Tuesday, 2019-07-30

*** threestrands has joined #openstack-keystone00:10
*** gyee has quit IRC00:28
*** kplant has quit IRC01:05
*** Ben78 has joined #openstack-keystone01:32
*** Ben78 has quit IRC01:58
*** threestrands has quit IRC03:30
*** threestrands has joined #openstack-keystone03:30
*** threestrands has quit IRC03:31
*** jaosorior has quit IRC04:05
*** jmlowe has joined #openstack-keystone04:14
*** jmlowe has quit IRC04:19
*** jmlowe has joined #openstack-keystone04:25
*** jmlowe has quit IRC04:30
*** gary_perkins has quit IRC04:32
*** gary_perkins has joined #openstack-keystone04:33
*** whoami-rajat has joined #openstack-keystone04:40
*** jaosorior has joined #openstack-keystone05:04
*** raildo has quit IRC05:11
*** raildo has joined #openstack-keystone05:12
openstackgerritVishakha Agarwal proposed openstack/keystone master: [WIP] Add openstack_groups to assertion  https://review.opendev.org/58821105:15
*** cloudnull has quit IRC05:25
*** d34dh0r53 has quit IRC05:25
*** jamesmcarthur_ has quit IRC05:28
*** vishalmanchanda has joined #openstack-keystone05:53
*** cloudnull has joined #openstack-keystone06:17
*** d34dh0r53 has joined #openstack-keystone06:17
openstackgerritMerged openstack/keystone master: Deprecate [federation] federated_domain_name  https://review.opendev.org/65161406:30
*** dancn has joined #openstack-keystone06:53
*** jaosorior has quit IRC07:01
*** rcernin has quit IRC07:02
*** tesseract has joined #openstack-keystone07:11
*** xek has joined #openstack-keystone07:20
*** dancn has quit IRC07:41
*** dancn has joined #openstack-keystone07:47
*** ivve has joined #openstack-keystone07:49
*** jaosorior has joined #openstack-keystone08:45
*** ivve has quit IRC08:48
*** johnthetubaguy has quit IRC08:51
*** tkajinam has quit IRC09:03
*** ivve has joined #openstack-keystone09:17
*** stingrayza has quit IRC09:22
*** stingrayza has joined #openstack-keystone09:23
*** tssurya has joined #openstack-keystone09:52
*** dansmith has quit IRC09:52
*** ianw has quit IRC09:55
*** dansmith has joined #openstack-keystone09:58
*** ianw has joined #openstack-keystone09:59
openstackgerritVishakha Agarwal proposed openstack/keystone master: Followup for remove signing[config].  https://review.opendev.org/67347610:47
*** kplant has joined #openstack-keystone11:09
*** brtknr has quit IRC11:19
*** jamesmcarthur has joined #openstack-keystone11:50
*** jamesmcarthur has quit IRC12:03
*** jaosorior has quit IRC12:07
*** jamesmcarthur has joined #openstack-keystone12:44
*** jamesmcarthur has quit IRC12:51
*** jaosorior has joined #openstack-keystone12:54
*** jamesmcarthur has joined #openstack-keystone13:01
*** jamesmcarthur has quit IRC13:02
*** jamesmcarthur has joined #openstack-keystone13:03
openstackgerritMerged openstack/keystoneauth master: Allow requesting fixed retry delay instead of exponential  https://review.opendev.org/67293013:33
*** brtknr has joined #openstack-keystone14:10
*** wxy-xiyuan has quit IRC14:10
*** dklyle has quit IRC14:52
*** ondrejduchon has joined #openstack-keystone14:53
ondrejduchonHello, I have a question about auditing in keystonemiddleware. More specifically file keystonemiddleware/audit/_notifier.py, line 40. Why there is 'self._notifier.info(..' instead of 'self._notifier.audit(..'. Thank you for the reply14:53
*** dklyle has joined #openstack-keystone14:53
*** takamatsu has joined #openstack-keystone14:54
*** Ben78 has joined #openstack-keystone15:04
cmurphyondrejduchon: https://specs.openstack.org/openstack/openstack-specs/specs/log-guidelines.html#proposed-changes-from-status-quo15:09
cmurphyanyone have topics to bring up in today's meeting? https://etherpad.openstack.org/p/keystone-weekly-meeting15:21
*** dancn has quit IRC15:29
*** whoami-rajat has quit IRC15:39
knikollaWill be 5 mins late to meeting15:44
*** tssurya has quit IRC15:46
*** ondrejduchon has quit IRC15:51
*** gyee has joined #openstack-keystone15:52
*** whoami-rajat has joined #openstack-keystone16:07
*** viks___ has quit IRC16:25
*** trident has quit IRC16:32
*** trident has joined #openstack-keystone16:37
gagehugogonna grab lunch and then I'll be on for office hours after a while16:37
cmurphyoffice hours now in https://meet.jit.si/keystone-office-hours16:38
cmurphyhttps://etherpad.openstack.org/p/keystone-office-hours-topics16:38
cmurphykmalloc: knikolla able to make it ^ ?16:44
kmallocoh. uh.16:45
kmallocsure. but i can't do video, construction, my web cam keeps falling over and the last time it broke my monitor (cracked it)16:45
