Wednesday, 2014-07-09

*** marcoemorais has joined #openstack-keystone00:03
*** marcoemorais has quit IRC00:08
*** marcoemorais has joined #openstack-keystone00:09
*** marcoemorais has quit IRC00:09
*** marcoemorais has joined #openstack-keystone00:09
*** marcoemorais has quit IRC00:10
*** marcoemorais has joined #openstack-keystone00:10
*** marcoemorais has quit IRC00:14
*** marcoemorais has joined #openstack-keystone00:14
*** dims__ has quit IRC00:20
*** richm has left #openstack-keystone00:22
*** jaosorior has quit IRC00:32
*** dims__ has joined #openstack-keystone00:44
*** jaosorior has joined #openstack-keystone00:48
*** marcoemorais has quit IRC00:59
*** amcrn has quit IRC01:06
*** mberlin1 has joined #openstack-keystone01:08
*** mberlin has quit IRC01:09
*** KanagarajM has quit IRC01:37
*** zhiyan_ is now known as zhiyan01:47
*** zhiyan is now known as zhiyan_01:56
*** zhiyan_ is now known as zhiyan01:56
*** KanagarajM has joined #openstack-keystone02:07
*** jamielennox|away is now known as jamielennox02:12
*** diegows has quit IRC02:15
*** KanagarajM has quit IRC02:31
*** oomichi has joined #openstack-keystone02:45
*** harlowja is now known as harlowja_away02:50
*** Chicago has joined #openstack-keystone02:54
*** Chicago has joined #openstack-keystone02:54
*** praneshp has quit IRC03:10
*** bobt has quit IRC03:11
*** dstanek_zzz is now known as dstanek03:20
openstackgerritayoung proposed a change to openstack/keystone-specs: Session Tokens  https://review.openstack.org/9664803:55
*** dims__ has quit IRC03:55
*** praneshp has joined #openstack-keystone04:35
*** dims__ has joined #openstack-keystone04:51
*** ajayaa has joined #openstack-keystone04:52
*** dims__ has quit IRC04:56
*** dims__ has joined #openstack-keystone04:57
*** dims__ has quit IRC05:02
*** topol has joined #openstack-keystone05:10
*** praneshp_ has joined #openstack-keystone05:11
openstackgerritAjaya Agrawal proposed a change to openstack/keystone: Expand the caching layer in keystone  https://review.openstack.org/10565205:13
*** praneshp has quit IRC05:14
*** praneshp_ is now known as praneshp05:14
*** morganfainberg_Z is now known as morganfainberg05:18
*** chandankumar has joined #openstack-keystone05:19
*** topol has quit IRC05:31
openstackgerritJamie Lennox proposed a change to openstack/python-keystoneclient: Versioned Endpoint hack for Sessions  https://review.openstack.org/9063205:35
openstackgerritMorgan Fainberg proposed a change to openstack/keystone: HEAD responses should return same status as GET  https://review.openstack.org/10402605:38
morganfainbergjamielennox, how goes05:39
morganfainberg?05:39
jamielennoxmorganfainberg: not too bad, shouldn't you be in texas by now?05:42
morganfainbergyeah05:42
jamielennoxor are you hanging out on irc anyway?05:42
morganfainbergam submitting code from the hotel room05:42
morganfainberg:P05:42
jamielennoxlol05:42
jamielennoxunstoppable05:43
* jamielennox is feeling very left out :(05:43
morganfainberghey!05:43
morganfainbergyou could have flown for like 18hrs toget here :P05:43
jamielennoxi could have run it by my boss at least05:44
morganfainberghehe05:44
jamielennoxdidn't even try to be honest, that's a big flight05:44
morganfainbergyeah it is05:44
morganfainbergdunno if it would be worth it for 3 days05:44
jamielennoxyep05:44
morganfainbergi'd def think twice about that flight.05:44
morganfainbergi'd probably still do it, but it wouldn't be a nobrainer05:44
jamielennoxyou'd have to stretch it to 5 just for the jetlag - maybe next year05:45
ajayaamorganfainberg, https://review.openstack.org/10565205:46
morganfainbergajayaa, saw the update to the BP.05:46
morganfainbergajayaa, nice. i have some comments on it for invalidations etc. but you're headed the right direction05:46
morganfainbergajayaa, i'll post my comments tomorrow [depending on how busy the meetup/hackathon is]05:47
ajayaamorganfainberg, ok thanks. waiting for your review. :)05:47
morganfainbergajayaa, glad someone is working on this besides just me :)05:47
ajayaamorganfainberg, what are going to develop in hackathon?05:48
ajayaaIs it like, pick anything you like and build something cool?05:48
morganfainbergajayaa, we're going to be doing some design work and some review of the pending specs05:49
