| *** ayoung has quit IRC | 00:00 | |
| *** hichtakk has joined #openstack-keystone | 00:00 | |
| *** hichtakk has quit IRC | 00:01 | |
| *** henrynash has quit IRC | 00:02 | |
| *** aix has quit IRC | 00:02 | |
| gyee | morganfainberg, does this sound familiar? https://bugs.launchpad.net/keystone/+bug/1172106 | 00:06 |
|---|---|---|
| openstack | Launchpad bug 1172106 in Keystone icehouse "Live LDAP tests fail on unicode names" [Medium,Fix released] - Assigned to John Dennis (jdennis-a) | 00:06 |
| morganfainberg | yep | 00:07 |
| morganfainberg | that was what i was looking for | 00:07 |
| morganfainberg | and that should be juno then | 00:07 |
| morganfainberg | wonder if we hit a new version of that bug now | 00:07 |
| gyee | yeah, looks like the LDAP ID to public ID code didn't do the encoding or something | 00:08 |
| morganfainberg | doh | 00:08 |
| *** ljfisher_ has joined #openstack-keystone | 00:09 | |
| *** ljfisher has quit IRC | 00:09 | |
| *** ljfisher_ is now known as ljfisher | 00:09 | |
| morganfainberg | gyee, yep | 00:09 |
| morganfainberg | generate_public id | 00:09 |
| morganfainberg | crap. | 00:09 |
| morganfainberg | gyee, ok we need to apply that same type of fix | 00:09 |
| morganfainberg | kfox1111, thanks for the bug report! :) | 00:10 |
| gyee | probably, though I have had a chance to dive into the code yet | 00:10 |
| kfox1111 | np. thanks for looking. :) | 00:10 |
| gyee | I mean I haven't | 00:10 |
| morganfainberg | gyee, right. | 00:10 |
| morganfainberg | but i'm seeing it | 00:10 |
| morganfainberg | keystone.common.wsgi public_id = self.id_generator_api.generate_public_ID(entity) | 00:10 |
| morganfainberg | right there | 00:10 |
| gyee | yikes | 00:10 |
| morganfainberg | keystone.common.wsgi File "/usr/lib/python2.7/site-packages/keystone/identity/id_generators/sha256.py", line 27, in generate_public_ID | 00:10 |
| morganfainberg | ... new critical bug of the day | 00:11 |
| gyee | coffee time | 00:12 |
| * gyee is getting a headache | 00:12 | |
| kfox1111 | ok. I managed to get it to exclude ldap entries that fail to ascii encode for now, I think. | 00:13 |
| morganfainberg | ok classified the bug and marked as critical | 00:14 |
| morganfainberg | kfox1111, good find. i think i know what needs to be done now | 00:14 |
| morganfainberg | and we'll backport any fix to juno as well | 00:14 |
| morganfainberg | so RDO should pick it up reasonably fast [they're good about it] | 00:14 |
| *** hichtakk has joined #openstack-keystone | 00:15 | |
| kfox1111 | wow... well, that will test scalability.... 20948 in id mappings. | 00:16 |
| *** david-lyle is now known as david-lyle_afk | 00:16 | |
| kfox1111 | morganfainberg: that would be great. thanks. :) | 00:16 |
| *** hichtakk has quit IRC | 00:16 | |
| morganfainberg | the mappings table is typically pretty robust | 00:17 |
| kfox1111 | oh.... | 00:17 |
| kfox1111 | because machines are part of this user query. :/ | 00:17 |
| morganfainberg | 20k rows w/ a good index isn't bad. | 00:18 |
| morganfainberg | but we wouldn't populate them until the user is actually trying to use the system | 00:18 |
| morganfainberg | ooooor in the case of a list like you did | 00:18 |
| kfox1111 | yeah. :) | 00:18 |
| kfox1111 | just user list timing kind of sucks, | 00:18 |
| kfox1111 | and will probably hurt anyone trying to do it in browser. :) | 00:19 |
| morganfainberg | there is an addon bit for keystone-manage that would let you flush users/groups that don't have assignments | 00:19 |
| morganfainberg | i kindof want user-list to die. | 00:19 |
| morganfainberg | it's an awful question to ask especially when you factor in "federated identity" | 00:19 |
