Tuesday, 2016-06-07

*** rajpatel has joined #osic00:00
*** karthikp_ has joined #osic00:07
*** ccneill has quit IRC00:11
*** karthikp_ has quit IRC00:23
*** ravikama_ has joined #osic00:37
*** rajpatel has quit IRC00:45
*** rajpatel has joined #osic01:12
*** rajpatel has quit IRC01:17
*** rajpatel has joined #osic01:22
*** spotz_zzz is now known as spotz01:29
*** muralia_ has quit IRC01:29
*** muralia has joined #osic01:29
*** rajpatel1 has joined #osic01:30
*** rajpatel has quit IRC01:30
*** rloo has quit IRC01:35
*** rajpatel has joined #osic01:46
*** rajpatel1 has quit IRC01:46
*** rajpatel has quit IRC01:50
*** nadeem has joined #osic01:55
*** rm_work has quit IRC02:16
*** ravikama_ has quit IRC02:33
*** nadeem has quit IRC02:39
*** sgundur1 has left #osic02:54
*** rajpatel has joined #osic02:54
*** rm_work has joined #osic02:56
*** rm_work has quit IRC03:07
*** rm_work has joined #osic03:11
*** valw has joined #osic03:41
*** JRobinson__ is now known as JRobinson__afk03:49
*** valw has quit IRC03:51
*** woodster_ has quit IRC04:08
*** unrahul has quit IRC04:12
*** rajpatel has quit IRC04:27
*** JRobinson__afk is now known as JRobinson__04:29
*** GB21 has joined #osic04:53
*** nadeem has joined #osic04:54
*** GB21 has quit IRC05:12
*** GB21 has joined #osic05:31
*** vinaypotluri has quit IRC06:10
*** nadeem has quit IRC06:11
*** revon has quit IRC08:19
*** JRobinson__ has quit IRC09:11
*** sfinucan has joined #osic09:19
*** GB21 has quit IRC10:45
*** GB21 has joined #osic10:52
*** spotz is now known as spotz_zzz11:57
*** peristeri has joined #osic12:05
*** peristeri has quit IRC12:21
*** GB21 has quit IRC12:23
*** ankur-gupta-f has left #osic12:47
*** rloo has joined #osic13:00
*** sfinucan has quit IRC13:09
*** inc0 has joined #osic13:13
*** KLevenstein has joined #osic13:46
*** muralia has quit IRC13:52
*** muralia has joined #osic13:52
*** ametts has joined #osic13:53
*** KrishR has joined #osic13:55
*** muralia has quit IRC13:57
*** rderose has joined #osic13:59
*** spotz_zzz is now known as spotz13:59
*** KLevenstein has quit IRC14:02
*** rloo has quit IRC14:03
*** rloo has joined #osic14:03
*** Mudpuppy has joined #osic14:04
*** KLevenstein has joined #osic14:04
*** Mudpuppy has quit IRC14:04
*** Mudpuppy has joined #osic14:05
*** asingh has joined #osic14:07
mrhillsmanmorning14:11
dasmhello14:11
spotzmorning14:11
*** homerp_ has joined #osic14:16
*** homerp__ has joined #osic14:18
*** homerp_ has quit IRC14:20
castulogm14:21
*** asingh has quit IRC14:22
*** cath6184 has joined #osic14:23
*** cath6184 is now known as cathR14:23
ankur-gupta-f1sleepy morning all!!!!14:24
hockeynutnot any more - iced tea!14:25
*** muralia has joined #osic14:27
*** rajpatel has joined #osic14:27
*** sgundur1 has joined #osic14:28
*** valw has joined #osic14:28
ankur-gupta-f1i went off coffee for 5 days. i now realize my mistake and have corrected my behavior14:28
*** valw has quit IRC14:28
*** valw has joined #osic14:29
*** woodster_ has joined #osic14:30
mmotianiGood Morning!14:30
*** asingh has joined #osic14:38
*** raddaoui has joined #osic14:39
*** valw has quit IRC14:40
*** vinaypotluri has joined #osic14:44
*** ravikama_ has joined #osic14:46
*** ankur-gupta-f1 has quit IRC14:46
*** ankur-gupta-f1 has joined #osic14:49
*** karthikp_ has joined #osic14:49
*** valw has joined #osic14:49
diltrammorning14:50
*** renato_r has joined #osic14:51
*** valw has quit IRC14:53
*** cathR has left #osic14:53
dstanekdolphm: i update the keystone meeting for today to include the saml2 topic https://etherpad.openstack.org/p/keystone-weekly-meeting14:53
*** valw has joined #osic14:54
*** renato_r_ has joined #osic14:54
*** renato_r has quit IRC14:57
*** valw has quit IRC15:07
*** inc0 has quit IRC15:09
*** inc0 has joined #osic15:09
*** valw has joined #osic15:17
*** sgundur1 has left #osic15:18
*** sgundur1 has joined #osic15:18
*** cloudtrainme has joined #osic15:22
*** di has joined #osic15:25
*** dwalleck has joined #osic15:27
*** cathR has joined #osic15:33
*** rajpatel has quit IRC15:33
*** dwalleck has quit IRC15:34
*** unrahul has joined #osic15:45
*** GB21 has joined #osic15:45
*** rajpatel has joined #osic15:51
*** ccneill has joined #osic16:00
*** GB21 has quit IRC16:01
*** inc0 has quit IRC16:06
*** inc0 has joined #osic16:06
*** kebray has joined #osic16:06
*** cathR has left #osic16:06
*** adrian_otto has joined #osic16:07
dolphmunrahul: what's up?16:09
