| *** nkinder has quit IRC | 00:03 | |
| *** stevemar has quit IRC | 00:13 | |
| *** stevemar has joined #openstack-barbican | 00:14 | |
| *** stevemar has quit IRC | 00:18 | |
| *** stevemar has joined #openstack-barbican | 00:29 | |
| *** alee has quit IRC | 00:39 | |
| *** stevemar has quit IRC | 00:49 | |
| *** stevemar has joined #openstack-barbican | 00:50 | |
| *** stevemar has quit IRC | 01:00 | |
| *** alee has joined #openstack-barbican | 01:00 | |
| *** stevemar has joined #openstack-barbican | 01:00 | |
| *** stevemar has quit IRC | 01:05 | |
| *** stevemar has joined #openstack-barbican | 01:13 | |
| *** silos has joined #openstack-barbican | 01:33 | |
| *** silos has quit IRC | 01:38 | |
| *** stevemar has quit IRC | 01:40 | |
| *** stevemar has joined #openstack-barbican | 01:40 | |
| *** nkinder has joined #openstack-barbican | 02:09 | |
| *** stevemar has quit IRC | 02:14 | |
| *** diazjf has joined #openstack-barbican | 02:24 | |
| *** stevemar has joined #openstack-barbican | 02:34 | |
| *** zz_dimtruck is now known as dimtruck | 02:37 | |
| *** stevemar has quit IRC | 02:39 | |
| *** diazjf has quit IRC | 02:54 | |
| *** stevemar has joined #openstack-barbican | 02:57 | |
| *** stevemar has quit IRC | 03:20 | |
| *** stevemar has joined #openstack-barbican | 03:28 | |
| *** stevemar has quit IRC | 03:32 | |
| *** stevemar has joined #openstack-barbican | 03:35 | |
| *** stevemar has quit IRC | 03:35 | |
| *** stevemar has joined #openstack-barbican | 03:36 | |
| *** silos has joined #openstack-barbican | 03:45 | |
| *** silos has quit IRC | 03:50 | |
| *** dimtruck is now known as zz_dimtruck | 04:21 | |
| *** dave-mccowan has quit IRC | 04:41 | |
| *** jaosorior has joined #openstack-barbican | 04:55 | |
| *** Kevin_Zheng has joined #openstack-barbican | 06:08 | |
| *** alee has quit IRC | 06:16 | |
| *** andreas_s has joined #openstack-barbican | 06:28 | |
| *** jamielennox is now known as jamielennox|away | 06:48 | |
| *** woodster_ has quit IRC | 07:18 | |
| *** alee has joined #openstack-barbican | 07:48 | |
| *** jsheeren has joined #openstack-barbican | 08:09 | |
| *** silos has joined #openstack-barbican | 08:09 | |
| jsheeren | hi all, i'm getting following error in my log when listing secret containers:"extern "Python": function Cryptography_rand_bytes() called, but @ffi.def_extern() was not called in the current subinterpreter. Returning 0." | 08:09 |
|---|---|---|
| jsheeren | anyone sen this before? | 08:09 |
| jsheeren | am i using a wrong python library somewhere? | 08:10 |
| jsheeren | using following crypto libs: | 08:13 |
| jsheeren | pip list | grep crypto | 08:13 |
| jsheeren | cryptography (1.2.3) | 08:13 |
| jsheeren | pycrypto (2.6.1) | 08:13 |
| jsheeren | requirements state: cryptography!=1.3.0,>=1.0 # BSD/Apache-2.0 and pycrypto>=2.6 # Public Domain | 08:14 |
| *** silos has quit IRC | 08:14 | |
| jsheeren | funny thing is, i only get the message once and a while | 08:14 |
| jsheeren | cffi version is: cffi (1.5.2) | 08:15 |
| jaosorior | that's weird | 08:17 |
| jaosorior | jsheeren: most of the people are sleeping at the moment :/ | 08:17 |
| jaosorior | I recommend you submit a bug in launchpad | 08:17 |
| jsheeren | jaosorior: yeah was afraid of that | 08:18 |
| jaosorior | with details on how to reproduce it, and mention it's intermitent | 08:18 |
| jsheeren | looks related to https://github.com/pyca/cryptography/issues/2299 | 08:23 |
| jaosorior | what the hell | 08:25 |
| jaosorior | now that's a funky bug | 08:25 |
| jsheeren | yeah, the 'fix' https://cryptography.io/en/latest/faq/#starting-cryptography-using-mod-wsgi-produces-an-internalerror-during-a-call-in-register-osrandom-engine | 08:28 |
| jsheeren | "To resolve this set the WSGIApplicationGroup to %{GLOBAL} in the mod_wsgi configuration." | 08:29 |
| openstackgerrit | Johannes Grassler proposed openstack/barbican: Default to Keystone authentication https://review.openstack.org/333173 | 08:35 |
