes_dillingham has quit IRC | 00:31 | |
| *** aojea has quit IRC | 00:33 | |
| *** nkinder has joined #openstack-keystone | 00:34 | |
| *** wes_dillingham has joined #openstack-keystone | 00:35 | |
| *** markvoelker has quit IRC | 00:37 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/519803 | 00:40 |
| *** raildo has quit IRC | 00:45 | |
| *** prashkre has joined #openstack-keystone | 01:05 | |
| *** limestone has quit IRC | 01:21 | |
| *** gyee_ has quit IRC | 01:23 | |
| *** aojea has joined #openstack-keystone | 01:28 | |
| *** aojea has quit IRC | 01:33 | |
| *** wes_dillingham has quit IRC | 01:34 | |
| *** panbalag has left #openstack-keystone | 01:35 | |
| *** prashkre has quit IRC | 01:35 | |
| *** markvoelker has joined #openstack-keystone | 01:37 | |
| *** prashkre has joined #openstack-keystone | 01:38 | |
| *** prashkre has quit IRC | 01:49 | |
| *** links has joined #openstack-keystone | 02:03 | |
| *** threestrands has joined #openstack-keystone | 02:07 | |
| *** dinesh_ has joined #openstack-keystone | 02:11 | |
| *** itlinux has joined #openstack-keystone | 02:12 | |
| *** itlinux has quit IRC | 02:17 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 02:22 | |
| *** AlexeyAbashkin has quit IRC | 02:26 | |
| *** aojea has joined #openstack-keystone | 02:29 | |
| *** aojea has quit IRC | 02:33 | |
| *** bigjools has quit IRC | 02:40 | |
| *** aselius has quit IRC | 02:47 | |
| *** bigjools has joined #openstack-keystone | 02:48 | |
| *** bigjools has quit IRC | 02:48 | |
| *** bigjools has joined #openstack-keystone | 02:48 | |
| *** dinesh_ has quit IRC | 02:55 | |
| -openstackstatus- NOTICE: Due to an unexpected outage with Zuul (1 hour), you'll need to recheck any jobs that were in progress. Sorry for the inconvenience. | 02:56 | |
| *** dave-mccowan has quit IRC | 03:09 | |
| *** itlinux has joined #openstack-keystone | 03:15 | |
| *** aojea has joined #openstack-keystone | 03:30 | |
| *** aojea has quit IRC | 03:34 | |
| *** rcernin has quit IRC | 03:34 | |
| *** rcernin has joined #openstack-keystone | 03:36 | |
| *** sticker has quit IRC | 04:24 | |
| *** annp has joined #openstack-keystone | 04:29 | |
| *** aojea has joined #openstack-keystone | 04:31 | |
| *** aojea has quit IRC | 04:35 | |
| *** namnh has joined #openstack-keystone | 04:41 | |
| *** magicboiz has quit IRC | 04:46 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 05:22 | |
| *** jaosorior has quit IRC | 05:24 | |
| *** AlexeyAbashkin has quit IRC | 05:26 | |
| *** itlinux has quit IRC | 05:27 | |
| *** aojea has joined #openstack-keystone | 05:31 | |
| *** aojea has quit IRC | 05:36 | |
| *** dikonoo has quit IRC | 06:25 | |
| *** dikonoo has joined #openstack-keystone | 06:25 | |
| *** daidv has joined #openstack-keystone | 06:26 | |
| *** aojea has joined #openstack-keystone | 06:32 | |
| *** namnh has quit IRC | 06:33 | |
| *** threestrands has quit IRC | 06:34 | |
| *** aojea has quit IRC | 06:37 | |
| *** nsingh has joined #openstack-keystone | 06:40 | |
| *** sticker has joined #openstack-keystone | 06:42 | |
| *** niraj_singh has quit IRC | 06:43 | |
| *** dikonoo has quit IRC | 06:46 | |
| *** namnh has joined #openstack-keystone | 06:51 | |
| *** jaosorior has joined #openstack-keystone | 06:57 | |
| *** aojea has joined #openstack-keystone | 06:57 | |
| *** aojea has quit IRC | 06:58 | |
| *** aojea has joined #openstack-keystone | 06:58 | |
| *** aojea has quit IRC | 06:59 | |
| *** spectr has joined #openstack-keystone | 07:13 | |
| *** rcernin has quit IRC | 07:20 | |
| *** hoonetorg has quit IRC | 07:30 | |
| *** spectr has quit IRC | 07:38 | |
