| *** markvoelker has quit IRC | 00:06 | |
| *** erus has quit IRC | 00:22 | |
| *** whoami-rajat has joined #openstack-keystone | 01:20 | |
| *** markvoelker has joined #openstack-keystone | 01:35 | |
| *** markvoelker has quit IRC | 01:40 | |
| *** sapd1 has quit IRC | 01:50 | |
| openstackgerrit | Merged openstack/keystone master: Clean up the create_arguments_apply methods https://review.openstack.org/627617 | 01:55 |
|---|---|---|
| *** markvoelker has joined #openstack-keystone | 01:59 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 02:03 | |
| *** Dinesh_Bhor has quit IRC | 02:03 | |
| *** erus has joined #openstack-keystone | 02:04 | |
| *** markvoelker has quit IRC | 02:07 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 02:09 | |
| *** erus_ has joined #openstack-keystone | 02:40 | |
| *** aojea has joined #openstack-keystone | 02:43 | |
| *** aojea has quit IRC | 02:47 | |
| *** mhen has quit IRC | 02:53 | |
| *** mhen has joined #openstack-keystone | 02:54 | |
| *** Dinesh_Bhor has quit IRC | 03:38 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 03:45 | |
| *** vishakha has joined #openstack-keystone | 03:52 | |
| *** Dinesh_Bhor has quit IRC | 03:55 | |
| *** dave-mccowan has quit IRC | 04:11 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 04:49 | |
| *** markvoelker has joined #openstack-keystone | 05:05 | |
| *** markvoelker has quit IRC | 05:47 | |
| *** markvoelker has joined #openstack-keystone | 05:48 | |
| *** lbragstad has quit IRC | 05:56 | |
| *** markvoelker has quit IRC | 05:59 | |
| *** Dinesh_Bhor has quit IRC | 06:23 | |
| *** itlinux_ has joined #openstack-keystone | 06:28 | |
| *** itlinux has quit IRC | 06:30 | |
| *** itlinux_ has quit IRC | 06:48 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 06:53 | |
| *** rcernin has quit IRC | 06:59 | |
| openstackgerrit | Neha Alhat proposed openstack/python-keystoneclient master: Add return-request-id-to-caller function(v3/contrib) https://review.openstack.org/624898 | 06:59 |
| *** artem_vasilyev has joined #openstack-keystone | 07:06 | |
| artem_vasilyev | lbragstad: hi, just read your advise about adding request id to basic notifications (https://review.openstack.org/#/c/618095/3/). Would it be OK to add it in the same commit or better in another one? | 07:10 |
| *** erus has quit IRC | 07:27 | |
| *** erus has joined #openstack-keystone | 07:29 | |
| *** erus has quit IRC | 07:37 | |
| *** erus has joined #openstack-keystone | 07:40 | |
| *** erus has quit IRC | 07:47 | |
| *** erus has joined #openstack-keystone | 07:54 | |
| *** erus has quit IRC | 08:01 | |
| *** erus has joined #openstack-keystone | 08:09 | |
| *** erus has quit IRC | 08:16 | |
| *** erus has joined #openstack-keystone | 08:27 | |
| *** yan0s has joined #openstack-keystone | 08:28 | |
| *** erus has quit IRC | 08:34 | |
| *** erus has joined #openstack-keystone | 08:41 | |
| *** erus has quit IRC | 08:47 | |
| *** xek has joined #openstack-keystone | 09:00 | |
| *** erus has joined #openstack-keystone | 09:01 | |
| *** erus has quit IRC | 09:08 | |
| *** erus has joined #openstack-keystone | 09:11 | |
| *** erus has quit IRC | 09:18 | |
| *** erus has joined #openstack-keystone | 09:26 | |
| *** pcaruana has joined #openstack-keystone | 09:30 | |
| *** erus has quit IRC | 09:33 | |
| *** erus has joined #openstack-keystone | 09:41 | |
| *** erus has quit IRC | 09:48 | |
| *** erus has joined #openstack-keystone | 09:56 | |
| *** Dinesh_Bhor has quit IRC | 09:56 | |
| *** erus has quit IRC | 10:03 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 10:05 | |
