*** markwash has quit IRC | 00:00 | |
*** morazi has joined #openstack-dev | 00:01 | |
*** freedomhui has quit IRC | 00:04 | |
*** SumitNaiksatam has quit IRC | 00:04 | |
*** SumitNaiksatam has joined #openstack-dev | 00:06 | |
*** rongze has joined #openstack-dev | 00:09 | |
*** Chicago has joined #openstack-dev | 00:10 | |
*** senk has quit IRC | 00:12 | |
*** tserong has joined #openstack-dev | 00:12 | |
*** quade has joined #openstack-dev | 00:13 | |
*** rongze has quit IRC | 00:13 | |
*** colinmcnamara has joined #openstack-dev | 00:13 | |
*** bknudson has quit IRC | 00:14 | |
*** ericw has joined #openstack-dev | 00:15 | |
*** che-arne has quit IRC | 00:16 | |
*** ArcTanSusan has joined #openstack-dev | 00:17 | |
*** xarses has quit IRC | 00:19 | |
*** matsuhashi has joined #openstack-dev | 00:19 | |
*** buzztroll has joined #openstack-dev | 00:21 | |
*** kpavel has joined #openstack-dev | 00:22 | |
*** buzztroll has quit IRC | 00:26 | |
*** shakayumi has joined #openstack-dev | 00:26 | |
*** kpavel has quit IRC | 00:30 | |
*** matsuhashi has quit IRC | 00:31 | |
*** matsuhashi has joined #openstack-dev | 00:32 | |
*** matsuhashi has quit IRC | 00:37 | |
*** michchap has quit IRC | 00:41 | |
*** michchap has joined #openstack-dev | 00:42 | |
*** ericw has quit IRC | 00:46 | |
*** SergeyLukjanov has joined #openstack-dev | 00:47 | |
*** SergeyLukjanov has quit IRC | 00:49 | |
*** matsuhashi has joined #openstack-dev | 00:49 | |
*** nosnos has joined #openstack-dev | 00:52 | |
*** markwash has joined #openstack-dev | 00:58 | |
*** quade has quit IRC | 01:00 | |
*** freedomhui has joined #openstack-dev | 01:03 | |
*** markwash has quit IRC | 01:05 | |
*** rongze has joined #openstack-dev | 01:10 | |
*** dims has quit IRC | 01:11 | |
*** rongze has quit IRC | 01:14 | |
*** freedomhui has quit IRC | 01:16 | |
*** dkranz has quit IRC | 01:21 | |
*** rongze has joined #openstack-dev | 01:22 | |
*** buzztroll has joined #openstack-dev | 01:22 | |
*** yamahata has joined #openstack-dev | 01:24 | |
*** rongze has quit IRC | 01:26 | |
*** sdake has quit IRC | 01:26 | |
*** buzztroll has quit IRC | 01:27 | |
*** diist has joined #openstack-dev | 01:27 | |
*** alexpilotti has quit IRC | 01:28 | |
*** sthaha has joined #openstack-dev | 01:30 | |
*** Mandell has quit IRC | 01:39 | |
*** buzztroll has joined #openstack-dev | 01:39 | |
*** guohliu has joined #openstack-dev | 01:39 | |
*** Mandell has joined #openstack-dev | 01:39 | |
*** danwent has joined #openstack-dev | 01:43 | |
*** shakayum_ has joined #openstack-dev | 01:43 | |
*** Mandell has quit IRC | 01:44 | |
*** shakayumi has quit IRC | 01:45 | |
*** senk has joined #openstack-dev | 01:46 | |
*** markwash has joined #openstack-dev | 01:46 | |
*** bingbu has joined #openstack-dev | 01:47 | |
*** senk has left #openstack-dev | 01:47 | |
*** michchap has quit IRC | 01:53 | |
*** ericw has joined #openstack-dev | 01:53 | |
*** delta0 has joined #openstack-dev | 01:54 | |
*** freedomhui has joined #openstack-dev | 01:55 | |
*** michchap has joined #openstack-dev | 01:55 | |
*** johnpur has joined #openstack-dev | 01:56 | |
*** johnpur has quit IRC | 01:56 | |
*** sdake has joined #openstack-dev | 02:00 | |
*** dims has joined #openstack-dev | 02:01 | |
*** freedomhui has quit IRC | 02:02 | |
*** pmathews has joined #openstack-dev | 02:02 | |
diist | Hey guys, I'm quite new here! I deployed DevStack, created a few instances and played with them for a bit. I'm now looking at the doc and browsing through the different projects, there are quite a few of them! Ultimately I want to contribute do the code but what do you think would be an "easy" way to get started, is one of the project noob-friendly? Thanks | 02:05 |
---|---|---|
*** pablosan has quit IRC | 02:06 | |
*** Mandell has joined #openstack-dev | 02:06 | |
*** rongze has joined #openstack-dev | 02:07 | |
*** faramir has joined #openstack-dev | 02:07 | |
*** rongze has quit IRC | 02:08 | |
*** rongze has joined #openstack-dev | 02:09 | |
*** rongze has quit IRC | 02:09 | |
*** rongze has joined #openstack-dev | 02:09 | |
*** rcleere has joined #openstack-dev | 02:12 | |
*** ljjjustin has joined #openstack-dev | 02:14 | |
*** guohliu has quit IRC | 02:15 | |
*** lnxnut has quit IRC | 02:20 | |
*** giroro_ has quit IRC | 02:22 | |
*** buzztroll has quit IRC | 02:23 | |
*** Ruetobas has joined #openstack-dev | 02:24 | |
*** buzztroll has joined #openstack-dev | 02:24 | |
*** Ruetobas has quit IRC | 02:28 | |
*** buzztroll has quit IRC | 02:28 | |
*** Ruetobas has joined #openstack-dev | 02:28 | |
*** freedomhui has joined #openstack-dev | 02:32 | |
*** guohliu has joined #openstack-dev | 02:32 | |
*** bingbu has quit IRC | 02:32 | |
*** morazi has quit IRC | 02:34 | |
*** michchap has quit IRC | 02:36 | |
*** stevemar has joined #openstack-dev | 02:36 | |
*** ljjjustin has quit IRC | 02:37 | |
*** ljjjustin has joined #openstack-dev | 02:37 | |
*** xchu has joined #openstack-dev | 02:39 | |
*** ayoung has joined #openstack-dev | 02:40 | |
*** vipul has quit IRC | 02:41 | |
*** paragan has joined #openstack-dev | 02:42 | |
*** vipul has joined #openstack-dev | 02:42 | |
*** dims has quit IRC | 02:43 | |
*** gimps has quit IRC | 02:43 | |
*** diist has quit IRC | 02:46 | |
*** gimps has joined #openstack-dev | 02:47 | |
*** paragan has quit IRC | 02:49 | |
*** ericw has quit IRC | 02:49 | |
*** bingbu has joined #openstack-dev | 02:49 | |
*** matsuhashi has quit IRC | 02:53 | |
*** erkules_ has joined #openstack-dev | 02:53 | |
*** matsuhashi has joined #openstack-dev | 02:53 | |
*** erkules has quit IRC | 02:55 | |
*** matsuhashi has quit IRC | 02:58 | |
*** neelashah has joined #openstack-dev | 02:58 | |
*** riskable has quit IRC | 02:58 | |
*** quade has joined #openstack-dev | 03:01 | |
*** guohliu has quit IRC | 03:05 | |
*** guohliu has joined #openstack-dev | 03:05 | |
*** paragan has joined #openstack-dev | 03:05 | |
*** paragan has joined #openstack-dev | 03:05 | |
*** buzztroll has joined #openstack-dev | 03:08 | |
*** matsuhashi has joined #openstack-dev | 03:09 | |
*** dolphm has joined #openstack-dev | 03:11 | |
*** vipul is now known as vipul-away | 03:14 | |
*** dolphm has quit IRC | 03:16 | |
*** gyee has joined #openstack-dev | 03:16 | |
*** gyee has quit IRC | 03:16 | |
*** guohliu has quit IRC | 03:21 | |
*** Levin_22 has joined #openstack-dev | 03:22 | |
*** neelashah has quit IRC | 03:26 | |
*** buzztroll has quit IRC | 03:28 | |
*** buzztroll has joined #openstack-dev | 03:29 | |
*** stevemar has quit IRC | 03:29 | |
*** guohliu has joined #openstack-dev | 03:33 | |
*** buzztroll has quit IRC | 03:33 | |
*** jecarey has joined #openstack-dev | 03:34 | |
*** quade has quit IRC | 03:34 | |
*** nati_ueno has quit IRC | 03:40 | |
*** lnxnut has joined #openstack-dev | 03:40 | |
*** nati_ueno has joined #openstack-dev | 03:40 | |
*** gimps has quit IRC | 03:41 | |
*** gimps has joined #openstack-dev | 03:44 | |
*** nati_ueno has quit IRC | 03:46 | |
*** buzztroll has joined #openstack-dev | 03:49 | |
*** Mandell has quit IRC | 03:56 | |
*** Mandell has joined #openstack-dev | 03:57 | |
*** harlowja has quit IRC | 03:58 | |
*** bingbu has quit IRC | 04:00 | |
*** fifieldt has joined #openstack-dev | 04:01 | |
*** Mandell has quit IRC | 04:02 | |
*** changbl has joined #openstack-dev | 04:02 | |
*** sumanth has joined #openstack-dev | 04:03 | |
*** stevemar has joined #openstack-dev | 04:04 | |
*** stevemar has quit IRC | 04:04 | |
*** llu has quit IRC | 04:04 | |
*** stevemar has joined #openstack-dev | 04:05 | |
*** lnxnut has quit IRC | 04:06 | |
*** lnxnut has joined #openstack-dev | 04:06 | |
*** sumanth has quit IRC | 04:08 | |
*** primeministerp has quit IRC | 04:08 | |
*** lnxnut has quit IRC | 04:11 | |
*** bingbu has joined #openstack-dev | 04:13 | |
*** dripton_ has quit IRC | 04:13 | |
*** shakayum_ is now known as shakayumi | 04:13 | |
*** jecarey has quit IRC | 04:13 | |
*** delta0 has left #openstack-dev | 04:14 | |
*** buzztroll has quit IRC | 04:14 | |
*** buzztroll has joined #openstack-dev | 04:14 | |
*** yamahata has quit IRC | 04:16 | |
*** matsuhashi has quit IRC | 04:17 | |
*** yamahata has joined #openstack-dev | 04:17 | |
*** rcleere has quit IRC | 04:18 | |
*** sdake has quit IRC | 04:18 | |
*** buzztroll has quit IRC | 04:19 | |
*** matsuhashi has joined #openstack-dev | 04:20 | |
*** sumanth has joined #openstack-dev | 04:21 | |
*** Mandell has joined #openstack-dev | 04:22 | |
*** matsuhashi has quit IRC | 04:23 | |
*** ArcTanSusan has quit IRC | 04:23 | |
*** kumaranvram has joined #openstack-dev | 04:25 | |
*** pmathews has quit IRC | 04:27 | |
*** zaneb has quit IRC | 04:27 | |
*** zaneb has joined #openstack-dev | 04:28 | |
*** matsuhashi has joined #openstack-dev | 04:28 | |
*** Levin_22 has quit IRC | 04:30 | |
*** primeministerp has joined #openstack-dev | 04:33 | |
*** zaneb has quit IRC | 04:34 | |
*** rongze has quit IRC | 04:35 | |
*** chandankumar has joined #openstack-dev | 04:38 | |
*** diist has joined #openstack-dev | 04:40 | |
*** yamahata has quit IRC | 04:40 | |
*** zaneb has joined #openstack-dev | 04:41 | |
*** ArcTanSusan has joined #openstack-dev | 04:44 | |
*** reed has quit IRC | 04:49 | |
*** haomaiwa_ has joined #openstack-dev | 04:52 | |
*** ljjjustin has quit IRC | 04:53 | |
*** diist has quit IRC | 04:53 | |
*** haomaiwang has quit IRC | 04:53 | |
*** vipul-away is now known as vipul | 04:54 | |
*** ljjjustin has joined #openstack-dev | 04:55 | |
*** neoXsys has joined #openstack-dev | 04:58 | |
*** colinmcnamara has quit IRC | 05:00 | |
*** llu has joined #openstack-dev | 05:01 | |
*** vartom11 has joined #openstack-dev | 05:06 | |
*** ArcTanSusan has quit IRC | 05:11 | |
*** stevemar has quit IRC | 05:14 | |
*** nati_ueno has joined #openstack-dev | 05:15 | |
*** yamahata has joined #openstack-dev | 05:22 | |
*** mihgen has joined #openstack-dev | 05:24 | |
*** nshaikh has joined #openstack-dev | 05:24 | |
*** buzztroll has joined #openstack-dev | 05:25 | |
*** rohitk has joined #openstack-dev | 05:28 | |
*** buzztroll has quit IRC | 05:30 | |
*** erkules_ is now known as erkules | 05:34 | |
*** rongze has joined #openstack-dev | 05:35 | |
*** YorikSar has quit IRC | 05:35 | |
*** jamielennox|away is now known as jamielennox | 05:36 | |
*** buzztroll has joined #openstack-dev | 05:37 | |
*** neoXsys has quit IRC | 05:37 | |
*** nosnos_ has joined #openstack-dev | 05:37 | |
*** nosnos has quit IRC | 05:37 | |
*** rongze has quit IRC | 05:39 | |
*** SergeyLukjanov has joined #openstack-dev | 05:44 | |
*** kumaranvram has quit IRC | 05:46 | |
*** kumaranvram has joined #openstack-dev | 05:48 | |
*** vartom11 has quit IRC | 05:48 | |
*** paragan has quit IRC | 05:56 | |
*** matsuhashi has quit IRC | 05:56 | |
*** matsuhashi has joined #openstack-dev | 05:57 | |
*** denis_makogon has joined #openstack-dev | 06:01 | |
*** paragan has joined #openstack-dev | 06:03 | |
*** buzztroll has quit IRC | 06:04 | |
*** buzztroll has joined #openstack-dev | 06:04 | |
*** danwent has quit IRC | 06:06 | |
*** buzztroll has quit IRC | 06:08 | |
*** buzztroll has joined #openstack-dev | 06:09 | |
*** rushiagr has joined #openstack-dev | 06:14 | |
*** prekarat has joined #openstack-dev | 06:14 | |
*** prekarat1 has joined #openstack-dev | 06:15 | |
*** davidhadas_ has quit IRC | 06:16 | |
*** Nikolay_St has joined #openstack-dev | 06:16 | |
*** zyluo has joined #openstack-dev | 06:17 | |
*** prekarat has quit IRC | 06:19 | |
*** faramir has quit IRC | 06:25 | |
*** kushal has joined #openstack-dev | 06:27 | |
*** kushal has joined #openstack-dev | 06:27 | |
*** rongze has joined #openstack-dev | 06:32 | |
*** mihgen has quit IRC | 06:33 | |
*** faramir has joined #openstack-dev | 06:35 | |
*** yeylon_ has quit IRC | 06:36 | |
*** YorikSar has joined #openstack-dev | 06:41 | |
*** danwent has joined #openstack-dev | 06:43 | |
*** mirrorbox has quit IRC | 06:43 | |
*** mirrorbox has joined #openstack-dev | 06:43 | |
*** paragan has quit IRC | 06:48 | |
*** buzztroll has quit IRC | 06:53 | |
*** buzztroll has joined #openstack-dev | 06:54 | |
*** paragan has joined #openstack-dev | 06:56 | |
*** vipul is now known as vipul-away | 06:57 | |
*** zbitter has joined #openstack-dev | 06:57 | |
*** freedomhui has quit IRC | 06:58 | |
*** zaneb has quit IRC | 07:01 | |
*** davidhadas has joined #openstack-dev | 07:01 | |
*** matsuhashi has quit IRC | 07:02 | |
*** matsuhashi has joined #openstack-dev | 07:02 | |
*** amotoki has joined #openstack-dev | 07:03 | |
*** nosnos_ has quit IRC | 07:05 | |
*** doron_afk has joined #openstack-dev | 07:05 | |
*** vartom11 has joined #openstack-dev | 07:05 | |
*** nosnos has joined #openstack-dev | 07:05 | |
*** matsuhashi has quit IRC | 07:07 | |
*** matsuhashi has joined #openstack-dev | 07:07 | |
*** belmoreira has joined #openstack-dev | 07:10 | |
*** sridevi has joined #openstack-dev | 07:10 | |
*** ljjjustin has quit IRC | 07:10 | |
*** faramir has quit IRC | 07:12 | |
*** avishay has joined #openstack-dev | 07:14 | |
*** eglynn_ is now known as eglynn-bank-holi | 07:14 | |
*** bashok has joined #openstack-dev | 07:15 | |
*** mrunge has joined #openstack-dev | 07:15 | |
*** ben_duyujie has joined #openstack-dev | 07:16 | |
*** asalkeld is now known as asalkeld_afk | 07:20 | |
*** ljjjustin has joined #openstack-dev | 07:21 | |
*** mindpixel has joined #openstack-dev | 07:23 | |
*** MaxV has joined #openstack-dev | 07:24 | |
*** mihgen has joined #openstack-dev | 07:25 | |
*** mindpixel has quit IRC | 07:25 | |
*** mindpixel has joined #openstack-dev | 07:26 | |
*** mrunge has quit IRC | 07:26 | |
*** danwent has quit IRC | 07:27 | |
*** MaxV has quit IRC | 07:28 | |
*** ljjjustin has quit IRC | 07:28 | |
*** mihgen has quit IRC | 07:29 | |
*** mindpixel has quit IRC | 07:30 | |
*** Mandell has quit IRC | 07:31 | |
*** davidhadas_ has joined #openstack-dev | 07:32 | |
*** kushal has quit IRC | 07:32 | |
*** jamielennox is now known as jamielennox|away | 07:32 | |
*** davidhadas_ has quit IRC | 07:32 | |
*** zyluo has quit IRC | 07:32 | |
*** buzztroll has quit IRC | 07:33 | |
*** davidhadas has quit IRC | 07:33 | |
*** davidhadas has joined #openstack-dev | 07:34 | |
*** kpavel has joined #openstack-dev | 07:34 | |
*** mihgen has joined #openstack-dev | 07:37 | |
*** avishayb has joined #openstack-dev | 07:39 | |
*** DinaBelova has joined #openstack-dev | 07:44 | |
*** marekd|away is now known as marekd | 07:53 | |
*** xingchao has joined #openstack-dev | 07:55 | |
*** freedomhui has joined #openstack-dev | 07:57 | |
*** freedomhu has joined #openstack-dev | 07:59 | |
*** freedomhui has quit IRC | 07:59 | |
*** zbitter has quit IRC | 08:01 | |
*** giulivo has joined #openstack-dev | 08:01 | |
*** flaper87|afk is now known as flaper87 | 08:01 | |
*** ben_duyujie has quit IRC | 08:02 | |
*** davidhadas_ has joined #openstack-dev | 08:02 | |
*** davidhadas has quit IRC | 08:02 | |
*** rongze has quit IRC | 08:02 | |
*** boden has joined #openstack-dev | 08:03 | |
*** haomaiwa_ has quit IRC | 08:03 | |
*** giulivo has quit IRC | 08:04 | |
*** xingchao has quit IRC | 08:04 | |
*** AnilV4 has joined #openstack-dev | 08:04 | |
*** exed has joined #openstack-dev | 08:05 | |
*** giulivo has joined #openstack-dev | 08:06 | |
*** rushiagr has quit IRC | 08:06 | |
*** rushiagr2 has joined #openstack-dev | 08:06 | |
*** nati_ueno has quit IRC | 08:09 | |
*** Chicago has quit IRC | 08:09 | |
*** matsuhashi has quit IRC | 08:09 | |
*** nati_ueno has joined #openstack-dev | 08:09 | |
*** larsbutler has joined #openstack-dev | 08:09 | |
*** matsuhashi has joined #openstack-dev | 08:10 | |
*** Chicago has joined #openstack-dev | 08:10 | |
*** matsuhas_ has joined #openstack-dev | 08:12 | |
*** tkammer_ has joined #openstack-dev | 08:12 | |
*** matsuhashi has quit IRC | 08:13 | |
*** mindpixel has joined #openstack-dev | 08:13 | |
*** nati_ueno has quit IRC | 08:13 | |
*** mindpixel has joined #openstack-dev | 08:16 | |
*** yeylon_ has joined #openstack-dev | 08:17 | |
*** yamahata has quit IRC | 08:19 | |
*** MaxV has joined #openstack-dev | 08:20 | |
*** mindpixel has quit IRC | 08:21 | |
*** marun has joined #openstack-dev | 08:22 | |
mirrorbox | is that something wrong with the cinder's check-grenade-devstack-vm job on zuul? | 08:22 |
mirrorbox | I've noticed it failed even for unrelated changes | 08:22 |
*** che-arne has joined #openstack-dev | 08:24 | |
*** kumaranvram has quit IRC | 08:25 | |
*** boris-42 has quit IRC | 08:28 | |
*** sushils has joined #openstack-dev | 08:29 | |
*** kpavel has quit IRC | 08:29 | |
mirrorbox | https://jenkins01.openstack.org/job/check-grenade-devstack-vm/ | 08:30 |
