| *** browne has joined #openstack-keystone | 00:02 | |
| *** jecarey has quit IRC | 00:12 | |
| *** darrenc is now known as darrenc_afk | 00:14 | |
| *** dims has quit IRC | 00:21 | |
| *** dims has joined #openstack-keystone | 00:22 | |
| *** shaleh has quit IRC | 00:25 | |
| *** _cjones_ has quit IRC | 00:26 | |
| *** darrenc_afk is now known as darrenc | 00:26 | |
| *** _cjones_ has joined #openstack-keystone | 00:26 | |
| *** dims has quit IRC | 00:26 | |
| *** jamielennox is now known as jamielennox|away | 00:29 | |
| *** _cjones_ has quit IRC | 00:30 | |
| *** richm has quit IRC | 00:34 | |
| *** jamielennox|away is now known as jamielennox | 00:39 | |
| *** jkomg has joined #openstack-keystone | 00:40 | |
| *** r-daneel has quit IRC | 00:40 | |
| *** ankita_wagh has quit IRC | 00:42 | |
| *** jkomg has quit IRC | 00:45 | |
| *** rdo has quit IRC | 00:58 | |
| *** jasonsb has quit IRC | 00:58 | |
| *** piyanai has joined #openstack-keystone | 01:00 | |
| *** rdo has joined #openstack-keystone | 01:05 | |
| *** btully has quit IRC | 01:10 | |
| *** jinsong has quit IRC | 01:12 | |
| *** LukeHinds has quit IRC | 01:12 | |
| *** dguerri` is now known as dguerri | 01:29 | |
| *** bitblt has quit IRC | 01:45 | |
| *** ankita_wagh has joined #openstack-keystone | 01:45 | |
| *** vilobhmm has quit IRC | 01:45 | |
| *** spandhe has quit IRC | 01:48 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 01:49 | |
| *** fangzhou has quit IRC | 02:04 | |
| *** crinkle has quit IRC | 02:08 | |
| *** crinkle has joined #openstack-keystone | 02:16 | |
| *** dguerri is now known as dguerri` | 02:17 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 02:17 | |
| *** vilobhmm has joined #openstack-keystone | 02:19 | |
| *** annasort has joined #openstack-keystone | 02:20 | |
| *** dguerri` is now known as dguerri | 02:22 | |
| *** jsavak has joined #openstack-keystone | 02:24 | |
| *** dguerri is now known as dguerri` | 02:25 | |
| *** gyee has quit IRC | 02:28 | |
| *** dguerri` is now known as dguerri | 02:30 | |
| *** vilobhmm has quit IRC | 02:33 | |
| *** vilobhmm has joined #openstack-keystone | 02:33 | |
| *** dguerri is now known as dguerri` | 02:34 | |
| *** r-daneel has joined #openstack-keystone | 02:35 | |
| *** lhcheng has quit IRC | 02:35 | |
| *** stevemar has joined #openstack-keystone | 02:40 | |
| *** hakimo has joined #openstack-keystone | 02:52 | |
| *** hakimo_ has quit IRC | 02:54 | |
| *** r-daneel has quit IRC | 02:55 | |
| *** jsavak has quit IRC | 03:02 | |
| *** spandhe has joined #openstack-keystone | 03:06 | |
| *** davechen has joined #openstack-keystone | 03:07 | |
| *** lhcheng has joined #openstack-keystone | 03:09 | |
| *** ChanServ sets mode: +v lhcheng | 03:09 | |
| *** spandhe has quit IRC | 03:10 | |
| *** spandhe_ has joined #openstack-keystone | 03:10 | |
| *** jdandrea has quit IRC | 03:16 | |
| *** crc32 has joined #openstack-keystone | 03:21 | |
| *** jamielennox is now known as jamielennox|away | 03:22 | |
| openstackgerrit | Merged openstack/keystone: Fix the invalid testcase https://review.openstack.org/198629 | 03:30 |
|---|---|---|
| *** jamielennox|away is now known as jamielennox | 03:31 | |
| *** piyanai has quit IRC | 03:34 | |
| *** piyanai has joined #openstack-keystone | 03:34 | |
| *** Kennan2 has joined #openstack-keystone | 03:35 | |
| *** Kennan has quit IRC | 03:36 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Endpoint_ID from URL https://review.openstack.org/199844 | 03:36 |
| *** dims has joined #openstack-keystone | 03:45 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Endpoint_ID from URL https://review.openstack.org/199844 | 03:46 |
| *** dims_ has joined #openstack-keystone | 03:46 | |
| *** dims_ has quit IRC | 03:46 | |
| *** dims_ has joined #openstack-keystone | 03:46 | |
| *** piyanai has quit IRC | 03:47 | |
| *** dims has quit IRC | 03:49 | |
| *** kiran-r has joined #openstack-keystone | 03:51 | |
| *** ayoung has quit IRC | 03:59 | |