*** jmlowe has joined #openstack-keystone16:46
cmurphyshould we do irc instead?16:46
knikollai can't do video either today16:48
knikollai can make it to office hours though16:48
cmurphyknikolla: can you join the call without video?16:48
knikollasure16:49
kmallocknikolla: my web cam is broken an my monitor is too (construction caused the webcam to fall and slam into the screen breaking both)16:50
kmallocknikolla: so you're in good company ;)16:50
cmurphyknikolla: we're still in jitsi fyi16:53
cmurphyhttps://bugs.launchpad.net/keystone/+bug/183430416:53
openstackLaunchpad bug 1834304 in OpenStack Identity (keystone) "[RFE][keystone][idm/ldap backend]: is it possible to use nested group to authorize users ?" [Undecided,Incomplete]16:53
knikollakmalloc: i have nothing that dramatic, lol. mostly my apartment is a mess and I'm multiplexing work and chores.16:54
gyeeI thought we support memberOf attribute already, this is AD I presume?16:57
cmurphygyee: want to join the call https://meet.jit.si/keystone-office-hours16:57
cmurphyit's IDM which i think is a RH thing16:57
*** jamesmcarthur has quit IRC17:00
cmurphyhttps://bugs.launchpad.net/keystone/+bug/183656817:02
openstackLaunchpad bug 1836568 in OpenStack Identity (keystone) "Logis filled with uneccesery policy derecation warning" [Undecided,New]17:02
*** markvoelker has quit IRC17:03
cmurphyhttps://bugs.launchpad.net/keystone/+bug/183701017:15
openstackLaunchpad bug 1837010 in OpenStack Identity (keystone) "[RFE] event callback dynamic loading" [Undecided,New]17:15
*** jmlowe has quit IRC17:18
cmurphyhttps://bugs.launchpad.net/keystone/+bug/183706117:19
openstackLaunchpad bug 1837061 in OpenStack Identity (keystone) "RFE: Application Credential API (CRUD) to 403 if app-cred auth method not enabled" [Wishlist,New]17:19
cmurphyhttps://bugs.launchpad.net/keystone/+bug/179111117:21
openstackLaunchpad bug 1791111 in OpenStack Dashboard (Horizon) "allow change password upon first use as user" [High,Confirmed] - Assigned to Radomir Dopieralski (deshipu)17:21
*** jamesmcarthur has joined #openstack-keystone17:26
*** tesseract has quit IRC17:34
gyeemy audio is breaking off17:36
cmurphywe just ended17:36
cmurphygood meeting y'all :)17:36
cmurphyforgot to record it though :(17:36
gagehugoah ok, just got back17:50
gagehugokmalloc: :( at cracked monitor17:51
*** Ben78 has quit IRC18:30
*** jamesmcarthur has quit IRC18:35
openstackgerritMerged openstack/keystone master: Add new attribute to the federation protocol API  https://review.opendev.org/63730518:49
*** joshualyle has quit IRC18:57
*** Ben78 has joined #openstack-keystone19:29
*** kplant has quit IRC19:42
*** jmlowe has joined #openstack-keystone19:56
*** whoami-rajat has quit IRC19:57
cmurphygyee: does mod_auth_kerb let you set REMOTE_DOMAIN in some way besides directly in the apache config?20:11
*** xek has quit IRC20:15
kmallocgyee: i think that is straight apache config20:16
kmalloccmurphy: ^ even20:16
cmurphyso mod_auth_kerb is effectively single-domain just like mod_ssl is?20:16
kmallocyeah that's straight setenv20:16
kmallocyep20:16
gyeeright20:16
cmurphyk20:16
gyeebut it's hardcoded20:17
kmallocanother reason we should drop krb520:17
kmallocmod_ssl/tokenless has a specific use case20:17
gyeeI couldn't agree more20:17
kmallocand even SSL we can encode a LOT more data in the cert if needed20:17
kmalloce.g. domain20:17
gyeeright, and SSL is used in production anyway, so the extra cost of issuing a client cert is not that much20:18
*** jmlowe has quit IRC20:23
*** jmlowe has joined #openstack-keystone20:25
*** joshualyle has joined #openstack-keystone20:32
*** vishalmanchanda has quit IRC20:32
*** joshualyle has quit IRC20:32
*** jmlowe has quit IRC20:36
*** jmlowe has joined #openstack-keystone20:38
*** joshualyle has joined #openstack-keystone20:42
*** jmlowe has quit IRC20:56
*** kplant has joined #openstack-keystone21:22
*** gyee has quit IRC21:23
*** dancn has joined #openstack-keystone21:32
*** gyee has joined #openstack-keystone21:42
*** joshualyle has quit IRC21:48
*** raildo has quit IRC22:02
kmalloc++22:05
*** jamesmcarthur has joined #openstack-keystone22:09
*** kplant has quit IRC22:15
*** ivve has quit IRC22:23
*** jamesmcarthur has quit IRC22:39
*** dancn has quit IRC22:45
*** tkajinam has joined #openstack-keystone22:57
*** dancn has joined #openstack-keystone22:57
*** rcernin has joined #openstack-keystone23:01
*** Ben78 has quit IRC23:29
*** joshualyle has joined #openstack-keystone23:30
*** dancn has quit IRC23:36

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!