Tuesday, 2013-09-17

*** SumitNaiksatam has quit IRC00:00
*** michchap has quit IRC00:01
*** jbresnah has quit IRC00:04
*** dims has joined #openstack-dev00:04
*** spzala has joined #openstack-dev00:07
*** senk has joined #openstack-dev00:08
*** sthaha has joined #openstack-dev00:09
*** pixelb has quit IRC00:09
morganfainbergjamielennox, my eyes are a bit crossed but finally got through the httpretty patch of yours00:11
morganfainbergjamielennox, sorry it took so long.00:12
*** hemna is now known as hemnafk00:12
*** henrynash has quit IRC00:12
*** jimfehlig has joined #openstack-dev00:13
*** cmcnamara has quit IRC00:14
*** amohn9 has joined #openstack-dev00:17
*** matiu has quit IRC00:18
jamielennoxmorganfainberg, ah, great!00:21
jamielennoxmorganfainberg, it happened before i put a review on your cache one i was looking at last week00:21
morganfainberghehe00:21
*** spzala has quit IRC00:22
jamielennoxmorganfainberg, oo +2, i'll admit i've been waiting for this one for a while00:22
jamielennoxit's just lucky nobody else is throwing up too many patches around client at the moment00:22
morganfainbergjamielennox, it really only took me 7 attempts to read through it00:22
*** Ryan_Lane has quit IRC00:23
morganfainbergjamielennox, i opted to review yours first before other test ones.00:23
jamielennoxit's big - i kept thinking of breaking it down but it didn't really make any different00:23
*** alop has quit IRC00:23
jamielennoxalso very happy that it's a net -1000 loc00:23
morganfainbergsince it' had been laying around for a bit… and i was trying to get through it00:23
jamielennoxso mocking requests will mostly be dead - everyone doing client now has to learn the new way00:24
morganfainbergyeah00:24
morganfainbergthat is going to be a bit painful.00:24
morganfainbergbut, better to do it sooner vs. later00:24
*** marun has quit IRC00:24
*** litong has joined #openstack-dev00:26
ayoungmorganfainberg, is that one approved now?00:27
morganfainbergayoung, yes00:27
ayoungcoo00:28
*** stevemar has joined #openstack-dev00:28
*** litong has quit IRC00:29
morganfainbergayoung, yeah it's much cleaner, once you get past the conversion.00:32
*** lnxnut has joined #openstack-dev00:32
*** colinmcnamara has joined #openstack-dev00:32
*** cyeoh_ has joined #openstack-dev00:35
*** cyeoh_ has quit IRC00:35
*** cyeoh_ has joined #openstack-dev00:35
*** cyeoh_ is now known as cyeoh00:35
*** faramir has joined #openstack-dev00:35
*** senk has quit IRC00:37
*** sandywalsh has quit IRC00:40
*** mrodden has joined #openstack-dev00:40
*** bdpayne has quit IRC00:41
ayoungmorganfainberg, anything going to happen with https://review.openstack.org/#/c/45649/?00:41
ayoungugh...I hate it when I do that00:41
ayounghttps://review.openstack.org/#/c/45649/00:41
morganfainbergayoung, my client figured it out.00:41
*** colinmcnamara has quit IRC00:41
*** cmcnamara has joined #openstack-dev00:42
*** lnxnut has quit IRC00:42
morganfainbergayoung, i was putting together the increase in user_id length today, and the fix to us the full DN to make this patch depend on that00:42
ayoungnice00:42
*** mrodden1 has joined #openstack-dev00:42
morganfainbergayoung, but mondays are full of meetings, so it's slow going00:42
*** lnxnut has joined #openstack-dev00:42
*** colinmcnamara has joined #openstack-dev00:42
*** mrodden has quit IRC00:44
*** dprince has quit IRC00:45
*** marun has joined #openstack-dev00:45
*** mrodden has joined #openstack-dev00:45
zulany oslo-config core devs around? https://review.openstack.org/#/c/43498/00:45
*** mrodden1 has quit IRC00:46
*** senk has joined #openstack-dev00:47
*** senk has quit IRC00:47
mikalzul: approved00:47
zulmikal:  thanks00:48
mikalzul: NP00:48
*** senk has joined #openstack-dev00:49
*** angdraug has quit IRC00:50
*** dstanek has quit IRC00:51
*** colinmcnamara has quit IRC00:52
*** sarob has joined #openstack-dev00:52
*** jasondotstar has joined #openstack-dev00:53
*** shakayumi has quit IRC00:55
*** slagle has quit IRC00:56
*** jprovazn has quit IRC00:56
*** martyntaylor has quit IRC00:57
*** shakayumi has joined #openstack-dev00:57
*** gmurphy has quit IRC00:58
*** shakayumi has quit IRC00:58
*** amohn9 has quit IRC00:58
*** anniec has quit IRC01:02
*** anniec has joined #openstack-dev01:05
*** gongysh has quit IRC01:06
*** senk has quit IRC01:06
*** rwsu has quit IRC01:07
*** sandeepr_ltp has quit IRC01:08
*** senk has joined #openstack-dev01:08
*** gmurphy has joined #openstack-dev01:11
*** danwent has quit IRC01:17
*** amohn9 has joined #openstack-dev01:19
*** vkmc has quit IRC01:20
*** jbresnah has joined #openstack-dev01:21
*** jergerber has quit IRC01:23
*** jergerber has joined #openstack-dev01:23
*** morazi has quit IRC01:23
*** jasdeepH has joined #openstack-dev01:28
*** neelashah has joined #openstack-dev01:29
*** nati_ueno has quit IRC01:29
*** gimps_ has joined #openstack-dev01:31
*** ljjjustin has joined #openstack-dev01:37
*** yaguang has joined #openstack-dev01:38
*** sarob has quit IRC01:38
*** sarob has joined #openstack-dev01:38
*** sarob has quit IRC01:42
*** zhikunliu has joined #openstack-dev01:43
*** jergerber has quit IRC01:43
*** edmund has joined #openstack-dev01:45
*** hemna has joined #openstack-dev01:45
*** Ruetobas has joined #openstack-dev01:45
*** amohn9 has quit IRC01:45
*** gongysh has joined #openstack-dev01:48
*** erkules has quit IRC01:49
*** jasondotstar has quit IRC01:49
*** nati_ueno has joined #openstack-dev01:49
*** Ruetobas has quit IRC01:50
*** novas0x2a|laptop has quit IRC01:51
*** jayg is now known as jayg|g0n301:51
*** Ruetobas has joined #openstack-dev01:56
*** amohn9 has joined #openstack-dev02:02
*** sarob has joined #openstack-dev02:02
ayoungmorganfainberg, I was just surveyingthe viability of doing full DNs as the user Ids in Keystone.  It is not going to happen in Havana02:07
*** amohn9 has quit IRC02:10
stevemarayoung: let Havana finish in peace :)02:14
*** grapsus_ has quit IRC02:15
*** lbragstad has joined #openstack-dev02:18
ayoungstevemar, yeah.  BTW, I think I split out the oauth dep.  See this:02:23
*** anniec has quit IRC02:23
ayoungstevemar, https://review.openstack.org/#/c/46797/02:24
*** SumitNaiksatam has joined #openstack-dev02:24
*** alexxu has joined #openstack-dev02:25
stevemarayoung: dependency.optional eh02:26
stevemarahh brant is doing that one02:26
*** amohn9 has joined #openstack-dev02:27
*** Ruetobas has quit IRC02:30
*** Shaan7 has quit IRC02:31
*** Shaan7 has joined #openstack-dev02:33
morganfainbergayoung, ay02:36
morganfainbergayoung, ah02:36
morganfainbergayoung, too much change?02:36
morganfainbergayoung, i hadn't gotten that far yet, was just working on the migrate for 64->255 characters in the user_id fields in SQL assignment02:37
morganfainbergayoung, well my "cleanup" patchset shouldn't affect LDAP Identitty w/ SQL assignment, we could probably just call per-domain-identity dead until Icehouse02:38
*** danwent has joined #openstack-dev02:38
*** amohn9 has quit IRC02:38
ayoungmorganfainberg, keep at it...the thing is that we generate the DN from the id value.  If we accept the whole DN, we need to stop autogenerating the dn...probably should match it to another field instead02:39
morganfainbergayoung, ahh.02:39
ayoungmorganfainberg, for example, in freeipa, the uid field is the first section of the DN02:39
ayoungso I am cn=ayoung,ou=User,cn=openstack,cn=freeipa,cn=org02:40
morganfainbergayoung, perhaps we should store the DN separately, and still generate a "random" user_id (UUID)?02:40
ayoungwe have code that is doing just that02:40
morganfainbergor.. just go back to tightly coupling domain id to the user id02:40
ayoungbut it doesn't work for our needs02:40
morganfainbergso the lookup is easy02:40
morganfainberggo back to the idea of, that is.02:41
ayoungmorganfainberg, what if we had long ids and short ids, and the long ids had the domain in them?02:41
*** CaptTofu has quit IRC02:41
morganfainbergayoung, that would work02:41
morganfainbergayoung, it also solves the issue of multiple SQL backed domains02:42
morganfainbergidentity stores that is02:42
ayoungmorganfainberg, when assigning a user to a project, if the short id is used, it is in the same domain02:42
ayoungif hte long form, it is cross domain02:42
*** ljjjustin has quit IRC02:42
morganfainbergcould also, if a duplicate has occured, return an "ambiguous" error, and request the domain be supplied as well for auth (if it isn't)02:42
*** Ruetobas has joined #openstack-dev02:42
ayoungmorganfainberg, we'd still need to stretch the id fields in the assignment backend02:43
ayoungneed to add domain info in there02:43
morganfainbergayoung, right.02:43
ayoungmorganfainberg, I'm going to sleep on that idea.  We can discuss at Tomorrow's meeting02:44
morganfainbergayoung, sounds good02:44
morganfainbergayoung, catch ya tomorrow02:44
ayoungmorganfainberg, BTW, wanna see something cool?02:45
morganfainbergayoung, always02:45
ayoungmorganfainberg, http://adam.younglogic.com/2013/09/register-vm-freeipa/02:46
morganfainbergayoung, NICE! makes me want to run freeipa02:46
*** networkstatic has joined #openstack-dev02:47
morganfainbergi actually wanted to run freeipa about a year ago.  unfortunately, freeipa server was not easy to setup on ubuntu02:47
ayoungmorganfainberg, it rocks02:47
morganfainbergat that time.02:47
ayoungstill isnt'02:47
morganfainbergdon't know about now.02:47
*** Ruetobas has quit IRC02:47
ayoungmorganfainberg, so, the dogtag backedn (certificates) is JAva, and really custom deployment02:48
morganfainbergi also want to run Fedora  or similar instead.02:48
ayoungneed a slew of dependencies to get it to run02:48
morganfainbergayoung, ah. that could make it challenging02:48
ayoungmorganfainberg, I am running FreeIPA in a F19 cloud image02:48
ayoungVery light weight...02:48
morganfainbergayoung, i wanted to replace some of the headaches we worked around in oneiric w/ fedora and freeipa02:49
morganfainbergayoung, but we're heavily invested (currently) in the ubuntu way of things.  not a bad thing, just limits us in some regards02:49
ayoungFreeIPA does a lot of configuration for setting up the Directory server and Kerberos. THere are a few places where we need to make things less distro specific....we are specing out the work on it.02:50
*** Ruetobas has joined #openstack-dev02:50
morganfainbergi'd be moderately concerned about running FreeIPA server in the same cloud infrastructure i was intending to manage it with.02:50
ayoungmorganfainberg, OOO02:50
morganfainbergonly because i haven't sat down to think about the pitfalls.02:50
morganfainbergayoung, i'm pushing for OOO here.02:50
ayoungplay around with it.  It gets you a nice LDAP server, plus....02:51
morganfainbergayoung, but we're not ready yet.  since we aren't ready for that convo, i think the freeipa one needs to wait as well02:51
ayoungfor example, you can add a user to the "Wheel" group and then they get sudo ability on all machines02:51
morganfainbergayoung, i was using sssd and the patched openssh to do ssh-key deployments previously02:52
morganfainbergcentralized auth + a good backing store02:52
morganfainbergwin imo02:52
ayoungmorganfainberg, you can use it for development, and get comfortable with it.  And then when the time comes to have the convo you'll be like "gimme!"02:52
ayoungmorganfainberg, its cheap DNSaaS02:52
morganfainbergayoung, well i already started using fedora for my devstack :)02:52
morganfainbergmight as well go the next step!02:52
ayoungmorganfainberg, we have a cloud deployment here, and I am starting to use it more for development.  SO I set up the IPA server there, and now i have a rapid fire way to kcik off new vms.  I need to get Ubuntu and RHEL into the mix, so I can test things across multiple machines02:53
*** carl_baldwin has joined #openstack-dev02:54
ayoungand archs02:54
*** carl_baldwin has left #openstack-dev02:54
*** sarob has quit IRC02:54
morganfainbergayoung, thats awesome.  with your blog post, i'm totally going to play around with this stuff.02:54
ayoungmorganfainberg, just be aware that I am running the script in a VM that is already an ipa client...I am trying to figure out how to run it from my home machine, but I keep getting ipa: ERROR: Client is not configured. Run ipa-client-install.02:55
morganfainbergayoung, good to know02:55
morganfainbergayoung, maybe i'll wedge some salt-cloud in there to help me with that02:56
ayoungmorganfainberg, I've not worked with salt....02:56
*** Ruetobas has quit IRC02:57
morganfainbergayoung, it has some cool features02:57
ayoungOK, bed.02:57
