| *** topol has quit IRC | 00:05 | |
| *** bknudson has joined #openstack-keystone | 00:07 | |
| *** oomichi has joined #openstack-keystone | 00:08 | |
| *** hrybacki has quit IRC | 00:09 | |
| *** bknudson has quit IRC | 00:11 | |
| *** alex_xu has joined #openstack-keystone | 00:18 | |
| *** mgarza has quit IRC | 00:21 | |
| *** dims_ has quit IRC | 00:21 | |
| *** bknudson has joined #openstack-keystone | 00:28 | |
| bknudson | dstanek: https://review.openstack.org/#/c/95827/8 ?? what's up with this? | 00:36 |
|---|---|---|
| dstanek | bknudson: we can't officially support Python3 with that, but it's sorta necessary now so that I can start testing that stuff | 00:37 |
| dstanek | bknudson: the official version doesn't do Py3 and the haven't merged this guys changes in yet | 00:37 |
| bknudson | dstanek: do you want it merged? | 00:37 |
| bknudson | into keystone? | 00:37 |
| dstanek | bknudson: i think so, but maybe that would be a good topic for the next meeting | 00:37 |
| bknudson | dstanek: there's a bunch of other changes piled up behind it that it seems like we could merge. | 00:38 |
| dstanek | i'm going to mark it a wip and move it out of the way | 00:38 |
| dstanek | and add a meeting agenda item to discuss | 00:38 |
| bknudson | also, tip to reviewers -- if the change depends on another one review the base change first. | 00:39 |
| openstackgerrit | A change was merged to openstack/keystone-specs: Updated from global requirements https://review.openstack.org/106233 | 00:43 |
| *** dims_ has joined #openstack-keystone | 00:44 | |
| openstackgerrit | A change was merged to openstack/keystone: Avoid loading a ref from SQL to delete the ref https://review.openstack.org/106140 | 01:31 |
| *** topol has joined #openstack-keystone | 01:31 | |
| *** lbragstad has joined #openstack-keystone | 01:34 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystone: Remove fixture from openstack-common.conf https://review.openstack.org/103255 | 01:37 |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystone: Use config fixture from oslo.config https://review.openstack.org/103254 | 01:37 |
| openstackgerrit | A change was merged to openstack/keystone: Sync with oslo-incubator https://review.openstack.org/107217 | 01:40 |
| bknudson | dolphm: look familiar? https://review.openstack.org/#/c/105634/ | 01:44 |
| *** stevemar has joined #openstack-keystone | 01:44 | |
| *** mberlin1 has joined #openstack-keystone | 01:55 | |
| *** mberlin has quit IRC | 01:56 | |
| *** marcoemorais1 has quit IRC | 01:58 | |
| *** richm has quit IRC | 01:59 | |
| openstackgerrit | A change was merged to openstack/keystone: Update the configuration docs for the revocation extension https://review.openstack.org/106416 | 02:01 |
| *** spandhe has quit IRC | 02:01 | |
| *** dobson has joined #openstack-keystone | 02:01 | |
| *** oomichi has quit IRC | 02:03 | |
| *** gokrokve has joined #openstack-keystone | 02:11 | |
| *** dims_ has quit IRC | 02:17 | |
| *** gokrokve has quit IRC | 02:23 | |
| ayoung | bknudson, https://review.openstack.org/#/c/104734/8 Does a singleton make any more sense than a constant string? It is going to be passed as a string from outside. | 02:27 |
| ayoung | dstanek, added some LDAP smart people to that patch, in order to make sure we are all tracking on the py3 LDAP issues. | 02:29 |
| *** gabriel-bezerra has quit IRC | 02:29 | |
| *** gabriel-bezerra has joined #openstack-keystone | 02:30 | |
| *** gokrokve has joined #openstack-keystone | 02:40 | |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes a Python3 syntax error https://review.openstack.org/102734 | 02:50 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds several more test modules that pass on Py3 https://review.openstack.org/102735 | 02:50 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds a fork of python-ldap for Py3 testing https://review.openstack.org/95827 | 02:50 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes test_exceptions.py for Python3 https://review.openstack.org/102737 | 02:50 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes test_wsgi for Python3 https://review.openstack.org/102736 | 02:50 |
| *** gabriel-bezerra has quit IRC | 02:50 | |
| *** gabriel-bezerra has joined #openstack-keystone | 02:51 | |
| *** chandankumar has joined #openstack-keystone | 02:51 | |
| *** chandankumar has quit IRC | 02:52 | |
| *** chandankumar has joined #openstack-keystone | 02:55 | |
| *** lbragstad has quit IRC | 02:56 | |
| openstackgerrit | ayoung proposed a change to openstack/python-keystoneclient: use embedded URLs for hyperlinks in the README https://review.openstack.org/103636 | 03:02 |
| morganfainberg | bknudson, so, I have no idea what you're expecting from the "Sane startup of a system" | 03:03 |
| morganfainberg | bknudson, re removing DI | 03:03 |
| morganfainberg | bknudson, what is "sane" startup with a set of managers that depend on each other | 03:04 |
| *** ayoung has quit IRC | 03:04 | |
| morganfainberg | is there an instance of each manager on the manager that needs that dependency? | 03:04 |
| morganfainberg | bknudson, what does the startup end up looking like? I just am no sure how to make a 'clear and understandable startup' with the combination of managers we have (beyond that DI needs to go away) | 03:05 |
| *** gokrokve has quit IRC | 03:15 | |
| *** gokrokve has joined #openstack-keystone | 03:15 | |
| *** gokrokve has quit IRC | 03:19 | |
| *** alex_xu has quit IRC | 03:33 | |
| *** chandankumar has quit IRC | 03:34 | |
| *** alex_xu has joined #openstack-keystone | 03:45 | |
| *** chandankumar has joined #openstack-keystone | 03:48 | |
| *** alex_xu has quit IRC | 03:50 | |
| *** jaosorior has joined #openstack-keystone | 03:54 | |
| *** alex_xu has joined #openstack-keystone | 04:02 | |
| *** amcrn has quit IRC | 04:03 | |
| *** gabriel-bezerra has quit IRC | 04:30 | |
| *** gabriel-bezerra has joined #openstack-keystone | 04:30 | |
| *** amcrn has joined #openstack-keystone | 04:31 | |
| openstackgerrit | Jamie Lennox proposed a change to openstack/python-keystoneclient: Use token and discovery fixture in identity tests https://review.openstack.org/107554 | 04:37 |
| openstackgerrit | Jamie Lennox proposed a change to openstack/python-keystoneclient: Control identity plugin reauthentication https://review.openstack.org/107555 | 04:37 |
| *** chandankumar has quit IRC | 04:48 | |
| *** jamielennox is now known as jamielennox|away | 04:48 | |
| *** gokrokve has joined #openstack-keystone | 04:54 | |
| *** chandankumar has joined #openstack-keystone | 04:56 | |
| *** dims_ has joined #openstack-keystone | 04:57 | |
| *** chandankumar has quit IRC | 04:57 | |
| *** chandankumar has joined #openstack-keystone | 05:00 | |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Mark the 'check_vX_token' methods deprecated https://review.openstack.org/107560 | 05:00 |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Move token persistence classes to token.persistence module https://review.openstack.org/107561 | 05:00 |
| openstackgerrit | Arun Kant proposed a change to openstack/keystone: Adding support for ldap connection pooling. https://review.openstack.org/95300 | 05:01 |
| *** dims_ has quit IRC | 05:02 | |
| *** gokrokve has quit IRC | 05:17 | |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Move token persistence classes to token.persistence module https://review.openstack.org/107561 | 05:21 |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: remove useless part of error message https://review.openstack.org/107122 | 05:22 |
| *** shausy has joined #openstack-keystone | 05:25 | |
| *** topol has quit IRC | 05:28 | |
| *** jamielennox|away is now known as jamielennox | 05:29 | |
| *** morganfainberg is now known as morganfainberg_Z | 05:33 | |
| openstackgerrit | A change was merged to openstack/identity-api: Fix typo https://review.openstack.org/107138 | 05:40 |
| openstackgerrit | Jamie Lennox proposed a change to openstack/python-keystoneclient: Versioned Endpoint hack for Sessions https://review.openstack.org/90632 | 05:40 |
| *** daneyon has joined #openstack-keystone | 05:45 | |
| *** daneyon_ has quit IRC | 05:47 | |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Fix mistakes in token fixtures https://review.openstack.org/107228 | 05:52 |
| *** dims_ has joined #openstack-keystone | 05:58 | |
| *** dims_ has quit IRC | 06:02 | |
| *** daneyon has quit IRC | 06:02 | |
| *** daneyon has joined #openstack-keystone | 06:02 | |
| *** andreaf has quit IRC | 06:05 | |
| openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/keystone: Imported Translations from Transifex https://review.openstack.org/106939 | 06:06 |
| *** gabriel-bezerra has quit IRC | 06:06 | |
| *** andreaf has joined #openstack-keystone | 06:06 | |
| *** gabriel-bezerra has joined #openstack-keystone | 06:07 | |