| morganfainberg | or an idp with 400k users in it | 00:19 |
| kfox1111 | I'd be happy with user-search | 00:20 |
| kfox1111 | user-get is kind of broken though. it shouldn't try and do a whole list query to get the one item. | 00:20 |
| morganfainberg | user-get is broken because of how people use it. | 00:21 |
| morganfainberg | it's an issue with asking for a named object that is not unique | 00:21 |
| morganfainberg | nor indexed | 00:21 |
| kfox1111 | hrm? | 00:21 |
| kfox1111 | how should I be asking for the user id for a user then? | 00:22 |
| kfox1111 | time keystone user-get kfox | 00:22 |
| kfox1111 | 1 min 20 seconds. | 00:22 |
| morganfainberg | that is the issue | 00:22 |
| morganfainberg | you're asking for a non-indexed/searchable value | 00:22 |
| morganfainberg | it's a gap in the API | 00:22 |
| kfox1111 | yeah. | 00:22 |
| morganfainberg | from LDAP in a non-read/write configuration, the ID is programatically generatable | 00:23 |
| morganfainberg | with the right information | 00:23 |
| morganfainberg | so you can infer that info | 00:23 |
| morganfainberg | but saying "hey give me user X" when all LDAP knows is user_ids | 00:23 |
| morganfainberg | means we have to do bad searching | 00:23 |
| morganfainberg | again, with federated identity, it's the wrong question to be asking in most any case | 00:23 |
| morganfainberg | so it's only a partial gap. | 00:24 |
| kfox1111 | but.. you have all the info you need to login as use "kfox" without doing a huge lookup, right? | 00:24 |
| kfox1111 | can't you do the same to lookup the specific entry? | 00:24 |
| morganfainberg | if you login with domain / username you don't have to lookup | 00:24 |
| morganfainberg | well lookup in the same way | 00:24 |
| morganfainberg | there is still some bad lookup that has to happen | 00:24 |
| kfox1111 | but shouldn't user-get be able to make the same optimizations? | 00:24 |
| morganfainberg | not w/o a new REST API | 00:25 |
| morganfainberg | keystoneclient "user-get" with a name is really a "list and then filter by name" | 00:25 |
| morganfainberg | it's not something we could fix in Juno | 00:25 |
| kfox1111 | yeah. just wondering why it has to be implemented that way. | 00:25 |
| kfox1111 | or is it just that it was easy, and no one has ever fixed it? | 00:25 |
| morganfainberg | we could fix it in kilo, and keystoneclient would need to know how to ask the right questions between versions | 00:25 |
| kfox1111 | ah. ok. | 00:26 |
| morganfainberg | it's fixable | 00:26 |
| morganfainberg | just not "easy" to fix | 00:26 |
| morganfainberg | touches a number of things | 00:26 |
| morganfainberg | annnnnnd | 00:26 |
| kfox1111 | ooh... you mean the keystone client is just doing a list, then its filtering itself? | 00:26 |
| morganfainberg | yep. | 00:26 |
| kfox1111 | OHHH... gotcha. | 00:26 |
| morganfainberg | and the rest api does the same bad logic right now | 00:26 |
| kfox1111 | thats even worse. :) | 00:26 |
| kfox1111 | but I understand why it probably grew that way. | 00:26 |
| morganfainberg | well rest api doesn't have a "get by usenrame" | 00:27 |
| morganfainberg | rest api has a "get by id" | 00:27 |
| morganfainberg | the issue is user_list in the rest api with filtering does the same awful stuff | 00:27 |
| kfox1111 | heh. and that leads to some interesting case sensitive stuff... | 00:27 |
| morganfainberg | there is also an open bug on that | 00:27 |
| kfox1111 | I can login as svc-irc, | 00:27 |
| morganfainberg | LDAP is not-case sensitive in most implementations | 00:27 |
| kfox1111 | but in ldap its Svc-IRC so user-get doesnt' work with svc-irc. | 00:27 |
| kfox1111 | yeah.... | 00:28 |
| morganfainberg | but it is case-preserving | 00:28 |