*** ayoung is now known as ayoung-ZzZzZzZ02:57
*** amohn9 has joined #openstack-dev02:57
*** ayoung-ZzZzZzZ has quit IRC03:00
*** Ruetobas has joined #openstack-dev03:02
*** networkstatic has quit IRC03:03
*** sandeepr_ltp has joined #openstack-dev03:05
*** amohn9 has quit IRC03:05
*** zhikunliu has quit IRC03:06
*** lnxnut has quit IRC03:10
*** paragan has joined #openstack-dev03:13
*** paragan has joined #openstack-dev03:13
*** zhikunliu has joined #openstack-dev03:13
*** tserong has quit IRC03:14
*** otherwiseguy has joined #openstack-dev03:15
*** vipul has quit IRC03:16
*** michchap_ has quit IRC03:17
*** vipul has joined #openstack-dev03:17
*** michchap has joined #openstack-dev03:17
*** michchap_ has joined #openstack-dev03:21
*** michchap has quit IRC03:21
*** amohn9 has joined #openstack-dev03:23
*** senk has quit IRC03:24
*** vipul is now known as vipul-away03:35
*** amohn9 has quit IRC03:37
*** michchap_ has quit IRC03:37
*** michchap has joined #openstack-dev03:38
*** vipul-away is now known as vipul03:39
*** edmund has quit IRC03:39
*** afazekas_zz is now known as afazekas03:40
*** Ryan_Lane has joined #openstack-dev03:43
*** gmurphy has quit IRC03:45
*** erkules has joined #openstack-dev03:45
*** sarob has joined #openstack-dev03:46
*** arosen1 has joined #openstack-dev03:46
*** gordc has joined #openstack-dev03:50
*** senk has joined #openstack-dev03:53
*** arosen1 has quit IRC03:54
*** amohn9 has joined #openstack-dev03:54
*** arosen1 has joined #openstack-dev03:54
*** gmurphy has joined #openstack-dev03:54
*** sandeepr_ltp has quit IRC03:56
*** amohn9 has quit IRC03:58
*** arosen1 has quit IRC03:58
*** sandeepr_ltp has joined #openstack-dev03:58
*** jprovazn has joined #openstack-dev03:59
*** dims has quit IRC04:01
*** zhikunliu has quit IRC04:07
*** amotoki has joined #openstack-dev04:07
*** jimfehlig has quit IRC04:08
*** jbresnah has quit IRC04:08
*** chandankumar has joined #openstack-dev04:08
*** ljjjustin has joined #openstack-dev04:10
*** markwash has quit IRC04:11
*** markwash has joined #openstack-dev04:12
*** gmurphy has quit IRC04:12
*** jprovazn has quit IRC04:13
*** sandeepr_ltp has quit IRC04:14
*** sandeepr_ltp has joined #openstack-dev04:14
*** cmcnamara has quit IRC04:17
*** yongli_away is now known as yongli04:17
*** amohn9 has joined #openstack-dev04:18
*** lnxnut has joined #openstack-dev04:21
*** zhikunliu has joined #openstack-dev04:25
*** lnxnut has quit IRC04:26
*** sandeepr_ltp has quit IRC04:26
*** coolsvap has joined #openstack-dev04:26
*** sandeepr_ltp has joined #openstack-dev04:27
*** tserong has joined #openstack-dev04:27
*** tserong has joined #openstack-dev04:27
*** amohn9 has quit IRC04:27
*** lbragstad has quit IRC04:33
*** senk has quit IRC04:36
*** prekarat has joined #openstack-dev04:38
*** otherwiseguy has quit IRC04:39
*** neelashah has quit IRC04:40
*** sridevi has joined #openstack-dev04:41
*** sarob has quit IRC04:43
*** sarob has joined #openstack-dev04:44
*** shinylasers has quit IRC04:44
*** sandeepr_ltp has quit IRC04:46
*** CaptTofu has joined #openstack-dev04:46
*** amohn9 has joined #openstack-dev04:48
*** gmurphy has joined #openstack-dev04:55
*** DinaBelova has joined #openstack-dev04:56
*** amohn9 has quit IRC04:56
*** gordc has quit IRC05:03
*** markwash has quit IRC05:07
*** afazekas is now known as __afazekas05:07
*** danwent has quit IRC05:07
*** stevemar has quit IRC05:08
*** wfoster_away is now known as wfoster05:14
*** amohn9 has joined #openstack-dev05:14
*** shinylasers has joined #openstack-dev05:16
*** romcheg has joined #openstack-dev05:17
*** markwash has joined #openstack-dev05:19
*** coolsvap has quit IRC05:20
*** SergeyLukjanov has joined #openstack-dev05:20
*** garyk has quit IRC05:22
*** sarob has quit IRC05:23
*** comay has quit IRC05:24
*** sandeepr_ltp has joined #openstack-dev05:24
*** comay has joined #openstack-dev05:24
*** comay has quit IRC05:24
*** Mandell has quit IRC05:25
*** cmcnamara has joined #openstack-dev05:27
*** rushiagr has joined #openstack-dev05:28
*** prekarat has quit IRC05:28
*** prekarat has joined #openstack-dev05:30
*** prekarat has quit IRC05:31
*** afazekas has joined #openstack-dev05:32
*** cmcnamara has quit IRC05:32
*** prekarat has joined #openstack-dev05:33
*** yuan has joined #openstack-dev05:33
*** arnaud__ has quit IRC05:37
*** amohn9 has quit IRC05:40
*** markwash has quit IRC05:41
*** wenjianhn has joined #openstack-dev05:43
*** sushils has joined #openstack-dev05:44
*** egallen has joined #openstack-dev05:44
*** aeperezt has quit IRC05:44
*** arnaud has joined #openstack-dev05:44
*** arnaud has left #openstack-dev05:45
*** nshaikh has joined #openstack-dev05:45
*** vartom13 has joined #openstack-dev05:46
*** kuuudos has joined #openstack-dev05:47
*** eglynn has joined #openstack-dev05:47
*** nil1511 has joined #openstack-dev05:48
*** DinaBelova has quit IRC05:49
*** gmurphy has quit IRC05:49
*** Mandell has joined #openstack-dev05:50
*** yaguang has quit IRC05:51
*** gmurphy has joined #openstack-dev05:53
*** romcheg has left #openstack-dev05:53
*** eglynn has quit IRC05:54
*** zaitcev has quit IRC05:54
*** SergeyLukjanov has quit IRC05:55
*** ondergetekende_ has joined #openstack-dev05:57
*** nil1511 has quit IRC05:57
*** boris-42 has joined #openstack-dev05:58
*** luisg has joined #openstack-dev05:59
*** wfoster is now known as wfoster_away05:59
*** sthaha has quit IRC06:00
*** ilyashakhat_ has joined #openstack-dev06:00
*** markwash has joined #openstack-dev06:00
*** enikanorov has joined #openstack-dev06:00
*** yaguang has joined #openstack-dev06:01
*** sahid has joined #openstack-dev06:01
*** branen__ has joined #openstack-dev06:02
*** ameade_ has joined #openstack-dev06:03
*** mkerrin1 has joined #openstack-dev06:03
*** kmartin has joined #openstack-dev06:03
*** nijaba_ has joined #openstack-dev06:03
*** egallen has quit IRC06:04
*** promethe1nfire has joined #openstack-dev06:04
*** fabio__ has joined #openstack-dev06:04
*** nil1511 has joined #openstack-dev06:04
*** lifeless_ has joined #openstack-dev06:05
*** jcapel_ has joined #openstack-dev06:06
*** wfoster_away is now known as wfoster06:07
*** kushal has joined #openstack-dev06:08
*** prometheanfire has quit IRC06:08
*** promethe1nfire is now known as prometheanfire06:08
*** KurtMartin has quit IRC06:09
*** ilyashakhat has quit IRC06:09
*** bourke has quit IRC06:09
*** jpeeler has quit IRC06:09
*** mkerrin has quit IRC06:09
*** nijaba has quit IRC06:09
*** lifeless has quit IRC06:09
*** luis has quit IRC06:09
*** fabio_ has quit IRC06:09
*** dsirrine has quit IRC06:09
*** branen_ has quit IRC06:09
*** pasquier-s has quit IRC06:09
*** enikanorov_ has quit IRC06:09
*** fungi has quit IRC06:09
*** al-maisan has quit IRC06:09
*** ameade has quit IRC06:09
*** adepti37 has quit IRC06:09
*** jcapel has quit IRC06:09
*** bourke has joined #openstack-dev06:09
*** al-maisan has joined #openstack-dev06:09
*** openstackstatus has quit IRC06:13
*** doude_ has quit IRC06:13
*** openstack has joined #openstack-dev06:18
*** galstrom has joined #openstack-dev06:19
*** halfie_ has joined #openstack-dev06:19
*** sileht has joined #openstack-dev06:19
*** gmurphy has quit IRC06:19
*** afazekas is now known as afazekas_no_irq06:19
*** gmurphy has joined #openstack-dev06:20
*** sushil_ has joined #openstack-dev06:20
*** halfie_ has quit IRC06:20
*** halfie_ has joined #openstack-dev06:20
*** halfie_ is now known as halfie06:20
*** redbo_ has joined #openstack-dev06:20
*** lon_T2 has joined #openstack-dev06:21
*** sdague_ has joined #openstack-dev06:21
*** sgran has joined #openstack-dev06:21
*** toabctl_ has joined #openstack-dev06:22
*** BLZbubba_ has joined #openstack-dev06:22
*** sahid has quit IRC06:23
*** promethe1nfire has joined #openstack-dev06:23
*** prad_ has joined #openstack-dev06:23
*** prometheanfire has quit IRC06:23
*** promethe1nfire is now known as prometheanfire06:23
*** ilyashakhat_ has quit IRC06:23
*** sushils has quit IRC06:23
*** comstud_ has joined #openstack-dev06:23
*** sushil_ is now known as sushils06:23
*** rainya has quit IRC06:23
*** sdague has quit IRC06:23
*** BLZbubba has quit IRC06:23
*** redbo has quit IRC06:23
*** lon has quit IRC06:23
*** sdague_ is now known as sdague06:23
*** sandeepr_ltp has quit IRC06:24
*** toabctl has quit IRC06:24
*** redbo_ is now known as redbo06:24
*** kashyap has quit IRC06:24
*** utlemming has quit IRC06:24
*** comstud has quit IRC06:24
*** spn has quit IRC06:24
*** prad has quit IRC06:24
*** mikemar10 has quit IRC06:24
*** dcmorton has quit IRC06:24
*** dragondm has quit IRC06:24
*** prad_ is now known as prad06:24
*** mrunge has joined #openstack-dev06:24
*** sandeepr_ltp has joined #openstack-dev06:24
*** bourke has quit IRC06:25
*** mikemar10 has joined #openstack-dev06:25
*** rainya has joined #openstack-dev06:25
*** kashyap has joined #openstack-dev06:25
*** imsurit has joined #openstack-dev06:25
*** bourke has joined #openstack-dev06:26
*** dcmorton has joined #openstack-dev06:26
*** boris-42 has quit IRC06:26
*** dragondm has joined #openstack-dev06:26
*** yolanda has joined #openstack-dev06:27
*** Ruetobas has quit IRC06:28
*** markwash has quit IRC06:28
*** MaxV has quit IRC06:28
*** sushils has quit IRC06:29
*** slagle has joined #openstack-dev06:30
*** rdopieralski has joined #openstack-dev06:31
*** doron_afk has joined #openstack-dev06:32
*** grapsus_ has joined #openstack-dev06:33
*** MaxV has joined #openstack-dev06:35
*** AnilV4 has joined #openstack-dev06:36
*** odyssey4me has joined #openstack-dev06:36
*** Ruetobas has joined #openstack-dev06:36
*** slagle has quit IRC06:37
*** MaxV has quit IRC06:39
*** doron_afk is now known as doron06:40
*** o_petit has joined #openstack-dev06:41
*** kpavel has joined #openstack-dev06:42
*** sprow_ has joined #openstack-dev06:43
*** garyk has joined #openstack-dev06:46
*** sarob has quit IRC06:46
*** doron is now known as doron_afk06:50
*** wfoster is now known as wfoster_away06:50
*** utlemming has joined #openstack-dev06:53
*** ilyashakhat has joined #openstack-dev06:53
*** BobBallAway has joined #openstack-dev06:53
*** thingee has joined #openstack-dev06:53
*** Ng has joined #openstack-dev06:53
*** jbresnah has joined #openstack-dev06:53
*** paragan has quit IRC06:53
*** paragan has joined #openstack-dev06:53
*** branen__ has quit IRC06:53
*** branen__ has joined #openstack-dev06:53
*** mkerrin1 has quit IRC06:53
*** mkerrin1 has joined #openstack-dev06:53
*** kmartin has quit IRC06:53
*** kmartin has joined #openstack-dev06:53
*** fabio__ has quit IRC06:53
*** fabio__ has joined #openstack-dev06:53
*** lon_T2 has quit IRC06:53
*** lon_T2 has joined #openstack-dev06:53
*** sandeepr_ltp has quit IRC06:53
*** sandeepr_ltp has joined #openstack-dev06:53
*** kashyap has quit IRC06:53
*** kashyap has joined #openstack-dev06:53
*** imsurit has quit IRC06:53
*** imsurit has joined #openstack-dev06:53
*** bourke has quit IRC06:53
*** bourke has joined #openstack-dev06:53
*** doron_afk has quit IRC06:53
*** doron_afk has joined #openstack-dev06:53
*** AnilV4 has quit IRC06:53
*** AnilV4 has joined #openstack-dev06:53
*** kpavel has quit IRC06:53
*** kpavel has joined #openstack-dev06:53
*** sprow_ has quit IRC06:53
*** sprow_ has joined #openstack-dev06:53
*** doron_afk is now known as doron06:56
*** o_petit has quit IRC06:56
*** wfoster_away is now known as wfoster06:56
*** tkammer has joined #openstack-dev06:57
*** devvesa has joined #openstack-dev06:57
*** xga_ has joined #openstack-dev06:58
*** xga has joined #openstack-dev06:58
*** egallen has joined #openstack-dev06:58
*** reidrac has joined #openstack-dev06:58
*** prekarat has quit IRC07:05
*** prekarat has joined #openstack-dev07:06
*** prekarat has quit IRC07:06
*** prekarat has joined #openstack-dev07:06
*** ljjjustin has quit IRC07:06
*** SergeyLukjanov has joined #openstack-dev07:10
*** o_petit has joined #openstack-dev07:11
*** iartarisi has joined #openstack-dev07:12
*** SlickNik has quit IRC07:14
*** vipul is now known as vipul-away07:14
*** doron is now known as doron_afk07:15
*** SlickNik has joined #openstack-dev07:15
*** corXi has joined #openstack-dev07:16
*** tkammer has quit IRC07:16
*** vipul-away is now known as vipul07:16
*** sandeepr_ltp has quit IRC07:19
*** DinaBelova has joined #openstack-dev07:19
*** sandeepr_ltp has joined #openstack-dev07:20
*** AnilV4 has quit IRC07:22
*** yaguang_ has quit IRC07:23
*** jbresnah has quit IRC07:24
*** yaguang has joined #openstack-dev07:24
*** AnilV4 has joined #openstack-dev07:25
*** sergmelikyan has joined #openstack-dev07:26
*** jaimegil has joined #openstack-dev07:27
*** corXi has quit IRC07:28
*** corXi has joined #openstack-dev07:28
*** giulivo has joined #openstack-dev07:30
*** gaelL has quit IRC07:30
*** henrynash has joined #openstack-dev07:31
*** johnthetubaguy has joined #openstack-dev07:31
*** corXi has quit IRC07:33
*** JordanP has joined #openstack-dev07:35
*** sandeepr_ltp has quit IRC07:37
*** cyeoh has quit IRC07:37
*** corXi has joined #openstack-dev07:37
*** sandeepr_ltp has joined #openstack-dev07:38
*** cyeoh has joined #openstack-dev07:38
*** enikanorov-w has quit IRC07:42
*** enikanorov-w has joined #openstack-dev07:43
*** AndreyGrebenniko has quit IRC07:46
*** AndreyGrebenniko has joined #openstack-dev07:46
*** romcheg_ has joined #openstack-dev07:46
*** davidhadas has joined #openstack-dev07:47
*** jtomasek has joined #openstack-dev07:48
*** tkammer has joined #openstack-dev07:49
*** jistr has joined #openstack-dev07:50
*** devvesa has quit IRC07:51
*** iartarisi has quit IRC07:54
*** iartaris` has joined #openstack-dev07:54
*** nati_ueno has quit IRC07:57
*** gaelL has joined #openstack-dev07:58
*** zhikunliu has quit IRC07:58
*** mmagr has joined #openstack-dev07:58
*** xga__ has joined #openstack-dev08:00
*** tstevenson has quit IRC08:00
*** MaxV has joined #openstack-dev08:02
*** jpich has joined #openstack-dev08:03
*** boden has joined #openstack-dev08:03
*** Ryan_Lane has quit IRC08:03
*** xga_ has quit IRC08:03
*** xga has quit IRC08:03
*** xga has joined #openstack-dev08:04
*** jbresnah has joined #openstack-dev08:06
*** zhikunliu has joined #openstack-dev08:07
*** fbo_away is now known as fbo08:07
*** DinaBelova has quit IRC08:08
*** pixelb has joined #openstack-dev08:09
*** yassine has joined #openstack-dev08:10
*** DinaBelova has joined #openstack-dev08:11
*** Kezar has joined #openstack-dev08:11
*** davidhadas has quit IRC08:11
*** cyeoh has quit IRC08:11
*** cyeoh has joined #openstack-dev08:12
*** athomas has joined #openstack-dev08:13
*** SergeyLukjanov has quit IRC08:13
*** neoXsys has quit IRC08:16
*** romcheg_ has quit IRC08:17
*** oubiwann has quit IRC08:19
*** romcheg_ has joined #openstack-dev08:19
*** SergeyLukjanov has joined #openstack-dev08:20
*** spn has joined #openstack-dev08:22
*** oubiwann has joined #openstack-dev08:22
*** sprow_ has quit IRC08:26
*** romcheg_ has left #openstack-dev08:26
*** irimi has joined #openstack-dev08:30
*** neoXsys has joined #openstack-dev08:30
*** eglynn has joined #openstack-dev08:30
*** bashok has joined #openstack-dev08:32
*** xga has quit IRC08:32
*** safchain has joined #openstack-dev08:32
*** davidhadas has joined #openstack-dev08:32
*** BobBallAway is now known as BobBall08:33
*** xga__ has quit IRC08:36
*** kuuudos has quit IRC08:37
*** xga has joined #openstack-dev08:40
*** doron_afk is now known as doron08:42
*** rushiagr has quit IRC08:48
*** _anant has joined #openstack-dev08:51
*** danpb has joined #openstack-dev08:51
*** Industrial has joined #openstack-dev08:53
IndustrialHi. devstack is arguably the easiest way to start using openstack and try it out?08:53
*** mkollaro has joined #openstack-dev08:54
danpbIndustrial: devstack is best if you want to become a openstack developer / hacker since it is designed to setup from latest git08:54
*** doron is now known as doron_afk08:54
danpbIndustrial: if you're looking to just try it out as a user/admin though, you're better off using your distro provided packages, since they'll be more reliable08:55
IndustrialI'm on OSX with Virtualbox with Ubuntu 12.04. I ran ./stack.sh and forgot to set my network adapter properly so I can access the machine from my host with a browser so i restarted the vm. I don't think it's running now.08:55
Industrialdanpb: I went to #ubuntu, they immediately sent me to #openstack08:55
danpbif you made a mistake in config, then you can run   './unstack.sh' update your config and then run   stack.sh again08:56
Industrialright, say it installed correctly, how do I stop/start the whole kaboodle :D?08:56
*** jruzicka has joined #openstack-dev08:57
matrohongaryk : hi08:59
*** jasondotstar has joined #openstack-dev09:00
*** johnthetubaguy1 has joined #openstack-dev09:00
danpbIndustrial: to stop it, just kill the screen session09:02
danpbIndustrial: and to start it again ue   ./rejoin-stack.sh09:02
*** rcrit has quit IRC09:03
*** flaper87|afk is now known as flaper8709:03
*** markvoelker has quit IRC09:03
*** rcrit has joined #openstack-dev09:04
*** johnthetubaguy has quit IRC09:04
*** yaguang has quit IRC09:05
*** yongli is now known as yongli_away09:10
*** ondergetekende_ has quit IRC09:12
*** markvoelker has joined #openstack-dev09:17
*** johnthetubaguy has joined #openstack-dev09:18
*** johnthetubaguy1 has quit IRC09:21
*** gongysh has quit IRC09:22
Industrialdanpb: ah thanks09:23
*** egallen has quit IRC09:26
*** DinaBelova has quit IRC09:28
garykmatrohon: hi09:29
*** xga has quit IRC09:30
*** egallen has joined #openstack-dev09:31
*** rushiagr has joined #openstack-dev09:32
matrohongaryk : I just respond to your review09:32
matrohongaryk : https://review.openstack.org/#/c/46739/09:33
*** sandeepr_ltp has quit IRC09:33
*** vartom13 has quit IRC09:34
*** sandeepr_ltp has joined #openstack-dev09:34
*** gongysh has joined #openstack-dev09:37
*** xga has joined #openstack-dev09:37
garykmatrohon: thanks, i'll take a look09:38
*** sushils has joined #openstack-dev09:38
garykmatrohon: thanks for the clarification. what you have suggested is better. i'll change my score. gracias!~09:40
matrohongaryk : thanks09:41
*** johnthetubaguy has quit IRC09:41
*** johnthetubaguy has joined #openstack-dev09:41
*** ifarkas has joined #openstack-dev09:42
*** boris-42 has joined #openstack-dev09:44
*** sandeepr_ltp has quit IRC09:45
*** sandeepr_ltp has joined #openstack-dev09:45
*** wfoster is now known as wfoster_away09:48
*** danpb has quit IRC09:50
*** wfoster_away is now known as wfoster09:51
*** danpb has joined #openstack-dev09:53
*** paragan has quit IRC09:53
*** o_petit has quit IRC09:54
*** vartom13 has joined #openstack-dev10:03
*** sandeepr_ltp has quit IRC10:05
*** sandeepr_ltp has joined #openstack-dev10:05
*** o_petit has joined #openstack-dev10:05
*** egallen has quit IRC10:05
*** egallen has joined #openstack-dev10:06
*** sandeepr_ltp has quit IRC10:07
*** sandeepr_ltp has joined #openstack-dev10:07
*** _anant has quit IRC10:08
*** HenryG has joined #openstack-dev10:10
*** wfoster is now known as wfoster_away10:10
*** mugsie_ is now known as mugsie10:11
*** mugsie has joined #openstack-dev10:11
*** MaxV has quit IRC10:11
*** danpb has quit IRC10:13
*** iartaris` has quit IRC10:15
*** wenjianhn has quit IRC10:17
*** rushiagr has quit IRC10:22
*** d0ugal has joined #openstack-dev10:24
*** o_petit has quit IRC10:24
*** faramir has quit IRC10:25
*** imsurit has quit IRC10:25
*** rushiagr has joined #openstack-dev10:25
*** llu is now known as llu_away10:29
*** pcm_ has joined #openstack-dev10:29
*** pcm_ has quit IRC10:30
*** xga has quit IRC10:30
*** pcm_ has joined #openstack-dev10:31
*** johnthetubaguy1 has joined #openstack-dev10:31
*** gongysh has quit IRC10:31
*** johnthetubaguy has quit IRC10:32
*** danpb has joined #openstack-dev10:34
*** prekarat has quit IRC10:38
*** johnthetubaguy1 is now known as johnthetubaguy10:38
*** ifarkas has quit IRC10:39
*** wfoster_away is now known as wfoster10:41
*** ifarkas has joined #openstack-dev10:42
*** AnilV4 has quit IRC10:43
*** sushils has quit IRC10:45
*** corXi has quit IRC10:50
*** iartarisi has joined #openstack-dev10:55
*** AnilV4 has joined #openstack-dev10:57
*** sumanthns has joined #openstack-dev10:58
*** sandeepr_ltp has quit IRC11:04
*** radez_g0n3 is now known as radez11:08
*** danpb has quit IRC11:08
*** maheshp has joined #openstack-dev11:10
*** amotoki has quit IRC11:12
*** danpb has joined #openstack-dev11:15
chandankumardanjared, hello11:16
chandankumardanjared, sorry11:17
*** crank_ is now known as crank11:22
*** ifarkas has quit IRC11:25
*** MaxV has joined #openstack-dev11:26
*** sushils has joined #openstack-dev11:27
*** DinaBelova has joined #openstack-dev11:28
*** egallen has quit IRC11:29
*** corXi has joined #openstack-dev11:30
*** doron_afk is now known as doron11:30
*** egallen has joined #openstack-dev11:31
*** boden has quit IRC11:32
*** danpb has quit IRC11:34
*** o_petit has joined #openstack-dev11:34
*** jasondotstar has quit IRC11:38
*** xga has joined #openstack-dev11:38
*** o_petit has quit IRC11:39
*** jcoufal has joined #openstack-dev11:39
*** doron is now known as doron_afk11:40
*** johnthetubaguy has quit IRC11:42
*** sushils has quit IRC11:45
*** jayg|g0n3 is now known as jayg11:45
*** o_petit has joined #openstack-dev11:46
*** prad has quit IRC11:46
*** johnthetubaguy has joined #openstack-dev11:47
*** annegentle has quit IRC11:48
*** SergeyLukjanov has quit IRC11:49
*** SergeyLukjanov has joined #openstack-dev11:49
*** blamar has joined #openstack-dev11:50
*** sgordon has joined #openstack-dev11:52
*** Kezar has quit IRC12:00
*** safchain has quit IRC12:02
*** wenjianhn has joined #openstack-dev12:02
*** xga_ has joined #openstack-dev12:03
*** kushal has quit IRC12:04
*** xga has quit IRC12:05
*** danpb has joined #openstack-dev12:06
*** safchain has joined #openstack-dev12:07
*** terryh has joined #openstack-dev12:08
*** yassine has quit IRC12:09
*** safchain has quit IRC12:12
*** yassine has joined #openstack-dev12:13
*** dims has joined #openstack-dev12:16
*** bashok has quit IRC12:18
*** radez is now known as radez_g0n312:18
*** MaxV has quit IRC12:21
*** MaxV has joined #openstack-dev12:21
*** maheshp has quit IRC12:22
*** sthaha has joined #openstack-dev12:23
*** gordc has joined #openstack-dev12:23
*** gordc has quit IRC12:24
*** neoXsys has quit IRC12:25
*** jasondotstar has joined #openstack-dev12:27
*** morazi has joined #openstack-dev12:28
*** doron_afk is now known as doron12:29
*** sandeepr_ltp has joined #openstack-dev12:30
*** egallen has joined #openstack-dev12:30
*** Ruetobas has quit IRC12:31
*** jhesketh has quit IRC12:33
*** mrunge has quit IRC12:33
*** boden has joined #openstack-dev12:34
*** Ruetobas has joined #openstack-dev12:34
*** Ruetobas has quit IRC12:39
*** galstrom is now known as galstrom_zzz12:39
*** neoXsys has joined #openstack-dev12:39
*** ifarkas has joined #openstack-dev12:40
*** anniec has joined #openstack-dev12:40
*** ifarkas has quit IRC12:41
*** johnthetubaguy1 has joined #openstack-dev12:41
*** ifarkas has joined #openstack-dev12:41
*** paragan has joined #openstack-dev12:42
*** paragan has joined #openstack-dev12:42
*** annegentle has joined #openstack-dev12:42
*** rfolco has joined #openstack-dev12:43
*** lifeless_ is now known as lifeless12:43
*** Ruetobas has joined #openstack-dev12:44
*** anniec_ has joined #openstack-dev12:44
*** kushal has joined #openstack-dev12:44
kpavelWhat is the trigger for the opened bug to be updated with "Fix proposed to branch: XXX" info?12:44
*** noslzzp has joined #openstack-dev12:44
*** johnthetubaguy has quit IRC12:45
*** anniec has quit IRC12:45
*** gmurphy has quit IRC12:45
*** anniec_ is now known as anniec12:45
*** vartom13 has quit IRC12:48
*** SergeyLukjanov has quit IRC12:49
*** jaimegil has quit IRC12:50
*** DinaBelova has quit IRC12:50
*** edmund1 has joined #openstack-dev12:51
*** afazekas_no_irq has quit IRC12:51
*** SergeyLukjanov has joined #openstack-dev12:51
*** bswartz has quit IRC12:53
*** AnilV4 has quit IRC12:55
*** wenjianhn has quit IRC12:56
*** samuelbercovici has joined #openstack-dev12:57
*** jprovazn has joined #openstack-dev12:58
*** ifarkas has quit IRC12:59
*** dvarga has joined #openstack-dev13:01
*** doron is now known as doron_afk13:03
*** doron_afk is now known as doron13:05
*** kbringard has joined #openstack-dev13:05
*** haleyb_ is now known as haleyb13:06
*** SergeyLukjanov has quit IRC13:07
*** martine has joined #openstack-dev13:08
*** martine is now known as Guest790113:08
*** ifarkas has joined #openstack-dev13:09
*** amotoki has joined #openstack-dev13:09
*** SergeyLukjanov has joined #openstack-dev13:11
*** DinaBelova has joined #openstack-dev13:11
*** Guest7901 is now known as martine_13:11
*** rushiagr has quit IRC13:12
*** jergerber has joined #openstack-dev13:13
*** Dr_Who has joined #openstack-dev13:14
*** gordc has joined #openstack-dev13:14
*** JordanP has quit IRC13:15
*** vladan_ has joined #openstack-dev13:15
*** changbl has quit IRC13:15
*** prad has joined #openstack-dev13:16
*** AnilV4 has joined #openstack-dev13:17
*** bknudson has joined #openstack-dev13:17
jpichkpavel: There are a few, see https://wiki.openstack.org/wiki/GitCommitMessages#Including_external_references13:18
