| *** odyssey4me has quit IRC | 00:02 | |
| *** odyssey4me has joined #openstack-keystone | 00:02 | |
| *** jdennis has quit IRC | 00:06 | |
| *** felipemonteiro has joined #openstack-keystone | 01:10 | |
| *** r-daneel has joined #openstack-keystone | 01:19 | |
| *** r-daneel has quit IRC | 01:24 | |
| *** oikiki has joined #openstack-keystone | 01:27 | |
| openstackgerrit | Merged openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/551495 | 01:39 |
|---|---|---|
| *** oikiki has quit IRC | 03:24 | |
| *** oikiki has joined #openstack-keystone | 03:27 | |
| *** r-daneel has joined #openstack-keystone | 03:51 | |
| *** oikiki has quit IRC | 03:51 | |
| *** r-daneel_ has joined #openstack-keystone | 03:53 | |
| *** r-daneel has quit IRC | 03:55 | |
| *** r-daneel_ is now known as r-daneel | 03:55 | |
| *** links has joined #openstack-keystone | 04:50 | |
| *** germs has joined #openstack-keystone | 05:34 | |
| *** felipemonteiro has quit IRC | 05:36 | |
| *** germs has quit IRC | 05:39 | |
| *** oikiki has joined #openstack-keystone | 06:44 | |
| *** oikiki has quit IRC | 06:48 | |
| *** felipemonteiro has joined #openstack-keystone | 06:54 | |
| *** germs has joined #openstack-keystone | 07:08 | |
| *** germs has quit IRC | 07:08 | |
| *** germs has joined #openstack-keystone | 07:08 | |
| *** marius1 has joined #openstack-keystone | 07:10 | |
| *** germs has quit IRC | 07:12 | |
| *** mtreinish has quit IRC | 07:16 | |
| *** hrybacki has quit IRC | 07:16 | |
| *** samueldmq has quit IRC | 07:16 | |
| *** felipemonteiro has quit IRC | 07:16 | |
| *** samueldmq has joined #openstack-keystone | 07:16 | |
| *** d0ugal has joined #openstack-keystone | 07:18 | |
| *** d0ugal has quit IRC | 07:18 | |
| *** d0ugal has joined #openstack-keystone | 07:18 | |
| *** mtreinish has joined #openstack-keystone | 07:18 | |
| *** eEbx has joined #openstack-keystone | 07:18 | |
| *** eEbx- has quit IRC | 07:18 | |
| *** NobodyCam has quit IRC | 07:18 | |
| *** NobodyCam has joined #openstack-keystone | 07:18 | |
| *** hrybacki has joined #openstack-keystone | 07:18 | |
| *** pcaruana has quit IRC | 07:18 | |
| *** NobodyCam has quit IRC | 07:18 | |
| *** NobodyCam has joined #openstack-keystone | 07:18 | |
| *** hrybacki has quit IRC | 07:18 | |
| *** hrybacki has joined #openstack-keystone | 07:18 | |
| *** pcaruana has joined #openstack-keystone | 07:19 | |
| *** hugokuo has quit IRC | 07:21 | |
| *** hugokuo has joined #openstack-keystone | 07:24 | |
| *** NobodyCam_ has joined #openstack-keystone | 07:27 | |
| *** NobodyCam has quit IRC | 07:28 | |
| *** hrybacki has quit IRC | 07:28 | |
| *** hugokuo has quit IRC | 07:28 | |
| *** hrybacki has joined #openstack-keystone | 07:28 | |
| *** hrybacki has quit IRC | 07:28 | |
| *** hrybacki has joined #openstack-keystone | 07:28 | |
| *** NobodyCam_ is now known as NobodyCam | 07:28 | |
| *** hugokuo has joined #openstack-keystone | 07:30 | |
| *** germs has joined #openstack-keystone | 07:54 | |
| *** germs has quit IRC | 07:54 | |
| *** germs has joined #openstack-keystone | 07:54 | |
| *** germs has quit IRC | 07:58 | |
| *** links has quit IRC | 08:02 | |
| *** d0ugal has quit IRC | 08:28 | |
| *** tjalirp has joined #openstack-keystone | 09:50 | |
| openstackgerrit | Jens Harbott (frickler) proposed openstack/keystoneauth master: Be more verbose when version discovery fails https://review.openstack.org/554044 | 09:57 |
| *** marius2 has joined #openstack-keystone | 10:01 | |
| *** marius1 has quit IRC | 10:03 | |
