Wednesday, 2018-09-12

*** bhagyashris has quit IRC00:00
*** gyee has quit IRC00:04
openstackgerritayoung proposed openstack/keystone-specs master: Tokens with subsets of roles  https://review.openstack.org/18697900:08
ayoungstewie925, you can probably use the cloudsample to get started00:09
ayoungPriti's description is pretty good, IIRC00:10
ayoungstewie925, you want to make an admin domain. This can be default, but it is better if it is a separate domain.  And you have to stick that domain_id into the cloudsample file00:10
*** stewie925_ has joined #openstack-keystone00:10
ayoungstewie925, you want to make an admin domain. This can be default, but it is better if it is a separate domain.  And you have to stick that domain_id into the cloudsample file00:10
ayoungstewie925_, , you want to make an admin domain. This can be default, but it is better if it is a separate domain.  And you have to stick that domain_id into the cloudsample file00:11
stewie925_ayoung:  thank you!!!  thats where I get confused00:11
ayoungstewie925_, and you want to get a different IRC client00:11
stewie925_lol00:11
ayoungxchat for RHEL, hexchat for the rest of the world stewie925_00:11
ayoungrhel moves slow00:12
stewie925_hexchat used to work nut now blcked by company firewall00:12
*** stewie925 has quit IRC00:13
stewie925_ayoung:  yeah i do have a  project_domain_id  and user_domain_id set to 'default' - think thats part of devstack setup00:15
ayoungstewie925_, I think you can have hexchat talk via an HTTP proxy00:17
ayoungnope, I lied00:18
stewie925_lol00:19
stewie925_its okay :)00:19
stewie925_no longer support hexchat - so back to webchat  freenode here I am lol00:19
stewie925_I hope it behaves now - no more disconnects00:20
stewie925_ayoung:  I am wondering if domain_id pertains to either project or user domain?00:21
stewie925_in my devstack environemtn I have "OS_PROJECT_DOMAIN_ID=default"  and "OS_USER_DOMAIN_ID=default"00:22
stewie925_it looks like aside from policy.json, I need to update the authentication code also00:24
*** dave-mccowan has joined #openstack-keystone01:04
*** abhi89 has joined #openstack-keystone01:07
stewie925_ayoung:  thanks again for the input so far01:07
stewie925_good night everyone01:07
*** stewie925_ has quit IRC01:09
*** Dinesh_Bhor has joined #openstack-keystone01:13
*** abhi89 has quit IRC01:17
*** ayoung has quit IRC01:21
*** Dinesh_Bhor has quit IRC01:53
*** markvoelker has quit IRC01:54
*** markvoelker has joined #openstack-keystone01:55
tonybcmurphy: I know you're keen to know:01:56
tonyb(venv) [tony@thor requirements]$ check_tox_lc_env ../* 2>&1 | grep -v OK | wc -l01:56
tonyb5901:56
tonyb:( So 59 projects have lower-constraints setup in some form but it's not testing lower-constraints01:57
*** markvoelker has quit IRC01:59
*** nicolasbock has joined #openstack-keystone02:08
*** Dinesh_Bhor has joined #openstack-keystone02:23
openstackgerritwangxiyuan proposed openstack/oslo.limit master: Add limit check func  https://review.openstack.org/59652002:25
openstackgerritTony Breeds proposed openstack/keystone master: Move use of constraints out of install_cmd  https://review.openstack.org/60118802:32
*** bhagyashris has joined #openstack-keystone02:51
*** annp has joined #openstack-keystone03:02
*** markvoelker has joined #openstack-keystone03:10
*** bhagyashris has quit IRC03:19
*** mbeierl has joined #openstack-keystone03:24
*** abhi89 has joined #openstack-keystone03:28
*** abhishek has joined #openstack-keystone03:29
*** dave-mccowan has quit IRC03:31
*** abhi89 has quit IRC03:33
*** felipemonteiro has joined #openstack-keystone03:43
*** Dinesh_Bhor has quit IRC03:49
openstackgerritTony Breeds proposed openstack/keystone master: Move use of constraints out of install_cmd  https://review.openstack.org/60118803:54
