Monday, 2020-11-02

*** jamesmcarthur has joined #openstack-keystone00:16
*** spatel has joined #openstack-keystone00:28
*** jamesmcarthur has quit IRC00:29
*** spatel has quit IRC00:30
*** jamesmcarthur has joined #openstack-keystone00:40
*** jamesmcarthur has quit IRC00:45
*** jamesmcarthur has joined #openstack-keystone00:46
*** zzzeek has quit IRC00:49
*** zzzeek has joined #openstack-keystone00:50
*** jamesmcarthur has quit IRC01:10
*** jamesmcarthur has joined #openstack-keystone01:20
*** jamesmcarthur has quit IRC01:28
*** jamesmcarthur has joined #openstack-keystone01:45
*** jamesmcarthur has quit IRC01:53
*** jamesmcarthur has joined #openstack-keystone01:53
openstackgerritQi Zhang proposed openstack/oslo.policy master: Fix grammar issues  https://review.opendev.org/76004902:01
openstackgerritQi Zhang proposed openstack/oslo.policy master: Fix grammar issues  https://review.opendev.org/76004902:08
*** jamesmcarthur has quit IRC02:18
*** rcernin has quit IRC02:41
*** rcernin has joined #openstack-keystone02:42
*** jamesmcarthur has joined #openstack-keystone03:23
*** jamesmcarthur has quit IRC03:28
*** jamesmcarthur has joined #openstack-keystone03:51
*** jamesmcarthur has quit IRC04:02
*** jamesmcarthur has joined #openstack-keystone04:03
*** jamesmcarthur has quit IRC04:06
*** rcernin has quit IRC04:21
*** zzzeek has quit IRC04:26
*** zzzeek has joined #openstack-keystone04:28
*** rcernin has joined #openstack-keystone04:30
*** rcernin has quit IRC04:34
*** rcernin has joined #openstack-keystone04:42
*** rcernin has quit IRC04:53
*** benj_ has quit IRC05:04
*** benj_ has joined #openstack-keystone05:07
*** evrardjp has quit IRC05:33
*** evrardjp has joined #openstack-keystone05:33
*** rcernin has joined #openstack-keystone05:36
*** rcernin has quit IRC05:40
*** rcernin has joined #openstack-keystone05:48
*** rcernin has quit IRC05:57
*** vishalmanchanda has joined #openstack-keystone06:22
*** pots has quit IRC06:22
*** pots has joined #openstack-keystone06:23
*** hemna has quit IRC06:23
*** hemna has joined #openstack-keystone06:24
*** abdysn has joined #openstack-keystone06:28
*** npbhosale has joined #openstack-keystone07:02
npbhosaleHello ... looking for some help with respect to connecting to LDAP server with Keystone07:03
npbhosaleI am hitting this issue: https://bugzilla.redhat.com/show_bug.cgi?id=188334007:04
openstackbugzilla.redhat.com bug 1883340 in openstack-keystone "Unable to disable LDAP paging using Active Directory" [High,Assigned] - Assigned to lbragsta07:04
npbhosalewhere I get an error from keystone like: keystone.exception.LDAPSizeLimitExceeded: Number of User/Group entities returned by LDAP exceeded size limit. Contact your LDAP administrator.07:04
npbhosaleis there any workaround for this?07:04
npbhosaleI tried patching the keystone config as:07:06
npbhosale$ curl -kv -X PATCH http://<keystone-server-ip>:5000/v3/domains/b0f06840dbf94291993ae4a251382554/config -H "X-Auth-Token: $TOKEN" -H  "Content-Type: application/json" -d'{"config": {"identity": {"driver": "ldap"}, "ldap": {"page_size": 1000}}}'07:06
npbhosalebut not sure if that is the right way ...07:06
npbhosaleshould 'page_size' be set as an integer or a string?07:08
