Saturday, 2014-12-13

morganfainbergi think i need to generate a few million tokens in a keystone instance00:14
morganfainberganyone have an abusive *cough* script handy to do it?00:14
*** shakamunyi has quit IRC00:15
*** nellysmitt has joined #openstack-keystone00:17
*** thedodd has quit IRC00:21
*** nellysmitt has quit IRC00:21
*** dims_ has joined #openstack-keystone00:30
*** henrynash has quit IRC00:38
*** david-lyle is now known as david-lyle_afk00:51
*** jbonjean has joined #openstack-keystone00:58
jbonjeanHi ! Could anybody explain to me why keystone generates a new token when asked, even if there is already one valid in the database?01:04
morganfainbergjbonjean, a few reasons: 1) maybe you this token is being generated for a different task01:06
morganfainbergjbonjean, 2) if the token is used for varying tasks and is revoked after one of the tasks, the second or third tasks could fail01:06
morganfainbergjbonjean, 3) because it is less expensive to issue a token than search (potentially) millions of rows for a token that matches all the criteria (in the case of SQL), or every-single-token for a user (memcached) etc01:07
jbonjeanmorganfainberg: ok, but in which case do you revoke only one token of a specific user?01:09
morganfainbergjbonjean, you can revoke *all* tokens for a user, or an individual token, or all tokens associalted to a project, etc01:10
morganfainbergjbonjean, change the password on the user, tokens are revoked01:10
morganfainbergjbonjean, issue a DELETE for a specific token, that token is revoked01:10
morganfainbergjbonjean, there are a lot of cases we do token revocation. and horizon does explicit token revokes in many cases too01:10
*** marcoemorais has quit IRC01:12
*** marcoemorais has joined #openstack-keystone01:13
*** chrisshattuck has quit IRC01:15
gabriel-bezerradstanek: you should add the MetadataProvider entry in your shibboleth2.xml. See
jbonjeanmorganfainberg: hum ok, makes senses01:20
jbonjeanmorganfainberg: so no easy solution for the database that keeps growing :)01:21
morganfainbergjbonjean, i'm actually working on that right now.01:21
jbonjeanjbonjean: except flushing from time to time01:21
morganfainbergjbonjean, you can use keystone-manage token-flush01:21
morganfainbergbut i'm working on a better implementation01:21
jbonjeanmorganfainberg: that's good to know, because for me memcached is not exactly a good replacement01:22
*** gyee has quit IRC01:23
jbonjeanmorganfainberg: thank you for all that useful information!01:24
morganfainbergof course01:24
morganfainbergyou can also use redis (with a modern enough keystone) with a minor tweak to the kvs/memcached backends [sorry for it not being easier yet]01:25
jbonjeanicehouse is modern enough ?01:26
*** marcoemorais has quit IRC01:28
*** marcoemorais has joined #openstack-keystone01:28
jbonjeanmorganfainberg: would it be possible with icehouse?01:29
morganfainbergjbonjean, i'm going to make a case to backport it.01:31
morganfainbergjbonjean, but no guarantees the stable team will be amenable to that01:31
* morganfainberg realizes it's time to do some more stable reviews.01:31
jbonjeanmorganfainberg: ok thanks01:32
*** henrynash has joined #openstack-keystone01:37
*** ChanServ sets mode: +v henrynash01:37
*** shakamunyi has joined #openstack-keystone01:39
*** dims_ has quit IRC01:43
*** zzzeek has quit IRC01:43
*** dimsum__ has joined #openstack-keystone01:43
morganfainbergjbonjean, oh for redis? yes icehouse *should* be modern enough01:43
*** shakamunyi has quit IRC01:44
*** dimsum__ has quit IRC01:48
*** dimsum__ has joined #openstack-keystone01:48
morganfainberghenrynash, nice counter argument to my points / concerns01:49
morganfainberghenrynash, on the split01:49
morganfainberghenrynash, i'm going to leave it stand there like that and let others comment - i don't see my position changing atm. but i'd like other inputs (as stated earlier)01:50
morganfainberghenrynash thanks for taking the time on that01:50