| *** tomoiaga has joined #openstack-keystone | 06:14 | |
| *** k4n0 has joined #openstack-keystone | 06:22 | |
| *** andreaf has quit IRC | 06:23 | |
| *** andreaf has joined #openstack-keystone | 06:24 | |
| *** huats_ has joined #openstack-keystone | 06:31 | |
| *** huats_ has joined #openstack-keystone | 06:31 | |
| *** gabriel-bezerra has quit IRC | 06:32 | |
| *** gabriel-bezerra has joined #openstack-keystone | 06:32 | |
| *** mfisch has quit IRC | 06:34 | |
| *** alex_xu has quit IRC | 06:34 | |
| *** d0ugal has quit IRC | 06:34 | |
| *** gmurphy has quit IRC | 06:34 | |
| *** mfisch` has joined #openstack-keystone | 06:34 | |
| *** k4n0 has quit IRC | 06:34 | |
| *** huats has quit IRC | 06:34 | |
| *** alex_xu has joined #openstack-keystone | 06:34 | |
| *** gabriel-bezerra has quit IRC | 06:34 | |
| *** gmurphy has joined #openstack-keystone | 06:35 | |
| *** gabriel-bezerra has joined #openstack-keystone | 06:35 | |
| *** d0ugal has joined #openstack-keystone | 06:36 | |
| *** k4n0 has joined #openstack-keystone | 06:36 | |
| openstackgerrit | Jamie Lennox proposed a change to openstack/python-keystoneclient: Isolate get_discovery function https://review.openstack.org/107569 | 06:37 |
| openstackgerrit | Jamie Lennox proposed a change to openstack/python-keystoneclient: Allow unauthenticated discovery https://review.openstack.org/107570 | 06:37 |
| openstackgerrit | A change was merged to openstack/keystone: Migrate default extensions https://review.openstack.org/96326 | 06:38 |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Add v2 Token manager authenticate tests https://review.openstack.org/104769 | 06:38 |
| *** dvorak has quit IRC | 06:38 | |
| *** dims_ has joined #openstack-keystone | 06:58 | |
| *** andreaf has quit IRC | 07:02 | |
| *** dims_ has quit IRC | 07:04 | |
| *** jamielennox is now known as jamielennox|away | 07:05 | |
| *** dstanek is now known as dstanek_zzz | 07:06 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: Scope unscoped saml2 tokens. https://review.openstack.org/99704 | 07:08 |
| *** BAKfr has joined #openstack-keystone | 07:15 | |
| *** daneyon has quit IRC | 07:19 | |
| openstackgerrit | Christian Berendt proposed a change to openstack/python-keystoneclient: Bump hacking to 0.9.x series https://review.openstack.org/107328 | 07:21 |
| *** daneyon has joined #openstack-keystone | 07:22 | |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Test that tenant list function can use auth_url https://review.openstack.org/104770 | 07:38 |
| *** harlowja is now known as harlowja_away | 07:41 | |
| *** daneyon has quit IRC | 07:52 | |
| *** daneyon has joined #openstack-keystone | 07:52 | |
| *** andreaf has joined #openstack-keystone | 07:55 | |
| *** dims_ has joined #openstack-keystone | 07:59 | |
| *** tkelsey has joined #openstack-keystone | 08:00 | |
| *** andreaf has quit IRC | 08:01 | |
| *** stevemar has quit IRC | 08:01 | |
| *** dims_ has quit IRC | 08:06 | |
| *** rwsu has quit IRC | 08:13 | |
| *** andreaf has joined #openstack-keystone | 08:17 | |
| *** daneyon has quit IRC | 08:22 | |
| *** afazekas has joined #openstack-keystone | 08:26 | |
| *** daneyon has joined #openstack-keystone | 08:28 | |
| *** dims_ has joined #openstack-keystone | 08:28 | |
| *** dims_ has quit IRC | 08:32 | |
| *** mrmoje has joined #openstack-keystone | 08:34 | |
| *** bvandenh has joined #openstack-keystone | 08:35 | |
| *** daneyon has quit IRC | 08:45 | |
| *** daneyon has joined #openstack-keystone | 08:47 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: List federated projects and domains https://review.openstack.org/107393 | 09:01 |
| *** alex_xu has quit IRC | 09:15 | |
| *** dstanek_zzz is now known as dstanek | 09:16 | |
| *** bvandenh has quit IRC | 09:35 | |
| *** Dafna has quit IRC | 09:43 | |
| *** bvandenh has joined #openstack-keystone | 09:47 | |
| *** kwss has joined #openstack-keystone | 09:48 | |
| *** ajayaa has joined #openstack-keystone | 09:49 | |
| openstackgerrit | A change was merged to openstack/keystone: Fixes the order of assertEqual arguments https://review.openstack.org/77514 | 09:58 |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: List federated projects and domains https://review.openstack.org/107393 | 10:01 |
| *** fmarco76 has joined #openstack-keystone | 10:02 | |
| *** fmarco76 has left #openstack-keystone | 10:03 | |
| *** daneyon has quit IRC | 10:10 | |
| *** daneyon has joined #openstack-keystone | 10:15 | |
| *** ajayaa has quit IRC | 10:22 | |
| *** chandankumar has quit IRC | 10:25 | |
| *** dims_ has joined #openstack-keystone | 10:25 | |
| *** chandankumar has joined #openstack-keystone | 10:33 | |
| *** andreaf has quit IRC | 10:34 | |
| *** andreaf has joined #openstack-keystone | 10:35 | |
| *** afazekas has quit IRC | 10:35 | |
| *** ajayaa has joined #openstack-keystone | 10:36 | |
| *** ajayaa has quit IRC | 10:48 | |
| *** Dafna has joined #openstack-keystone | 11:00 | |
| *** daneyon has quit IRC | 11:01 | |
| *** afazekas has joined #openstack-keystone | 11:02 | |
| *** daneyon has joined #openstack-keystone | 11:04 | |
| *** ajayaa has joined #openstack-keystone | 11:13 | |
| *** diegows has joined #openstack-keystone | 11:24 | |
| *** Dafna has quit IRC | 11:29 | |
| *** daneyon has quit IRC | 11:34 | |
| *** daneyon has joined #openstack-keystone | 11:36 | |
| *** Dafna has joined #openstack-keystone | 11:43 | |
| *** daneyon has quit IRC | 12:02 | |
| *** dvorak has joined #openstack-keystone | 12:03 | |
| *** daneyon has joined #openstack-keystone | 12:04 | |
| *** shausy has quit IRC | 12:07 | |
| *** daneyon has quit IRC | 12:20 | |
| *** daneyon has joined #openstack-keystone | 12:21 | |
| *** diegows has quit IRC | 12:21 | |
| *** dims_ has quit IRC | 12:30 | |
| *** jdennis has joined #openstack-keystone | 12:32 | |
| *** gabriel-bezerra has quit IRC | 12:36 | |
| *** andreaf has quit IRC | 12:36 | |
| *** gabriel-bezerra has joined #openstack-keystone | 12:37 | |
| *** andreaf has joined #openstack-keystone | 12:37 | |
| *** dims has joined #openstack-keystone | 12:39 | |
| *** miqui has joined #openstack-keystone | 12:41 | |
| *** richm has joined #openstack-keystone | 12:46 | |
| *** chandankumar has quit IRC | 12:50 | |
| *** gabriel-bezerra has quit IRC | 12:50 | |
| *** gabriel-bezerra has joined #openstack-keystone | 12:51 | |
| openstackgerrit | Justin Shepherd proposed a change to openstack/keystone: Adding an index on token.user_id https://review.openstack.org/102041 | 12:57 |
| *** bvandenh has quit IRC | 12:59 | |
| *** k4n0 has quit IRC | 13:01 | |
| *** toddnni has quit IRC | 13:01 | |
| *** lbragstad has joined #openstack-keystone | 13:04 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed a change to openstack/keystone: Refactor set domain-id and mapping code https://review.openstack.org/107680 | 13:04 |
| *** lbragstad has quit IRC | 13:05 | |
| *** lbragstad has joined #openstack-keystone | 13:05 | |
| *** chandankumar has joined #openstack-keystone | 13:07 | |
| *** joesavak has joined #openstack-keystone | 13:15 | |
| *** ayoung has joined #openstack-keystone | 13:22 | |
| *** gokrokve has joined #openstack-keystone | 13:23 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed a change to openstack/keystone: Introduce pragma no cover to asbtract classes https://review.openstack.org/107695 | 13:33 |
| *** bknudson has quit IRC | 13:35 | |
| *** ajayaa has quit IRC | 13:47 | |
| *** gokrokve has quit IRC | 13:50 | |
| *** gokrokve has joined #openstack-keystone | 13:51 | |
| *** daneyon has quit IRC | 13:51 | |
| *** bknudson has joined #openstack-keystone | 14:00 | |
| *** daneyon has joined #openstack-keystone | 14:02 | |
| *** mrmoje has quit IRC | 14:04 | |
| *** mrmoje has joined #openstack-keystone | 14:04 | |
| *** vhoward has joined #openstack-keystone | 14:07 | |
| *** topol has joined #openstack-keystone | 14:09 | |
| *** joesavak has quit IRC | 14:30 | |
| *** jdennis has quit IRC | 14:31 | |
| *** amcrn has quit IRC | 14:31 | |
| *** lbragstad has quit IRC | 14:32 | |
| *** hrybacki has joined #openstack-keystone | 14:33 | |
| openstackgerrit | Sean Dague proposed a change to openstack/python-keystoneclient: Only conditionally import working keyring https://review.openstack.org/107719 | 14:33 |
| *** gokrokve has quit IRC | 14:33 | |
| *** gokrokve has joined #openstack-keystone | 14:34 | |
| *** morganfainberg_Z is now known as morganfainberg | 14:35 | |
| *** mrmoje has quit IRC | 14:36 | |
| *** mrmoje has joined #openstack-keystone | 14:37 | |
| *** jdennis has joined #openstack-keystone | 14:38 | |
| *** gokrokve has quit IRC | 14:38 | |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds several more test modules that pass on Py3 https://review.openstack.org/102735 | 14:40 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds a fork of python-ldap for Py3 testing https://review.openstack.org/95827 | 14:40 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes test_exceptions.py for Python3 https://review.openstack.org/102737 | 14:40 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes test_wsgi for Python3 https://review.openstack.org/102736 | 14:40 |