*** che-arne has quit IRC | 08:32 | |
*** corXi_ has joined #openstack-dev | 08:33 | |
*** haomaiwang has joined #openstack-dev | 08:34 | |
*** kumaranvram has joined #openstack-dev | 08:36 | |
*** neoXsys has joined #openstack-dev | 08:38 | |
*** xqueralt has joined #openstack-dev | 08:39 | |
*** kumaranvram has quit IRC | 08:41 | |
*** BrianYuan has joined #openstack-dev | 08:41 | |
*** kumaranvram has joined #openstack-dev | 08:42 | |
*** alexpilotti has joined #openstack-dev | 08:43 | |
*** exed has quit IRC | 08:46 | |
*** marun has quit IRC | 08:47 | |
*** denis_makogon has quit IRC | 08:49 | |
*** safchain has joined #openstack-dev | 08:50 | |
*** exed has joined #openstack-dev | 08:50 | |
*** Shaan7 has quit IRC | 08:53 | |
*** ilyashakhat has quit IRC | 08:53 | |
*** rongze has joined #openstack-dev | 08:56 | |
*** BrianYuan has quit IRC | 08:57 | |
*** xingchao has joined #openstack-dev | 08:57 | |
*** romcheg has joined #openstack-dev | 08:59 | |
*** DinaBelova has quit IRC | 09:02 | |
*** prekarat1 has quit IRC | 09:03 | |
*** prekarat has joined #openstack-dev | 09:04 | |
*** rushiagr3 has joined #openstack-dev | 09:05 | |
*** rushiagr3 is now known as rushiagr | 09:05 | |
*** zaneb has joined #openstack-dev | 09:05 | |
*** rushiagr2 has quit IRC | 09:06 | |
*** marun has joined #openstack-dev | 09:06 | |
*** rushiagr has quit IRC | 09:07 | |
*** faramir has joined #openstack-dev | 09:09 | |
*** rushiagr has joined #openstack-dev | 09:09 | |
*** yassine has joined #openstack-dev | 09:12 | |
*** kushal has joined #openstack-dev | 09:13 | |
*** ilyashakhat has joined #openstack-dev | 09:13 | |
*** martyntaylor has joined #openstack-dev | 09:17 | |
*** danpb has joined #openstack-dev | 09:18 | |
*** kpavel has joined #openstack-dev | 09:19 | |
*** ljjjustin has joined #openstack-dev | 09:19 | |
*** fbo_away is now known as fbo | 09:23 | |
*** faramir has quit IRC | 09:27 | |
*** ljjjustin has quit IRC | 09:32 | |
*** bingbu has quit IRC | 09:32 | |
*** boris-42 has joined #openstack-dev | 09:36 | |
*** sergmelikyan has joined #openstack-dev | 09:36 | |
*** saschpe has quit IRC | 09:36 | |
*** faramir has joined #openstack-dev | 09:40 | |
*** saschpe has joined #openstack-dev | 09:40 | |
*** che-arne has joined #openstack-dev | 09:40 | |
*** exed has quit IRC | 09:41 | |
*** belmoreira has quit IRC | 09:42 | |
*** belmoreira has joined #openstack-dev | 09:43 | |
*** xchu has quit IRC | 09:47 | |
*** bvandenh has quit IRC | 09:49 | |
*** prekarat has quit IRC | 09:50 | |
*** SergeyLukjanov has quit IRC | 09:50 | |
*** SergeyLukjanov has joined #openstack-dev | 09:51 | |
*** rongze has quit IRC | 09:52 | |
*** exed has joined #openstack-dev | 09:52 | |
*** DinaBelova has joined #openstack-dev | 09:54 | |
*** JordanP has joined #openstack-dev | 09:54 | |
*** matsuhas_ has quit IRC | 09:58 | |
*** matsuhashi has joined #openstack-dev | 09:59 | |
*** matsuhashi has quit IRC | 10:03 | |
*** irimi has joined #openstack-dev | 10:05 | |
*** irimi has quit IRC | 10:06 | |
*** rongze has joined #openstack-dev | 10:06 | |
*** irimi has joined #openstack-dev | 10:07 | |
*** prekarat has joined #openstack-dev | 10:10 | |
*** pcm_ has joined #openstack-dev | 10:10 | |
*** davidhadas_ has quit IRC | 10:12 | |
*** pcm_ has quit IRC | 10:12 | |
*** mrunge has joined #openstack-dev | 10:12 | |
*** pcm_ has joined #openstack-dev | 10:12 | |
*** pixelb has joined #openstack-dev | 10:13 | |
*** mrunge has quit IRC | 10:18 | |
*** mrunge has joined #openstack-dev | 10:20 | |
*** mrunge has quit IRC | 10:20 | |
*** mrunge has joined #openstack-dev | 10:20 | |
*** mrunge_ has joined #openstack-dev | 10:21 | |
*** mrunge has quit IRC | 10:21 | |
*** faramir has joined #openstack-dev | 10:27 | |
*** mrunge_ is now known as mrunge | 10:30 | |
*** mrunge has quit IRC | 10:30 | |
*** mrunge has joined #openstack-dev | 10:30 | |
*** xingchao has quit IRC | 10:33 | |
*** paragan has quit IRC | 10:35 | |
*** rongze has quit IRC | 10:36 | |
*** faramir has quit IRC | 10:37 | |
*** amotoki has quit IRC | 10:37 | |
*** avishayb has quit IRC | 10:39 | |
*** mrunge has quit IRC | 10:46 | |
*** mrunge has joined #openstack-dev | 10:46 | |
*** davidhadas has joined #openstack-dev | 10:48 | |
*** shardy has joined #openstack-dev | 10:50 | |
*** belmoreira has quit IRC | 10:52 | |
*** nosnos has quit IRC | 10:53 | |
*** nosnos has joined #openstack-dev | 10:54 | |
*** belmoreira has joined #openstack-dev | 10:56 | |
*** nosnos has quit IRC | 10:58 | |
*** RScottCoyle has joined #openstack-dev | 11:05 | |
*** romcheg1 has joined #openstack-dev | 11:07 | |
*** avishayb has joined #openstack-dev | 11:08 | |
*** rkukura has quit IRC | 11:10 | |
*** guohliu has quit IRC | 11:10 | |
*** RScottCoyle has quit IRC | 11:11 | |
*** romcheg has quit IRC | 11:12 | |
*** mrunge has quit IRC | 11:13 | |
*** flaper87 is now known as flaper87|afk | 11:15 | |
*** DinaBelova has quit IRC | 11:20 | |
ekarlso- | fifieldt: ping mr :) | 11:24 |
*** drewlander has joined #openstack-dev | 11:24 | |
*** mrunge has joined #openstack-dev | 11:24 | |
*** viktors has joined #openstack-dev | 11:25 | |
*** neeti has joined #openstack-dev | 11:26 | |
*** exed has quit IRC | 11:27 | |
*** davidhadas has quit IRC | 11:30 | |
*** davidhadas has joined #openstack-dev | 11:31 | |
*** FunnyLookinHat has joined #openstack-dev | 11:33 | |
*** dims has joined #openstack-dev | 11:34 | |
*** rohitk has quit IRC | 11:37 | |
*** xingchao has joined #openstack-dev | 11:40 | |
*** adalbas has joined #openstack-dev | 11:46 | |
*** dstanek has joined #openstack-dev | 11:46 | |
*** xingchao_ has joined #openstack-dev | 11:48 | |
*** davidhadas has quit IRC | 11:49 | |
*** neeti has quit IRC | 11:49 | |
*** rohitk has joined #openstack-dev | 11:49 | |
*** davidhadas has joined #openstack-dev | 11:50 | |
*** dstanek has quit IRC | 11:51 | |
*** xingchao has quit IRC | 11:52 | |
*** dstanek has joined #openstack-dev | 11:52 | |
*** luisg has quit IRC | 11:54 | |
*** luisg has joined #openstack-dev | 11:54 | |
*** dkranz has joined #openstack-dev | 11:57 | |
*** sgordon has joined #openstack-dev | 11:59 | |
*** sgordon has joined #openstack-dev | 11:59 | |
*** avishay has quit IRC | 12:00 | |
*** larsbutler has quit IRC | 12:00 | |
*** doron_afk is now known as doron | 12:07 | |
*** Shaan7 has joined #openstack-dev | 12:08 | |
*** asalkeld_afk is now known as asalkeld_zzz | 12:11 | |
*** sridevi has quit IRC | 12:13 | |
*** prekarat has quit IRC | 12:13 | |
*** slagle has joined #openstack-dev | 12:15 | |
*** exed has joined #openstack-dev | 12:17 | |
*** dprince has joined #openstack-dev | 12:18 | |
*** brianr has joined #openstack-dev | 12:18 | |
*** belmoreira has quit IRC | 12:18 | |
*** vladikr has joined #openstack-dev | 12:21 | |
*** alaski has joined #openstack-dev | 12:24 | |
*** alaski has quit IRC | 12:25 | |
*** doron is now known as doron_afk | 12:25 | |
*** rongze has joined #openstack-dev | 12:25 | |
*** alaski has joined #openstack-dev | 12:26 | |
*** dolphm has joined #openstack-dev | 12:28 | |
*** dolphm has quit IRC | 12:28 | |
*** dolphm has joined #openstack-dev | 12:28 | |
*** doron_afk is now known as doron | 12:30 | |
*** sahid has joined #openstack-dev | 12:31 | |
*** sahid has quit IRC | 12:32 | |
*** mindpixel has joined #openstack-dev | 12:33 | |
*** doron is now known as doron_afk | 12:34 | |
*** thomasem has joined #openstack-dev | 12:36 | |
*** larsbutler has joined #openstack-dev | 12:37 | |
*** mindpixel has quit IRC | 12:38 | |
*** shakayumi has quit IRC | 12:42 | |
*** slagle has quit IRC | 12:44 | |
*** bpokorny has joined #openstack-dev | 12:45 | |
*** radez_g0n3 is now known as radez | 12:45 | |
*** neelashah has joined #openstack-dev | 12:46 | |
*** flaper87|afk is now known as flaper87 | 12:47 | |
*** xqueralt has quit IRC | 12:49 | |
*** litong has joined #openstack-dev | 12:49 | |
*** irimi has quit IRC | 12:50 | |
*** mindpixel has joined #openstack-dev | 12:50 | |
*** irimi has joined #openstack-dev | 12:51 | |
*** drewlander has quit IRC | 12:52 | |
*** kumaranvram has quit IRC | 12:53 | |
*** matrohon has joined #openstack-dev | 12:54 | |
*** yamahata has joined #openstack-dev | 12:55 | |
*** topol has joined #openstack-dev | 12:55 | |
*** erkules has quit IRC | 12:55 | |
*** anteaya has joined #openstack-dev | 12:55 | |
*** slagle has joined #openstack-dev | 12:55 | |
*** lnxnut has joined #openstack-dev | 12:57 | |
*** dbalog has joined #openstack-dev | 12:57 | |
*** sahid has joined #openstack-dev | 12:57 | |
*** pixelb has quit IRC | 12:58 | |
*** avishay has joined #openstack-dev | 12:59 | |
*** sahid has quit IRC | 13:00 | |
*** sahid has joined #openstack-dev | 13:00 | |
*** riskable has joined #openstack-dev | 13:00 | |
*** zul has quit IRC | 13:02 | |
*** xqueralt has joined #openstack-dev | 13:02 | |
*** ericw has joined #openstack-dev | 13:03 | |
*** achampio1 has quit IRC | 13:03 | |
*** lnxnut has quit IRC | 13:04 | |
*** dripton has joined #openstack-dev | 13:04 | |
*** lnxnut has joined #openstack-dev | 13:04 | |
*** zul has joined #openstack-dev | 13:05 | |
*** lnxnut has quit IRC | 13:05 | |
*** lnxnut has joined #openstack-dev | 13:06 | |
*** glenng has joined #openstack-dev | 13:06 | |
*** larsbutler has quit IRC | 13:06 | |
*** ruhe has joined #openstack-dev | 13:06 | |
*** mindpixel has quit IRC | 13:07 | |
*** Alexei_987 has joined #openstack-dev | 13:08 | |
*** glenng has quit IRC | 13:08 | |
*** lnxnut has quit IRC | 13:10 | |
*** larsbutler has joined #openstack-dev | 13:10 | |
*** lnxnut has joined #openstack-dev | 13:10 | |
*** ashwini has joined #openstack-dev | 13:10 | |
*** chandankumar has quit IRC | 13:12 | |
*** paragan has joined #openstack-dev | 13:13 | |
*** morazi has joined #openstack-dev | 13:13 | |
*** belmoreira has joined #openstack-dev | 13:14 | |
*** lnxnut has quit IRC | 13:15 | |
*** romcheg has joined #openstack-dev | 13:15 | |
*** dvarga has joined #openstack-dev | 13:16 | |
*** rgerganov has joined #openstack-dev | 13:17 | |
*** annegentle has joined #openstack-dev | 13:18 | |
*** kevinconway has joined #openstack-dev | 13:18 | |
*** romcheg1 has quit IRC | 13:19 | |
*** b3nt_pin has joined #openstack-dev | 13:20 | |
*** b3nt_pin is now known as beagles | 13:20 | |
*** guohliu has joined #openstack-dev | 13:20 | |
*** bashok has quit IRC | 13:21 | |
*** mriedem has joined #openstack-dev | 13:22 | |
*** glenng has joined #openstack-dev | 13:22 | |
*** SergeyLukjanov has joined #openstack-dev | 13:23 | |
*** erkules has joined #openstack-dev | 13:23 | |
*** larsbutler has quit IRC | 13:24 | |
*** READ10 has joined #openstack-dev | 13:25 | |
*** kbringard has joined #openstack-dev | 13:25 | |
*** jgriffith has quit IRC | 13:26 | |
*** xingchao_ has quit IRC | 13:26 | |
*** jgriffith has joined #openstack-dev | 13:26 | |
*** xingchao has joined #openstack-dev | 13:26 | |
*** SergeyLukjanov has quit IRC | 13:28 | |
*** SergeyLukjanov has joined #openstack-dev | 13:28 | |
*** joesavak has joined #openstack-dev | 13:29 | |
*** jayg|g0n3 is now known as jayg | 13:30 | |
*** ashwini has left #openstack-dev | 13:31 | |
*** xingchao has quit IRC | 13:31 | |
*** xingchao has joined #openstack-dev | 13:31 | |
*** max_lobur has quit IRC | 13:36 | |
*** drewlander has joined #openstack-dev | 13:36 | |
*** bogdando has quit IRC | 13:36 | |
marekd | Hi all, I have a question concerning Keystone, V3 extensions and backend tests. What I need to do right now is to make an extension stored in a SQL database. One of the attributes stored in the SQL will be a FK pointing to the domain.id . What I did was extending file keystone/tests/test_sql_migrate_extensions. There I have my own class inheriting from test_sql_upgrade.SqlMigrateBase. Unfortunately the test fails because it's called before the databas | 13:36 |
*** burt has joined #openstack-dev | 13:39 | |
*** sthaha has quit IRC | 13:40 | |
*** eharney has joined #openstack-dev | 13:40 | |
*** gordc has joined #openstack-dev | 13:41 | |
*** lbragstad has joined #openstack-dev | 13:41 | |
*** rushiagr has quit IRC | 13:42 | |
*** shakayumi has joined #openstack-dev | 13:43 | |
*** exed has quit IRC | 13:43 | |
*** RScottCoyle has joined #openstack-dev | 13:45 | |
*** aeperezt has joined #openstack-dev | 13:45 | |
*** jaypipes has joined #openstack-dev | 13:45 | |
*** larsbutler has joined #openstack-dev | 13:45 | |
*** topol has quit IRC | 13:47 | |
*** rkukura has joined #openstack-dev | 13:47 | |
*** SergeyLukjanov has quit IRC | 13:47 | |
*** xingchao has quit IRC | 13:48 | |
*** alunduil has quit IRC | 13:49 | |
*** xingchao has joined #openstack-dev | 13:49 | |
*** achampion has joined #openstack-dev | 13:49 | |
*** vijendar has joined #openstack-dev | 13:53 | |
*** nati_ueno has joined #openstack-dev | 13:54 | |
*** SergeyLukjanov has joined #openstack-dev | 13:54 | |
*** rushiagr has joined #openstack-dev | 13:54 | |
*** hemanth_ has joined #openstack-dev | 13:55 | |
*** xingchao has quit IRC | 13:56 | |
*** xingchao has joined #openstack-dev | 13:56 | |
*** exed has joined #openstack-dev | 13:57 | |
*** DinaBelova has joined #openstack-dev | 13:57 | |
tellesnobrega | hi, i created new tables for nova, but im getting a shadow_"table_name" doesnt exist | 13:59 |
*** beekneemech is now known as bnemec | 14:00 | |
*** vartom11 has quit IRC | 14:00 | |
*** shakayumi has quit IRC | 14:00 | |
tellesnobrega | all the tables should have a shadow table? what is the point of a shadow table? and how can i work around this? | 14:00 |
*** burt has quit IRC | 14:00 | |
*** nati_ueno has quit IRC | 14:00 | |
*** alop has joined #openstack-dev | 14:01 | |
*** jecarey has joined #openstack-dev | 14:01 | |
*** nati_ueno has joined #openstack-dev | 14:01 | |
*** xingchao has quit IRC | 14:01 | |
*** avishayb has quit IRC | 14:01 | |
*** FunnyLookinHat has quit IRC | 14:02 | |
*** boris-42 has quit IRC | 14:02 | |
*** b3nt_pin has joined #openstack-dev | 14:02 | |
*** spzala has joined #openstack-dev | 14:03 | |
*** tmclaugh[work] has joined #openstack-dev | 14:04 | |
*** noslzzp has joined #openstack-dev | 14:05 | |
*** yamahata has quit IRC | 14:05 | |
*** nati_ueno has quit IRC | 14:05 | |
*** stevemar has joined #openstack-dev | 14:06 | |
*** yamahata has joined #openstack-dev | 14:06 | |
*** bknudson has joined #openstack-dev | 14:07 | |
*** djoreilly has joined #openstack-dev | 14:07 | |
notmyname | ttx: looks like there isn't a swift tag on the sched summit page? | 14:07 |
*** mindpixel has joined #openstack-dev | 14:10 | |
*** ameade has joined #openstack-dev | 14:11 | |
*** avishayb has joined #openstack-dev | 14:12 | |
*** jecarey has quit IRC | 14:12 | |
*** jecarey has joined #openstack-dev | 14:13 | |
*** ruhe has quit IRC | 14:14 | |
*** blues-man has joined #openstack-dev | 14:14 | |
*** jecarey has quit IRC | 14:14 | |
*** jecarey has joined #openstack-dev | 14:14 | |
dolphm | notmyname: have you used pushed to sched recently? | 14:14 |
fifieldt | ekarlso-, hello | 14:14 |
notmyname | dolphm: just did | 14:15 |
dolphm | notmyname: if that was your first time, wait a bit... the sync doesn't seem to be immediate | 14:16 |
notmyname | kk | 14:16 |
*** tris has quit IRC | 14:16 | |
*** tris has joined #openstack-dev | 14:16 | |
notmyname | ...and I just realized that there are a bunch of swift sessions in the conference the same day as all the tech design sessions | 14:16 |
dolphm | notmyname: although, http://icehousedesignsummit.sched.org/overview/type/swift | 14:16 |
dolphm | notmyname: may not be too late to fix that! hit the scheduling thread asap | 14:17 |
*** jrwren has joined #openstack-dev | 14:17 | |
*** JordanP has quit IRC | 14:18 | |
*** max_lobur has joined #openstack-dev | 14:18 | |
*** bogdando has joined #openstack-dev | 14:19 | |
*** b3nt_pin has quit IRC | 14:20 | |
*** beagles has quit IRC | 14:21 | |
*** b3nt_pin has joined #openstack-dev | 14:21 | |
*** jimfehlig has joined #openstack-dev | 14:21 | |
*** b3nt_pin is now known as beagles | 14:21 | |
ttx | notmyname: it's autocreated when you push sessions | 14:22 |
notmyname | ttx: ok :-) | 14:22 |
*** ruhe has joined #openstack-dev | 14:23 | |
*** markmcclain has joined #openstack-dev | 14:24 | |
*** nermina has joined #openstack-dev | 14:24 | |
*** SergeyLukjanov is now known as _SergeyLukjanov | 14:24 | |
notmyname | ttx: dolphm: I'll tackle scheduling a little later this morning. I need to talk to some others in the office first | 14:24 |
*** topol has joined #openstack-dev | 14:24 | |
*** _SergeyLukjanov has quit IRC | 14:24 | |
*** fifieldt has quit IRC | 14:24 | |
*** senk has joined #openstack-dev | 14:25 | |
*** johnthetubaguy1 has joined #openstack-dev | 14:25 | |
*** alunduil has joined #openstack-dev | 14:26 | |
*** rcleere has joined #openstack-dev | 14:26 | |
*** johnthetubaguy1 is now known as johnthetubaguy | 14:27 | |
*** datsun180b has joined #openstack-dev | 14:27 | |
*** che-arne has quit IRC | 14:28 | |
*** radez is now known as radez_g0n3 | 14:28 | |
*** macjack has joined #openstack-dev | 14:30 | |
*** senk has quit IRC | 14:30 | |
*** KurtMartin has joined #openstack-dev | 14:30 | |
*** esheffield has joined #openstack-dev | 14:31 | |
*** JordanP has joined #openstack-dev | 14:32 | |
*** sumanthns has joined #openstack-dev | 14:34 | |
*** rongze has quit IRC | 14:34 | |
*** rongze has joined #openstack-dev | 14:34 | |
*** rongze has quit IRC | 14:35 | |
*** rongze has joined #openstack-dev | 14:35 | |
*** senk has joined #openstack-dev | 14:36 | |
*** SergeyLukjanov has joined #openstack-dev | 14:36 | |
*** prad_ has joined #openstack-dev | 14:36 | |
*** davidhadas_ has joined #openstack-dev | 14:37 | |
*** radez_g0n3 is now known as radez | 14:38 | |
*** davidhadas has quit IRC | 14:39 | |
*** che-arne has joined #openstack-dev | 14:40 | |
*** davidhadas_ has quit IRC | 14:41 | |
*** KurtMartin has quit IRC | 14:42 | |
*** FunnyLookinHat has joined #openstack-dev | 14:43 | |
*** beagles has quit IRC | 14:44 | |
*** yamahata has quit IRC | 14:47 | |
*** avishay has quit IRC | 14:47 | |
*** vipul-away is now known as vipul | 14:48 | |
*** mrodden has joined #openstack-dev | 14:53 | |
*** gimps_ has joined #openstack-dev | 14:53 | |
*** b3nt_pin has joined #openstack-dev | 14:53 | |
*** jecarey_ has joined #openstack-dev | 14:55 | |
*** tanisdl has joined #openstack-dev | 14:56 | |
*** b3nt_pin is now known as beagles | 14:57 | |
*** jecarey has quit IRC | 14:57 | |
*** senk has quit IRC | 14:58 | |
*** senk has joined #openstack-dev | 14:58 | |
*** ameade has quit IRC | 14:58 | |
*** ameade has joined #openstack-dev | 14:58 | |
*** senk has quit IRC | 14:58 | |
*** ameade has quit IRC | 14:59 | |
*** senk has joined #openstack-dev | 14:59 | |
*** YorikSar is now known as YorikSar_AFK | 14:59 | |
*** ameade has joined #openstack-dev | 14:59 | |
*** Ryan_Lane has quit IRC | 15:00 | |
*** senk has left #openstack-dev | 15:01 | |
*** doron_afk is now known as doron | 15:01 | |
*** sumanth has quit IRC | 15:01 | |
*** bvandenh has joined #openstack-dev | 15:02 | |
*** nati_ueno has joined #openstack-dev | 15:03 | |
*** bknudson has quit IRC | 15:03 | |
*** danwent has joined #openstack-dev | 15:03 | |
*** ameade has quit IRC | 15:05 | |
*** ameade has joined #openstack-dev | 15:05 | |
*** changbl has quit IRC | 15:06 | |
*** doron is now known as doron_afk | 15:06 | |
*** doron_afk is now known as doron | 15:07 | |
*** galstrom_zzz is now known as galstrom | 15:07 | |
jrwren | to whomever recommented the mailing list: it changed the List-Id: in mail headers breaking the most common wait to filter mailing list messages. | 15:07 |
*** doron is now known as doron_afk | 15:09 | |
*** doron_afk is now known as doron | 15:09 | |
*** reed has joined #openstack-dev | 15:10 | |
*** SergeyLukjanov has quit IRC | 15:10 | |
*** Mandell has joined #openstack-dev | 15:11 | |
*** exed has quit IRC | 15:12 | |
*** doron is now known as doron_afk | 15:13 | |
*** doron_afk is now known as doron | 15:13 | |
*** bswartz has quit IRC | 15:15 | |
*** JordanP has quit IRC | 15:18 | |
*** yeylon_ has quit IRC | 15:18 | |
*** bknudson has joined #openstack-dev | 15:19 | |
*** jruzicka has joined #openstack-dev | 15:19 | |
*** tanisdl has quit IRC | 15:19 | |
*** pmathews has joined #openstack-dev | 15:20 | |
larsbutler | hi all, keystone testing question: | 15:21 |
larsbutler | I'm trying to run coverage with `tox -e cover` | 15:21 |
*** carl_baldwin has joined #openstack-dev | 15:22 | |
larsbutler | and I get this error: http://paste.openstack.org/show/50060/ | 15:22 |
larsbutler | any idea what might be wrong? | 15:22 |
larsbutler | (this is on the latest keystone master version) | 15:22 |