| *** hoonetorg has joined #openstack-keystone | 07:43 | |
| *** pcaruana has joined #openstack-keystone | 07:51 | |
| *** belmoreira has joined #openstack-keystone | 07:53 | |
| *** adriant has quit IRC | 07:58 | |
| *** john5223 has quit IRC | 07:58 | |
| *** hemna has quit IRC | 07:59 | |
| *** hemna has joined #openstack-keystone | 08:04 | |
| *** john5223 has joined #openstack-keystone | 08:06 | |
| *** adriant has joined #openstack-keystone | 08:12 | |
| *** tesseract has joined #openstack-keystone | 08:17 | |
| *** magicboiz has joined #openstack-keystone | 08:22 | |
| *** zhurong has joined #openstack-keystone | 08:23 | |
| *** Jack_Iv has joined #openstack-keystone | 08:29 | |
| *** Jack_Iv has quit IRC | 08:33 | |
| *** Jack_Iv has joined #openstack-keystone | 08:33 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 08:37 | |
| *** zenpwner has joined #openstack-keystone | 09:08 | |
| openstackgerrit | Dirk Mueller proposed openstack/keystone master: Remove keystone v2/tokenauth example https://review.openstack.org/520014 | 09:09 |
| openstackgerrit | Merged openstack/keystone master: Update cache doc https://review.openstack.org/519215 | 09:17 |
| openstackgerrit | wangxiyuan proposed openstack/keystone-specs master: Limits API https://review.openstack.org/455709 | 09:24 |
| *** magicboiz has quit IRC | 09:39 | |
| *** belmoreira has quit IRC | 10:01 | |
| *** belmoreira has joined #openstack-keystone | 10:06 | |
| *** annp has quit IRC | 10:13 | |
| *** zenpwner has quit IRC | 10:15 | |
| *** namnh has quit IRC | 10:17 | |
| *** daidv has quit IRC | 10:23 | |
| *** magicboiz has joined #openstack-keystone | 10:30 | |
| *** KwozyMan has joined #openstack-keystone | 10:37 | |
| *** daidv has joined #openstack-keystone | 10:41 | |
| *** daidv has quit IRC | 10:52 | |
| *** magicboiz has quit IRC | 10:57 | |
| *** magicboiz has joined #openstack-keystone | 11:04 | |
| *** mvk has quit IRC | 11:05 | |
| *** daidv has joined #openstack-keystone | 11:09 | |
| *** daidv has quit IRC | 11:12 | |
| *** daidv has joined #openstack-keystone | 11:27 | |
| *** daidv has quit IRC | 11:31 | |
| *** mvk has joined #openstack-keystone | 11:32 | |
| *** magicboiz has quit IRC | 11:33 | |
| *** sticker_ has joined #openstack-keystone | 11:36 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone-specs master: Limits API https://review.openstack.org/455709 | 11:37 |
| *** sticker has quit IRC | 11:40 | |
| *** Jack_Iv has quit IRC | 11:41 | |
| *** daidv has joined #openstack-keystone | 11:45 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/519781 | 11:45 |
| *** magicboiz has joined #openstack-keystone | 12:08 | |
| *** sticker_ has quit IRC | 12:32 | |
| *** KwozyMan has quit IRC | 13:08 | |
| *** wes_dillingham has joined #openstack-keystone | 13:09 | |
| *** jdennis has quit IRC | 13:22 | |
| *** links has quit IRC | 13:22 | |
| *** links has joined #openstack-keystone | 13:24 | |
| *** edmondsw has joined #openstack-keystone | 13:28 | |
| *** markvoelker has quit IRC | 13:29 | |
| *** markvoelker has joined #openstack-keystone | 13:29 | |
| *** jdennis has joined #openstack-keystone | 13:38 | |
| *** panbalag has joined #openstack-keystone | 13:52 | |
| *** links has quit IRC | 13:53 | |
| lbragstad | o/ | 13:53 |
| *** panbalag has left #openstack-keystone | 13:53 | |
| lbragstad | just a heads up - i'll be out for the next hour | 13:53 |
| lbragstad | hourish | 13:53 |
| *** dave-mccowan has joined #openstack-keystone | 14:01 | |
| *** ayoung has quit IRC | 14:03 | |
| *** dave-mccowan has quit IRC | 14:13 | |
| *** dave-mccowan has joined #openstack-keystone | 14:20 | |