| kmalloc | adriant: i am sorry, but partial-tokens would be an API contract break and cannot be implemented (A token issued means auth is complete). If the 401 error is insufficient to inform a client what is needed to auth, enhance the 401 error (the client needs to be smart enough to handle it, instead of breaking cleints who do no understand) -- simply stated, we already inform the user what auth methods are needed via | 11:41 |
| kmalloc | (and it is not a "security error" so not obscured when out of debug mode: https://github.com/openstack/keystone/blob/230d0cfc6c5f6d497fc4751cae1832d4903e0352/keystone/exception.py#L272-L278 make this error more useful. If it is not useful enough to act on then this is a bug. But a token-that-is-not-a-token-and-not-usable-outside-of-keystone has to be a -2. [I think you can implement challenge/response style work | 11:41 |
| kmalloc | client side based upon the 401's information] | 11:41 |
| *** martinus__ has joined #openstack-keystone | 12:29 | |
| *** odyssey4me has quit IRC | 12:57 | |
| *** odyssey4me has joined #openstack-keystone | 12:57 | |
| *** marius2 has quit IRC | 13:30 | |
| *** zhongjun_ has joined #openstack-keystone | 13:46 | |
| *** felipemonteiro has joined #openstack-keystone | 15:23 | |
| *** pcichy has joined #openstack-keystone | 15:36 | |
| *** pcichy has quit IRC | 15:56 | |
| *** pcichy has joined #openstack-keystone | 16:00 | |
| *** felipemonteiro has quit IRC | 16:05 | |
| *** pcichy has quit IRC | 17:07 | |
| *** zhongjun_ has quit IRC | 17:46 | |
| openstackgerrit | Merged openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/549536 | 17:48 |
| *** marius1 has joined #openstack-keystone | 19:35 | |
| *** itlinux has joined #openstack-keystone | 19:49 | |
| *** itlinux has quit IRC | 19:50 | |
| adriant | kmalloc: what if we still return the 401, but in the body/header still include a 'partial token'? | 20:16 |
| adriant | Then old clients still know what's up, but new tools know to check the body for useful info | 20:17 |
| adriant | and keystone itself accepts the new partial token so password/auth data doesn't need to be resupplied | 20:17 |
| adriant | Or potentially change this auth path to return a 201? That at least would be a more useful response for users to debug if for some stupid reason they hit this (they shouldn't without knowing). | 20:19 |
| adriant | kmalloc: the issue isn't just needing a more descriptive error. The issue is needing to resupply the auth data again if Keystone knows it was valid, that is bad design, that is what I want us to avoid. | 20:20 |
| adriant | see my response in the gerrit review. I think we can find a middle ground that gets me what I want, while still retaining the contract for existing consumers. | 20:21 |
| adriant | correction: 202 not 201 | 20:25 |
| *** itlinux has joined #openstack-keystone | 20:37 | |
| *** itlinux has quit IRC | 20:49 | |
| *** marius1 has quit IRC | 21:23 | |
| *** oikiki has joined #openstack-keystone | 21:44 | |
| *** itlinux has joined #openstack-keystone | 21:44 | |
| *** oikiki has quit IRC | 21:51 | |
| *** pcaruana has quit IRC | 21:54 | |
| *** martinus__ has quit IRC | 22:01 | |
| *** r-daneel has quit IRC | 22:09 | |
| *** rcernin has joined #openstack-keystone | 22:12 | |
| *** felipemonteiro has joined #openstack-keystone | 22:46 | |
| *** itlinux has quit IRC | 22:56 | |
| *** bigdogstl has joined #openstack-keystone | 22:57 | |
| *** bigdogstl has quit IRC | 23:38 | |
| *** rcernin has quit IRC | 23:38 | |
| *** rcernin has joined #openstack-keystone | 23:39 | |
| *** vegarl_ has quit IRC | 23:42 | |
| *** itlinux has joined #openstack-keystone | 23:43 | |
| *** felipemonteiro has quit IRC | 23:46 | |
| *** vegarl has joined #openstack-keystone | 23:48 | |
| *** oikiki has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!