*** gimps_ has quit IRC13:19
*** dubsquared has joined #openstack-dev13:19
*** prad has quit IRC13:19
*** Dr_Who has quit IRC13:21
*** blamar_ has joined #openstack-dev13:21
*** bswartz has joined #openstack-dev13:22
*** blamar has quit IRC13:22
*** blamar_ is now known as blamar13:22
kpaveljpich: ok, thanks. so the "#" is what missing there? because it did create a link to the bug, but for some reason didn't create a message on launchpad. https://review.openstack.org/#/c/46649/13:22
*** doron is now known as doron_afk13:24
*** johnthetubaguy1 has quit IRC13:24
*** johnthetubaguy has joined #openstack-dev13:24
garyksamuelbercovici:  https://review.openstack.org/#/c/21946/13:24
jpichkpavel: You can confirm with the folks at #openstack-infra. Sometimes it may simply be that the connection to Launchpad failed at that particular time13:25
*** Dr_Who has joined #openstack-dev13:25
kpaveljpich: thanks, will do13:25
*** JordanP has joined #openstack-dev13:27
*** maheshp has joined #openstack-dev13:28
*** alunduil has quit IRC13:28
*** grapsus_ has quit IRC13:28
*** Dr_Who has left #openstack-dev13:29
*** rushiagr has joined #openstack-dev13:30
*** Max_ has joined #openstack-dev13:30
*** dims has quit IRC13:30
*** jecarey has joined #openstack-dev13:30
*** xga has joined #openstack-dev13:30
*** eharney has joined #openstack-dev13:31
*** dims has joined #openstack-dev13:31
*** o_petit has quit IRC13:32
*** xga_ has quit IRC13:32
*** MaxV has quit IRC13:32
*** blamar has quit IRC13:32
*** SergeyLukjanov has quit IRC13:33
*** zhikunliu has quit IRC13:34
*** dstanek has joined #openstack-dev13:34
*** sushils has joined #openstack-dev13:34
*** johnthetubaguy1 has joined #openstack-dev13:35
*** dubsquared has quit IRC13:35
*** yassine has quit IRC13:35
*** lbragstad has joined #openstack-dev13:35
*** Industrial has left #openstack-dev13:36
*** johnthetubaguy has quit IRC13:38
*** grapsus_ has joined #openstack-dev13:41
*** neelashah has joined #openstack-dev13:41
*** blamar has joined #openstack-dev13:41
*** mkerrin1 has quit IRC13:44
*** eglynn is now known as eglynn-on-a-call13:44
*** CaptTofu has quit IRC13:48
*** tmclaugh[work] has joined #openstack-dev13:48
*** slagle has joined #openstack-dev13:48
*** prad has joined #openstack-dev13:48
*** sridevi has quit IRC13:50
*** maheshp has quit IRC13:50
*** maheshp has joined #openstack-dev13:50
*** Max_ has quit IRC13:51
*** yassine has joined #openstack-dev13:51
*** mkerrin has joined #openstack-dev13:53
*** sandywalsh has joined #openstack-dev13:53
*** michchap has quit IRC13:53
*** michchap has joined #openstack-dev13:54
*** gordc has quit IRC13:54
*** tserong has quit IRC13:54
*** changlp has joined #openstack-dev13:55
*** zaitcev has joined #openstack-dev13:55
*** radez_g0n3 is now known as radez13:56
*** martine_ has quit IRC13:57
*** tserong has joined #openstack-dev13:57
*** ayoung has joined #openstack-dev13:57
*** sumanthns has quit IRC13:57
*** blamar has quit IRC13:57
*** MaxV has joined #openstack-dev13:58
*** blamar has joined #openstack-dev13:58
*** jimfehlig has joined #openstack-dev13:58
*** galstrom_zzz is now known as galstrom13:58
*** egallen has quit IRC14:02
*** bnemec has joined #openstack-dev14:02
*** mmagr has quit IRC14:03
*** michchap has quit IRC14:03
*** jmontemayor has joined #openstack-dev14:04
*** tstevenson has joined #openstack-dev14:04
*** egallen has joined #openstack-dev14:04
*** sheepdog80 has joined #openstack-dev14:04
*** doron_afk is now known as doron14:05
*** yassine has quit IRC14:05
*** yassine has joined #openstack-dev14:05
*** bnemec has quit IRC14:05
*** bnemec has joined #openstack-dev14:05
*** doron is now known as doron_afk14:06
*** safchain has joined #openstack-dev14:06
*** slagle has quit IRC14:06
*** xga_ has joined #openstack-dev14:07
*** mestery has joined #openstack-dev14:07
*** DinaBelova has quit IRC14:07
*** xga has quit IRC14:08
*** SergeyLukjanov has joined #openstack-dev14:08
*** mestery has quit IRC14:09
*** maheshp has quit IRC14:09
*** lnxnut has joined #openstack-dev14:09
*** mestery has joined #openstack-dev14:09
*** litong has joined #openstack-dev14:10
*** tong|2 has joined #openstack-dev14:10
*** tserong has quit IRC14:11
*** tserong has joined #openstack-dev14:11
*** DinaBelova has joined #openstack-dev14:12
*** CaptTofu has joined #openstack-dev14:13
*** Industrial has joined #openstack-dev14:15
*** dolphm has joined #openstack-dev14:15
*** dkranz has joined #openstack-dev14:16
*** prekarat has joined #openstack-dev14:16
IndustrialIs there a way to stop and then start devstack without reinstalling everything?14:17
*** prekarat has quit IRC14:18
*** prekarat has joined #openstack-dev14:18
*** stevemar has joined #openstack-dev14:18
*** rnirmal has joined #openstack-dev14:21
danpbIndustrial: as i mentioned earlier, kill screen (which stops all the services) and then use  rejoin-stack.sh which just restarts screen + services14:21
*** ygbo has joined #openstack-dev14:22
*** sc68cal has quit IRC14:23
*** CaptTofu has quit IRC14:25
*** xga_ has quit IRC14:29
*** grapsus has quit IRC14:29
*** aeperezt has joined #openstack-dev14:30
*** kgriffs has joined #openstack-dev14:30
*** kgriffs is now known as kgriffs_afk14:30
*** slagle has joined #openstack-dev14:31
*** kgriffs_afk is now known as kgriffs14:31
*** kushal has quit IRC14:32
*** NobodyCa1 is now known as NobodyCam14:33
*** otherwiseguy has joined #openstack-dev14:34
*** rdopieralski has quit IRC14:34
*** markmcclain has joined #openstack-dev14:34
*** rushiagr has quit IRC14:35
*** tserong has quit IRC14:37
*** sarob has joined #openstack-dev14:39
*** gordc has joined #openstack-dev14:39
*** FunnyLookinHat has joined #openstack-dev14:40
*** thedodd has joined #openstack-dev14:40
*** eglynn-on-a-call is now known as eglynn14:41
*** xga has joined #openstack-dev14:47
*** sarob has quit IRC14:47
*** slagle has quit IRC14:47
*** sarob has joined #openstack-dev14:47
*** kgriffs is now known as kgriffs_afk14:50
*** doron_afk is now known as doron14:51
*** tserong has joined #openstack-dev14:52
*** tserong has joined #openstack-dev14:52
*** sarob has quit IRC14:52
*** bourke has quit IRC14:52
*** boris-42 has quit IRC14:53
*** DinaBelova has quit IRC14:57
*** sushils has quit IRC14:58
*** kgriffs_afk is now known as kgriffs14:58
*** MaxV has quit IRC14:59
*** MaxV has joined #openstack-dev14:59
*** galstrom is now known as galstrom_zzz14:59
*** kgriffs is now known as kgriffs_afk15:01
*** sushils has joined #openstack-dev15:01
*** dkranz has quit IRC15:01
*** carl_baldwin has joined #openstack-dev15:01
*** carl_baldwin has left #openstack-dev15:02
*** kgriffs_afk is now known as kgriffs15:02
*** carl_baldwin has joined #openstack-dev15:02
*** eharney_ has joined #openstack-dev15:02
*** SergeyLukjanov has quit IRC15:02
*** reidrac has quit IRC15:03
*** eharney has quit IRC15:03
*** eharney_ is now known as eharney15:03
*** bnemec has quit IRC15:03
*** bnemec has joined #openstack-dev15:04
*** danwent has joined #openstack-dev15:05
*** DinaBelova has joined #openstack-dev15:06
*** mlavalle has joined #openstack-dev15:06
*** Dr_Who has joined #openstack-dev15:07
*** Dr_Who has joined #openstack-dev15:07
*** JordanP has quit IRC15:08
*** kuuudos has joined #openstack-dev15:09
*** Dr_Who is now known as tgall_foo15:09
*** kuuudos has quit IRC15:09
*** sushils has quit IRC15:11
*** pmathews has joined #openstack-dev15:12
*** jtomasek has quit IRC15:15
*** dkranz has joined #openstack-dev15:17
*** doron is now known as doron_afk15:17
*** nshaikh has left #openstack-dev15:17
*** eharney has quit IRC15:19
Industrialdanpb: ah ok15:20
*** bnemec__ has joined #openstack-dev15:20
*** JordanP has joined #openstack-dev15:20
*** eharney has joined #openstack-dev15:21
*** bnemec has quit IRC15:21
*** edmund2 has joined #openstack-dev15:21
*** kgriffs has left #openstack-dev15:21
*** ygbo has quit IRC15:22
*** Mandell has quit IRC15:23
*** edmund1 has quit IRC15:23
*** ygbo has joined #openstack-dev15:24
*** angdraug has joined #openstack-dev15:24
*** ygbo has quit IRC15:24
dolphmmorganfainberg: i just hit approve on henrynash's conflicting review vs https://review.openstack.org/#/c/46207/15:25
*** bfschott has joined #openstack-dev15:25
*** jdennis has quit IRC15:26
*** jdennis has joined #openstack-dev15:27
*** bnemec__ has quit IRC15:29
*** bnemec has joined #openstack-dev15:30
*** jcoufal has quit IRC15:32
*** jcoufal has joined #openstack-dev15:32
*** ygbo has joined #openstack-dev15:33
*** marun has quit IRC15:33
*** ygbo has quit IRC15:33
*** marun has joined #openstack-dev15:34
*** ygbo has joined #openstack-dev15:36
*** markmcclain has quit IRC15:36
*** johnthetubaguy1 has quit IRC15:36
*** johnthetubaguy has joined #openstack-dev15:36
*** marun has quit IRC15:37
*** jprovazn has quit IRC15:37
*** changbl has joined #openstack-dev15:37
*** networkstatic has joined #openstack-dev15:39
*** o_petit has joined #openstack-dev15:39
*** jistr has quit IRC15:39
*** sahid has joined #openstack-dev15:40
*** odyssey4me has quit IRC15:40
*** senk has joined #openstack-dev15:40
*** markmcclain has joined #openstack-dev15:40
*** ifarkas has quit IRC15:41
*** __afazekas is now known as afazekas15:42
*** eddie has joined #openstack-dev15:42
*** eddie is now known as Guest6261815:42
*** esheffie1d has quit IRC15:42
*** ygbo has quit IRC15:43
*** shakayumi has joined #openstack-dev15:43
*** xga has quit IRC15:44
*** xga has joined #openstack-dev15:44
*** nil1511 has joined #openstack-dev15:44
*** ifarkas has joined #openstack-dev15:45
*** ygbo has joined #openstack-dev15:45
*** Guest62618 has quit IRC15:45
*** mmagr has joined #openstack-dev15:45
*** ygbo has quit IRC15:45
*** esheffield_ has joined #openstack-dev15:45
*** ygbo has joined #openstack-dev15:47
*** bnemec has quit IRC15:47
*** flaper87 is now known as flaper87|afk15:47
*** SergeyLukjanov has joined #openstack-dev15:47
*** ygbo has quit IRC15:48
*** sthaha has quit IRC15:48
*** esheffield_ has quit IRC15:48
*** o_petit has quit IRC15:50
*** markwash has joined #openstack-dev15:50
*** prekarat has quit IRC15:55
*** yassine has quit IRC15:55
*** kpavel has quit IRC15:55
*** flaper87|afk is now known as flaper8715:55
*** boris-42 has joined #openstack-dev15:56
*** markwash has quit IRC15:56
*** devoid has joined #openstack-dev15:56
*** MaxV has quit IRC15:56
*** jmontemayor has quit IRC15:59
*** neelashah has quit IRC15:59
*** mrodden has quit IRC15:59
*** alop has joined #openstack-dev16:00
*** nil1511 has quit IRC16:00
*** eddie_ has joined #openstack-dev16:01
*** Ruetobas has quit IRC16:01
*** martyntaylor has joined #openstack-dev16:01
*** mestery has quit IRC16:02
*** eddie_ is now known as esheffield16:03
*** marun has joined #openstack-dev16:04
*** esheffield has quit IRC16:04
*** hemna has quit IRC16:04
*** esheffield has joined #openstack-dev16:04
*** neelashah has joined #openstack-dev16:04
*** hemna has joined #openstack-dev16:04
*** Ruetobas has joined #openstack-dev16:04
*** slagle has joined #openstack-dev16:05
*** alexpilotti has joined #openstack-dev16:05
*** alexpilotti has quit IRC16:06
*** alexpilotti has joined #openstack-dev16:07
*** nati_ueno has joined #openstack-dev16:07
*** rwsu has joined #openstack-dev16:09
*** Ruetobas has quit IRC16:09
*** markwash has joined #openstack-dev16:10
*** GheRiver1 is now known as GheRivero16:11
*** lucasagomes has joined #openstack-dev16:11
*** FunnyLookinHat has quit IRC16:12
*** Ruetobas has joined #openstack-dev16:13
*** cmcnamara has joined #openstack-dev16:13
*** networkstatic has quit IRC16:17
*** samuelbercovici has left #openstack-dev16:20
*** senk has quit IRC16:20
*** nati_ueno has quit IRC16:20
*** o_petit has joined #openstack-dev16:22
*** o_petit has quit IRC16:23
*** sushils has joined #openstack-dev16:23
*** dstanek has quit IRC16:23
*** Guest47271 is now known as CrackerJackMack16:23
*** anniec has quit IRC16:24
*** markwash has quit IRC16:24
*** senk has joined #openstack-dev16:25
*** schwicht has joined #openstack-dev16:25
*** markmc has joined #openstack-dev16:26
*** rcrit has quit IRC16:27
*** FunnyLookinHat has joined #openstack-dev16:28
*** neelashah1 has joined #openstack-dev16:28
*** wfoster is now known as wfoster_away16:29
*** senk has quit IRC16:29
*** doron_afk has quit IRC16:29
*** senk has joined #openstack-dev16:30
*** markmcclain has quit IRC16:31
*** sridevi has joined #openstack-dev16:31
*** neelashah has quit IRC16:32
*** tkammer has quit IRC16:33
*** CaptTofu has joined #openstack-dev16:33
*** doron_afk has joined #openstack-dev16:33
*** paragan has quit IRC16:34
*** jog0_ is now known as jog016:36
*** safchain has quit IRC16:37
*** doron_afk has quit IRC16:38
*** garyk has quit IRC16:39
*** kbrierly has