Friday, 2015-05-08

*** Marga_ has quit IRC00:03
*** mattgriffin has quit IRC00:11
*** ddaskal has joined #openstack-community00:23
*** electroc_ has joined #openstack-community00:39
*** electrocucaracha has quit IRC00:40
*** electroc_ has quit IRC00:44
*** jtomasek has quit IRC00:48
*** mattgriffin has joined #openstack-community00:51
*** tiswanso has joined #openstack-community01:17
*** tiswanso has quit IRC01:20
*** mattgriffin has quit IRC01:20
*** tiswanso has joined #openstack-community01:20
*** tiswanso has quit IRC01:26
*** tiswanso has joined #openstack-community01:26
*** annegentle has joined #openstack-community02:15
*** annegentle has quit IRC02:20
*** tiswanso has quit IRC02:28
*** tiswanso has joined #openstack-community02:29
*** annegentle has joined #openstack-community02:40
*** smallbig has joined #openstack-community02:59
*** tiswanso has quit IRC03:05
*** ozialien has quit IRC03:06
*** annegentle has quit IRC03:43
*** annegentle has joined #openstack-community03:44
*** ddaskal has quit IRC03:55
*** Marga_ has joined #openstack-community03:58
*** Marga_ has quit IRC04:00
*** Marga_ has joined #openstack-community04:00
*** annegentle has quit IRC04:02
*** mattgriffin has joined #openstack-community04:15
*** mattgriffin has quit IRC04:17
*** mattgriffin has joined #openstack-community04:20
*** julim has quit IRC04:49
*** julim has joined #openstack-community04:56
*** annegentle has joined #openstack-community05:03
*** mrmartin has joined #openstack-community05:07
*** annegentle has quit IRC05:09
*** mattgriffin has quit IRC05:11
*** mrmartin has quit IRC05:19
*** annegentle has joined #openstack-community06:04
*** annegentle has quit IRC06:10
*** neeti has joined #openstack-community06:23
*** Marga_ has quit IRC06:44
*** annegentle has joined #openstack-community07:05
*** annegentle has quit IRC07:10
*** tobe has joined #openstack-community08:05
*** annegent_ has joined #openstack-community08:06
*** annegent_ has quit IRC08:11
*** dizquierdo has joined #openstack-community08:26
*** mrmartin has joined #openstack-community08:29
*** dizquierdo has quit IRC08:31
*** tobe has quit IRC08:31
*** cdent has joined #openstack-community08:56
*** annegentle has joined #openstack-community09:07
*** annegentle has quit IRC09:12
*** mrmartin has quit IRC09:40
*** coolsvap|afk is now known as coolsvap10:03
*** annegent_ has joined #openstack-community10:08
*** annegent_ has quit IRC10:13
*** mrmartin has joined #openstack-community10:43
*** mwagner_lap has joined #openstack-community11:06
*** annegent_ has joined #openstack-community11:08
*** annegent_ has quit IRC11:13
*** annegentle has joined #openstack-community12:00
*** annegentle has quit IRC13:00
*** annegentle has joined #openstack-community13:02
*** cdent has quit IRC13:12
*** tiswanso has joined #openstack-community13:14
*** EmilienM|afk is now known as EmilienM13:15
*** coolsvap is now known as coolsvap|afk13:37
*** neeti has quit IRC13:39
*** neeti has joined #openstack-community13:44
*** annegentle has quit IRC13:44
*** annegentle has joined #openstack-community13:45
*** cdent has joined #openstack-community13:46
*** coolsvap has joined #openstack-community13:47
*** dizquierdo has joined #openstack-community14:09
*** annegentle has quit IRC14:16
*** ddaskal has joined #openstack-community14:22
*** Piet has joined #openstack-community14:23
*** neeti has quit IRC14:25
*** shakamunyi has joined #openstack-community14:25
*** mattgriffin has joined #openstack-community14:28
*** ddaskal has quit IRC14:32
*** Marga_ has joined #openstack-community14:38
*** Marga_ has quit IRC14:39
*** Marga_ has joined #openstack-community14:39
*** Guest58709 has joined #openstack-community14:41
*** electrocucaracha has joined #openstack-community14:42
*** packet has joined #openstack-community14:45
*** electrocucaracha has quit IRC14:45
*** rbowen has quit IRC14:47
*** electrocucaracha has joined #openstack-community14:48
*** rbowen has joined #openstack-community14:52
*** Marga_ has quit IRC15:13
*** electrocucaracha has quit IRC15:17
*** shakamunyi has quit IRC15:25
*** Marga_ has joined #openstack-community15:28
*** mwagner_lap has quit IRC15:35
*** Marga_ has quit IRC15:37
*** Guest58709 is now known as annegentle15:40
reedhi mrmartin15:46
