Monday, 2018-03-26

*** gus has left #openstack-keystone00:23
*** odyssey4me has quit IRC00:35
*** odyssey4me has joined #openstack-keystone00:35
*** masber has joined #openstack-keystone00:37
*** zhurong has joined #openstack-keystone00:37
*** wes_dillingham has joined #openstack-keystone00:44
*** Dinesh_Bhor has joined #openstack-keystone00:45
*** zhurong has quit IRC01:01
*** wes_dillingham has quit IRC01:03
*** wes_dillingham has joined #openstack-keystone01:06
*** wes_dillingham has quit IRC01:14
*** wes_dillingham has joined #openstack-keystone01:17
*** wes_dillingham has quit IRC01:17
*** Dinesh_Bhor has quit IRC01:35
*** Dinesh_Bhor has joined #openstack-keystone01:36
*** ayoung has quit IRC01:51
*** david-lyle has joined #openstack-keystone02:08
*** germs has quit IRC02:11
*** dangtrinhnt has joined #openstack-keystone02:11
*** germs has joined #openstack-keystone02:11
*** germs has quit IRC02:11
*** germs has joined #openstack-keystone02:11
openstackgerritwangxiyuan proposed openstack/keystone master: Clean up token extra code  https://review.openstack.org/55527902:11
openstackgerritwangxiyuan proposed openstack/keystone master: Clean up token extra code  https://review.openstack.org/55527902:14
*** masber has quit IRC02:21
*** annp has joined #openstack-keystone02:34
*** Dinesh_Bhor has quit IRC02:36
*** Dinesh_Bhor has joined #openstack-keystone02:42
*** kmalloc has quit IRC02:46
*** Dinesh_Bhor has quit IRC02:54
*** NM has joined #openstack-keystone02:55
*** Dinesh_Bhor has joined #openstack-keystone02:59
*** NM has quit IRC02:59
*** david-lyle has quit IRC03:01
*** Dinesh_Bhor has quit IRC03:07
*** dangtrinhnt has quit IRC03:14
*** masber has joined #openstack-keystone03:17
*** jroll has quit IRC03:28
*** jroll has joined #openstack-keystone03:31
*** dave-mccowan has quit IRC03:34
*** zhurong has joined #openstack-keystone03:37
*** rcernin has quit IRC03:55
*** rcernin has joined #openstack-keystone03:55
*** bhagyashris has joined #openstack-keystone04:01
*** Dinesh_Bhor has joined #openstack-keystone04:05
openstackgerritwangxiyuan proposed openstack/keystone master: The migration script to add description for limit  https://review.openstack.org/55313104:19
openstackgerritwangxiyuan proposed openstack/keystone master: [WIP] Limit description support  https://review.openstack.org/55313204:19
*** rha has quit IRC04:34
*** zhurong has quit IRC04:42
*** masber has quit IRC04:47
*** gyankum has joined #openstack-keystone04:49
*** masber has joined #openstack-keystone04:49
*** Dinesh__Bhor has joined #openstack-keystone05:02
*** Dinesh_Bhor has quit IRC05:02
*** felipemonteiro has joined #openstack-keystone05:14
*** Dinesh__Bhor has quit IRC05:37
*** felipemonteiro has quit IRC05:39
*** abhi89 has joined #openstack-keystone05:49
*** abhi89 has quit IRC05:51
*** Dinesh__Bhor has joined #openstack-keystone05:53
*** Dinesh__Bhor has quit IRC05:56
*** Dinesh__Bhor has joined #openstack-keystone05:56
*** jaosorior has joined #openstack-keystone05:59
*** martinus__ has joined #openstack-keystone06:13
*** jaosorior has quit IRC06:14
*** zhongjun_ has quit IRC06:15
*** kmalloc has joined #openstack-keystone06:17
*** links has joined #openstack-keystone06:19
*** AlexeyAbashkin has joined #openstack-keystone06:19
*** jaosorior has joined #openstack-keystone06:21
*** AlexeyAbashkin has quit IRC06:24
openstackgerritwangxiyuan proposed openstack/keystone master: Limit description support  https://review.openstack.org/55313206:25
*** masber has quit IRC06:41
*** jaosorior has quit IRC06:41
*** jaosorior has joined #openstack-keystone06:50
*** pcaruana has joined #openstack-keystone07:08
*** rcernin has quit IRC07:10
*** aojea has joined #openstack-keystone07:13
*** aojea has quit IRC07:22
*** tesseract has joined #openstack-keystone07:23
*** usr2033 has joined #openstack-keystone07:23
usr2033hi, can anyone help me about policy.json file? At least how it works.07:24
