*** jsavak has quit IRC | 00:07 | |
stevemar | lhcheng, uhhh that is reaching far into my memory banks | 00:10 |
---|---|---|
stevemar | lhcheng, i wouldn't be surprised if that isn't an issue any longer | 00:11 |
lhcheng | stevemar: I can still add invalid user_id into the role assignment API | 00:12 |
lhcheng | stevemar: could be by design to supported federation? | 00:12 |
stevemar | lhcheng, yeah, that's what i'm wondering | 00:12 |
openstackgerrit | Ian Cordasco proposed openstack/oslo.policy: Add Rules.from_dict classmethod https://review.openstack.org/157548 | 00:12 |
stevemar | lhcheng, for federation they will inherit roles from groups, so it doesn't apply there | 00:12 |
stevemar | lhcheng, i'm wondering about the tokenless auth stuff... and keberos | 00:13 |
stevemar | cause they will perform an identity lookup | 00:13 |
stevemar | so maybe yeah, you could put the check back | 00:13 |
*** rushiagr_away has quit IRC | 00:14 | |
lhcheng | stevemar: I put the patch back up and wait to see the reviewer's feedback :P | 00:14 |
stevemar | lhcheng, good call | 00:15 |
lhcheng | stevemar: hmm since the patch is abandoned by the owner, I can re-open it right? | 00:15 |
lhcheng | *can't | 00:15 |
stevemar | lhcheng, i'll reopen it | 00:15 |
lhcheng | stevemar: thank you sir! | 00:16 |
stevemar | lhcheng, reopened sir | 00:16 |
stevemar | no no, thank you for fixing it | 00:16 |
lhcheng | (thumbsup) | 00:20 |
*** ayoung has joined #openstack-keystone | 00:25 | |
*** ChanServ sets mode: +v ayoung | 00:25 | |
*** _cjones_ has quit IRC | 00:25 | |
gyee | marekd, jamielennox, samueldmq_, back | 00:31 |
gyee | too many meetings today | 00:31 |
jamielennox | needscoffee: so i made openstackci a maintainer for -kerberos and -federation, any idea if it's going to work now? | 00:32 |
needscoffee | jamielennox, not sure, going to chase jeblair down or mordred | 00:32 |
needscoffee | and/or clarkb et al | 00:32 |
*** rushiagr_away has joined #openstack-keystone | 00:32 | |
openstackgerrit | Merged openstack/keystone: Move eventlet server options to a config section https://review.openstack.org/130962 | 00:34 |
openstackgerrit | Merged openstack/keystone: Regenerate sample config file https://review.openstack.org/152563 | 00:36 |
gyee | jamielennox, you have a new patch for nova-neutron? | 00:38 |
jamielennox | gyee: it's going to take a while to get the requirements filtered through | 00:38 |
gyee | i c | 00:38 |
jamielennox | but i guess it'll pass gate now so i can at least rev it in preperation | 00:38 |
gyee | jamielennox, but you'll need to refactor it to take out the adapter hack right? | 00:39 |
jamielennox | gyee: yea, but that's pretty trivial | 00:39 |
gyee | yeah seem like it | 00:39 |
openstackgerrit | takehirokaneko proposed openstack/keystone: Adds a validation param "max_username_size". https://review.openstack.org/128504 | 00:46 |
*** markvoelker has joined #openstack-keystone | 00:50 | |
*** gordc has quit IRC | 00:50 | |
*** markvoelker has quit IRC | 00:59 | |
*** david-lyle is now known as david-lyle_afk | 00:59 | |
*** markvoelker has joined #openstack-keystone | 01:00 | |
*** nellysmitt has joined #openstack-keystone | 01:03 | |
*** alex_xu has quit IRC | 01:06 | |
*** nellysmitt has quit IRC | 01:07 | |
openstackgerrit | Priti Desai proposed openstack/keystone: Fix for listing role assignments by project admin https://review.openstack.org/153723 | 01:08 |
*** alex_xu has joined #openstack-keystone | 01:09 | |
*** abhirc has quit IRC | 01:17 | |
*** samueldmq_ has quit IRC | 01:22 | |
*** sigmavirus24 has joined #openstack-keystone | 01:26 | |
*** samueldmq_ has joined #openstack-keystone | 01:39 | |
*** chlong has quit IRC | 01:40 | |
*** chlong has joined #openstack-keystone | 01:41 | |
harlowja | would the keystone folks mind writing/looking @ https://review.openstack.org/#/c/156711/ and i'd be cool to get your guys thoughts on the WSGI part there (maybe even a little user-story for how keystone made this possible) | 01:51 |