| kfox1111 | fun. | 00:28 |
| morganfainberg | yep. | 00:28 |
| morganfainberg | ldap has a bunch of edge cases | 00:28 |
| *** nellysmitt has joined #openstack-keystone | 00:28 | |
| morganfainberg | longterm the hope is to move to something like SSSD to handle the LDAP -> user awfulness | 00:28 |
| morganfainberg | rathert than needing to carry a lot of this code everywhere | 00:28 |
| morganfainberg | but that is a big project not for today | 00:28 |
| *** markvoelker has quit IRC | 00:29 | |
| kfox1111 | that may be good or bad... | 00:29 |
| kfox1111 | I'm not sure you can bind sssd to multiple domains? | 00:29 |
| morganfainberg | SSSD has solved a bunch of these issues. | 00:29 |
| morganfainberg | it's all doable, just work | 00:29 |
| kfox1111 | so if you wanted multiple domains each with a different ldap, would that work? | 00:29 |
| morganfainberg | iirc yes | 00:29 |
| kfox1111 | ah. cool. | 00:29 |
| morganfainberg | but it's work to get there. | 00:29 |
| morganfainberg | i *think* i set that up at one point | 00:29 |
| morganfainberg | but it's been a while | 00:29 |
| *** tellesnobrega_ has quit IRC | 00:30 | |
| *** nellysmitt has quit IRC | 00:33 | |
| kfox1111 | hmmm.... its taking a long time to login as my domain user... | 00:34 |
| kfox1111 | over a minute... | 00:36 |
| kfox1111 | and still going... | 00:36 |
| kfox1111 | is it trying to reimport all the entries again? | 00:36 |
| kfox1111 | there we go.... | 00:36 |
| kfox1111 | that was a long time... | 00:37 |
| *** r-daneel has quit IRC | 00:54 | |
| *** markvoelker has joined #openstack-keystone | 01:00 | |
| *** jorge_munoz has quit IRC | 01:04 | |
| *** markvoelker has quit IRC | 01:07 | |
| *** mtreinish has quit IRC | 01:08 | |
| *** _cjones_ has quit IRC | 01:09 | |
| *** mtreinish has joined #openstack-keystone | 01:12 | |
| kfox1111 | what was that command to prune unused mappings? I just put in a user filter to see if I can filter out the machine accounts. :/ | 01:13 |
| *** ljfisher has quit IRC | 01:16 | |
| *** zzzeek has quit IRC | 01:17 | |
| *** jacer_huawei has joined #openstack-keystone | 01:19 | |
| *** jacer_huawei is now known as wanghong | 01:19 | |
| *** zzzeek has joined #openstack-keystone | 01:22 | |
| *** abhirc has joined #openstack-keystone | 01:24 | |
| *** tqtran has quit IRC | 01:32 | |
| *** gothicmindfood has quit IRC | 01:34 | |
| *** dimsum__ has quit IRC | 01:34 | |
| kfox1111 | hmm... how about this one.... | 01:35 |
| kfox1111 | I set multiple domain drivers. | 01:35 |
| kfox1111 | default ldap. | 01:36 |
| kfox1111 | created an admin domain, set in its config: | 01:36 |
| kfox1111 | driver=keystone.identity.backends.sql.Identity | 01:36 |
| kfox1111 | but its complaining about multiple uses of ldap. | 01:37 |
| kfox1111 | 2015-02-06 17:38:01.611 31670 WARNING keystone.identity.core [-] Found multiple domains being mapped to a driver that does not support that (e.g. LDAP) - Domain ID: f7f3512cff1540418eb9b4078ed0d399, Default Driver: True | 01:38 |
| morganfainberg | kfox1111, do you have multiple domains w/o specific configs? | 01:39 |
| morganfainberg | LDAP can only support a single domain | 01:39 |
| morganfainberg | so for example if you have "admin", "other domain", and "default" | 01:39 |
| morganfainberg | and admin is set to SQL but "other domain" is not, you'd run into issues | 01:39 |
| kfox1111 | hmm.. oh. there's probably a heat one too... | 01:39 |
| morganfainberg | and right now iirc you can only have "default" (which means all w/o configs) mapped to SQL if you want more than 1 domain in SQL | 01:40 |
| morganfainberg | otherwise only the specific domain mapped for SQL (e.g. "admin") can have the SQL driver | 01:41 |