| *** morganfainberg is now known as morganfainberg_Z | 14:40 | |
| *** spandhe has joined #openstack-keystone | 14:41 | |
| *** morganfainberg_Z is now known as morganfainberg | 14:41 | |
| *** gokrokve has joined #openstack-keystone | 14:43 | |
| *** david-lyle has joined #openstack-keystone | 14:46 | |
| *** daneyon has quit IRC | 14:46 | |
| *** daneyon has joined #openstack-keystone | 14:48 | |
| *** lbragstad has joined #openstack-keystone | 14:53 | |
| *** gokrokve_ has joined #openstack-keystone | 14:54 | |
| *** thedodd has joined #openstack-keystone | 14:55 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: SAML2 wrapper plugin for full federation authN https://review.openstack.org/106751 | 14:57 |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: Scope unscoped saml2 tokens. https://review.openstack.org/99704 | 14:57 |
| *** spandhe_ has joined #openstack-keystone | 14:58 | |
| *** daneyon_ has joined #openstack-keystone | 15:01 | |
| *** lbragstad has quit IRC | 15:02 | |
| *** tomoiaga has quit IRC | 15:02 | |
| *** morganfainberg is now known as morganfainberg_Z | 15:02 | |
| *** daneyon has quit IRC | 15:02 | |
| *** gokrokve has quit IRC | 15:02 | |
| *** spandhe has quit IRC | 15:02 | |
| *** spandhe_ is now known as spandhe | 15:02 | |
| *** mrmoje has quit IRC | 15:02 | |
| *** andreaf has quit IRC | 15:02 | |
| *** Dafna has quit IRC | 15:02 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: Scope unscoped saml2 tokens. https://review.openstack.org/99704 | 15:03 |
| *** andreaf has joined #openstack-keystone | 15:03 | |
| *** mrmoje has joined #openstack-keystone | 15:04 | |
| *** stevemar has joined #openstack-keystone | 15:05 | |
| *** Dafna has joined #openstack-keystone | 15:07 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: SAML2 wrapper plugin for full federation authN https://review.openstack.org/106751 | 15:07 |
| *** huats_ is now known as huats | 15:11 | |
| *** lbragstad has joined #openstack-keystone | 15:14 | |
| openstackgerrit | Justin Shepherd proposed a change to openstack/keystone: Adding an index on token.user_id https://review.openstack.org/102041 | 15:16 |
| *** daneyon_ has quit IRC | 15:18 | |
| *** daneyon has joined #openstack-keystone | 15:20 | |
| *** gokrokve_ has quit IRC | 15:21 | |
| *** gokrokve has joined #openstack-keystone | 15:22 | |
| *** andreaf has quit IRC | 15:23 | |
| *** morganfainberg_Z is now known as morganfainberg | 15:24 | |
| *** gokrokve has quit IRC | 15:26 | |
| openstackgerrit | Bob Thyne proposed a change to openstack/identity-api: Update OS-EP-FILTER API https://review.openstack.org/106292 | 15:27 |
| *** daneyon has left #openstack-keystone | 15:28 | |
| *** spandhe has quit IRC | 15:29 | |
| *** hrybacki has quit IRC | 15:30 | |
| openstackgerrit | Bob Thyne proposed a change to openstack/identity-api: Update OS-EP-FILTER API https://review.openstack.org/106292 | 15:32 |
| ayoung | stevemar, did you really -1 morganfainberg 's run_tests.sh patch because it doesn't support a tox option not supported by the origianl run_tests code? Don't you think that would be scope creep for this patch? | 15:34 |
| morganfainberg | lol | 15:34 |
| stevemar | ayoung, i guess i really did | 15:34 |
| ayoung | stevemar, we are like -1 happy here | 15:37 |
| ayoung | stevemar, I was just looking at that as he documents how to do failfast. I'd like to update run_tests.sh as I think it will help developers. Care to rethink your vote on that, so we can get it on through? | 15:38 |
| stevemar | ayoung, it's how i ask questions, i'm not stating that i need/want support for all envs. | 15:38 |
| ayoung | stevemar, and in general it is not a bad approach, but the -1 does tend to stop reviews in their tracks. | 15:39 |
| ayoung | For something like this that is not security, runtime, or public doc facing, I would favor a "get it in and see what breaks" approach | 15:40 |
| stevemar | ayoung, theres been 3 reviews on this patch in almost 20 days :( - i doubt my -1 stopped anything | 15:40 |
| *** xianghui has quit IRC | 15:40 | |
| stevemar | ayoung, but yeah, i agree that it's not security or runtime or public docs, so i should go easier on it | 15:41 |
| ayoung | stevemar, its more of a Keystone Cultural thing..., every -1 is minuscule, but with so many reviews, in bulk, they add up. | 15:42 |
| ayoung | stevemar, I guess I am asking you to +2 so I can +2a and start using it without having to rebase my other patches | 15:42 |
| stevemar | ayoung, more than happy to oblige | 15:43 |
| ayoung | thanks | 15:43 |
| stevemar | ayoung, +a'ed :) | 15:43 |
| ayoung | ++ thanks | 15:43 |
| stevemar | i ain't unreasonable! it was just a question, albeit a silly one (didn't remember that debug was part of the original env) | 15:44 |
| stevemar | I recall trying to use pdb and the new run_tests, and it failing / not stopping the same way | 15:44 |
| morganfainberg | topol, let me know when you got a sec. | 15:46 |
| topol | morganfainberg, here | 15:46 |
| openstackgerrit | Sean Dague proposed a change to openstack/python-keystoneclient: Only conditionally import working keyring https://review.openstack.org/107719 | 15:50 |
| stevemar | ayoung, care to return the favor: https://review.openstack.org/#/c/106292/ ? :) | 15:50 |
| stevemar | ayoung, oops! https://review.openstack.org/#/c/106407/5 | 15:50 |
| stevemar | ayoung, and possibly this one too :) https://review.openstack.org/#/c/106474/ | 15:51 |
| stevemar | you probably should review them since they are revocation related changes | 15:52 |
| ayoung | stevemar, is 106292 not one you are requestine me to look at? | 15:52 |
| stevemar | ayoung, I'm reviewing 106292 now, that was a copy pasta error on my part | 15:52 |
| ayoung | OK | 15:52 |
| ayoung | https://review.openstack.org/#/c/106474/1 +A | 15:53 |
| *** diegows has joined #openstack-keystone | 15:53 | |
| ayoung | https://review.openstack.org/#/c/106407/5 +A | 15:54 |
| stevemar | ayoung, yay! | 15:54 |
| *** hrybacki has joined #openstack-keystone | 15:55 | |
| *** hrybacki has quit IRC | 15:56 | |
| *** hrybacki has joined #openstack-keystone | 15:56 | |
| *** xianghui has joined #openstack-keystone | 15:57 | |
| *** henrynash has joined #openstack-keystone | 15:58 | |
| henrynash | morganfainberg: quick question on HEAD/GET….. | 15:59 |
| morganfainberg | henrynash, of course | 15:59 |
| morganfainberg | henrynash, what can i answer for you :) | 15:59 |
| henrynash | morgafainberg: did you change it so taht wherever we do a HEAD< we have a GET…or both ways? | 16:00 |
| morganfainberg | wherever we have a HEAD we should have a GET | 16:00 |
| morganfainberg | and those should return the same | 16:00 |
| henrynash | morgainfainberg: i.e. there are always matching HEADs & GETs for every entity | 16:00 |
| morganfainberg | but i did not add a HEAD where we had GETs | 16:00 |
| morganfainberg | that was out of scope for the immidiate fix | 16:00 |
| *** afazekas has quit IRC | 16:01 | |
| morganfainberg | henrynash, i want to add HEAD calls for each GET that doesn't have it. but it was a lot more code and i was concerned about the backport being too big. | 16:01 |
| henrynash | morganfainberg: ok, that’s what I thought….so if we are adding new APIs that have a GET…..would you say we should add a HEAD? | 16:01 |
| morganfainberg | henrynash, I'd support that | 16:01 |
| *** tkelsey has quit IRC | 16:01 | |
| morganfainberg | henrynash, and anyplace you have a HEAD call it must implement GET and return the *exact* same data. | 16:01 |
| henrynash | morganfainberg: ok, yep, I agree….thanks | 16:02 |
| morganfainberg | let apache/keystone.common.wsgi strip out the body | 16:02 |
| morganfainberg | henrynash, sure thing! | 16:02 |
| morganfainberg | ayoung, stevemar, bknudson, before i duck out to continue working on non-persistent-tokens any specific code that needs eyes? | 16:03 |
| * morganfainberg is in review-code-mode while eating breakfast. | 16:03 | |
| morganfainberg | henrynash, dolphm, ^ | 16:03 |
| bknudson | morganfainberg: https://review.openstack.org/#/c/104400/ | 16:03 |
| henrynash | morganfainberg: sure thing | 16:03 |
| morganfainberg | bknudson, NICE++++ on that one landing | 16:03 |
| bknudson | morganfainberg: https://review.openstack.org/#/c/103997/ -- easy one | 16:04 |
| *** stevemar has quit IRC | 16:04 | |
| morganfainberg | bknudson, +2/+A on that 2nd one | 16:04 |
| bknudson | morganfainberg: https://review.openstack.org/#/c/94679/ | 16:05 |
| morganfainberg | bknudson, i thought that one had merged already | 16:05 |
| *** kwss has quit IRC | 16:06 | |
| *** chandankumar has quit IRC | 16:06 | |