| *** piyanai has joined #openstack-keystone | 04:05 | |
| *** markvoelker has quit IRC | 04:08 | |
| *** dims_ has quit IRC | 04:14 | |
| *** dims has joined #openstack-keystone | 04:15 | |
| *** dims has quit IRC | 04:20 | |
| *** kiran-r has quit IRC | 04:25 | |
| *** davechen has quit IRC | 04:28 | |
| *** vilobhmm has quit IRC | 04:30 | |
| *** vilobhmm has joined #openstack-keystone | 04:34 | |
| *** piyanai has quit IRC | 04:37 | |
| *** woodster_ has quit IRC | 04:41 | |
| openstackgerrit | Merged openstack/keystone: Catch exception.Unauthorized when checking for admin https://review.openstack.org/198071 | 04:42 |
| *** jasonsb has joined #openstack-keystone | 04:53 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Fixes docstring to make it more precise https://review.openstack.org/199338 | 05:00 |
| *** dims has joined #openstack-keystone | 05:01 | |
| *** btully has joined #openstack-keystone | 05:01 | |
| *** dims_ has joined #openstack-keystone | 05:02 | |
| *** arunkant_ has quit IRC | 05:02 | |
| *** dims has quit IRC | 05:06 | |
| *** chenhong has joined #openstack-keystone | 05:08 | |
| *** dims_ has quit IRC | 05:14 | |
| *** davechen has joined #openstack-keystone | 05:17 | |
| *** stevemar has quit IRC | 05:22 | |
| *** mabrams has joined #openstack-keystone | 05:22 | |
| *** davechen1 has joined #openstack-keystone | 05:27 | |
| *** davechen has quit IRC | 05:29 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Fix the incorrect format for docstring https://review.openstack.org/199867 | 05:40 |
| openstackgerrit | Dave Chen proposed openstack/keystone: Fix the incorrect format of docstring https://review.openstack.org/199867 | 05:41 |
| *** vilobhmm has quit IRC | 05:49 | |
| *** ig0r_ has joined #openstack-keystone | 05:51 | |
| *** ig0r__ has quit IRC | 05:55 | |
| *** markvoelker has joined #openstack-keystone | 06:00 | |
| *** Kennan2 has quit IRC | 06:02 | |
| *** jsavak has joined #openstack-keystone | 06:02 | |
| *** Kennan has joined #openstack-keystone | 06:03 | |
| *** markvoelker has quit IRC | 06:04 | |
| *** jsavak has quit IRC | 06:07 | |
| *** henrynash has joined #openstack-keystone | 06:08 | |
| *** ChanServ sets mode: +v henrynash | 06:08 | |
| *** afazekas has joined #openstack-keystone | 06:08 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/199886 | 06:09 |
| *** aix has joined #openstack-keystone | 06:09 | |
| *** ajayaa has joined #openstack-keystone | 06:12 | |
| *** dims has joined #openstack-keystone | 06:15 | |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware: Send the correct user-agent to Keystone https://review.openstack.org/180769 | 06:18 |
| *** kiran-r has joined #openstack-keystone | 06:19 | |
| *** dims has quit IRC | 06:20 | |
| *** josecastroleon has quit IRC | 06:22 | |
| *** crc32 has quit IRC | 06:23 | |
| *** navid__ has quit IRC | 06:37 | |
| *** dguerri` is now known as dguerri | 06:40 | |
| *** hakimo has quit IRC | 06:40 | |
| *** lufix2 has joined #openstack-keystone | 06:42 | |
| *** dguerri is now known as dguerri` | 06:46 | |
| *** _kiran_ has joined #openstack-keystone | 06:48 | |
| *** christx2 has joined #openstack-keystone | 06:50 | |
| *** henrynash has quit IRC | 06:50 | |
| *** kiran-r has quit IRC | 06:51 | |
| *** fhubik has joined #openstack-keystone | 06:51 | |
| *** fhubik is now known as fhubik_afk | 06:52 | |
| *** christx2 has quit IRC | 06:52 | |
| *** christx2 has joined #openstack-keystone | 06:52 | |
| *** lhcheng has quit IRC | 06:52 | |
| *** henrynash has joined #openstack-keystone | 06:55 | |
| *** ChanServ sets mode: +v henrynash | 06:55 | |
| *** mflobo1 has joined #openstack-keystone | 06:56 | |
| *** fhubik_afk is now known as fhubik | 06:57 | |
| *** spandhe_ has quit IRC | 07:07 | |
| *** _kiran_ has quit IRC | 07:08 | |
| *** christx2 has quit IRC | 07:09 | |
| *** fhubik has quit IRC | 07:11 | |
| *** fhubik has joined #openstack-keystone | 07:12 | |