unrahuldolphm: I was looking up the api design for different projects and it seems to me that there is no one way or one set of components that projects have used to write their APIs, is there an openstack reference design on how to write one..?16:11
unrahuldolphm: Some have wrote their own wsgi servers and used eventlet, while some others have used wsme and pecan and a bunch of other stuff..16:12
dolphmunrahul: you're right! historically, there hasn't been any one approach, but there's a working group working on defining exactly that for new APIs16:12
dolphmunrahul: https://wiki.openstack.org/wiki/API_Working_Group16:12
dolphmunrahul: https://specs.openstack.org/openstack/api-wg/16:12
unrahuldolphm: oh... thanks Dolph..  I am with the security team and we are looking into diff projects to emulate and create a vulnerable API.. Do you have any suggestions on which may we use..?16:13
dolphmunrahul: the working group dictates neither the implementation (pecan vs flask, for example), nor the approach to the application server (uwsgi vs eventlet), and focuses entirely on the interface that we're presenting to end users16:14
unrahuldolphm: ha.. so as long as we stick to the interface and internally use which ever service we are comfortable with.. it should be fine.. ?16:15
dolphmunrahul: cookiecutter will you get you a vanilla openstack service up and running in no time https://github.com/openstack-dev/cookiecutter16:15
dolphmunrahul: the implementation details are definitely up to you, but there are "preferences" for technology choices and things across the community where you should not deviate (or you should be prepared to make a thoughtful defense of your choice)-- but it all depends on your project's audience16:17
*** asettle has quit IRC16:19
dolphmunrahul: if you don't care about the service itself, and just need something to wrap security around, the Echo service is great tool for that https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/echo/service.py16:20
*** valw has quit IRC16:20
dolphmunrahul: you can run / deploy it however you want, run keystonemiddleware.auth_token in front of it for authentication, and run whatever other middleware with it you'd like16:21
dolphmunrahul: and it's only purpose is to echo back the security context of successful requests16:21
dolphmunrahul: which is super useful for testing16:21
dolphmunrahul: or demos16:22
jrollunrahul: don't use wsme, is my only advice16:23
jrollit is as good as dead16:23
dolphmlol +116:23
jroll(and also terrible, too much magic)16:23
* jroll likes flask personally but hasn't done an openstack project with it16:23
unrahuldolphm: thats interesting .. thanks for the working group links.. that really helps..  I am gonna look into that and the cookiecutter and see if there is something we can *emulate*16:25
*** valw has joined #osic16:25
unrahuljroll: dolphm :D... thats what i thought.. a lot of magic going on..16:26
unrahuljroll: dolphm our current vulnerable api uses bottle.. but.. its a bit too simple to be realistic..16:26
dolphmunrahul: just out of curiosity, what types of vulnerabilities are you interested in demonstrating?16:27
unrahuldolphm: https://github.com/mattvaldes/vulnerable-api this is current API we are using now to baseline the tool we are developing.16:30
unrahuldolphm: it basically has sql injection, xss, ldap, integer overflow, cors header vulnerability.. etc.. the usual.16:30
unrahuldolphm: we wanted a realistic api to baseline before we test our tool Syntribos on real openstack projects. hence.. looking into real world OS APIs16:31
*** nadeem has joined #osic16:33
unrahuldolphm: anyway, thanks dolphm and jroll for you the urls and your thoughts on the same.16:36
dolphmunrahul: cool, sounds valuable!16:38
*** mdong has joined #osic16:39
unrahulthanks dolphm , eventually the idea is that it would help other projects as well.. a reference on how not to design and API  :D16:40
*** cathR_ has joined #osic16:44
*** cloudtrainme has quit IRC16:45
*** valw has quit IRC16:48
*** rajpatel has quit IRC16:52
*** valw has joined #osic16:52
*** rajpatel has joined #osic16:56
*** KrishR has quit IRC16:59
*** kebray has quit IRC17:07
*** valw has quit IRC17:11
unrahulguys, gerrit switched to open id ?17:15
unrahulwhen did that happen..?17:15
*** cathR_ has left #osic17:17
unrahulI am not able to sign in to review.openstack.org.. anyone else have the issue.?17:18
ccneillunrahul: uh oh, looks like it's down >_<17:19
ccneillI'm getting a "Provider is not supported, or was incorrectly entered." error17:19
*** valw has joined #osic17:20
unrahulccneill: yup17:23