*** pmathews has quit IRC | 15:23 | |
larsbutler | (otherwise, tests are running fine, with the exception of py33) | 15:23 |
*** epim has joined #openstack-dev | 15:23 | |
*** pmathews has joined #openstack-dev | 15:23 | |
*** nkinder has joined #openstack-dev | 15:23 | |
*** markmcclain has quit IRC | 15:23 | |
*** changbl has joined #openstack-dev | 15:24 | |
*** colinmcnamara has joined #openstack-dev | 15:24 | |
*** kbrierly has joined #openstack-dev | 15:24 | |
dolphm | dstanek: ^ bug? | 15:24 |
larsbutler | morning dolphm :) | 15:25 |
dolphm | larsbutler: o/ | 15:25 |
dolphm | larsbutler: i can repro that with "python setup.py testr --testr-args=--coverage" | 15:26 |
*** devoid has joined #openstack-dev | 15:26 | |
larsbutler | dolphm: okay | 15:26 |
*** zaitcev has joined #openstack-dev | 15:27 | |
larsbutler | dolphm: shall I file a bug in LP? | 15:28 |
*** sarob has quit IRC | 15:28 | |
*** rohitk has quit IRC | 15:28 | |
dolphm | larsbutler: sure | 15:28 |
dolphm | larsbutler: thanks! | 15:28 |
larsbutler | dolphm: will do | 15:28 |
*** sarob has joined #openstack-dev | 15:28 | |
*** JordanP has joined #openstack-dev | 15:30 | |
dolphm | larsbutler: try running "python setup.py testr --coverage" directly, in a venv if you need to | 15:30 |
*** herndon has joined #openstack-dev | 15:30 | |
larsbutler | dolphm: okay | 15:30 |
*** mlavalle has joined #openstack-dev | 15:30 | |
*** mlavalle has quit IRC | 15:30 | |
larsbutler | dolphm: yeah, that seems to be okay | 15:31 |
*** SergeyLukjanov has joined #openstack-dev | 15:31 | |
dolphm | e.g., .tox/cover/bin/python setup.py testr --coverage | 15:31 |
*** vijendar has quit IRC | 15:31 | |
*** Mandell has quit IRC | 15:31 | |
*** carl_baldwin has quit IRC | 15:31 | |
*** RScottCoyle_ has joined #openstack-dev | 15:31 | |
dolphm | larsbutler: i suspect that's what tox.ini should be running, if that produces coverage results as expected | 15:31 |
*** Mandell has joined #openstack-dev | 15:31 | |
*** davidhadas has joined #openstack-dev | 15:31 | |
larsbutler | dolphm: okay, it's running now… I'll let you know if the coverage is properly reported | 15:32 |
*** yamahata has joined #openstack-dev | 15:33 | |
*** sarob has quit IRC | 15:33 | |
*** bswartz has joined #openstack-dev | 15:33 | |
*** kushal has quit IRC | 15:33 | |
*** nshaikh has left #openstack-dev | 15:34 | |
*** KurtMartin has joined #openstack-dev | 15:34 | |
dstanek | dolphm: you around? | 15:34 |
*** RScottCoyle has quit IRC | 15:34 | |
*** doron is now known as doron_afk | 15:35 | |
dstanek | dolphm, larsbutler: i actually have a commit somewhere to fix the converage issue | 15:36 |
*** yassine has quit IRC | 15:36 | |
*** safchain has quit IRC | 15:36 | |
larsbutler | dstanek: nice! If you submit a patch, I'll be happy to review it | 15:36 |
*** Mandell has quit IRC | 15:36 | |
larsbutler | dstanek, dolphm: bug report here: https://bugs.launchpad.net/keystone/+bug/1245539 | 15:37 |
*** rushiagr has quit IRC | 15:37 | |
uvirtbot | Launchpad bug 1245539 in keystone "Error running test coverage: "no such option: --coverage"" [Undecided,New] | 15:37 |
dolphm | dstanek: i don't see it in gerrit, if that's what you meant | 15:37 |
larsbutler | ah :) | 15:37 |
dolphm | larsbutler: danke! | 15:37 |
dstanek | dolphm: if it's not there i'll get it there - i may not have pushed since it changes the tox.ini and i have at least one review up there for that already | 15:38 |
*** devoid has left #openstack-dev | 15:38 | |
larsbutler | dolphm: confirmed, the corrected command works and appears to produce meaningful coverage reports | 15:38 |
dstanek | i've been trying to limit the number of things i have up there since it takes some effort to keep rebasing them and for people to keep rereviewing them | 15:38 |
*** bvandenh has quit IRC | 15:39 | |
dstanek | dolphm, larsbutler: i put the option inside of the quotes instead of where it belonged | 15:39 |
dolphm | dstanek: ++ | 15:39 |
dstanek | found it in a stash: http://paste.openstack.org/show/50063/ | 15:40 |
*** ruhe has quit IRC | 15:40 | |
dstanek | i'll create a proper commit message and push | 15:40 |
*** carl_baldwin has joined #openstack-dev | 15:40 | |
*** chuck_ has joined #openstack-dev | 15:41 | |
*** bvandenh has joined #openstack-dev | 15:41 | |
*** carl_baldwin has quit IRC | 15:43 | |
*** bvandenh has quit IRC | 15:44 | |
dstanek | dolphm: i found this config file test_associate_project_endpoint_extension.conf and i think the test using it should fail | 15:45 |
larsbutler | dstanek: in master, there are two copies of the same command in tox.ini: https://github.com/openstack/keystone/blob/master/tox.ini#L15 and https://github.com/openstack/keystone/blob/master/tox.ini#L25 | 15:45 |
*** krotscheck has joined #openstack-dev | 15:45 | |
ttx | krotscheck: #openstack-infra | 15:45 |
krotscheck | Awesome, thanks | 15:46 |
*** bvandenh has joined #openstack-dev | 15:46 | |
dstanek | larsbutler: they are not the same | 15:47 |
* larsbutler looks again | 15:47 | |
*** krotscheck has quit IRC | 15:47 | |
larsbutler | dstanek: ah, you're right. my bad | 15:47 |
dstanek | larsbutler: https://review.openstack.org/54140 - see if that works for you | 15:48 |
* larsbutler looks | 15:48 | |
reed | g'day | 15:48 |
dstanek | i'm pretty sure i have one more tox.ini patch laying around, but i don't think it deals with coverage | 15:49 |
larsbutler | dstanek: okay, running tests; seems okay so far | 15:49 |
larsbutler | dstanek: once it is finished, I'll give a +1 | 15:49 |
*** sdake has joined #openstack-dev | 15:50 | |
*** alop has quit IRC | 15:50 | |
*** pablosan has joined #openstack-dev | 15:51 | |
dstanek | dolphm: but it doesn't fail and that worries me | 15:51 |
*** bvandenh has quit IRC | 15:51 | |
larsbutler | dstanek: you mean it doesn't fail the jenkins build? | 15:51 |
*** safchain has joined #openstack-dev | 15:51 | |
*** yassine has joined #openstack-dev | 15:52 | |
dstanek | larsbutler: the config refers to a class that doesn't exist and doesn't fail | 15:53 |
*** ruhe has joined #openstack-dev | 15:53 | |
*** comay has joined #openstack-dev | 15:53 | |
dstanek | i was hacking on the tests and uncovered it when it started to fail on me | 15:53 |
jgriffith | devananda: ping | 15:54 |
devananda | jgriffith: pong | 15:54 |
*** vijendar has joined #openstack-dev | 15:54 | |
*** sarob has joined #openstack-dev | 15:55 | |
jgriffith | devananda: the ironic sessions seem to overlap with cinder | 15:55 |
*** vijendar has quit IRC | 15:55 | |
jgriffith | devananda: I'd *really* like to be at your ironic disk/volumes session | 15:55 |
devananda | jgriffith: indeed | 15:55 |
jgriffith | devananda: not sure when your blocks are | 15:55 |
jgriffith | devananda: cinder is Thurs afternoon and Friday | 15:55 |
devananda | jgriffith: i have only thurs afternoon | 15:55 |
jgriffith | devananda: crums | 15:56 |
*** vijendar has joined #openstack-dev | 15:56 | |
*** Chicago has quit IRC | 15:56 | |
*** boris-42 has joined #openstack-dev | 15:56 | |
jgriffith | devananda: I also have a general session presentation during that slot | 15:56 |
*** matiu has quit IRC | 15:56 | |
jgriffith | devananda: Guess I'll see if we can do some swapping of Cinder somewhere | 15:57 |
*** sridevi has joined #openstack-dev | 15:57 | |
devananda | jgriffith: ack. | 15:57 |
devananda | that reminds me | 15:57 |
*** fabio_ has joined #openstack-dev | 15:57 | |
*** KeithSharp has joined #openstack-dev | 15:57 | |
devananda | russellb: any chance you could move a few of your tuesday sessions around so the ones that are super interesting to us tripleo folk don't overlap quite so much? | 15:57 |
*** fabio_ is now known as fabiog | 15:57 | |
*** isd has quit IRC | 15:58 | |
fabiog | ayoung: regarding #link https://review.openstack.org/#/c/46771/21 I am not so sure what actions should I take to address your id concern, please explain | 15:59 |
devananda | russellb: particularly i'm looking at the scheduler design session, conductor tasks, and (maybe) project structure | 15:59 |
*** lsmola has joined #openstack-dev | 15:59 | |
*** exed has joined #openstack-dev | 16:00 | |
*** ruhe has quit IRC | 16:01 | |
*** Ruetobas has quit IRC | 16:01 | |
*** rongze has quit IRC | 16:01 | |
*** rongze has joined #openstack-dev | 16:01 | |
*** jecarey_ has quit IRC | 16:03 | |
*** Ruetobas has joined #openstack-dev | 16:03 | |
*** changlp has quit IRC | 16:03 | |
*** chihhsin has quit IRC | 16:03 | |
*** bknudson has quit IRC | 16:04 | |
*** mrodden1 has joined #openstack-dev | 16:06 | |
*** rongze has quit IRC | 16:06 | |
*** bknudson has joined #openstack-dev | 16:06 | |
*** mindpixel has quit IRC | 16:07 | |
*** jecarey has joined #openstack-dev | 16:07 | |
*** mrodden has quit IRC | 16:07 | |
*** Ruetobas has quit IRC | 16:08 | |
*** avishayb has quit IRC | 16:08 | |
*** changlp has joined #openstack-dev | 16:08 | |
*** RScottCoyle__ has joined #openstack-dev | 16:09 | |
*** doron_afk is now known as doron | 16:09 | |
*** gyee has joined #openstack-dev | 16:09 | |
kpavel | dansmith: hi Dan, regarding your review of https://review.openstack.org/#/c/46649/11, do you think it would be better to return it to the simple "magic string" solution? | 16:10 |
*** marun has quit IRC | 16:10 | |
dansmith | kpavel: better, yes. Not sure if that will have other complications, but definitely better than what you have | 16:11 |
dansmith | kpavel: if you can go back to that method, then I can look at that and see if there's any other issues | 16:11 |
kpavel | dansmith: thanks, i will | 16:11 |
dansmith | cool | 16:12 |
*** doron is now known as doron_afk | 16:12 | |
larsbutler | dstanek, dolphm: out of curiosity, is the openstack CI running (keystone or other projects) tests with coverage? I'm assuming the answer is no | 16:12 |
*** rongze has joined #openstack-dev | 16:12 | |
*** nati_ueno has quit IRC | 16:12 | |
*** KeithSharp has quit IRC | 16:13 | |
*** RScottCoyle_ has quit IRC | 16:13 | |
*** nati_ueno has joined #openstack-dev | 16:13 | |
dolphm | larsbutler: https://jenkins.openstack.org/search/?q=coverage&max=200 | 16:14 |
dolphm | larsbutler: last run for keystone was august 6th? | 16:15 |
*** changlp has quit IRC | 16:15 | |
*** Ruetobas has joined #openstack-dev | 16:15 | |
dolphm | larsbutler: certainly pre-testr, but i don't know why the job would have been stopped | 16:15 |
*** doron_afk has quit IRC | 16:15 | |
larsbutler | dolphm: interesting | 16:15 |
*** matiu has joined #openstack-dev | 16:16 | |
bknudson | dolphm: "Coverage.py warning: No data was collected" | 16:16 |
*** alop has joined #openstack-dev | 16:17 | |
*** nati_ueno has quit IRC | 16:17 | |
*** jcoufal has joined #openstack-dev | 16:18 | |
*** amerine has quit IRC | 16:18 | |
*** chuck_ has quit IRC | 16:18 | |
*** jruzicka has quit IRC | 16:18 | |
*** nermina has quit IRC | 16:19 | |
*** DinaBelova has quit IRC | 16:20 | |
*** nermina has joined #openstack-dev | 16:20 | |
*** esheffield_ has joined #openstack-dev | 16:20 | |
*** nikhil has joined #openstack-dev | 16:20 | |
*** venkatesh has joined #openstack-dev | 16:21 | |
*** mlavalle has joined #openstack-dev | 16:22 | |
larsbutler | dolphm: I can file another bug to investigate why the coverage job stopped. Good idea? | 16:23 |
*** sarob has quit IRC | 16:23 | |
dolphm | larsbutler: always :) | 16:23 |
ttx | dhellmann, jgriffith: around ? | 16:23 |
larsbutler | funny, it seems like this is the case with all of the jobs… they all stopped on August 6th | 16:24 |
*** sarob has joined #openstack-dev | 16:24 | |
larsbutler | at least, that's the case with many, including keystone and nova | 16:24 |
*** Artpicre has joined #openstack-dev | 16:25 | |
*** kenperkins has joined #openstack-dev | 16:25 | |
*** ben_duyujie has joined #openstack-dev | 16:26 | |
*** paragan has quit IRC | 16:26 | |
dstanek | larsbutler: maybe the people in -infra know what happened | 16:26 |
*** jruzicka has joined #openstack-dev | 16:27 | |
larsbutler | dstanek: good idea | 16:27 |
*** mrunge has quit IRC | 16:28 | |
*** thingee_zzz is now known as thingee | 16:28 | |
*** venkatesh has quit IRC | 16:28 | |
*** esheffield_ has quit IRC | 16:28 | |
*** nikhil has quit IRC | 16:28 | |
*** ygbo has joined #openstack-dev | 16:29 | |
*** hemnafk is now known as hemna | 16:29 | |
*** e0ne has joined #openstack-dev | 16:31 | |
*** alop has quit IRC | 16:31 | |
*** chandankumar has joined #openstack-dev | 16:32 | |
*** corXi_ has quit IRC | 16:33 | |
*** markmcclain has joined #openstack-dev | 16:34 | |
*** moted has joined #openstack-dev | 16:34 | |
*** burt has joined #openstack-dev | 16:34 | |
*** jpeeler has quit IRC | 16:35 | |
*** jpeeler has joined #openstack-dev | 16:35 | |
*** blentz has quit IRC | 16:36 | |
*** blentz has joined #openstack-dev | 16:36 | |
*** guohliu has quit IRC | 16:36 | |
*** epim has quit IRC | 16:36 | |
larsbutler | dstanek: so apparently the coverage jobs are running, for example, on https://jenkins01.openstack.org/job/keystone-coverage/127/console | 16:36 |
*** singhs has joined #openstack-dev | 16:36 | |
*** thedodd has quit IRC | 16:37 | |
*** buzztroll has joined #openstack-dev | 16:38 | |
*** sarob has quit IRC | 16:38 | |
*** adalbas has quit IRC | 16:39 | |
*** sarob has joined #openstack-dev | 16:40 | |
*** chandankumar has quit IRC | 16:40 | |
*** nagyz has joined #openstack-dev | 16:43 | |
nagyz | hey | 16:43 |
*** buzztroll has quit IRC | 16:43 | |
nagyz | in the identity drivers, should LOG.warning()/log.DEBUG() work at all? :) | 16:43 |
*** buzztroll has joined #openstack-dev | 16:43 | |
*** rongze has quit IRC | 16:44 | |
*** narmitag has joined #openstack-dev | 16:44 | |
*** narmitag has left #openstack-dev | 16:45 | |
*** narmitag has joined #openstack-dev | 16:45 | |
*** belmoreira has quit IRC | 16:46 | |
*** narmitag has quit IRC | 16:47 | |
*** macjack has quit IRC | 16:47 | |
*** sarob has quit IRC | 16:47 | |
*** guohliu has joined #openstack-dev | 16:48 | |
dstanek | nagyz: what do you mean? | 16:48 |
*** angdraug has joined #openstack-dev | 16:49 | |
nagyz | well, even when setting debug and verbose to True in keystone's config, when I add a log.WARNING("blahblah") to anywhere in the code I don't see it in the log | 16:49 |
nagyz | and neither I see any log output from either the sql identity backend or the ldap identity backend at all | 16:49 |
dstanek | nagyz: what file are you trying to edit? also i think warning should be lowercased | 16:50 |
nagyz | trying to edit /keystone/identity/backends/ldap.py | 16:50 |
*** lnxnut has joined #openstack-dev | 16:51 | |
dolphm | nagyz: do you have a logging.conf ? that would be overriding debug / verbose in keystone.conf | 16:51 |
*** vipul has quit IRC | 16:53 | |
dstanek | nagyz: LOG is definitely defined there so i would expect LOG.warning() to show up unless like dolphm said you override the logging configuration | 16:53 |
*** armax has joined #openstack-dev | 16:53 | |
*** zhikunliu has joined #openstack-dev | 16:53 | |
nagyz | I'm using the default supplied with ubuntu's cloud repo - but tried to change the log levels to DEBUG everywhere there instead of the defaults | 16:53 |
*** vipul has joined #openstack-dev | 16:54 | |
nagyz | I added a LOG.debug("stuff") right to the first line in authenticate() | 16:54 |
*** romcheg has quit IRC | 16:54 | |
nagyz | trying to figure out actually what's wrong with my ldap setup, but I cannot see any debug output from the ldap identity code - that's why I added a few of me own debug lines there to no avail | 16:54 |
dstanek | nagyz: are you sure it's using that backend? | 16:55 |
*** lnxnut has quit IRC | 16:55 | |
*** chandankumar has joined #openstack-dev | 16:56 | |
morganfainberg | dolphm, i've been trying to chase down the oddities with https://review.openstack.org/#/c/53050/ | 16:56 |
nagyz | yes, triple-checked, and keystone user-list works | 16:56 |
morganfainberg | dolphm, i think we have some bad/incorrect tests going on here. | 16:56 |
*** lnxnut has joined #openstack-dev | 16:56 | |
*** sahid has quit IRC | 16:56 | |
dstanek | morganfainberg: i've been working on a change to the v3 tests that fixes some of the isses | 16:57 |
dolphm | morganfainberg: i'd rather see tests organized into unit / functional / integration first :( | 16:57 |
dstanek | morganfainberg: it's actually a mess | 16:57 |
morganfainberg | dstanek, yes it is | 16:57 |
dstanek | dolphm: ++ | 16:57 |
*** alunduil has quit IRC | 16:57 | |
*** markmcclain has quit IRC | 16:57 | |
morganfainberg | dstanek, i think we have some "it works by accident" stuff going on | 16:57 |
*** harlowja has joined #openstack-dev | 16:57 | |
dstanek | morganfainberg: yes, actually there is a config file with an invalid class specified; so i would expect the test to fail | 16:58 |
morganfainberg | dolphm, i was going to say i wanted to get back to KVS refactor and circle back to that one either in HK or after since it's less time-drivin | 16:58 |
*** nermina has joined #openstack-dev | 16:58 | |
dstanek | morganfainberg: but it doesn't and i suspect it's because the load_backend method is called over and over again | 16:58 |
morganfainberg | dstanek, it also the test_associate_project doesn't actually load that class, since it was wedged into setup_database | 16:58 |
morganfainberg | dstanek, instead of how oauth is setup | 16:59 |
dstanek | morganfainberg: i don't what to push to gerrit yet, but i can push to github for you to take a peek if you are interested | 16:59 |
russellb | devananda: hmm, let me take a look and see what i can do | 16:59 |
morganfainberg | dstanek, no worries, no rush. i just wanted to raise the flag that we have a mess. | 16:59 |
jgriffith | ttx: dhellmann ping0 | 16:59 |
*** tanisdl has joined #openstack-dev | 16:59 | |
dolphm | dstanek: git-review --wip <-- doesn't exist but it should | 17:00 |
morganfainberg | dolphm, ++++++++++++++++++ | 17:00 |
morganfainberg | dstanek, dolphm, i think some of the cleanup is going to need moving the important teardown stuff into the addCleanup mechanism. | 17:01 |
dstanek | morganfainberg: https://github.com/dstanek/keystone/tree/fix-all-the-tests | 17:01 |
*** changlp has joined #openstack-dev | 17:01 | |
dolphm | haha | 17:01 |
*** terriyu has quit IRC | 17:01 | |
dstanek | morganfainberg: still working on making that last commit actually work for everything | 17:01 |
dstanek | i think there are just a handful of failing tests | 17:02 |
dolphm | reminds me of termie's trust-no-one branch | 17:02 |