| *** fhubik_afk has joined #openstack-keystone | 07:13 | |
| *** hrou has quit IRC | 07:13 | |
| *** belmoreira has joined #openstack-keystone | 07:15 | |
| *** fhubik_afk has quit IRC | 07:15 | |
| *** fhubik has quit IRC | 07:16 | |
| *** tobe has joined #openstack-keystone | 07:18 | |
| *** fhubik has joined #openstack-keystone | 07:19 | |
| *** fhubik has quit IRC | 07:19 | |
| *** fhubik has joined #openstack-keystone | 07:20 | |
| *** fhubik_afk has joined #openstack-keystone | 07:20 | |
| *** belmoreira has quit IRC | 07:21 | |
| *** g2` has quit IRC | 07:21 | |
| *** krykowski has joined #openstack-keystone | 07:28 | |
| *** belmoreira has joined #openstack-keystone | 07:28 | |
| *** mflobo1 has quit IRC | 07:35 | |
| *** stevemar has joined #openstack-keystone | 07:37 | |
| *** mflobo1 has joined #openstack-keystone | 07:40 | |
| *** stevemar has quit IRC | 07:40 | |
| breton | morning | 07:41 |
| *** btully has quit IRC | 07:43 | |
| *** lhcheng has joined #openstack-keystone | 07:44 | |
| *** ChanServ sets mode: +v lhcheng | 07:44 | |
| *** ankita_wagh has quit IRC | 07:44 | |
| *** bdossant has joined #openstack-keystone | 07:53 | |
| *** krykowski has quit IRC | 07:54 | |
| *** jaosorior has joined #openstack-keystone | 07:55 | |
| *** mflobo1 has left #openstack-keystone | 07:56 | |
| *** krykowski_ has joined #openstack-keystone | 07:57 | |
| *** LukeHinds has joined #openstack-keystone | 07:59 | |
| *** bdossant_ has joined #openstack-keystone | 08:00 | |
| *** bdossant has quit IRC | 08:01 | |
| *** markvoelker has joined #openstack-keystone | 08:01 | |
| *** krykowski_ has quit IRC | 08:03 | |
| *** markvoelker has quit IRC | 08:06 | |
| *** jistr has joined #openstack-keystone | 08:09 | |
| *** gordc has joined #openstack-keystone | 08:13 | |
| *** dims has joined #openstack-keystone | 08:16 | |
| *** dims has quit IRC | 08:21 | |
| *** browne has quit IRC | 08:25 | |
| *** amaretskiy has joined #openstack-keystone | 08:27 | |
| *** mflobo1 has joined #openstack-keystone | 08:29 | |
| *** mflobo1 has left #openstack-keystone | 08:29 | |
| *** btully has joined #openstack-keystone | 08:29 | |
| *** mflobo1 has joined #openstack-keystone | 08:30 | |
| *** mflobo1 has left #openstack-keystone | 08:31 | |
| *** bdossant_ has quit IRC | 08:33 | |
| *** btully has quit IRC | 08:34 | |
| *** bdossant has joined #openstack-keystone | 08:46 | |
| *** kiran-r has joined #openstack-keystone | 08:49 | |
| *** krykowski has joined #openstack-keystone | 08:55 | |
| *** chenhong has quit IRC | 08:59 | |
| breton | henrynash: ping | 09:08 |
| amaretskiy | hi all, please review my https://review.openstack.org/#/c/188457/ | 09:09 |
| *** bdossant has quit IRC | 09:11 | |
| *** mflobo1 has joined #openstack-keystone | 09:23 | |
| *** fhubik_lunch has joined #openstack-keystone | 09:26 | |
| *** fhubik_meeting has joined #openstack-keystone | 09:26 | |
| *** fhubik_meeting has quit IRC | 09:27 | |
| *** mflobo1 has quit IRC | 09:27 | |
| *** e0ne has joined #openstack-keystone | 09:28 | |
| *** marzif_ has joined #openstack-keystone | 09:29 | |
| *** fhubik_afk has quit IRC | 09:30 | |
| *** fhubik has quit IRC | 09:30 | |
| *** christx2 has joined #openstack-keystone | 09:36 | |
| *** lhcheng has quit IRC | 09:36 | |
| *** mflobo1 has joined #openstack-keystone | 09:44 | |
| *** bdossant has joined #openstack-keystone | 09:46 | |
| *** marzif_ has quit IRC | 09:47 | |
| *** fhubik_lunch has quit IRC | 09:51 | |
| *** fhubik has joined #openstack-keystone | 09:52 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Give some message when an invalid token is in use https://review.openstack.org/199989 | 09:54 |
| *** davechen1 has left #openstack-keystone | 09:54 | |
| *** markvoelker has joined #openstack-keystone | 10:02 | |
| *** mflobo1 has left #openstack-keystone | 10:05 | |
| *** markvoelker has quit IRC | 10:06 | |
| *** henrynash has quit IRC | 10:13 | |
| *** bdossant has quit IRC | 10:13 | |