harlowja | ^ would be much appreciated | 01:51 |
*** abhirc has joined #openstack-keystone | 01:53 | |
*** diegows has quit IRC | 02:16 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: Avoid multiple instances for a provider https://review.openstack.org/124599 | 02:16 |
*** tqtran has quit IRC | 02:16 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: Enable endpoint_policy, endpoint_filter and oauth by default https://review.openstack.org/153842 | 02:18 |
*** erkules_ has joined #openstack-keystone | 02:26 | |
*** erkules has quit IRC | 02:28 | |
*** browne has joined #openstack-keystone | 02:29 | |
*** spandhe has quit IRC | 02:35 | |
openstackgerrit | Merged openstack/oslo.policy: Fix the order of args to assertEqual in tests https://review.openstack.org/157572 | 03:03 |
openstackgerrit | Merged openstack/oslo.policy: Use assertTrue or assertFalse where appropriate https://review.openstack.org/157583 | 03:03 |
openstackgerrit | Merged openstack/oslo.policy: Add Rules.from_dict classmethod https://review.openstack.org/157548 | 03:03 |
openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Allow passing logger object to request https://review.openstack.org/157647 | 03:03 |
*** nellysmitt has joined #openstack-keystone | 03:03 | |
*** nellysmitt has quit IRC | 03:08 | |
*** samueldmq_ has quit IRC | 03:09 | |
gyee | jamielennox, looks like the new neutronclient broken something? | 03:09 |
jamielennox | gyee: i think it's just related to the icehouse dependency list | 03:10 |
gyee | yeah | 03:10 |
jamielennox | they're up to 2.3.11 or something stupid - the client was pinned <2.4 | 03:10 |
jamielennox | might be time they bumped the minoir | 03:10 |
gyee | harlowja, keystone runs in apache2 so we are not impacted by eventlet stuff right? | 03:11 |
harlowja | gyee i think so; but the experiences of the keystone folks with this might be useful to document | 03:12 |
harlowja | and/or include in that spec | 03:12 |
gyee | jamielennox, ouch, yeah, time to bump version | 03:12 |
gyee | harlowja, ah ok | 03:13 |
gyee | jamielennox, I like the ML sequence, 1) yeah we have a new neutronclient, 2) kudos, 3) oh shit something break | 03:14 |
jamielennox | gyee: haven't actually seen the ML | 03:14 |
jamielennox | gyee: i got notified that launchpad had closed a couple of my bugs | 03:14 |
jamielennox | closed/released | 03:14 |
gyee | seem like an old movie scene keep repeating itself :) | 03:15 |
*** stevemar has quit IRC | 03:15 | |
*** stevemar has joined #openstack-keystone | 03:16 | |
*** ChanServ sets mode: +v stevemar | 03:16 | |
*** gyee has quit IRC | 03:28 | |
*** dims__ has joined #openstack-keystone | 03:29 | |
*** richm has quit IRC | 03:30 | |
*** dims__ has quit IRC | 03:30 | |
*** dims__ has joined #openstack-keystone | 03:31 | |
*** dims_ has joined #openstack-keystone | 03:32 | |
*** dims__ has quit IRC | 03:36 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: Use oslo.policy instead of incubated version https://review.openstack.org/148624 | 03:55 |
*** lhcheng has quit IRC | 03:56 | |
openstackgerrit | Merged openstack/keystone: Provide additional detail if OAuth headers are missing https://review.openstack.org/142191 | 04:01 |
*** sigmavirus24 is now known as sigmavirus24_awa | 04:07 | |
*** lhcheng has joined #openstack-keystone | 04:12 | |
*** markvoelker has quit IRC | 04:19 | |
*** spandhe has joined #openstack-keystone | 04:23 | |
*** harlowja is now known as harlowja_away | 04:28 | |
*** dims_ has quit IRC | 04:48 | |
*** markvoelker has joined #openstack-keystone | 04:50 | |
*** markvoelker has quit IRC | 04:56 | |
*** spandhe has quit IRC | 05:01 | |
*** nellysmitt has joined #openstack-keystone | 05:05 | |
*** nellysmitt has quit IRC | 05:09 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: Use oslo.policy instead of incubated version https://review.openstack.org/148624 | 05:10 |
*** ajayaa has joined #openstack-keystone | 05:19 | |
*** lhcheng has quit IRC | 05:19 | |
*** lhcheng has joined #openstack-keystone | 05:34 | |
*** dims__ has joined #openstack-keystone | 05:48 | |
*** dims__ has quit IRC | 05:53 | |
*** markvoelker has joined #openstack-keystone | 05:53 | |
*** markvoelker has quit IRC | 05:58 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/157667 | 06:03 |
*** topol has joined #openstack-keystone | 06:28 | |
*** ChanServ sets mode: +v topol | 06:28 | |
*** ajayaa has quit IRC | 06:39 | |
*** topol has quit IRC | 06:45 | |
*** ajayaa has joined #openstack-keystone | 06:53 | |
*** markvoelker has joined #openstack-keystone | 06:54 | |
*** markvoelker has quit IRC | 06:58 | |
*** nellysmitt has joined #openstack-keystone | 07:05 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: Use oslo.policy instead of incubated version https://review.openstack.org/148624 | 07:07 |
openstackgerrit | Abhishek Kekane proposed openstack/keystone: Eventlet green threads not released back to pool https://review.openstack.org/130824 | 07:08 |
haneef_ | jamielennox: Any comment n this issue: https://bugs.launchpad.net/python-keystoneclient/+bug/1423660 | 07:09 |
openstack | Launchpad bug 1423660 in python-keystoneclient "keystoneclient password plugin reports "user-name" as parameter but only usern" [Undecided,New] | 07:09 |
*** nellysmitt has quit IRC | 07:10 | |
openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Make post_test_hook.sh executable https://review.openstack.org/157686 | 07:10 |
*** afazekas_ has joined #openstack-keystone | 07:10 | |
openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/156739 | 07:11 |
jamielennox | haneef_: so user-name won't work from CONF file, it would have to be user_name | 07:13 |
jamielennox | however that should work | 07:13 |
jamielennox | oh - you did that | 07:13 |
jamielennox | haneef_: umm i'm just running out, https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/auth/base.py#L276 is where the work happens | 07:14 |
jamielennox | the user_name opt has dest=username, so it should be set on CONF.keystone_authtoken.username | 07:14 |
jamielennox | so by the time load_from_options() is called username= will be the kwargs | 07:15 |
haneef_ | Shouldn't stevedore report username as param in this case. Confusion happens because stevdore reports the param name as user-name | 07:16 |
jamielennox | right, i made username the deprecated version | 07:16 |
jamielennox | maybe i shouldn't have, but there was already project_name domain_name etc | 07:16 |
*** browne has quit IRC | 07:17 | |
haneef_ | yes. user_name is more consistent | 07:17 |
jamielennox | haneef_: i'll have to look more closely on monday | 07:20 |
jamielennox | user_name is really the only option we have at the moment that has a deprecated version so its possibly it slipped through | 07:20 |
jamielennox | however I'm sure i had that all tested to make sure the deprecations were being handled correctly. | 07:20 |
jamielennox | haneef_: i've got to run - post on the bug if you figure out what's happening | 07:21 |
*** jamielennox is now known as jamielennox|away | 07:22 | |
*** nellysmitt has joined #openstack-keystone | 07:23 | |
openstackgerrit | Merged openstack/keystonemiddleware: Move auth_token into its own folder https://review.openstack.org/157276 | 07:43 |
*** browne has joined #openstack-keystone | 07:46 | |
*** markvoelker has joined #openstack-keystone | 07:55 | |
*** henrynash has joined #openstack-keystone | 07:56 | |
*** ChanServ sets mode: +v henrynash | 07:56 | |
*** browne has quit IRC | 08:00 | |
*** markvoelker has quit IRC | 08:01 | |
openstackgerrit | Merged openstack/keystone: Imported Translations from Transifex https://review.openstack.org/157667 | 08:16 |
openstackgerrit | Steve Martinelli proposed openstack/keystone: Use oslo.policy instead of incubated version https://review.openstack.org/148624 | 08:21 |