joined #openstack-dev16:39
*** devoid has left #openstack-dev16:40
*** dkranz has quit IRC16:40
*** markmcclain has joined #openstack-dev16:40
*** jtomasek has joined #openstack-dev16:43
*** networkstatic has joined #openstack-dev16:44
*** BobBall is now known as BobBallAway16:46
*** danpb has quit IRC16:48
*** sushils has quit IRC16:48
*** flaper87 is now known as flaper87|afk16:49
*** FunnyLookinHat has quit IRC16:50
*** sarob has joined #openstack-dev16:50
*** sushils has joined #openstack-dev16:51
*** iartarisi has quit IRC16:51
*** cmcnamara has quit IRC16:52
*** dstanek has joined #openstack-dev16:53
*** rcrit has joined #openstack-dev16:54
*** mrunge has joined #openstack-dev16:54
*** networkstatic has quit IRC16:55
*** jruzicka has quit IRC16:56
*** iamben_tw has joined #openstack-dev16:58
*** nati_ueno has joined #openstack-dev16:59
*** terriyu has joined #openstack-dev16:59
*** afazekas_ has joined #openstack-dev16:59
*** afazekas_ has quit IRC16:59
*** comay has joined #openstack-dev16:59
*** mkollaro has quit IRC17:01
*** mkollaro has joined #openstack-dev17:01
*** FunnyLookinHat has joined #openstack-dev17:01
*** tgall_foo has quit IRC17:02
*** mkollaro has quit IRC17:02
*** mkollaro has joined #openstack-dev17:02
*** chandankumar has quit IRC17:03
*** xga has quit IRC17:05
*** DinaBelova has quit IRC17:05
*** fbo is now known as fbo_away17:06
*** troytoman has joined #openstack-dev17:06
*** SergeyLukjanov has quit IRC17:06
*** mkollaro has quit IRC17:07
*** jmontemayor has joined #openstack-dev17:07
*** sridevi has quit IRC17:07
*** ifarkas has quit IRC17:09
*** dolphm has quit IRC17:09
*** gyee has joined #openstack-dev17:09
*** Mandell has joined #openstack-dev17:10
*** JordanP has quit IRC17:10
*** garyk has joined #openstack-dev17:10
*** garyk has quit IRC17:11
*** garyk has joined #openstack-dev17:12
*** _TheDodd_ has joined #openstack-dev17:13
*** rcrit has quit IRC17:14
*** galstrom_zzz is now known as galstrom17:14
*** bnemec has joined #openstack-dev17:15
*** thedodd has quit IRC17:17
*** vipul is now known as vipul-away17:17
*** dubsquared has joined #openstack-dev17:18
*** comstud_ is now known as comstud17:18
*** nil1511 has joined #openstack-dev17:21
*** vipul-away is now known as vipul17:23
*** Birk_ has joined #openstack-dev17:23
Birk_Rabbit notifications are enabled by default in devstack or I need to enable it?17:24
*** alop has quit IRC17:24
*** rcrit has joined #openstack-dev17:25
*** SumitNaiksatam has quit IRC17:27
*** aeperezt has quit IRC17:28
Birk_Anyone knows?17:29
*** Ryan_Lane has joined #openstack-dev17:31
*** hemna has quit IRC17:33
*** markmcclain has quit IRC17:34
*** egallen has quit IRC17:35
*** irimi has quit IRC17:36
*** burt has joined #openstack-dev17:37
*** cmk has quit IRC17:38
*** amcrn has joined #openstack-dev17:38
*** SergeyLukjanov has joined #openstack-dev17:38
*** mangelajo has joined #openstack-dev17:40
*** mangelajo_ has joined #openstack-dev17:41
*** mangelajo has quit IRC17:42
*** jprovazn has joined #openstack-dev17:43
*** malini has joined #openstack-dev17:43
*** rcrit has quit IRC17:44
*** atiwari has joined #openstack-dev17:45
*** jmontemayor has quit IRC17:45
*** mrunge has quit IRC17:46
*** litong has quit IRC17:46
*** rcrit has joined #openstack-dev17:47
*** Max__ has joined #openstack-dev17:47
malinimordred: I am working on this https://bugs.launchpad.net/marconi/+bug/1226081 & trying to find an openstack project which currently uses testscenarios. Do you have any pointers?17:47
uvirtbotLaunchpad bug 1226081 in marconi "Migration from ddt to testscenarios" [Medium,Triaged]17:47
*** SumitNaiksatam has joined #openstack-dev17:48
*** Max__ has quit IRC17:51
*** nil1511_ has joined #openstack-dev17:53
*** aeperezt has joined #openstack-dev17:54
*** nil1511 has quit IRC17:54
*** jmontemayor has joined #openstack-dev17:55
*** amohn9 has joined #openstack-dev17:56
*** mrodden has joined #openstack-dev17:57
*** johnthetubaguy has quit IRC17:57
*** eharney has quit IRC17:59
*** DinaBelova has joined #openstack-dev17:59
*** dolphm has joined #openstack-dev17:59
*** Birk_ has quit IRC18:00
*** tmclaugh[work] has quit IRC18:01
*** topol has joined #openstack-dev18:01
*** sarob has quit IRC18:03
*** dkranz has joined #openstack-dev18:03
*** cmcnamara has joined #openstack-dev18:03
*** Mandell has quit IRC18:03
*** sarob has joined #openstack-dev18:03
*** rcrit has quit IRC18:03
*** rnirmal has quit IRC18:04
*** rcrit has joined #openstack-dev18:04
*** tmclaugh[work] has joined #openstack-dev18:04
*** cmcnamara has quit IRC18:07
*** sarob has quit IRC18:08
*** eharney has joined #openstack-dev18:11
*** Mandell has joined #openstack-dev18:12
*** otherwiseguy has quit IRC18:13
*** dubsquared has quit IRC18:19
*** ondergetekende_ has joined #openstack-dev18:19
*** hemna has joined #openstack-dev18:19
*** ondergetekende_ has quit IRC18:19
*** rnirmal has joined #openstack-dev18:23
*** sarob has joined #openstack-dev18:25
*** markmc_ has joined #openstack-dev18:25
*** markmc has quit IRC18:26
*** mlavalle has quit IRC18:26
*** markmc_ is now known as markmc18:26
*** sarob has quit IRC18:26
*** sarob has joined #openstack-dev18:26
sandywalshrussellb: ping?18:30
russellbpong18:30
russellbwhat's up?18:30
sandywalshhey18:30
sandywalshso, I want to pass some more info through the conductor ... info that will only go in the notification18:31
*** sarob has quit IRC18:31
*** senk has quit IRC18:31
sandywalshright now it's limited to actual models.Instance attributes18:31
russellbthe instance update notification?18:31
sandywalshyeah18:31
sandywalshthere's "progress", but that's just an int18:31
sandywalshso I'm thinking on adding a new column for "progress description" or "step_name" as I've been calling it.18:32
sandywalshbut I'm hesitant to add more to the db18:32
russellbcan just add another method parameter though right?18:32
sandywalshthe alternative is a new parameter to all the instance update methods18:32
sandywalshright18:32
*** jcoufal has quit IRC18:33
sandywalshany preferences?18:33
russellbnew parameter sounds better to me18:33
russellbsince it doesn't really seem like something that needs to be persisted in the db18:33
russellbif you want example changes to model after, look at the history of the rpcapi.py file18:33
sandywalshright, and arguably progress isn't either, but that's another discussion18:33
*** sushils has quit IRC18:33
russellbheh, yeah.18:33
sandywalshthe rpcapi file?18:34
russellbi meant, for an example of a change to the rpc interface18:34
russellblooking at the log of nova/conductor/rpcapi.py would be a good place to start18:34
sandywalshk, will do ... thanks18:35
russellbnp18:35
russellbbecause the change can be a little tricky ... requires a version bump and backwards compatibility handling18:35
sandywalshgah18:37
*** sushils has joined #openstack-dev18:37
*** DinaBelova has quit IRC18:37
*** sushils has quit IRC18:42
*** sushils has joined #openstack-dev18:44
*** novas0x2a|laptop has joined #openstack-dev18:46
*** jasondotstar has quit IRC18:46
*** mmagr has quit IRC18:48
*** litong has joined #openstack-dev18:48
*** networkstatic has joined #openstack-dev18:51
*** jcoufal has joined #openstack-dev18:52
*** sarob has joined #openstack-dev18:52
*** ifarkas has joined #openstack-dev18:53
*** corXi has quit IRC18:54
*** jistr has joined #openstack-dev18:56
*** sushils has quit IRC18:57
*** jhesketh has joined #openstack-dev18:57
ayoungdolphm, in a devstack setup, the user 'admin' should be able to list domains, right?19:00
*** Ryan_Lane has quit IRC19:00
ayoungI'm getting a 40319:00
dolphmayoung: in a default config?19:00
*** Ryan_Lane has joined #openstack-dev19:00
*** sushils has joined #openstack-dev19:01
ayoungdolphm, yeah.19:01
ayoungjust running mysql keystone19:01
ayoungdolphm, I can do admin stuff using the CLI, v2 api19:01
ayoungbut doing this19:01
dolphmayoung: today, i'd say yes19:01
ayoungcurl -si -H"X-Auth-Token:$TOKEN" -H "Content-type: application/json" http://localhost:35357/v3/domains19:01
ayounggets a 40319:01
bknudsonayoung: admin token?19:02
dolphmayoung: what does -si do?19:02
ayoungbknudson, user has an admin role19:02
*** tstevenson has quit IRC19:02
ayoungdolphm, dump heads, and silent19:02
dolphmayoung: silent and headers?19:02
dolphmayoung: hmm19:02
bknudsonhttps://github.com/openstack/keystone/blob/master/etc/policy.json#L2319:03
dolphmayoung: yeah, i'd expect that to work19:03
atiwariayoung, if you want we can start on https://review.openstack.org/#/c/46589/619:03
dolphmayoung: can you create a domain?19:03
dolphmayoung: or get a specific one?19:03
dolphmayoung: GET /v3/domains/default19:03
ayoungdolphm, let me try getting19:03
ayoungdolphm, 403 on default19:03
*** Dr_Who has joined #openstack-dev19:04
dolphmayoung: is the policy file it's using out of date?19:04
*** bdpayne has joined #openstack-dev19:04
dolphmayoung: (does devstack not deploy our sample policy?)19:04
ayoungdolphm, this is a brand new devstack..let me see19:04
*** xga has joined #openstack-dev19:04
ayoungbash-4.2$ diff /etc/keystone/policy.json /opt/stack/keystone/etc/policy.json19:05
ayoung returns no lines different19:05
bknudsonjamielennox: you know anything about keystoneclient not honoring subjectAltName when connecting with SSL?19:05
dolphmayoung: "identity:list_domains": [["rule:admin_required"]],19:05
dolphmayoung: they're all admin_required19:05
ayoungdolphm, admin_required means that you need the admin role, or does it mean something more?19:06
ayoung    "admin_required": [["role:admin"], ["is_admin:1"]],19:06
atiwaritry with ADMIN19:06
dolphmayoung: it's just a rule, so you need to match whatever the rule says, which is (by default) having the role named 'admin'19:06
dolphmatiwari: what do you mean?19:06
atiwaritoken="ADMIN"19:07
ayoungdolphm, http://fpaste.org/40206/13794448/19:07
atiwarithat will bypass auth19:07
ayoungatiwari, that is commented out in my config file19:08
atiwarithat is default19:08
atiwarijust try19:08
ayoungatiwari, 40319:08
ayounger 40119:08
atiwarithat is really odd19:09
ayoungatiwari, anyway...on your issue, is it the GenericCheck that is failing?19:09
ayoungor some other rule?19:09
atiwariOK, let me explain19:09
atiwari "identity:revoke_token": [["user_id:%(target.entity.user_id)s"],["rule:admin_required"]],19:09
atiwariis the example of or rule19:10
ayoungright19:10
atiwariand ["user_id:%(target.entity.user_id)s"] is go for GenericCheck19:10
atiwaricorrect19:10
atiwari?19:10
ayoungatiwari, so GenericCheck is generating the key err, right?19:10
*** Max__ has joined #openstack-dev19:10
atiwariis target.entity.user_id is not there in the target it will not go to the GenericCheck19:11
bknudsonwhy would target.entity.user_id not be there?19:11
atiwariit will fail right at OR check19:11
atiwariok, in case of revoke token19:11
atiwarisuppose token is already revoked19:11
bknudsonyour rule should include things that are there.19:11
atiwariin that case it will be not there19:11
atiwarilook at https://review.openstack.org/#/c/46123/4/keystone/common/controller.py19:12
*** Ryan_Lane has quit IRC19:12
ayoungatiwari, what line of code is causing the Key error?19:12
atiwariI am setting x-subject-token to the target19:12
*** Ryan_Lane has joined #openstack-dev19:12
atiwari if rule(target, cred, enforcer): 45119:12
atiwariin https://review.openstack.org/#/c/46589/6/openstack/common/policy.py19:13
*** sushils has quit IRC19:13
ayoungatiwari, no it does not19:13
ayoungit is the code in the rule that throws it19:13
ayoungthereis no key access in that line of code19:13
ayoungatiwari, clean up your key access in the GenericCheck and I bet this goes away19:14
atiwarisorry GenericCheck is actually throwing19:14
ayoungrepalce19:14
ayoungreturn match == six.text_type(creds[self.kind])19:14
ayoungwith19:14
*** SergeyLukjanov has quit IRC19:15
ayoungreturn match == six.text_type(creds.get(self.kind,"")19:15
ayoungas I think that is where your key error is coming from19:15
*** jhesketh has quit IRC19:15
ayoungor in role check19:15
ayoung creds.get('roles',[])19:16
atiwari return match == six.text_type(creds[self.kind]) is place19:16
ayoungatiwari, yep...see my above suggestions...ok19:16
ayoungI have to run19:16
atiwaribut do you think it is not good to catch KeyError for OR19:16
ayoungno19:16
ayoungmake the code return False if the key is not present19:16
ayounggotta go,  sorry19:17
atiwariok19:17
atiwariI will change19:17
atiwarithanks19:17
*** ayoung has quit IRC19:17
*** tstevenson has joined #openstack-dev19:18
*** lnxnut has quit IRC19:19
*** mkollaro has joined #openstack-dev19:19
*** SergeyLukjanov has joined #openstack-dev19:21
*** otherwiseguy has joined #openstack-dev19:21
*** amohn9 has quit IRC19:21
harlowjasandywalsh btw, https://review.openstack.org/#/c/46331/19:23
