Friday, 2015-02-20

*** jsavak has quit IRC00:07
stevemarlhcheng, uhhh that is reaching far into my memory banks00:10
stevemarlhcheng, i wouldn't be surprised if that isn't an issue any longer00:11
lhchengstevemar: I can still add invalid user_id into the role assignment API00:12
lhchengstevemar: could be by design to supported federation?00:12
stevemarlhcheng, yeah, that's what i'm wondering00:12
openstackgerritIan Cordasco proposed openstack/oslo.policy: Add Rules.from_dict classmethod  https://review.openstack.org/15754800:12
stevemarlhcheng, for federation they will inherit roles from groups, so it doesn't apply there00:12
stevemarlhcheng, i'm wondering about the tokenless auth stuff... and keberos00:13
stevemarcause they will perform an identity lookup00:13
stevemarso maybe yeah, you could put the check back00:13
*** rushiagr_away has quit IRC00:14
lhchengstevemar: I put the patch back up and wait to see the reviewer's feedback :P00:14
stevemarlhcheng, good call00:15
lhchengstevemar: hmm since the patch is abandoned by the owner, I can re-open it right?00:15
lhcheng*can't00:15
stevemarlhcheng, i'll reopen it00:15
lhchengstevemar: thank you sir!00:16
stevemarlhcheng, reopened sir00:16
stevemarno no, thank you for fixing it00:16
lhcheng(thumbsup)00:20
*** ayoung has joined #openstack-keystone00:25
*** ChanServ sets mode: +v ayoung00:25
*** _cjones_ has quit IRC00:25
gyeemarekd, jamielennox, samueldmq_, back00:31
gyeetoo many meetings today00:31
jamielennoxneedscoffee: so i made openstackci a maintainer for -kerberos and -federation, any idea if it's going to work now?00:32
needscoffeejamielennox, not sure, going to chase jeblair down or mordred00:32
needscoffeeand/or clarkb et al00:32
*** rushiagr_away has joined #openstack-keystone00:32
openstackgerritMerged openstack/keystone: Move eventlet server options to a config section  https://review.openstack.org/13096200:34
openstackgerritMerged openstack/keystone: Regenerate sample config file  https://review.openstack.org/15256300:36
gyeejamielennox, you have a new patch for nova-neutron?00:38
jamielennoxgyee: it's going to take a while to get the requirements filtered through00:38
gyeei c00:38
jamielennoxbut i guess it'll pass gate now so i can at least rev it in preperation00:38
gyeejamielennox, but you'll need to refactor it to take out the adapter hack right?00:39
jamielennoxgyee: yea, but that's pretty trivial00:39
gyeeyeah seem like it00:39
openstackgerrittakehirokaneko proposed openstack/keystone: Adds a validation param "max_username_size".  https://review.openstack.org/12850400:46
*** markvoelker has joined #openstack-keystone00:50
*** gordc has quit IRC00:50
*** markvoelker has quit IRC00:59
*** david-lyle is now known as david-lyle_afk00:59
*** markvoelker has joined #openstack-keystone01:00
*** nellysmitt has joined #openstack-keystone01:03
*** alex_xu has quit IRC01:06
*** nellysmitt has quit IRC01:07
openstackgerritPriti Desai proposed openstack/keystone: Fix for listing role assignments by project admin  https://review.openstack.org/15372301:08
*** alex_xu has joined #openstack-keystone01:09
*** abhirc has quit IRC01:17
*** samueldmq_ has quit IRC01:22
*** sigmavirus24 has joined #openstack-keystone01:26
*** samueldmq_ has joined #openstack-keystone01:39
*** chlong has quit IRC01:40
*** chlong has joined #openstack-keystone01:41
harlowjawould the keystone folks mind writing/looking @ https://review.openstack.org/#/c/156711/ and i'd be cool to get your guys thoughts on the WSGI part there (maybe even a little user-story for how keystone made this possible)01:51
harlowja^ would be much appreciated01:51
*** abhirc has joined #openstack-keystone01:53
*** diegows has quit IRC02:16
openstackgerritSteve Martinelli proposed openstack/keystone: Avoid multiple instances for a provider  https://review.openstack.org/12459902:16
*** tqtran has quit IRC02:16
openstackgerritSteve Martinelli proposed openstack/keystone: Enable endpoint_policy, endpoint_filter and oauth by default  https://review.openstack.org/15384202:18
*** erkules_ has joined #openstack-keystone02:26
*** erkules has quit IRC02:28
*** browne has joined #openstack-keystone02:29
*** spandhe has quit IRC02:35
openstackgerritMerged openstack/oslo.policy: Fix the order of args to assertEqual in tests  https://review.openstack.org/15757203:03
openstackgerritMerged openstack/oslo.policy: Use assertTrue or assertFalse where appropriate  https://review.openstack.org/15758303:03
openstackgerritMerged openstack/oslo.policy: Add Rules.from_dict classmethod  https://review.openstack.org/15754803:03
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Allow passing logger object to request  https://review.openstack.org/15764703:03
*** nellysmitt has joined #openstack-keystone03:03
*** nellysmitt has quit IRC03:08
*** samueldmq_ has quit IRC03:09
gyeejamielennox, looks like the new neutronclient broken something?03:09