morganfainbergajayaa, its more focused than the summit, but still pretty open05:49
morganfainbergajayaa, i'll be working on the service tokens and non-persistent tokens [if writing code]05:49
ajayaamorganfainberg, not the hackathon but hopefully I will make it to the summit. :)05:50
morganfainbergajayaa, awesome, will look forward to seeing you in Paris then :)05:50
jamielennoxmorganfainberg: you busy, want to check of some easy +2 or +As05:54
jamielennox?05:54
morganfainbergjamielennox, i can check on 1 or 3 or so05:54
morganfainbergbut not many about to pass out05:54
morganfainbergbeen a loooong day05:54
jamielennoxhttps://review.openstack.org/#/c/104765/05:54
jamielennoxwas surprised you're here at all05:55
jamielennoxand there's a follow on05:55
morganfainbergwait. we don't test that?!05:55
morganfainberg*facepalm*05:55
*** ukalifon1 has joined #openstack-keystone05:55
jamielennoxalso https://review.openstack.org/#/c/98299/ had a +A and got thrown back for a rebase05:56
jamielennoxmorganfainberg: it's scary some of what we don't test, the token_manager.authenticate one was the big one for me05:56
morganfainberg*blink*05:57
jamielennoxit's one of the dependant ones05:58
*** dims__ has joined #openstack-keystone05:58
*** afazekas is now known as __afazekas05:58
jamielennoxthere's about 7 in that series, henry got through a couple05:58
jamielennoxif you're ever bored (heh) run coverage and just start on the unit tests05:58
openstackgerritOpenStack Proposal Bot proposed a change to openstack/keystone: Imported Translations from Transifex  https://review.openstack.org/10338006:00
*** dims__ has quit IRC06:03
morganfainbergjamielennox, https://review.openstack.org/#/c/98299 i don't see you using Fixtured Test Case?06:06
jamielennoxmorganfainberg: huh, i forgot that was there06:07
jamielennoxthat's a pattern i was using in novaclient06:07
jamielennox-1 it06:07
morganfainbergjamielennox, yep06:07
morganfainbergalso a nit on the commit message06:07
*** xianghui has joined #openstack-keystone06:07
morganfainbergok with that i am gonna go to sleep06:08
morganfainbergneed go be up early tomorrow06:08
*** dstanek is now known as dstanek_zzz06:08
openstackgerritJamie Lennox proposed a change to openstack/python-keystoneclient: Make Token Data fixtures positional  https://review.openstack.org/9829906:09
jamielennoxmorganfainberg: night, hope the next few days go well06:09
jamielennoxmeh, i'll be on here trying to get people to review anyway06:09
morganfainbergthey should.06:09
morganfainberghehe06:09
*** morganfainberg is now known as morganfainberg_Z06:23
*** tomoiaga has joined #openstack-keystone06:31
*** dstanek_zzz is now known as dstanek06:43
*** dstanek is now known as dstanek_zzz06:53
*** amcrn has joined #openstack-keystone06:56
*** dims__ has joined #openstack-keystone06:58
openstackgerritA change was merged to openstack/python-keystoneclient: Add V2 user roles tests  https://review.openstack.org/10476506:59
*** jaosorior has quit IRC07:02
*** dims__ has quit IRC07:03
openstackgerritA change was merged to openstack/python-keystoneclient: Add OAuth data to AccessInfo  https://review.openstack.org/10077607:04
*** xianghui has quit IRC07:04
*** BAKfr has joined #openstack-keystone07:14
*** afazekas has joined #openstack-keystone07:25
*** tkelsey has joined #openstack-keystone07:26
*** mrda is now known as mrda-away07:28
*** dims__ has joined #openstack-keystone07:59
*** dims__ has quit IRC08:04
*** xianghui has joined #openstack-keystone08:06
*** amcrn_ has joined #openstack-keystone08:07
*** amcrn has quit IRC08:08
*** amcrn_ is now known as amcrn08:08
openstackgerritIonut Artarisi proposed a change to openstack/python-keystoneclient: allow a user's primary tenant to be modified  https://review.openstack.org/9676308:26
*** dims__ has joined #openstack-keystone08:28
*** KanagarajM has joined #openstack-keystone08:28
*** dims__ has quit IRC08:34
openstackgerritBob Thyne proposed a change to openstack/keystone-specs: Propose Specification for Endpoint Grouping  https://review.openstack.org/10202308:35
openstackgerritBob Thyne proposed a change to openstack/keystone-specs: Propose Specification for Endpoint Grouping  https://review.openstack.org/10202308:45
