| *** cjellick has quit IRC | 00:01 | |
| openstackgerrit | A change was merged to openstack/keystonemiddleware: Update oslo-incubator and switch to oslo.{utils,serialization} https://review.openstack.org/124979 | 00:05 |
|---|---|---|
| *** gyee has quit IRC | 00:05 | |
| *** gokrokve has quit IRC | 00:19 | |
| *** marcoemorais has quit IRC | 00:21 | |
| openstackgerrit | Nathan Kinder proposed a change to openstack/identity-api: Correct response status for HEAD requests https://review.openstack.org/124243 | 00:35 |
| *** wwriverrat1 has joined #openstack-keystone | 00:39 | |
| *** jorge_munoz has quit IRC | 00:52 | |
| *** gokrokve has joined #openstack-keystone | 00:59 | |
| *** HenryG_ has joined #openstack-keystone | 01:00 | |
| *** dimsum_ has quit IRC | 01:02 | |
| *** dimsum_ has joined #openstack-keystone | 01:03 | |
| *** HenryG has quit IRC | 01:03 | |
| *** DavidHu__ has joined #openstack-keystone | 01:05 | |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone-specs: Remove deprecated items from the Kilo release https://review.openstack.org/123122 | 01:07 |
| *** dimsum_ has quit IRC | 01:07 | |
| *** DavidHu_ has quit IRC | 01:08 | |
| *** wwriverrat1 has left #openstack-keystone | 01:08 | |
| *** r1chardj0n3s is now known as r1chardj0n3s_afk | 01:10 | |
| *** NM has quit IRC | 01:12 | |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone-specs: Remove deprecated items from the Kilo release https://review.openstack.org/123122 | 01:17 |
| *** dimsum_ has joined #openstack-keystone | 01:18 | |
| *** NM has joined #openstack-keystone | 01:30 | |
| *** ayoung-dad-mode is now known as ayoung | 01:30 | |
| openstackgerrit | A change was merged to openstack/keystone: Fixes an error deleting an endpoint group project https://review.openstack.org/126050 | 01:31 |
| ayoung | nkinder, you have the system with the python-kc-kerberos rpm installed still? | 01:31 |
| *** gokrokve_ has joined #openstack-keystone | 01:37 | |
| *** gokrokve has quit IRC | 01:38 | |
| *** NM has quit IRC | 01:45 | |
| *** jorge_munoz has joined #openstack-keystone | 01:48 | |
| *** jorge_munoz has left #openstack-keystone | 01:48 | |
| nkinder | ayoung: yeah | 01:52 |
| ayoung | nkinder, ok, there is an env var you can set. I'd be interested to see if it affects the PBR issue | 01:53 |
| nkinder | ayoung: sure, I'll give it a shot | 01:53 |
| ayoung | nkinder, from the rpm | 01:53 |
| ayoung | PBR_VERSION=%{version}.%{milestone} | 01:53 |
| ayoung | not sure what I had in there... | 01:54 |
| ayoung | Version: 0.0.1 | 01:54 |
| nkinder | ayoung: is that the version of py-kc-kerb? | 01:54 |
| ayoung | yeah | 01:54 |
| ayoung | nkinder, that was from the KC rpm spec | 01:54 |
| ayoung | this source is just %{name}/%{name}-%{version}. | 01:55 |
| ayoung | so milestone is probably blank | 01:55 |
| nkinder | ayoung: export PBR_VERSION=0.0.1 gets me further. It's complaining that I dont have requests_kerberos now | 01:56 |
| ayoung | did I leave that out? Really... | 01:56 |
| ayoung | yep | 01:56 |
| nkinder | ayoung: yep, add python-requests-kerberos to the requires | 01:57 |
| ayoung | wilco | 01:57 |
| ayoung | I'm more concerned about the PBR thing | 01:57 |
| ayoung | I know that debian uses the PBR_VERSION approach in packaging, but it should not be required at run time | 01:57 |
| nkinder | ayoung: http://paste.openstack.org/show/118322/ | 01:59 |
| ayoung | what about it? | 02:00 |