| bknudson | morganfainberg: those were the obvious ones from me. | 16:08 |
| morganfainberg | bknudson, ++ | 16:08 |
| *** vhoward has left #openstack-keystone | 16:11 | |
| dolphm | bknudson: morganfainberg: a bunch of stuff has merged in last 24 hours! | 16:11 |
| dolphm | morganfainberg: bknudson: the blocker for lbragstad's series in gating to tempest now as well | 16:11 |
| morganfainberg | dolphm, W00t! | 16:12 |
| dolphm | morganfainberg: bknudson: we should be able to recheck his stuff soon- https://review.openstack.org/#/c/106420/ | 16:12 |
| morganfainberg | dolphm, didn't https://bugs.launchpad.net/keystonemiddleware/+bug/1336056 get fixed? | 16:17 |
| uvirtbot | Launchpad bug 1336056 in keystonemiddleware "Keystone V3 Should Be Used By Default Over V2" [Wishlist,Triaged] | 16:17 |
| morganfainberg | that was your v3 patch | 16:17 |
| *** gokrokve has joined #openstack-keystone | 16:23 | |
| *** BAKfr has quit IRC | 16:27 | |
| *** joesavak has joined #openstack-keystone | 16:32 | |
| morganfainberg | bknudson, oooh does the i18n change mean we don't import pbr directly in keystone anymore? | 16:35 |
| morganfainberg | oh no it was just moved | 16:35 |
| morganfainberg | nvm | 16:35 |
| *** afazekas has joined #openstack-keystone | 16:39 | |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes a Python3 syntax error https://review.openstack.org/102734 | 16:43 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds several more test modules that pass on Py3 https://review.openstack.org/102735 | 16:43 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds a fork of python-ldap for Py3 testing https://review.openstack.org/95827 | 16:43 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes test_exceptions.py for Python3 https://review.openstack.org/102737 | 16:43 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes test_wsgi for Python3 https://review.openstack.org/102736 | 16:43 |
| *** lbragstad has quit IRC | 16:44 | |
| dolphm | morganfainberg: yes! we don't have a hudson bot on keystonemiddleware | 16:44 |
| morganfainberg | ooh | 16:44 |
| morganfainberg | let me figure out how to fix that. | 16:44 |
| *** lbragstad has joined #openstack-keystone | 16:45 | |
| *** gabriel-bezerra has quit IRC | 16:45 | |
| *** gabriel-bezerra has joined #openstack-keystone | 16:46 | |
| *** rwsu has joined #openstack-keystone | 16:55 | |
| mhu | Hi, is there a way to run tox tests using python-keystoneclient from the github master branch rather than the PyPI version in test-requirements ? | 16:57 |
| *** gabriel-bezerra has quit IRC | 16:57 | |
| *** gabriel-bezerra has joined #openstack-keystone | 16:57 | |
| ayoung | arunkant, you got a moment to talk your ldap pooling patch? | 17:06 |
| ayoung | arunkant, it looks like you duplicated some of the pool tests in the live version, and I was wondering if that was intentional or just due to not knowing how to mix the liveldap tests with the pool tests. | 17:07 |
| *** dstanek is now known as dstanek_zzz | 17:11 | |
| *** Dafna has quit IRC | 17:16 | |
| *** dstanek_zzz is now known as dstanek | 17:17 | |
| dstanek | mhu: you can always install the master version into your tox venv | 17:19 |
| dstanek | mhu: also i'm pretty sure tests_keystoneclient.py tests do use master as well as certain versions | 17:20 |
| *** harlowja_away is now known as harlowja | 17:20 | |
| *** afazekas has quit IRC | 17:22 | |
| *** bvandenh has joined #openstack-keystone | 17:28 | |
| *** marcoemorais has joined #openstack-keystone | 17:30 | |
| *** thedodd has quit IRC | 17:33 | |
| mhu | dstanek, thx, the tests_keystoneclient.py approach doesn't suit me so I'll look into the tox venv | 17:34 |
| *** amcrn has joined #openstack-keystone | 17:49 | |
| dstanek | mhu, what are you trying to do? | 17:53 |
| mhu | dstanek, trying to leverage keystoneclient auth plugins in python-openstackclient | 17:55 |
| mhu | the merge was done about a week ago or so in keystoneclient | 17:55 |
| openstackgerrit | ayoung proposed a change to openstack/keystone: Make run_tests.sh a wrapper for tox https://review.openstack.org/103282 | 17:55 |
| openstackgerrit | ayoung proposed a change to openstack/keystone: No default assignment backend https://review.openstack.org/107785 | 17:55 |
| mhu | dstanek, this: https://review.openstack.org/gitweb?p=openstack%2Fpython-keystoneclient.git;a=commitdiff;h=5c91ede44768ebbb2fff12f9a7c93e63b9bbd56d | 17:57 |
| ayoung | morganfainberg, http://paste.openstack.org/show/86997/ what is causing that? | 18:00 |
| morganfainberg | uhm. | 18:01 |
| ayoung | morganfainberg, hmm, I have a venv activated... | 18:01 |
| morganfainberg | haven't seen that before | 18:01 |
| ayoung | let me deactivate | 18:01 |
| morganfainberg | might be making things a bit wonky | 18:02 |
| ayoung | morganfainberg, I get it all the time.... I need to figure out why and make it not happen | 18:02 |
| ayoung | morganfainberg, now I get http://paste.openstack.org/show/86999/ | 18:02 |
| morganfainberg | venv out of date? | 18:03 |
| ayoung | morganfainberg, shouldn't -u take care of that | 18:03 |
| morganfainberg | -r ? | 18:03 |
| ayoung | morganfainberg, that was for tox. | 18:03 |
| ayoung | I just ran tox -epy27 -r | 18:03 |
| ayoung | priopr to run_tests.sh | 18:03 |
| *** stevemar has joined #openstack-keystone | 18:04 | |
| morganfainberg | oh, under tox there isn't / wasn't a way to "update" the venv | 18:04 |
| morganfainberg | afaict | 18:04 |
| morganfainberg | only complete rebuild | 18:04 |
| morganfainberg | looks like i might have changed -u to -r in the new one, sorry >.< | 18:04 |
| ayoung | -r in tox was a full recreate | 18:05 |
| ayoung | -u was just an update in run_tests, much faster | 18:05 |
| morganfainberg | right | 18:05 |
| morganfainberg | which doesn't work in tox | 18:05 |
| morganfainberg | there is no *update venv* | 18:05 |
| morganfainberg | afact | 18:05 |
| morganfainberg | change in run_tests when i made it a wrapper for tox | 18:06 |
| ayoung | morganfainberg, OK, wiping the .tox subdir and trying from scratch | 18:06 |
| ayoung | ./run_tests.sh -x | 18:06 |
| ayoung | lets see what happens... | 18:06 |
| * ayoung takes nap while tox runs | 18:06 | |
| morganfainberg | the issue is you passed -u which was then passed to subunit | 18:06 |
| morganfainberg | which i think is what was causing that OSError | 18:06 |
| ayoung | morganfainberg, ok, so we need to swallow the -u in run_tests for now | 18:07 |
| morganfainberg | ayoung, or just alias -u and -f to -r | 18:14 |
| ayoung | morganfainberg, -f yes....-u exist out for now saying cannot support | 18:14 |
| ayoung | exit out | 18:14 |
| morganfainberg | sure | 18:14 |
| ayoung | rebuilding is expensive. I am still waiting | 18:15 |
| ayoung | morganfainberg, is there any reason we have a separate venv for pep8 and py27? | 18:15 |
| ayoung | inside of tox, I mean. Shouldn't pep 8 run on the py27 code ? | 18:15 |
| morganfainberg | pep8 uses the default for your platform | 18:15 |
| morganfainberg | i think | 18:15 |
| morganfainberg | *shrug* we inherited that from a long time ago | 18:15 |
| ayoung | building 2 venvs is time consuming. I assume the pep8 one is a subset of the p727 | 18:16 |
| ayoung | py27 | 18:16 |
| *** tkelsey has joined #openstack-keystone | 18:16 | |
| morganfainberg | thye are actually the same | 18:16 |
| morganfainberg | both do pip -r requirements.txt -r test-requirements.txt | 18:16 |
| ayoung | morganfainberg, yeah, I meant that running pep8 requires a subset of the requirements for py27, but that they use the same versions of python files to fulfill | 18:19 |
| openstackgerrit | Sam Leong proposed a change to openstack/keystone: Disable a domain will revoke domain scoped tokens https://review.openstack.org/107194 | 18:19 |
| *** joesavak has quit IRC | 18:19 | |
| ayoung | bascially, we can merge the two together, and in the future run pep8-py33 | 18:19 |
| ayoung | morganfainberg, I'm actually thinking that running tox -epy27 could run pep8 first anyway | 18:20 |
| morganfainberg | ayoung, in most cases it requires the full requirements/test-requirements because flake8 does the 'make sure import modules only' which does import inspection and imports things to make sure they are modules | 18:20 |
| dstanek | topol: I always have time for your questions! | 18:20 |
| morganfainberg | ayoung, we should not do that, it would make gate unhappy | 18:20 |
| morganfainberg | ayoung, it would mean a pep8 failure would fail py27, not a good indicator. | 18:21 |
| ayoung | morganfainberg, I would be 100% fine with that | 18:21 |
| ayoung | pep8 is like the compiler; don't do anything unless it runs 100% | 18:21 |
| morganfainberg | ayoung, but that isn't the way it works for check/gate | 18:21 |
| morganfainberg | it makes it easy to know if you have a pythong issue or a pep8 violation | 18:21 |
| ayoung | understood | 18:21 |