| *** belmoreira has quit IRC | 14:23 | |
| *** dave-mcc_ has joined #openstack-keystone | 14:24 | |
| *** dave-mccowan has quit IRC | 14:25 | |
| *** links has joined #openstack-keystone | 15:11 | |
| *** evgenyf has joined #openstack-keystone | 15:28 | |
| evgenyf | Hi folks, is anybody available for a identity v3 question/issue? | 15:29 |
| lbragstad | evgenyf: sure - feel free to ask, someone is usually around to answer | 15:30 |
| evgenyf | question: I use identity v3. I have domain and two projects inside. I also have a user in this domain who has admin role on the domain. I do "openstack project list --domain <my domain uuid>" and get "You are not authorized to perform the requested action: identity:list_projects (HTTP 403)" | 15:35 |
| *** KwozyMan has joined #openstack-keystone | 15:36 | |
| evgenyf | The polisy for identity:list_projects says cloud admin or rule:admin_and_matching_domain_id | 15:36 |
| evgenyf | admin_and_matching_domain_id": "rule:admin_required and domain_id:%(domain_id)s | 15:37 |
| evgenyf | the issue is with domain_id probably, because once I remove it, it works | 15:37 |
| evgenyf | suggestions ? | 15:37 |
| *** dave-mcc_ has quit IRC | 15:38 | |
| lbragstad | SamYaple: https://review.openstack.org/#/c/520112/ | 15:40 |
| lbragstad | evgenyf: so the call works once you remove the domain_id:%(domain_id)s from the policy? | 15:41 |
| evgenyf | lbragstad: yes | 15:43 |
| lbragstad | does your user have a role assignment on the projects? | 15:44 |
| lbragstad | the projects inside the domain? | 15:44 |
| evgenyf | lbragstad: I tried it both ways, with just admin on domain. and with admin on domain and all projects | 15:45 |
| lbragstad | ok | 15:46 |
| lbragstad | but you're using the openstackclient in all cases, right? | 15:46 |
| evgenyf | lbragstad: yes, I have two projects under the domain | 15:46 |
| evgenyf | lbragstad: Yes, I use openstackclient | 15:46 |
| lbragstad | ok | 15:46 |
| evgenyf | I also do it via openstack4J java library which works over REST | 15:47 |
| lbragstad | if you get a domain-scoped token, can you list the projects against the API directly? | 15:47 |
| lbragstad | GET /v3/projects with the domain-scoped token | 15:47 |
| lbragstad | the reason why i ask is because openstackclient might be getting a project-scoped token for the request | 15:48 |
| lbragstad | instead of a domain-scoped one | 15:48 |
| evgenyf | lbragstad: I did not try it by myself, but saw somebody did it and it did not work until the domain_id=<uuid> was added, hence GET /v3/projects?domain_id=... | 15:48 |
| *** belmoreira has joined #openstack-keystone | 15:49 | |
| lbragstad | hm | 15:49 |
| lbragstad | let me see if i can recreate locally | 15:50 |
| evgenyf | lbragstad: I use NEWTON | 15:50 |
| *** magicboiz has quit IRC | 15:53 | |
| evgenyf | lbragstad: please see this link, it says that once the domain_id placeholder was changed to a hard-coded domain uuid - it worked. In my case it did not. link# https://ask.openstack.org/en/question/69418/not-authorized-to-list-projects-with-keystone-v3/ | 15:54 |
| lbragstad | evgenyf: just to confirm, this is in your policy file? http://paste.openstack.org/show/626411/ | 15:56 |
| lbragstad | does that match what you have? | 15:56 |
| *** phalmos has joined #openstack-keystone | 15:58 | |
| evgenyf | lbragstad: exactly | 15:59 |
| *** dave-mccowan has joined #openstack-keystone | 15:59 | |
| *** itlinux has joined #openstack-keystone | 16:00 | |
| *** magicboiz has joined #openstack-keystone | 16:01 | |
| *** dave-mccowan has quit IRC | 16:02 | |
| *** magicboiz has quit IRC | 16:06 | |