harlowjaso we are having really low level progress/task notifications already being emiited from taskflow19:24
harlowjaits just there isn't a default oslo.notification 'reciever' of those notifications19:24
*** malini is now known as malini_afk19:24
harlowjasandywalsh https://wiki.openstack.org/wiki/TaskFlow/States_of_Task_and_Flow also19:24
harlowjafyi19:26
*** mestery has joined #openstack-dev19:26
dolphmhenrynash: why do we bother doing this in the drivers at all? https://review.openstack.org/#/c/46972/19:26
dolphmhenrynash: the same behavior can be done clientside, so i would assume we'd keep the behavior in the controller19:27
*** martyntaylor has quit IRC19:27
*** martyntaylor has joined #openstack-dev19:28
*** gyee has quit IRC19:30
*** tris has quit IRC19:31
*** Chaser has quit IRC19:31
*** iamben_tw has quit IRC19:32
*** insanidade has joined #openstack-dev19:33
dstanekis there a search index (besides Google) of the openstack launchpad projects?  i'd love to be able to search across all bugs and blueprints19:33
dstanekwhen i use the generic launchpad search i get too many useless results19:33
*** vipul is now known as vipul-away19:34
*** amohn9 has joined #openstack-dev19:38
*** iamben_tw has joined #openstack-dev19:38
jamielennoxbknudson, is this a new thing or something established?19:39
jamielennoxin short no but i've not tested it - i'm just wondering if you mean it started happening after changing auth_token to requests19:40
bknudsonjamielennox: see this link https://wiki.openstack.org/wiki/SecureClientConnections19:40
bknudsonit mentions some problems httplib and httplib219:40
*** stevemar has quit IRC19:40
bknudsonSomebody mentioned this to me and I've been working on trying to recreate it19:41
*** tris has joined #openstack-dev19:41
bknudsonthought I'd bring it up in with someone with more knowledge of what works in different http libs.19:41
*** jamielennox is now known as jamielennox|away19:42
*** mestery has quit IRC19:43
*** Chaser has joined #openstack-dev19:43
*** troytoman is now known as troytoman-away19:44
*** jamielennox|away is now known as jamielennox19:44
jamielennoxbknudson, so that list would seem a little old to me19:45
jamielennoxalthough it does say that most/all clients are now using requests library19:46
*** danwent has quit IRC19:47
*** dolphm has quit IRC19:47
mordredmalini_afk: look at https://git.openstack.org/cgit/openstack-dev/pbr/tree/pbr/tests/test_setup.py#n7419:48
jamielennoxbut from mermory there are a couple of issues with the requests library - one of them being allowing proxied connections over ssl, and there was something bought up about SANs in my review for auth_token move to requests19:48
bknudson"2) Does request handle multiple SAN values in certs?"19:49
*** dolphm has joined #openstack-dev19:49
*** nil1511 has joined #openstack-dev19:50
*** nil1511_ has quit IRC19:50
jamielennoxright, so this is obviously a belief going around, but i can't see any bug for requests saying that it doesn't support it19:51
*** zodiak has quit IRC19:51
*** yolanda has quit IRC19:54
jamielennoxbknudson, I'm not sure how it plays in but by the look of: https://github.com/kennethreitz/requests/blob/master/requests/packages/urllib3/contrib/pyopenssl.py they are doing some explicit subjectAltName handling so I would suggest it has been addressed19:55
sandywalshharlowja: thanks ... will read/review19:56
harlowjanp sandywalsh19:56
bknudsonjamielennox: great, just what I was looking for.19:56
dolphmjamielennox: are we using urllib3?19:56
jamielennoxdolphm, requests is internally19:56
*** nil1511 has quit IRC19:57
*** ifarkas has quit IRC20:00
*** radix has joined #openstack-dev20:01
radixwhat's the best way to learn about the current keystone trusts API?20:01
radixif the answer is "read the code", then so be it :)20:01
*** jistr has quit IRC20:02
*** pixelb has quit IRC20:02
dolphmradix: https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3-os-trust-ext.md20:02
dolphmradix: or https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3-os-oauth1-ext.md20:02
radixhuh20:03
*** vipul-away is now known as vipul20:03
*** nachi has joined #openstack-dev20:03
radixdolphm: I am curious about why that second document applies20:03
*** beagles has quit IRC20:03
dolphmradix: they're both solving the same problem20:03
radixdolphm: does that mean that oath is basically implemented with trusts internally? (I notice there's no usage of the word "trust" in the second doc)20:03
*** jtomasek has quit IRC20:03
dolphmradix: neither doc discusses their implementations, but the answer is no20:04
*** dubsquared has joined #openstack-dev20:04
radixwell, that's cool20:04
radixdolphm: if they both solve the same problem, should I roll dice to decide which one to use? :)20:05
radixI'm working on heat autoscaling btw20:05
dolphmradix: if oauth doesn't work for you, i'd love to know why!20:05
*** terryh has quit IRC20:06
dolphmradix: the only use case that oauth can't provide that trusts can is delegation without impersonation (impersonation is done implicitly in the oauth api)20:06
*** terryh has joined #openstack-dev20:06
radixI see, I think that's fine20:06
radixdolphm: so is that the main reason trusts was created?20:07
radixI don't think I need delegation-without-impersonation anyway20:07
*** dubsquared has quit IRC20:09
*** blentz has quit IRC20:10
*** salv-orlando has quit IRC20:12
radixdolphm: anyway, thanks for the help :)20:13
*** dubsquared has joined #openstack-dev20:14
*** Max__ has quit IRC20:14
dolphmradix: trusts came first, and oauth is a more recent development20:15
radixahh, ok20:15
radixgood to know20:15
dolphmradix: although, last i heard... heat needed impersonation?20:15
*** markmcclain has joined #openstack-dev20:15
*** mlavalle has joined #openstack-dev20:16
*** mlavalle has quit IRC20:17
dolphmradix: hmm... i haven't seen the latest comment on https://review.openstack.org/#/c/40444/ until now20:17
dolphmshardy: o/20:18
shardydolphm: hi20:19
*** Dr_Who has quit IRC20:19
dolphmshardy: i'm trying to wrap my head around your comment on the review above ^20:19
*** yolanda has joined #openstack-dev20:20
dolphmshardy: i'm wondering if my comment wasn't clear? i meant the use case being solved for with api revisions could also be solved for by heat simply using a trust with impersonation=True20:21
*** Dr_Who has joined #openstack-dev20:21
shardydolphm: sure, so from your comment, are you saying that if you create an ec2 keypair, using a token obtained via a trust with impersonation=True, then the keypair will be role-limited to the same scope as the trust?20:22
*** ayoung has joined #openstack-dev20:22
dolphmshardy: the trust is role-limited, so a token based on a trust would be equally role-limited, so i'd expect the ec2 keypair to use those same roles20:23
shardydolphm: I'm not saying we necessarily need a new API, just want to ensure that the Heat use-case is captured so we can use what is implemented20:23
dolphmshardy: is that not how it works?20:23
*** Dr_Who has left #openstack-dev20:23
shardydolphm: I'm not sure tbh, need to do some testing of the ec2-keypair API with trust tokens20:24
dolphmshardy: in other words, contrib.ec2 shouldn't care how the token was generated (whether it was based on a trust or on oauth)20:24
dolphmif it has legitimate reason to care, then we did something very wrong in either trusts or oauth20:24
*** Max__ has joined #openstack-dev20:24
shardydolphm: Ok, well I guess I was mistaken then, if it works as you describe then we should be OK20:25
shardydolphm: I'll add it to my list of things to test soon ;)20:25
dolphmshardy: keep me posted either way! i could be lying, but that's how i understand it20:26
*** spzala has joined #openstack-dev20:26
*** yolanda has quit IRC20:26
shardydolphm: sure, will do - I'll be using this for the Heat instance-users BP in early Icehouse so I guess we'll find out soon ;)20:27
*** radez is now known as radez_g0n320:27
dolphmshardy: thanks!20:27
*** Max__ has quit IRC20:29
*** Max__ has joined #openstack-dev20:32
*** dvarga has quit IRC20:33
*** dolphm has quit IRC20:34
*** tmclaugh[work] has quit IRC20:35
*** tmclaugh[work] has joined #openstack-dev20:36
*** Max__ has quit IRC20:37
*** stevemar has joined #openstack-dev20:39
*** sandywalsh has quit IRC20:39
*** jamielennox is now known as jamielennox|away20:39
*** Ryan_Lane has quit IRC20:39
*** Ryan_Lane has joined #openstack-dev20:41
*** sgordon has quit IRC20:42
*** jecarey has quit IRC20:42
*** mlavalle has joined #openstack-dev20:48
*** tmclaugh[work] has quit IRC20:49
*** radix has quit IRC20:51
*** radix has joined #openstack-dev20:51
*** radix has quit IRC20:51
*** radix has joined #openstack-dev20:51
*** edmund2 has quit IRC20:52
*** sdake_ has joined #openstack-dev20:53
*** sdake_ has quit IRC20:53
*** sdake_ has joined #openstack-dev20:53
morganfainberghenrynash, ping20:53
*** amohn9 has quit IRC20:55
*** SergeyLukjanov has quit IRC20:56
*** nikhil_ has joined #openstack-dev20:56
*** nikhil_ is now known as Guest7726520:57
*** zul has quit IRC20:57
*** Guest77265 is now known as nik20:57
*** nik is now known as nik12420:57
nikhilnik124: ping20:58
*** dolphm has joined #openstack-dev20:58
*** nik124 has quit IRC20:58
*** boden has quit IRC20:59
morganfainbergbknudson or dolphm, ping21:00
*** mestery has joined #openstack-dev21:00
*** mestery has quit IRC21:00
bknudsonmorganfainberg: pong21:00
dolphmmorganfainberg: o/21:00
*** jwcroppe has joined #openstack-dev21:00
morganfainbergaha, got both of you!21:00
morganfainbergeither or works.21:00
morganfainbergso21:00
morganfainbergupdate_user_project21:00
* dolphm runs away21:00
*** mestery has joined #openstack-dev21:00
morganfainberghttps://github.com/openstack/keystone/blob/master/keystone/identity/controllers.py#L24321:01
morganfainbergshould that remove the user from the old project?21:01
morganfainbergor is that working as intended21:01
morganfainbergwhere it simply adds the user to the new project?21:01
dolphmmorganfainberg: it should remove and add21:01
*** venkatesh_ has joined #openstack-dev21:01
dolphmmorganfainberg: as necessary21:01
dolphmmorganfainberg: the idea is that on v3, you should see an explicit role assignment21:02
*** jecarey has joined #openstack-dev21:02
morganfainbergdolphm, well, i mean i could just make it fall through to calling update_user which would remove the old role and add the new21:02
morganfainbergwe have 2 paths to update tenantId in v2.0 at the moment21:02
morganfainbergone calls that method, the other sets tenantId and calls update21:02
dolphmmorganfainberg: that's what the other patch does, right?21:02
*** rfolco has quit IRC21:02
morganfainbergdolphm, i think so21:03
morganfainberg*checks*21:03
morganfainbergyes21:03
morganfainberghell, we could remove that method and just make the router point to the right method on the controller21:04
morganfainbergi like that option better.21:04
dolphmmorganfainberg: from the api docs, you should only be able to revise the default tenant through that method, so they *shouldn't* have identical implementations21:04
dolphmmorganfainberg: in reality, i don't think anyone cares21:04
dolphmmorganfainberg: i like that option better as well21:04
morganfainbergsounds good.21:05
*** beagles has joined #openstack-dev21:05
*** terryh has quit IRC21:06
dolphmmorganfainberg: it's just here, right? morganfainberg: and we don't do anything to block a v3 user from deleting a _member_ role assignment from v2.021:06
*** dubsquared has quit IRC21:06
dolphmmorganfainberg: ha... bad paste21:06
dolphmmorganfainberg: https://github.com/openstack/keystone/blob/master/keystone/contrib/admin_crud/core.py#L113-L12321:07
morganfainbergcorrect21:07
*** dubsquared has joined #openstack-dev21:07
morganfainbergwe have some cruft in there (look at that diablo compat) that we should cleanup in I21:07
henrynashdolphm: (with regard to the v2 token caching fix) why are you suggesting we do client side?  Caching?21:08
*** markmcclain has quit IRC21:08
dolphmhenrynash: oh sorry - no21:09
dolphmhenrynash: i meant the validation of belongsTo's value21:09
dolphmhenrynash: today we do that in auth_token, but the spec allows you to validate that server side in v2 with belongsTo21:09
morganfainbergdolphm, ++ lets get rid of belongsTo in keystone's api!21:09
dolphmmorganfainberg: it's not in v321:09
morganfainbergi know21:09
morganfainbergthat was a headache when implementing caching for the v2 interface21:10