| nkinder | request_kwargs is None, but it tries to perform assignment | 02:00 |
| ayoung | is this using the CLI? | 02:00 |
| nkinder | shouldn't it default to an empty dict? | 02:00 |
| nkinder | ayoung: this is using one of your scripts in fedorapeople | 02:00 |
| ayoung | nkinder, I suspec the None is wrong, and that if that value is not passed in, something else went wrong | 02:01 |
| nkinder | ayoung: sure, but that code is still wrong | 02:01 |
| nkinder | ayoung: if defaults to None and then tries to assign a value to a key | 02:01 |
| ayoung | but I think it might be required in order to have the follow on kwargs param | 02:01 |
| ayoung | yeah, agreed | 02:02 |
| nkinder | I get an authoriztion failure if I make that default to an empty dict | 02:02 |
| ayoung | you never need to default to None nayway | 02:02 |
| ayoung | anyway | 02:02 |
| nkinder | ayoung: I added that to the review | 02:04 |
| ayoung | did the code blow up when you ran it? | 02:05 |
| *** Tahmina has quit IRC | 02:05 | |
| nkinder | yeah, the Session code says I'm attempting to use an unsupported method | 02:05 |
| nkinder | and then returns a 401 | 02:05 |
| nkinder | ayoung: I'm just trying to run this - https://admiyo.fedorapeople.org/openstack/python-keystoneclient-kerberos/kerberos_auth.py | 02:06 |
| ayoung | unsupported... | 02:06 |
| ayoung | nkinder, that is your server | 02:07 |
| ayoung | you need to add kerberos to the set of supported methods in keystone.conf | 02:07 |
| *** alexiz has joined #openstack-keystone | 02:07 | |
| nkinder | ayoung: I wasn't using my kerberized auth url :P | 02:07 |
| ayoung | its not on by default | 02:07 |
| ayoung | its a global value | 02:08 |
| nkinder | ayoung: ok, how do I add that to the supported methods? | 02:08 |
| *** alexiz is now known as shakamunyi | 02:08 | |
| ayoung | [auth] | 02:08 |
| nkinder | ayoung: what's the method name to add there? | 02:08 |
| ayoung | methods=external,password,token | 02:08 |
| ayoung | becomes | 02:09 |
| ayoung | methods=kerberos,password,token | 02:09 |
| ayoung | and kerberos is mapped to | 02:09 |
| ayoung | kerberos=keystone.auth.plugins.external.KerberosDefaultDomain | 02:09 |
| ayoung | that one only works if the kerberos domain is the default domain, of course | 02:10 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/auth/plugins/external.py#n100 is what I think we want to target | 02:11 |
| nkinder | ayoung: what do you mean by "default domain"? The domain returned by the system? | 02:11 |
| ayoung | nkinder, there is one domain defined as default by the keystone.conf file | 02:11 |
| nkinder | ah, the keystone domain | 02:11 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/config.py#n145 | 02:12 |
| *** dimsum_ has quit IRC | 02:12 | |
| nkinder | ok, so I get this now - requests.exceptions.InvalidSchema: No connection adapters were found for '=http://192.168.128.102:5000/krb/v3/auth/tokens' | 02:12 |
| ayoung | never saw that one before | 02:12 |
| *** dimsum_ has joined #openstack-keystone | 02:12 | |
| ayoung | = | 02:13 |
| ayoung | you have a typo | 02:13 |
| ayoung | '=http | 02:13 |
| ayoung | http://stackoverflow.com/questions/15115328/python-requests-no-connection-adapters | 02:13 |
| nkinder | ignore that one.. | 02:13 |
| nkinder | just found the same thing... :) | 02:13 |
| ayoung | nkinder, btw, its still a WIP, but I have what I think the DOA code is going to look like...once we get your Kerberos test running, I'd like to walk you through it | 02:14 |