| *** leseb- has quit IRC | 01:41 | |
| kfox1111 | heh. this might sound odd, but can you set the default to sql, then override default for default to ldap? :) | 01:41 |
| morganfainberg | you should be able to do it that way | 01:41 |
| kfox1111 | awesome. then it wouldnt break when just adding another domain. | 01:42 |
| *** lhcheng has quit IRC | 01:42 | |
| morganfainberg | just can't configure more than one specific domain for sql w/ the per-domain config | 01:42 |
| kfox1111 | The Keystone domain configuration file ['/etc/keystone/domains/keystone.heat.conf'] defines an additional SQL driver - only one is permitted. | 01:42 |
| morganfainberg | yep | 01:42 |
| kfox1111 | arg.... | 01:42 |
| morganfainberg | exactly | 01:42 |
| kfox1111 | so, you can support exactly two domains? one with ldap, and one with sql? | 01:42 |
| morganfainberg | you can have as many ldap definitions in per-domain configs | 01:43 |
| morganfainberg | the issue is you've set the global default to use LDAP | 01:43 |
| kfox1111 | ah. so if I do the default thing I just asked about it would work? | 01:43 |
| morganfainberg | yeah | 01:43 |
| morganfainberg | that *should* afaik | 01:43 |
| kfox1111 | k. thx. :) | 01:43 |
| kfox1111 | lets try... :) | 01:43 |
| morganfainberg | since then you're just overriding the "Default" domain | 01:43 |
| morganfainberg | not the global "where do i stick things w/o a specific config" | 01:44 |
| *** zzzeek has quit IRC | 01:53 | |
| *** ljfisher has joined #openstack-keystone | 01:58 | |
| openstackgerrit | wanghong proposed openstack/keystone: use tokens returned by delete_tokens to invalidate cache https://review.openstack.org/153501 | 02:00 |
| *** markvoelker has joined #openstack-keystone | 02:02 | |
| *** markvoelker has quit IRC | 02:07 | |
| kfox1111 | ? | 02:07 |
| kfox1111 | group add user b7fc2f136d2842659482389675bcfb06 90ece9f251f9956738a973970812a66543805fa1ec3adc7dedf8b34ea0ae9c7d | 02:07 |
| kfox1111 | 90ece9f251f9956738a973970812a66543805fa1ec3adc7dedf8b34ea0ae9c7d not added to group b7fc2f136d2842659482389675bcfb06 | 02:08 |
| *** erkules_ has joined #openstack-keystone | 02:08 | |
| kfox1111 | oh.... | 02:09 |
| kfox1111 | "Group membership across backend boundaries is not allowed" | 02:09 |
| kfox1111 | unfortunate. | 02:09 |
| kfox1111 | Can someone please provide an ER diagram for domain/role/user/group/project? I've been trying to figure it all out for a week, and I'm still finding things that surprise me. | 02:11 |
| *** erkules has quit IRC | 02:11 | |
| *** rwsu is now known as rwsu-afk | 02:11 | |
| *** lnxnut has joined #openstack-keystone | 02:18 | |
| *** ljfisher has quit IRC | 02:19 | |
| *** tellesnobrega_ has joined #openstack-keystone | 02:19 | |
| *** gyee has quit IRC | 02:21 | |
| *** dimsum__ has joined #openstack-keystone | 02:24 | |
| *** nellysmitt has joined #openstack-keystone | 02:29 | |
| *** spandhe has quit IRC | 02:33 | |
| *** nellysmitt has quit IRC | 02:34 | |
| *** kfox1111 has quit IRC | 02:34 | |
| *** harlowja has quit IRC | 02:35 | |
| *** davechen_ has joined #openstack-keystone | 02:36 | |
| *** lnxnut has quit IRC | 02:38 | |
| *** DaveChen has quit IRC | 02:38 | |
| openstackgerrit | Merged openstack/keystone-specs: Address style and formatting comments from 153114 https://review.openstack.org/153488 | 02:52 |
| *** hichtakk has joined #openstack-keystone | 02:52 | |
| *** hichtakk has quit IRC | 02:53 | |
| *** abhirc has quit IRC | 02:54 | |
| openstackgerrit | Merged openstack/keystone-specs: Removes confusing functional test tox example https://review.openstack.org/153366 | 02:55 |
| *** markvoelker has joined #openstack-keystone | 03:03 | |