*** chihhsin has joined #openstack-dev | 17:02 | |
*** jlabocki has joined #openstack-dev | 17:02 | |
*** aspiers has quit IRC | 17:03 | |
*** twoputt has joined #openstack-dev | 17:03 | |
*** 16WABCWLK has joined #openstack-dev | 17:03 | |
*** ramishra has joined #openstack-dev | 17:04 | |
*** neelashah has quit IRC | 17:04 | |
*** ramishra has quit IRC | 17:04 | |
nagyz | dstanek, is there any way to disable the logging filter? or any guide that talks about logging.conf | 17:05 |
morganfainberg | dstanek, ideally (if possible) move the override config for the endpoint_filtering test to work like the oauth configs. having the override in setup_database wont do anything useful nor test the catalog_sql backend | 17:05 |
nagyz | I do see some DEBUG entries in the log tho, from dogpile and routers.middleware | 17:05 |
dstanek | dolphm: does that mean you'd want me to rename my system directory? https://review.openstack.org/#/c/53208/ | 17:05 |
*** markwash has quit IRC | 17:05 | |
morganfainberg | dstanek, provided by endpoint filtering that is. | 17:06 |
*** Ryan_Lane has joined #openstack-dev | 17:07 | |
dstanek | morganfainberg: not sure what you mean. with my changes that config is not loaded and the tests fail because the class doesn't exist | 17:08 |
*** guohliu has quit IRC | 17:08 | |
morganfainberg | dstanek, ah, ok. | 17:08 |
*** Ryan_Lane has quit IRC | 17:08 | |
morganfainberg | dstanek, it's a bad implementation to wedge into setup_database though. the override should be defined in setUp() | 17:08 |
morganfainberg | erm | 17:08 |
morganfainberg | sorry | 17:08 |
morganfainberg | in setup_config | 17:08 |
morganfainberg | er crap | 17:08 |
morganfainberg | sorry | 17:08 |
morganfainberg | .config_files() | 17:08 |
ayoung | fabiog, well, first of all, make the intention clear. If the idea of Shared secret is to be a better mechanism for a user to have multiple passwords, and rotate through them, it seems to fall down with the ID field | 17:09 |
*** carl_baldwin has joined #openstack-dev | 17:09 | |
morganfainberg | dstanek, i swear i know the code i am talking about :P | 17:09 |
*** sridevi has quit IRC | 17:09 | |
dstanek | morganfainberg: i agree; that top commit is really to stop loading data multiple times for all of the v3 tests | 17:09 |
dstanek | morganfainberg: there will be more commits to clean other things | 17:09 |
dstanek | i think that is commit #4 on the branch | 17:10 |
ayoung | fabiog, for example, a user can't go "userid = "XXXX" "PW ID = "XXXX" "Password = "XXXXX" in a request, and certainly can' | 17:10 |
morganfainberg | dstanek, ahh | 17:10 |
ayoung | t with basic-auth | 17:10 |
fabiog | ayoung: I added this description in the latest patch: | 17:10 |
*** terriyu has joined #openstack-dev | 17:11 | |
fabiog | The shared-secret authentication method is intended to be used for service to service authentication. It supports multiple credentials enabling secret rotations without service interruption. | 17:11 |
morganfainberg | dstanek, cool | 17:11 |
dstanek | nagyz: there is an option, i believe log-config, that allows you to specify a file to override the logging config; if you are not setting it I don't think you are using it | 17:11 |
morganfainberg | dstanek, and i was wrong oauth doesn't do it, PKI token provider does: https://github.com/openstack/keystone/blob/master/keystone/tests/test_v3_auth.py#L98 | 17:11 |
*** markmcclain has joined #openstack-dev | 17:12 | |
*** mihgen has quit IRC | 17:12 | |
*** carl_baldwin has quit IRC | 17:12 | |
*** yassine has quit IRC | 17:12 | |
nagyz | dstanek, no, that's not set. | 17:12 |
*** marios_ has quit IRC | 17:13 | |
morganfainberg | dolphm, so with that said, since dstanek is killing it with tests (and is awesome for doing so), I'm going to get back to KVS and domain cleanup since i want to hit that stuff as early as possible. | 17:13 |
*** carl_baldwin has joined #openstack-dev | 17:13 | |
*** marios has joined #openstack-dev | 17:13 | |
nagyz | dstanek, so with debug=True, verbose=True, logging not set this is ALL the debug output I get for request (which tries to authenticate): http://pastebin.com/LwGWf61H | 17:13 |
fabiog | ayoung: so you want also to add the user_id to the request with the credential_id, or you want to change the password authentication method? | 17:13 |
nagyz | I belive I should get a lot more output... | 17:13 |
*** sergmelikyan has quit IRC | 17:14 | |
*** marios has quit IRC | 17:14 | |
*** marios has joined #openstack-dev | 17:14 | |
*** esheffield_ has joined #openstack-dev | 17:15 | |
*** nikhil|afk has joined #openstack-dev | 17:15 | |
*** Ryan_Lane has joined #openstack-dev | 17:15 | |
*** venkatesh has joined #openstack-dev | 17:16 | |
*** DinaBelova has joined #openstack-dev | 17:16 | |
*** amerine has joined #openstack-dev | 17:16 | |
*** vipul is now known as vipul-away | 17:16 | |
*** SumitNaiksatam has quit IRC | 17:17 | |
*** ruhe has joined #openstack-dev | 17:17 | |
*** ruhe has quit IRC | 17:17 | |
*** danpb has quit IRC | 17:17 | |
ayoung | fabiog, I don't really want tyo do any of this. I see the value of multple passwords, but not completely sold on it. I need to understand how the mechanism is going to work. I don't want a parallel password scheme from the current one we have, so if we are going to use this share-dsecret approach, it has to work cleanly with the current auth | 17:17 |
*** alunduil has joined #openstack-dev | 17:17 | |
ayoung | Ideally, that means it would have the same semantics as Basic-Auth | 17:17 |
*** jruzicka has quit IRC | 17:18 | |
*** mlavalle has quit IRC | 17:18 | |
ayoung | fabiog, having a user-definedn identifier on the password seems strange, probably a case of overapplying the rules for unique identifiers in openstack | 17:19 |
*** isd has joined #openstack-dev | 17:19 | |
ayoung | fabiog, why should service-to-service be any different than user-to-service? | 17:20 |
*** buzztroll has quit IRC | 17:20 | |
*** buzztroll has joined #openstack-dev | 17:20 | |
*** neelashah has joined #openstack-dev | 17:20 | |
*** exed has quit IRC | 17:21 | |
fabiog | ayoung: is not different, it is just requiring a higher level of automation, not having a person involved | 17:21 |
fabiog | ayoung: the shared secret is an extension | 17:21 |
fabiog | and if we think we can collapse it into the current password later on, I am sure we can think about it | 17:22 |
ayoung | fabiog, there are much better mechanisms than symetric shared secrets for that. Do we really need this> | 17:22 |
*** kpavel has quit IRC | 17:22 | |
*** zaneb has quit IRC | 17:22 | |
fabiog | ayoung: well, this is a mechanism that several vendors already have and I think it is valuable | 17:23 |
*** blues-man has left #openstack-dev | 17:23 | |
*** blues-man has quit IRC | 17:23 | |
*** flaper87 is now known as flaper87|afk | 17:23 | |
*** krotscheck has joined #openstack-dev | 17:24 | |
ayoung | fabiog, I think it is probably a mistake | 17:24 |
*** spzala has quit IRC | 17:24 | |
ayoung | fabiog, we already have too many OS specific security mechanisms | 17:24 |
ayoung | This one feels really wrong. I can see it, though, if it is a fix for the current password mechanism | 17:25 |
ayoung | not as an additional mechanism | 17:25 |
*** vipul-away is now known as vipul | 17:25 | |
ayoung | fabiog, why should a user be able to have more than one password active at a time? | 17:25 |
*** marekd is now known as marekd|away | 17:26 | |
fabiog | ayoung: because in this way can change it without disruption. I can have services sending the updated password and other using the old one | 17:26 |
ayoung | fabiog, so never more than two, right? | 17:27 |
ayoung | old and new | 17:27 |
fabiog | ayoung: it would be unlikely, unless you use different credentials for different regions, which could be a use case | 17:27 |
fabiog | (not sure ..) | 17:27 |
*** markmcclain has quit IRC | 17:27 | |
*** yassine has joined #openstack-dev | 17:27 | |
*** carl_baldwin has quit IRC | 17:28 | |
ayoung | fabiog, I assume you want a workflow like this: send new password to keystone, send new password to server, ensure service is using new password, delete old | 17:28 |
morganfainberg | fabiog, isn't this really just an alternate to the EC2 compatible key-pair (ayoung, why is it named such?... it's not a keypair...) | 17:28 |
fabiog | morganfainberg: yes it is | 17:28 |
morganfainberg | fabiog, it feels ... like almost completely duplicated effort. | 17:28 |
morganfainberg | fabiog, is there a reason the keypair couldn't be used instead? | 17:29 |
*** galstrom is now known as galstrom_zzz | 17:30 | |
fabiog | morganfainberg, originally the proposal was called access-key and secret-key which is a key pair concept | 17:30 |
*** ayoung has quit IRC | 17:30 | |
*** yassine has quit IRC | 17:30 | |
fabiog | but since it really uses the credentials, it was re-named shared-secret | 17:30 |
*** romcheg has joined #openstack-dev | 17:31 | |
*** chandankumar has quit IRC | 17:31 | |
*** ayoung has joined #openstack-dev | 17:31 | |
ayoung | sorry, dropped there, did I miss anything? | 17:31 |
*** markmcclain has joined #openstack-dev | 17:32 | |
fabiog | ayoung: just commenting on morganfainberg, that this proposal was based on a key-pair concept | 17:32 |
fabiog | but it was later requested to be changed as a credential shared-secret | 17:33 |
*** changlp has quit IRC | 17:33 | |
*** chihhsin_ has joined #openstack-dev | 17:33 | |
*** chihhsin has quit IRC | 17:33 | |
*** amerine has quit IRC | 17:35 | |
*** Ryan_Lane has quit IRC | 17:35 | |
*** changlp has joined #openstack-dev | 17:35 | |
*** zhikunliu has quit IRC | 17:36 | |
ayoung | fabiog, I'd be much happier with it if it were a Key pair | 17:37 |
*** djoreilly has quit IRC | 17:37 | |
ayoung | fabiog, the idea of multiple passwords is OK, too | 17:38 |
dolphm | ayoung: nothing about it looks like "key-pair" to me-- it's just password rotation | 17:38 |
ayoung | but I just would want it to tie in with the existing auth mechanisms, not a new onw | 17:38 |
fabiog | ayoung: but what is the difference? the credential_id and secret are arbitrary strings | 17:38 |
stevemar | ayoung: ping | 17:38 |
ayoung | dolphm, in its currrent incarnation, I agree. But the same rules of rotation apply for keypairs and shared-secret. I can see the deisrre for a mechanism to do multiple for rotations purposes for both | 17:39 |
dolphm | ayoung: ++ there's no reason why a Password auth plugin couldn't back to the /v3/credentials persistance | 17:39 |
ayoung | dolphm, that would be a good thing, I think | 17:39 |
*** fbo is now known as fbo_away | 17:39 | |
ayoung | dolphm, then again, I'd say it should get out of the request and be basic-auth, too. | 17:40 |
ayoung | request-body | 17:40 |
*** SumitNaiksatam has joined #openstack-dev | 17:41 | |
ayoung | dolphm, and...going even further, I would say we want to wean people off of shared secret passwords altogether | 17:41 |
dolphm | ayoung: agree | 17:41 |
*** reed has quit IRC | 17:41 | |
gyee | ayoung, dolphm, shared secret and passwords are a bit different | 17:42 |
*** burt has quit IRC | 17:42 | |
gyee | we only store the salted hash of the password in the backend | 17:42 |
*** galstrom_zzz is now known as galstrom | 17:43 | |
*** MaxV has quit IRC | 17:43 | |
dolphm | gyee: aren't you using ldap anyway? | 17:43 |
*** tkammer_ has quit IRC | 17:43 | |
gyee | also, you can shared the same password among services and expected to do rolling upgrade | 17:43 |
gyee | you can't | 17:43 |
gyee | dolphm, we can integrate with LDAP | 17:43 |
stevemar | ayoung: give me a pong when you're free :O | 17:43 |
*** MaxV has joined #openstack-dev | 17:44 | |
gyee | but it doesn't have to be LDAP | 17:44 |
morganfainberg | ayoung, ++ on getitng people off shared secret | 17:44 |
devananda | dhellmann: ping | 17:44 |
*** markwash has joined #openstack-dev | 17:44 | |
*** rongze has joined #openstack-dev | 17:44 | |
dolphm | gyee: i'm not sure who's going to appreciate an password-rotation implementation that doesn't hash passwords | 17:44 |
gyee | dolphm, we don't dictate security, we simply facilitate it :) | 17:45 |
*** ygbo has quit IRC | 17:45 | |
ayoung | gyee, passwords are shared secrets. They are currently the only implementation we have of them. Unless you count the KDS work. Please don't tell me that you think there should be even another one beyond that. | 17:45 |
dolphm | gyee: in this case, you're discouraging it | 17:45 |
ayoung | And...if you really want shared secrets, you should look at the KDS implementation | 17:45 |
*** JordanP has quit IRC | 17:45 | |
gyee | ayoung, I don't need something hot and heavy, just a simple mechanism | 17:46 |
gyee | if we want to allow multiple active password mechanism, that's fine with me | 17:46 |
ayoung | gyee, I knew you were going to say that. Time to schedule your public flogging | 17:46 |
*** msmedved`afk is now known as msmedved | 17:47 | |
* msmedved returns (Auto-away after 30 mins idle [2d 0h 46m 47s]) (total away time: 2d 0h 46m 47s) | 17:47 | |
gyee | ayoung, this ain't Singapore | 17:47 |
*** irimi has quit IRC | 17:47 | |
dolphm | msmedved: consider turning that off? | 17:47 |
*** jvrbanac has joined #openstack-dev | 17:48 | |
*** MaxV has quit IRC | 17:48 | |
gyee | password reset will be fun though as you require both old and new password | 17:48 |
gyee | which one to reset? :) | 17:48 |
*** reed has joined #openstack-dev | 17:48 | |
*** aspiers has joined #openstack-dev | 17:48 | |
stevemar | ayoung: \o/ | 17:49 |
dolphm | gyee: i wouldn't call that a "reset" | 17:49 |
morganfainberg | dolphm, ++ | 17:49 |
fabiog | dolphm, ayoung: having multiple passwords active at the same time is not counter intuitive? | 17:49 |
morganfainberg | that isn't really a reset | 17:49 |
gyee | dolphm, how do we handle rolling upgrade? | 17:49 |
nagyz | so could it be that dogpile eats up all the identity driver log messages? | 17:49 |
nagyz | I've been chasing this for hours now and have no idea what I'm doing wrong | 17:49 |
msmedved | dolphm, ok, sorry about that | 17:49 |
dolphm | fabiog: that's exactly what you're asking for, afaict | 17:49 |
dolphm | msmedved: i just don't think it benefits anyone in the channel | 17:49 |
*** exed has joined #openstack-dev | 17:50 | |
morganfainberg | fabiog, gyee, wouldn't this almost be better as trusts? | 17:50 |
gyee | I need to have two password/shared-secret active, do the rolling upgrade, then revoke the old one | 17:50 |
*** dolphm is now known as dolphm_afk | 17:50 | |
gyee | if you can solve this with the current password framework, I am good with that | 17:51 |
morganfainberg | authorize exactly what you want to be allowed, for a given user/etc. if you need to roll the upgrade, make a new trust, roll to that... | 17:51 |
*** sarob has joined #openstack-dev | 17:51 | |
*** mlavalle has joined #openstack-dev | 17:51 | |
dhellmann | jgriffith: pong | 17:51 |
dhellmann | devananda: pong | 17:51 |
gyee | morganfainberg, trust deals with delegation | 17:51 |
morganfainberg | gyee, and you're looking for stict authn | 17:52 |
morganfainberg | ? | 17:52 |
morganfainberg | strictly* | 17:52 |
gyee | morganfainberg, correct, authn | 17:52 |
*** msmedved has quit IRC | 17:52 | |
*** msmedved has joined #openstack-dev | 17:52 | |
*** rongze has quit IRC | 17:53 | |
devananda | dhellmann: for the thursday sched change, what works better? | 17:53 |
ayoung | gyee, of course not. If it were Singapore, it would be caning | 17:53 |
gyee | heh | 17:53 |
gyee | I can't tell the difference | 17:53 |
gyee | equally painful | 17:54 |
dhellmann | devananda: I could make the early afternoon slots work, but not the late afternoon | 17:54 |
devananda | dhellmann: i could move cinder-for-ironic to the 2:40 slot. not sure if that's better for jgriffith though? | 17:55 |
ayoung | Hong Kong was a British Colony. Cat-o-9-tails was the preferred means of discipline | 17:55 |
*** freedomhu has quit IRC | 17:56 | |
morganfainberg | gyee, so i'm just trying to see if we can make something a bit more generic... so we don't need this more nad more mechanisms to solve the same general problem | 17:56 |
ayoung | fabiog, I am OK with the concept of rotations. We see the same thing with X509 renewals | 17:56 |
*** Kupo24z has joined #openstack-dev | 17:56 | |
morganfainberg | ayoung, ++ rotations isn't a bad idea. | 17:56 |
dhellmann | devananda: Do you and jgriffith want to work that out and let me know? | 17:57 |
ayoung | fabiog, but it needs to be secure, and it needs to tie in with the existing mechanisms in a clean way. I think the API you have is pretty close, but we need to close the loops | 17:57 |
fabiog | ayoung: so what changes are required to the shared-secret? | 17:57 |
ayoung | So, first, it needs to be a tie in with the existing password mechanisms | 17:57 |
nagyz | dstanek, any ideas? | 17:57 |
ayoung | second, if there is going to be an ID, it needs to be scoped to the user | 17:57 |
ayoung | and I am not certain that we need the id | 17:58 |
ayoung | it cannot be used in any communications, or we have just added a new mechanism | 17:58 |
*** e0ne has quit IRC | 17:58 | |
fabiog | ayoung: you mean creadential_id? | 17:58 |
gyee | ayoung, id is already scoped to the user | 17:58 |
gyee | credential have user_id in it | 17:58 |
*** e0ne has joined #openstack-dev | 17:58 | |
ayoung | gyee, the create api had a user supplied ID in it. | 17:58 |
gyee | ayoung, correct, user_id is mandatory in credential_ref | 17:59 |
*** jvrbanac has quit IRC | 17:59 | |
ayoung | gyee, I can see an argument for the id being there so that a user can come by later and say "disable pw #4" | 17:59 |
gyee | sure, you can disable password with ID 4 | 17:59 |
*** dolphm_a_ has joined #openstack-dev | 18:00 | |
devananda | dhellmann: let's see what jgriffith says. i can be flexible with rearrangign the ironic sessions within my slots, except for the 5:20 wrap-up. | 18:00 |
gyee | dolphm_a_, what's up with the _a_? :) | 18:00 |
morganfainberg | gyee, afk? maybe | 18:00 |
*** mihgen has joined #openstack-dev | 18:00 | |
gyee | ah | 18:00 |
*** alunduil has quit IRC | 18:01 | |
*** singhs has quit IRC | 18:01 | |
dhellmann | devananda: yeah, I have already shuffled some so I'm running out of room to do more. Those afternoon slots do work, though. | 18:01 |
morganfainberg | ayoung, it almost seems like all password auth should be backed by credential backend in this case? | 18:01 |
gyee | morganfainberg, ayoung, the method name can't be password then | 18:01 |
gyee | since we need id/password instead of username/password | 18:01 |
*** nikhil|afk is now known as nikhil_ | 18:02 | |
tellesnobrega | hi, while running nova tests, where can i find the sqlite db? | 18:02 |