| *** Dinesh_Bhor has quit IRC | 10:06 | |
| *** jaosorior has joined #openstack-keystone | 10:09 | |
| *** erus has joined #openstack-keystone | 10:14 | |
| *** erus has quit IRC | 10:20 | |
| *** erus has joined #openstack-keystone | 10:26 | |
| *** erus has quit IRC | 10:32 | |
| *** erus has joined #openstack-keystone | 10:41 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Add openstack_groups to assertion https://review.openstack.org/588211 | 10:46 |
| *** erus has quit IRC | 10:48 | |
| *** erus has joined #openstack-keystone | 10:56 | |
| *** erus has quit IRC | 11:03 | |
| *** erus has joined #openstack-keystone | 11:12 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Optimize fernet token and receipts in cli.py https://review.openstack.org/627364 | 11:12 |
| *** openstackgerrit has quit IRC | 11:22 | |
| knikolla | o/ | 12:04 |
| erus | o/ | 12:34 |
| *** raildo has joined #openstack-keystone | 12:34 | |
| *** nehaalhat_ has joined #openstack-keystone | 12:46 | |
| nehaalhat_ | wxy-xiyuan: Hi, Addressed your comment and uploaded patch: https://review.openstack.org/#/c/624898/2 | 12:47 |
| nehaalhat_ | wxy-xiyuan: Kindly have a look on it | 12:47 |
| *** gyee has joined #openstack-keystone | 12:53 | |
| *** dave-mccowan has joined #openstack-keystone | 13:28 | |
| *** gyee has quit IRC | 13:34 | |
| erus_ | I'll be here 3 more hours maybe knikolla, if you are going to stay around :D | 13:35 |
| *** jdennis has quit IRC | 13:36 | |
| knikolla | erus_: sounds good. I’m just eating breakfast and will be back in a bit. | 13:37 |
| *** jdennis has joined #openstack-keystone | 13:39 | |
| erus_ | the same :) | 13:51 |
| *** aojea has joined #openstack-keystone | 13:56 | |
| *** raildo has quit IRC | 13:56 | |
| *** mvkr has quit IRC | 13:58 | |
| *** raildo has joined #openstack-keystone | 14:03 | |
| *** shyamb has joined #openstack-keystone | 14:22 | |
| *** lbragstad has joined #openstack-keystone | 14:24 | |
| *** ChanServ sets mode: +o lbragstad | 14:24 | |
| *** ostackz has joined #openstack-keystone | 14:35 | |
| *** mchlumsky has joined #openstack-keystone | 14:50 | |
| *** shyamb has quit IRC | 14:53 | |
| ostackz | Hi keystone team, fyi while trying to do minor upgrade to OSA Rocy following this https://docs.openstack.org/openstack-ansible/rocky/admin/upgrades/minor-updates.html got error on setup-openstack.yml regarding keystone. | 14:55 |
| ostackz | Unhandled error: ValidationError: Role 0ea5e5a44a1d4477b1315a4daf97a7d8 is a domain-specific role. Unable to use a domain-specific role in a system assignment. | 14:55 |
| ostackz | More details here https://pastebin.com/raw/9sGPVEQu Could be its because I have created domains and admin roles after rocky deployment and now that confuses bootstrap playbooks for keystone. | 14:55 |
| *** artem_vasilyev has quit IRC | 14:57 | |
| *** mvkr has joined #openstack-keystone | 15:00 | |
| odyssey4me | lbragstad ^ any ideas? | 15:05 |
| odyssey4me | it would seem that perhaps there are multiple 'admin' roles configured in multiple domains, and the bootstrap command doesn't like that | 15:06 |
| odyssey4me | ostackz it may help to understand if there ismore than one 'admin' role in the 'default' domain | 15:06 |
| lbragstad | that's just what i was going to suggest | 15:07 |
| lbragstad | does role 0ea5e5a44a1d4477b1315a4daf97a7d8 had a domain id set on it? | 15:07 |
| lbragstad | s/had/have/ | 15:07 |
| ostackz | lbragstad role show 0ea5e5a44a1d4477b1315a4daf97a7d8 -> domain_id=default, name=admin | 15:10 |
| lbragstad | odyssey4me ostackz yeah... ok | 15:10 |
| lbragstad | so it's picking up a domain admin role... instead of a global role | 15:11 |