| *** markvoelker has quit IRC | 03:08 | |
| *** lhcheng has joined #openstack-keystone | 03:28 | |
| *** dimsum__ has quit IRC | 03:32 | |
| *** dimsum__ has joined #openstack-keystone | 03:32 | |
| *** dobson has joined #openstack-keystone | 03:40 | |
| *** dobson has quit IRC | 03:47 | |
| *** dobson has joined #openstack-keystone | 03:51 | |
| *** dobson has quit IRC | 03:56 | |
| *** markvoelker has joined #openstack-keystone | 04:04 | |
| *** markvoelker has quit IRC | 04:09 | |
| *** lnxnut has joined #openstack-keystone | 04:10 | |
| *** _cjones_ has joined #openstack-keystone | 04:10 | |
| *** davechen__ has joined #openstack-keystone | 04:12 | |
| *** davechen_ has quit IRC | 04:15 | |
| *** _cjones_ has quit IRC | 04:15 | |
| *** zzzeek has joined #openstack-keystone | 04:17 | |
| *** dimsum__ has quit IRC | 04:18 | |
| *** tellesnobrega_ has quit IRC | 04:27 | |
| *** dobson has joined #openstack-keystone | 04:30 | |
| *** stevemar has joined #openstack-keystone | 04:30 | |
| *** ChanServ sets mode: +v stevemar | 04:30 | |
| *** nellysmitt has joined #openstack-keystone | 04:30 | |
| *** nellysmitt has quit IRC | 04:35 | |
| *** zzzeek has quit IRC | 04:44 | |
| *** markvoelker has joined #openstack-keystone | 05:05 | |
| *** markvoelker has quit IRC | 05:10 | |
| *** lnxnut has quit IRC | 05:19 | |
| *** lnxnut has joined #openstack-keystone | 05:19 | |
| *** lnxnut has quit IRC | 05:24 | |
| *** richm has quit IRC | 05:38 | |
| *** zzzeek has joined #openstack-keystone | 05:40 | |
| *** zzzeek has quit IRC | 05:43 | |
| *** lnxnut has joined #openstack-keystone | 05:50 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/153767 | 06:03 |
| *** spandhe has joined #openstack-keystone | 06:04 | |
| *** markvoelker has joined #openstack-keystone | 06:07 | |
| *** markvoelker has quit IRC | 06:12 | |
| *** ajayaa has joined #openstack-keystone | 06:16 | |
| *** MasterPiece has joined #openstack-keystone | 06:17 | |
| *** nellysmitt has joined #openstack-keystone | 06:26 | |
| *** ajayaa has quit IRC | 06:36 | |
| *** lnxnut has quit IRC | 06:51 | |
| *** markvoelker has joined #openstack-keystone | 07:08 | |
| *** markvoelker has quit IRC | 07:13 | |
| *** stevemar has quit IRC | 07:37 | |
| *** lnxnut has joined #openstack-keystone | 07:47 | |
| *** ajayaa has joined #openstack-keystone | 07:51 | |
| *** lnxnut has quit IRC | 07:52 | |
| openstackgerrit | Merged openstack/keystone: Imported Translations from Transifex https://review.openstack.org/153767 | 08:01 |
| openstackgerrit | Merged openstack/keystonemiddleware: Switch from oslo.utils to oslo_utils https://review.openstack.org/145962 | 08:07 |
| openstackgerrit | Merged openstack/keystonemiddleware: Switch from oslo.serialization to oslo_serialization https://review.openstack.org/148103 | 08:07 |
| *** markvoelker has joined #openstack-keystone | 08:09 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Switch from oslo.config to oslo_config https://review.openstack.org/148104 | 08:10 |
| openstackgerrit | Merged openstack/keystonemiddleware: Enforce check F821 and H304 https://review.openstack.org/146356 | 08:10 |
| openstackgerrit | Merged openstack/keystonemiddleware: Add python-memcached to test-requirements https://review.openstack.org/146332 | 08:10 |
| *** aix has joined #openstack-keystone | 08:14 | |
| *** markvoelker has quit IRC | 08:14 | |
| *** nkinder has joined #openstack-keystone | 08:15 | |
| *** lhcheng has quit IRC | 08:34 | |
| *** nkinder has quit IRC | 08:38 | |
| *** henrynash has joined #openstack-keystone | 09:00 | |
| *** ChanServ sets mode: +v henrynash | 09:00 | |
| *** rhbear has joined #openstack-keystone | 09:03 | |