*** krykowski has joined #openstack-keystone | 08:24 | |
*** nkinder_away has quit IRC | 08:33 | |
*** stevemar has quit IRC | 08:34 | |
*** dims__ has joined #openstack-keystone | 08:38 | |
*** dims__ has quit IRC | 08:43 | |
*** jistr has joined #openstack-keystone | 08:46 | |
*** Akshik has joined #openstack-keystone | 08:50 | |
Akshik | im getting "Target WSGI script '/var/www/cgi-bin/keystone/main' cannot be loaded as Python module" while configurin federation for keystone any help, i followed http://docs.openstack.org/developer/keystone/configure_federation.html, im using icehouse on ubuntu 12.04 | 08:50 |
Akshik | i have the downloaded the keystone.py and has created the link as well and even tried giving 777 permission | 08:53 |
Akshik | any help would be of much help | 08:54 |
*** markvoelker has joined #openstack-keystone | 08:58 | |
*** lhcheng has quit IRC | 08:59 | |
*** markvoelker has quit IRC | 09:03 | |
openstackgerrit | Merged openstack/keystone: Remove duplicated test for get_role https://review.openstack.org/156840 | 09:06 |
*** ajayaa has quit IRC | 09:31 | |
*** pnavarro has joined #openstack-keystone | 09:31 | |
*** karimb has joined #openstack-keystone | 09:32 | |
*** ajayaa has joined #openstack-keystone | 09:44 | |
*** fmarco76 has joined #openstack-keystone | 09:47 | |
openstackgerrit | henry-nash proposed openstack/keystone: Refactor domain specific loading https://review.openstack.org/157701 | 09:49 |
openstackgerrit | Marek Denis proposed openstack/keystone: Ehncance user identification in mapping engine https://review.openstack.org/154934 | 09:50 |
*** henrynash has quit IRC | 09:53 | |
*** markvoelker has joined #openstack-keystone | 09:59 | |
*** lhcheng has joined #openstack-keystone | 09:59 | |
*** pnavarro has quit IRC | 09:59 | |
*** henrynash has joined #openstack-keystone | 10:01 | |
*** ChanServ sets mode: +v henrynash | 10:01 | |
*** lhcheng has quit IRC | 10:04 | |
*** markvoelker has quit IRC | 10:04 | |
*** aix has joined #openstack-keystone | 10:12 | |
*** pnavarro has joined #openstack-keystone | 10:19 | |
*** Akshik has quit IRC | 10:22 | |
*** MasterPiece has joined #openstack-keystone | 10:30 | |
samueldmq | henrynash, looking at the data-driven chain | 10:34 |
henrynash | samueldmq: ok | 10:34 |
samueldmq | henrynash, in general, looks really good to me ... any improvements (if any) could come after ... if we go for adopting that approach for all backends and then putting creating generic, etc | 10:35 |
henrynash | samueldmq: yes, I agree - we could use this approach a lot more if we like it | 10:36 |
samueldmq | henrynash, yep, that's the advantage of working with more experienced people, we know a lot of things .... I personally had no idea on that approach | 10:37 |
openstackgerrit | Marek Denis proposed openstack/keystone: Make Rule.Processor_UserType class public https://review.openstack.org/157711 | 10:37 |
samueldmq | henrynash, thanks! | 10:37 |
henrynash | samueldmq: you’re doing pretty well youself... | 10:38 |
samueldmq | henrynash, I hope so :-) thx | 10:38 |
samueldmq | lbragstad, ping - gyee let the honor to you (https://review.openstack.org/#/c/137021/33) | 10:49 |
*** henrynash has quit IRC | 10:52 | |
*** henrynash has joined #openstack-keystone | 10:54 | |
*** ChanServ sets mode: +v henrynash | 10:54 | |
*** krykowski has quit IRC | 10:57 | |
*** krykowski has joined #openstack-keystone | 10:58 | |
*** markvoelker has joined #openstack-keystone | 11:00 | |
*** markvoelker has quit IRC | 11:05 | |
openstackgerrit | Marek Denis proposed openstack/keystone: Move UserAuthInfo to a separate file https://review.openstack.org/157717 | 11:05 |
*** henrynash has quit IRC | 11:17 | |
*** lhcheng has joined #openstack-keystone | 11:17 | |
*** lhcheng has quit IRC | 11:21 | |
*** jasondotstar has joined #openstack-keystone | 11:32 | |
*** openstack has joined #openstack-keystone | 20:22 | |
*** chuckcarmack has left #openstack-keystone | 20:22 | |
stevemar | dolphin, can you +A this, we're all ibmers: https://review.openstack.org/#/c/155982/ | 20:23 |
stevemar | dolphin, and the patch that depends on it :) | 20:23 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!