| openstackgerrit | A change was merged to openstack/keystone: LDAP: Added documentation for debug_level option https://review.openstack.org/94679 | 18:21 |
| openstackgerrit | A change was merged to openstack/keystone: Update docs to reflect new db_sync behaviour https://review.openstack.org/106407 | 18:22 |
| topol | dtsanek, thanks!!! The whole string switcheroo is just evil :-) Who are the ad wizards who came up with that :-) | 18:22 |
| dstanek | ayoung: just run 'tox' | 18:22 |
| topol | tox rules!!! topol is a convert | 18:22 |
| ayoung | dstanek, I don't want to build 2 venvs | 18:22 |
| * morganfainberg doesn't like run_tests.sh but meh | 18:22 | |
| morganfainberg | people seem to like it | 18:22 |
| ayoung | I want tox to use the py27 venv for pep8 | 18:22 |
| morganfainberg | ayoung, i think there is an environment variable you can set for that kind of support | 18:23 |
| ayoung | morganfainberg, I was looking at it because run_tests.sh documents the fail fast logic, and saw your patch malingering | 18:23 |
| morganfainberg | but i don't remember it | 18:23 |
| morganfainberg | tox -epy27 -- -- --failfast | 18:23 |
| morganfainberg | such an awful format | 18:23 |
| dstanek | ayoung: I have a patch that does that and adds some py3 stuff | 18:23 |
| ayoung | dstanek, cool. I was getting frustrated as I awaited a full venv rebuild for tox.... | 18:24 |
| ayoung | I wonder if it speeds anything up to mount .tox on a ramdisk. | 18:25 |
| morganfainberg | ayoung, some, not a lot | 18:25 |
| openstackgerrit | A change was merged to openstack/keystone: Add revocation extension to default pipeline https://review.openstack.org/106474 | 18:25 |
| ayoung | although, as I recall, we do something wonky to access the source code, and that creas a cross mount issue | 18:25 |
| morganfainberg | ayoung, a lot of the painful part is the python bytecode compiling/linking/etc | 18:25 |
| morganfainberg | and some python packages really don't like being on ramdisk | 18:26 |
| *** joesavak has joined #openstack-keystone | 18:26 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed a change to openstack/keystone: Refactor set domain-id and mapping code https://review.openstack.org/107680 | 18:30 |
| *** ChanServ changes topic to "July 9-11 Hackathon notes https://etherpad.openstack.org/p/keystone-juno-hackathon | Now with 100% gate and check runs on Apache deployed Keystone | K release named "Kilo"" | 18:32 | |
| *** tkelsey has quit IRC | 18:35 | |
| *** marcoemorais has quit IRC | 18:36 | |
| *** marcoemorais has joined #openstack-keystone | 18:37 | |
| *** marcoemorais has quit IRC | 18:37 | |
| *** marcoemorais has joined #openstack-keystone | 18:37 | |
| *** toddnni has joined #openstack-keystone | 18:38 | |
| *** thedodd has joined #openstack-keystone | 18:39 | |
| *** tkelsey_ has joined #openstack-keystone | 18:40 | |
| *** bvandenh has quit IRC | 18:46 | |
| *** tkelsey_ has quit IRC | 18:51 | |
| *** marcoemorais has quit IRC | 18:55 | |
| *** marcoemorais has joined #openstack-keystone | 18:55 | |
| *** marcoemorais has quit IRC | 18:56 | |
| *** marcoemorais has joined #openstack-keystone | 18:56 | |
| *** gothicmindfood has joined #openstack-keystone | 19:08 | |
| *** jdob has joined #openstack-keystone | 19:08 | |
| jdob | hey all, I have a fresh devstack setup that runs fine until I unstack.sh and then rejoin-stack.sh. then i keep getting unable to establish connection to /v2.0/tokens. has anyone run into this before that can kick me in the right direction? | 19:09 |
| jdob | nm, got it :) | 19:15 |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Sync with oslo-incubator fd90c34a9 https://review.openstack.org/103997 | 19:22 |
| afaranha | morganfainberg: Sorry for bothering again. From yesterday we discussed that the OS-INHERIT extension doesn't update an existing one, and also doesn't raise any error, leading the user to believe that the grant was successful, what do you think to OS-INHERIT operation raise an error/warning in this case? | 19:25 |
| morganfainberg | i think it would be fair to do some input validation that checks for the body | 19:25 |
| *** hrybacki has quit IRC | 19:25 | |
| afaranha | Also, do anyone knows why in http://developer.openstack.org/api-ref-identity-v3.html we don't have the project sessions anymore? | 19:25 |
| morganfainberg | the sections? | 19:26 |
| morganfainberg | there have been bugs on that page | 19:26 |
| afaranha | section* yes | 19:26 |
| morganfainberg | a number of things are missing | 19:26 |
| morganfainberg | need to bug doc team again | 19:26 |
| morganfainberg | looks like projects is missing from http://developer.openstack.org/api-ref-guides/bk-api-ref-identity-v3.pdf as well | 19:27 |
| afaranha | I think project gone missing recently, but the API to create a new User is missing a long time ago | 19:27 |
| morganfainberg | yeah | 19:28 |
| morganfainberg | afaranha, the create user bits are back | 19:29 |
| afaranha | Nice :) | 19:29 |
| afaranha | didn't notice it | 19:30 |
| morganfainberg | afaranha, something is really wonky with the api site for keystone | 19:30 |
| morganfainberg | afaranha, http://developer.openstack.org/api-ref-identity-v3.html#users-v3 first one is post (create) | 19:30 |
| afaranha | I saw, I needed it a few days ago and didn't see, guess it's new modification | 19:31 |
| *** marcoemorais has quit IRC | 19:32 | |
| *** marcoemorais has joined #openstack-keystone | 19:32 | |
| *** marcoemorais has quit IRC | 19:33 | |
| *** marcoemorais has joined #openstack-keystone | 19:33 | |
| *** marcoemorais has quit IRC | 19:33 | |
| *** marcoemorais has joined #openstack-keystone | 19:33 | |
| morganfainberg | afaranha, well then | 19:35 |
| morganfainberg | https://github.com/openstack/api-site/blob/master/api-ref/src/docbkx/ch_identity-v3.xml#L129 | 19:35 |
| morganfainberg | looks like projects was commented out | 19:35 |
| afaranha | but.. why? | 19:36 |
| morganfainberg | no idea | 19:37 |
| morganfainberg | afaranha https://bugs.launchpad.net/openstack-api-site/+bug/1343540 | 19:38 |
| uvirtbot | Launchpad bug 1343540 in openstack-api-site "Keystone V3 has no "Manage Projects" Section published" [Undecided,New] | 19:39 |
| afaranha | I don't know if we can just uncomment this..... | 19:41 |
| morganfainberg | I'm happy to let the docs folks comment on why it was done | 19:42 |
| morganfainberg | the commit that changed it didn't seem to make sense to me from that angle | 19:42 |
| raildo | morganfainberg: https://github.com/openstack/api-site/blame/master/api-ref/src/docbkx/ch_identity-v3.xml#L130 | 19:43 |
| morganfainberg | raildo, yes, i looked. that commit doesn't make sense *why* projects was disabled to me | 19:43 |
| morganfainberg | i just don't know enough about it to know why it was needed to fix builds | 19:44 |
| raildo | morganfainberg: i agree | 19:44 |
| raildo | i will fix this | 19:44 |
| raildo | ok? | 19:44 |
| morganfainberg | raildo, feel free to | 19:44 |
| morganfainberg | raildo, :) | 19:44 |
| dolphm | is use_dumb_member & dumb_member (the DN) used by identity driver, or just assignment? | 19:48 |
| afaranha | morganfainberg: I'll make inherit functionality raises an error when there is the assignment, seems ok? | 19:49 |
| morganfainberg | dolphm, i thought just identity, but ... uh | 19:49 |
| dolphm | morganfainberg: oh.. i'm probably wrong/backwards | 19:50 |
| morganfainberg | now i'm questioning that | 19:50 |
| morganfainberg | afaranha, well. no | 19:50 |
| dolphm | morganfainberg: i'm looking to cut down sample conf for the things that are not required if you're using identity-only ldap | 19:50 |
| morganfainberg | ah | 19:50 |
| morganfainberg | afaranha, i think something is wierd in that API the more we talk about it | 19:51 |
| dstanek | morganfainberg: after reading you DI spec i tried to revisit some of the local commits where I was messing with DI | 19:52 |
| dstanek | morganfainberg: the circular ref between identity and assignment is pretty bad | 19:52 |
| morganfainberg | dstanek, yeah | 19:52 |
| dstanek | morganfainberg: in order to get my stuff to work i did all kinds of ugly hacks - mostly for that decorator in identity ( i think ) | 19:53 |
| morganfainberg | dstanek, i think we can get around it, but we need to decide what the fix needs to look like first | 19:53 |
| morganfainberg | and i am not sure what it should look like :( | 19:53 |
| dstanek | morganfainberg: so what i did was make @requires a bit smarter so that it could pass in deps as kwargs | 19:53 |
| afaranha | I think weird that the user thinks the command did what it was suppose to do, but actually changed nothing at all | 19:53 |
| morganfainberg | afaranha, i think the whole API is a little weird | 19:54 |
| dstanek | then i started to change the tests to manually construct | 19:54 |