| *** mchlumsky has quit IRC | 15:11 | |
| lbragstad | in your installation, did you just re-use the admin role by setting the domain on it? | 15:11 |
| *** mchlumsky has joined #openstack-keystone | 15:12 | |
| ostackz | lbragstad I was testing several ways to get domains working, one that helped was mentioned in https://bugs.launchpad.net/keystone/+bug/1783659 more specifically "role add --domain TestDomain --user TestDomainAdmin admin"", but that is not in default domain | 15:14 |
| openstack | Launchpad bug 968696 in OpenStack Identity (keystone) "duplicate for #1783659 "admin"-ness not properly scoped" [High,In progress] - Assigned to Lance Bragstad (lbragstad) | 15:14 |
| ostackz | lbragstad in role list --domain Default I currently have 0ea5e5a44a1d4477b1315a4daf97a7d8(admin) and one more "cloud_admin" but second one is just some leftover from tests and should not be issue here | 15:16 |
| knikolla | erus_: i'm available now if you are. | 15:22 |
| ostackz | lbragstad offtopic - may be you can mention some link to comprehensive keystone docs regarding domains? Somehow info is scattered around, wondering if there are any docs where one can find answers to questions like "how to make domain admins that cannot delete networks created by other domain admins?" and the like, so each domain is isolated world in itself :) | 15:25 |
| lbragstad | i guess one thing that could be done would be to rename the domain role | 15:26 |
| lbragstad | so that the bootstrap command only gets a single role - which is the 'admin' role | 15:26 |
| lbragstad | otherwise - we need to elaborate on the bootstrap command to take a role id, for example | 15:27 |
| ostackz | lbragstad is there such thing as "domain role"? Or there are just roles "admin" that happen to be created in different domains? | 15:28 |
| lbragstad | well - that's a good question | 15:28 |
| lbragstad | one minute - trying to multi-task another meeting | 15:28 |
| *** aojea has quit IRC | 15:40 | |
| *** aojea has joined #openstack-keystone | 15:48 | |
| *** errr has quit IRC | 16:07 | |
| *** errr has joined #openstack-keystone | 16:10 | |
| *** aojea has quit IRC | 16:15 | |
| ostackz | lbragstad if you have a minute later, please comment on that "domain role" vs "admin" role in multiple domains. Really keen to demystify this. | 16:21 |
| lbragstad | ostackz for sure - i'm available at the top of the hour (in the keystone weekly meeting now) | 16:22 |
| *** aojea has joined #openstack-keystone | 16:23 | |
| *** aojea has quit IRC | 16:26 | |
| *** dklyle has joined #openstack-keystone | 16:35 | |
| *** yan0s has quit IRC | 16:37 | |
| ostackz | lbragstad what turns out and confuses me is that we get different set of rules with "role list --domain Default" and "role list" https://pastebin.com/raw/c2rFsBuK | 16:46 |
| ostackz | as for my understanding not specifying --domain we still should get output for domain Default. | 16:46 |
| cmurphy | there is a difference between global roles and domain-specific roles | 16:47 |
| cmurphy | if you specify --domain then you only get the roles owned by that domain | 16:47 |
| cmurphy | if you don't specify the domain then you get only global roles | 16:47 |
| cmurphy | there's no overlap | 16:47 |
| ostackz | cmurphy then I guess I was mixing Domain "Default" with global thing. | 16:50 |
| cmurphy | ostackz: right, a role in the default domain isn't the same as a global role | 16:50 |
| cmurphy | keystone almost always deals in global roles | 16:50 |