*** kwss has joined #openstack-keystone08:58
*** ukalifon1 has left #openstack-keystone09:03
*** mberlin1 has quit IRC09:20
*** dims__ has joined #openstack-keystone09:30
*** mberlin has joined #openstack-keystone09:31
*** ajayaa has quit IRC09:32
*** dims__ has quit IRC09:35
*** deep has joined #openstack-keystone09:38
deepHello, We are getting following error while doing user-role-add with openldap ldap_add: Object class violation (65) additional info: object class 'organizationalRole' requires attribute 'cn'09:39
openstackgerritMarco Fargetta proposed a change to openstack/keystone-specs: Web Authentication for SAML federated Keystone  https://review.openstack.org/9686709:41
*** deep has quit IRC09:43
*** ajayaa has joined #openstack-keystone09:45
*** praneshp has quit IRC09:56
*** henrynash has joined #openstack-keystone10:31
*** dims__ has joined #openstack-keystone10:31
*** dims__ has quit IRC10:36
*** xianghui has quit IRC10:49
*** xianghui has joined #openstack-keystone11:03
*** dims__ has joined #openstack-keystone11:10
*** dstanek_zzz is now known as dstanek11:22
*** tkelsey has quit IRC11:34
openstackgerritIonut Artarisi proposed a change to openstack/python-keystoneclient: allow a user's primary tenant to be modified  https://review.openstack.org/9676311:46
openstackgerritIonut Artarisi proposed a change to openstack/python-keystoneclient: allow a user's default tenant to be modified  https://review.openstack.org/9676312:09
*** dstanek is now known as dstanek_zzz12:11
*** KanagarajM has quit IRC12:15
*** dstanek_zzz is now known as dstanek12:18
*** dims__ has quit IRC12:32
*** dims__ has joined #openstack-keystone12:32
marekd|awayjamielennox: hey, around?12:34
*** rodrigods has quit IRC12:50
*** radez_g0n3 is now known as radez12:51
*** richm has joined #openstack-keystone12:59
*** joesavak has joined #openstack-keystone13:08
*** henrynash has quit IRC13:10
*** oomichi has quit IRC13:10
*** tkelsey has joined #openstack-keystone13:24
*** rodrigods has joined #openstack-keystone13:30
*** rodrigods has quit IRC13:30
*** rodrigods has joined #openstack-keystone13:30
*** rodrigods has quit IRC13:34
*** dims_ has joined #openstack-keystone13:39
*** dstanek is now known as dstanek_zzz13:41
*** amerine_ has joined #openstack-keystone13:43
*** rodrigods has joined #openstack-keystone13:45
*** mitz- has joined #openstack-keystone13:47
*** tkelsey has quit IRC13:48
*** dims__ has quit IRC13:48
*** amerine has quit IRC13:48
*** mitz has quit IRC13:48
*** csd has quit IRC13:48
*** uvirtbot has quit IRC13:48
*** mat-lowery has quit IRC13:48
*** dvorak has quit IRC13:48
*** anteaya has quit IRC13:48
*** andreaf has joined #openstack-keystone13:51
*** rodrigods has quit IRC13:52
*** anteaya has joined #openstack-keystone13:55
*** dstanek_zzz is now known as dstanek13:56
*** tkelsey has joined #openstack-keystone13:56
*** uvirtbot has joined #openstack-keystone13:57
*** ukalifon1 has joined #openstack-keystone13:57
*** dvorak has joined #openstack-keystone14:01
*** mat-lowery has joined #openstack-keystone14:01
*** csd has joined #openstack-keystone14:01
*** lbragstad_ has joined #openstack-keystone14:11
*** rodrigods has joined #openstack-keystone14:16
*** ajayaa has quit IRC14:21
*** diegows has joined #openstack-keystone14:27
*** tomoiaga has quit IRC14:33
*** rodrigods has quit IRC14:36
*** lbragstad_ has left #openstack-keystone14:38
*** rodrigods has joined #openstack-keystone14:39
*** rodrigods has quit IRC14:39
*** rodrigods has joined #openstack-keystone14:39
*** jaosorior has joined #openstack-keystone14:44
*** henrynash has joined #openstack-keystone14:45
*** rodrigods has quit IRC14:45
*** morganfainberg_Z is now known as morganfainberg14:46
*** thedodd has joined #openstack-keystone14:49
*** topol has joined #openstack-keystone14:51
*** doddstack has joined #openstack-keystone14:54
*** rodrigods has joined #openstack-keystone14:55
*** thedodd has quit IRC14:57
*** ukalifon1 has quit IRC15:01
*** afazekas has quit IRC15:04
*** topol has quit IRC15:08
*** zhiyan is now known as zhiyan_15:10
*** deep has joined #openstack-keystone15:11
*** sacharya has joined #openstack-keystone15:15
*** Chicago has quit IRC15:18
*** afazekas has joined #openstack-keystone15:18
deepHello I am using keystone with ldap, i have two tenant(tenant1 and tenant2) defined in ldap, admin from tenant1 is able to map user to role for another Tenant, is it working as design or it is error ?15:24