| *** magicboiz has joined #openstack-keystone | 16:13 | |
| *** markvoelker_ has joined #openstack-keystone | 16:18 | |
| *** aselius has joined #openstack-keystone | 16:18 | |
| *** zhurong has quit IRC | 16:18 | |
| *** markvoelker has quit IRC | 16:20 | |
| *** ayoung has joined #openstack-keystone | 16:35 | |
| *** prashkre has joined #openstack-keystone | 16:42 | |
| *** panbalag has joined #openstack-keystone | 16:46 | |
| *** jmlowe has joined #openstack-keystone | 16:47 | |
| *** belmoreira has quit IRC | 16:53 | |
| *** phalmos_ has joined #openstack-keystone | 16:55 | |
| *** phalmos has quit IRC | 16:58 | |
| *** links has quit IRC | 17:00 | |
| *** dave-mccowan has joined #openstack-keystone | 17:01 | |
| *** tesseract has quit IRC | 17:03 | |
| *** phalmos_ has quit IRC | 17:07 | |
| *** jmlowe has quit IRC | 17:09 | |
| evgenyf | lbragstad: thanks for your time. can you please ping me if you have progress with this issue? | 17:10 |
| lbragstad | evgenyf: yep - i just got out of a meeting, but i should have some time this afternoon to try and recreate | 17:10 |
| lbragstad | evgenyf: do you want to open a bug report just in case? | 17:11 |
| lbragstad | evgenyf: that was i can update it with my finding and we can just close it if there isn't an issue | 17:11 |
| lbragstad | https://bugs.launchpad.net/keystone/+filebug | 17:12 |
| *** d0ugal has quit IRC | 17:12 | |
| evgenyf | lbragstad: sure, thank you | 17:13 |
| lbragstad | evgenyf: thanks | 17:14 |
| *** masber has quit IRC | 17:15 | |
| *** phalmos has joined #openstack-keystone | 17:16 | |
| prashkre | lbragstad: Hi! It was long time back(almost 11hrs), I have cherry-picked(https://review.openstack.org/#/c/519846/) from master to stable/pike, I don't see workflow label updated or any errors reported. | 17:19 |
| lbragstad | prashkre: might need a recheck | 17:20 |
| lbragstad | prashkre: there was some issues with the gate recently i think | 17:20 |
| lbragstad | there was a mailing list thread about it | 17:20 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Add scope_types to RuleDefault objects https://review.openstack.org/510222 | 17:20 |
| lbragstad | cc dims fixed the merge conflict & | 17:20 |
| lbragstad | ^* | 17:21 |
| evgenyf | lbragstad: the issue - link# https://bugs.launchpad.net/keystone/+bug/1732502 | 17:22 |
| openstack | Launchpad bug 1732502 in OpenStack Identity (keystone) "project-list command does not work for a user with admin role on domain" [Undecided,New] | 17:22 |
| prashkre | lbragstad: are those issues with gate resolved or they still exist? | 17:24 |
| lbragstad | evgenyf: awesome - thanks! | 17:25 |
| lbragstad | prashkre: let me dig in the mailing list | 17:25 |
| lbragstad | prashkre: nevermind - it might have been specific to rally | 17:27 |
| *** panbalag has quit IRC | 17:28 | |
| *** panbalag has joined #openstack-keystone | 17:28 | |
| *** AlexeyAbashkin has quit IRC | 17:29 | |
| prashkre | lbragstad: thanks. posted recheck in comments. | 17:29 |
| *** KwozyMan has quit IRC | 17:33 | |
| *** gyee_ has joined #openstack-keystone | 17:34 | |
| hrybacki | lbragstad: I forgot to ask if there was any push from operators about the read only roll stuff? | 17:45 |
| *** magicboiz has quit IRC | 18:00 | |
| lbragstad | hrybacki: not directly - but we did go over https://trello.com/c/C1INH5AI/7-define-default-roles as a group in the policy feedback session | 18:00 |
| lbragstad | which kinda gets into the read-only role stuff | 18:00 |
| hrybacki | lbragstad: ack, okay thank you | 18:01 |
| dims | +2 lbragstad | 18:02 |