reedI am checking my morning email now15:46
mrmartinhi15:48
reedmrmartin, I saw the good news! so grateful15:51
reedi'm going to test it now15:51
mrmartinyeah, I definietly suggest to do testing, we have 520 new commits in this 0.7.53 upgrade15:52
mrmartinand as we don't have a detailed changelog anything can happen15:52
*** openstackstatus has quit IRC15:56
reedthe site looks good15:56
*** openstackstatus has joined #openstack-community15:56
*** ChanServ sets mode: +v openstackstatus15:56
reednow Evgeny needs to fix the G+ code https://bugs.launchpad.net/openstack-community/+bug/141836115:57
openstackLaunchpad bug 1418361 in OpenStack Community Project "OpenID 2.0 for Google Accounts is going away" [High,In progress] - Assigned to Evgeny Fadeev (evgeny-fadeev)15:57
reedbecause there seem still to be an issue15:57
reedmrmartin, did you talk to Evgeny today15:57
reed?15:57
mrmartinnot yet15:58
reedok, I'll look for him15:58
mrmartinI bet this setting going away thing happens when you save the settings15:58
mrmartinon the UI15:58
reedwhich setting?15:59
mrmartinthe google account auth icon15:59
mrmartinit was disappeared at least two times before16:00
*** annegentle has quit IRC16:02
reedah, that's another one16:03
reedoh, I know the cause of that16:04
reedthe icon disappeared when an oauth Key was misteriosly disabled in the UI16:04
reedI think that once we put those key in settings.py we won't have the problem16:04
*** Marga_ has joined #openstack-community16:07
mrmartinWe need to move this setting to hiera16:11
mrmartinanyway we can go forward with infra patches, and Evgeny can work on fixes meanwhile, because we have an approval window, so it needs some time to roll out16:12
*** shakamunyi has joined #openstack-community16:16
reedcool16:17
reedfungi is available to help starting on monday16:17
reedplease coordinate with him after gerrit upgrade this weekend16:17
*** Marga_ has quit IRC16:21
*** Marga_ has joined #openstack-community16:22
*** Marga_ has quit IRC16:30
*** dizquierdo has quit IRC16:30
*** shakamunyi has quit IRC16:33
*** Marga_ has joined #openstack-community16:39
*** Marga_ has quit IRC16:43
*** packet has quit IRC16:46
*** shakamunyi has joined #openstack-community16:48
*** mwagner_lap has joined #openstack-community16:56
*** annegentle has joined #openstack-community16:59
*** Marga_ has joined #openstack-community17:03
*** Marga_ has quit IRC17:03
*** Marga_ has joined #openstack-community17:03
*** shakamunyi has quit IRC17:07
*** Evgeny has joined #openstack-community17:08
Evgenymrmartin, reed, hello. I've read Stef's email and the ticket, I'me aware of this possibility of google still not linking to old OpenID. This will require debugging on live site by logging.17:11
Evgenymrmartin, reed: Although I should recheck this last statement above on my dev laptop first for the case of possible regression.17:13
Evgenymrmartin, reed, I have a meeting in 15 minutes, after that I can work on this issue.17:13
reedEvgeny, ok17:13
mrmartinok17:17
*** shakamunyi has joined #openstack-community17:18
*** annegentle has quit IRC17:21
*** shakamunyi has quit IRC17:23
*** Evgeny has quit IRC17:26
*** shakamunyi has joined #openstack-community17:34
*** annegentle has joined #openstack-community17:43
*** sarob has joined #openstack-community17:46
*** coolsvap has quit IRC18:15
*** ozstacker has quit IRC18:15
*** ozstacker has joined #openstack-community18:16
*** Marga_ has quit IRC18:30
*** Marga_ has joined #openstack-community18:30
*** annegentle has quit IRC18:31
*** Marga_ has quit IRC18:35
*** Marga_ has joined #openstack-community18:35
*** Piet has quit IRC18:37
*** Marga_ has quit IRC18:37
*** Evgeny has joined #openstack-community18:56
reedmrmartin, Evgeny do you still need to VM instance on Rackspace?19:02