unrahulCcneill I don't think that change was supposed to be pushed..or something screwd up from infra side17:24
ccneill¯\_(ツ)_/¯17:25
ccneillnot sure what's going on17:25
*** valw has quit IRC17:26
*** valw has joined #osic17:28
*** rajpatel has quit IRC17:29
*** cloudtrainme has joined #osic17:32
*** rajpatel has joined #osic17:34
*** rajpatel has quit IRC17:37
*** rajpatel has joined #osic17:38
*** asettle has joined #osic17:49
*** asettle has joined #osic17:49
*** cloudtrainme has quit IRC17:53
*** valw has quit IRC17:56
*** valw has joined #osic17:57
dstanekdolphm: so close, but failing at the last step17:59
dolphmdstanek: =)17:59
dstanekdolphm: http://162.242.221.169/ - i just need to tell horizon about the authn data18:00
dstanekbasically finish the websso loop18:00
*** KLevenstein has quit IRC18:01
*** KLevenstein has joined #osic18:02
*** ccneill has quit IRC18:05
*** KrishR has joined #osic18:07
*** jorge_munoz has joined #osic18:09
*** ccneill has joined #osic18:16
*** ametts has quit IRC18:27
*** mdong has quit IRC18:36
*** ametts has joined #osic18:40
*** cathR has joined #osic18:45
*** asingh has quit IRC18:57
*** mhayden has quit IRC19:00
*** rajpatel has quit IRC19:00
*** mhayden has joined #osic19:00
*** rajpatel has joined #osic19:01
*** valw has quit IRC19:08
*** valw has joined #osic19:12
*** raddaoui has quit IRC19:17
*** valw_ has joined #osic19:25
*** valw has quit IRC19:26
*** raddaoui has joined #osic19:28
*** adrian_otto has quit IRC19:34
*** adrian_otto has joined #osic19:35
*** adrian_otto has quit IRC19:40
*** asettle has quit IRC19:42
*** valw_ has quit IRC19:49
*** valw has joined #osic19:53
*** asettle has joined #osic19:59
*** cathR has left #osic20:09
*** jimbaker has quit IRC20:32
ankur-gupta-f1Reminder Game Night at 5:00 at Book Store!!!!20:33
*** asettle has quit IRC20:36
*** Guest43585 is now known as scotticus20:37
*** valw has quit IRC20:40
*** homerp__ has quit IRC20:51
*** cathR has joined #osic20:53
*** jimbaker has joined #osic20:57
*** homerp_ has joined #osic20:57
*** homerp_ has left #osic20:58
*** asettle has joined #osic20:59
*** Mudpuppy has quit IRC21:00
*** JRobinson__ has joined #osic21:02
*** spotz is now known as spotz_zzz21:03
*** scotticus has left #osic21:08
*** irtermite has joined #osic21:12
*** rderose has quit IRC21:17
*** irtermite has quit IRC21:29
sigmavirus24unrahul: you should be able to log in now21:35
sigmavirus24It was that login.ubuntu.com was down21:35
sigmavirus24aka ubuntu one21:35
unrahulsigmavirus24:  yup.. am able to21:35
unrahulsigmavirus24:  any clue what happened ?21:36
sigmavirus24unrahul: login.ubuntu.com was unresponsive for whatever reason. It was completely unreachable for several hours21:38
unrahulsigmavirus24: ha.. curious how it got redirected to open id page.21:38
unrahulsigmavirus24: anyway, now everything is back to normal. so.21:39
sigmavirus24unrahul: I think that's probably an "invisiable" redirect (one you don't tend to see because when working it would redirect to login.ubuntu.com)21:39
sigmavirus24Not that "invisible" redirects are really a thing, but you get my meaning I hope21:39
unrahulsigmavirus24: hmm.. yeah make sense.21:39
unrahulyeah.. background sort of.21:40
*** inc0 has quit IRC21:45
*** rajpatel has quit IRC21:45
*** rajpatel has joined #osic21:48
*** rajpatel has quit IRC21:53
*** irtermite has joined #osic21:53
*** ankur-gupta-f1 has left #osic21:55
*** muralia has quit IRC21:56
*** cloudtrainme has joined #osic21:56
*** spotz_zzz is now known as spotz21:58
*** KLevenstein has quit IRC21:58
*** nadeem has quit IRC22:00
*** rderose has joined #osic22:01
*** karthikp_ has quit IRC22:01
*** asettle has quit IRC22:03
*** rderose has quit IRC22:08
*** rderose has joined #osic22:10
*** irtermit_ has joined #osic22:16
*** irtermit_ has quit IRC22:16
*** irtermite has quit IRC22:20
*** rderose has quit IRC22:24
*** cathR has quit IRC22:26
*** JRobinson__ is now known as JRobinson__afk22:26
*** ametts has quit IRC22:30
*** JRobinson__afk is now known as JRobinson__22:42
*** cloudtrainme has quit IRC22:43
*** cloudtrainme has joined #osic22:43
*** di has quit IRC22:53
*** KrishR has quit IRC23:17
*** spotz is now known as spotz_zzz23:17
*** nadeem has joined #osic23:27
*** stajkowski has joined #osic23:31
stajkowskijohnthetubaguy: hey, olso work is complete, i keep pining doug, no response, advanced and required are ready to go23:31
stajkowskijohnthetubaguy: i'm assuming required options isn't going to go forward23:32
*** renato_r_ has quit IRC23:51

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!