wxyusr2033: https://docs.openstack.org/oslo.policy/latest/ you can read this first.07:27
*** aojea has joined #openstack-keystone07:29
*** aojea has quit IRC07:35
usr2033thanks wxy07:38
*** aojea has joined #openstack-keystone07:42
wxyusr2033: np07:46
*** aojea has quit IRC07:49
*** AlexeyAbashkin has joined #openstack-keystone07:50
*** dineshbhor__ has joined #openstack-keystone07:52
*** Dinesh__Bhor has quit IRC07:53
openstackgerritmelissaml proposed openstack/keystoneauth master: fix a typo in session.py  https://review.openstack.org/55639708:03
openstackgerritOpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements  https://review.openstack.org/55640508:05
*** masber has joined #openstack-keystone08:09
*** dineshbhor__ has quit IRC08:16
*** Dinesh_Bhor has joined #openstack-keystone08:16
Dinesh_Bhorcmurphy: Are you saying that these files (keystoneclient/access.py and keystoneclient/v3/tokens.py) are moved to keystoneauth  so no need to add request-id to them. If someone still tries to hit the related API's of these modules then they will not get request-id. We should add request-id to them to be consistent with other modules API's. Is there a plan to remove those files from keystoneclient if yes then that08:17
Dinesh_Bhormakes sense to not add req-id to them.08:17
Dinesh_Bhorcmurphy: Patch: https://review.openstack.org/#/c/267456/1908:17
cmurphyDinesh_Bhor: access.py is moved to keystoneauth, tokens.py is not directly moved but everything it does should be accomplished with keystoneauth08:24
cmurphythose all have to do with one single API, /v3/auth/tokens, and auth with keystoneclient is deprecated and we will eventually remove those bits https://docs.openstack.org/python-keystoneclient/latest/using-api-v3.html#non-session-authentication-deprecated08:24
Dinesh_Bhorcmurphy: is it planned to remove those files from keystoneclient in Rocky or in future releases?08:31
cmurphyDinesh_Bhor: I don't think we have it slated for Rocky :/ unfortunately I can't find the plan documented anywhere08:33
Dinesh_Bhorcmurphy: okay. That makes sense. I will remove those files from the patch then.08:37
Dinesh_Bhorcmurphy: one more point about this: https://review.openstack.org/#/c/267456/19/keystoneclient/v3/projects.py08:37
Dinesh_Bhorcmurphy: The logic is already there in CrudManager but this method is overriding the behaviour of base list() a bit.08:38
cmurphyDinesh_Bhor: why does it do that?08:38
Dinesh_Bhorcmurphy: Response **projects** is getting modified here. So we need to again check the for the type of response (request.Response/keystoneclient.base.Response) and do the modifications on response **projects** accordingly.08:38
cmurphyDinesh_Bhor: okay, makes sense08:39
Dinesh_Bhorcmurphy: okay. The updated V3 patch will only contain changes related to projects.py. I will update in 10 min. Thank you for your instant reply.08:41
cmurphyDinesh_Bhor: no problem08:41
cmurphyDinesh_Bhor: I think with the token class now being unmodified then this probably doesn't need to be implemented as a mixin anymore https://review.openstack.org/#/c/329913/11/keystoneclient/base.py08:43
Dinesh_Bhorcmurphy: correct, I will remove that too.08:44
*** masber has quit IRC08:54
*** masber has joined #openstack-keystone08:57
openstackgerritDinesh Bhor proposed openstack/python-keystoneclient master: Add Response class to return request-id to caller  https://review.openstack.org/32991309:01
openstackgerritDinesh Bhor proposed openstack/python-keystoneclient master: Add return-request-id-to-caller function(v3)  https://review.openstack.org/26745609:01
*** masber has quit IRC09:02
*** masber has joined #openstack-keystone09:03
*** voelzmo has joined #openstack-keystone09:10
*** panbalag has joined #openstack-keystone09:16
*** voelzmo has quit IRC09:16
*** panbalag has left #openstack-keystone09:30
*** Dinesh_Bhor has quit IRC09:36
*** aloga_ has joined #openstack-keystone09:38
*** masber has quit IRC09:38
*** zhurong has joined #openstack-keystone09:38
*** gyankum has quit IRC10:01
*** Mujahid has joined #openstack-keystone10:52
*** bhagyashris has quit IRC11:01
*** jaosorior has quit IRC11:01
*** dangtrinhnt has joined #openstack-keystone11:13
*** AlexeyAbashkin has quit IRC11:14
usr2033is this a valid rule -> domain_id:%(target.project.domain_id)s11:18