mrmartini don't need19:02
Evgenyreed, no19:02
reedif not, I'll switch it down and save some $ :)19:02
reedcool, thanks, i'm switching it off19:03
mrmartinok, I can keep the hp instance until we don't have a proper ask-dev.o.o in openstack infra19:03
reedEvgeny, what do you need exactly to test the G+ issue?19:08
Evgenyreed, I'm on the case now. First testing the migration, if I can.19:09
Evgenynext thing - add logging statements and deploy on live site.19:09
Evgenywhat can be done to mitigate:19:09
Evgenyif user logs in via google+19:09
*** Marga_ has joined #openstack-community19:09
Evgenywe display a message on the registration page (where user name and email are added)19:10
*** jehb has quit IRC19:10
Evgeny"Google+ authentication may not recover your existing Google Openid account, if you had a Google account on this site, click below to recover it via email"19:10
EvgenyI've added the recovery by email form on the same page19:11
EvgenyRight now what is missing is a message.19:11
Evgenythe issue is that migration worked on some sites and did not work on others19:11
Evgenyreed, ^ my answer is above19:12
reedEvgeny, let me understand better19:12
reedif Boris uses his email on https://askbot-dev.openstack.org/en/account/recover/ should he be able to reconcile the G+ account?19:13
Evgenyno19:13
Evgenyaskbot-dev is a different site19:14
reedin what sense?19:14
Evgenywell, here is the thing:19:14
*** jehb has joined #openstack-community19:14
Evgenyone of requests to g+ includes parameter "openid-realm"19:15
Evgenywhich currently is identical to the base url of the current site19:15
Evgenyin this case it is https://askbot-dev.openstack.org/19:15
Evgenyyour live site has domain ask.openstack.org19:15
reedoh, I see19:15
reedso we need to upgrade first and then we can really test if the upgrade is broken?19:16
Evgenythat said - on one production site I've tested on my own account19:16
Evgenyand I had the same issue - when logging in with g+ - it promts to create a new account19:16
Evgenyso the migration code although it is there is not 100% effective19:17
reedwhat if we change the /etc/hosts to ask.openstack.org: will that work?19:17
reedfor testing, I mean19:18
Evgenyit could be tested.19:18
mrmartinreed, yes, we need to update the settings in puppet19:18
Evgenyhowever some things may need to be changed on the askbot-dev19:18
mrmartinand be careful to not forget about /etc/hosts entry19:18
Evgenymrmartin: in settings.py there is "ALLOWED_HOSTS"19:18
Evgenyalso maybe change the domain name in Apache19:18
Evgenyif it permits such change19:19
reedwhat do you think? shall we try this path?19:19
reedwhat are the alternatives?19:19
EvgenyLet's try. This still is not guaranteed to work as google can compare the IP addresses of the real and dev site.19:19
mrmartinwe don't have too much option here, as openid have a callback url mechanism19:19
Evgenyi.e. may or may not work19:19
mrmartinI think it will work19:19
mrmartingive me a sec, I'll rewrite the site parameters and rerun puppet19:20
reedok, let's give it a shot19:20
Evgenyalso in site live settings APP_URL will need to be adjusted19:20
mrmartinyeah19:22
EvgenyAlso - to test the dev site needs to be seeded with the openid data19:23
Evgenyif openid account is not there already (in the ask site itself) there is nothing to migrate19:24
Evgenyand in such case prompt to create new account is expected19:24
EvgenyI.e. on a blank dev site it is impossible to test the migration19:24
Evgenyunless at least user accounts with the login data associated is copied from the live site.19:25
mrmartindone19:25
mrmartinto /etc/hosts file: 15.125.72.80askbot-dev.openstack.org ask.openstack.org19:25
mrmartinEvgeny, we are working from a backup here19:26