deepalso is it manditory to have admin tenant ?15:24
*** joesavak has quit IRC15:30
*** david-lyle has joined #openstack-keystone15:33
*** marekd|away is now known as marekd15:34
*** topol has joined #openstack-keystone15:35
dolphmtopol: http://dolphm.com/outcomes-from-the-openstack-keystone-hackathon-for-juno/15:35
dolphmtopol: and if you want to suggest an edit to the diagram: http://www.websequencediagrams.com/?lz=QnJvd3Nlci0-SG9yaXpvbjogUmVxdWVzdCBsYW5kaW5nIHBhZ2UKABcHLT4AKQc6IFJldHVybiBsaXN0IG9mIElkUHMKAEQJbW9kX3NoaWI6IEluaXRpYXRlIGZlZGVyYXRpb24gcHJvdG9jb2wKS2V5c3RvbmUASg1kaXJlY3RzIGNsaWVudCB0byBJZFAAUQpJZFA6IFBhc3MgY3JlZGVudGlhbHMKSWRQAIEKElNBTUwAgQAUUHJlc2VudAAaBgCBIwgtPgCBBgg6IHNpZ25hdHVyZSB2ZXJpZmllZCAmIG1hcHBpbmcgYXBwbGllZACB15:35
dolphmKRRyAIIOBnVuc2NvcGVkAIFsCGVkIHRva2VuAIIWCk9wZW5TdGFjazogYgCCegdiYXNlZCBSRVNUAIFzBz8&s=napkin15:35
dolphmtopol: same link ^ http://bit.ly/1oHoIRK15:35
openstackgerritKristy Siu proposed a change to openstack/keystone-specs: Adding support for Virtual Organisation Management  https://review.openstack.org/10576915:36
*** dolphm changes topic to "July 9-11 Hackathon notes https://etherpad.openstack.org/p/keystone-juno-hackathon"15:39
*** deep has quit IRC15:39
*** lbragstad_ has joined #openstack-keystone15:39
*** Deep has joined #openstack-keystone15:42
Deepis it possible to configure swift with ssl/tls ?15:43
topoldolphm, do we have an agenda for today?15:53
dolphmtopol: it's behind you15:53
openstackgerritRichard Megginson proposed a change to openstack/keystone: ldap/core deleteTree not always supported  https://review.openstack.org/7489715:55
*** amcrn has quit IRC15:57
*** afazekas has quit IRC15:58
*** afazekas has joined #openstack-keystone16:06
topoldolphm, is there anyone here who doesnt know everyone? should we do a quick introduction?16:07
*** BAKfr has quit IRC16:07
*** hrybacki has joined #openstack-keystone16:07
*** gyee has quit IRC16:08
*** daneyon has joined #openstack-keystone16:08
morganfainbergvishy, ping: does https://review.openstack.org/#/c/102964/ does this solve the problem with migrations?16:10
*** kwss has quit IRC16:10
*** daneyon has quit IRC16:10
*** daneyon has joined #openstack-keystone16:11
vishymorganfainberg: there was some mention of a couple other tables not being utf8 either16:11
vishyare those separate bugs or did i imagine it?16:11
morganfainbergvishy, hm. I only saw that one, but let me 2x check16:12
topolmorganfainberg we expect your FULL attention :-).  we traveled here for this meeting sir...16:12
morganfainbergtopol, i'm ignoring you explicitly16:12
topolgood call16:12
morganfainberg:)16:12
* morganfainberg waits for LP search...16:13
morganfainbergvishy, i only see a bug for the region table16:14
vishymorganfainberg: so the next migration also doesn’t set it16:16
vishyfor example16:16
*** Farhan has joined #openstack-keystone16:16
vishyassignment table16:16
morganfainbergif we expect this to work like this we shouldn't expect the projects to explicitly set utf8/inno this should be built into the table object16:17
vishyyes it should16:18
*** chandankumar has quit IRC16:18
*** browne has joined #openstack-keystone16:18
vishyit looks like there are some table recreates in the next few migrations as well16:18
vishy:(16:18
morganfainbergvishy, assignment table sets utf8 https://github.com/openstack/keystone/blob/master/keystone/common/sql/migrate_repo/versions/038_add_assignment_table.py#L4416:19
morganfainbergvishy, the downgrade migrations might be wonky though16:20
vishyah i’m not that worried about downgrade16:20
morganfainbergyeah the recreate here: seems to miss it https://github.com/openstack/keystone/blob/master/keystone/common/sql/migrate_repo/versions/040_drop_grant_tables.py16:20
*** gyee has joined #openstack-keystone16:22
vishyok so it looks like the others don’t really need to be fixed16:22
vishyI will let you know if we run into any other issues16:22
morganfainbergyeah. the recreates should be fixed, but it's less of an issue [i'll submit a fix for that as a related fix]16:23
morganfainbergvishy, thanks. if it works i'll get it backported to I16:23
morganfainbergs/works/no further issues16:24