| jsheeren | hmmz https://modwsgi.readthedocs.io/en/develop/configuration-directives/WSGIApplicationGroup.html | 08:36 |
| jsheeren | weird, but that fixes it .. i'm not seeing the error anymore | 08:40 |
| jsheeren | even more, it's more stable now. before i got intermittend messages that the keystone service was unavailble. yet i could curl without issues.. | 08:41 |
| jaosorior | waht O_O | 08:45 |
| jsheeren | does setting the wsgiapplicationgroup to %{global} present a security issue? | 08:45 |
| jaosorior | I honestly have no clue | 08:45 |
| jaosorior | alee ^^ | 08:45 |
| alee | jaosorior, jsheeren - sorry no clue either | 08:52 |
| jsheeren | no prob | 08:54 |
| jaosorior | alee, certmonger question | 08:57 |
| jaosorior | alee, under what user permissions does certmonger run pre/post save commands? | 08:57 |
| jaosorior | I need certmonger to restart a service on a post-save command | 08:57 |
| jaosorior | and need to know if I need to consider some permissions there | 08:57 |
| alee | jaosorior, I think certmonger runs using root permissions | 09:01 |
| alee | jaosorior, so you should be able to restart the service | 09:01 |
| alee | jaosorior, I know ipa for instance will restart itself when its system certs are renewed | 09:03 |
| jaosorior | alee, do you have a reference to the pre/post save commands that it uses? | 09:04 |
| alee | jaosorior, ipa ? let me see .. | 09:04 |
| alee | jaosorior, looking - all the certmonger stuff in ipa appears to be in certmonger.py | 09:08 |
| *** jaosorior has quit IRC | 09:11 | |
| *** jaosorior has joined #openstack-barbican | 09:11 | |
| jaosorior | alee: uhm | 09:12 |
| jaosorior | I remember there was an explicit script that certmonger was calling | 09:12 |
| alee | jaosorior, https://git.fedorahosted.org/cgit/freeipa.git/tree/ipapython/certmonger.py | 09:12 |
| jaosorior | I just don't remember which | 09:12 |
| alee | jaosorior, yeah looking | 09:12 |
| alee | jaosorior, one of them .. renew_ra_cert | 09:14 |
| alee | jaosorior, renew_ca_cert | 09:15 |
| alee | jaosorior, also stop_pkicad | 09:15 |
| alee | jaosorior, https://git.fedorahosted.org/cgit/freeipa.git/tree/install/restart_scripts | 09:17 |
| alee | jaosorior, https://git.fedorahosted.org/cgit/freeipa.git/tree/install/certmonger | 09:17 |
| jaosorior | well | 09:20 |
| jaosorior | seems to be nothing special | 09:20 |
| jaosorior | just restarting the services taking into account the cred lock | 09:20 |
| alee | jaosorior, yup | 09:20 |
| *** jamielennox|away is now known as jamielennox | 09:43 | |
| *** pcaruana has joined #openstack-barbican | 09:51 | |
| *** silos has joined #openstack-barbican | 10:21 | |
| *** silos has quit IRC | 10:25 | |
| *** alee_ has joined #openstack-barbican | 11:11 | |
| *** jsheeren has quit IRC | 11:29 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:09 | |
| *** kfarr has joined #openstack-barbican | 13:14 | |
| *** zz_dimtruck is now known as dimtruck | 13:15 | |
| *** catintheroof has joined #openstack-barbican | 13:32 | |
| *** dimtruck is now known as zz_dimtruck | 13:44 | |
| *** dave-mccowan has joined #openstack-barbican | 13:55 | |
| *** jmckind has joined #openstack-barbican | 14:00 | |
| *** rbradfor has joined #openstack-barbican | 14:00 | |
| *** rbradfor has quit IRC | 14:02 | |
| *** rbradfor has joined #openstack-barbican | 14:05 | |
| *** spotz_zzz is now known as spotz | 14:09 | |
| *** woodster_ has joined #openstack-barbican | 14:12 | |
| *** jmckind_ has joined #openstack-barbican | 14:20 | |
| *** zz_dimtruck is now known as dimtruck | 14:23 | |
| *** jmckind has quit IRC | 14:23 | |
| *** ayoung has quit IRC | 14:37 | |
| *** asingh has joined #openstack-barbican | 14:39 | |
| *** pcaruana has quit IRC | 14:41 | |
| *** silos has joined #openstack-barbican | 14:43 | |
| *** edtubill has joined #openstack-barbican | 14:47 | |