*** marcoemorais has quit IRC01:51
*** marcoemorais has joined #openstack-keystone01:51
henrynashmorganfainberg: no problem…yes…I just think it is a different viewpoint we have…01:58
morganfainberghenrynash, thats why i didn't want to block the review and leave it open for other comments01:58
henrynashmorganfainberg: btw, I think is probably ready to go01:59
morganfainberghenrynash, i'm fine with it going in depending on the way the consensus goes within the core team.01:59
morganfainberghenrynash, looking at things now actually01:59
morganfainberghenrynash, i think that one is on my "to do next" list01:59
morganfainberglbragstad, i just -1'd an XML thing - with an upgrade-path concern01:59
morganfainberglbragstad, but otherwise it was good.02:00
morganfainbergyep that was next02:00
morganfainbergwhy wasn't that one +A already?02:00
morganfainbergcause i had a comment on testing02:00
henrynashi think on the skiptests…which truned out to be not needed anyway02:01
morganfainberghenrynash, +A02:02
morganfainbergright that's why i'm pushing people to get rid of those02:02
morganfainbergi hate having them around.02:02
henrynashmorganfainberg: cool…I’ve held of from doing another rebase of the split patch until that one was done (since the rebase is a real bugger)02:02
morganfainberghenrynash, absolutely02:02
morganfainberghenrynash, and i don't blame ya02:03
henrynash(that’s a technical description, of course)02:03
morganfainbergso the FK name one i'm disappointed the test isn't in that patchset02:03
morganfainbergbut i understand why.02:04
henrynashmorganfainberg: so it’s pretty hard to do the test, I think…since you can’t do it with sqlite02:04
morganfainbergi know02:04
morganfainbergthats why i'm not srprised it isn't there02:04
morganfainbergSQLite kinda sucks02:04
morganfainbergand i want it to die02:04
morganfainbergdie a horrible nasty death02:05
henrynashagreed….I’d hate to count the times we’ve slipped in sql errors becasue the testing is done on  sqlite only02:05
morganfainberghenrynash, we'll get there soon02:05
morganfainbergdstanek is working hard on that stuff02:05
henrynashyep, saw that02:05
morganfainberghenrynash, also if you missed my email to the ML, any open patches that are lingering for 60 days and have a negative score02:05
morganfainbergi'm going to reap out of gerrit02:06
henrynashyep, saw that02:06
morganfainberghenrynash, cool. ayoung was worried about his being abandoned i think none of his fit the category :P02:06
morganfainberghenrynash, when i looked at them.02:06
henrynashany of mine?02:06
morganfainbergi think it's mostly dstanek02:06
morganfainbergof the core reviewers02:07
morganfainbergi'll publish a list of any that were to that same topic on the ML when i do it on monday02:07
*** erkules_ has joined #openstack-keystone02:10
morganfainberghenrynash, ugh, i think i need a different "on the go" computer.02:11
henrynashwhat ya got?02:11
morganfainberghenrynash, the 15" MBP is not as friendly ... just debating if a 13" air or 13" MBP would be better02:11
morganfainberghenrynash, i have a retina 15" mbp02:11
henrynashah, right same as me…02:12
*** erkules has quit IRC02:12
henrynashI want an air with 16Gb and a nice screen!02:12
morganfainbergyeah right?!02:12
morganfainbergi think the 13" MBP retina is close02:12
morganfainbergit's .5 lbs more02:13
morganfainbergand 0.71mm thick vs. 0.21 to 0.68 (the wedge shape)02:13
henrynashyeah…pretty good02:14
henrynashnow that they dropped the DVD….it is close02:14
henrynashok..I gotta hitthe sack….it’s only 2:15 am here….:-)02:15
*** henrynash has quit IRC02:15
*** nellysmitt has joined #openstack-keystone02:18
*** marcoemorais has quit IRC02:20
*** nellysmitt has quit IRC02:22
*** kobtea has joined #openstack-keystone02:25
*** kobtea has quit IRC02:30
*** stevemar has quit IRC02:58
*** diegows has quit IRC03:02
*** lhcheng has quit IRC03:05
*** lhcheng has joined #openstack-keystone03:05
*** lhcheng has quit IRC03:10
openstackgerritMerged openstack/keystone: Inherited role assignments to projects