| nkinder | ok, so back to a 401, but I don't have a user that maps to my principal yet | 02:14 |
| ayoung | https://review.openstack.org/#/c/121281/ | 02:14 |
| nkinder | ayoung: am I supposed to have a user in keystone whose name exactly matches the principal? | 02:14 |
| ayoung | are you backing the domain with LDAP? | 02:14 |
| nkinder | no | 02:15 |
| ayoung | for IPA I alwyas back with LDAP | 02:15 |
| remote_morgan_ | ayoung: nkinder there might be some oddities on kerb thing until we get a release. | 02:15 |
| nkinder | I usually do too, but I tacked this onto a federation set up | 02:15 |
| remote_morgan_ | not sure how odd PBR gets w/o an initial release | 02:15 |
| ayoung | ah...lets do it as a non default domain | 02:15 |
| nkinder | ayoung: ok, I'll add a domain | 02:15 |
| ayoung | you can try out the multi backend code, too. | 02:15 |
| nkinder | ayoung: yeah, I've used it before | 02:16 |
| ayoung | cool | 02:16 |
| ayoung | feels like things are starting to gell...this has been a slog | 02:16 |
| *** dimsum_ has quit IRC | 02:17 | |
| *** shakamunyi has quit IRC | 02:21 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 02:21 | |
| *** gokrokve_ has quit IRC | 02:23 | |
| remote_morgan_ | nkinder: ayoung - Have some additional support/use-cases (potentially) to support SSSD in keystone. will know more next week. | 02:28 |
| ayoung | remote_morgan_, cool. | 02:28 |
| ayoung | ah...missed the views code in DOA... | 02:29 |
| remote_morgan_ | the more i think about it the more i like it... provided we can make it as good/better than the read-only version of LDAP we have. | 02:29 |
| ayoung | remote_morgan_, I suspect that there will still be some nitnoid details to iron out. | 02:30 |
| ayoung | But the SSSD folks are pretty responsive | 02:30 |
| remote_morgan_ | of course | 02:30 |
| nkinder | remote_morgan_: yeah, I'm curious to hear about them | 02:30 |
| nkinder | ayoung: my system is hosed up. python-openstackclient stopped working with cliff errors all of a sudden | 02:31 |
| remote_morgan_ | nkinder: oh, thoughts are drinks one evening next week, a couple of us and also planning on bugging thingee (new cinder PTL) | 02:31 |
| nkinder | remote_morgan_: sounds good | 02:31 |
| ayoung | thingee made PTL? | 02:31 |
| ayoung | Awesome | 02:32 |
| nkinder | ayoung: yeah | 02:32 |
| remote_morgan_ | ayoung: yep! | 02:32 |
| ayoung | nkinder, he's got more metal than you | 02:32 |
| nkinder | haha | 02:32 |
| remote_morgan_ | ayoung: and SpamapS is PTL of tripleo | 02:32 |
| nkinder | I keep it more hidden... :) | 02:32 |
| ayoung | https://avatars0.githubusercontent.com/u/47583?v=2&s=460 | 02:32 |
| ayoung | TMI | 02:33 |
| remote_morgan_ | hah | 02:34 |
| nkinder | ok, my environment needs to be rebuilt, which means I'm done for the night on kerberos | 02:35 |
| *** dvorak_ has joined #openstack-keystone | 02:44 | |
| *** tristanC_ has joined #openstack-keystone | 02:45 | |
| *** portante_ has joined #openstack-keystone | 02:47 | |
| *** mfisch` is now known as mfisch | 02:50 | |
| *** mfisch is now known as Guest84187 | 02:50 | |
| *** dhellmann_ has joined #openstack-keystone | 02:51 | |
| *** dhellmann has quit IRC | 02:56 | |
| *** bjornar has quit IRC | 02:56 | |
| *** portante has quit IRC | 02:56 | |
| *** dvorak has quit IRC | 02:56 | |
| *** tristanC has quit IRC | 02:56 | |
| *** ekarlso has quit IRC | 02:56 | |