| david-lyle | If I were a cloud admin and had a token scoped to the admin domain, should I be able to administer identity in other domains? | 19:54 |
| morganfainberg | afaranha, there is some assumption that is wrong in it. we might need to fix that | 19:54 |
| morganfainberg | david-lyle, depends on what policy says | 19:54 |
| morganfainberg | david-lyle, it also depends on if that domain is classified as a cloud-wide-admin domain (for example) | 19:54 |
| david-lyle | assuming v3cloud admin sample shipped with keystone | 19:54 |
| david-lyle | yes assuming admin domain is cloud-wide-admin | 19:55 |
| morganfainberg | hm. i think one of the domains is a cloud-wide admin (Default domain?) | 19:55 |
| * morganfainberg checks | 19:55 | |
| david-lyle | yes, there can be only one | 19:55 |
| dstanek | morganfainberg: i'll get this stuff functional again so you can take a peek - i was something like 150 commits behind on that branch | 19:55 |
| * david-lyle at least that's how I understand it | 19:55 | |
| morganfainberg | the idea is that admin of domain X should not be able to be admin on domain Y | 19:55 |
| morganfainberg | unless domain X is the 'cloud-admin-domain' | 19:55 |
| david-lyle | but I need a domain scoped token to do the identity admin stuff | 19:56 |
| morganfainberg | i think. | 19:56 |
| david-lyle | like add users | 19:56 |
| david-lyle | ok, I'll keep playing, trying to make sure I'm not completely off base | 19:56 |
| david-lyle | morganfainberg: thanks | 19:57 |
| morganfainberg | david-lyle, happy to help (hope i was more helpful than I thought) | 19:57 |
| david-lyle | just trying to get some support for my assumptions | 19:57 |
| morganfainberg | ah | 19:57 |
| morganfainberg | ok | 19:57 |
| morganfainberg | dstanek, i think the part i'm unclear on is do we want each object ot have it's own instantiation of the API? | 19:58 |
| morganfainberg | dstanek, do we want the central-registry (instantiate once?) | 19:58 |
| morganfainberg | dstanek, do we want something wildly different? | 19:58 |
| *** marcoemorais has quit IRC | 20:04 | |
| *** marcoemorais has joined #openstack-keystone | 20:04 | |
| morganfainberg | afaranha, ok | 20:04 |
| dstanek | morganfainberg: i'm doing a sort of hybrid | 20:05 |
| morganfainberg | afaranha, i think i see the issue | 20:06 |
| morganfainberg | afaranha, the big issue here is that inherited is not part of the PK for the role assignment | 20:06 |
| morganfainberg | afaranha, so you silently fail when you try and create a duplicated grant. | 20:07 |
| *** marcoemorais has quit IRC | 20:07 | |
| morganfainberg | afaranha, i think we have 2 solutions: 1) you cannot create an inherited grant if a normal grant of the same type exists (error raised) | 20:07 |
| *** marcoemorais has joined #openstack-keystone | 20:07 | |
| morganfainberg | afaranha, 2) make inheritance part of the unique/pk for the grant | 20:08 |
| morganfainberg | afaranha, i am not sure which one is a better choice. | 20:09 |
| morganfainberg | i lean towards the second option | 20:09 |
| afaranha | morganfainberg: Maybe the first one | 20:10 |
| morganfainberg | i don't like the "revoke and re-grant" to get inheritence | 20:10 |
| morganfainberg | but the first option is *way* less work to get done | 20:10 |
| *** joesavak has quit IRC | 20:12 | |
| afaranha | If we have inherit column as a PK, we will be allowed to have the same assign duplicated | 20:12 |
| afaranha | one with inherit 0 and another with 1, in my opinion inherit column is not part of assignment | 20:13 |
| afaranha | but, yes, revoke and re-grant is dislikeable | 20:14 |
| *** lbragstad has quit IRC | 20:18 | |
| morganfainberg | afaranha, i don't want to introduce "update grant" logic (via the api) I think it's incorrect to allow updating a grant, but... maybe OS-INHERIT needs that bit? a toggle for inheritable... | 20:20 |
| morganfainberg | afaranha, ok go for raise an exception first (revoke and re-grant), we can discuss that via code review if it's really wrong | 20:20 |
| morganfainberg | it's also the smallest amount of code. | 20:20 |
| afaranha | IMHO the logic of grant is the type, actor and target, and the inherit column is just a field that can be updated without breaking the "grant" | 20:23 |
| *** topol has quit IRC | 20:24 | |
| dstanek | ayoung: i was just about to push my patches for the tox stuff and realized that i may break people | 20:24 |
| dstanek | ayoung: i make the assumption that a developer's default environment is 2.7 (because these changes were originally just for me) | 20:25 |
| ayoung | dstanek, for keystone that is a good assumption | 20:25 |
| *** jdob has quit IRC | 20:25 | |
| ayoung | there is no 33 for keystone server | 20:26 |
| dstanek | what do you mean no 33? | 20:26 |
| afaranha | morganfainberg: but I can do that, send the patch and then discuss. | 20:28 |
| marekd | openstack summit in paris is Nov 3-7 or slightly longer? I think somebody mentioned it would also be on Sat, Nov 8th? | 20:30 |
| ayoung | morganfainberg, versions page. admin port reports onvly version3. port 5000 reports v2 and v3. Is this a bug? Sounds like it to me | 20:31 |
| ayoung | david-lyle, I might be battling what you are battling | 20:32 |
| david-lyle | ayoung, I'm trying to piece together domain admin/cloud admin capabilities in Horizon | 20:33 |
| ayoung | david-lyle, that is a policy decision made by keystone | 20:33 |
| ayoung | david-lyle, the problem is that horizon can't fetch policy from Keystone | 20:33 |
| ayoung | a bell I have been ringing for a while | 20:33 |
| david-lyle | me too | 20:33 |
| david-lyle | we can have a copy of the keystone policy file and work from their | 20:34 |
| david-lyle | there* | 20:34 |
| david-lyle | maybe the v3cloudadmin sample is just not what I want to start from | 20:34 |
| *** erecio has joined #openstack-keystone | 20:36 | |
| *** arun_kant has joined #openstack-keystone | 20:39 | |
| arun_kant | ayoung: I have added ldap pool specific livetest..can you please review https://review.openstack.org/#/c/95300/ again. | 20:40 |
| ayoung | arun_kant, I sent you a ping message before. There seems to be some duplication in your tests between liveldap pool and the fakeldap version | 20:41 |
| arun_kant | test are sames, its just backend is different.. | 20:42 |
| *** joesavak has joined #openstack-keystone | 20:46 | |
| *** gabriel-bezerra has quit IRC | 20:46 | |
| *** gabriel-bezerra has joined #openstack-keystone | 20:46 | |
| *** lbragstad has joined #openstack-keystone | 20:49 | |
| *** lbragstad has quit IRC | 20:53 | |
| *** gokrokve_ has joined #openstack-keystone | 20:58 | |
| *** gokrokve has quit IRC | 21:00 | |
| *** alex_xu has joined #openstack-keystone | 21:00 | |
| *** lbragstad has joined #openstack-keystone | 21:09 | |
| *** lbragstad has quit IRC | 21:10 | |
| *** mrmoje has quit IRC | 21:12 | |
| *** gabriel-bezerra has quit IRC | 21:13 | |
| *** gabriel-bezerra has joined #openstack-keystone | 21:14 | |
| *** lbragstad has joined #openstack-keystone | 21:16 | |
| dstanek | it looks like we can't hack up the tox.ini like i had hoped | 21:21 |
| *** erecio has quit IRC | 21:29 | |
| *** jamielennox|away is now known as jamielennox | 21:39 | |
| jamielennox | dolphm: can you have a look at https://review.openstack.org/#/c/107325/ as it affects your /catalog change | 21:40 |
| jamielennox | dolphm: i suggest moving it to /auth/catalog but i'm thinking it should be /auth/endpoints | 21:40 |
| *** marcoemorais has quit IRC | 21:47 | |
| *** marcoemorais has joined #openstack-keystone | 21:47 | |
| *** henrynash has quit IRC | 21:49 | |
| *** andreaf has joined #openstack-keystone | 21:55 | |
| *** andreaf has quit IRC | 21:56 | |
| *** andreaf has joined #openstack-keystone | 21:56 | |
| openstackgerrit | Sam Leong proposed a change to openstack/keystone: Disable a domain will revoke domain scoped tokens https://review.openstack.org/107194 | 21:57 |
| *** ayoung has quit IRC | 21:57 | |
| dolphm | jamielennox: i'd rather not have two conflicting specs in the same cycle :) https://review.openstack.org/#/c/107325/ | 22:00 |
| jamielennox | dolphm: my thought was that we haven't had a release of the get-caatalog one that we could just move it over | 22:02 |
| jamielennox | the problem obviously with relying on /users/{user_id}/projects and /domains is that we are actively moving away from a situation where we have an internal user_id | 22:03 |
| dolphm | jamielennox: propose that bit of the change to juno/get-catalog.rst | 22:03 |
| jamielennox | regardless of if federation is core api or not, we are talking about doing LDAP and such via apache as an external service | 22:03 |
| jamielennox | i think (though am not certain just now writing it) that it will cause the same issues with user ids | 22:04 |
| jamielennox | that and it really bugs me that you have to call seperate routes to list projects depending on if you have a federated token as opposed to a regular token, once you have a token they should be the same path | 22:06 |
