| *** chlong has joined #openstack-keystone | 00:09 | |
| *** ncoghlan has joined #openstack-keystone | 00:23 | |
| *** e0ne has joined #openstack-keystone | 00:31 | |
| *** e0ne has quit IRC | 01:05 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 01:27 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 01:31 | |
| openstackgerrit | liusheng proposed openstack/keystone: Remove the deprecated compute_port option https://review.openstack.org/183405 | 01:41 |
|---|---|---|
| *** gokrokve has joined #openstack-keystone | 01:53 | |
| *** gokrokve has quit IRC | 02:06 | |
| *** alanf-mc has joined #openstack-keystone | 02:10 | |
| *** alanf-mc_ has joined #openstack-keystone | 02:13 | |
| *** alanf-mc has quit IRC | 02:17 | |
| *** alanf-mc_ has quit IRC | 02:18 | |
| *** gokrokve has joined #openstack-keystone | 02:47 | |
| *** chlong has quit IRC | 02:58 | |
| *** chlong has joined #openstack-keystone | 03:10 | |
| *** sanchitmalhotra has joined #openstack-keystone | 03:29 | |
| *** alex_xu has quit IRC | 03:37 | |
| *** alex_xu has joined #openstack-keystone | 03:38 | |
| *** sanchitmalhotra1 has joined #openstack-keystone | 03:42 | |
| *** sanchitmalhotra has quit IRC | 03:45 | |
| *** sanchitmalhotra has joined #openstack-keystone | 03:51 | |
| *** sanchitmalhotra1 has quit IRC | 03:54 | |
| *** sanchitmalhotra has quit IRC | 04:09 | |
| *** sanchitmalhotra has joined #openstack-keystone | 04:10 | |
| *** sanchitmalhotra1 has joined #openstack-keystone | 04:16 | |
| *** chlong has quit IRC | 04:18 | |
| *** sanchitmalhotra has quit IRC | 04:19 | |
| *** chlong has joined #openstack-keystone | 04:35 | |
| *** dc1 has joined #openstack-keystone | 04:51 | |
| *** dc1 has quit IRC | 04:58 | |
| *** sanchitmalhotra has joined #openstack-keystone | 05:11 | |
| *** sanchitmalhotra1 has quit IRC | 05:13 | |
| *** sanchitmalhotra has left #openstack-keystone | 05:13 | |
| *** kiran-r has joined #openstack-keystone | 05:37 | |
| *** harlowja has joined #openstack-keystone | 06:27 | |
| *** mabrams has joined #openstack-keystone | 06:40 | |
| *** afazekas has joined #openstack-keystone | 06:43 | |
| *** harlowja has quit IRC | 06:43 | |
| *** lhcheng has joined #openstack-keystone | 06:49 | |
| *** ChanServ sets mode: +v lhcheng | 06:49 | |
| *** lufix has joined #openstack-keystone | 06:50 | |
| *** kiran-r has quit IRC | 06:56 | |
| *** e0ne has joined #openstack-keystone | 07:01 | |
| *** liusheng has quit IRC | 07:02 | |
| *** liusheng has joined #openstack-keystone | 07:03 | |
| *** e0ne has quit IRC | 07:25 | |
| *** ncoghlan has quit IRC | 07:33 | |
| *** jistr has joined #openstack-keystone | 07:34 | |
| *** chlong has quit IRC | 07:40 | |
| *** dhague has joined #openstack-keystone | 07:41 | |
| *** rlt has joined #openstack-keystone | 07:41 | |
| *** e0ne has joined #openstack-keystone | 07:47 | |
| *** e0ne has quit IRC | 08:03 | |
| *** lhcheng has quit IRC | 08:10 | |
| *** lhcheng has joined #openstack-keystone | 08:10 | |
| *** ChanServ sets mode: +v lhcheng | 08:10 | |
| *** lhcheng has quit IRC | 08:15 | |
| *** liusheng has quit IRC | 08:18 | |
| *** crinkle has quit IRC | 08:40 | |
| *** fhubik has joined #openstack-keystone | 08:46 | |
| *** fhubik is now known as fhubik_afk | 08:46 | |
| *** wasmum has quit IRC | 08:46 | |
| *** fhubik_afk is now known as fhubik | 08:56 | |
| *** wasmum has joined #openstack-keystone | 09:02 | |
| *** links has joined #openstack-keystone | 09:26 | |
| *** lufix has quit IRC | 09:39 | |
| *** lufix has joined #openstack-keystone | 09:43 | |
| *** fhubik is now known as fhubik_afk | 09:45 | |
| *** jistr has quit IRC | 09:53 | |
| *** jistr has joined #openstack-keystone | 09:55 | |
| *** jistr_ has joined #openstack-keystone | 10:06 | |
| *** jistr has quit IRC | 10:07 | |