*** dolphm___ has joined #openstack-dev | 18:02 | |
*** nikhil_ is now known as Guest95889 | 18:02 | |
morganfainberg | gyee, it would be potentially doable to compare against all creddentials for the user with type "password" but... i am unsure if that isn't far too expensive to even consider | 18:02 |
ayoung | gyee, hmmm...I see how you ended up there....but not sure I really want us to support it | 18:02 |
*** mihgen has quit IRC | 18:03 | |
*** Guest95889 is now known as nikhil|afk | 18:03 | |
*** dolphm_a_ has quit IRC | 18:03 | |
*** e0ne has quit IRC | 18:03 | |
*** dolphm_afk has quit IRC | 18:03 | |
ayoung | gyee, so...instead of of a user having userid/password they will have multiple crednetial_ids/shared-secrets | 18:04 |
gyee | morganfainberg, yeah, perf could be an issue as authn is a high requency call | 18:04 |
gyee | frequency | 18:04 |
ayoung | nah, it would be cheap enough | 18:04 |
ayoung | filter by userid first | 18:04 |
morganfainberg | ayoung, unless they had ~1000s of credentials for a user...but i'd argue at that point... make a second user or 10 | 18:05 |
ayoung | morganfainberg, even then I suspect it would not really be an issue, but we could always limit the number of creds to prevent a DOS of that sort | 18:05 |
gyee | ayoung, I am OK with 3 active ones | 18:06 |
ayoung | but interesting that credntial_id/shared-secret would work with basic-auth | 18:06 |
morganfainberg | alternatively, it would be possible to seed the IDs for the credential in a sane way and use that in lieu of the user_id. since credential id maps to user_id. if using "username" or "user_id" you'd compare against all possible creds for the user? | 18:06 |
nagyz | do you guys see any debug log output in keystone.conf from any of your identity drivers? | 18:06 |
nagyz | the "deepest" i see the calls are dogpile +sqlalchemy, but nothing directly from the driver | 18:06 |
ayoung | nagyz, I use an integrated debugger | 18:06 |
*** mrpink has joined #openstack-dev | 18:07 | |
*** hemanth_ has quit IRC | 18:07 | |
ayoung | nagyz, the logging stuff is kindof weird. Do you see a log call that should be triggered, but is not? | 18:07 |
*** singhs has joined #openstack-dev | 18:08 | |
nagyz | I added a LOG.debug() (tried critical, info, whatever you can think of) into the beginning of authenticate() in the ldap backend, yet not seeing this in any of the keystone logs | 18:08 |
morganfainberg | nagyz, if you have caching enabled, it is possible the debug from the assignment backend wouldn't be called if it is cached. | 18:08 |
Kupo24z | Hey All, have a new bug; can someone confirm weither or not its working as intended? https://bugs.launchpad.net/nova/+bug/1245595 | 18:08 |
uvirtbot | Launchpad bug 1245595 in nova "Resize with LVM Restores from Image; Clears All Data" [Undecided,New] | 18:08 |
morganfainberg | but only assignment | 18:08 |
*** amcrn has joined #openstack-dev | 18:08 | |
ayoung | fabiog, gyee, so, it is not an API issue, but the passwords and shared-secrets should both be securely stored | 18:08 |
gyee | ayoung, morganfainberg, so we are OK with using the password mechanism with credential_id/password in the payload? | 18:08 |
ayoung | gyee, well, i think it is OK. Some details still to be worked out | 18:08 |
morganfainberg | gyee, i think that is fair, but we should seed the credential id or salt it with something we can always identify it is a cred id vs user_iud | 18:09 |
*** martyntaylor has quit IRC | 18:09 | |
morganfainberg | gyee, i also think we need to only store salted hashes (same as password) | 18:09 |
gyee | morganfainbert, it would be the same mechanism as passwords | 18:09 |
*** 16WABCWLK is now known as twoputt_ | 18:09 | |
nagyz | morganfainberg, can I just set cache=False to counter this if this is indeed happening? | 18:09 |
morganfainberg | gyee, aye | 18:09 |
gyee | salt + 1000 round of hash | 18:09 |
morganfainberg | nagyz, [cache] section of the config, enabled = False | 18:09 |
morganfainberg | nagyz, but disabled should be the default | 18:09 |
ayoung | morganfainberg, we can add "credential_id" to the password mechanisms if we really want....I just don't really want to add any more mechanisms like this at all. | 18:10 |
nagyz | ok, it's indeed disabled, but just to be sure I set it to false. | 18:10 |
*** misterpink has quit IRC | 18:10 | |
morganfainberg | ayoung, i'd rather not make credential_id specific. i'd rather be able to use either cred_id or user_id or username | 18:10 |
ayoung | gyee, I assume that this would not be "either/or" | 18:10 |
gyee | ayoung, that also means we need to change dolphm's password reset API | 18:10 |
gyee | for password reset, user will need to specify *which password* to reset | 18:10 |
morganfainberg | ayoung, if it came to that. | 18:10 |
ayoung | gyee, no... | 18:11 |
nagyz | this is ALL the output getting added to keystone.log using the ldap identity driver with debugging enabled: http://pastebin.com/CPsTPXNN | 18:11 |
gyee | or it has to be two operations | 18:11 |
ayoung | gyee, password reset could work with this mechanism just fine | 18:11 |
gyee | 1) create new password, and 2) revoke old password | 18:11 |
ayoung | password reset could do that in one call | 18:11 |
morganfainberg | ayoung, ++ | 18:11 |
gyee | ayoung, I am confused, we are storing passwords in credentials no? | 18:11 |
gyee | if I read you guys correctly | 18:12 |
morganfainberg | gyee, yes, but standard password reset call could do it in one call. | 18:12 |
gyee | are we not changing password auth plugin to use credentials backend? | 18:12 |
nagyz | there must be a way to get back the nice ldap debugging like in grizzly... | 18:12 |
dstanek | ayoung, gyee, morganfainberg: does what you are talking about affect https://review.openstack.org/#/c/52456/ | 18:12 |
nagyz | cause this is useless for debugging right now :) | 18:12 |
*** jvrbanac has joined #openstack-dev | 18:13 | |
ayoung | dstanek, yeah...potentially | 18:13 |
gyee | dstanek, yes | 18:13 |
morganfainberg | nagyz, you're running it under eventlet, right? can you put a paste up of your config? | 18:13 |
dstanek | k, i should probably pay attention then :-) | 18:13 |
gyee | morganfainberg, how do we know "which password" to reset? | 18:13 |
ayoung | nagyz, do you still get that with caching turned off? | 18:13 |
ayoung | gyee, password is linked to user | 18:13 |
ayoung | so if a user changes a password, they are assuming they have one and only one | 18:13 |
gyee | a user can have multiple passwords under this proposal | 18:13 |
gyee | we can't assume anything | 18:14 |
ayoung | gyee, we would have a different API for multiple passwords if your approach goes through | 18:14 |
dstanek | gyee: do ou hae a link to the proposal? | 18:14 |
nagyz | ayoung, yes, caching disabled. | 18:14 |
nagyz | morganfainberg, guess so. default ubuntu. :) let me put my paste conf somewher | 18:14 |
gyee | ayoung, different APIs? | 18:14 |
ayoung | gyee, "change the password that matched the one you passed in" | 18:14 |
gyee | ayoung, which if I have multiple matches | 18:14 |
morganfainberg | gyee, what ayoung said, i was assuming the use of changing the password that matched the "old one" in that case. | 18:14 |
ayoung | nagyz, your trace showed dogpile as the last thing called | 18:14 |
bknudson | mordred: On https://launchpad.net/openstack -- "Mailing list" is out of date -- http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev | 18:15 |
gyee | same shared secret with different ID | 18:15 |
morganfainberg | ayoung, dogpile always logs something. | 18:15 |
nagyz | ayoung, exactly; but this happens even with the SQL identity backend, where I do see the queries from sqlalchemy, but not a single log line from the sql identity driver itself | 18:15 |
morganfainberg | ayoung, it has some lock magic regardless if it is on or off. low impact | 18:15 |
gyee | morganfainberg, I can have multiple credentials with different credential_id | 18:15 |
ayoung | nagyz, you have debugging turned on in the log? | 18:15 |
gyee | API allows that | 18:15 |
morganfainberg | gyee, oh i see, same credential "foobar111" with id 1, and someone else uses | 18:16 |
morganfainberg | "foobar111" with id 23 | 18:16 |
morganfainberg | which would it reset. | 18:16 |
morganfainberg | ah | 18:16 |
*** ruhe has joined #openstack-dev | 18:16 | |
nagyz | ayoung, log_config is not set in the keystone.conf, but just to be sure I changed the levels to DEBUG in /etc/keystone/logging.conf that ships with the ubuntu package | 18:16 |
ayoung | morganfainberg, but the credentials should be scoped to the user. | 18:16 |
gyee | morganfainberg, correct, same user can have multiple passwords (of the same string) but with different IDs | 18:16 |
morganfainberg | ayoung, what gyee just said. | 18:17 |
morganfainberg | ayoung, i see the issue. | 18:17 |
gyee | only credential_id is globally unique | 18:17 |
*** MaxV has joined #openstack-dev | 18:17 | |
*** adalbas has joined #openstack-dev | 18:17 | |
dstanek | what it the usecase for mulitple passwords - it sounds odd hearing about it for the first time | 18:17 |
ayoung | but there is an interesting question: can a user have multiple shared-secrets that have the same secret value? | 18:17 |
ayoung | dstanek, rotation | 18:17 |
gyee | ayoung, yes, API allows that | 18:17 |
ayoung | dstanek, assume a service reads password out of a config file | 18:17 |
ayoung | dstanek, admin user changes password, and there is a race condition on the next request | 18:18 |
morganfainberg | nagyz, debug = true in the config as well? | 18:18 |
nagyz | yep | 18:18 |
nagyz | and verbose=True just to be sure. | 18:18 |
ayoung | dstanek, old password is still in the config file | 18:18 |
*** KurtMartin has quit IRC | 18:18 | |
morganfainberg | nagyz, and this is eventlet not httpd right? | 18:18 |
morganfainberg | nagyz (using keystone-all to start keystone) | 18:18 |
dstanek | ayoung: so we'd want the old one to work for some period of time? | 18:18 |
ayoung | need to kill -HUP type changes to reread config file meanwhile, service is still chugging along, and tries to perform operation | 18:18 |
nagyz | morganfainberg, yes. | 18:19 |
morganfainberg | dstanek, aye. | 18:19 |
*** yaguang has joined #openstack-dev | 18:19 | |
ayoung | dstanek, yep | 18:19 |
gyee | dstanek, yes, for password rotation and rolling upgrade | 18:19 |
morganfainberg | actually... that is another interesting enhancement.... make credentials possible to be time-limited.... | 18:19 |
*** KurtMartin has joined #openstack-dev | 18:19 | |
morganfainberg | some other discussion later on that though | 18:19 |
ayoung | nagyz, how did you deploy? | 18:19 |
dstanek | interesting...does that open us up to security issues? say a password is changed because it is compromised | 18:19 |
morganfainberg | dstanek, you'd revoke/disable that password immidiately | 18:19 |
*** SergeyLukjanov is now known as _SergeyLukjanov | 18:19 | |
nagyz | ayoung, apt-get install keystone :-) from the ubuntu cloud repo for havana. | 18:19 |
*** bauzas has quit IRC | 18:20 | |
morganfainberg | dstanek, explicitly, and get everything updated directly | 18:20 |
nagyz | ayoung, this is the package version, if it's any indication: 1:2013.2~rc4-0ubuntu1~cloud0 | 18:20 |
*** _SergeyLukjanov has quit IRC | 18:20 | |
nagyz | not sure why it's rc4, not the final... | 18:20 |
ayoung | nagyz, I'm a Red Hat guy...don't much uyes that, so a few more questions for you | 18:20 |
*** pixelb has joined #openstack-dev | 18:20 | |
*** DinaBelova has quit IRC | 18:21 | |
ayoung | nagyz, when you turned on debugging, how did you restart the server? | 18:21 |
nagyz | service keystone restart, which essentially stops keystone-all and restart it under the right user | 18:21 |
nagyz | I can try stop, start, but would be shocked if there were a difference | 18:21 |
morganfainberg | nagyz, can you verifty the process was actually stopped/started? | 18:21 |
ayoung | nagyz, ok...and it is unlikely that there are multiple config files, either, so you probably edited the right one | 18:21 |
morganfainberg | nagyz, upstart gets cranky sometimes | 18:22 |
nagyz | when I do a restart I do see keystone dumping the current settigns to the log file | 18:22 |
ayoung | logging is further controlled by logging.conf | 18:22 |
gyee | nagyz, run keystone with ltrace and you can see which conf file it is loading | 18:22 |
ayoung | https://github.com/openstack/keystone/blob/master/etc/logging.conf.sample is the one we ship with | 18:22 |
gyee | just look for the open sys calls | 18:22 |
*** DinaBelova has joined #openstack-dev | 18:22 | |
nagyz | ayoung, even with logging_conf not set? | 18:22 |
nagyz | er, log_config | 18:22 |
ayoung | but there is nothing in there that would affect this anyway | 18:22 |
ayoung | nagyz, well, I guess not. | 18:23 |
ayoung | nagyz, hmmm, so you are using LDAP, right? | 18:23 |
*** chihhsin_ has quit IRC | 18:23 | |
*** devoid has joined #openstack-dev | 18:23 | |
nagyz | trying to. :) | 18:23 |
*** devoid has left #openstack-dev | 18:23 | |
nagyz | after a bit of hacking I have the suse hybrid driver working with havana, which allows me to do a keystone user-list | 18:24 |
nagyz | but even with the pure ldap driver I do not see the ldap queries | 18:24 |
nagyz | or any output from the ldap driver. | 18:24 |
dstanek | has the mulitple credentials idea been discussed in a etherpad or blueprint yet? | 18:24 |
*** chihhsin has joined #openstack-dev | 18:24 | |
nagyz | open("/etc/keystone/keystone.conf", O_RDONLY) = 3 | 18:24 |
nagyz | it's opening the right config. | 18:24 |
ayoung | nagyz, is there any indication that the LDAP driver is doing the right thing? | 18:25 |
gyee | dstanek, not yeah, this is something as the result of shared-secret extension | 18:25 |
tellesnobrega | hi, i created some tables on nova but im getting this error when testing the version migration Failed to migrate to version 228 on engine Engine(sqlite://) can anyone help me? | 18:25 |
*** safchain has quit IRC | 18:25 | |
*** ruhe has quit IRC | 18:25 | |
nagyz | ayoung, with tcpdump I can see traffic going out to the ldaps port for the ldap server | 18:25 |
morganfainberg | nagyz, if you could post a paste of your config it might be easier to eyeball and make sure nothing is explicitly missing (leave out passwords of course) | 18:26 |
nagyz | sure, let me get a paste somewhere | 18:26 |
ayoung | nagyz, cool...so it really is just a problem with logging, and not something swallowing the calls | 18:26 |
nagyz | ayoung, I think so too. | 18:26 |
dstanek | gyee: it sounds like i would not want my review merged because i would rather only deal with a credentials resource | 18:26 |
ayoung | nagyz, and you are getting decent logging elsewhere, just not the drivers, no? | 18:26 |
gyee | dstanek, yeah, we need go iron out the details | 18:27 |
morganfainberg | ayoung, he is seeing router.middleware stuff, sqlalchemy, and dogpile | 18:27 |
morganfainberg | ayoung. http://pastebin.com/CPsTPXNN | 18:27 |
morganfainberg | and some wsgi stuff | 18:27 |
morganfainberg | (info/warning) | 18:27 |
*** singhs has quit IRC | 18:27 | |
nagyz | ayoung, yep | 18:27 |
gyee | dstanek, we may need credential_id/old_password/new_password in order to do reset | 18:27 |
ayoung | nagyz, OK, I think that is cuz we log nothing | 18:27 |
ayoung | nagyz, look here | 18:27 |
ayoung | https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap.py | 18:28 |
ayoung | the only LOG message is in user-list | 18:28 |
nagyz | if I add a LOG.debug() myself to the beginning of authenticate, that gets swallowed too | 18:28 |
gyee | dstanek, but usability may suffer as user normally won't remember credential_id | 18:28 |
*** Mandell has joined #openstack-dev | 18:29 | |
*** singhs has joined #openstack-dev | 18:29 | |
nagyz | here's the config I'm running: http://pastebin.com/HESTAnt8 | 18:29 |
*** MaxV has quit IRC | 18:29 | |
nagyz | (the other un-related thing would be that if I change "enabled" via keystone command line utils for a user, and it's coming from a read-only LDAP server, where will keystone save that, if at all.) | 18:30 |
*** romcheg has quit IRC | 18:30 | |
*** sushils has quit IRC | 18:31 | |
dstanek | gyee: they would be able to get a list of credentials right? if so usability isn't too much worse | 18:31 |
ayoung | nagyz, do you see any logging at the startup? | 18:31 |
nagyz | ayoung, yeah I do see keystone dumping the settings for each option | 18:31 |
*** SergeyLukjanov has joined #openstack-dev | 18:31 | |
ayoung | nagyz, actually, there should be a good bit of logging https://github.com/openstack/keystone/blob/master/keystone/common/ldap/core.py | 18:31 |
gyee | dstanek, list of credentials in the UI? are you going to show the naked passwords? | 18:31 |
ayoung | nagyz, for example, every simplebind should get logged in a debug setup | 18:32 |
nagyz | ayoung, I used to have these logs with grizzly in the past. just not since I reinstalled and wanted to use havana. | 18:32 |
nagyz | those are exactly what I'd like to see | 18:32 |
nagyz | to see why I cannot authenticate users :) | 18:32 |
ayoung | nagyz, I believe you. We just haven't fielded this problem yet | 18:32 |
ayoung | trying to figure out if it is us or you | 18:32 |
nagyz | sure | 18:32 |
nagyz | I'm happy to help in any way I can | 18:32 |
morganfainberg | oh ... i wonder | 18:32 |
*** amcrn has left #openstack-dev | 18:33 | |
morganfainberg | ayoung, if logging.conf is loaded at all, it overrides everything else, no matter what. | 18:33 |
nagyz | (hah, the ibm host masking doesn't work when I log in via pure v6) | 18:33 |
morganfainberg | nagyz, is logging.conf being loaded at all? | 18:33 |
nagyz | how could I verify that, besides checking log_config? | 18:33 |
nagyz | 2013-10-28 19:31:33.664 22575 DEBUG keystone-all [-] log_config = None log_opt_values /usr/lib/python2.7/dist-packages/oslo/config/cfg.py:1941 | 18:34 |
morganfainberg | ok that should be fine. | 18:34 |
nagyz | should deafult_log_levels change "keystone" to "DEBUG" instead of "INFO" with debug=True? | 18:34 |
ayoung | morganfainberg, smells like a side effect of the switch over to oslo logging | 18:34 |
ayoung | is there some assumption we were making that is no longer true>? | 18:34 |
dstanek | gyee: no, but i would assume if there can be multiple passwords that you'd allow then to have a description | 18:34 |
morganfainberg | ayoung, aye | 18:34 |
*** dolphm___ has quit IRC | 18:35 | |
*** MaxV has joined #openstack-dev | 18:35 | |
gyee | dstanek, there's no description field in credential_ref today | 18:35 |
morganfainberg | ayoung, i'm spinning up a ubuntu vm now... but going to need to run to a meeting for 10-15 mins in a sec | 18:35 |