| *** henrynash has quit IRC | 09:05 | |
| *** spandhe has quit IRC | 09:09 | |
| *** afeakas|oyua has quit IRC | 09:09 | |
| *** rhbear has quit IRC | 09:09 | |
| *** markvoelker has joined #openstack-keystone | 09:10 | |
| *** spandhe has joined #openstack-keystone | 09:13 | |
| *** ajayaa has quit IRC | 09:13 | |
| *** markvoelker has quit IRC | 09:15 | |
| *** nkinder has joined #openstack-keystone | 09:15 | |
| *** spandhe has quit IRC | 09:18 | |
| *** zz_avozza is now known as avozza | 09:25 | |
| *** nkinder has quit IRC | 09:31 | |
| *** andreaf has joined #openstack-keystone | 09:43 | |
| *** henrynash has joined #openstack-keystone | 09:46 | |
| *** ChanServ sets mode: +v henrynash | 09:46 | |
| *** avozza is now known as zz_avozza | 09:48 | |
| *** zz_avozza is now known as avozza | 09:54 | |
| *** henrynash has quit IRC | 10:00 | |
| *** markvoelker has joined #openstack-keystone | 10:11 | |
| *** nellysmitt has quit IRC | 10:13 | |
| *** markvoelker has quit IRC | 10:15 | |
| *** avozza is now known as zz_avozza | 10:28 | |
| *** zz_avozza is now known as avozza | 10:28 | |
| *** nkinder has joined #openstack-keystone | 10:32 | |
| *** avozza is now known as zz_avozza | 10:36 | |
| *** zz_avozza is now known as avozza | 10:36 | |
| *** avozza is now known as zz_avozza | 10:49 | |
| *** nkinder has quit IRC | 11:05 | |
| *** MasterPiece has quit IRC | 11:12 | |
| *** markvoelker has joined #openstack-keystone | 11:12 | |
| *** MasterPiece has joined #openstack-keystone | 11:15 | |
| *** markvoelker has quit IRC | 11:16 | |
| *** nkinder has joined #openstack-keystone | 11:17 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Add new "RoleAssignment" exception https://review.openstack.org/133628 | 11:21 |
| *** nkinder has quit IRC | 11:42 | |
| *** tellesnobrega_ has joined #openstack-keystone | 11:52 | |
| *** markvoelker has joined #openstack-keystone | 12:13 | |
| *** nellysmitt has joined #openstack-keystone | 12:13 | |
| *** rdo has quit IRC | 12:18 | |
| *** nellysmitt has quit IRC | 12:18 | |
| *** markvoelker has quit IRC | 12:18 | |
| *** rdo has joined #openstack-keystone | 12:19 | |
| *** dimsum__ has joined #openstack-keystone | 12:33 | |
| *** atiwari1 has quit IRC | 12:38 | |
| *** dimsum__ has quit IRC | 12:42 | |
| *** dimsum__ has joined #openstack-keystone | 12:43 | |
| *** dimsum__ has quit IRC | 12:43 | |
| *** dimsum__ has joined #openstack-keystone | 12:50 | |
| *** atiwari has joined #openstack-keystone | 12:55 | |
| *** lnxnut has joined #openstack-keystone | 13:03 | |
| *** lnxnut has quit IRC | 13:08 | |
| *** dimsum__ has quit IRC | 13:09 | |
| *** dimsum__ has joined #openstack-keystone | 13:12 | |
| *** richm has joined #openstack-keystone | 13:13 | |
| *** markvoelker has joined #openstack-keystone | 13:14 | |
| *** dimsum__ has quit IRC | 13:16 | |
| *** MasterPiece has quit IRC | 13:18 | |
| *** markvoelker has quit IRC | 13:19 | |
| *** lnxnut has joined #openstack-keystone | 14:04 | |
| *** lnxnut has quit IRC | 14:08 | |
| *** nellysmitt has joined #openstack-keystone | 14:14 | |
| *** markvoelker has joined #openstack-keystone | 14:15 | |
| *** nellysmitt has quit IRC | 14:19 | |
| *** markvoelker has quit IRC | 14:20 | |
| *** dimsum__ has joined #openstack-keystone | 14:21 | |
| *** dimsum__ has quit IRC | 14:25 | |
| *** pnavarro has joined #openstack-keystone | 14:29 | |
| *** dimsum__ has joined #openstack-keystone | 14:34 | |
| *** dimsum__ has quit IRC | 14:38 | |
| *** tellesnobrega_ has quit IRC | 14:45 | |
| *** rwsu-afk has quit IRC | 14:45 | |
| *** BAKfr has quit IRC | 14:45 | |
| *** xu_alex has quit IRC | 14:45 | |
| *** ccard has quit IRC | 14:45 | |
| *** haneef_ has quit IRC | 14:45 | |