| *** dhellmann_ is now known as dhellmann | 02:56 | |
| *** dvorak_ is now known as dvorak | 02:56 | |
| *** bjornar has joined #openstack-keystone | 02:56 | |
| *** ekarlso has joined #openstack-keystone | 02:58 | |
| *** diegows has quit IRC | 03:01 | |
| stevemar | nkinder, i think that happens cause of some funky requirements stuff | 03:04 |
| nkinder | stevemar: the cliff errors? | 03:04 |
| stevemar | nkinder, yeah | 03:04 |
| stevemar | nkinder, i normally just rebuild, like you mentioned | 03:05 |
| nkinder | stevemar: yeah, some other python module must have gotten installed. It was working, but I don't know what it was that broke it. | 03:05 |
| nkinder | easier to rebuild since I have all of this scripted :) | 03:05 |
| stevemar | nkinder, but i should probably figure out whats actually going on, it's got something to do with the requirements levels i think | 03:05 |
| stevemar | scipt is handy :) | 03:05 |
| *** tristanC_ is now known as tristanC | 03:33 | |
| *** praneshp has quit IRC | 03:47 | |
| ayoung | nkinder, I'm close on the session for DOA stuff, but no Cigar yet. The unit tests are running at (errors=64) out of 104. Most are due to the client setup code not being called, which is usually some other error in Django masking it. Anyway, I was hoping to put it to bed this week, but it will still be waitin monday. | 03:50 |
| ayoung | https://review.openstack.org/#/c/121281/ | 03:50 |
| *** ayoung is now known as ayoung-ZzzZzzZzz | 03:54 | |
| *** lcheng has quit IRC | 04:01 | |
| *** lcheng has joined #openstack-keystone | 04:01 | |
| *** lcheng_ has joined #openstack-keystone | 04:03 | |
| *** lcheng has quit IRC | 04:03 | |
| *** lcheng_ has quit IRC | 04:06 | |
| *** lcheng has joined #openstack-keystone | 04:07 | |
| *** lcheng has quit IRC | 04:12 | |
| *** lcheng has joined #openstack-keystone | 04:24 | |
| *** lcheng has quit IRC | 04:27 | |
| *** lcheng has joined #openstack-keystone | 04:27 | |
| openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Use importutils from oslo.utils https://review.openstack.org/126115 | 04:55 |
| *** praneshp has joined #openstack-keystone | 04:59 | |
| *** praneshp_ has joined #openstack-keystone | 05:02 | |
| *** dimsum_ has joined #openstack-keystone | 05:03 | |
| *** praneshp has quit IRC | 05:05 | |
| *** praneshp_ is now known as praneshp | 05:05 | |
| *** junhongl has quit IRC | 05:08 | |
| *** dimsum_ has quit IRC | 05:08 | |
| *** harlowja is now known as harlowja_away | 05:27 | |
| openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Use jsonutils from oslo.serialization https://review.openstack.org/126116 | 05:34 |
| *** alex_xu has quit IRC | 05:34 | |
| *** gokrokve has joined #openstack-keystone | 05:35 | |
| openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Use importutils from oslo.utils https://review.openstack.org/126115 | 05:36 |
| *** henrynash has joined #openstack-keystone | 05:42 | |
| openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/keystone: Imported Translations from Transifex https://review.openstack.org/124950 | 06:05 |
| *** henrynash has quit IRC | 06:05 | |
| *** gokrokve has quit IRC | 06:12 | |
| stevemar | bump | 06:13 |
| *** 7F1ABGO3C has joined #openstack-keystone | 06:29 | |
| openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Replace an instance of keystone/openstack/common/timeutils https://review.openstack.org/126125 | 06:34 |
| openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Use jsonutils from oslo.serialization https://review.openstack.org/126116 | 06:40 |
| openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Use importutils from oslo.utils https://review.openstack.org/126115 | 06:40 |
| openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Replace an instance of keystone/openstack/common/timeutils https://review.openstack.org/126125 | 06:40 |
| *** X019 has joined #openstack-keystone | 06:42 | |
| *** X019 has left #openstack-keystone | 06:48 | |
| *** dimsum_ has joined #openstack-keystone | 06:53 | |
| *** dimsum_ has quit IRC | 06:57 | |
| *** lcheng_ has joined #openstack-keystone | 07:03 | |
| *** lcheng_ has quit IRC | 07:07 | |
| *** lcheng has quit IRC | 07:07 | |
| *** lcheng has joined #openstack-keystone | 07:08 | |
| *** lcheng has quit IRC | 07:12 | |
| *** Dafna has joined #openstack-keystone | 07:36 | |
| *** stevemar has quit IRC | 07:40 | |
| *** junhongl has joined #openstack-keystone | 07:50 | |
| *** ekarlso has quit IRC | 07:59 | |
| *** ekarlso has joined #openstack-keystone | 07:59 | |
| *** praneshp_ has joined #openstack-keystone | 08:06 | |
| *** praneshp has quit IRC | 08:08 | |
| *** praneshp_ is now known as praneshp | 08:08 | |
| openstackgerrit | A change was merged to openstack/keystonemiddleware: Clean up the middleware docs https://review.openstack.org/125706 | 08:21 |
| openstackgerrit | A change was merged to openstack/keystone: Remove images directory from docs https://review.openstack.org/125702 | 08:30 |
| *** praneshp has quit IRC | 08:33 | |
| *** andreaf has quit IRC | 08:37 | |
| *** dimsum_ has joined #openstack-keystone | 08:42 | |
| *** dimsum_ has quit IRC | 08:47 | |
| *** andreaf has joined #openstack-keystone | 08:53 | |
| *** andreaf has quit IRC | 10:51 | |
| *** andreaf has joined #openstack-keystone | 10:52 | |
| *** andreaf has quit IRC | 11:05 | |
| *** andreaf has joined #openstack-keystone | 11:05 | |
| *** dimsum_ has joined #openstack-keystone | 11:48 | |
| *** dimsum_ has quit IRC | 11:53 | |
| *** andreaf has quit IRC | 12:14 | |
| *** andreaf has joined #openstack-keystone | 12:14 | |
| *** dimsum_ has joined #openstack-keystone | 12:21 | |
| *** 7F1ABGO3C has quit IRC | 12:35 | |
| *** Kui has quit IRC | 13:03 | |
| *** NM has joined #openstack-keystone | 13:05 | |
| *** NM has left #openstack-keystone | 13:11 | |
| *** andreaf has quit IRC | 13:43 | |
| *** andreaf has joined #openstack-keystone | 13:44 | |
| *** andreaf has quit IRC | 13:46 | |
| *** andreaf has joined #openstack-keystone | 13:47 | |
| *** andreaf has quit IRC | 14:03 | |
| *** andreaf has joined #openstack-keystone | 14:04 | |
| *** dimsum_ has quit IRC | 14:07 | |
| *** dimsum_ has joined #openstack-keystone | 14:07 | |
| *** dimsum_ has quit IRC | 14:11 | |
| *** richm has joined #openstack-keystone | 14:35 | |
| *** andreaf has quit IRC | 14:57 | |
| *** andreaf has joined #openstack-keystone | 14:58 | |
| *** dimsum_ has joined #openstack-keystone | 15:13 | |
| *** thedodd has joined #openstack-keystone | 16:17 | |
| *** HenryG_ is now known as HenryG | 16:18 | |
| *** r-daneel has joined #openstack-keystone | 16:21 | |
| *** dimsum_ has quit IRC | 16:24 | |
| *** gokrokve has joined #openstack-keystone | 16:34 | |
| *** andreaf has quit IRC | 16:43 | |
| *** andreaf has joined #openstack-keystone | 16:43 | |
| *** thedodd has quit IRC | 17:00 | |
| *** r-daneel has quit IRC | 17:07 | |