cmurphytonyb: :( well that's gonna be painful04:21
tonybcmurphy: Yeah :/  That's a good month of part-time hacking to fix them all but thing of all the ATC's I'll collect ;P04:23
cmurphy:p04:23
*** dklyle has joined #openstack-keystone04:31
*** nicolasbock has quit IRC04:31
*** Dinesh_Bhor has joined #openstack-keystone04:32
*** dklyle has quit IRC04:36
*** Dinesh_Bhor has quit IRC04:55
*** Dinesh_Bhor has joined #openstack-keystone05:11
*** felipemonteiro has quit IRC05:11
openstackgerritMerged openstack/keystoneauth master: Add support for ironic single-version responses  https://review.openstack.org/59598005:29
openstackgerritMerged openstack/keystoneauth master: Protect against endpoint_data not existing  https://review.openstack.org/60163605:29
*** mbeierl has quit IRC05:37
*** lbragstad has joined #openstack-keystone06:07
*** ChanServ sets mode: +o lbragstad06:07
*** threestrands has joined #openstack-keystone06:13
*** pcaruana has joined #openstack-keystone06:23
openstackgerritVishakha Agarwal proposed openstack/keystone master: Implement Trust Flush via keystone-manage.  https://review.openstack.org/58937806:31
*** lbragstad has quit IRC06:36
*** rcernin has quit IRC06:59
*** Dinesh_Bhor has quit IRC07:05
vishakhawxy-xiyuan: Hello. Find the updated test cases for https://review.openstack.org/58937807:05
*** Dinesh_Bhor has joined #openstack-keystone07:12
*** AlexeyAbashkin has joined #openstack-keystone07:15
*** abhishek has quit IRC07:17
*** tesseract has joined #openstack-keystone07:18
*** markvoelker has quit IRC07:22
*** markvoelker has joined #openstack-keystone07:22
*** markvoelker has quit IRC07:27
*** jistr|off is now known as jistr07:55
*** markvoelker has joined #openstack-keystone08:25
*** Emine has joined #openstack-keystone08:30
*** markvoelker has quit IRC08:56
*** belmorei_ has joined #openstack-keystone08:59
*** belmoreira has quit IRC08:59
*** josecastroleon has quit IRC09:01
*** josecastroleon has joined #openstack-keystone09:02
vishakhawxy-xiyuan: I dont know why but this cli test case is failing  whereas it is running on my local.09:48
*** Dinesh_Bhor has quit IRC09:50
*** josecastroleon has quit IRC09:52
*** d0ugal has quit IRC09:52
*** josecastroleon has joined #openstack-keystone09:54
*** Dinesh_Bhor has joined #openstack-keystone10:12
*** Dinesh_Bhor has quit IRC10:37
*** d0ugal has joined #openstack-keystone10:41
*** d0ugal has quit IRC10:46
*** d0ugal has joined #openstack-keystone10:47
*** markvoelker has joined #openstack-keystone10:54
*** shyamb has joined #openstack-keystone10:59
*** belmorei_ has quit IRC11:10
*** shyamb has quit IRC11:27
*** shyamb has joined #openstack-keystone11:27
*** markvoelker has quit IRC11:28
*** dave-mccowan has joined #openstack-keystone11:31
*** belmoreira has joined #openstack-keystone11:36
*** raildo has joined #openstack-keystone11:46
*** d0ugal has quit IRC11:47
*** annp has quit IRC11:53
*** nicolasbock has joined #openstack-keystone12:02
*** markvoelker has joined #openstack-keystone12:25
*** mchlumsky has joined #openstack-keystone12:26
*** zigo has joined #openstack-keystone12:27
*** mchlumsky has quit IRC12:37
*** mchlumsky has joined #openstack-keystone12:39
*** mvenesio has joined #openstack-keystone12:48
*** markvoelker has quit IRC12:58
*** felipemonteiro has joined #openstack-keystone13:01
*** liuzz has quit IRC13:02
*** d0ugal has joined #openstack-keystone13:09
*** tobias-urdin has joined #openstack-keystone13:15
tobias-urdinif i want to change the password_hash_algorithm but have existing users, can i migrate them somehow? or is it done automatically13:17