*** richm has quit IRC03:15
*** boris-42 has quit IRC03:53
*** dimsum__ has quit IRC03:59
*** dimsum__ has joined #openstack-keystone04:00
*** thedodd has joined #openstack-keystone04:00
*** thedodd has quit IRC04:01
*** ayoung_ has joined #openstack-keystone04:03
*** dimsum__ has quit IRC04:04
*** nellysmitt has joined #openstack-keystone04:18
*** rushiagr is now known as rushiagr_away04:22
*** nellysmitt has quit IRC04:23
*** lhcheng has joined #openstack-keystone04:31
*** harlowja is now known as harlowja_away04:34
*** jimbaker has quit IRC05:22
*** marcoemorais has joined #openstack-keystone05:24
*** marcoemorais1 has joined #openstack-keystone05:26
*** erkules_ is now known as erkules05:27
*** marcoemorais has quit IRC05:29
*** rdo_ has quit IRC05:41
*** rdo has joined #openstack-keystone05:43
*** lhcheng has quit IRC06:03
*** lhcheng has joined #openstack-keystone06:04
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex
*** nellysmitt has joined #openstack-keystone06:19
*** nellysmitt has quit IRC06:23
*** kobtea has joined #openstack-keystone06:28
*** nellysmitt has joined #openstack-keystone06:32
*** kobtea has quit IRC06:33
*** rushiagr_away is now known as rushiagr07:11
morganfainbergdolphm: I had the convo with you about headphone on the mbp right? /me tries to remember07:20
*** jacer_huawei has quit IRC07:28
*** rushiagr is now known as rushiagr_away07:28
*** nellysmitt has quit IRC07:32
*** jacer_huawei has joined #openstack-keystone07:44
*** rushiagr_away is now known as rushiagr07:47
*** nellysmitt has joined #openstack-keystone08:02
*** dimsum__ has joined #openstack-keystone08:03
*** dimsum__ has quit IRC08:08
*** lhcheng has quit IRC08:16
*** lhcheng has joined #openstack-keystone08:16
*** lhcheng has quit IRC08:20
*** kobtea has joined #openstack-keystone08:30
*** kobtea has quit IRC08:35
*** zz_avozza is now known as avozza09:09
*** tellesnobrega has quit IRC09:24
*** marcoemorais1 has quit IRC09:34
*** tellesnobrega has joined #openstack-keystone09:37
*** nellysmitt has quit IRC10:14
*** kobtea has joined #openstack-keystone10:31
*** kobtea has quit IRC10:36
*** lhcheng has joined #openstack-keystone11:06
*** lhcheng has quit IRC11:10
*** nellysmitt has joined #openstack-keystone11:12
*** Qlawy has quit IRC11:23
*** Qlawy has joined #openstack-keystone11:23
*** Qlawy has quit IRC11:28
*** Qlawy has joined #openstack-keystone11:34
*** avozza is now known as zz_avozza11:46
*** boris-42 has joined #openstack-keystone11:50
*** dimsum__ has joined #openstack-keystone12:06
*** dimsum__ has quit IRC12:10
*** jimbaker has joined #openstack-keystone12:33
*** jimbaker has quit IRC12:33
*** jimbaker has joined #openstack-keystone12:33
*** zz_avozza is now known as avozza12:36
*** nellysmitt has quit IRC12:43
openstackgerritAjaya Agrawal proposed openstack/keystone: Implemented caching in identity layer.
*** ajayaa has joined #openstack-keystone12:59
*** jasondotstar has joined #openstack-keystone13:11
*** avozza is now known as zz_avozza13:35
rodrigodsayoung, was afk mostly of the day yesterday. just saw your comment about the target member behavior14:02
*** boris-42 has quit IRC14:03
*** mitz- has quit IRC14:11
*** zz_avozza is now known as avozza14:26
*** nellysmitt has joined #openstack-keystone14:29
*** avozza is now known as zz_avozza14:36
*** lhcheng has joined #openstack-keystone14:43
*** lhcheng has quit IRC14:48
*** dimsum__ has joined #openstack-keystone15:08
*** dimsum__ has quit IRC15:13
*** zz_avozza is now known as avozza15:27
*** nellysmitt has quit IRC15:38
*** ChanServ has quit IRC15:55
*** diegows has joined #openstack-keystone16:01
lbragstadmorganfainberg: so you want me to add in the Xml serializer as a stub?16:07
lbragstadmorganfainberg: the XmlSerializer and XmlDeserializer?16:08
lbragstadthese guys?