morganfainbergv3 = way easier in that regard21:10
henrynashdolphm: so pull the BelongsTo stuff out of the driver...21:10
dolphmi'm just saying it doesn't need to be in the driver ^21:10
dolphmyou can do it in the controller21:10
morganfainbergthat would make me very happy.21:10
dolphmyay 4 happiness21:10
*** beagles has quit IRC21:10
*** amohn9 has joined #openstack-dev21:10
morganfainberghenrynash, controller being smart is even better!21:11
morganfainbergthan just massive cache invalidates21:11
*** beagles has joined #openstack-dev21:11
dolphmhenrynash: i think that would make your patch way simpler, because it'd be mostly deletes :)21:11
henrynashdophm: so that's certainly an idea…I had been simply trying to make the current levels work….but it is a bit messy (as you have seen)21:11
morganfainbergit also reduces the invalidates/cache possibilities21:11
henrynashdolphm: my kind of patch21:11
henrynashdolphm, morganfainberg: ok, let me work on that and see how it looks21:11
*** mestery has quit IRC21:12
morganfainberghenrynash, cool.  less lock contention on caching, and smaller cache footprint for roughtly the same benefit = awesome21:12
*** dubsquared has quit IRC21:12
dolphmmorganfainberg: true!21:12
*** fabio__ has quit IRC21:13
*** mrodden has quit IRC21:15
*** henrynash has quit IRC21:15
*** vipul is now known as vipul-away21:16
*** mkollaro has quit IRC21:16
*** mkollaro has joined #openstack-dev21:17
*** amohn9 has left #openstack-dev21:21
*** insanidade has quit IRC21:22
*** bswartz has quit IRC21:22
*** neelashah1 has quit IRC21:23
*** carl_baldwin has left #openstack-dev21:24
*** carl_baldwin has joined #openstack-dev21:24
*** danwent has joined #openstack-dev21:25
*** salv-orlando has joined #openstack-dev21:28
*** salv-orlando has quit IRC21:29
*** amerine has quit IRC21:31
*** matiu has joined #openstack-dev21:31
*** matiu has quit IRC21:31
*** matiu has joined #openstack-dev21:31
*** xqueralt is now known as xqueralt-afk21:32
*** zul has joined #openstack-dev21:32
*** Max__ has joined #openstack-dev21:32
*** jmontemayor has quit IRC21:33
*** amerine has joined #openstack-dev21:34
*** pcm_ has quit IRC21:34
*** READ10 has quit IRC21:35
morganfainbergbknudson / dolphm / henrynash, https://review.openstack.org/#/c/46207/21:36
*** mrodden has joined #openstack-dev21:36
morganfainbergwaiting on jenkins now.  but i htink i've got it rebased and working.21:36
*** READ10 has joined #openstack-dev21:36
*** beagles has quit IRC21:36
*** neelashah has joined #openstack-dev21:38
dolphmmorganfainberg: it looks to be a bit simplified after being rebased21:39
morganfainbergdolphm, a small amount, henrynash did some changes around the same code21:40
*** zul has quit IRC21:40
*** bfschott has quit IRC21:40
*** zul has joined #openstack-dev21:40
morganfainbergdolphm, i think i avoided regressiions and didn't miss anything added, but this one has taken a lot of hunting to find the edge cases.21:41
*** changbl has quit IRC21:44
*** Guest91182 has quit IRC21:44
*** topol has quit IRC21:45
*** mrodden has quit IRC21:45
*** networkstatic has quit IRC21:46
*** fbo_away is now known as fbo21:46
ayoungdolphm, soo...this one https://bugs.launchpad.net/keystone/+bug/1223036  is based on the fact that we assume all sql integrity constraint violations come from uniqueness constraint violations...which is not true.   I have a really ugly fix21:47
uvirtbotLaunchpad bug 1223036 in keystone "creating project in invalid domain raises SQL exception" [Low,In progress]21:47
*** mrodden has joined #openstack-dev21:47
ayounghttps://review.openstack.org/4703721:48
*** alexpilotti has quit IRC21:48
dolphmayoung: lol looking21:48
*** bfschott has joined #openstack-dev21:49
dolphmayoung: yeah that's pretty ugly lol21:49
*** venkatesh_ has quit IRC21:50
*** gabrielhurley has joined #openstack-dev21:51
*** eharney has quit IRC21:52
dolphmayoung: why not just do get_domain() in the manager on that call?21:52
dolphmayoung: with caching in place, it's not as big of a deal21:52
*** gyee has joined #openstack-dev21:52
morganfainbergayoung, oh. thats…… a special fix21:53
*** spzala has quit IRC21:53
dolphmmorganfainberg: rofl21:54
morganfainberghaving to parse the error message, ugly might be an understatement (though, better option… unknown)21:54
morganfainberghttps://bugs.launchpad.net/keystone/+bug/1223036 seems to be a duplicated by https://bugs.launchpad.net/keystone/+bug/122267221:57
uvirtbotLaunchpad bug 1223036 in keystone "creating project in invalid domain raises SQL exception" [Low,In progress]21:57
ayoungdolphm, could do an additional lookup, and since this is on create, the load is probably pretty low21:57
morganfainbergayoung, group would have the same issue fyi21:57
morganfainberggroup* creation21:58
ayoungmorganfainberg, yep21:58
*** vipul-away is now known as vipul21:58
morganfainbergi'd probably make either the controller or manager do the get_domain21:58
morganfainbergi lean towards the controller…but i could go either way21:58
ayoungmorganfainberg, well...in a split domain approach, we'll have to check if the domain is in SQL or LDAP anyway.21:59
morganfainbergayoung, right22:00
*** salv-orlando has joined #openstack-dev22:01
*** beagles has joined #openstack-dev22:01
ayoungmorganfainberg, but I'm guessing that the current logic is either  the domain is definined by an explicit config file, or turn it over to the sql driver22:01
morganfainbergayoung, well, in per-domain configuration, we wont even load the domain-specific config if the domain doesn't exist in assignment22:01
morganfainbergper-domain-identity22:02
morganfainbergso, assignment still is authoritative for the existence of a domain.22:02
morganfainberglet me 2xcheck22:02
*** kbringard has quit IRC22:03
*** egallen has joined #openstack-dev22:03
*** boris-42 has quit IRC22:03
morganfainbergayoung, http://git.openstack.org/cgit/openstack/keystone/tree/keystone/identity/core.py#n8922:05
morganfainbergayoung, if domain isn't in assignment, we wont load the per-domain-config.  i think it's a safe bet that domain must exist in these cases.22:05
morganfainberg(at least for the Havana timeline)22:06
*** salv-orlando2 has joined #openstack-dev22:06
ayoungmorganfainberg, shouldn't that have been tripped by this code, then?22:06
*** salv-orlando has quit IRC22:06
*** amotoki_ has joined #openstack-dev22:06
morganfainbergayoung, it only matters for per-domain-identity backends, which we know is partially implemented/tested22:06
morganfainberglikely nothing hits that code atm.22:07
morganfainbergwell, not really usable in production yet, and our tests probably have a gap there22:07
ayoungmorganfainberg, manager.create_user does the call to22:07
ayoung_get_domain_id_and_driver22:07
*** networkstatic has joined #openstack-dev22:08
morganfainbergayoung, it does?22:08
ayoungso I can put a check in the code path that the domain exists...22:08
*** salv-orlando2 has quit IRC22:08
ayoungbut that won't work for the create_domain path.22:09
*** otherwiseguy has quit IRC22:09
ayoungbut that is ok...this is identity, not assignments...22:09
morganfainbergayoung, right.22:09
morganfainbergayoung, while domain is probably the "right" term in both cases.  likely we will need to change nomenclature for identity or assignment sometime in the future to limit confusion.22:10
morganfainberge.g. identity isn't really "domain" specific in the context of a keystone domain.22:10
*** cmcnamara has joined #openstack-dev22:10
ayoungmorganfainberg, you mean that the domain table in the assignment backend having a FK constraint in the user table?22:10
*** vuil has joined #openstack-dev22:11
morganfainbergayoung, yeah. that is bad :P22:11
morganfainbergimo22:11
* dolphm there is no separation between identity and assignment - it's just an illusion22:11
ayoungmorganfainberg, not sure I buy that....sql identity is the fall back,  and the only reason to break that link would be if we were to put identity in a separate schema.  We can do that, but we then need two domain tables22:12
bknudsonI thought we had tests where identity was ldap and assignment is sql?22:12
ayoungone for identity and one for users22:12
ayoungbknudson, we do22:12
ayoungbknudson, that doens't fail the integrity constraint, as it is from the user table to the domain table22:12
morganfainbergayoung, i think in the future we likely will silo like that.22:12
*** tstevenson has quit IRC22:12
*** jbresnah has quit IRC22:12
morganfainbergespecially if we continue the split id from assignmenty22:13
*** Max__ has quit IRC22:13
ayoungmorganfainberg, the only problem is we need to keep the domain ids in sync between them.  Or we need to map.22:13
morganfainbergayoung, well personally, i think identity should be handled the same across all ID providers (more federated)22:14
morganfainbergwhether it is internal keystone-managed id or something else.  use the same mechanism to figure it out/map.22:15
morganfainbergand then do the appropriate query.22:15
*** FunnyLookinHat has quit IRC22:15
dolphmmorganfainberg: ++22:15
*** networkstatic has quit IRC22:15
morganfainbergplanning on talking about this in the federated summit session if it's approved :)22:16
*** _TheDodd_ has quit IRC22:16
*** jecarey has quit IRC22:17
*** mkollaro has quit IRC22:17
ayoungmorganfainberg, considering dolphm is the one who gets to say whether or no...I think it is likely to be approved22:17
morganfainbergayoung, yeah but it's not official yet, so...22:17
morganfainberg:P22:18
dolphmunless the entire community is suddenly way more interested in 9 other topics, we will definitely have at least one session on federation22:18
ayoungwe've got 8 Keystone session so far, and they look pretty well stratified by content area.  I suspec that any more submission will get merged into one of the existing session22:18
morganfainbergayoung, aye. it looks good22:19
ayoungAuditing is put in Keystone...but we no longer control policy22:19
ayoungI think Keystone should take back policy, and we should put it into a middleware next to auth_token22:19
morganfainbergayoung ++22:20
morganfainbergi would be in support of that.22:20
ayoungIt bothers me that it is copied, and policy enforcement is likely to be a source of security issues.22:20
ayoungI'd be OK with it being in oslo, just think it needs to be a library22:20
morganfainbergayoung, i think that middleware is a very good option for that.  it makes more sense from an enforcement standpoint than strictly a library22:21
morganfainbergand i tend to err on the side of make it a lib not middleware22:21
morganfainbergayoung, what do you think about getting cache/cache-busting header capacity into openstack in general?22:23
morganfainbergwe probably should be supplying cache-headers … people might be doing silly things with squid et al.22:23
*** edmund1 has joined #openstack-dev22:23
*** mlavalle has quit IRC22:24
*** prad has quit IRC22:24
ayoungmorganfainberg, well, it is not an either/or...a the middleware should be in a library, not in cut/pasted code22:24
*** sc68cal has joined #openstack-dev22:24
morganfainbergayoung, correct. but i mean from a standpoint of how it is consumed, or recommended be consumed22:25
*** zigo has quit IRC22:25
*** jmontemayor has joined #openstack-dev22:25
ayoungmorganfainberg, now, what do you mean by cache-busting?22:25
morganfainbergayoung, there are http headers that prevent cachability22:25
ayoungsuch as?22:26
morganfainbergwell supposed to22:26
morganfainberglooking for an example22:26
*** zigo has joined #openstack-dev22:26
*** networkstatic has joined #openstack-dev22:26
*** jbresnah has joined #openstack-dev22:27
morganfainbergayoung, it's how akamai (and other CDNs handle caching at the browser level).  Usually it's cache-control (public, private, no-cache, no-store) etc22:27
dolphmCache-Control: no-cache22:27
morganfainberg^^22:28
uvirtbotmorganfainberg: Error: "^" is not a valid command.22:28
morganfainberguvirtbot, silly bot22:28
uvirtbotmorganfainberg: Error: "silly" is not a valid command.22:28
morganfainbergLOL22:28
ayoungmorganfainberg, not certain that we want to Cache at that level.  What would we cache?  USer lists?22:28
dolphmuvirtbot: help22:28
uvirtbotdolphm: (help [<plugin>] [<command>]) -- This command gives a useful description of what <command> does. <plugin> is only necessary if the command is in more than one plugin.22:28
morganfainbergit's not so much for us to cache22:28
morganfainbergbut prevent caching on calls we wouldn't want cached22:29
morganfainbergif someoen did something silly with a cache infront of say keystone22:29