*** shyamb has quit IRC13:19
*** bhagyashris has joined #openstack-keystone13:23
*** threestrands has quit IRC13:24
*** bhagyashris has quit IRC13:42
*** markvoelker has joined #openstack-keystone14:07
*** markvoelker has quit IRC14:20
*** markvoelker has joined #openstack-keystone14:20
*** nick_kar has quit IRC14:25
*** markvoelker has quit IRC14:25
*** felipemonteiro has quit IRC14:26
*** felipemonteiro has joined #openstack-keystone14:31
*** bhagyashris has joined #openstack-keystone14:33
*** markvoelker has joined #openstack-keystone14:34
*** markvoelker has quit IRC14:37
*** markvoelker has joined #openstack-keystone14:37
*** felipemonteiro has quit IRC14:38
*** itlinux has quit IRC14:41
*** markvoelker has quit IRC14:42
*** bhagyashris has quit IRC14:44
*** lbragstad has joined #openstack-keystone14:46
*** ChanServ sets mode: +o lbragstad14:46
tobias-urdinlbragstad: if you dont mind :)14:47
tobias-urdin15:08 < tobias-urdin> if i want to change the password_hash_algorithm but have existing users, can i migrate them somehow? or is it done automatically14:47
*** markvoelker has joined #openstack-keystone14:48
lbragstadtobias-urdin which release are you working with?14:50
*** bhagyashris has joined #openstack-keystone14:53
tobias-urdinlbragstad: queens14:55
*** nicolasbock has quit IRC14:56
lbragstadwe did have a configuration option to do the migration14:57
lbragstadhttps://docs.openstack.org/releasenotes/keystone/pike.html#new-features14:57
tobias-urdinwasn't that only to support the password -> password_hash column change in the db?14:58
tobias-urdini wouldn't bet on it, but since my deployment is running queens wouldn't that data already be in password_hash anyway14:59
*** nicolasbock has joined #openstack-keystone14:59
tobias-urdini.e backwards compatible up until pike14:59
*** mbeierl has joined #openstack-keystone14:59
lbragstadhttps://docs.openstack.org/releasenotes/keystone/pike.html#upgrade-notes14:59
*** felipemonteiro has joined #openstack-keystone14:59
lbragstadrolling_upgrade_password_hash_compat is specific to password hashes15:00
tobias-urdinwasn't that only for supporting the upgrade to >pike? how about changing the hash algo after that15:01
lbragstadtobias-urdin kmalloc did a bunch of that work for us and he can probably give you more definitive answers than i can (i'm just about to start a session)15:02
*** markvoelker has quit IRC15:03
tobias-urdinlbragstad: got it, thanks15:03
tobias-urdinkmalloc: ^ :)15:03
*** markvoelker has joined #openstack-keystone15:03
*** markvoelker has quit IRC15:03
lbragstadhe's logging in right now :)15:03
kmalloctobias-urdin: so, the "compat" option is only really used when upgrading, e.g. so you write the old hashing that the old keystone can read15:03
kmallocthe new keystone will continue to decode any old passwords15:04
*** markvoelker has joined #openstack-keystone15:04
kmalloc(it's encoded in the password hash what hash is used)15:04
kmallocwe will forever decode old hashes, we can't rehash the passwords to the new bcrypt/scrypt because we don't have the original string (and it's not our business to change a password hash, even on login, without explicit interaction admin or user requesting a password change)15:05