jamielennoxgyee: i think it's just related to the icehouse dependency list03:10
gyeeyeah03:10
jamielennoxthey're up to 2.3.11 or something stupid - the client was pinned <2.403:10
jamielennoxmight be time they bumped the minoir03:10
gyeeharlowja, keystone runs in apache2 so we are not impacted by eventlet stuff right?03:11
harlowjagyee i think so; but the experiences of the keystone folks with this might be useful to document03:12
harlowjaand/or include in that spec03:12
gyeejamielennox, ouch, yeah, time to bump version03:12
gyeeharlowja, ah ok03:13
gyeejamielennox, I like the ML sequence, 1) yeah we have a new neutronclient, 2) kudos, 3) oh shit something break03:14
jamielennoxgyee: haven't actually seen the ML03:14
jamielennoxgyee: i got notified that launchpad had closed a couple of my bugs03:14
jamielennoxclosed/released03:14
gyeeseem like an old movie scene keep repeating itself :)03:15
*** stevemar has quit IRC03:15
*** stevemar has joined #openstack-keystone03:16
*** ChanServ sets mode: +v stevemar03:16
*** gyee has quit IRC03:28
*** dims__ has joined #openstack-keystone03:29
*** richm has quit IRC03:30
*** dims__ has quit IRC03:30
*** dims__ has joined #openstack-keystone03:31
*** dims_ has joined #openstack-keystone03:32
*** dims__ has quit IRC03:36
openstackgerritSteve Martinelli proposed openstack/keystone: Use oslo.policy instead of incubated version  https://review.openstack.org/14862403:55
*** lhcheng has quit IRC03:56
openstackgerritMerged openstack/keystone: Provide additional detail if OAuth headers are missing  https://review.openstack.org/14219104:01
*** sigmavirus24 is now known as sigmavirus24_awa04:07
*** lhcheng has joined #openstack-keystone04:12
*** markvoelker has quit IRC04:19
*** spandhe has joined #openstack-keystone04:23
*** harlowja is now known as harlowja_away04:28
*** dims_ has quit IRC04:48
*** markvoelker has joined #openstack-keystone04:50
*** markvoelker has quit IRC04:56
*** spandhe has quit IRC05:01
*** nellysmitt has joined #openstack-keystone05:05
*** nellysmitt has quit IRC05:09
openstackgerritSteve Martinelli proposed openstack/keystone: Use oslo.policy instead of incubated version  https://review.openstack.org/14862405:10
*** ajayaa has joined #openstack-keystone05:19
*** lhcheng has quit IRC05:19
*** lhcheng has joined #openstack-keystone05:34
*** dims__ has joined #openstack-keystone05:48
*** dims__ has quit IRC05:53
*** markvoelker has joined #openstack-keystone05:53
*** markvoelker has quit IRC05:58
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex  https://review.openstack.org/15766706:03
*** topol has joined #openstack-keystone06:28
*** ChanServ sets mode: +v topol06:28
*** ajayaa has quit IRC06:39
*** topol has quit IRC06:45
*** ajayaa has joined #openstack-keystone06:53
*** markvoelker has joined #openstack-keystone06:54
*** markvoelker has quit IRC06:58
*** nellysmitt has joined #openstack-keystone07:05
openstackgerritSteve Martinelli proposed openstack/keystone: Use oslo.policy instead of incubated version  https://review.openstack.org/14862407:07
openstackgerritAbhishek Kekane proposed openstack/keystone: Eventlet green threads not released back to pool  https://review.openstack.org/13082407:08
haneef_jamielennox: Any comment n this issue:  https://bugs.launchpad.net/python-keystoneclient/+bug/142366007:09
openstackLaunchpad bug 1423660 in python-keystoneclient "keystoneclient password plugin reports "user-name" as parameter but only usern" [Undecided,New]07:09
*** nellysmitt has quit IRC07:10
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Make post_test_hook.sh executable  https://review.openstack.org/15768607:10
*** afazekas_ has joined #openstack-keystone07:10
openstackgerritMerged openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/15673907:11
jamielennoxhaneef_: so user-name won't work from CONF file, it would have to be user_name07:13
jamielennoxhowever that should work07:13
jamielennoxoh - you did that07:13
jamielennoxhaneef_: umm i'm just running out, https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/auth/base.py#L276 is where the work happens07:14
jamielennoxthe user_name opt has dest=username, so it should be set on CONF.keystone_authtoken.username07:14
jamielennoxso by the time load_from_options() is called username= will be the kwargs07:15
haneef_Shouldn't stevedore report username as param in this case.  Confusion happens because stevdore reports the param name as user-name07:16
jamielennoxright, i made username the deprecated version07:16
jamielennoxmaybe i shouldn't have, but there was already project_name domain_name etc07:16
*** browne has quit IRC07:17
haneef_yes. user_name is more consistent07:17
jamielennoxhaneef_: i'll have to look more closely on monday07:20