*** jmontemayor has quit IRC22:29
dolphmmorganfainberg: what would be silly about putting a cache in front of keystone?22:29
ayoungdolphm, for identity?  Nothing.  FOr tokens....22:29
morganfainbergdolphm, nothing, but they might do something with it that would really be problematic.22:30
morganfainbergeg.  what ayoung  said, tokens? revocation-list/events?22:30
*** dripton has quit IRC22:30
dolphmmorganfainberg: how is that our fault / something we can address?22:30
*** dripton has joined #openstack-dev22:31
morganfainbergdolphm, not our fault, but if we provided cache-control headers on things like revocations/tokens it indicates that this is somerthing that shouldn't be cached22:31
*** jmontemayor has joined #openstack-dev22:32
dolphmmorganfainberg: ooh, i see what you mean22:32
morganfainbergso if a cache system is layerd in front of keystone, and they cache everything but adhere to cache-control headers, we could say "go ahead and cache, but you shouldn't cache this location"22:32
ayoungmorganfainberg, is this something that is supported by our current web toolkit>22:32
ayoung?22:32
morganfainbergayoung, that is a good question.  i'll have to look.22:32
*** carl_baldwin has quit IRC22:33
*** carl_baldwin_ has joined #openstack-dev22:33
ayoungargh...checking the domain breaks unit tests22:33
dolphmmorganfainberg: we could at least provide Expires22:33
morganfainbergdolphm, yep22:33
dolphmmorganfainberg: and set it low by default22:33
dolphmlike, 1s22:33
morganfainbergdolphm, correct22:33
*** schwicht has quit IRC22:34
*** jamielennox|away is now known as jamielennox22:35
*** galstrom is now known as galstrom_zzz22:36
*** sdake_ has quit IRC22:36
morganfainbergayoung, it looks like our wsgi can add headers, but doesn't support a wide variety22:37
morganfainbergat least in keystone22:37
morganfainbergnot sure about other projects22:37
morganfainbergexample: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/auth/controllers.py#n39322:38
morganfainberghow we add x-subject-token22:38
ayoungmorganfainberg, well, we already do some custom headers...question is at what level we should set them.  I assume this should be done in the controller, to be content specific, but we can only set in wsgi.py?22:38
dolphmmorganfainberg: what do you mean it doesn't support a wide variety?22:39
morganfainbergdolphm, as in, we only support x-subject-token, and vary atm?22:39
*** morazi has quit IRC22:39
morganfainbergdolphm, we've implemented a small number22:39
morganfainbergnot lack of support in the basic "can't do it" sense22:39
dolphmmorganfainberg: as far as i can think of, yes22:39
morganfainbergi'll bet this could be done with a decorator that could be applied at the controller level.22:40
dolphmmorganfainberg: definitely could22:40
* morganfainberg is smelling either the refrigerator in the office or a new blueprint.22:40
*** rnirmal has quit IRC22:40
*** bnemec has quit IRC22:41
*** neelashah has quit IRC22:41
dolphmmorganfainberg: office refrigerators normally smell bad22:41
morganfainbergdolphm, hehe22:41
*** bnemec has joined #openstack-dev22:41
*** afazekas has quit IRC22:41
*** otherwiseguy has joined #openstack-dev22:43
jamielennoxit would be nice to have an externally developed wsgi framework rather than deal with our own e-id and expiry headers22:45
jamielennoxthat may have been mentioned, but i'm just skimming over the last bits22:45
dolphmstevemar: is the only reason we have a hard dep on python-oauth2 because we add oauth-specific data to the token via auth controllers or whatever?22:45
stevemardolphm, yo22:45
stevemardolphm: also for signing/verifying requests22:46
*** jpich has quit IRC22:48
*** gabrielhurley has quit IRC22:48
*** gmurphy has joined #openstack-dev22:49
*** danwent has quit IRC22:50
*** Ryan_Lane has quit IRC22:50
dolphmstevemar: well that code is going to break if it's not in middleware then22:52
*** Ryan_Lane has joined #openstack-dev22:52
*** jimfehlig has quit IRC22:52
ayoungdolphm, keystoneclient review for oauth expired.  Wouldn't that be the place to get it into middleware, though?22:53
stevemardolphm: so.. that doesn't sound good22:53
stevemarayoung: i'm going to restore it now22:53
stevemarayoung: just finishing up some tests22:53
*** mlavalle has joined #openstack-dev22:53
*** fbo is now known as fbo_away22:54
dolphmstevemar: have you tested it with an xml request?22:56
stevemardolphm: no22:56
dolphmstevemar: you won't be able to verify the request from behind the json/xml de/serializer22:56
*** jhesketh__ has quit IRC22:58
stevemardolphm: i have no idea what that means22:58
stevemardolphm: is it breaking the client or server?22:58
ayoungdolphm https://review.openstack.org/#/c/46363/2  you removed the -2...I assume that means you are OK with the oauth fix going in?22:59
*** litong has quit IRC22:59
*** cmcnamara has quit IRC23:00
*** jhesketh__ has joined #openstack-dev23:00
*** jhesketh has joined #openstack-dev23:00
ayoungmorganfainberg, we are confident that the removal of the default_domain thing won't break anything with https://review.openstack.org/#/c/46207/  right?23:01
*** noslzzp has quit IRC23:03
dolphmayoung: i don't think it's a great fix, but i have no reason to block23:03
morganfainbergayoung, removal of default domain?23:03
ayoungdolphm, oauth,  yeah.  It just forces the downstream distributions to add another package.  Considering oauth is optional, shouldn't have to do that yet.23:04
ayoungmorganfainberg, yeah...just trying to be more paranoid.  Question is if I am paranoid enough23:04
morganfainbergayoung, i'm not clear on waht you're asking.23:04
morganfainbergi don't think anything regarding default domain would affect that patchset23:05
morganfainbergbut..23:05
*** jcoufal has quit IRC23:05
ayoungmorganfainberg, you remove default_domain_id and replace it with default_project_id23:05
morganfainbergmore context, and i could answer with more certainty23:05
morganfainbergoh.23:05
morganfainbergthat wont affect anything23:05
*** mrodden has quit IRC23:05
morganfainbergdefault_domain_id is stripped for ldap and any non-domain aware drivers23:05
ayounguser_domain_attribute23:05
ayoungyeah...should be good.  And it would be ignored...23:06
morganfainbergyep.23:06
ayoungugh, I still hate that business_category hack23:06
ayoungmorganfainberg, can we make that "none" instead?23:07
*** lbragstad has quit IRC23:07
morganfainbergthat is a good question.23:07
morganfainbergayoung, i never tried.23:07
morganfainbergayoung, i think that might… get unhappy, might be able to make it an empty string23:07
ayoungmorganfainberg, with the attribute ignore we should be able to skip it, no?23:08
* ayoung going to try23:08
*** mlavalle has quit IRC23:08
morganfainbergayoung, we should, but i think we still do a substitution in either case23:08
morganfainbergand %s % None is not good23:08
*** sthaha has joined #openstack-dev23:08
morganfainbergif it can be none, sure. i'm game to make it so.23:09
*** jmontemayor has quit IRC23:09
ayoungmorganfainberg, testing in a moment...run devstack against your change and the ldap backend first...23:13
*** xqueralt-afk has quit IRC23:14
ayoungmorganfainberg, ok,  now trying defaulted to None...23:16
*** xqueralt-afk has joined #openstack-dev23:16
*** pmathews has quit IRC23:17
*** cdub_ has joined #openstack-dev23:18
ayoungmorganfainberg, ok, so startup seemed to work23:19
ayoungmorganfainberg, nope...failed23:20
*** networkstatic has quit IRC23:20
*** hemanth has joined #openstack-dev23:20
ayounglooks like you can create objects, but not query them...23:20
morganfainbergah.23:20
ayoungmordred,23:20
ayoungmorganfainberg,23:20
*** hemanth has quit IRC23:20
ayoung(keystone.common.ldap.core): 2013-09-17 23:19:17,178 DEBUG core search_s LDAP search: dn=ou=Users,dc=openstack,dc=org, scope=1, query=(&(sn=admin)(objectClass=inetOrgPerson)), attrs=['userPassword', 'enabled', None, 'sn', 'email']23:20
morganfainbergi'm looking at the code.  i think23:20
morganfainbergyeah23:20
ayoungok..let me try with ""23:20
morganfainbergwe could likely filter that out in the query construction23:21
*** dolphm has quit IRC23:21
morganfainberga "none" just gets dropped23:21
ayounghmmm,  yeah, but shouldn't attribute-ignored get dropped, too?23:22
morganfainbergit does, but it is filtered out later i think23:22
*** nachi has quit IRC23:22
*** mrodden has joined #openstack-dev23:22
morganfainberghttps://github.com/openstack/keystone/blob/master/keystone/common/ldap/core.py#L14923:23
morganfainbergthe ignored attributes aren't handled there23:23
*** michchap has joined #openstack-dev23:24
*** michchap has quit IRC23:25
ayoungldap_res_to_model23:25
morganfainbergayoung, yeah.23:25
ayoungso they are ignored if they are returned from an ldap query23:25
*** michchap has joined #openstack-dev23:25
morganfainbergbut you still query for the attribute(s)23:25
ayoungand in create23:25
morganfainbergseems backwardsish.23:25
ayoungmorganfainberg, what would it break if we removed them from the query?23:26
morganfainbergayoung, as far as i know, nothing.  but i've not looked very hard at it23:26
ayounglets find oput23:26
ayoungout23:26
*** spzala has joined #openstack-dev23:27
*** jbresnah has quit IRC23:27
morganfainbergayoung, it looks like it only removes the attributes on update and create, but it doesn't filter them out on get23:28
ayoungmorganfainberg, yeah...I'm going to see what happens if we remove them on get.23:29
morganfainbergayoung, likely we should be doing that as well23:29
ayoungmorganfainberg, I have a lightweight way of launchin new VMs...one is running the sql id backend, the other LDAP...very liberating...and all tied in with my SSO FreeIPA...23:29
* ayoung so happy23:29
morganfainbergthats awesome23:30
morganfainbergi need to set that up23:30
morganfainbergoh. uhm23:30
ayoungmorganfainberg, looks like keystone is waiting to start...guessing som sort of hang23:30
morganfainbergand we'll need to add some specialized handling for enabled if you remove it at get time23:30
morganfainbergget*23:30
morganfainbergperhaps23:31
ayoungmorganfainberg, syntax error...running again23:31
*** Dr_Who has joined #openstack-dev23:31
*** Dr_Who has joined #openstack-dev23:31
*** hemanth has joined #openstack-dev23:33
*** dims has quit IRC23:36
*** senk has joined #openstack-dev23:36
*** senk has quit IRC23:36
*** Dr_Who has quit IRC23:37
*** carl_baldwin_ has quit IRC23:39
*** gordc has quit IRC23:39
*** hemanth has quit IRC23:40
jamielennoxis there a specific devstack channel? bloody keystoners dominating -dev again23:42
morganfainbergjamielennox, openstack-qa?23:43
jamielennoxmorganfainberg, was thinking more devstack dev but i could give it a go23:43
clarkbjamielennox: wherever dtroyer, jeblair, and sdague hang out23:44
*** kpavel has joined #openstack-dev23:44
*** egallen has quit IRC23:44
morganfainbergclarkb, you mean i can't bug you for everything?23:44
ayoungmorganfainberg, nope, still fails23:45
morganfainbergayoung, doh.23:45
morganfainbergayoung, i think we could restructure to get that effect, but with this information, i think we need to pick a different attribute or remove that support23:46
morganfainbergsince we don't filter it out on get it looks like23:46
jamielennoxmight start with ayoung anyway: can you have a look at this when you get a sec: https://github.com/jamielennox/devstack/commit/70c98d3de045a25f03400490f4a607ce10211d0423:46
jamielennoxalso anyone else interested23:46
ayoungjamielennox, will do...but about to go into family mode...once I'm back23:47
jamielennoxno problem23:47
kbrierlyare there any known bugs in essex for nova/virt/libvirt/volume.py in disconnect_volume. It looks like it logged the server off iscsi even though there was another volume still present23:47
ayoungjamielennox, you can always ask jdennis ....23:47
ayoungand you probably should23:48
jamielennoxi assume by this time only you and morganfainberg are still online, but i'm kind of wondering about layout rather than actual cert handling23:48
* morganfainberg quickly logs off.23:49
morganfainberg:P23:49
jamielennoxand clarkb is omipresent, he just says less23:49
*** radix has quit IRC23:49
*** radix has joined #openstack-dev23:49
morganfainbergjeblair is usually around even at this time in my experience23:49
jamielennoxjeblair, dtroyer, sdague: quick ping?23:50
jamielennoxjdennis, if you're here also...23:51
*** bswartz has joined #openstack-dev23:51
*** dims has joined #openstack-dev23:52
*** RajeshMohan has quit IRC23:56
*** RajeshMohan has joined #openstack-dev23:56
*** lcheng has quit IRC23:57
*** sarob_ has joined #openstack-dev23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!