*** jaosorior has joined #openstack-keystone15:05
kmalloctobias-urdin: so, in short, it wont matter what is stored in the DB, that option is only used for rolling upgrades15:05
*** bnemec has joined #openstack-keystone15:07
tobias-urdinso recreating users or updating the password for a user is the only way for it to rehash, which makes sense15:08
kmallocyep15:09
kmallocit is recommended (for sanity sake, in case the db leaks somewhere) that the passwords are changed / rehashed with an update (user or admin initiated)15:09
kmallocbut the ultimate goal was "do not break anyone, but make the system more secure"15:10
mordredkmalloc, lbragstad: can haz new keystoneauth release?15:10
kmallocmordred: i'll sign off on a new release, but it needs lbragstad's blessing in either case ;)15:11
lbragstadhttps://etherpad.openstack.org/p/keystone-stein-operator-feedback15:13
*** imacdonn has quit IRC15:14
*** imacdonn has joined #openstack-keystone15:14
*** mbeierl has quit IRC15:21
*** mbeierl1 has joined #openstack-keystone15:21
*** sapd1 has quit IRC15:21
cmurphylbragstad: i'm going to sit in the infra room, ping me if things start up esp if federation comes up15:22
*** felipemonteiro has quit IRC15:22
*** jrist has joined #openstack-keystone15:23
openstackgerritMorgan Fainberg proposed openstack/keystone master: Convert domains api to flask  https://review.openstack.org/59735015:26
*** d0ugal has quit IRC15:28
*** itlinux has joined #openstack-keystone15:29
lbragstadoperator feedback etherpad https://etherpad.openstack.org/p/keystone-stein-operator-feedback15:31
*** mbeierl1 is now known as mbeierl15:32
*** spilla has joined #openstack-keystone15:35
kmallocmordred, lbragstad: i'll spin up a new release patch [unless someone else does it] shortly for ksa15:41
*** felipemonteiro has joined #openstack-keystone15:50
*** Emine has quit IRC15:51
mordredkmalloc: \o/15:53
*** pcaruana has quit IRC15:55
*** dklyle has joined #openstack-keystone15:58
*** d0ugal has joined #openstack-keystone16:01
*** adriant has quit IRC16:05
*** adriant has joined #openstack-keystone16:06
*** dklyle has quit IRC16:11
*** dklyle has joined #openstack-keystone16:11
*** bhagyashris has quit IRC16:14
*** AlexeyAbashkin has quit IRC16:20
*** bhagyashris has joined #openstack-keystone16:21
*** jaosorior has quit IRC16:28
*** felipemonteiro has quit IRC16:35
*** jaosorior has joined #openstack-keystone16:36
*** spilla has quit IRC16:39
*** gyee has joined #openstack-keystone16:41
*** felipemonteiro has joined #openstack-keystone16:42
*** dklyle has quit IRC16:47
*** pcaruana has joined #openstack-keystone16:51
*** markvoelker has quit IRC16:51
*** dklyle has joined #openstack-keystone16:52
*** spilla has joined #openstack-keystone16:54
*** bhagyashris has quit IRC16:55
*** bhagyashris has joined #openstack-keystone16:59
*** bnemec has quit IRC17:01
*** bnemec has joined #openstack-keystone17:01
*** markvoelker has joined #openstack-keystone17:04
*** spilla has quit IRC17:08
*** spilla has joined #openstack-keystone17:15
*** lbragstad has quit IRC17:22
*** lbragstad has joined #openstack-keystone17:26
*** ChanServ sets mode: +o lbragstad17:26
*** d0ugal has quit IRC17:28
*** tesseract has quit IRC17:49
openstackgerritMerged openstack/keystone master: Added support for a ``description`` attribute for Identity Roles  https://review.openstack.org/48434817:56