| *** lhcheng has joined #openstack-keystone | 10:11 | |
| *** ChanServ sets mode: +v lhcheng | 10:11 | |
| *** lhcheng has quit IRC | 10:16 | |
| *** aix has joined #openstack-keystone | 10:21 | |
| *** kairat_kushaev has joined #openstack-keystone | 10:36 | |
| *** crinkle has joined #openstack-keystone | 10:40 | |
| *** jistr_ is now known as jistr | 10:44 | |
| *** dguerri is now known as dguerri_ | 10:58 | |
| *** aix has quit IRC | 11:00 | |
| kairat_kushaev | morganfainberg: Hello! I would like to know if you have some plans about it: https://blueprints.launchpad.net/oslo-incubator/+spec/oslo-cache-using-dogpile? | 11:05 |
| kairat_kushaev | morganfainberg: I planned to implement some caching mechanism in heat but it seems to be redundant work cause oslo.cache is planning for this. | 11:06 |
| *** fhubik_afk is now known as fhubik | 11:13 | |
| *** fhubik is now known as fhubik_afk | 11:16 | |
| *** iurygregory has joined #openstack-keystone | 11:23 | |
| *** jistr has quit IRC | 11:34 | |
| *** jistr has joined #openstack-keystone | 11:35 | |
| *** dguerri_ is now known as dguerri | 11:37 | |
| *** dguerri is now known as dguerri_ | 11:37 | |
| *** dguerri_ is now known as dguerri | 11:42 | |
| marekd | bigjools: Line 43 | 12:00 |
| *** lhcheng has joined #openstack-keystone | 12:01 | |
| *** ChanServ sets mode: +v lhcheng | 12:01 | |
| marekd | bigjools: i was reffereing to line 43 (and that's why i put comment on line 43) | 12:01 |
| marekd | bigjools: i my nuderstandind is that there should be /v3/OS-FEDERATION/websso/{protocol} instead of /v3/OS-FEDERATION/identity_providers/[...] | 12:01 |
| *** lhcheng has quit IRC | 12:05 | |
| ccard | I am running keystone (and horizon) as wsgi apps under Apache (OpenStack juno). I am using the keystone v3 api, in order to support multiple domains, the Default domain is using the sql backend, and a users domain which is using an LDAP backend. I can login to horizon successfully as admin in the Default domain and create a project in the users domain with one of the LDAP users assigned to it. But when I try to login to horizon as the LDAP user I | 12:09 |
| ccard | get the error "Unable to authenticate to any available projects" and I see in the apache log for keystone '"POST /v3/auth/tokens HTTP/1.1" 500 531 "-" "python-keystoneclient"' | 12:09 |
| ccard | However, I can't see any errors anywhere in the keystone log. | 12:09 |
| ccard | keystone, horizon and neutron are configured to use https | 12:10 |
| ccard | Before neutron was configured to use https I'm sure that everything worked, but I don't see how changing neutron to https would cause this problem. | 12:11 |
| *** aix has joined #openstack-keystone | 12:12 | |
| ccard | Any ideas where to look or debug logging to turn on to find why the POST to keystone v3 is returning HTTP 500? | 12:12 |
| *** fhubik_afk is now known as fhubik | 12:17 | |
| *** mestery has joined #openstack-keystone | 12:27 | |
| *** pnavarro has joined #openstack-keystone | 12:29 | |
| *** fhubik is now known as fhubik_afk | 12:36 | |
| *** Ephur has quit IRC | 12:40 | |
| *** dhague has quit IRC | 12:42 | |
| *** dguerri is now known as dguerri_ | 12:52 | |
| *** dhague has joined #openstack-keystone | 12:55 | |
| *** fhubik_afk is now known as fhubik | 12:58 | |
| *** markvoelker has joined #openstack-keystone | 13:08 | |
| *** mattfarina has joined #openstack-keystone | 13:18 | |
| *** dguerri_ is now known as dguerri | 13:20 | |
| *** fhubik is now known as fhubik_afk | 13:22 | |
| *** fhubik_afk is now known as fhubik | 13:25 | |
| *** fhubik has quit IRC | 13:26 | |
| *** fhubik has joined #openstack-keystone | 13:27 | |
| *** fhubik_afk has joined #openstack-keystone | 13:28 | |
| *** mestery has quit IRC | 13:33 | |
| *** fhubik_afk has quit IRC | 13:36 | |
| *** fhubik has quit IRC | 13:36 | |