| *** jaosorior has quit IRC | 14:53 | |
| *** randallburt has joined #openstack-barbican | 14:57 | |
| *** randallburt1 has joined #openstack-barbican | 14:59 | |
| *** jmckind has joined #openstack-barbican | 15:01 | |
| *** randallburt has quit IRC | 15:02 | |
| *** dave-mccowan has quit IRC | 15:02 | |
| *** jmckind_ has quit IRC | 15:04 | |
| *** silos has quit IRC | 15:05 | |
| *** kfarr has quit IRC | 15:09 | |
| *** silos has joined #openstack-barbican | 15:13 | |
| *** alee_ is now known as alee_dinner | 15:16 | |
| *** dave-mccowan has joined #openstack-barbican | 15:19 | |
| *** ayoung has joined #openstack-barbican | 15:37 | |
| *** andreas_s has quit IRC | 15:56 | |
| *** silos has quit IRC | 16:09 | |
| *** jmckind_ has joined #openstack-barbican | 16:18 | |
| *** jmckind has quit IRC | 16:21 | |
| *** jmckind has joined #openstack-barbican | 16:38 | |
| *** jmckind_ has quit IRC | 16:39 | |
| *** jmckind_ has joined #openstack-barbican | 17:00 | |
| *** jmckind has quit IRC | 17:02 | |
| *** spotz is now known as spotz_zzz | 17:08 | |
| *** ayoung has quit IRC | 17:28 | |
| *** kfarr has joined #openstack-barbican | 17:32 | |
| *** dave-mccowan has quit IRC | 17:58 | |
| *** dave-mccowan has joined #openstack-barbican | 18:19 | |
| *** asingh has quit IRC | 18:32 | |
| *** asingh has joined #openstack-barbican | 18:33 | |
| *** asingh has quit IRC | 19:03 | |
| *** asingh has joined #openstack-barbican | 19:03 | |
| *** alee_dinner is now known as alee_ | 19:03 | |
| *** spotz_zzz is now known as spotz | 19:11 | |
| *** jmckind has joined #openstack-barbican | 19:33 | |
| *** jmckind_ has quit IRC | 19:36 | |
| *** gyee has joined #openstack-barbican | 20:16 | |
| *** rbradfor has quit IRC | 20:27 | |
| *** Daviey has quit IRC | 20:27 | |
| *** crc32_znc has quit IRC | 20:27 | |
| *** stupidnic has quit IRC | 20:27 | |
| *** dimtruck has quit IRC | 20:27 | |
| *** Kiall has quit IRC | 20:27 | |
| *** zigo has quit IRC | 20:27 | |
| *** DuncanT has quit IRC | 20:27 | |
| *** phschwartz has quit IRC | 20:27 | |
| *** jillysciarilly has quit IRC | 20:27 | |
| *** jvrbanac has quit IRC | 20:27 | |
| *** spotz has quit IRC | 20:27 | |
| *** jamielennox has quit IRC | 20:27 | |
| *** mmotiani_ is now known as mmotiani | 20:27 | |
| *** Kiall has joined #openstack-barbican | 20:27 | |
| *** stupidnic has joined #openstack-barbican | 20:27 | |
| *** jvrbanac has joined #openstack-barbican | 20:27 | |
| *** phschwartz has joined #openstack-barbican | 20:27 | |
| *** spotz_ has joined #openstack-barbican | 20:28 | |
| *** rbradfor has joined #openstack-barbican | 20:28 | |
| *** crc32|znc has joined #openstack-barbican | 20:28 | |
| *** zigo has joined #openstack-barbican | 20:29 | |
| *** jillysciarilly has joined #openstack-barbican | 20:29 | |
| *** woodster_ has quit IRC | 20:29 | |
| *** dimtruck has joined #openstack-barbican | 20:30 | |
| *** DuncanT has joined #openstack-barbican | 20:31 | |
| *** Daviey has joined #openstack-barbican | 20:34 | |
| *** jamielennox has joined #openstack-barbican | 20:38 | |
| *** _jungh4ns has quit IRC | 20:39 | |
| *** woodster_ has joined #openstack-barbican | 21:01 | |
| *** kfarr has quit IRC | 21:03 | |
| *** ozialien10 has quit IRC | 21:08 | |
| *** catintheroof has quit IRC | 21:21 | |
| *** jmckind has quit IRC | 21:43 | |
| *** edtubill has quit IRC | 22:00 | |
| *** dimtruck is now known as zz_dimtruck | 22:04 | |
| *** randallburt1 has quit IRC | 22:11 | |
| *** edtubill has joined #openstack-barbican | 22:14 | |
| openstackgerrit | Arun Kant proposed openstack/barbican-specs: Adding spec for supporting multiple secret store backends https://review.openstack.org/263972 | 22:55 |
| *** zz_dimtruck is now known as dimtruck | 23:33 | |
| *** agrebennikov has joined #openstack-barbican | 23:52 | |
| *** edtubill has quit IRC | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!