| *** sluo_wfh has quit IRC | 14:45 | |
| *** svasheka has quit IRC | 14:45 | |
| *** anteaya has quit IRC | 14:45 | |
| *** jjulien has quit IRC | 14:45 | |
| *** kragniz has quit IRC | 14:45 | |
| *** telemonster has quit IRC | 14:45 | |
| *** xianghui has quit IRC | 14:45 | |
| *** kragniz has joined #openstack-keystone | 14:45 | |
| *** telemonster has joined #openstack-keystone | 14:45 | |
| *** jjulien has joined #openstack-keystone | 14:45 | |
| *** xianghui has joined #openstack-keystone | 14:45 | |
| *** rwsu-afk has joined #openstack-keystone | 14:45 | |
| *** haneef_ has joined #openstack-keystone | 14:45 | |
| *** tellesnobrega_ has joined #openstack-keystone | 14:45 | |
| *** svasheka has joined #openstack-keystone | 14:45 | |
| *** ccard has joined #openstack-keystone | 14:46 | |
| *** anteaya has joined #openstack-keystone | 14:46 | |
| *** xu_alex has joined #openstack-keystone | 14:49 | |
| *** sluo_wfh has joined #openstack-keystone | 14:49 | |
| *** BAKfr has joined #openstack-keystone | 14:49 | |
| *** lnxnut has joined #openstack-keystone | 15:05 | |
| *** nkinder has joined #openstack-keystone | 15:07 | |
| *** lnxnut has quit IRC | 15:09 | |
| *** zzzeek has joined #openstack-keystone | 15:13 | |
| *** markvoelker has joined #openstack-keystone | 15:16 | |
| *** markvoelker has quit IRC | 15:21 | |
| *** josecastroleon has joined #openstack-keystone | 15:30 | |
| openstackgerrit | Alistair Coles proposed openstack/keystonemiddleware: Delay denial when service token is invalid https://review.openstack.org/153247 | 15:37 |
| *** dimsum__ has joined #openstack-keystone | 15:39 | |
| *** josecastroleon has quit IRC | 15:39 | |
| *** dobson has quit IRC | 15:41 | |
| *** dimsum__ has quit IRC | 15:44 | |
| *** dobson has joined #openstack-keystone | 15:45 | |
| *** dobson has quit IRC | 15:50 | |
| *** zzzeek has quit IRC | 15:58 | |
| *** dobson has joined #openstack-keystone | 16:01 | |
| *** pnavarro has quit IRC | 16:08 | |
| *** nellysmitt has joined #openstack-keystone | 16:15 | |
| *** markvoelker has joined #openstack-keystone | 16:18 | |
| *** nkinder has quit IRC | 16:19 | |
| *** nellysmitt has quit IRC | 16:20 | |
| *** markvoelker has quit IRC | 16:22 | |
| *** lnxnut has joined #openstack-keystone | 16:36 | |
| *** lnxnut has quit IRC | 16:40 | |
| *** lnxnut has joined #openstack-keystone | 16:49 | |
| *** dims_ has joined #openstack-keystone | 16:51 | |
| *** dims_ has quit IRC | 16:53 | |
| *** dims_ has joined #openstack-keystone | 16:53 | |
| *** lnxnut has quit IRC | 16:54 | |
| *** lnxnut has joined #openstack-keystone | 16:54 | |
| openstackgerrit | Arvind Tiwari proposed openstack/keystone-specs: HMAC signature based token https://review.openstack.org/153803 | 16:58 |
| *** dimsum__ has joined #openstack-keystone | 17:01 | |
| *** dims_ has quit IRC | 17:03 | |
| *** dimsum__ has quit IRC | 17:07 | |
| *** dimsum__ has joined #openstack-keystone | 17:07 | |
| *** dims_ has joined #openstack-keystone | 17:12 | |
| *** stevemar has joined #openstack-keystone | 17:12 | |
| *** ChanServ sets mode: +v stevemar | 17:12 | |
| *** nellysmitt has joined #openstack-keystone | 17:13 | |
| *** dimsum__ has quit IRC | 17:14 | |
| *** markvoelker has joined #openstack-keystone | 17:19 | |
| *** markvoelker has quit IRC | 17:23 | |
| *** dimsum__ has joined #openstack-keystone | 17:24 | |
| *** dims_ has quit IRC | 17:25 | |
| *** zz_avozza is now known as avozza | 17:29 | |
| *** dimsum__ has quit IRC | 17:29 | |
| *** nellysmitt has quit IRC | 17:33 | |
| *** avozza is now known as zz_avozza | 17:43 | |
| *** lnxnut has quit IRC | 17:46 | |
| *** lnxnut has joined #openstack-keystone | 17:46 | |