*** KanagarajM has joined #openstack-keystone16:26
*** richm has quit IRC16:27
*** miqui has quit IRC16:27
*** miqui has joined #openstack-keystone16:28
*** jorge_munoz has joined #openstack-keystone16:30
*** marcoemorais has joined #openstack-keystone16:31
*** amcrn has joined #openstack-keystone16:31
*** hrybacki has quit IRC16:36
*** marcoemorais has quit IRC16:36
*** marcoemorais has joined #openstack-keystone16:37
*** marcoemorais1 has joined #openstack-keystone16:38
*** marcoemorais1 has quit IRC16:39
*** marcoemorais1 has joined #openstack-keystone16:39
*** richm has joined #openstack-keystone16:40
*** marcoemorais has quit IRC16:42
*** KanagarajM has quit IRC16:47
openstackgerritKanagaraj Manickam proposed a change to openstack/keystone-specs: keystone: bind endpoint with region in db  https://review.openstack.org/10450016:48
*** hrybacki has joined #openstack-keystone16:49
*** lbragstad_ is now known as lbragstad16:51
*** marcoemorais1 has quit IRC16:52
*** marcoemorais has joined #openstack-keystone16:52
*** richm has quit IRC16:53
*** miqui_ has joined #openstack-keystone16:54
*** tkelsey has quit IRC16:54
*** miqui has quit IRC16:55
*** praneshp has joined #openstack-keystone16:59
*** vhoward has joined #openstack-keystone16:59
*** harlowja_away is now known as harlowja17:03
*** marcoemorais has quit IRC17:05
*** marcoemorais has joined #openstack-keystone17:05
*** marcoemorais has quit IRC17:05
*** marcoemorais has joined #openstack-keystone17:05
*** marcoemorais has quit IRC17:06
*** marcoemorais has joined #openstack-keystone17:06
*** richm has joined #openstack-keystone17:07
openstackgerritHarry Rybacki proposed a change to openstack/python-keystoneclient: Add tests without optional create endpoint params  https://review.openstack.org/10322917:16
*** raildo has joined #openstack-keystone17:17
hrybackijamielennox: if you could re-review https://review.openstack.org/103229 (hopefully for the last time...) it should be good to go17:18
lbragstadhttps://review.openstack.org/#/c/97359/ JSON home spec for Keystone17:20
lbragstadjraim: ^17:20
*** afazekas has quit IRC17:23
*** doddstack has quit IRC17:26
*** afazekas has joined #openstack-keystone17:39
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: Session Tokens  https://review.openstack.org/9664817:42
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: proposed change for session tokens  https://review.openstack.org/10581217:42
*** mberlin has quit IRC17:44
*** mberlin has joined #openstack-keystone17:47
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: remove testing from spec template  https://review.openstack.org/10582217:54
*** Deep has quit IRC17:56
openstackgerritRichard Megginson proposed a change to openstack/keystone: better handling for empty/None ldap values  https://review.openstack.org/7600218:03
openstackgerritRichard Megginson proposed a change to openstack/keystone: test_user_mixed_case_attribute fails - mail, not email  https://review.openstack.org/9466818:05
*** jorge_munoz has quit IRC18:07
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: divide spec in half, on problem description  https://review.openstack.org/10582618:08
boris-42dolphm hi18:08
boris-42dolphm as you are PTL, could you +1 patch in devstack, that enables notifications18:09
boris-42(actually sets up properly rabbit)18:09
boris-42dolphm this one https://review.openstack.org/#/c/105541/18:09
openstackgerritSam Leong proposed a change to openstack/keystonemiddleware: Default auth_version to v3.0  https://review.openstack.org/10563418:09
*** marcoemorais has quit IRC18:10
*** marcoemorais has joined #openstack-keystone18:11
*** xianghui has quit IRC18:11
*** marcoemorais has quit IRC18:11
*** marcoemorais has joined #openstack-keystone18:11
hrybackiRemove a superfluous space from a commit message and Jenkins goes from +1 to -1 three dsvm failures. *sigh*18:12
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: proposed change for session tokens  https://review.openstack.org/10581218:12
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: Session Tokens  https://review.openstack.org/9664818:12