*** nikhil|afk is now known as nikhil__ | 18:35 | |
*** galstrom is now known as galstrom_zzz | 18:35 | |
dstanek | gyee: if there is no list how will a user know what passwords they have? | 18:36 |
gyee | dstanek, that's my concern with this proposal | 18:36 |
*** exed has quit IRC | 18:36 | |
gyee | the usability aspect | 18:36 |
ayoung | gyee, honestly, I would rather get automated users off of passwords and deal with a key rotation extension than add a new credential type for shared secret | 18:37 |
*** changbl has quit IRC | 18:37 | |
ayoung | nagyz, I'm guessing that we broke something in the log config | 18:37 |
gyee | ayoung, that's what the current proposal is dealing with | 18:38 |
nagyz | ayoung, is there an easy "hack" that I could apply to see if that's indeed the case? | 18:38 |
ayoung | gyee, changing everything over to PKI? | 18:38 |
ayoung | nagyz, so what I am tracking down is the config path right now | 18:38 |
gyee | ayoung, no, shared-secret | 18:38 |
ayoung | gyee, and that sucks | 18:38 |
ayoung | nagyz, it used to be in keystone/common/config/py | 18:39 |
ayoung | but now it is in | 18:39 |
gyee | ayoung, like I said, we don't dictate security, we simple facilitate it | 18:39 |
gyee | security is a process, Keystone is a tool :) | 18:39 |
*** aeperezt has quit IRC | 18:39 | |
ayoung | https://github.com/openstack/keystone/blob/master/keystone/openstack/common/log.py | 18:39 |
ayoung | gyee, but if you can go back to the powers that be and say "the Keystone team said No" what happens? | 18:40 |
nagyz | as a quick fix, can't I set it to log to syslog? | 18:40 |
ayoung | nagyz, you can do anything you like. I'm notcertain yet what is going wrong | 18:41 |
nagyz | sure I can I meant if that would/could help :) | 18:41 |
ayoung | nagyz, I suspect not | 18:42 |
ayoung | nagyz, since you are getting some logging in the current incarnation, lets not change too much at once | 18:42 |
ayoung | nagyz, ok, so you suggested change | 18:42 |
ayoung | default_log_levels[keystone]=DEBUG | 18:42 |
ayoung | nagyz, I suspect that is correct, at least in intention | 18:42 |
*** ben_duyujie has quit IRC | 18:43 | |
gyee | ayoung, I am perfectly fine with "No" as long as we have legitimate reasons | 18:43 |
gyee | force ppl to use PKI is not a good reason | 18:43 |
gyee | though I am a big fan of PKI, but I don't dictate PKI | 18:43 |
ayoung | gyee, supporting an additional password mech in Keystone is not a good idea | 18:43 |
nagyz | ayoung, just adding that to keystone.conf works? | 18:44 |
ayoung | gyee, so, if you can come in with a way to make it work cleanly with the existing, I'd be far more likely to go along with it | 18:44 |
ayoung | nagyz, no idea | 18:44 |
nagyz | I mean is that the place I should modify it? | 18:44 |
nagyz | hah :) | 18:44 |
ayoung | nagyz, not sure the format | 18:44 |
ayoung | nagyz, let me see if I can find some documentaion | 18:44 |
gyee | ayoung, we just discuss that multiple password route and its not usable it the current form | 18:45 |
gyee | password reset is an issue | 18:45 |
ayoung | gyee, ...really hard for me to get behind this proposal | 18:45 |
*** novas0x2a|laptop has joined #openstack-dev | 18:46 | |
*** lucasagomes has joined #openstack-dev | 18:46 | |
ayoung | gyee, I like the idea of PKI for service users. | 18:46 |
ayoung | gyee, and I can certainly get behind a rotation API for PKI | 18:47 |
*** lucasagomes has left #openstack-dev | 18:47 | |
*** thedodd has joined #openstack-dev | 18:47 | |
*** dolphm_afk has joined #openstack-dev | 18:47 | |
gyee | ayoung, I just submited a proposal for PKI auth | 18:48 |
ayoung | gyee, you mean rotation for the credentials API as a PKI auth mechanism? | 18:48 |
*** rongze has joined #openstack-dev | 18:49 | |
gyee | ayoung, no , right now just cert authorization | 18:49 |
ayoung | dhellmann, can you tell me how I can change the default log level for a single service using the oslo config for oslo debug? | 18:49 |
ayoung | s!debug!log! | 18:49 |
ayoung | nagyz, it is a list option. and I am not certain what the format is to change just a single value for that list | 18:50 |
ayoung | nagyz, it might be that it can be overridden by a different value, too | 18:50 |
*** changbl has joined #openstack-dev | 18:51 | |
*** romcheg has joined #openstack-dev | 18:51 | |
*** aeperezt has joined #openstack-dev | 18:51 | |
nagyz | ayoung, google told me that it's a nova.conf option, but trying to apply it in keystone.conf doesn't work | 18:52 |
*** dolphm_afk has quit IRC | 18:52 | |
ayoung | nagyz, so, one option is to edit the source | 18:52 |
nagyz | I'm fine with that. | 18:52 |
ayoung | nota gret option, but worth trying. Just keep the original around | 18:52 |
nagyz | would this be keystone/openstack/common/log.py then? | 18:53 |
nagyz | let me see | 18:53 |
*** mihgen has joined #openstack-dev | 18:53 | |
ayoung | nagyz, yeah | 18:53 |
nagyz | 2013-10-28 19:53:45.362 27098 DEBUG keystone-all [-] default_log_levels = ['amqplib=WARN', 'sqlalchemy=WARN', 'boto=WARN', 'suds=INFO', 'keystone=DEBUG', 'eventlet.wsgi.server=WARN'] log_opt_values /usr/lib/python2.7/dist-packages/oslo/config/cfg.py:1941 | 18:53 |
nagyz | let's see. | 18:53 |
nagyz | and voila | 18:54 |
nagyz | I see my LDAP debug | 18:54 |
*** yaguang has quit IRC | 18:54 | |
nagyz | so basically debug=True doesn't propagate into default_log_levels in oslo | 18:54 |
morganfainberg | nagyz, ah | 18:54 |
*** larsbutler has quit IRC | 18:54 | |
morganfainberg | ayoung, it was, infact, an artifact of common logging | 18:55 |
*** rongze has quit IRC | 18:55 | |
*** kpavel has joined #openstack-dev | 18:56 | |
*** jergerber has joined #openstack-dev | 18:56 | |
fabiog | stevemar and dolphm: can you please let me know if the changes in #link:https://review.openstack.org/#/c/53046/ are good? | 18:56 |
*** freedomhui has joined #openstack-dev | 18:57 | |
*** xqueralt has quit IRC | 18:57 | |
stevemar | fabiog: yes sir | 18:57 |
fabiog | stevemar: I said "please" ;-) | 18:58 |
stevemar | fabiog: sir, yes i noticed that, sir | 18:58 |
morganfainberg | fabiog, stevemar, would it even be possible to have an extension w/o a controller/router? | 18:58 |
nagyz | so two related questions: does anybody know what happened to suse's hybrid identity driver? | 18:58 |
stevemar | morganfainberg, yep you can | 18:58 |
nagyz | I'd like to have the service accounts locally in mysql, but the users should come from ldap. | 18:58 |
morganfainberg | stevemar, i mean... would it _actually_ be able to do anything? | 18:59 |
morganfainberg | :P | 18:59 |
fabiog | morganfainberg: if the extension does not have new API | 18:59 |
*** crobertsrh has joined #openstack-dev | 18:59 | |
stevemar | morganfainberg: https://github.com/openstack/keystone/tree/master/keystone/contrib/admin_crud | 18:59 |
fabiog | morganfainberg: the OS-SHARED-SECRET would not need that | 18:59 |
fabiog | because is a plug-in for token provider | 18:59 |
morganfainberg | stevemar, bad example, put router in core.py there (old) | 18:59 |
fabiog | so no need for routers | 18:59 |
morganfainberg | fabiog, if it was developed in-tree it would go in keystone/token/providers | 19:00 |
stevemar | morganfainberg, yeah, but in the docs we are calling it out to make sure its a new file | 19:00 |
morganfainberg | fabiog, (i'm playing devils advocate, not really complaining) | 19:00 |
fabiog | morganfainberg, right, but as an extension it would be in the contrib folder | 19:00 |
gyee | morganfainberg, stevemar, fabiog, extension != API extension | 19:01 |
gyee | we need to distinguish that | 19:01 |
*** freedomhui has quit IRC | 19:01 | |
morganfainberg | gyee, that is the point i was getting to | 19:01 |
nagyz | morganfainberg, should I open a bug? | 19:02 |
stevemar | maybe the docs should have that distinction :) | 19:02 |
*** Alexei_987 has quit IRC | 19:02 | |
morganfainberg | nagyz, about? the logging? | 19:02 |
nagyz | yes | 19:02 |
*** dolphm_afk has joined #openstack-dev | 19:02 | |
*** Alexei_987 has joined #openstack-dev | 19:02 | |
morganfainberg | nagyz, likely we should get documentation fixed for that | 19:02 |
gyee | stevemar, agree | 19:02 |
*** buzztroll has quit IRC | 19:02 | |
morganfainberg | nagyz, it is worth doing so for that. | 19:02 |
nagyz | morganfainberg, I had to hack the source to get it working... doesn't sound like a docu tweak | 19:02 |
fabiog | stevemar: I will add a sentence, saying that extensions implementing API extensions must have the routers and controllers | 19:02 |
*** markmcclain has quit IRC | 19:02 | |
morganfainberg | oh what source? in common/openstack? | 19:02 |
nagyz | yeah | 19:02 |
nagyz | the log.py file | 19:03 |
*** jsavak has joined #openstack-dev | 19:03 | |
morganfainberg | well. we _shouldn't_ change that directly | 19:03 |
nagyz | to manually change default_log_levels["keystone"] | 19:03 |
*** joesavak has quit IRC | 19:03 | |
nagyz | yes, but when keystone is started up with debug=True, then default_log_levels["keystone"] should be DEBUG, right? | 19:03 |
nagyz | instead of INFO | 19:03 |
morganfainberg | since that is sync'd from oslo, but yes. def. open a bug, and tag it as havana-backport-potential | 19:03 |
*** buzztroll has joined #openstack-dev | 19:03 | |
nagyz | sure thing. | 19:03 |
morganfainberg | nagyz, actually wait a sec | 19:04 |
*** joesavak has joined #openstack-dev | 19:04 | |
morganfainberg | nagyz, if you set in the config default_log_levels = keystone=DEBUG did it work? | 19:04 |
nagyz | I can try that. | 19:05 |
morganfainberg | it should be a viable config option | 19:05 |
morganfainberg | it is something we should fix, but i am looking for ease of use. | 19:06 |
nagyz | no, that doesn't help | 19:07 |
nagyz | hmm | 19:07 |
nagyz | interesting. | 19:07 |
*** dims has quit IRC | 19:07 | |
nagyz | wait a set, let me retest it. | 19:07 |
fabiog | stevemar: pushed the changes | 19:08 |
*** jsavak has quit IRC | 19:08 | |
nagyz | yep | 19:08 |
*** jvrbanac has quit IRC | 19:08 | |
*** aeperezt has quit IRC | 19:08 | |
nagyz | 2013-10-28 20:07:52.613 29934 DEBUG keystone-all [-] default_log_levels = ['amqplib=WARN', 'sqlalchemy=WARN', 'boto=WARN', 'suds=INFO', 'keystone=INFO', 'eventlet.wsgi.server=WARN'] log_opt_values /usr/lib/python2.7/dist-packages/oslo/config/cfg.py:1941 | 19:08 |
nagyz | doesn't change it | 19:08 |
fabiog | morganfainberg: now there is a distinction when is mandatory to use routers and controllers | 19:08 |
*** boden_ has joined #openstack-dev | 19:09 | |
nagyz | morganfainberg, ok, actually, that does fixes it. | 19:09 |
nagyz | I added it under [default] with just "log_levels = ...", and that didn't fix it, then I realized I missed the "default" from there | 19:09 |
*** dims has joined #openstack-dev | 19:10 | |
*** boden has quit IRC | 19:10 | |
nagyz | added it as a comment | 19:11 |
nagyz | https://bugs.launchpad.net/keystone/+bug/1245629 | 19:11 |
uvirtbot | Launchpad bug 1245629 in keystone "keystone is ignoring debug=True" [Undecided,New] | 19:11 |
nagyz | oh, nice. :) | 19:11 |
morganfainberg | nagyz, thanks! | 19:13 |
morganfainberg | this might just be a doc "fix" | 19:13 |
morganfainberg | but we should def. fix "Debug" | 19:13 |
morganfainberg | in the config | 19:13 |
nagyz | is it possible to mesh-up multiple identity drivers? | 19:13 |
nagyz | or let's say I do the work, would it be something worthwile? | 19:13 |
*** rainya has quit IRC | 19:13 | |
nagyz | *worthwhile | 19:13 |
*** otherwiseguy has quit IRC | 19:13 | |
morganfainberg | nagyz, you mean, have a store for SQL for users, and a separate store for some ldap users? | 19:13 |
nagyz | or take any number of identity servers and try them in order until a user is found in any of them | 19:14 |
nagyz | but yeah | 19:14 |
morganfainberg | nagyz, we have that partially working in havana | 19:14 |
*** melwitt has joined #openstack-dev | 19:14 | |
dolphm_afk | morganfainberg: nagyz: what caused this? | 19:14 |
morganfainberg | it is on the roadmap for icehouse for full support. | 19:14 |
morganfainberg | dolphm_afk, artifact of moving to common logging | 19:14 |
dolphm_afk | morganfainberg: that was forever ago! | 19:14 |
*** dolphm_afk is now known as dolphm | 19:14 | |
morganfainberg | keystone is set to INFO level by default in the oslo.config log.py file (as it should be() | 19:15 |
*** alunduil has joined #openstack-dev | 19:15 | |
*** DinaBelova has quit IRC | 19:15 | |
morganfainberg | we might have picked up a "change" in a subsequent sync | 19:15 |
nagyz | morganfainberg, but isn't it something easy to implement with a mesh-up driver? it just implements a dummy Identity interface and for each call that it gets it proxies them to the other drivers | 19:15 |
nagyz | or what am I missing? | 19:15 |
dolphm | morganfainberg: we moved to oslo.config 1.2 final right around h3 | 19:15 |
nagyz | dolphm, I have no idea what caused this, just this bit me in the ass today :) | 19:15 |
morganfainberg | dolphm, and did we get a subsequent sync of the log.py file? | 19:15 |
morganfainberg | dolphm, i am going to check in a moment | 19:15 |
morganfainberg | but the way to "enable debug" in ekystone is different now. | 19:16 |
morganfainberg | because of that. | 19:16 |
morganfainberg | dolphm, https://github.com/openstack/keystone/blob/master/keystone/openstack/common/log.py#L134 is the line that caused the issue. | 19:17 |
morganfainberg | dolphm, this came with the normal sync of oslo logging. | 19:18 |
dolphm | damn, that's annoying | 19:18 |
*** DinaBelova has joined #openstack-dev | 19:19 | |
morganfainberg | dolphm, so we can either look at hacking debug=True in the config to "do the right thing" again, or document this new method | 19:19 |
morganfainberg | dolphm, ++ yes. | 19:19 |
morganfainberg | annoying | 19:19 |
nagyz | morganfainberg, so any idea about this mesh-up? :-) if it can be achieved with the havana codebase currently. | 19:20 |
nagyz | I cannot change our corporate LDAP server | 19:20 |
morganfainberg | nagyz, so what is the exact behavior you're looking for? | 19:20 |
*** jvrbanac has joined #openstack-dev | 19:20 | |
morganfainberg | nagyz, i want to be sure to direct you down the right path | 19:21 |
nagyz | morganfainberg, have the service users in local sql while all the normal users in ldap | 19:21 |
ayoung | stevemar, BTW, that is what you get for asking politely....ignored for an hour or so...what is up? | 19:21 |
*** bauzas has joined #openstack-dev | 19:22 | |
ayoung | nagyz, can you log that as a bug? | 19:22 |
nagyz | ayoung, already did: https://bugs.launchpad.net/keystone/+bug/1245629 | 19:22 |
uvirtbot | Launchpad bug 1245629 in keystone "keystone is ignoring debug=True" [Undecided,New] | 19:22 |
*** DinaBelova has quit IRC | 19:22 | |
ayoung | nagyz, just saw that...I should finish catching up before typing | 19:22 |
nagyz | :-) | 19:22 |
nagyz | my first (potentially correct) bug! \o/ | 19:23 |
morganfainberg | nagyz. nice!! | 19:23 |
* nagyz is also going to the summit to lurk around | 19:23 | |
*** jcoufal has quit IRC | 19:24 | |
ayoung | nagyz, so, I suspect that the change should not be setting "default_log_levels" but, as you would expect, the log levle for keystone itself. | 19:24 |
morganfainberg | nagyz, awesome! it should be a good summit | 19:24 |
*** johnthetubaguy has quit IRC | 19:24 | |
morganfainberg | ayoung, aye. | 19:24 |
*** jcoufal has joined #openstack-dev | 19:24 | |
morganfainberg | nagyz, so wrt the hybrid approach. i've done some of this work (for my company), it's... kind of a dirty hack and i've not looked at porting it to havana. in I, it wont be an issue for me | 19:25 |
*** Shaan7 has quit IRC | 19:25 | |
*** singhs has quit IRC | 19:26 | |
*** KurtMartin has quit IRC | 19:26 | |
nagyz | morganfainberg, https://github.com/SUSE-Cloud/keystone-hybrid-backend | 19:26 |
nagyz | this actually does it. | 19:26 |
nagyz | but it doesn't work with havana | 19:26 |
nagyz | and I'm not sure why exactly | 19:26 |
morganfainberg | nagyz, this is similar to what i did, i just use some magic in the user attributes (json blob) to identify | 19:26 |
nagyz | I'm fine with scanning sql first and then ldap | 19:27 |
morganfainberg | nagyz, thats pretty much what i did. | 19:27 |
*** burt has joined #openstack-dev | 19:27 | |
ayoung | nagyz, yuck | 19:27 |
morganfainberg | nagyz, but it is suboptimal | 19:27 |
*** MaxV has quit IRC | 19:27 | |
ayoung | nagyz, you don't need that | 19:27 |
nagyz | ayoung, I'm open to solutions | 19:27 |
ayoung | nagyz, LDAP Identity bakcend, SQl Assignments backend | 19:28 |
*** MaxV has joined #openstack-dev | 19:28 | |
morganfainberg | nagyz, i was going to suggest getting all users into LDAP would be the best course | 19:28 |
ayoung | nagyz, read only LDAP, | 19:28 |
morganfainberg | nagyz, what ayoung said. | 19:28 |
morganfainberg | it's far better if you can do that | 19:28 |
*** terriyu_ has joined #openstack-dev | 19:28 | |
ayoung | no automatic project creationg, which is ugly anyways | 19:28 |
nagyz | ayoung, morganfainberg, I agree but as this is our global corporate LDAP server I cannot add users to it | 19:29 |
*** martine has joined #openstack-dev | 19:29 | |
nagyz | so I must have local users :( | 19:29 |
nagyz | I could add "fake" users but the process takes around 3-4 days... | 19:29 |
nagyz | :) | 19:29 |
morganfainberg | nagyz, to LDAP? | 19:29 |
*** SumitNaiksatam_ has joined #openstack-dev | 19:29 | |
nagyz | yes. | 19:29 |
*** kdbrierly has joined #openstack-dev | 19:29 | |
*** dstufft has quit IRC | 19:29 | |
*** romcheg1 has joined #openstack-dev | 19:29 | |
*** SumitNaiksatam has quit IRC | 19:29 | |
*** SumitNaiksatam_ is now known as SumitNaiksatam | 19:30 | |
morganfainberg | nagyz, that really is the best approach. lest ugly cruft you'll need to rip-out later | 19:30 |
*** dstufft has joined #openstack-dev | 19:30 | |
nagyz | or if someone can point me to an easy tutorial on having a local ldap server which mirrors a specific part of the tree to the external ldap server (in terms of queries, binds), that'd help | 19:30 |
*** terriyu has quit IRC | 19:30 | |
*** terriyu_ is now known as terriyu | 19:30 | |
*** LinuxJedi_ has joined #openstack-dev | 19:30 | |
*** KurtMartin has joined #openstack-dev | 19:30 | |
nagyz | but last I checked, it was horrifyingly hard to set up with openldap | 19:30 |
*** alunduil has quit IRC | 19:31 | |
*** mnaser has quit IRC | 19:31 | |
*** nati_ueno has joined #openstack-dev | 19:31 | |
*** romcheg has quit IRC | 19:31 | |
*** yamahata has quit IRC | 19:31 | |
*** kmartin has quit IRC | 19:31 | |
*** jeblair has quit IRC | 19:31 | |
*** LinuxJedi has quit IRC | 19:31 | |
*** janisg has quit IRC | 19:31 | |
*** uvirtbot has quit IRC | 19:32 | |
morganfainberg | nagyz, i haven't done that actually. | 19:32 |