| ostackz | if I need "domain admin" in each domain - should I create admin role in each domain an assign that to user in that domain or assign global admin role to users in each domain(if this works)? | 16:52 |
| *** aojea has joined #openstack-keystone | 16:52 | |
| lbragstad | i think that role would need to have a different name from 'admin' in order to work with the bootstrap comment | 16:53 |
| lbragstad | command* | 16:53 |
| cmurphy | i would still create the global role admin (bootstrap should create that) and modify your policies so that users with the admin role on a domain can perform actions on their domain | 16:54 |
| lbragstad | ++ | 16:54 |
| ostackz | lbragstad yes, bootstrap worked only when I renamed fbb04abe1b2749df80d549ede4b7c35e not 0ea5e5a44a1d4477b1315a4daf97a7d8 | 16:54 |
| cmurphy | i'm not really sure where domain-specific roles would be used in practice, maybe it's so domain admins can create roles themselves | 16:54 |
| lbragstad | cmurphy yeah - exactly | 16:55 |
| cmurphy | but they can't modify policies so it's not very useful | 16:55 |
| lbragstad | IIRC it was a feature created for domain users to be able to create their own roles | 16:55 |
| lbragstad | which is pretty hard to put into practice because it requires administrators to redeploy policy files | 16:55 |
| cmurphy | yeah not really useful yet | 16:56 |
| cmurphy | maybe someday | 16:56 |
| *** mvkr has quit IRC | 16:56 | |
| ostackz | from user perspective I would assume that each domain is isolated world - even admins in domain cannot see or modify resources in other domains. Then there is point for domains | 16:57 |
| lbragstad | ostackz IMO - that's how it should be | 16:57 |
| lbragstad | but there are parts of openstack that don't work that way - yet | 16:58 |
| ostackz | well, I have played with domains couple of days and what I could do - delete external network created in another domain. | 16:59 |
| lbragstad | ^ that - yeah | 16:59 |
| lbragstad | is a good example | 16:59 |
| lbragstad | a lot of those operations are actually queuing off the fact that the token used to make that call has the 'admin' role | 16:59 |
| lbragstad | they don't care what the user has the 'admin' role on | 16:59 |
| lbragstad | and that's what we're trying to fix with system-scope and domain-scope, which need to be propagated to other services | 17:00 |
| ostackz | In what state it is in Rocky? Not getting how people manage to live in production with this state of permissions? :) | 17:01 |
| lbragstad | it varies across openstack projects | 17:02 |
| lbragstad | one of the typical fixes is to reserve the 'admin' role for only people who are allowed to operate on the deployment - so your system administrators | 17:02 |
| lbragstad | and then create subsequent "admin"-like roles that you enable via customized policy files | 17:02 |
| lbragstad | but - that isn't guaranteed to work | 17:02 |
| lbragstad | since not all projects guarantee policy checks to be done via configuration (e.g., a service could still check for "admin" when you want it to check for "cloud_admin" or "project_admin") | 17:03 |
| lbragstad | which is a hard-coding issue | 17:04 |
| ostackz | yes, those cloud_admin, domain_admin,project_admin notions seem so natural(have noticed in deep googling), but it seems they do not exist | 17:05 |
| lbragstad | IMO they exist as a work around | 17:05 |
| lbragstad | but we also don't use them as defaults | 17:05 |
| lbragstad | ideally - shouldn't a role named "project_admin" == ``openstack role add --user ostackz --project foobar admin`` | 17:06 |