*** markvoelker has quit IRC17:57
*** jrist has quit IRC17:57
*** markvoelker has joined #openstack-keystone17:57
*** dave-mccowan has quit IRC17:59
*** markvoelker has quit IRC18:02
*** felipemonteiro has quit IRC18:02
*** dave-mcc_ has joined #openstack-keystone18:07
*** raildo_ has joined #openstack-keystone18:07
kmalloclbragstad, mordred: https://review.openstack.org/60212118:07
*** rmascena__ has joined #openstack-keystone18:09
*** raildo has quit IRC18:10
*** rmascena__ has quit IRC18:10
*** raildo has joined #openstack-keystone18:11
*** raildo_ has quit IRC18:12
mordredkmalloc: \o/18:21
mordredthat will fix a bifrost job - AND will let us land a patch to osc to make a command more efficient18:22
*** dklyle has quit IRC18:24
*** mbeierl has quit IRC18:30
*** nicolasbock has quit IRC18:35
*** bhagyashris has quit IRC18:37
*** lbragstad has quit IRC18:41
openstackgerritMorgan Fainberg proposed openstack/keystone master: Address issues with flask conversion of os-federation  https://review.openstack.org/60213718:41
*** pcaruana has quit IRC18:47
*** lbragstad has joined #openstack-keystone19:00
*** ChanServ sets mode: +o lbragstad19:00
*** pooja-jadhav has joined #openstack-keystone19:03
*** dave-mcc_ has quit IRC19:05
*** mbeierl has joined #openstack-keystone19:06
*** pooja_jadhav has quit IRC19:06
*** dave-mccowan has joined #openstack-keystone19:07
*** bhagyashris has joined #openstack-keystone19:09
*** bhagyashris has quit IRC19:13
*** spilla has quit IRC19:17
*** spilla has joined #openstack-keystone19:21
*** bhagyashris has joined #openstack-keystone19:22
*** mbeierl has quit IRC19:25
*** lbragstad has quit IRC19:30
*** markvoelker has joined #openstack-keystone19:34
*** markvoelker_ has joined #openstack-keystone19:36
*** markvoelker has quit IRC19:39
*** jrist has joined #openstack-keystone19:39
*** mbeierl has joined #openstack-keystone19:41
*** felipemonteiro has joined #openstack-keystone19:47
*** pcaruana has joined #openstack-keystone19:58
*** dklyle has joined #openstack-keystone19:59
*** nicolasbock has joined #openstack-keystone20:00
*** mbeierl1 has joined #openstack-keystone20:14
*** mbeierl has quit IRC20:16
*** pcaruana has quit IRC20:20
*** markvoelker_ has quit IRC20:24
*** stewie925 has joined #openstack-keystone20:29
*** hoonetorg has quit IRC20:31
stewie925hello guys, is there a way to delete a domain?20:33
cmurphystewie925: yes, you need to disable it first and then you can delete it20:34
*** lbragstad has joined #openstack-keystone20:36
*** ChanServ sets mode: +o lbragstad20:36
stewie925cmurphy: thank you!  I am wondering if you could share a link to the domain specific openstack commands?20:37
stewie925I see this link but it doesnt show anything about list or delete domains https://docs.openstack.org/ocata/install-guide-obs/keystone-users.html20:38
stewie925sorry I think I found it - https://docs.openstack.org/python-openstackclient/pike/cli/command-objects/domain.html20:42
stewie925will try it out20:42
cmurphyhttps://tools.ietf.org/html/rfc7519#appendix-A.220:44
cmurphykmalloc: ^20:44
cmurphystewie925: sorry yes the openstackclient docs are the best thing to look at for this20:46
*** jrist has quit IRC20:46
*** raildo has quit IRC20:46
*** raildo_ has joined #openstack-keystone20:46
stewie925cmurphy: no apologies needed :)  thanks again20:46
*** hoonetorg has joined #openstack-keystone20:46
*** raildo_ has quit IRC20:47
*** jrist has joined #openstack-keystone20:52
lbragstadkmalloc https://www.mail-archive.com/openstack-dev@lists.openstack.org/msg122431.html20:56
lbragstadfrom dims ^20:56
lbragstadwho is way more familiar with that discussion than I am : )20:56