| *** nellysmitt has joined #openstack-keystone | 17:47 | |
| *** lnxnut has quit IRC | 17:50 | |
| *** atiwari has quit IRC | 17:51 | |
| *** henrynash has joined #openstack-keystone | 17:56 | |
| *** ChanServ sets mode: +v henrynash | 17:56 | |
| *** kfox1111 has joined #openstack-keystone | 18:04 | |
| *** zzzeek has joined #openstack-keystone | 18:08 | |
| *** stevemar has quit IRC | 18:09 | |
| *** zz_avozza is now known as avozza | 18:10 | |
| *** EmilienM has quit IRC | 18:19 | |
| *** markvoelker has joined #openstack-keystone | 18:20 | |
| *** EmilienM has joined #openstack-keystone | 18:20 | |
| *** avozza is now known as zz_avozza | 18:20 | |
| *** zz_avozza is now known as avozza | 18:20 | |
| *** markvoelker has quit IRC | 18:25 | |
| *** chlong has quit IRC | 18:26 | |
| *** tellesnobrega__ has joined #openstack-keystone | 18:33 | |
| *** tellesnobrega_ has quit IRC | 18:33 | |
| *** avozza is now known as zz_avozza | 18:38 | |
| *** rwsu-afk has quit IRC | 18:43 | |
| *** jell has quit IRC | 18:46 | |
| *** dimsum__ has joined #openstack-keystone | 18:53 | |
| *** markvoelker has joined #openstack-keystone | 18:54 | |
| *** stevemar has joined #openstack-keystone | 19:50 | |
| *** ChanServ sets mode: +v stevemar | 19:50 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: WIP - make federation part of keystone core https://review.openstack.org/153815 | 19:58 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: WIP - make federation part of keystone core https://review.openstack.org/153815 | 19:58 |
| *** nellysmitt has quit IRC | 20:13 | |
| *** rm_work is now known as rm_work|away | 20:14 | |
| *** esp has left #openstack-keystone | 20:27 | |
| *** lnxnut has joined #openstack-keystone | 20:32 | |
| *** zzzeek has quit IRC | 20:43 | |
| *** nkinder has joined #openstack-keystone | 20:54 | |
| *** markvoelker has quit IRC | 20:56 | |
| *** markvoelker has joined #openstack-keystone | 20:56 | |
| *** markvoelker has quit IRC | 21:01 | |
| *** lnxnut has quit IRC | 21:12 | |
| *** ctina has joined #openstack-keystone | 21:15 | |
| *** stevemar has quit IRC | 21:28 | |
| *** erkules_ is now known as erkules | 21:28 | |
| *** nkinder has quit IRC | 21:28 | |
| *** dimsum__ has quit IRC | 21:45 | |
| *** topol has joined #openstack-keystone | 21:47 | |
| *** ChanServ sets mode: +v topol | 21:47 | |
| *** andreaf has quit IRC | 21:47 | |
| *** andreaf has joined #openstack-keystone | 21:50 | |
| *** markvoelker has joined #openstack-keystone | 21:55 | |
| *** zzzeek has joined #openstack-keystone | 21:57 | |
| *** markvoelker has quit IRC | 22:00 | |
| *** zz_avozza is now known as avozza | 22:00 | |
| *** ChanServ has quit IRC | 22:02 | |
| *** ChanServ has joined #openstack-keystone | 22:04 | |
| *** sendak.freenode.net sets mode: +o ChanServ | 22:04 | |
| *** zzzeek has quit IRC | 22:05 | |
| *** nellysmitt has joined #openstack-keystone | 22:14 | |
| *** tellesnobrega__ has quit IRC | 22:14 | |
| *** tellesnobrega_ has joined #openstack-keystone | 22:17 | |
| *** nellysmitt has quit IRC | 22:18 | |
| *** tellesnobrega_ has quit IRC | 22:27 | |
| *** wanghong has quit IRC | 22:29 | |
| *** jacer_huawei has joined #openstack-keystone | 22:31 | |
| *** jacer_huawei has quit IRC | 22:35 | |
| *** topol has quit IRC | 22:35 | |
| *** jacer_huawei has joined #openstack-keystone | 22:36 | |
| *** openstack has joined #openstack-keystone | 22:51 | |
| *** dobson has joined #openstack-keystone | 22:51 | |
| *** markvoelker has joined #openstack-keystone | 22:56 | |
| *** markvoelker has quit IRC | 23:01 | |
| *** amerine_ has quit IRC | 23:29 | |
| *** markvoelker has joined #openstack-keystone | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!