*** bengates has joined #openstack-keystone08:55
*** bengates has quit IRC08:55
*** bengates has joined #openstack-keystone08:55
*** rcernin has joined #openstack-keystone09:23
*** abdysn has quit IRC09:24
*** gshippey has joined #openstack-keystone09:36
*** rcernin has quit IRC09:45
*** sapd1_x has joined #openstack-keystone10:00
*** npbhosale has quit IRC10:37
*** rcernin has joined #openstack-keystone10:41
*** abdysn has joined #openstack-keystone10:50
*** Abdallahyas has joined #openstack-keystone10:54
*** rcernin has quit IRC10:55
*** abdysn has quit IRC10:58
*** Abdallahyas has quit IRC11:29
*** abdysn has joined #openstack-keystone11:29
*** Luzi has joined #openstack-keystone12:08
*** raildo has joined #openstack-keystone12:14
*** Luzi has quit IRC13:20
*** dave-mccowan has quit IRC14:00
*** dave-mccowan has joined #openstack-keystone14:06
*** jamesmcarthur has joined #openstack-keystone14:43
*** vishalmanchanda has quit IRC14:46
*** abdysn has quit IRC14:58
*** larsks has joined #openstack-keystone15:35
*** larsks has left #openstack-keystone15:35
*** fanfi_ has joined #openstack-keystone16:14
fanfi_hello, could somebody help me please. After fresh installation of OpenStack-Ansible, compute node is not able to join to our deployment. In nova-compute log i see following error: Failed to discover available identity versions when contacting http://IP:5000/v3/. Attempting to parse version from URL. And ERROR nova keystoneauth1.exceptions.connection.UnknownConnectionError: Unexpected exception for http://IP:5000/v3/auth/tokens: Failed to parse: htt16:16
fanfi_http://IP:5000/v3/auth/tokens16:16
fanfi_5000/v3/auth/tokens16:17
*** jamesmcarthur has quit IRC16:17
*** jamesmcarthur has joined #openstack-keystone16:36
*** jamesmcarthur has quit IRC16:37
*** jamesmcarthur has joined #openstack-keystone16:42
*** jamesmcarthur has quit IRC17:00
*** jamesmcarthur_ has joined #openstack-keystone17:01
*** fanfi_ has quit IRC17:16
*** jamesmcarthur_ has quit IRC17:28
*** jamesmcarthur has joined #openstack-keystone17:28
openstackgerritLance Bragstad proposed openstack/keystone master: Use app cred user ID in policy enforcement  https://review.opendev.org/76097217:30
*** jamesmcarthur has quit IRC17:34
*** bengates has quit IRC17:34
*** jamesmcarthur has joined #openstack-keystone18:04
*** jamesmcarthur has quit IRC18:12
*** jamesmcarthur has joined #openstack-keystone18:12
*** jamesmcarthur has quit IRC18:20
*** hoonetorg has quit IRC20:10
*** hoonetorg has joined #openstack-keystone20:23
*** hamalq has joined #openstack-keystone20:32
hamalqhi, if u have multiple keystone servers and serv1,serv2 and any request can go to either and u have memcached enabled for token caching should the memcache in the two servers be connected ad one pool or its ok if every server have its own memecahed20:35
hamalqwill that cause the token validation tto fail20:36
hamalqif every server have its own memcahe20:36
hamalq?20:36
*** rcernin has joined #openstack-keystone20:40
*** rcernin has quit IRC20:43
*** rcernin has joined #openstack-keystone20:43
*** ayoung has joined #openstack-keystone21:08
lbragstadhamalq token validation will continue to work21:30
lbragstadbut each memcached instance will need a copy of the token before the performance will be guaranteed21:31
hamalqlbragstad:  thanks for the clear answer21:44
*** lbragstad_ has joined #openstack-keystone22:05
*** lbragstad has quit IRC22:06
*** raildo has quit IRC22:26
*** dave-mccowan has quit IRC22:52
*** lbragstad_ has quit IRC22:57

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!