| *** gokrokve has quit IRC | 17:12 | |
| *** thedodd has joined #openstack-keystone | 17:12 | |
| *** gokrokve has joined #openstack-keystone | 17:13 | |
| *** gokrokve has quit IRC | 17:21 | |
| *** gokrokve has joined #openstack-keystone | 17:22 | |
| *** gokrokve has quit IRC | 17:26 | |
| *** thedodd has quit IRC | 17:31 | |
| *** stevemar has joined #openstack-keystone | 17:49 | |
| openstackgerrit | Rodrigo Duarte proposed a change to openstack/python-keystoneclient: Explicit complaint about old OpenSSL when testing https://review.openstack.org/123619 | 17:51 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:15 | |
| *** praneshp has joined #openstack-keystone | 18:44 | |
| *** richm has quit IRC | 18:45 | |
| *** andreaf has quit IRC | 18:56 | |
| *** andreaf has joined #openstack-keystone | 18:57 | |
| *** charz has quit IRC | 19:02 | |
| *** charz has joined #openstack-keystone | 19:05 | |
| *** david-lyle has joined #openstack-keystone | 19:09 | |
| *** david-lyle has quit IRC | 19:11 | |
| *** rm_work has quit IRC | 19:17 | |
| *** praneshp has quit IRC | 19:17 | |
| *** praneshp has joined #openstack-keystone | 19:20 | |
| *** andreaf has quit IRC | 19:46 | |
| *** andreaf has joined #openstack-keystone | 19:46 | |
| *** rm_work|away has joined #openstack-keystone | 19:50 | |
| *** rm_work|away is now known as rm_work | 19:51 | |
| *** rm_work has quit IRC | 19:51 | |
| *** rm_work has joined #openstack-keystone | 19:51 | |
| *** Kui has joined #openstack-keystone | 20:08 | |
| *** stevemar has quit IRC | 20:12 | |
| *** praneshp has quit IRC | 20:31 | |
| *** praneshp has joined #openstack-keystone | 20:31 | |
| *** praneshp has quit IRC | 20:33 | |
| *** diegows has joined #openstack-keystone | 20:40 | |
| *** dimsum_ has joined #openstack-keystone | 20:45 | |
| *** dimsum_ has quit IRC | 20:51 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:19 | |
| *** gokrokve has joined #openstack-keystone | 21:27 | |
| *** gokrokve has quit IRC | 21:32 | |
| *** lcheng has joined #openstack-keystone | 21:33 | |
| *** lcheng has quit IRC | 21:36 | |
| *** gokrokve has joined #openstack-keystone | 21:48 | |
| *** dimsum_ has joined #openstack-keystone | 22:02 | |
| *** rkofman has quit IRC | 22:07 | |
| *** dimsum_ has quit IRC | 22:07 | |
| *** rkofman has joined #openstack-keystone | 22:07 | |
| *** stevemar has joined #openstack-keystone | 22:15 | |
| *** andreaf has quit IRC | 22:21 | |
| *** andreaf has joined #openstack-keystone | 22:23 | |
| *** praneshp has joined #openstack-keystone | 22:24 | |
| *** andreaf has quit IRC | 22:34 | |
| *** gokrokve has quit IRC | 22:35 | |
| *** gokrokve_ has joined #openstack-keystone | 22:35 | |
| *** stevemar has quit IRC | 22:48 | |
| *** alex_xu has joined #openstack-keystone | 22:56 | |
| *** gokrokve has joined #openstack-keystone | 23:31 | |
| *** gokrokve has quit IRC | 23:32 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 23:33 | |
| *** gokrokve_ has quit IRC | 23:34 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 23:35 | |
| *** gokrokve has joined #openstack-keystone | 23:36 | |
| *** gokrokve has quit IRC | 23:40 | |
| *** PsionTheory has joined #openstack-keystone | 23:41 | |
| *** dimsum_ has joined #openstack-keystone | 23:51 | |
| *** dimsum_ has quit IRC | 23:55 | |
| *** dimsum_ has joined #openstack-keystone | 23:56 | |
| *** PsionTheory has quit IRC | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!