| dolphm | jamielennox: agree, i didn't like that about OS-FEDERATION either. does GET /v3/auth/projects return an empty list if you call it with a scoped token? | 22:07 |
| dolphm | jamielennox: (does it behave differently **at all** from GET /v3/users/{user_id}/projects if federation isn't involved?) | 22:07 |
| jamielennox | dolphm: up for debate i suggest, this is probably a good place to say that you can't rescope a token and therefore returns an empty list for scoped | 22:08 |
| jamielennox | though i think that would break horizon | 22:08 |
| jamielennox | but, no i was thinking about it from just a workflow issue | 22:09 |
| jamielennox | basically from client side i've (purposely) abstracted the tokens so that you should never really want to pull information out of it | 22:10 |
| *** andreaf has quit IRC | 22:11 | |
| *** bknudson has quit IRC | 22:13 | |
| jamielennox | dolphm: anyway, i'll make those fixes - think about it, i'm going to work | 22:14 |
| dolphm | jamielennox: fix horizon :) | 22:16 |
| dolphm | jamielennox: you could also 301 on GET /v3/OS-FEDERATION/projects & /domains :P | 22:17 |
| jamielennox | dolphm: the first step would be to abolish default_project_id, so that's on us | 22:17 |
| dolphm | jamielennox: i've tried that so many times :( | 22:17 |
| dolphm | i've given up | 22:17 |
| jamielennox | whilst ever we have default_project_id we have to allow listing projects associated with scoped tokens | 22:17 |
| jamielennox | yea, i can redirect from OS-FEDERATION/projects -> /auth/projects | 22:18 |
| jamielennox | dolphm: that was accepted for juno right? it's way too late to just ditch OS-FEDERATION/projects in favour of /auth/projects | 22:19 |
| dolphm | jamielennox: OS-FEDERATION is icehouse | 22:19 |
| *** marcoemorais has quit IRC | 22:20 | |
| jamielennox | yea, thought so | 22:20 |
| morganfainberg | dolphm, can we just delete default_project_id? | 22:21 |
| morganfainberg | dolphm, if the session tokens go through, it might work. | 22:22 |
| morganfainberg | dolphm, part of that spec is to include "available" projects in the unscoped token iirc | 22:22 |
| dolphm | morganfainberg: which spec? | 22:22 |
| dolphm | morganfainberg: oh session tokens | 22:22 |
| morganfainberg | dolphm, adam's session token spec | 22:22 |
| dolphm | morganfainberg: we can't just delete it though, no :P | 22:23 |
| morganfainberg | dolphm, i know :( | 22:23 |
| morganfainberg | well we *can* but someone would take issue with it :P | 22:23 |
| morganfainberg | s/someone/a lot of someones | 22:23 |
| jamielennox | config option? | 22:23 |
| jamielennox | just take the same 3 cycle phase out we've done before | 22:24 |
| morganfainberg | jamielennox, i think we'd need the sessions or something similar first | 22:24 |
| dolphm | jamielennox: talk to joesavak about it - he'll argue on the ground of UX | 22:25 |
| *** marcoemorais has joined #openstack-keystone | 22:26 | |
| *** gabriel-bezerra has quit IRC | 22:26 | |
| jamielennox | unscoped/scoped tokens aren't a security feature though, it's just a matter of establishing the standard workflow | 22:26 |
| *** andreaf has joined #openstack-keystone | 22:27 | |
| *** andreaf has quit IRC | 22:27 | |
| jamielennox | i think if horizon works (which it must anyway) then from UX i don't think people care | 22:27 |
| morganfainberg | dolphm, that the default_project_id is a user "preference" ? | 22:28 |
| morganfainberg | dolphm, i'd argue that doesn't belong on the authoritative user-object if that is the case. | 22:28 |
| morganfainberg | not that the concept of a default project "preference" is wrong. | 22:28 |
| dolphm | morganfainberg: the user's password is equally a preference, right? | 22:29 |
| jamielennox | dolphm: yes, hence federation and external LDAP | 22:29 |
| morganfainberg | dolphm, not as much. a default project is not needed to confer authentication | 22:29 |
| *** gabriel-bezerra has joined #openstack-keystone | 22:30 | |
| *** david-lyle has quit IRC | 22:31 | |
| dolphm | morganfainberg: but both of them should be user-mutable, right? | 22:31 |
| jamielennox | i think if you keep the concept of a default project then you should change the incoming auth packet so that instead of saying scope=project you say scope=defaultproject | 22:31 |
| jamielennox | but i'd prefer to just ditch it completely | 22:31 |
| joesavak | The use cases that the default project id solves for is: (1) As a user I don't want to have to remember the project i've been working in most or the single project ID i have assigned in order to do a fast authentication. (2) As an openstack implementor with many, many users, we want to eliminate extra API calls where possible to give users better availability. (3) As a user of horizon/custom UI, I don't want to have to login th | 22:32 |
| joesavak | en choose a project then work when I really just want to go to the project I typically work in. | 22:32 |
| joesavak | sorry for wordy | 22:32 |
| *** jaosorior has quit IRC | 22:32 | |
| morganfainberg | dolphm, password has a higher bar for mutability / validation than project (and usually has an explicit interface, like we have, for it) | 22:32 |
| *** marcoemorais has quit IRC | 22:32 | |
| *** marcoemorais has joined #openstack-keystone | 22:32 | |
| *** dims_ has joined #openstack-keystone | 22:33 | |
| *** marcoemorais has quit IRC | 22:33 | |
| morganfainberg | joesavak, the concept of default project isn't wrong. placing it in keystone is a sub-optimal place, or on the authoratative user object in keystone (if we had "options" extension that covered the 'extra' stuff for users, it would be more apporpriate, but only where that info needs to be passed to the requesting service not *anytime a user object is inspected* | 22:33 |
| jamielennox | joesavak: i don't think 3 is valid, horizon already has to be able to get an unscoped token and scope it to something else, the usability for that case shouuld be to return the default project id as part of the unscoped token | 22:33 |
| *** marcoemorais has joined #openstack-keystone | 22:34 | |
| jamielennox | actually i think returning the default project id as part of an unscoed token solves for 1 as well | 22:34 |
| dolphm | joesavak: (3) is an argument for horizon's behavior, which can be preserved without default_project_id | 22:35 |
| *** dims has quit IRC | 22:35 | |
| morganfainberg | joesavak, and i would say that we could make the workflow an option in horizon (cookies, options?), also session tokens would solve *some* of the need for a scoped token off the bat for logging in | 22:35 |
| morganfainberg | dolphm, ++ | 22:35 |
| joesavak | need to review session tokens - spec? | 22:35 |
| dolphm | has session tokens been broken into 3 specs yet? | 22:36 |
| morganfainberg | joesavak, https://review.openstack.org/#/c/96648/ but it needs to be split up | 22:36 |
| morganfainberg | joesavak, i don't think it's been split into multiuple specs as discussed | 22:36 |
| joesavak | i think having "defaultProject" as an indicator on the scope when authenticating is a good idea... | 22:36 |
| joesavak | that allows a user to just call identity once for a scoped token, instead of having to look up projects | 22:36 |
| morganfainberg | joesavak, nothing saying horizon (or something else) couldn't convey that. | 22:37 |
| morganfainberg | but having it be magical because of the property set on the user, that is my big issue | 22:37 |
| morganfainberg | which is what the current implementation implies | 22:37 |
| morganfainberg | "oh no scope, do you have a default project? ok scope you to that" | 22:37 |
| jamielennox | morganfainberg: ++ trying to figure out a user flow and not knowing whether you are expecting a scoped or unscoped token is bad | 22:38 |
| morganfainberg | joesavak, but session tokens also says scoped_token rescoping shouldn't ever occur (it is a legitimate security concern) | 22:38 |
| openstackgerrit | Dolph Mathews proposed a change to openstack/keystone: implement GET /v3/catalog https://review.openstack.org/106893 | 22:40 |
| morganfainberg | dolphm, yay, catalog API! | 22:41 |
| morganfainberg | dolphm, that makes me really happy to see. | 22:41 |
| joesavak | the spec to me doesn't do a good job of describing their proposal... | 22:41 |
| morganfainberg | joesavak, it's because the spec is only partial, we mucked with it a lot at the hackathon, the earlier version is better | 22:41 |
| dolphm | joesavak: it's split into two reviews; see the dependent one | 22:41 |
| morganfainberg | dolphm, oh we have subsequent ones ? cool | 22:42 |
| joesavak | ok - will do. Gotta run and get kiddo now thoug | 22:42 |
| dolphm | morganfainberg: fixed all issues from henrynash & bknudson except henry also asked for a test with a domain-scoped token. i'd write that but i'm running out the door now :) | 22:42 |