| ostackz | let me ask - does it seem possible to run openstack cloud with only default settings, I mean not touching policy files? Trying to understand if default permission scheme is flexible enough | 17:08 |
| ostackz | as I understand - currently for example neutron just ignores permissions or does not differentiate "domain admin" from "global admin" | 17:10 |
| lbragstad | ostackz i think that depends on your deployment | 17:10 |
| lbragstad | well - a lot of services don't differentiate between project admin, domain admin, or system admin, yet.. | 17:10 |
| lbragstad | the system assignment concept was introduced in Rocky | 17:11 |
| *** aojea has quit IRC | 17:11 | |
| lbragstad | sorry - queens | 17:11 |
| lbragstad | http://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/system-scope.html | 17:11 |
| lbragstad | which is ultimately trying to play a part in fixing - https://bugs.launchpad.net/keystone/+bug/968696 | 17:12 |
| openstack | Launchpad bug 968696 in OpenStack Identity (keystone) ""admin"-ness not properly scoped" [High,In progress] - Assigned to Lance Bragstad (lbragstad) | 17:12 |
| lbragstad | (instead of forcing operators and deployers to roll custom policies in order to achieve security, or principal of least privilege) | 17:12 |
| ostackz | lbragstad need to read through "System Role Assignments" but when that will be "implemented"? Is it project specific? | 17:16 |
| lbragstad | good question | 17:16 |
| lbragstad | the work detailed there is specific to keystone | 17:17 |
| lbragstad | which was already implemented in Queens | 17:17 |
| lbragstad | but - it does need to be consumed by other services in order to be useful | 17:17 |
| erus_ | hi knikolla, I was bussy, are you available now? | 17:17 |
| lbragstad | and keystone isn't exempt, we're currently implementing parts of that now | 17:17 |
| lbragstad | ostackz https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:implement-default-roles | 17:17 |
| lbragstad | ^ for example, those are some open patches proposed to keystone master that would address some of the concerns you have | 17:18 |
| * lbragstad has to restart IRC quick | 17:22 | |
| lbragstad | brb | 17:22 |
| *** lbragstad has quit IRC | 17:22 | |
| knikolla | erus_: yup | 17:22 |
| *** lbragstad has joined #openstack-keystone | 17:26 | |
| *** ChanServ sets mode: +o lbragstad | 17:26 | |
| lbragstad | back | 17:26 |
| *** lbragstad has quit IRC | 17:33 | |
| *** lbragstad has joined #openstack-keystone | 17:33 | |
| *** ChanServ sets mode: +o lbragstad | 17:33 | |
| erus_ | o/ | 17:37 |
| knikolla | erus_: o/ | 17:38 |
| knikolla | so we left it at the 500 error yesterday, right? | 17:38 |
| erus_ | right! | 17:39 |
| knikolla | did you look around for any meaningful error logs? | 17:39 |
| erus_ | Jan 14 20:17:15 u-stack devstack@keystone.service[9084]: WARNING keystone.server.flask.application [None req-186efd8a-5b33-4404-971a-237a6f101092 None None] Authorization failed. The request you have made requires authentication. from 192.168.122.1: Unauthorized: The request you have made requires authentication. | 17:40 |
| erus_ | that was the last one | 17:41 |
| erus_ | but nothing happen when i run openstack token issue | 17:41 |
| erus_ | neither in keystone logs or apache logs | 17:41 |
| erus_ | happens* | 17:42 |
| knikolla | just to sanity check, `openstack token issue` works with local authentication? | 17:42 |
| erus_ | yesterday worked, let me check again | 17:42 |
| erus_ | yeah it works | 17:43 |
| erus_ | and generate logs | 17:44 |
| knikolla | alright | 17:44 |
| knikolla | so to recap, keystone is working, however when hitting the endpoint protected by mellon, you get a 500. | 17:44 |