jamielennoxuser_name is really the only option we have at the moment that has a deprecated version so its possibly it slipped through07:20
jamielennoxhowever I'm sure i had that all tested to make sure the deprecations were being handled correctly.07:20
jamielennoxhaneef_: i've got to run - post on the bug if you figure out what's happening07:21
*** jamielennox is now known as jamielennox|away07:22
*** nellysmitt has joined #openstack-keystone07:23
openstackgerritMerged openstack/keystonemiddleware: Move auth_token into its own folder  https://review.openstack.org/15727607:43
*** browne has joined #openstack-keystone07:46
*** markvoelker has joined #openstack-keystone07:55
*** henrynash has joined #openstack-keystone07:56
*** ChanServ sets mode: +v henrynash07:56
*** browne has quit IRC08:00
*** markvoelker has quit IRC08:01
openstackgerritMerged openstack/keystone: Imported Translations from Transifex  https://review.openstack.org/15766708:16
openstackgerritSteve Martinelli proposed openstack/keystone: Use oslo.policy instead of incubated version  https://review.openstack.org/14862408:21
*** krykowski has joined #openstack-keystone08:24
*** nkinder_away has quit IRC08:33
*** stevemar has quit IRC08:34
*** dims__ has joined #openstack-keystone08:38
*** dims__ has quit IRC08:43
*** jistr has joined #openstack-keystone08:46
*** Akshik has joined #openstack-keystone08:50
Akshikim getting "Target WSGI script '/var/www/cgi-bin/keystone/main' cannot be loaded as Python module" while configurin federation for keystone any help, i followed http://docs.openstack.org/developer/keystone/configure_federation.html, im using icehouse on ubuntu 12.0408:50
Akshiki have the downloaded the keystone.py and has created the link as well and even tried giving 777 permission08:53
Akshikany help would be of much help08:54
*** markvoelker has joined #openstack-keystone08:58
*** lhcheng has quit IRC08:59
*** markvoelker has quit IRC09:03
openstackgerritMerged openstack/keystone: Remove duplicated test for get_role  https://review.openstack.org/15684009:06
*** ajayaa has quit IRC09:31
*** pnavarro has joined #openstack-keystone09:31
*** karimb has joined #openstack-keystone09:32
*** ajayaa has joined #openstack-keystone09:44
*** fmarco76 has joined #openstack-keystone09:47
openstackgerrithenry-nash proposed openstack/keystone: Refactor domain specific loading  https://review.openstack.org/15770109:49
openstackgerritMarek Denis proposed openstack/keystone: Ehncance user identification in mapping engine  https://review.openstack.org/15493409:50
*** henrynash has quit IRC09:53
*** markvoelker has joined #openstack-keystone09:59
*** lhcheng has joined #openstack-keystone09:59
*** pnavarro has quit IRC09:59
*** henrynash has joined #openstack-keystone10:01
*** ChanServ sets mode: +v henrynash10:01
*** lhcheng has quit IRC10:04
*** markvoelker has quit IRC10:04
*** aix has joined #openstack-keystone10:12
*** pnavarro has joined #openstack-keystone10:19
*** Akshik has quit IRC10:22
*** MasterPiece has joined #openstack-keystone10:30
samueldmqhenrynash, looking at the data-driven chain10:34
henrynashsamueldmq: ok10:34
samueldmqhenrynash, in general, looks really good to me ... any improvements (if any) could come after ... if we go for adopting that approach for all backends and then putting creating generic, etc10:35
henrynashsamueldmq: yes, I agree - we could use this approach a lot more if we like it10:36
samueldmqhenrynash, yep, that's the advantage of working with more experienced people, we know a lot of things .... I personally had no idea on that approach10:37
openstackgerritMarek Denis proposed openstack/keystone: Make Rule.Processor_UserType class public  https://review.openstack.org/15771110:37
samueldmqhenrynash, thanks!10:37
henrynashsamueldmq: you’re doing pretty well youself...10:38
samueldmqhenrynash, I hope so :-) thx10:38
samueldmqlbragstad, ping - gyee let the honor to you (https://review.openstack.org/#/c/137021/33)10:49
*** henrynash has quit IRC10:52
*** henrynash has joined #openstack-keystone10:54
*** ChanServ sets mode: +v henrynash10:54
*** krykowski has quit IRC10:57
*** krykowski has joined #openstack-keystone10:58
*** markvoelker has joined #openstack-keystone11:00
*** markvoelker has quit IRC11:05
openstackgerritMarek Denis proposed openstack/keystone: Move UserAuthInfo to a separate file  https://review.openstack.org/15771711:05
*** henrynash has quit IRC11:17
*** lhcheng has joined #openstack-keystone11:17
*** lhcheng has quit IRC11:21
*** jasondotstar has joined #openstack-keystone11:32
*** openstack has joined #openstack-keystone20:22
*** chuckcarmack has left #openstack-keystone20:22
stevemardolphin, can you +A this, we're all ibmers: https://review.openstack.org/#/c/155982/20:23
stevemardolphin, and the patch that depends on it :)20:23

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!