*** thedodd has joined #openstack-keystone18:14
*** hrybacki has quit IRC18:14
*** lbragstad has quit IRC18:14
*** sacharya has quit IRC18:14
*** henrynash has quit IRC18:14
*** bobt has joined #openstack-keystone18:17
*** topol has quit IRC18:18
openstackgerritKanagaraj Manickam proposed a change to openstack/keystone-specs: keystone: bind endpoint with region in db  https://review.openstack.org/10450018:21
*** dstanek is now known as dstanek_zzz18:23
*** dims_ has quit IRC18:24
*** morganfainberg is now known as morganfainberg_Z18:25
*** dims_ has joined #openstack-keystone18:25
*** marcoemorais has quit IRC18:34
*** marcoemorais has joined #openstack-keystone18:34
*** marcoemorais has quit IRC18:45
*** marcoemorais has joined #openstack-keystone18:46
*** marcoemorais has quit IRC18:47
*** marcoemorais has joined #openstack-keystone18:47
*** marcoemorais has quit IRC18:47
*** marcoemorais has joined #openstack-keystone18:47
*** vhoward has left #openstack-keystone18:51
*** david-lyle has quit IRC18:58
*** david-lyle has joined #openstack-keystone18:58
*** david-lyle has quit IRC18:59
*** praneshp has quit IRC19:00
*** david-lyle has joined #openstack-keystone19:01
*** praneshp has joined #openstack-keystone19:03
*** dims_ has quit IRC19:03
*** praneshp has quit IRC19:03
*** praneshp has joined #openstack-keystone19:04
*** redrobot has joined #openstack-keystone19:28
*** samuelmz_ has joined #openstack-keystone19:29
*** samuelmz_ has quit IRC19:30
*** samuelmz has joined #openstack-keystone19:30
samuelmzHi, I'd like to understand how keystone projects are mapped to LDAP structure. Any entry points?19:30
*** marcoemorais has quit IRC19:31
*** marcoemorais has joined #openstack-keystone19:31
*** marcoemorais has quit IRC19:33
*** marcoemorais has joined #openstack-keystone19:34
*** miqui_ is now known as miqui19:37
*** dims has joined #openstack-keystone19:46
*** sacharya has joined #openstack-keystone19:55
*** dims_ has joined #openstack-keystone19:55
*** henrynash has joined #openstack-keystone19:55
*** dstanek_zzz is now known as dstanek19:56
*** dims has quit IRC19:57
*** morganfainberg_Z is now known as morganfainberg19:57
*** hrybacki has joined #openstack-keystone19:58
*** hrybacki has quit IRC19:59
*** hrybacki has joined #openstack-keystone19:59
*** lbragstad_ has joined #openstack-keystone19:59
marekddstanek: do you fancy checking this up? https://review.openstack.org/#/c/104851/20:00
*** thedodd has quit IRC20:03
*** thedodd has joined #openstack-keystone20:05
*** marcoemorais has quit IRC20:06
*** marcoemorais has joined #openstack-keystone20:06
*** marcoemorais has quit IRC20:07
*** marcoemorais has joined #openstack-keystone20:08
*** topol has joined #openstack-keystone20:09
*** afazekas has quit IRC20:10
*** stevemar has joined #openstack-keystone20:11
stevemarhello :)20:12
boris-42jamielennox hi20:14
*** amerine_ is now known as amerine20:17
marekdstevemar: helloooooo sir20:18
stevemarmarekd, howdy!20:19
*** jamielennox is now known as jamielennox|away20:19
*** amerine has left #openstack-keystone20:20
*** radez is now known as radez_g0n320:22
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: Spec for trusts redelegation  https://review.openstack.org/9990820:30
openstackgerritayoung proposed a change to openstack/keystone-specs: Endpoint Grouping  https://review.openstack.org/10202320:32
openstackgerritA change was merged to openstack/keystone-specs: Spec for trusts redelegation  https://review.openstack.org/9990820:33
*** bknudson has joined #openstack-keystone20:43
*** elmiko has joined #openstack-keystone20:45
elmikohi folks, i'm playing around with the keystoneclient in python and i'm getting an AuthorizationFailure exception when trying to access endpoints.list(), here's my workflow http://paste.openstack.org/show/85827/ any thoughts on what i did wrong?20:46
openstackgerritSteve Martinelli proposed a change to openstack/keystone-specs: remove testing from spec template  https://review.openstack.org/10582220:48
openstackgerritA change was merged to openstack/keystone-specs: divide spec in half, on problem description  https://review.openstack.org/10582620:52
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: Endpoint Grouping  https://review.openstack.org/10202320:57