*** bhagyashris has joined #openstack-keystone11:25
*** zhurong has quit IRC11:27
*** AlexeyAbashkin has joined #openstack-keystone11:29
*** Mujahid has quit IRC11:34
*** jaosorior has joined #openstack-keystone11:40
*** raildo has joined #openstack-keystone12:04
*** dave-mccowan has joined #openstack-keystone12:04
openstackgerritMerged openstack/keystone master: Add new setup commands for token keys  https://review.openstack.org/54765712:09
*** edmondsw has joined #openstack-keystone12:13
*** dangtrinhnt has quit IRC12:19
*** eschwartz is now known as anyone12:22
*** NM has joined #openstack-keystone12:26
*** belmoreira has joined #openstack-keystone12:28
*** odyssey4me has quit IRC12:47
*** odyssey4me has joined #openstack-keystone12:47
*** hoonetorg has quit IRC12:49
*** ilush has joined #openstack-keystone12:56
*** hoonetorg has joined #openstack-keystone13:06
*** dikonoor has joined #openstack-keystone13:10
*** XveD has joined #openstack-keystone13:11
*** XveD has quit IRC13:12
*** dikonoor has quit IRC13:15
ilushHi folks, my app is using keystone middleware for token validation and caching. I see that connections to memcache are not being reused and it is causing certain problems time to time.13:16
*** dikonoor has joined #openstack-keystone13:16
ilushWhat you would recomend to fix that?13:16
ilushI see that keystone itself uses connection pool from oslo.cache, is that something that  I should use as well?13:20
*** jroll has quit IRC13:27
*** jroll has joined #openstack-keystone13:27
*** belmorei_ has joined #openstack-keystone13:31
*** aloga_ has quit IRC13:31
*** belmoreira has quit IRC13:33
*** NM has quit IRC13:33
*** aloga_ has joined #openstack-keystone13:35
*** NM has joined #openstack-keystone13:36
*** aloga_ has quit IRC13:37
lbragstadilush: last release we converted keystonemiddleware to use oslo.cache - which release are you using?13:44
*** masuberu has joined #openstack-keystone13:45
ilushThere's a range of supported releases, but currently, for this specific problem I look at Ocata13:46
*** jmlowe has quit IRC13:49
*** mvk has quit IRC13:51
lbragstadok - i think keystonemiddleware was still using it's caching implementation - let me double check13:55
lbragstadyeah - keystonemiddleware was moved over to oslo.cache in Queens - https://review.openstack.org/#/c/268664/13:58
*** jaosorior has quit IRC13:58
lbragstadprior to that, keystonemiddleware used its own caching implementation13:58
ilushThank you! I'll try to see if we can just bump keystonemiddleware version. there shouldn't be too many dependencies14:01
*** jistr is now known as jistr|mtg14:02
*** r-daneel has joined #openstack-keystone14:10
*** masuberu has quit IRC14:12
*** masuberu has joined #openstack-keystone14:12
*** felipemonteiro has joined #openstack-keystone14:18
*** felipemonteiro_ has joined #openstack-keystone14:20
*** jmlowe has joined #openstack-keystone14:22
*** felipemonteiro has quit IRC14:23
*** mvk has joined #openstack-keystone14:24
*** jistr|mtg is now known as jistr14:27
*** NM has quit IRC14:29
*** links has quit IRC14:32
*** markvoelker_ has joined #openstack-keystone14:34
*** markvoelker has quit IRC14:35
*** markvoelker has joined #openstack-keystone14:37
*** NM has joined #openstack-keystone14:38
*** markvoelker_ has quit IRC14:39
*** NM has quit IRC14:44
*** NM has joined #openstack-keystone14:47
*** felipemonteiro_ has quit IRC14:53
*** felipemonteiro__ has joined #openstack-keystone14:53
*** NM has quit IRC14:57
*** Mujahid has joined #openstack-keystone15:00
*** germs has quit IRC15:00
*** NM has joined #openstack-keystone15:00
*** usr2033 has quit IRC15:03
*** pcichy has joined #openstack-keystone15:07
*** XveD has joined #openstack-keystone15:09
*** Guest14340 is now known as zeus15:10
*** zeus has quit IRC15:10
*** zeus has joined #openstack-keystone15:10
*** devx has quit IRC15:12
*** XveD is now known as DevX15:12
Mujahidcmurphy: Hi cmurphy. Good Morning.15:12