mrmartinif it is out of date, we can ask fungi to create a new one for us19:26
*** mwagner_lap has quit IRC19:26
reedguys, I have a bit of an emergency here, I have to be afk for a while, 30min or so19:27
reedplease proceed without me19:27
mrmartinok.19:28
reedah, you can't until I change the Google auth stuff19:28
reedargh19:28
mrmartinok, google auth changed19:34
mrmartinI can reach to askbot account page, but I didn't have an openid account there previously19:34
mrmartinEvgeny: can you test this somehow?19:35
Evgenymrmartin, reed: it's asking to register and there is error message "internal error occured"19:37
Evgenywith some numeric code19:37
mrmartinyeah, it comes from the captcha service19:37
Evgeny^ that after clicking the G+ login button19:38
EvgenyMaybe try to disable captcha for now?19:38
mrmartinwhere can I disable? in settings.py?19:39
mrmartinI found this setting there: RECAPTCHA_USE_SSL = True19:40
Evgenycan be "ASKBOT_USE_RECAPTCHA = False"19:40
Evgenyalso in live settings19:40
Evgenyit must be True19:40
Evgeny(the use ssl)19:40
mrmartinok, it is disabled now19:41
EvgenyThe same, asking me to create an account19:44
EvgenyI don't remember if I have an openid record there19:44
mrmartincan we check it somehow in the db?19:49
EvgenyYes, find user with email evgeny.fadeev@gmail.com19:51
Evgenythen records19:52
EvgenyUserAssociation where user=<user as found above>19:52
mrmartinyep, you had a google openid19:59
Evgenymrmartin: most efficient is to debug with pdb and run site with runserver20:01
mrmartinwhat I need to debug?20:01
Evgenyinstead of apache20:01
Evgenyaskbot/deps/django_authopenid/views.py around line 33820:03
*** packet has joined #openstack-community20:06
*** DrBacchus has joined #openstack-community20:10
mrmartinand what we need to test? whether the google+ sends back to email address or what?20:13
*** rbowen has quit IRC20:14
*** shakamunyi has quit IRC20:17
mrmartinEvgeny, it is entering to the "if openid_url:" case20:19
Evgenythat's good20:19
Evgenywhat is openid_url?20:20
Evgenyis it a real url?20:20
mrmartinhttp://paste.openstack.org/show/217363/20:21
*** tiswanso has quit IRC20:21
mrmartinyeah, it is a nice google url20:21
Evgenystep through there, it should be seen why it fails to find the matching user20:22
Evgenypossibly that openid url has changed20:22
Evgenyif that's so - we have no option but to recover account via email20:23
mrmartinbut20:23
mrmartinit was with my google account20:23
mrmartinand I didn't have a previous openid20:23
mrmartinso you need to try this out with your account20:24
Evgenyif openid_url returned by g+ is different from what you have in the user association20:24
Evgenythen there will be no matching user20:24
Evgeny(barring some other silly reason due to some bug in the askbot code)20:25
*** annegentle has joined #openstack-community20:25
*** annegentle has quit IRC20:26
mrmartinhow can you debug this?20:26
*** annegentle has joined #openstack-community20:26
mrmartinI've restarted the server meanwhile20:26
mrmartinplz try to login with your google account20:26
mrmartinand I can check what happens there with pdb20:27
Evgenyserver not available to me20:27
EvgenyI get connection refused error20:28
mrmartinstrange works for me20:28
mrmartinwhat is the ip of the server you're checking?20:28
Evgenyi have this in my hosts20:29
Evgeny15.125.72.80 askbot-dev.openstack.org ask.openstack.org20:29
Evgenyso it returns the user instance?20:29
EvgenyIf value of 'user' around that point from the paste above is not None20:30
mrmartinok, and you still receive connection refused?20:30
Evgenyyou should be logged in20:31
mrmartinok, I get this part20:31
Evgenyyes20:31
Evgeny"this webpage is not available" ERR_CONNECTION_REFUSED20:31
Evgenyso were you able to log in?20:31
mrmartinyeah20:31
Evgenyand recovered openid?20:32
mrmartinstrange, because I can reach the site20:32
Evgeny"this is chile"TM20:32
EvgenyI get strange network issues from here at times20:33