| erus_ | yes, another thing that i notice was that when i login through the dashboard it thrown 3 erros, but i think it doesn't have relation with keystone | 17:46 |
| erus_ | not sure when happened that or why | 17:47 |
| knikolla | playing around with my devstack install to see if i can reproduce a 500 at the mellon redirect. give me a sec | 17:52 |
| erus_ | ok thanks | 17:55 |
| *** lbragstad is now known as lbragstad_lunch | 17:58 | |
| knikolla | erus_: can you send me the keystone.conf again? | 18:00 |
| knikolla | the one for apache | 18:00 |
| erus_ | ok ok | 18:01 |
| *** pcaruana has quit IRC | 18:01 | |
| erus_ | http://paste.openstack.org/show/742674/ | 18:02 |
| erus_ | brb | 18:09 |
| knikolla | erus_: i tried the same keystone.conf you have (with my own metadata and keys, and the samltest.id idp metadata) and it doesn't error with 500 when trying the redirect. | 18:12 |
| knikolla | like this http://paste.openstack.org/show/RArYN9jUs0v2h4PsuNPw/ | 18:12 |
| *** erus_ has quit IRC | 18:13 | |
| *** itlinux has joined #openstack-keystone | 18:16 | |
| *** erus has quit IRC | 18:20 | |
| *** erus has joined #openstack-keystone | 18:21 | |
| *** erus_ has joined #openstack-keystone | 18:24 | |
| erus_ | I'm back | 18:25 |
| erus_ | the last comment from you that I have is the link knikolla | 18:25 |
| knikolla | copy pasting | 18:26 |
| knikolla | 1:12 PM <knikolla> erus_: i tried the same keystone.conf you have (with my own metadata and keys, and the samltest.id idp metadata) and it doesn't error with 500 when trying the redirect. | 18:26 |
| knikolla | 1:12 PM <knikolla> like this http://paste.openstack.org/show/RArYN9jUs0v2h4PsuNPw/ | 18:26 |
| erus_ | yay i read that | 18:27 |
| knikolla | yeah but i don't know what's wrong with your setup | 18:27 |
| erus_ | ok hmm to be sure | 18:27 |
| knikolla | there's even no logs anywhere, i'm perplexed | 18:27 |
| erus_ | the keystone.conf that you modified was the public or the admin? | 18:27 |
| erus_ | haha that's weird that there's even no logs :( | 18:28 |
| knikolla | public | 18:30 |
| erus_ | idk | 18:30 |
| erus_ | do you have ubuntu 18.04? | 18:31 |
| erus_ | or xenial? | 18:32 |
| erus_ | everything is "ok" until i set the env variables | 18:34 |
| knikolla | CentOS | 18:40 |
| knikolla | but that shouldn't matter | 18:40 |
| erus_ | so I don't know | 18:43 |
| erus_ | i could tell you my steps(?) i don't know if i am missing something | 18:44 |
| knikolla | worth a shot | 18:44 |
| erus_ | brb give a minute | 18:49 |
| *** lbragstad_lunch is now known as lbragstad | 18:52 | |
| lbragstad | ostackz following back up - but did some of that make sense? | 18:53 |
| erus_ | i'm back | 19:07 |
| erus_ | well first i set up de idp then the mapping and the protocol | 19:08 |
| erus_ | after that openstack group create federated_users, openstack project create federated_project and openstack role add --group federated_users --project federated_project member | 19:08 |
| erus_ | then i set up mellon and ran the script to generate the files and the metadata | 19:10 |
| *** lbragstad has quit IRC | 19:10 | |
| *** lbragstad has joined #openstack-keystone | 19:11 | |
| *** ChanServ sets mode: +o lbragstad | 19:11 | |
| erus_ | hmm but i generate the metadata with sp.keystone.test.org not with localhost | 19:12 |
| erus_ | then ran wget -O /etc/apache2/mellon/idp-metadata.xml https://samltest.id/saml/idp | 19:12 |
| erus_ | configure keystone.conf with the auth methods | 19:13 |
| erus_ | and the local_settings to enable WEBSSO | 19:13 |
| erus_ | restart apache and finally set the env variables | 19:13 |