MujahidI have been reading your blogs on keystone . I am very new to OpenStack and Keystone.15:13
MujahidI am setting up Federated Identity on devstack using oidc(Google) by following your blog http://www.gazlene.net/federation-devstack.html. I have configured /etc/keystone/keystone.conf and /etc/apache2/sites-enabled/keystone-wsgi-public.conf file as stated in the blog and reached till the mapping of protocol but I am still getting the error: {"error": {"message": "Missing entity ID from environment (Disable insecure_debug mode to suppress15:13
Mujahidthese details.)", "code": 401, "title": "Unauthorized"}}.15:13
MujahidURL on the error page :http://test-federation-host.com/identity/v3/auth/OS-FEDERATION/websso/oidc?origin=http://test-federation-host.com/dashboard/auth/websso/15:13
MujahidI am not able to proceed furhter from this point. Can you please help me to address the above error??15:13
*** kmalloc has quit IRC15:16
*** spilla has joined #openstack-keystone15:17
*** pcaruana has quit IRC15:18
*** pcichy has quit IRC15:22
*** david-lyle has joined #openstack-keystone15:29
*** NM has quit IRC15:42
*** david-lyle has quit IRC15:42
*** david-lyle has joined #openstack-keystone15:46
*** jaosorior has joined #openstack-keystone15:56
*** NM has joined #openstack-keystone15:56
*** belmorei_ has quit IRC15:59
cmurphyMujahid: the most common thing is probably a misconfiguration of the apache vhost, double check that the paths in the <Location> directives actually match how your vhost is configured (is it actually using /identity rather than port 5000?) and the protocol name what you created in the CLI (oidc or mapped?), also check the apache logs for error messages from the oidc auth mod and check the keystone16:00
cmurphylogs for the request data to see if HTTP_OIDC_ISS is there16:00
*** felipemonteiro__ has quit IRC16:09
*** ilush has quit IRC16:09
*** david-lyle has quit IRC16:14
*** masuberu has quit IRC16:18
*** gyee has joined #openstack-keystone16:27
*** masuberu has joined #openstack-keystone16:31
*** germs has joined #openstack-keystone16:36
*** germs has quit IRC16:36
*** germs has joined #openstack-keystone16:36
*** germs has quit IRC16:41
*** pcaruana has joined #openstack-keystone16:44
*** dklyle has joined #openstack-keystone16:47
*** dklyle has quit IRC16:49
*** david-lyle has joined #openstack-keystone16:49
hugokuoIs there a way to print the keystone requestID in keystoneauth and authtoken middleware? I have a Swift testbed with middleware 1.5. My client tool keeps getting 401 from OpenStack Swift. I can't identify if the 401 for middleware admin's credential or user's incoming token validation.16:50
*** kmalloc has joined #openstack-keystone16:52
*** david-lyle has quit IRC16:55
*** masuberu has quit IRC17:07
*** AlexeyAbashkin has quit IRC17:15
*** david-lyle has joined #openstack-keystone17:18
*** david-lyle has quit IRC17:25
*** szaher has joined #openstack-keystone17:25
*** Mujahid has quit IRC17:35
*** r-daneel has quit IRC17:43
*** r-daneel has joined #openstack-keystone17:50
*** felipemonteiro has joined #openstack-keystone17:53
*** felipemonteiro_ has joined #openstack-keystone17:54
*** felipemonteiro has quit IRC17:58
*** mvk has quit IRC18:04
*** tesseract has quit IRC18:10
*** jmlowe has quit IRC18:15
*** jmlowe_ has joined #openstack-keystone18:15
*** mvk has joined #openstack-keystone18:32
openstackgerritMurali Annamneni proposed openstack/keystone master: [WIP] Enables MySQL Cluster support for Keystone  https://review.openstack.org/43122918:34