*** thedodd has quit IRC21:01
*** lbragstad_ is now known as lbragstad21:03
*** bobt has quit IRC21:07
*** bobt has joined #openstack-keystone21:08
*** jamielennox|away is now known as jamielennox21:11
jamielennoxelmiko: if you use version=3 then you need more than just tenant name to get a scoped token, you need project_domain_name and user_domain_name at leat21:13
elmikojamielennox: ok, thanks. i'm unfamiliar with domain name, will that be 'Default' for a newly created devstack instance?21:15
openstackgerritSteve Martinelli proposed a change to openstack/keystone-specs: remove testing from spec template  https://review.openstack.org/10582221:15
jamielennoxdolphm, morganfainberg, bknudson: and everyone else at summit, i really need you guys to spend some time on reviewing https://review.openstack.org/#/c/79542 and that series so that i can push it into other clients21:15
jamielennoxelmiko: i think so, yes21:16
elmikocool21:16
elmikoit's funny you replied, i was just reading your blog :)21:16
jamielennoxheh, i need to do a few more of those21:17
elmikoi know the feeling21:18
openstackgerritSteve Martinelli proposed a change to openstack/keystone-specs: remove sections from spec template  https://review.openstack.org/10582221:19
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: keystone: bind endpoint with region in db  https://review.openstack.org/10450021:19
elmikojamielennox: i tried adding project_domain_name and user_domain_name, still getting the exception :/21:20
elmikoonce i've created and authenticated a Client, is there something i need to do before i get the EndpointManager?21:21
jamielennoxelmiko: no, that badly worded message means that you ended up with an unscoped token, you need a scoped token to perform operations like that21:22
elmikoahh ok21:23
jamielennoxso it generally just means that you are missing a scoping element21:23
elmikohrm...21:24
*** thedodd has joined #openstack-keystone21:26
openstackgerritA change was merged to openstack/keystone-specs: remove sections from spec template  https://review.openstack.org/10582221:29
elmikojamielennox: is it possible to query keystone to determine what the available domains are?21:30
jamielennoxelmiko: if you are aadmin and a v3 client you can do client.domains.list21:30
*** praneshp has quit IRC21:31
elmikook, i also just saw it in the rest output from /auth/tokens21:31
elmikokeystoneclient is giving me no love today :(21:31
jamielennoxi assume OSC has a CLI command for it21:31
jamielennoxelmiko: it's not a loving beast unfortunately21:32
elmikoi can make all these requests using json and the rest api, but when i attempt to use the pyclient *boom* head meet wall21:32
elmikolol, that's the truth21:32
elmikois it better form to create a Session first and then pass that to Client?21:33
jamielennoxelmiko: yes, but i haven't been pushing that too hard for everyone yet21:34
elmikook, maybe i'll try that way and see how far i get21:34
elmikothanks again for the help21:34
openstackgerritA change was merged to openstack/keystone-specs: JSON Home  https://review.openstack.org/9735921:34
jamielennoxelmiko: https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/auth/identity/v3.py#L90-L105 is the way the scoping is added21:36
openstackgerritA change was merged to openstack/keystone-specs: Endpoint Grouping  https://review.openstack.org/10202321:37
openstackgerritA change was merged to openstack/keystone-specs: keystone: bind endpoint with region in db  https://review.openstack.org/10450021:39
hrybackijamielennox++ Jenkins is giving me a big middle-finger today21:39
jamielennoxhrybacki: lol, that happens - interestingly it always seems to keep happening to the same reviews21:39
hrybackiyeah, it's disconcerting21:40
*** david-lyle has quit IRC21:40
hrybackiis that indicative of an underlying issue?21:40
*** david-lyle has joined #openstack-keystone21:40
*** david-lyle has quit IRC21:40
jamielennoxpossibly - but if you really want to make your head spin try and figure that one out21:41
jamielennoxand maybe it's just that you notice little patterns21:41
hrybackiI'll keep my eyes open, diving into CI guts is super low on my 'fun stuff to do' list ;)21:42
jamielennoxyep, completely agree21:42
jamielennoxalright, i'll be back in an hour or so - came on early hoping to catch people still at the hackathon, but no luck21:43
*** jamielennox is now known as jamielennox|away21:43
hrybackijamielennox|away: ? I'm at the hackathon21:44