| *** fhubik has joined #openstack-keystone | 13:36 | |
| *** topol has joined #openstack-keystone | 13:46 | |
| *** ChanServ sets mode: +v topol | 13:46 | |
| *** richm has joined #openstack-keystone | 13:50 | |
| *** markvoelker has quit IRC | 14:04 | |
| *** dguerri is now known as dguerri_ | 14:16 | |
| *** topol has quit IRC | 14:17 | |
| *** dguerri_ is now known as dguerri | 14:18 | |
| *** Guest66477 has joined #openstack-keystone | 14:22 | |
| *** ChanServ sets mode: +v Guest66477 | 14:22 | |
| ccard | My problem goes away if I change the cinder endpoints in keystone.endpoint to have IP addresses instead of fully-qualified host names. | 14:22 |
| ccard | As far as I understand it, cinder itself shouldn't be involved in logging in, so I'm wondering if the size of the data in the keystone.endpoint table is breaking something. | 14:23 |
| openstackgerrit | Nikita Konovalov proposed openstack/python-keystoneclient: Fix logging of binray contentent in request https://review.openstack.org/183514 | 14:27 |
| ccard | How does the service catalog get from the keystone db to the keystoneclient? | 14:30 |
| *** fhubik is now known as fhubik_afk | 14:37 | |
| *** dguerri is now known as dguerri_ | 14:45 | |
| *** pnavarro has quit IRC | 14:47 | |
| *** fhubik_afk is now known as fhubik | 14:49 | |
| *** dguerri_ is now known as dguerri | 14:50 | |
| *** Guest66477 has quit IRC | 14:55 | |
| *** lhcheng has joined #openstack-keystone | 14:56 | |
| *** ChanServ sets mode: +v lhcheng | 14:56 | |
| *** e0ne has joined #openstack-keystone | 14:59 | |
| *** mabrams has quit IRC | 15:00 | |
| *** lhcheng has quit IRC | 15:01 | |
| *** mflobo has joined #openstack-keystone | 15:02 | |
| *** links has quit IRC | 15:05 | |
| *** nkinder has joined #openstack-keystone | 15:10 | |
| *** e0ne has quit IRC | 15:15 | |
| *** jorge_munoz has joined #openstack-keystone | 15:24 | |
| ccard | The cut-off point seems to be length(token.extra) around 14280 - does that ring any bells? | 15:25 |
| *** mflobo has quit IRC | 15:32 | |
| *** david8hu has quit IRC | 15:40 | |
| *** fhubik has quit IRC | 15:40 | |
| *** david8hu has joined #openstack-keystone | 15:41 | |
| *** nkinder has quit IRC | 15:41 | |
| *** afazekas has quit IRC | 16:07 | |
| *** jistr has quit IRC | 16:17 | |
| ccard | I can reproduce the issue with a curl request: http://pastebin.com/A4B0Judi | 16:21 |
| ccard | This is what happens if I increase the size of the auth token by replacing IP addresses with fully-qualified host names. | 16:22 |
| ccard | If I decrease the size of the auth token by replacing host names by IP addresses in the keystone.endpoint table, the curl request works and returns the correct data. | 16:23 |
| *** rwsu has joined #openstack-keystone | 16:35 | |
| ericksonsantos | ccard, are you using cookies? | 16:40 |
| ericksonsantos | ccard, I'd some problems with keystone v3 in horizon and solved using Memcached instead of cookies. | 16:42 |
| *** ericksonsantos has quit IRC | 16:42 | |
| *** gokrokve_ has joined #openstack-keystone | 16:45 | |
| *** ericksonsantos has joined #openstack-keystone | 16:47 | |
| *** gokrokve has quit IRC | 16:49 | |
| *** kiran-r has joined #openstack-keystone | 16:51 | |
| *** kiran-r has quit IRC | 16:52 | |
| *** nicodemos has joined #openstack-keystone | 16:54 | |
| *** lufix has quit IRC | 17:05 | |
| *** blewis has joined #openstack-keystone | 17:17 | |
| *** iurygregory has quit IRC | 17:53 | |
| *** dhague has quit IRC | 17:56 | |
| *** aix has quit IRC | 17:59 | |
| *** gokrokve has joined #openstack-keystone | 18:02 | |
| *** gokrokve_ has quit IRC | 18:05 | |
| *** gokrokve has quit IRC | 18:07 | |
| *** lufix_ has joined #openstack-keystone | 18:10 | |
| *** dolphm changes topic to "Expect this channel to be very quiet - everyone is at the OpenStack design summit this week! https://www.openstack.org/summit/" | 18:12 | |