*** yamahata has joined #openstack-dev | 19:32 | |
*** mirrorbox has quit IRC | 19:32 | |
*** nkinder has quit IRC | 19:32 | |
*** martine is now known as martine_ | 19:32 | |
*** chandankumar has joined #openstack-dev | 19:32 | |
*** MaxV has quit IRC | 19:32 | |
*** kbrierly has quit IRC | 19:33 | |
*** max_lobur has quit IRC | 19:33 | |
*** iamben_tw has quit IRC | 19:33 | |
*** iamben_t1 has joined #openstack-dev | 19:33 | |
*** jeblair has joined #openstack-dev | 19:33 | |
*** alunduil has joined #openstack-dev | 19:33 | |
*** romcheg1 is now known as romcheg | 19:33 | |
nagyz | morganfainberg, ok, but in theory, is there anything against writing such a "proxy" identity driver? | 19:33 |
nagyz | apart from it being ugly. | 19:33 |
*** max_lobur has joined #openstack-dev | 19:33 | |
*** davidhadas has quit IRC | 19:34 | |
*** markwash_ has joined #openstack-dev | 19:34 | |
*** mtreinish has quit IRC | 19:35 | |
morganfainberg | nagyz, no nothing that says don't do it. | 19:35 |
morganfainberg | nagyz, i really wish i could point at the per-domain stuff and say it was ready | 19:36 |
*** markwash has quit IRC | 19:36 | |
*** markwash_ is now known as markwash | 19:36 | |
*** AndreaRosa has quit IRC | 19:36 | |
*** AndreaRosa has joined #openstack-dev | 19:37 | |
*** mnaser has joined #openstack-dev | 19:37 | |
nagyz | that's fine. :) | 19:37 |
nagyz | it doesn't look much work to hack it together | 19:37 |
nagyz | if I just proxy all the calls to the sql identity driver and then to the ldap one | 19:38 |
morganfainberg | nagyz, doable./ | 19:39 |
*** nkinder has joined #openstack-dev | 19:39 | |
*** fabiog has quit IRC | 19:39 | |
morganfainberg | nagyz, but if you could get users into LDAP it would be far better | 19:39 |
*** mtreinish has joined #openstack-dev | 19:40 | |
nagyz | yes, will initiate the process tomorrow | 19:40 |
*** kmartin has joined #openstack-dev | 19:41 | |
dolphm | morganfainberg: nagyz: related- https://bugs.launchpad.net/keystone/+bug/1245510 | 19:41 |
*** janisg has joined #openstack-dev | 19:41 | |
dolphm | to the oslo.config issue | 19:41 |
ayoung | nagyz, so, set up a local domain for the service users and then an LDAP domain for the LDAP users. I think it will support your needs | 19:41 |
dolphm | morganfainberg: nagyz: actually, maybe not | 19:42 |
ayoung | nagyz, that is what we are working towards | 19:42 |
nagyz | ayoung, yes, but it doesn't work with havana, correct? | 19:42 |
*** luisbg` has joined #openstack-dev | 19:42 | |
ayoung | nagyz, we have some issues with multiple LDAP servers, but it should work for just a single one | 19:42 |
*** galstrom_zzz is now known as galstrom | 19:42 | |
stevemar | ayoung: that'll be the last time i ask nicely :) | 19:43 |
ayoung | nagyz, so long as all userids are unique you should be fine. | 19:43 |
morganfainberg | ayoung, would still have major issues with domain scoping. it's not really functional, my cleanup patchset didn't get in =/ | 19:43 |
ayoung | morganfainberg, hmmm | 19:43 |
stevemar | ayoung: got time to talk about federated identity stuff? | 19:43 |
ayoung | stevemar, yea | 19:43 |
morganfainberg | ayoung, it really isn't viable until icehouse. | 19:43 |
* ayoung goes to get some more caffeine | 19:43 | |
stevemar | i got joesavak available too, for a whopping 18 minutes | 19:43 |
morganfainberg | dolphm, that is an issue (use_syslog) with legacy syslog support and logging.conf syslog support | 19:44 |
joesavak | 16 | 19:44 |
joesavak | ;) | 19:44 |
morganfainberg | dolphm, it's... inelegant to say the least. | 19:44 |
morganfainberg | dolphm, i think | 19:45 |
ayoung | morganfainberg, even if the LDAP domain is the default domain? | 19:45 |
stevemar | ayoung: q1) how do you want the api specs split up? | 19:45 |
*** gmoro has quit IRC | 19:45 | |
morganfainberg | ayoung, it _might_ work./ but the service users wont be able to do a number of things. not sure what effect it will have | 19:45 |
ayoung | stevemar, joesavak I think it should be: | 19:45 |
morganfainberg | ayoung, really, it | 19:45 |
ayoung | one extension for registering an IDP | 19:45 |
morganfainberg | 's likely to produce wildly undefined behavior | 19:46 |
tellesnobrega | when creating new tables, do i need to create them anywhere else other than the migration file so i can test it? or on the test the table should be created by itself? | 19:46 |
ayoung | one extension for mapping | 19:46 |
tellesnobrega | automatically by the migration | 19:46 |
ayoung | unless we are 100%commited to linking Idp and mapping together | 19:46 |
ayoung | not sure if we are | 19:46 |
*** luisbg` has quit IRC | 19:46 | |
*** drewlander has quit IRC | 19:46 | |
ayoung | then...each of the protocols should have their own extension | 19:46 |
stevemar | ayoung: both should exist under /contrib? | 19:47 |
*** luisbg` has joined #openstack-dev | 19:47 | |
ayoung | SAML, openid-connect ,whatever | 19:47 |
ayoung | stevemar, yeah | 19:47 |
ayoung | stevemar, everything starts under contrib these days | 19:47 |
joesavak | ayoung OS-FED-IDP (CRUD IDP + upload public key); OS-FED-MAP (from:to - link is IDP/Protocol from IDP to mapping); OS-FED-SAML for authN | 19:47 |
morganfainberg | ayoung, it might be worth an attempt to try it in that configuration. i'm just not confident that weird stuff wont happen. | 19:47 |
stevemar | joesavak... thanks, was just going to write that | 19:47 |
morganfainberg | in either case. food time here. be back in a bit (and back to reviewing code) | 19:47 |
ayoung | joesavak, that looks right | 19:47 |
joesavak | cool. Some pushback is OS-FED-SAML | 19:48 |
ayoung | joesavak, so, since each protocol requires code, we should be able to enumerate protocols, but not add them | 19:48 |
joesavak | perhaps having it OS-FED-AUTH instead | 19:48 |
ayoung | drop FED | 19:48 |
ayoung | OS-IDP, OS-MAP OS-SAML | 19:48 |
joesavak | Ok | 19:48 |
stevemar | what about AUTH? | 19:48 |
ayoung | joesavak, I think Federation is a core term | 19:48 |
ayoung | auth-saml? | 19:48 |
*** noslzzp has quit IRC | 19:48 | |
stevemar | thats better | 19:48 |
*** nermina has quit IRC | 19:49 | |
ayoung | sure | 19:49 |
joesavak | +1 OS-AUTH-SAML; OS=-AUTH-OPENID? | 19:49 |
*** luisbg has quit IRC | 19:49 | |
stevemar | cool | 19:49 |
ayoung | joesavak, sounds right | 19:49 |
stevemar | we can split it out | 19:49 |
stevemar | ayoung: q2: #link https://review.openstack.org/#/c/51980/6/openstack-identity-api/v3/src/markdown/identity-api-v3-os-fed-idp-ext.md | 19:49 |
stevemar | you want the protocol data dropped from IDP? | 19:50 |
ayoung | The ideas the are all falling under FEderation are, if I percieve clearly, really fundamental to Keystone long term. Lets not add a layer of indirection for stuff that is alreayd correclty isolated. | 19:50 |
*** MaxV has joined #openstack-dev | 19:50 | |
ayoung | so, for example, no mechanism=federated | 19:50 |
*** luisbg` is now known as luisbg | 19:51 | |
*** luisbg has quit IRC | 19:51 | |
*** luisbg has joined #openstack-dev | 19:51 | |
stevemar | ayoung: referring to the 'federated' method in auth? | 19:51 |
joesavak | Still need to be able to sniff out what protocol an idp supports | 19:51 |
ayoung | stevemar, not dropped, but rather we can only enumerated protocols that have code plugins | 19:51 |
*** rongze has joined #openstack-dev | 19:51 | |
ayoung | joesavak, right. I think we need to be able to enuermate protocols, but it should be based on a plugin | 19:51 |
ayoung | we should not be registering protocols on the fly, though | 19:52 |
*** mihgen has quit IRC | 19:52 | |
ayoung | so 1. create an IdP. 2 Add Protocols to it... | 19:52 |
*** noslzzp has joined #openstack-dev | 19:52 | |
joesavak | yup. So if i support OS-AUTH-SAML, then I can add the SAML protcol to an idp | 19:52 |
*** athomas has joined #openstack-dev | 19:52 | |
ayoung | joesavak, the URL needs to be linked to the tuple idp,protocol | 19:52 |
stevemar | that seems alright to me | 19:52 |
joesavak | Yup | 19:53 |
ayoung | since it might be a separate server...technically IdP is a protocolo specific term, but we are making it a common item in order to conceptually link 2 IdPs that really have the same datasource behind them. | 19:53 |
stevemar | ayoung: is there a specific term you had in mind instead of "federated" for the auth method? | 19:54 |
ayoung | stevemar, yeah..the actual protocol used | 19:54 |
*** luisbg has quit IRC | 19:54 | |
ayoung | SAML, openid.... | 19:54 |
*** luisbg has joined #openstack-dev | 19:54 | |
*** luisbg has joined #openstack-dev | 19:54 | |
stevemar | m'okay | 19:54 |
ayoung | stevemar, we just need to document how multistage protocols should act | 19:55 |
ayoung | that really is part of core...but it can be in its own doc for now, and the SAML doc can reference it. | 19:55 |
*** willingc has joined #openstack-dev | 19:55 | |
stevemar | ayoung: well, for now, we only want to support the last stage | 19:55 |
*** matiu_ has joined #openstack-dev | 19:56 | |
stevemar | ayoung: it's docced in our use case that we only need the last one | 19:56 |
stevemar | joesavak: i have that right? | 19:56 |
*** rongze has quit IRC | 19:56 | |
ayoung | stevemar, and...I'd be ok with punting on the multi-stage thing, but I suspect dchadwick will not | 19:56 |
joesavak | stevemar - yes - we want to say "phase" t hough | 19:56 |
stevemar | ayoung: that is tbd then i guess ;) | 19:56 |
joesavak | and be able to indicate at the POST OS-FED-SAML/tokens call has the "phase"="push | 19:57 |
joesavak | or something like that | 19:57 |
*** gmoro has joined #openstack-dev | 19:57 | |
*** freedomhui has joined #openstack-dev | 19:57 | |
ayoung | stevemar, joesavak so I would document it in the SAML document for now, and we can extract it out into core when we get another multi-stage protocol to support | 19:57 |
ayoung | so..how does one go about skipping the first couple of phases of SAML? | 19:58 |
nagyz | ayoung, morganfainberg thanks for the help | 19:58 |
* ayoung is afraid he knows the answer and won't like it | 19:58 | |
*** romcheg has left #openstack-dev | 19:58 | |
joesavak | doc'd here ayoung | 19:58 |
joesavak | https://etherpad.openstack.org/p/federation-flows | 19:58 |
joesavak | you'd push it to the client | 19:58 |
nagyz | I'm going to implement the hybrid approach tomorrow and then hopefully this can go live wednesday. :) | 19:58 |
ayoung | nagyz, I want you to know that I am reading the Two Towers to my son. I keep reading your Nick as Nazgul. | 19:58 |
nagyz | hehe :) | 19:59 |
joesavak | gotta run (meeting) be back in an hour | 19:59 |
nagyz | we just finished watching the return of the king extended version (4 and a half hours!) with my girlfriend | 19:59 |
nagyz | last weekend | 19:59 |
nagyz | it was awesome. | 19:59 |
*** aeperezt has joined #openstack-dev | 19:59 | |
*** matiu has quit IRC | 19:59 | |
ayoung | nagyz, I hope you read the book first | 19:59 |
nagyz | yep, I did | 19:59 |
wink | ayoung: oh my, how many hours is that, roughly? :) | 20:00 |
nagyz | and I usually use the easier to pronounce nick "zoltan", but that's not registered to me on freenode... :) | 20:00 |
ayoung | nagyz, so...you see us discussing SAML. It turns out there is an Apache module for SAML called mod_mellon.... | 20:00 |
nagyz | why would SAML work in my case? wouldn't I need a federated identity service first on top of LDAP for that? | 20:00 |
ayoung | nagyz, no | 20:01 |
ayoung | nagyz, mellon.... | 20:01 |
*** mrodden1 has quit IRC | 20:01 | |
*** mrodden has joined #openstack-dev | 20:01 | |
ayoung | http://www.explainxkcd.com/wiki/index.php?title=1218:_Doors_of_Durin | 20:01 |
nagyz | ah | 20:01 |
nagyz | :D | 20:01 |
ayoung | Yeah, someone is an even larger geek than I | 20:02 |
*** freedomhui has quit IRC | 20:02 | |
*** emagana has joined #openstack-dev | 20:02 | |
*** rkukura has quit IRC | 20:02 | |
nagyz | :) | 20:02 |
*** luisbg has quit IRC | 20:02 | |
nagyz | so have a good day/night, whatever it is in your timezone guys | 20:02 |
*** noslzzp has quit IRC | 20:03 | |
ayoung | Can't figure out how Zoltan could be taken already. Not like it is the most common name in a fairly tech savvy country or anything | 20:03 |
nagyz | talk to you later, I think I'll come back often now that I should contribute some code too... :) | 20:03 |
ayoung | gnight... | 20:03 |
ayoung | nagyz, that would be great | 20:03 |
nagyz | finally joined ibm-stackers a few weeks ago | 20:03 |
*** LinuxJedi_ is now known as LinuxJedi | 20:03 | |
nagyz | but was busy traveling | 20:03 |
*** sarob has quit IRC | 20:03 | |
nagyz | night! | 20:04 |
*** nagyz has quit IRC | 20:04 | |
*** luisbg has joined #openstack-dev | 20:04 | |
*** luisbg has joined #openstack-dev | 20:04 | |
*** nermina has joined #openstack-dev | 20:04 | |
*** buzztroll has quit IRC | 20:04 | |
*** RScottCoyle__ has quit IRC | 20:05 | |
ayoung | joesavak, have you just converted SAML into a Bearer token? | 20:05 |
*** noslzzp has joined #openstack-dev | 20:05 | |
*** sarob has joined #openstack-dev | 20:05 | |
morganfainberg | dolphm, stevemar, what is the .mailmap file for? /me is confused | 20:05 |
*** radez is now known as radez_g0n3 | 20:06 | |
dolphm | morganfainberg: contributor analytics, afaik | 20:06 |
*** buzztroll has joined #openstack-dev | 20:06 | |
morganfainberg | dolphm, oh. i see. *shrug* sure thing (noticed it is fairly... uhm... small compared to the number of contributors) | 20:06 |
ayoung | morganfainberg, https://www.kernel.org/pub/software/scm/git/docs/git-shortlog.html | 20:07 |
morganfainberg | ayoung, ah thanks. | 20:07 |
ayoung | morganfainberg, its for once I get fired and can't use my redhat email anymore | 20:07 |
morganfainberg | ayoung, LOL | 20:07 |
morganfainberg | oh | 20:08 |
dolphm | morganfainberg: it effectively operates cross-project | 20:08 |
morganfainberg | gyee, ping. | 20:08 |
morganfainberg | dolphm, sure. just hadn't looked closely and saw someone add something to it in another commit | 20:08 |
morganfainberg | dolphm, cool | 20:08 |
isd | ayoung: I'm working on the issue I talked to you about a few days ago. I'm having a hard time finding a reasonable way to abstract the exception conversion code; the way the arguments get converted doesn't have much of a pattern. So far the best I've come up with involves passing a lambda to the decorator, which I'm not happy with. Do you have any thoughts on the matter? | 20:08 |
stevemar | morganfainberg, i really don't know | 20:08 |
morganfainberg | stevemar, ^ | 20:08 |
stevemar | morganfainberg, yeah, reading now, was afk | 20:08 |
ayoung | isd, give it up and spend your time doing something that makes you feel more fulfilled? | 20:10 |
*** noslzzp has quit IRC | 20:11 | |
ayoung | isd, might I suggest a career in piracy? | 20:11 |
ayoung | You'd make a great Dread Pirate...oh, wait, sorry, wrong movie. | 20:11 |
ayoung | isd, I need more context | 20:11 |
*** athomas has quit IRC | 20:12 | |
*** markmcclain has joined #openstack-dev | 20:12 | |
isd | ayoung: https://bugs.launchpad.net/keystone/+bug/1243812 | 20:14 |
*** dolphm_ has joined #openstack-dev | 20:14 | |
ayoung | isd, how many variations are there? Instead of a lambda, what would happen if you needed multiple decorators? | 20:15 |
*** dprince has quit IRC | 20:15 | |
*** achampion has quit IRC | 20:16 | |
isd | ayoung: 3 or 4 - two of the variants are pretty close, might be able to be done with just an extra parameter. but there are only 6 methods in the first place... | 20:18 |
*** dolphm has quit IRC | 20:18 | |
*** marios has quit IRC | 20:19 | |
*** marios has joined #openstack-dev | 20:19 | |
ayoung | isd, could it be something done in the exceptions themselves? | 20:19 |
*** dolphm_ has quit IRC | 20:19 | |
*** buzztroll has quit IRC | 20:20 | |
*** changbl has quit IRC | 20:21 | |
*** romcheg has joined #openstack-dev | 20:21 | |
*** jcoufal has quit IRC | 20:22 | |
*** kmartin has quit IRC | 20:23 | |
*** boden_ has quit IRC | 20:23 | |
*** vkmc has joined #openstack-dev | 20:24 | |
*** vkmc has quit IRC | 20:24 | |
*** vkmc has joined #openstack-dev | 20:24 | |
isd | ayoung: I don't see how; the arguments aren't passed in to the thing that generates the exception. | 20:25 |
*** rudrarugge has joined #openstack-dev | 20:25 | |
*** mrodden has quit IRC | 20:25 | |
*** vipul has quit IRC | 20:26 | |
*** Alexei_987 has left #openstack-dev | 20:27 | |
*** buzztroll has joined #openstack-dev | 20:27 | |
gyee | morganfainberg, here, sorry I was afk | 20:27 |
*** vipul has joined #openstack-dev | 20:27 | |
*** sarob has quit IRC | 20:33 | |
*** sarob has joined #openstack-dev | 20:34 | |
*** dubsquared has joined #openstack-dev | 20:34 | |
*** dubsquared has quit IRC | 20:34 | |
*** dubsquared has joined #openstack-dev | 20:34 | |
*** matiu_ has quit IRC | 20:35 | |
*** vijendar has quit IRC | 20:36 | |
*** changbl has joined #openstack-dev | 20:36 | |
*** dvarga has quit IRC | 20:37 | |
*** kmartin has joined #openstack-dev | 20:37 | |
*** ericloo has joined #openstack-dev | 20:37 | |
*** sarob has quit IRC | 20:39 | |
*** denis_makogon has joined #openstack-dev | 20:39 | |
*** buzztroll has quit IRC | 20:39 | |
*** lsmola has quit IRC | 20:40 | |
*** changbl has quit IRC | 20:40 | |
*** noslzzp has joined #openstack-dev | 20:41 | |
ayoung | gyee, I like | 20:41 |
*** mrunge has joined #openstack-dev | 20:41 | |
*** stevemar has quit IRC | 20:41 | |
*** safchain has joined #openstack-dev | 20:42 | |
ayoung | gyee, so mod_ssl or mod_nss, client cert, external...right? | 20:42 |
*** sarob has joined #openstack-dev | 20:42 | |
*** epopt37 has quit IRC | 20:44 | |
*** comay has quit IRC | 20:45 | |
*** mrunge has quit IRC | 20:45 | |
*** davidhadas has joined #openstack-dev | 20:45 | |
*** alunduil has quit IRC | 20:46 | |
*** matiu_ has joined #openstack-dev | 20:47 | |
*** matiu_ has quit IRC | 20:47 | |
*** matiu_ has joined #openstack-dev | 20:47 | |
gyee | ayoung, yes | 20:49 |
gyee | 1) client using two way SSL authenticate to Apache/Keystone | 20:50 |
ayoung | gyee, BTW you need this: https://review.openstack.org/#/c/52732/1 | 20:50 |
gyee | 2) Apache set the SSL_* in the request environ | 20:50 |
*** lsmola has joined #openstack-dev | 20:50 | |
*** otherwiseguy has joined #openstack-dev | 20:50 | |
ayoung | gyee, we are documenting the env vars for this | 20:50 |
gyee | 3) Keystone middleware translate them into auth_context | 20:50 |
gyee | ayoung, yes http://httpd.apache.org/docs/2.2/mod/mod_ssl.html | 20:51 |