| *** evgenyf has quit IRC | 18:06 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/519781 | 18:10 |
| *** pcaruana has quit IRC | 18:11 | |
| *** aojea has joined #openstack-keystone | 18:15 | |
| *** mvk has quit IRC | 18:17 | |
| lbragstad | dims: woo - thanks! | 18:18 |
| SamYaple | lbragstad: python3 here i come (now with less auth_uri) | 18:18 |
| SamYaple | fun times we live in | 18:18 |
| *** samueldmq has quit IRC | 18:19 | |
| lbragstad | mhmm | 18:19 |
| *** samueldmq has joined #openstack-keystone | 18:19 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/519803 | 18:28 |
| *** aojea has quit IRC | 18:31 | |
| *** Dave has quit IRC | 18:36 | |
| *** Dave has joined #openstack-keystone | 18:38 | |
| *** panbalag has quit IRC | 18:44 | |
| *** itlinux has quit IRC | 18:54 | |
| *** spilla has joined #openstack-keystone | 19:02 | |
| *** mvk has joined #openstack-keystone | 19:06 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:13 | |
| edmondsw | lbragstad sorry for the slow review, but I finally looked at https://review.openstack.org/#/c/509909 and I think there's still some stuff we need to address there | 19:16 |
| edmondsw | added comments, even though it's already merged | 19:16 |
| edmondsw | easier to make them inline that way | 19:17 |
| *** AlexeyAbashkin has quit IRC | 19:17 | |
| *** d0ugal has joined #openstack-keystone | 19:20 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:22 | |
| *** AlexeyAbashkin has quit IRC | 19:26 | |
| *** itlinux has joined #openstack-keystone | 19:30 | |
| *** KwozyMan has joined #openstack-keystone | 19:30 | |
| *** KwozyMan has quit IRC | 19:46 | |
| *** nsingh has quit IRC | 20:15 | |
| *** nsingh has joined #openstack-keystone | 20:16 | |
| *** itlinux has quit IRC | 20:19 | |
| *** prashkre has quit IRC | 20:20 | |
| edmondsw | lbragstad replied again | 20:23 |
| *** d0ugal_ has joined #openstack-keystone | 20:25 | |
| *** d0ugal has quit IRC | 20:26 | |
| openstackgerrit | Rohan Arora proposed openstack/python-keystoneclient master: Add project tags to keystoneclient https://review.openstack.org/481223 | 20:30 |
| *** panbalag has joined #openstack-keystone | 20:34 | |
| *** itlinux has joined #openstack-keystone | 20:40 | |
| *** d0ugal_ has quit IRC | 20:40 | |
| *** d0ugal has joined #openstack-keystone | 20:40 | |
| *** d0ugal has quit IRC | 20:40 | |
| *** d0ugal has joined #openstack-keystone | 20:40 | |
| *** wes_dillingham has quit IRC | 20:51 | |
| *** d0ugal has quit IRC | 20:52 | |
| *** itlinux has quit IRC | 21:00 | |
| *** McClymontS has joined #openstack-keystone | 21:02 | |
| *** McClymontS has quit IRC | 21:08 | |
| *** nkinder has quit IRC | 21:09 | |
| *** itlinux has joined #openstack-keystone | 21:20 | |
| odyssey4me | I'm a bit rusty on federation and helping someone out with it - I seem to be missing something. | 21:20 |
| odyssey4me | It's likely a config error - I wonder if someone who is currently familiar with it can help me sanity check some things. | 21:21 |
| *** nkinder has joined #openstack-keystone | 21:22 | |
| odyssey4me | I'm configuring a keystone SP with an Okta IDP and it appears that the IDP is redirecting back to keystone, but keystone is redirecting right back to the IDP and it's stuck in this loop. | 21:22 |
| odyssey4me | this is in the browser, so websso is involved too | 21:22 |
| *** errr has joined #openstack-keystone | 21:28 | |
| *** threestrands has joined #openstack-keystone | 21:32 | |
| *** threestrands has quit IRC | 21:32 | |
| *** threestrands has joined #openstack-keystone | 21:32 | |
| *** itlinux has quit IRC | 21:42 | |
| lbragstad | odyssey4me: hmm | 21:45 |