| *** lhcheng has joined #openstack-keystone | 18:12 | |
| *** ChanServ sets mode: +v lhcheng | 18:12 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:18 | |
| *** iurygregory has joined #openstack-keystone | 18:23 | |
| *** mattamizer has joined #openstack-keystone | 18:24 | |
| *** lhcheng has quit IRC | 18:29 | |
| *** radez_g0n3 is now known as radez | 18:32 | |
| *** mattamizer has quit IRC | 18:34 | |
| *** adam_g has joined #openstack-keystone | 18:37 | |
| *** adam_g has quit IRC | 18:37 | |
| *** adam_g has joined #openstack-keystone | 18:37 | |
| *** Bjoern___ has joined #openstack-keystone | 18:38 | |
| *** Bjoern___ is now known as BjoernT | 18:38 | |
| openstackgerrit | amar krishna proposed openstack/python-keystoneclient: Cinder client does not expose error details https://review.openstack.org/183783 | 18:42 |
| *** jaosorior has joined #openstack-keystone | 18:51 | |
| *** spandhe has joined #openstack-keystone | 18:52 | |
| *** BjoernT has left #openstack-keystone | 18:57 | |
| *** edmondsw has joined #openstack-keystone | 19:12 | |
| *** spandhe has quit IRC | 19:16 | |
| *** dc has joined #openstack-keystone | 19:38 | |
| *** djc_ has joined #openstack-keystone | 19:39 | |
| djc_ | Getting a message from /var/log/keystone/keystone.log "2015-05-18 14:16:47.372 6952 INFO eventlet.wsgi.server [-] 127.0.0.1 - - [18/May/2015 14:16:47] "GET /v2.0/tokens/revoked HTTP/1.1" 200 815 0.037649". Is this a message I should be worried about? | 19:40 |
| iurygregory | djc_, what action you are performing? | 19:43 |
| djc_ | iurygregory: I have openstack swift. just doing a swift --insecure stat and seeing that message in keystone.log. I have an haproxy in front of two openstack swift proxy servers. The keystone servers are also on the proxy servers using keystone galera on the backend. | 19:45 |
| djc_ | swift is still operating correctly but I get that odd keystone message in the logs. | 19:46 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 19:47 | |
| iurygregory | well, i've some problems when using haproxy + galera to perform high availability with OpenStack, the requests sometimes were not executed given error 500 | 19:49 |
| djc_ | If I point the client directly to the proxy, I don't get that error message in the keystone logs. | 19:49 |
| iurygregory | your swift endpoint is correct? | 19:50 |
| iurygregory | when i was using haproxy the VIP make a headache | 19:51 |
| djc_ | iurygregory: yes. the swift stat works. I run swift stat ten times and on the tenth time I get the revoked message but it doesn't stop swift from running the command. | 19:51 |
| djc_ | iurygregory: is there a haproxy setting that you have found that resolves that problem? | 19:51 |
| iurygregory | know i don't remeber much, but i'll talk to my friend and i can ask him about how we have solved the problem with haproxy | 19:53 |
| iurygregory | =) | 19:53 |
| djc_ | iurygregory: thanks | 19:53 |
| iurygregory | tomorrow i can send a update here in the channel | 19:54 |
| djc_ | iurygregory: How would I get the update? | 19:54 |
| iurygregory | log here in the channel, when i'm working i stay logged | 19:56 |
| *** jms has joined #openstack-keystone | 19:58 | |
| jms | Would anyone know anything about this error: "Authorization failed. The request you have made requires authentication. from w.x.y.z" ... Is the from IP where the request came from? I'm guessing so, but... I don't know what would be making the request of 'POST /tokens?' from the controller itself that it wouldn't be authorized. :/ | 20:01 |
| *** iamjarvo has joined #openstack-keystone | 20:01 | |
| iurygregory | jms, you are trying to request a token using curl? | 20:03 |
| *** radez is now known as radez_g0n3 | 20:07 | |