| erus_ | that's it knikolla :) | 19:14 |
| *** lbragstad has quit IRC | 19:20 | |
| *** lbragstad has joined #openstack-keystone | 19:21 | |
| *** ChanServ sets mode: +o lbragstad | 19:21 | |
| erus_ | got new error, notice that i had missed something :D | 19:52 |
| *** aojea has joined #openstack-keystone | 19:56 | |
| erus_ | forget it :/ 0 logs | 19:57 |
| *** whoami-rajat has quit IRC | 20:00 | |
| knikolla | seems correct to me | 20:08 |
| erus_ | but it doesn't matter that i generate the data with sp.keystone.test.org instead of localhost? knikolla | 20:19 |
| knikolla | technically, it's good practice to use a url which works. it shouldn't break things were they're broken now though. | 20:22 |
| erus_ | ok ok, i generated the metadata again with localhost just for test and tried to upload to samltest but it has been passed like 15 minutes and it's still loading :S | 20:24 |
| *** aojea has quit IRC | 20:27 | |
| *** mvkr has joined #openstack-keystone | 20:32 | |
| erus_ | what should i try? or check? | 20:33 |
| *** itlinux_ has joined #openstack-keystone | 20:36 | |
| *** itlinux has quit IRC | 20:37 | |
| *** itlinux_ has quit IRC | 20:39 | |
| erus_ | i think there is a problem with samltest.id page | 20:51 |
| *** aojea has joined #openstack-keystone | 20:57 | |
| *** whoami-rajat has joined #openstack-keystone | 21:18 | |
| *** xek has quit IRC | 21:24 | |
| *** aojea has quit IRC | 21:29 | |
| erus_ | http://paste.openstack.org/show/742689/ idp logs | 21:40 |
| erus_ | i was doing some tests and this is my last keystone logs http://paste.openstack.org/show/742690/ | 21:42 |
| knikolla | erus_: looking | 21:58 |
| *** raildo has quit IRC | 21:58 | |
| knikolla | erus_: try not generating the data with localhost, but with the ip address of the vm. "http://192.168.122.141/identity/v3" | 22:02 |
| knikolla | metadata* | 22:02 |
| erus_ | i already did that | 22:04 |
| erus_ | :D | 22:04 |
| erus_ | and test it | 22:04 |
| erus_ | i ran out of ideas knikolla :D | 22:05 |
| knikolla | erus_: at this point maybe screensharing wouldn't be a bad idea. | 22:06 |
| erus_ | i think so | 22:06 |
| erus_ | it could be a great idea | 22:06 |
| *** imacdonn has quit IRC | 22:06 | |
| *** imacdonn has joined #openstack-keystone | 22:07 | |
| knikolla | i have to go now to pick up my laptop from service before they close shop (had to replace the keyboard), but i'll be again here in an hour or so. | 22:07 |
| erus_ | yeah it's ok for me | 22:08 |
| erus_ | good look with your laptop :D | 22:08 |
| knikolla | thanks. almost everyone that i know who has one of these new macbooks, has had keyboard issues. | 22:09 |
| erus_ | too bad, i want a new lenovo thinkpad :D | 22:10 |
| erus_ | you use mac os or do you have linux in your macbook? (just curious) | 22:11 |
| knikolla | mac os | 22:11 |
| knikolla | i'm very very deep into the apple ecosystem | 22:11 |
| erus_ | ohh i see, never had a macbook before | 22:12 |
| erus_ | and i think i will never have it | 22:12 |
| knikolla | i've used linux for most of my life, but once trying mac, i was sold. | 22:12 |
| erus_ | hahaha | 22:12 |
| erus_ | i try to stay as far as i can from all privative stuff | 22:13 |
| erus_ | but have friend that say that mac changed their lives xD | 22:15 |
| erus_ | friends* | 22:15 |
| *** mhen has quit IRC | 22:21 | |
| *** mhen has joined #openstack-keystone | 22:23 | |
| *** rcernin has joined #openstack-keystone | 22:46 | |
| *** erus_ has quit IRC | 23:13 | |
| *** whoami-rajat has quit IRC | 23:47 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!