| lbragstad | odyssey4me: is this before or after the user authenticates to the IdP/ | 21:46 |
| odyssey4me | lbragstad after | 21:47 |
| odyssey4me | I see the redirect from horizon to keystone's /v3/auth/OS-FEDERATION... URL, that redirects to the identity provider's remote_ids, which redirects back to the same keystone URL and back and forth | 21:50 |
| lbragstad | strange | 21:50 |
| odyssey4me | so this tells me that either keystone or the IDP are not configured right | 21:50 |
| lbragstad | i think - after authentication, keystone should be parsing the saml assertion but that's all done with apache | 21:51 |
| lbragstad | you could double check your configuration against - https://www.youtube.com/watch?v=jwXenfEOSOk | 21:53 |
| lbragstad | well - service provider configuration anyway | 21:53 |
| lbragstad | the walkthrough cmurphy does there is super helpful | 21:53 |
| odyssey4me | looks like the auth flow in 15:32 is what I'm seeing | 21:56 |
| lbragstad | odyssey4me: do you have debug and insecure_debug enabled in your configuration? | 21:57 |
| odyssey4me | hmm, lemme try that | 21:58 |
| lbragstad | and does it ever fail or does it just continually loop? | 21:58 |
| odyssey4me | it just loops | 21:58 |
| lbragstad | that's weird, i've never actually experienced that before | 21:58 |
| odyssey4me | nothing's coming through to keystone - even with both debugs enabled | 22:00 |
| odyssey4me | so it looks like shib's blocking it | 22:00 |
| lbragstad | what about shib or apache logs? | 22:00 |
| odyssey4me | apache - definitely seeing the POST come back | 22:02 |
| lbragstad | i wonder if its tripping when validating the assertion | 22:02 |
| odyssey4me | shibd.log is quiet though - although I think we have to enable debug somehow? | 22:02 |
| *** itlinux has joined #openstack-keystone | 22:11 | |
| odyssey4me | ok, keystone's apache is telling me that shib is denying it | 22:13 |
| lbragstad | i wonder what the reason is | 22:14 |
| lbragstad | invalid saml | 22:14 |
| lbragstad | or incorrect private keys/metadata | 22:14 |
| *** AlexeyAbashkin has joined #openstack-keystone | 22:21 | |
| *** itlinux has quit IRC | 22:23 | |
| *** rcernin has joined #openstack-keystone | 22:23 | |
| *** AlexeyAbashkin has quit IRC | 22:26 | |
| *** mvk has quit IRC | 22:35 | |
| *** nkinder has quit IRC | 22:39 | |
| *** itlinux has joined #openstack-keystone | 22:44 | |
| *** spilla has quit IRC | 22:46 | |
| *** edmondsw has quit IRC | 22:46 | |
| *** d0ugal has joined #openstack-keystone | 22:50 | |
| *** nkinder has joined #openstack-keystone | 22:52 | |
| *** phalmos has quit IRC | 22:59 | |
| *** wes_dillingham has joined #openstack-keystone | 23:12 | |
| odyssey4me | lbragstad well, this is odd - if I tell the IDP the URL to post back to is https://myserver:5000/Shibboleth.sso/SAML2/POST instead of https://myserver:5000/v3/auth/OS-FEDERATION/websso/saml2 then it gets a session, but the browser gets redirected back to keystone's root instead of back to horizon | 23:13 |
| *** jmlowe has joined #openstack-keystone | 23:13 | |
| *** itlinux has quit IRC | 23:15 | |
| *** dave-mccowan has quit IRC | 23:19 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 23:20 | |
| *** jmlowe has quit IRC | 23:21 | |
| *** AlexeyAbashkin has quit IRC | 23:25 | |
| *** masber has joined #openstack-keystone | 23:30 | |
| *** jmlowe has joined #openstack-keystone | 23:33 | |
| *** jmlowe has quit IRC | 23:38 | |
| *** edmondsw has joined #openstack-keystone | 23:44 | |
| *** edmondsw has quit IRC | 23:55 | |
| *** edmondsw has joined #openstack-keystone | 23:57 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!