dimstl;dr let's please describe our services using OpenAPI 3.0 so folks can use code generators20:56
felipemonteirolbragstad: I have bandwidth today in case you had qa stuff you wanted to go over, but do have a call I need to take at 420:57
lbragstadfelipemonteiro ack - i don't think we have anything super pressing right now, but we're all in the same room if you want to go through the spec you have for stein21:00
felipemonteirolbragstad: I could try to coordinate with gmann if he has bandwidth too, as he's qa ptl and can fill in from nova/qa perspective21:01
felipemonteirolbragstad: you guys are still in the open meeting room on 3rd floor? gmann and I will stop by21:04
cmurphyfelipemonteiro: yes we are21:04
cmurphyfelipemonteiro: longs peak21:04
felipemonteiroAck thanks21:04
*** felipemonteiro has quit IRC21:05
*** felipemonteiro has joined #openstack-keystone21:07
*** felipemonteiro has quit IRC21:11
*** mvenesio has quit IRC21:13
*** felipemonteiro has joined #openstack-keystone21:16
*** d0ugal has joined #openstack-keystone21:18
*** bhagyashris has quit IRC21:19
*** spilla has quit IRC21:23
*** bhagyashris has joined #openstack-keystone21:26
*** felipemonteiro has quit IRC21:26
lbragstadhttps://review.openstack.org/#/c/594547/21:30
*** felipemonteiro has joined #openstack-keystone21:30
lbragstadfelipemonteiro https://review.openstack.org/#/c/594547/10/keystone/tests/unit/protection/v3/test_credentials.py21:30
felipemonteirolbragstad: https://github.com/openstack/keystone/blob/785ec01833246dbee370bf94023b09bedbf23504/keystone/common/policies/base.py#L2021:32
*** felipemonteiro has quit IRC21:36
*** felipemonteiro has joined #openstack-keystone21:37
*** itlinux has quit IRC21:41
*** d0ugal has quit IRC21:43
*** rcernin has joined #openstack-keystone21:44
*** dklyle has quit IRC21:54
*** felipemonteiro has quit IRC21:54
*** felipemonteiro has joined #openstack-keystone21:58
*** masayukig[m] has joined #openstack-keystone22:04
lbragstadstein roadmap https://trello.com/b/rj0ECz2c/keystone-stein-roadmap22:10
*** itlinux has joined #openstack-keystone22:30
*** dklyle has joined #openstack-keystone22:31
openstackgerritMorgan Fainberg proposed openstack/keystone master: Remove test(s) which cannot run  https://review.openstack.org/60218922:36
*** stewie925 has quit IRC22:37
*** jaosorior has quit IRC22:40
*** dklyle has quit IRC22:47
*** dklyle has joined #openstack-keystone22:48
*** mbeierl1 is now known as mbeierl22:53
*** jrist has quit IRC23:03
*** pooja-jadhav has quit IRC23:03
*** dklyle has quit IRC23:03
*** dklyle has joined #openstack-keystone23:04
*** lbragstad has quit IRC23:06
*** felipemonteiro has quit IRC23:07
*** bhagyashris has quit IRC23:11
openstackgerritGage Hugo proposed openstack/keystone master: WIP - Refactor target_attr execution  https://review.openstack.org/60188123:16
*** bhagyashris has joined #openstack-keystone23:16
*** lbragstad has joined #openstack-keystone23:17
*** ChanServ sets mode: +o lbragstad23:17
openstackgerritGage Hugo proposed openstack/keystone master: Refactor target_attr execution  https://review.openstack.org/60188123:21
*** mbeierl has quit IRC23:21
*** bhagyashris has quit IRC23:21
*** mbeierl has joined #openstack-keystone23:23
*** nicolasbock has quit IRC23:24
*** lbragstad has quit IRC23:27
*** nicolasbock has joined #openstack-keystone23:29
*** dklyle has quit IRC23:30
*** lbragstad has joined #openstack-keystone23:41
*** ChanServ sets mode: +o lbragstad23:41
*** bhagyashris has joined #openstack-keystone23:43

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!