*** ChanServ has joined #openstack-keystone16:24
*** sets mode: +o ChanServ16:24
openstackgerritLance Bragstad proposed openstack/keystone: Remove XML support
openstackgerritLance Bragstad proposed openstack/keystone: Add positive test case for content types
*** boris-42 has joined #openstack-keystone16:42
*** jasondotstar has quit IRC17:01
*** jasondotstar has joined #openstack-keystone17:02
*** marcoemorais has joined #openstack-keystone17:03
*** marcoemorais has quit IRC17:04
*** dimsum__ has joined #openstack-keystone17:17
*** rm_work is now known as rm_work|away17:26
*** nellysmitt has joined #openstack-keystone17:39
*** nellysmitt has quit IRC17:44
*** fifieldt_ has quit IRC17:44
openstackgerritAjaya Agrawal proposed openstack/keystone: Validation of user parameter
*** fifieldt_ has joined #openstack-keystone17:44
*** shakamunyi has joined #openstack-keystone17:51
*** avozza is now known as zz_avozza17:55
*** jacer_huawei has quit IRC17:59
*** jacer_huawei has joined #openstack-keystone17:59
*** dimsum__ has quit IRC18:04
*** dimsum__ has joined #openstack-keystone18:05
*** dimsum__ has quit IRC18:09
*** dimsum__ has joined #openstack-keystone18:09
*** lhcheng has joined #openstack-keystone18:21
*** lhcheng has quit IRC18:25
*** zz_avozza is now known as avozza18:58
*** marcoemorais has joined #openstack-keystone19:29
*** marcoemorais1 has joined #openstack-keystone19:31
*** marcoemorais has quit IRC19:34
*** nellysmitt has joined #openstack-keystone19:40
morganfainberglbragstad: that was basically my thought. I am worried about breaking people because the paste.ini no longer works.19:41
morganfainberglbragstad: the xmlbody and uh the other one in paste.ini.19:45
*** nellysmitt has quit IRC19:45
morganfainberglbragstad: your update looks to cover it.19:47
morganfainbergOr was I reviewing the wrong patch set. Weird.19:49
morganfainberglbragstad: so, sorry about that I think I missed the actual file fixes for middleware when I did my -1 review.19:50
morganfainberglbragstad: that looks good I'll score it as soon as Jenkins comes back.19:50
*** dimsum__ has quit IRC20:09
*** dimsum__ has joined #openstack-keystone20:22
morganfainberglbragstad, the current failure is known by infra and they are working on it.20:31
*** nellysmitt has joined #openstack-keystone20:33
*** nellysmitt has quit IRC20:43
*** rushiagr is now known as rushiagr_away20:45
morganfainberglbragstad, i added a +220:48
*** avozza is now known as zz_avozza21:04
*** zz_avozza is now known as avozza21:05
*** marcoemorais1 has quit IRC21:21
*** avozza is now known as zz_avozza21:26
*** lhcheng has joined #openstack-keystone21:37
*** shakamunyi has quit IRC21:40
*** jacer_huawei has quit IRC21:48
*** ajayaa has quit IRC21:49
*** jacer_huawei has joined #openstack-keystone21:50
*** jacer_huawei has quit IRC22:00
*** jacer_huawei has joined #openstack-keystone22:03
*** zz_avozza is now known as avozza22:17
*** avozza is now known as zz_avozza22:23
*** stevemar has joined #openstack-keystone22:37
*** ChanServ sets mode: +v stevemar22:37
*** stevemar has quit IRC22:41
*** nellysmitt has joined #openstack-keystone22:44
*** nellysmitt has quit IRC22:49
*** jamielennox|away is now known as jamielennox22:55
*** lhcheng has quit IRC22:57
*** lhcheng has joined #openstack-keystone22:57
*** lhcheng has quit IRC23:01
*** ChanServ has quit IRC23:07
*** jamielennox is now known as jamielennox|away23:08
*** ChanServ has joined #openstack-keystone23:10
*** sets mode: +o ChanServ23:10
*** stevemar has joined #openstack-keystone23:16
*** ChanServ sets mode: +v stevemar23:16
*** ChanServ has quit IRC23:24
*** zz_avozza is now known as avozza23:25
*** rm_work|away is now known as rm_work23:28
*** ChanServ has joined #openstack-keystone23:28
*** sets mode: +o ChanServ23:28
*** ChanServ has quit IRC23:31
*** ChanServ has joined #openstack-keystone23:36
*** sets mode: +o ChanServ23:36
*** shakamunyi has joined #openstack-keystone23:43
*** EmilienM|pto is now known as EmilienM23:43
*** rm_work is now known as rm_work|away23:51

Generated by 2.14.0 by Marius Gedminas - find it at!