| jms | iurygregory: No, I'm not requesting anything. This is popping up at random intervals from, I'm guessing, the cinder, etc... helper scripts that run. | 20:12 |
| jms | I'm just trying to trace _where_ it's comming from to see if that leads me to find why I'm getting an error I'm getting. | 20:13 |
| iurygregory | i think that in your script you try to make a api request but you are not authenticated or you don't have the privilages | 20:14 |
| iurygregory | if the script request many things, it will be hard to find out | 20:15 |
| jms | Would the IP be where the request is coming from? | 20:15 |
| jms | If so, then yeah, it'll be interesting as that's the actually keystone host itself (packstack allinone install just to get a semi-working OS instance up). :/ | 20:17 |
| iurygregory | i think w.x.y.z is the address where you have send the request | 20:18 |
| iurygregory | if is the same ip for you controller | 20:19 |
| iurygregory | you can see the endpoints in keystone | 20:19 |
| iurygregory | maybe your endpoint is with localhost or a hostname, and your /etc/hosts does't map w.x.y.z to the hostname in the endpoint | 20:20 |
| jms | Everything looks good on endpoint-list ... | 20:23 |
| jms | But, would I need to add in another endpoint for a second cinder service? | 20:24 |
| *** gokrokve has joined #openstack-keystone | 20:28 | |
| *** Ephur has joined #openstack-keystone | 20:36 | |
| *** lufix_ has quit IRC | 20:42 | |
| *** Ephur has quit IRC | 21:00 | |
| *** mattfarina has quit IRC | 21:07 | |
| *** gokrokve_ has joined #openstack-keystone | 21:09 | |
| mfisch | dolphm: lbragstad: how long is your frenet session? I dont see it on the schedule | 21:11 |
| *** gokrokve has quit IRC | 21:12 | |
| *** jms has quit IRC | 21:13 | |
| *** gokrokve_ has quit IRC | 21:14 | |
| *** david-lyle has joined #openstack-keystone | 21:19 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 21:25 | |
| *** david-lyle has quit IRC | 21:36 | |
| *** iamjarvo has quit IRC | 21:38 | |
| *** iamjarvo has joined #openstack-keystone | 21:41 | |
| *** iamjarvo has quit IRC | 21:45 | |
| *** djc_ has quit IRC | 21:45 | |
| *** mattfarina has joined #openstack-keystone | 21:45 | |
| *** mattfarina has quit IRC | 21:46 | |
| bigjools | marekd: *both* of those URLs should be present, and that's why I altered the docs. | 21:47 |
| *** lhcheng has joined #openstack-keystone | 21:49 | |
| *** ChanServ sets mode: +v lhcheng | 21:49 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:52 | |
| *** blewis has quit IRC | 21:55 | |
| *** e0ne has joined #openstack-keystone | 21:59 | |
| *** jamielennox is now known as jamielennox|away | 22:05 | |
| *** spandhe has joined #openstack-keystone | 22:11 | |
| *** e0ne has quit IRC | 22:25 | |
| *** lhcheng has quit IRC | 22:25 | |
| *** e0ne has joined #openstack-keystone | 22:26 | |
| *** e0ne has quit IRC | 22:27 | |
| *** spandhe has quit IRC | 22:30 | |
| *** spandhe has joined #openstack-keystone | 22:32 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 22:44 | |
| *** spandhe has quit IRC | 22:44 | |
| *** spandhe has joined #openstack-keystone | 22:48 | |
| *** edmondsw has quit IRC | 22:56 | |
| *** spandhe_ has joined #openstack-keystone | 23:05 | |
| *** toddnni_ has joined #openstack-keystone | 23:05 | |
| *** toddnni has quit IRC | 23:06 | |
| *** toddnni_ is now known as toddnni | 23:06 | |
| *** spandhe has quit IRC | 23:06 | |
| *** spandhe_ is now known as spandhe | 23:06 | |
| *** chlong has joined #openstack-keystone | 23:10 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 23:15 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 23:20 | |
| *** spandhe has quit IRC | 23:26 | |
| *** gokrokve has joined #openstack-keystone | 23:32 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!