ayoung | http://www.freeipa.org/page/Environment_Variables#X.509_Authentication | 20:51 |
ayoung | gyee, not just....don't forget about NSS | 20:51 |
gyee | i.e map SSL_CLIENT_S_DN_CN to username | 20:51 |
gyee | OU to project | 20:52 |
gyee | O to domain | 20:52 |
gyee | but all configurable | 20:52 |
*** rongze has joined #openstack-dev | 20:52 | |
gyee | SSL_CLIENT_S_DN_CN is set by Apache | 20:52 |
ayoung | gyee, so dchadwick thought we could using the mapping blueprint to implement | 20:52 |
gyee | ayoung, sure, its all internal changes | 20:53 |
ayoung | gyee, and CERN is doing this kind of thing already. I think this is the right approach | 20:53 |
gyee | ayoung, yeah, I figure this is a no brainer | 20:54 |
ayoung | let me address the comments and resubmit my patch on it | 20:54 |
*** isd has quit IRC | 20:54 | |
*** matiu_ has quit IRC | 20:54 | |
*** salv-orlando_ has joined #openstack-dev | 20:54 | |
*** rkukura has joined #openstack-dev | 20:55 | |
*** luhrs1 has joined #openstack-dev | 20:55 | |
*** moted_ has joined #openstack-dev | 20:56 | |
*** rongze has quit IRC | 20:56 | |
*** lbragstad1 has joined #openstack-dev | 20:57 | |
*** twoputt__ has joined #openstack-dev | 20:57 | |
*** twoputt has quit IRC | 20:57 | |
*** salv-orlando has quit IRC | 20:57 | |
*** KurtMartin has quit IRC | 20:57 | |
*** moted has quit IRC | 20:57 | |
*** lbragstad has quit IRC | 20:57 | |
*** salv-orlando_ is now known as salv-orlando | 20:57 | |
*** moted_ is now known as moted | 20:57 | |
*** che-arne has quit IRC | 20:57 | |
*** KurtMartin has joined #openstack-dev | 20:57 | |
*** epopt37 has joined #openstack-dev | 20:58 | |
*** chandankumar has quit IRC | 20:58 | |
*** chandankumar has joined #openstack-dev | 20:58 | |
*** jsavak has joined #openstack-dev | 20:59 | |
*** chandankumar has quit IRC | 21:01 | |
*** sushils has joined #openstack-dev | 21:01 | |
*** carl_baldwin has joined #openstack-dev | 21:01 | |
*** chandankumar has joined #openstack-dev | 21:02 | |
*** changbl has joined #openstack-dev | 21:02 | |
*** mlavalle has left #openstack-dev | 21:02 | |
*** joesavak has quit IRC | 21:02 | |
*** gimps_ has quit IRC | 21:02 | |
*** mrodden has joined #openstack-dev | 21:03 | |
*** jamielennox|away is now known as jamielennox | 21:04 | |
*** bswartz has quit IRC | 21:04 | |
morganfainberg | gyee, i forgot what i was going to ask you...... i think | 21:04 |
aspiers | lifeless: currently fixtures.FakeLogger() allows a choice of format string, but the new handler always has a Formatter() instance. Would it make sense to allow the constructor to accept a formatter class (or instance) as a parameter, in order to be more flexible? | 21:04 |
*** willingc has quit IRC | 21:04 | |
lifeless | aspiers: if you need it sure, though since it's a test - the point is you're going to introspect the output - so I'm not sure why you'd want different formatters? | 21:05 |
aspiers | lifeless: because I just spent two hours trying to figure out where messages like "1 -> 2" come from in the nova unit tests :) | 21:05 |
lifeless | aspiers: ouch | 21:06 |
aspiers | lifeless: if they'd been preceded by migrate.versioning.api or whatever, I'd have understood straight away | 21:06 |
aspiers | in fairness, I should have guessed anyway, but hey, I'm still a newb :) | 21:07 |
*** crobertsrh is now known as _crobertsrh | 21:08 | |
aspiers | lifeless: so I was wondering if passing in a nova.openstack.common.log.ContextFormatter might address that | 21:08 |
*** beagles has quit IRC | 21:08 | |
*** thomasem has quit IRC | 21:08 | |
aspiers | maybe that's overkill? | 21:08 |
lifeless | aspiers: maybe ... not really for me to say | 21:08 |
lifeless | from a Fixtures perspective i'm happy for it to be more flexible. | 21:09 |
lifeless | Suggest a patch | 21:09 |
aspiers | ok, thanks! | 21:09 |
*** yamahata has quit IRC | 21:09 | |
*** eharney has quit IRC | 21:09 | |
*** mrpink has quit IRC | 21:09 | |
*** yamahata has joined #openstack-dev | 21:09 | |
*** comay has joined #openstack-dev | 21:11 | |
*** misterpink has joined #openstack-dev | 21:13 | |
*** martyntaylor has joined #openstack-dev | 21:13 | |
*** beagles has joined #openstack-dev | 21:13 | |
*** asalkeld_zzz is now known as asalkeld | 21:14 | |
*** misterpink has quit IRC | 21:15 | |
aspiers | lifeless: hmm actually FakeLogger(format='%(levelname)s %(name)s %(message)s') is probably good enough for now, but I'll suggest a patch to fixtures if I change my mind | 21:16 |
lifeless | aspiers: ok :) | 21:16 |
*** misterpink has joined #openstack-dev | 21:18 | |
*** fbo_away is now known as fbo | 21:19 | |
*** jayg is now known as jayg|g0n3 | 21:22 | |
devananda | jgriffith: ping | 21:25 |
jgriffith | devananda: pong | 21:26 |
devananda | jgriffith: i can shuffle my three middle slots easily | 21:26 |
devananda | jgriffith: does taht help you at all? | 21:26 |
jgriffith | devananda: you mean shuffle within the block you have? | 21:27 |
jgriffith | devananda: I think we overlap arleady don't we? | 21:27 |
devananda | yes, within my block on thurs | 21:27 |
devananda | jgriffith: yae, our thursdays are a complete overlap | 21:27 |
jgriffith | devananda: :( | 21:27 |
devananda | jgriffith: and i _only_ have thursday | 21:27 |
jgriffith | devananda: so no matter what it's a matter of me skipping a Cinder session | 21:28 |
jgriffith | devananda: but that's doable, the 5:20 thing I can't skip | 21:28 |
devananda | unless someone else swaps with one of those | 21:28 |
*** mrodden1 has joined #openstack-dev | 21:28 | |
jgriffith | devananda: sounds like there's no need for you to juggle anything around any more than you already have | 21:28 |
devananda | k k | 21:29 |
*** polfilm has joined #openstack-dev | 21:29 | |
jgriffith | devananda: I'd like to swap my block out with neutron if possible, but not looking promising | 21:29 |
devananda | jgriffith: well, let me know if there's anything else i can do | 21:30 |
*** jhesketh has joined #openstack-dev | 21:30 | |
*** mrodden has quit IRC | 21:31 | |
jgriffith | devananda: appreciate it!! | 21:31 |
*** buzztroll has joined #openstack-dev | 21:32 | |
*** glenng has quit IRC | 21:33 | |
*** dkranz has quit IRC | 21:34 | |
*** kui has joined #openstack-dev | 21:34 | |
*** dubsquared has quit IRC | 21:34 | |
*** litong has quit IRC | 21:35 | |
*** sgordon has quit IRC | 21:35 | |
*** twoputt__ has quit IRC | 21:38 | |
kui | lifeless: I have summitted new patch for testtools, here it is: https://github.com/testing-cabal/testtools/pull/60 | 21:38 |
*** twoputt_ has quit IRC | 21:38 | |
*** buzztroll has quit IRC | 21:38 | |
kui | lifeless: Would you review it please ? | 21:39 |
*** buzztroll has joined #openstack-dev | 21:39 | |
*** jayahn has joined #openstack-dev | 21:39 | |
*** buzztrol_ has joined #openstack-dev | 21:40 | |
*** dubsquared has joined #openstack-dev | 21:41 | |
lifeless | kui: will do shortly, thanks for pinging me | 21:41 |
kui | lifeless: :) | 21:41 |
*** ruhe has joined #openstack-dev | 21:41 | |
*** buzztrol_ has quit IRC | 21:42 | |
*** buzztrol_ has joined #openstack-dev | 21:42 | |
*** yeylon_ has joined #openstack-dev | 21:42 | |
*** mriedem has quit IRC | 21:43 | |
*** ruhe has quit IRC | 21:43 | |
*** buzztroll has quit IRC | 21:43 | |
*** martyntaylor has left #openstack-dev | 21:44 | |
*** thomasem has joined #openstack-dev | 21:44 | |
*** thomasem has quit IRC | 21:45 | |
*** luhrs1 has quit IRC | 21:45 | |
*** thomasem has joined #openstack-dev | 21:45 | |
*** che-arne has joined #openstack-dev | 21:46 | |
*** buzztrol_ has quit IRC | 21:47 | |
*** martine_ has quit IRC | 21:47 | |
*** bauzas has quit IRC | 21:48 | |
*** lbragstad1 has quit IRC | 21:48 | |
*** jsavak has quit IRC | 21:49 | |
*** donaldh_ has joined #openstack-dev | 21:51 | |
*** singhs has joined #openstack-dev | 21:51 | |
*** rongze has joined #openstack-dev | 21:52 | |
*** pcm_ has quit IRC | 21:52 | |
*** morazi has quit IRC | 21:52 | |
*** dbalog has left #openstack-dev | 21:53 | |
*** anniec has joined #openstack-dev | 21:55 | |
*** uaberme has joined #openstack-dev | 21:56 | |
*** rongze has quit IRC | 21:57 | |
*** nermina has quit IRC | 21:57 | |
*** matiu has joined #openstack-dev | 21:57 | |
*** topol has quit IRC | 21:58 | |
*** danwent has quit IRC | 22:00 | |
*** kpavel has quit IRC | 22:00 | |
*** bpokorny has quit IRC | 22:01 | |
*** danwent has joined #openstack-dev | 22:06 | |
*** kbringard has quit IRC | 22:06 | |
*** nermina has joined #openstack-dev | 22:06 | |
*** thomasem has quit IRC | 22:08 | |
*** burt has quit IRC | 22:09 | |
*** lnxnut_ has joined #openstack-dev | 22:14 | |
*** armax has left #openstack-dev | 22:14 | |
*** kui has quit IRC | 22:14 | |
*** galstrom is now known as galstrom_zzz | 22:14 | |
dstanek | jamielennox: hi | 22:15 |
*** edmund has joined #openstack-dev | 22:15 | |
*** gordc has quit IRC | 22:16 | |
*** rgerganov_ has joined #openstack-dev | 22:17 | |
*** FunnyLookinHat has quit IRC | 22:17 | |
*** lnxnut has quit IRC | 22:18 | |
*** rcleere has quit IRC | 22:18 | |
*** kevinconway has quit IRC | 22:19 | |
*** mnaser has quit IRC | 22:19 | |
*** kevinconway has joined #openstack-dev | 22:19 | |
jamielennox | dstanek: im sort of around, give me 15 min | 22:21 |
*** rgerganov has quit IRC | 22:21 | |
dstanek | jamielennox: np | 22:21 |
*** mnaser has joined #openstack-dev | 22:21 | |
morganfainberg | ayoung, ping | 22:22 |
jamielennox | morganfainberg: same call as me, 15 min | 22:23 |
morganfainberg | jamielennox, yeah not a rush, figured i'd run something by him before implementing it. | 22:24 |
morganfainberg | jamielennox, thanks :) | 22:24 |
*** otherwiseguy has quit IRC | 22:25 | |
dstanek | morganfainberg: i'm going to submit serveral reviews that begin to fix our tests | 22:27 |
morganfainberg | dstanek, i shall look for them. | 22:27 |
*** beagles has quit IRC | 22:28 | |
*** vladikr has quit IRC | 22:29 | |
reed | Daviey, do you want to be the MC for the lightning talks in Hong Kong again? | 22:29 |
*** dubsquared has quit IRC | 22:30 | |
*** carl_baldwin has quit IRC | 22:30 | |
*** carl_baldwin has joined #openstack-dev | 22:30 | |
*** alunduil has joined #openstack-dev | 22:32 | |
*** alunduil has quit IRC | 22:32 | |
*** alunduil has joined #openstack-dev | 22:33 | |
*** prad_ has quit IRC | 22:33 | |
*** neelashah has quit IRC | 22:34 | |
*** pmathews has quit IRC | 22:35 | |
*** pmathews has joined #openstack-dev | 22:36 | |
*** bknudson has left #openstack-dev | 22:38 | |
*** SumitNaiksatam has quit IRC | 22:38 | |
*** mihgen has joined #openstack-dev | 22:39 | |
*** lsmola has quit IRC | 22:40 | |
*** datsun180b has quit IRC | 22:41 | |
*** twoputt has joined #openstack-dev | 22:43 | |
*** twoputt_ has joined #openstack-dev | 22:43 | |
*** dims has quit IRC | 22:43 | |
morganfainberg | jamielennox, are you heartset on a decorator for the cache test skip? or would the same mechanism as skip_if_no_ipv6 be sufficient? (just call self.skip_if_cache_disabled() in the test) | 22:44 |
morganfainberg | jamielennox, both aren't hard to implement, the decorator is a little more indirect. | 22:44 |
*** macjack has joined #openstack-dev | 22:44 | |
morganfainberg | jamielennox, ah nvm, going w/ the decorator route. | 22:44 |
*** adalbas has quit IRC | 22:44 | |
jamielennox | isnt ipv6 a decorator already? it should probably be | 22:44 |
morganfainberg | nope | 22:45 |
morganfainberg | it's called as self.skip_if_no_ipv6() within the test | 22:45 |
jamielennox | you can do skip test without self, a decorator would be good there | 22:45 |
*** xarses has joined #openstack-dev | 22:45 | |
morganfainberg | jamielennox, yeah | 22:45 |
morganfainberg | i just need to dig up the right exception | 22:46 |
*** jecarey has quit IRC | 22:49 | |
*** donaldh_ has quit IRC | 22:49 | |
*** nkinder has quit IRC | 22:51 | |
*** jimfehlig has quit IRC | 22:51 | |
*** rongze has joined #openstack-dev | 22:53 | |
*** lnxnut_ has quit IRC | 22:54 | |
*** lnxnut has joined #openstack-dev | 22:55 | |
*** sumanthns has quit IRC | 22:55 | |
*** bswartz has joined #openstack-dev | 22:55 | |
*** dims has joined #openstack-dev | 22:55 | |
jamielennox | dstanek: sorry, that went longer than i expected | 22:58 |
*** lnxnut has quit IRC | 22:59 | |
*** rongze has quit IRC | 22:59 | |
*** DennyZhang has joined #openstack-dev | 22:59 | |
*** twoputt has quit IRC | 23:00 | |
*** romcheg has left #openstack-dev | 23:01 | |
*** twoputt_ has quit IRC | 23:01 | |
*** sarob_ has joined #openstack-dev | 23:02 | |
*** sarob_ has quit IRC | 23:02 | |
*** achampion has joined #openstack-dev | 23:02 | |
*** DennyZhang has quit IRC | 23:02 | |
*** eglynn-bank-holi has quit IRC | 23:03 | |
*** sarob_ has joined #openstack-dev | 23:03 | |
*** pmathews has quit IRC | 23:04 | |
*** kmartin has quit IRC | 23:06 | |
*** sarob has quit IRC | 23:06 | |
*** sarob_ has quit IRC | 23:07 | |
*** safchain has quit IRC | 23:08 | |
*** mihgen has quit IRC | 23:09 | |
*** vladan has quit IRC | 23:09 | |
*** carl_baldwin has quit IRC | 23:10 | |
*** mihgen has joined #openstack-dev | 23:11 | |
*** achampio1 has joined #openstack-dev | 23:12 | |
*** vladan has joined #openstack-dev | 23:12 | |
*** jvrbanac has quit IRC | 23:13 | |
*** twoputt has joined #openstack-dev | 23:13 | |
*** twoputt_ has joined #openstack-dev | 23:13 | |
*** achampion has quit IRC | 23:14 | |
*** colinmcnamara has quit IRC | 23:14 | |
*** rgerganov_ has quit IRC | 23:14 | |
*** colinmcnamara has joined #openstack-dev | 23:14 | |
*** colinmcnamara has quit IRC | 23:19 | |
*** herndon has quit IRC | 23:19 | |
*** colinmcnamara has joined #openstack-dev | 23:22 | |
*** colinmcnamara has quit IRC | 23:23 | |
*** vkmc has quit IRC | 23:24 | |
*** uaberme has quit IRC | 23:26 | |
*** cyeoh_ is now known as cyeoh | 23:29 | |
*** mihgen has quit IRC | 23:29 | |
dstanek | jamielennox: np, i was just going to tell you what i found in regards to your tests issue | 23:31 |
*** colinmcnamara has joined #openstack-dev | 23:31 | |
jamielennox | dstanek: you solved it? | 23:31 |
*** rgerganov_ has joined #openstack-dev | 23:31 | |
dstanek | jamielennox: i don't think so, but i did identify a bunch of issues with our tests | 23:32 |
dstanek | jamielennox: the biggest problem was our use of setup | 23:32 |
jamielennox | dstanek: there are a lot of issues with our tests | 23:32 |
dstanek | jamielennox: i plan on fixing them all! | 23:32 |
jamielennox | this was part of the reason to seperate things out, see if we can have a structural seperation between v3 and v2 | 23:32 |
jamielennox | remove all of the crap that is just not really used | 23:33 |
*** b3nt_pin has joined #openstack-dev | 23:33 | |
*** colinmcnamara has quit IRC | 23:33 | |
jamielennox | dstanek: if you want them you're welcome to it, it's been on my list for ages | 23:33 |
jamielennox | i even proposed a bunch of seperation ages ago, when it was much easier | 23:34 |
dstanek | jamielennox: i'm also tired of the 300 second test runs :-) | 23:34 |
jamielennox | right | 23:34 |
dstanek | jamielennox: this is the big one that may have been causing issues https://review.openstack.org/#/c/54210/ | 23:34 |
jamielennox | do you know what the cause is then? best i could see is that somewhere a new instance of the controller was being created | 23:35 |
dstanek | i have 4 more patches to fix up that fix more stuff in the tests | 23:35 |
dstanek | jamielennox: we call load_backends() several times during the course of a single test | 23:35 |
dstanek | we also load the same data serveral time during the same test | 23:36 |
jamielennox | yep, i was chasing that down | 23:36 |
jamielennox | but to the best i could see we were at least completely overriding the old setup and i couldn't find anywhere the old reference would be called from | 23:36 |
dstanek | jamielennox: so far removing some of that duplicate work took off about 10% of the total time | 23:36 |
jamielennox | wow, didn't expect that much | 23:36 |
jamielennox | hey, fixtures! you are pretty much attacking my TODO list | 23:37 |
*** kdbrierly has quit IRC | 23:37 | |
jamielennox | now to get rid of mox all together | 23:38 |
*** SergeyLukjanov is now known as _SergeyLukjanov | 23:38 | |
*** _SergeyLukjanov has quit IRC | 23:38 | |
*** spzala has joined #openstack-dev | 23:39 | |
morganfainberg | dstanek, NICE 10% savings is big | 23:39 |
morganfainberg | dstanek, i'll look over your patches a bit later on, just had an emergency here i need to address :( | 23:40 |
*** edmund has quit IRC | 23:40 | |
*** mrodden1 has quit IRC | 23:40 | |
*** sushils has quit IRC | 23:41 | |
*** jergerber has quit IRC | 23:42 | |
dstanek | jamielennox, morganfainberg: my runs were a little over 300 seconds before so every % helps | 23:42 |
jamielennox | dstanek: i'm not a fan of the rest.py file name, call if restful_test_case.py or something and then from import RestfulTestCase from tests/__init__ | 23:42 |
dstanek | morganfainberg: np | 23:42 |
*** nati_uen_ has joined #openstack-dev | 23:43 | |
*** MaxV has quit IRC | 23:43 | |
*** jhesketh_ has joined #openstack-dev | 23:43 | |
*** vkmc has joined #openstack-dev | 23:43 | |
dstanek | jamielennox: i was thinking that it may eventually into a rest package with fixtures, matches and other things related to rest tests | 23:43 |
*** MaxV has joined #openstack-dev | 23:44 | |
*** jhesketh has quit IRC | 23:45 | |
jamielennox | that's an awesome start | 23:45 |
*** b3nt_pin is now known as beagles | 23:45 | |
jamielennox | dstanek: out of interest do you know if you rebase my change onto those if it will run? | 23:46 |
jamielennox | i can check that, but i thought you might have tried already | 23:46 |
*** nati_ueno has quit IRC | 23:46 | |
dstanek | jamielennox: i have not tried, but i suspect they still may have trouble | 23:47 |
*** beagles has quit IRC | 23:47 | |
*** yamahata has quit IRC | 23:47 | |
dstanek | jamielennox: i'm still debugging a case where the fixtures are getting run at least twice | 23:47 |
jamielennox | right, it stops 1 load_backend but i don't think it will solve the issue | 23:47 |
*** denis_makogon has quit IRC | 23:47 | |
*** b3nt_pin has joined #openstack-dev | 23:48 | |
*** b3nt_pin is now known as beagles | 23:48 | |
*** MaxV has quit IRC | 23:48 | |
*** SergeyLukjanov has joined #openstack-dev | 23:48 | |
dstanek | jamielennox: after i get these last few things figured out i'll try your patch | 23:51 |
*** pixelb has quit IRC | 23:54 | |
*** rongze has joined #openstack-dev | 23:56 | |
*** hemna is now known as hemnafk | 23:56 | |
*** SumitNaiksatam has joined #openstack-dev | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!