mrmartinfor me it is going through the G+ auth, the only thing that happens here, that I need to provide my askbot account20:33
mrmartinoh ok20:33
Evgeny?20:33
Evgenythis part I don't understand20:34
Evgenywhat do you mean by "need to provide my askbot account"20:34
mrmartinso the openid auth works well, but I didn't have an account in askbount20:34
mrmartinaskbot20:34
Evgenyas far as I understand - you log in, g+ gives openid_url, but you previously did not have that url20:36
mrmartinyes20:36
mrmartinso after g+ auth20:36
Evgenyon the ask site, therefore you are prompted to create a new account - is this correct?20:36
mrmartinaskbot is asking my screen name and email address20:36
mrmartinthis two20:36
Evgenyok20:37
mrmartinanyway20:37
mrmartinif you setup a local deployment20:37
Evgenyis your test server running on https?20:37
mrmartinand set the local domain of your askbot to ask.openstack.org in hosts file20:37
mrmartinyou can test the g+ auth20:37
*** julim has quit IRC20:37
Evgenythat's good20:37
mrmartinand I've post your stored openid url from user assoc table in priv20:38
EvgenyWell as far as we can see - openid_url is returned20:38
mrmartinso you can compare the too values20:38
mrmartinthe only thing, that g+ url is set to https20:38
mrmartinbut if you like I can change it back to http20:38
EvgenyThe thing is that - if the value returned by g+ is different, there is nothing I can do20:39
mrmartindoesn't this auth code returns the email address?20:40
Evgenygoogle did change my openid url at times20:40
mrmartinwe would pair the accounts based on email20:40
Evgenythis code does not yet utilize email address20:40
Evgenythis needs to be fixed20:40
Evgenyon the askbot side20:40
Evgenytherefore user is prompted to enter email even though g+ can give it20:40
Evgenythis applies to other login methods as well20:41
mrmartinok, but theoretically the old account can be joined through email address - until the user not changing that to something new20:41
EvgenyIMO there is no sense in testing this further.20:41
Evgenygood idea - I did not think of that20:42
Evgenyit is also possible that openid url points to one account and email address - to another account :)20:43
Evgenynot very likely, but possible20:43
mrmartinusually people who used google openid for auth had a gmail address, I guess20:43
mrmartinit is about the "ownership" of an email address,20:44
mrmartinso I suggest to think about this as an alternative solution, I need to go, because getting a bit late here20:44
mrmartinI write a memo for Stefano20:45
Evgenyright20:45
EvgenyAnyway - I think we are good to deploy20:45
Evgenyperhaps what can be changed - is wording on the "registration" page (with email and screen name)20:45
Evgenyas not all Google accounts may be recoverable20:46
Evgeny- using email as a link is an option20:46
Evgenylet me see.20:46
Evgenymrmartin: I can make this part correctly by Monday20:47
mrmartinok, great20:48
*** shakamunyi has joined #openstack-community20:48
mrmartingreat, email sent20:52
mrmartinhave a nice weekend there20:52
Evgenythank you, you too.20:53
*** mrmartin has quit IRC21:01
*** shakamunyi has quit IRC21:03
*** shakamunyi has joined #openstack-community21:22
*** Evgeny has quit IRC21:29
*** DrBacchus has quit IRC21:35
*** Piet has joined #openstack-community21:46
*** shakamunyi has quit IRC22:04
*** barra204 has joined #openstack-community22:05
*** EmilienM is now known as EmilienM|afk22:08
*** cdent has quit IRC22:23
*** annegentle has quit IRC22:23
*** annegentle has joined #openstack-community22:36
*** julim has joined #openstack-community22:44
*** annegentle has quit IRC23:09
*** packet has quit IRC23:15
*** barra204 has quit IRC23:22
*** electrocucaracha has joined #openstack-community23:22
*** electrocucaracha has quit IRC23:28
*** mattgriffin has quit IRC23:28
*** electrocucaracha has joined #openstack-community23:29

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!