*** pcichy has joined #openstack-keystone18:35
*** germs has joined #openstack-keystone18:37
*** ilush has joined #openstack-keystone18:41
*** germs has quit IRC18:42
*** AlexeyAbashkin has joined #openstack-keystone18:42
*** pcaruana has quit IRC18:46
*** AlexeyAbashkin has quit IRC18:54
*** voelzmo has joined #openstack-keystone18:54
*** marius1 has joined #openstack-keystone18:55
*** voelzmo has quit IRC19:00
*** pcichy has quit IRC19:01
*** pcichy has joined #openstack-keystone19:02
*** AlexeyAbashkin has joined #openstack-keystone19:14
*** voelzmo has joined #openstack-keystone19:15
*** AlexeyAbashkin has quit IRC19:18
*** aojea has joined #openstack-keystone19:29
*** Supun has joined #openstack-keystone19:30
*** ilush has quit IRC19:31
*** harlowja has joined #openstack-keystone19:37
*** voelzmo_ has joined #openstack-keystone19:38
*** voelzmo has quit IRC19:42
*** voelzmo_ has quit IRC19:46
*** raildo has quit IRC19:47
*** ilush has joined #openstack-keystone19:49
*** voelzmo has joined #openstack-keystone19:51
*** voelzmo has quit IRC19:51
*** voelzmo has joined #openstack-keystone19:51
*** voelzmo_ has joined #openstack-keystone19:52
*** NM has quit IRC19:53
*** NM has joined #openstack-keystone19:55
*** voelzmo has quit IRC19:55
*** EmilienM has quit IRC19:57
*** EmilienM has joined #openstack-keystone19:57
*** voelzmo_ has quit IRC20:02
*** voelzmo has joined #openstack-keystone20:02
openstackgerritMerged openstack/keystone master: add lower-constraints job  https://review.openstack.org/55562420:13
*** felipemonteiro__ has joined #openstack-keystone20:16
*** felipemonteiro_ has quit IRC20:16
*** r-daneel has quit IRC20:21
*** edmondsw has quit IRC20:21
*** r-daneel has joined #openstack-keystone20:22
*** NM has quit IRC20:33
*** NM has joined #openstack-keystone20:37
*** germs has joined #openstack-keystone20:38
*** germs has quit IRC20:38
*** germs has joined #openstack-keystone20:38
*** ilush has quit IRC20:39
*** NM has quit IRC20:42
*** germs has quit IRC20:42
*** NM has joined #openstack-keystone20:45
*** NM has quit IRC20:45
*** NM has joined #openstack-keystone20:45
*** edmondsw has joined #openstack-keystone20:47
*** pcichy has quit IRC20:51
*** voelzmo has quit IRC21:01
*** voelzmo has joined #openstack-keystone21:02
*** voelzmo has quit IRC21:02
*** voelzmo has joined #openstack-keystone21:02
*** voelzmo has quit IRC21:03
*** voelzmo has joined #openstack-keystone21:04
*** voelzmo has quit IRC21:04
*** voelzmo has joined #openstack-keystone21:04
*** voelzmo has quit IRC21:05
*** edmondsw has quit IRC21:05
*** voelzmo has joined #openstack-keystone21:05
*** voelzmo has quit IRC21:05
*** edmondsw has joined #openstack-keystone21:08
*** jdennis has quit IRC21:16
*** jdennis has joined #openstack-keystone21:16
openstackgerritLance Bragstad proposed openstack/keystone master: Removal of deprecated direct driver loading  https://review.openstack.org/35081521:18
*** martinus__ has quit IRC21:21
*** edmondsw has quit IRC21:26
*** dave-mccowan has quit IRC21:27
*** Supun has quit IRC21:36
*** ilush has joined #openstack-keystone21:42
*** felipemonteiro_ has joined #openstack-keystone21:49
*** felipemonteiro__ has quit IRC21:53
*** ilush has quit IRC22:03
*** felipemonteiro_ has quit IRC22:05
*** AlexeyAbashkin has joined #openstack-keystone22:12
*** AlexeyAbashkin has quit IRC22:16
*** aojea has quit IRC22:18
*** rcernin has joined #openstack-keystone22:20
*** dave-mccowan has joined #openstack-keystone22:28
*** germs has joined #openstack-keystone22:38
*** germs has quit IRC22:38
*** germs has joined #openstack-keystone22:38
*** germs has quit IRC22:43
*** NM has quit IRC22:53
*** r-daneel has quit IRC23:10
*** AlexeyAbashkin has joined #openstack-keystone23:12
*** AlexeyAbashkin has quit IRC23:16
*** marius1 has quit IRC23:25
*** spilla has quit IRC23:26
*** felipemonteiro has joined #openstack-keystone23:29
*** germs has joined #openstack-keystone23:51
*** germs has quit IRC23:51
*** germs has joined #openstack-keystone23:51
*** germs has quit IRC23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!