hrybackiand we are still here21:45
jamielennox|awayhrybacki: ..., just people must have been ducking me earlier21:45
hrybackiyou might have logged when we were at lunch -- it was kind of slow21:46
jamielennox|awaygyee: i need some client reviews done, can you push them at hackathon?21:47
hrybackithey've been pretty deep in reviewing specs since I got here around 10 this morning21:47
jamielennox|awayyea, i figured it'd be mostly specs21:47
hrybackiI'll prod ayoung whenever we take 521:47
*** CaioBrentano has joined #openstack-keystone21:47
jamielennox|awayyea, he's not online here21:48
hrybackijamielennox|away: yeah, he did say he was ducking you21:48
gyeejamielennox|away, I am not at the hackathon, but I'll be reviewing them. Hopefully today. Was swamped with a bunch of other issues.21:48
jamielennox|awaygyee: oh, thought you were there - thanks then21:49
gyeelast couple of weeks hasn't been fun, to say the least21:49
CaioBrentanois it possible to use different files for logging? I am trying to use this logging conf (https://github.com/openstack/keystone/blob/master/etc/logging.conf.sample), but it just log on "error.log" file.21:50
*** mrda-away is now known as mrda21:51
CaioBrentanoI mean, can keystone log different levels on different files ?21:52
jamielennox|awayhrybacki: tell ayoung or whoever will listen https://review.openstack.org/#/c/7954221:52
hrybackijamielennox|away++21:52
jamielennox|awayCaioBrentano: that's not a keystone specific thing - you can do that via python logging21:52
jamielennox|awayok - really |away now21:52
*** praneshp has joined #openstack-keystone21:53
CaioBrentanojamielennox|away: I'm trying to configure it… but the "official" sample conf file is not working for me. So, I don't what to do21:54
CaioBrentano*I don't know what to do21:54
*** Farhan has quit IRC21:56
elmikojamielennox|away: fyi, i think i found my issue. i wanted Client.service_catalog.get_endpoints , that cleared everything up.22:10
*** miqui_ has joined #openstack-keystone22:13
*** miqui has quit IRC22:13
openstackgerritHarry Rybacki proposed a change to openstack/keystonemiddleware: Move auth_token session code to middleware repo  https://review.openstack.org/10503122:31
hrybackijamielennox|away: ^^22:32
*** boris-42 has quit IRC22:37
*** boris-42 has joined #openstack-keystone22:39
*** thedodd has quit IRC22:41
openstackgerritMorgan Fainberg proposed a change to openstack/keystone: Correct the region table to be InnoDB and UTF8  https://review.openstack.org/10296422:43
*** praneshp has quit IRC22:44
*** elmiko is now known as _elmiko22:45
*** praneshp has joined #openstack-keystone22:47
*** sacharya has quit IRC22:47
openstackgerritDolph Mathews proposed a change to openstack/keystone-specs: Session Tokens  https://review.openstack.org/9664822:47
*** CaioBrentano has quit IRC22:48
*** dstanek is now known as dstanek_zzz22:49
marekdjamielennox|away: kind of repeating myself, but check out the e-mail. I think SAML ECP wrapper might be more difficult to implement than we initially had thought.22:50
*** andreaf has quit IRC22:53
*** marcoemorais has quit IRC23:03
*** lbragstad has quit IRC23:04
*** marcoemorais has joined #openstack-keystone23:04
*** marcoemorais has quit IRC23:04
*** marcoemorais has joined #openstack-keystone23:04
*** henrynash has quit IRC23:07
*** bknudson has quit IRC23:10
*** bobt has quit IRC23:11
*** topol has quit IRC23:13
*** stevemar has quit IRC23:13
openstackgerritguang-yee proposed a change to openstack/keystone-specs: X.509 SSL certificate authentication  https://review.openstack.org/10591323:14
*** gyee has quit IRC23:14
*** hrybacki has quit IRC23:15
*** morganfainberg is now known as morganfainberg_Z23:17
arosenWhat is the paste.app_factory used for in api-paste.ini?23:33
*** mrda has left #openstack-keystone23:38
openstackgerritMorgan Fainberg proposed a change to openstack/python-keystoneclient: Direct move of the revoke model from keystone server  https://review.openstack.org/10270223:39
*** packet has joined #openstack-keystone23:40
*** daneyon has quit IRC23:43
*** jamielennox|away is now known as jamielennox23:49
jamielennoxwas revocation events part of the icehouse release?23:49

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!