| jamielennox | missed so much at the hackathon... | 22:42 |
| morganfainberg | dolphm, ++ | 22:42 |
| morganfainberg | dolphm, sounds good. | 22:42 |
| morganfainberg | jamielennox, you should have been there! | 22:42 |
| morganfainberg | jamielennox, :P | 22:42 |
| morganfainberg | jamielennox, it was magical. | 22:42 |
| jamielennox | yea, all alone in my hemisphere | 22:43 |
| *** thedodd has quit IRC | 22:43 | |
| *** gabriel-bezerra has quit IRC | 22:43 | |
| morganfainberg | next hackathon in brisbane? | 22:44 |
| morganfainberg | :P | 22:44 |
| jamielennox | this probably came up, but why session tokens as opposed to like a session auth? | 22:44 |
| jamielennox | morganfainberg: i can organize that | 22:44 |
| morganfainberg | (somehow Idon't think i can justify it) | 22:44 |
| *** gabriel-bezerra has joined #openstack-keystone | 22:44 | |
| morganfainberg | what would a session auth look like in keystone-world? | 22:44 |
| morganfainberg | would it look... an awful lot like a token? | 22:44 |
| jamielennox | so by session auth i mean you install a UUID or other random thing as a short lived 'password' | 22:44 |
| jamielennox | then you can get unscoped tokens based on that 'password' but you can't refresh tokens | 22:45 |
| morganfainberg | so, an awful lot like a token | 22:45 |
| jamielennox | every time you acess the 'password' it extends it's length | 22:45 |
| jamielennox | morganfainberg: very much | 22:45 |
| jamielennox | but it's not allowing rescoping of tokens | 22:45 |
| morganfainberg | we could also just use a token and (with persistent-less) not have to store them | 22:46 |
| morganfainberg | erm non-persistent tokens | 22:46 |
| morganfainberg | and it would be about as much work in the session object to support either | 22:46 |
| jamielennox | session doesn't care - it wouuld be a horizon thing | 22:46 |
| jamielennox | i don't know somehow doing that install a cookie seems better to me than changing how our tokens work | 22:47 |
| morganfainberg | wouldn't the python-libs also need suppoort of it? | 22:47 |
| *** joesavak has quit IRC | 22:47 | |
| jamielennox | it'd be a new operation, install password with expiry | 22:47 |
| morganfainberg | i mean, a truely unscoped token would be perfect for that. right? | 22:47 |
| jamielennox | then you do standard auth with auth-type that new password | 22:47 |
| morganfainberg | but it conveys some extra info so we don't need to 'store' data in keystone for it | 22:48 |
| jamielennox | morganfainberg: i'm not following completely, but it sounds like that means exchanging an unscoped token for a new, loner expiry unscoped token | 22:48 |
| jamielennox | s/loner/longer | 22:49 |
| morganfainberg | yes, that would be the only real difference, when you extend a session, you get a new "session" token | 22:49 |
| jamielennox | which we've explicitly disallowed until now | 22:49 |
| morganfainberg | not longer expiry, new token | 22:49 |
| *** morganfainberg has quit IRC | 22:50 | |
| jamielennox | morganfainberg: it doesn't matter, if you can exchange one token for another you can extend any session indefinetly | 22:50 |
| *** morganfainberg has joined #openstack-keystone | 22:50 | |
| *** dickson.freenode.net sets mode: +o morganfainberg | 22:50 | |
| *** navid has quit IRC | 22:50 | |
| *** morganfainberg has quit IRC | 22:50 | |
| *** navid has joined #openstack-keystone | 22:51 | |
| *** morganfainberg has joined #openstack-keystone | 22:51 | |
| jamielennox | any token indefinitely | 22:51 |
| *** gabriel-bezerra has quit IRC | 22:51 | |
| *** arun_kant has quit IRC | 22:51 | |
| *** ekarlso has quit IRC | 22:51 | |
| *** shufflebot has quit IRC | 22:51 | |
| *** raildo has quit IRC | 22:51 | |
| *** boris-42 has quit IRC | 22:51 | |
| *** morganfainberg has quit IRC | 22:51 | |
| *** morganfainberg has joined #openstack-keystone | 22:52 | |
| *** dvorak has quit IRC | 22:52 | |
| *** rharwood has quit IRC | 22:52 | |
| *** uvirtbot has quit IRC | 22:52 | |
| morganfainberg | wow, that was an awesome netsplit. | 22:53 |
| *** dvorak has joined #openstack-keystone | 22:53 | |
| *** rharwood has joined #openstack-keystone | 22:53 | |
| *** uvirtbot has joined #openstack-keystone | 22:53 | |
| jamielennox | but yes i see the concern, we go from having tokens stored in the database to these uuid 'passwords' stored in the database | 22:53 |
| *** gabriel-bezerra has joined #openstack-keystone | 22:53 | |
| *** arun_kant has joined #openstack-keystone | 22:53 | |
| *** boris-42 has joined #openstack-keystone | 22:53 | |
| *** ekarlso has joined #openstack-keystone | 22:53 | |
| *** shufflebot has joined #openstack-keystone | 22:53 | |
| *** raildo has joined #openstack-keystone | 22:53 | |
| morganfainberg | i need to fix my server list for freenode a bunch don't resolve anymore | 22:53 |
| *** afazekas has joined #openstack-keystone | 22:53 | |
| *** akscram has quit IRC | 22:54 | |
| *** gpocentek has quit IRC | 22:54 | |
| *** Mikalv has quit IRC | 22:54 | |
| jamielennox | morganfainberg: last i saw from you "not longer expiry, new token" | 22:54 |
| *** akscram has joined #openstack-keystone | 22:54 | |
| *** gpocentek has joined #openstack-keystone | 22:54 | |
| *** Mikalv has joined #openstack-keystone | 22:54 | |
| *** amcrn has quit IRC | 22:54 | |
| *** dolphm has quit IRC | 22:54 | |
| *** designated has quit IRC | 22:54 | |
| *** YorikSar has quit IRC | 22:54 | |
| *** zigo has quit IRC | 22:54 | |
| *** therve has quit IRC | 22:54 | |
| *** redrobot has quit IRC | 22:54 | |
| *** arunkant has quit IRC | 22:54 | |
| *** Ephur has quit IRC | 22:54 | |
| *** mgagne has quit IRC | 22:54 | |
| *** radez_g0n3 has quit IRC | 22:54 | |
| *** comstud has quit IRC | 22:54 | |
| morganfainberg | yeah that was the last thing i said | 22:54 |
| morganfainberg | then netsplit happened | 22:54 |
| morganfainberg | besides 'NETSPLIT!' | 22:54 |
| morganfainberg | :P | 22:54 |
| *** huats has quit IRC | 22:55 | |
| *** gothicmindfood has quit IRC | 22:55 | |
| *** jimbaker has quit IRC | 22:55 | |
| *** tristanC has quit IRC | 22:55 | |
| *** sudorandom has quit IRC | 22:55 | |
| *** baffle has quit IRC | 22:55 | |
| *** jamielennox has quit IRC | 22:55 | |
| *** jraim has quit IRC | 22:55 | |
| *** ciypro|afk has quit IRC | 22:55 | |
| *** amcrn has joined #openstack-keystone | 22:55 | |
| *** dolphm has joined #openstack-keystone | 22:55 | |
| *** YorikSar has joined #openstack-keystone | 22:55 | |
| *** designated has joined #openstack-keystone | 22:55 | |
| *** zigo has joined #openstack-keystone | 22:55 | |
| *** therve has joined #openstack-keystone | 22:55 | |
| *** redrobot has joined #openstack-keystone | 22:55 | |
| *** arunkant has joined #openstack-keystone | 22:55 | |
| *** Ephur has joined #openstack-keystone | 22:55 | |
| *** mgagne has joined #openstack-keystone | 22:55 | |
| *** radez_g0n3 has joined #openstack-keystone | 22:55 | |
| *** comstud has joined #openstack-keystone | 22:55 | |
| *** dickson.freenode.net sets mode: +o dolphm | 22:55 | |
| *** ChanServ sets mode: +o morganfainberg | 22:55 | |
| morganfainberg | jamielennox you back yet, looks like we just netsplit again. | 22:56 |
| *** gothicmindfood has joined #openstack-keystone | 22:56 | |
| *** huats has joined #openstack-keystone | 22:56 | |
| *** jimbaker has joined #openstack-keystone | 22:56 | |
| *** tristanC has joined #openstack-keystone | 22:56 | |
| *** sudorandom has joined #openstack-keystone | 22:56 | |
| *** baffle has joined #openstack-keystone | 22:56 | |
| *** jamielennox has joined #openstack-keystone | 22:56 | |
| *** jraim has joined #openstack-keystone | 22:56 | |
| *** ciypro|afk has joined #openstack-keystone | 22:56 | |
| morganfainberg | jamielennox, welcome back | 22:56 |
| morganfainberg | chmouel, any recommendations on stuff to do (non-touristy, you know good stuff) while in Paris for the summit? | 22:57 |
| *** lbragstad has quit IRC | 22:57 | |
| jamielennox | hmm, i'm going to work, this connection isn't coming back....... | 22:57 |
| morganfainberg | jamielennox, which connection? | 22:58 |
| jamielennox | netsplit | 22:58 |
| jamielennox | anyway, need to actually go to the office | 22:58 |
| jamielennox | back later | 22:58 |
| morganfainberg | jamielennox, ok | 22:59 |
| *** jamielennox is now known as jamielennox|away | 22:59 | |
| *** gabriel-bezerra has quit IRC | 22:59 | |
| *** gabriel-bezerra has joined #openstack-keystone | 23:02 | |
| *** marcoemorais has quit IRC | 23:13 | |
| *** afazekas has quit IRC | 23:18 | |
| *** gokrokve_ has quit IRC | 23:18 | |
| *** ayoung has joined #openstack-keystone | 23:23 | |
| *** arun_kant has quit IRC | 23:27 | |
| *** oomichi has joined #openstack-keystone | 23:42 | |
| *** bknudson has joined #openstack-keystone | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!