| *** henrynash has joined #openstack-keystone | 10:16 | |
| *** ChanServ sets mode: +v henrynash | 10:16 | |
| *** dims has joined #openstack-keystone | 10:17 | |
| *** fhubik is now known as fhubik_afk | 10:18 | |
| *** henrynash_ has joined #openstack-keystone | 10:20 | |
| *** ChanServ sets mode: +v henrynash_ | 10:20 | |
| *** dims has quit IRC | 10:21 | |
| *** henrynash has quit IRC | 10:22 | |
| *** henrynash_ is now known as henrynash | 10:22 | |
| *** e0ne is now known as e0ne_ | 10:24 | |
| *** e0ne_ is now known as e0ne | 10:31 | |
| *** henrynash has quit IRC | 10:31 | |
| *** LukeHinds has quit IRC | 10:32 | |
| *** henrynash has joined #openstack-keystone | 10:39 | |
| *** ChanServ sets mode: +v henrynash | 10:39 | |
| *** fhubik_afk is now known as fhubik | 10:43 | |
| *** e0ne is now known as e0ne_ | 10:51 | |
| *** arunkant_ has joined #openstack-keystone | 10:59 | |
| openstackgerrit | David Charles Kennedy proposed openstack/keystone: Move endpoint catalog filtering to default driver https://review.openstack.org/167675 | 11:02 |
| openstackgerrit | David Charles Kennedy proposed openstack/keystone: Remove services with no endpoints from catalog https://review.openstack.org/176383 | 11:02 |
| *** fhubik is now known as fhubik_afk | 11:03 | |
| *** piyanai has joined #openstack-keystone | 11:06 | |
| *** arunkant_ has quit IRC | 11:08 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Improve List Role Assignments Filters Performance https://review.openstack.org/137202 | 11:10 |
| openstackgerrit | henry-nash proposed openstack/keystone: Add support for data-driven backend assignment testing https://review.openstack.org/149178 | 11:12 |
| *** henrynash has quit IRC | 11:13 | |
| *** arunkant has joined #openstack-keystone | 11:18 | |
| *** arunkant has quit IRC | 11:24 | |
| *** markvoelker has joined #openstack-keystone | 11:33 | |
| *** markvoelker has quit IRC | 11:37 | |
| *** fhubik_afk is now known as fhubik | 11:37 | |
| *** tobe has quit IRC | 11:48 | |
| *** bdossant has joined #openstack-keystone | 11:48 | |
| *** e0ne_ is now known as e0ne | 11:50 | |
| *** chenhong has joined #openstack-keystone | 12:00 | |
| *** e0ne is now known as e0ne_ | 12:02 | |
| *** e0ne_ is now known as e0ne | 12:09 | |
| *** markvoelker has joined #openstack-keystone | 12:12 | |
| *** iurygregory has joined #openstack-keystone | 12:15 | |
| *** dims has joined #openstack-keystone | 12:17 | |
| *** henrynash has joined #openstack-keystone | 12:19 | |
| *** ChanServ sets mode: +v henrynash | 12:19 | |
| *** bjornar has quit IRC | 12:21 | |
| *** dims has quit IRC | 12:22 | |
| *** bknudson has quit IRC | 12:26 | |
| *** amaretskiy has quit IRC | 12:29 | |
| *** viktors has quit IRC | 12:31 | |
| *** e0ne has quit IRC | 12:32 | |
| *** bjornar has joined #openstack-keystone | 12:35 | |
| *** fhubik is now known as fhubik_afk | 12:36 | |
| *** edmondsw has joined #openstack-keystone | 12:37 | |
| *** ajayaa has quit IRC | 12:38 | |
| *** dims has joined #openstack-keystone | 12:40 | |
| *** piyanai has quit IRC | 12:41 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Add support for effective & inherited mode in data driven tests https://review.openstack.org/151623 | 12:42 |
| *** bknudson has joined #openstack-keystone | 12:42 | |
| *** ChanServ sets mode: +v bknudson | 12:42 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Fix the incorrect format for docstring https://review.openstack.org/199867 | 12:43 |
| *** pserebryakov has joined #openstack-keystone | 12:48 | |
| *** chenhong has quit IRC | 12:49 | |
| *** fhubik_afk is now known as fhubik | 12:51 | |
| *** amaretskiy has joined #openstack-keystone | 12:54 | |
| *** hrou has joined #openstack-keystone | 12:56 | |
| *** e0ne has joined #openstack-keystone | 13:00 | |
| *** viktors has joined #openstack-keystone | 13:05 | |
| *** lufix3 has joined #openstack-keystone | 13:05 | |
| *** lufix2 has quit IRC | 13:06 | |
| *** stevemar has joined #openstack-keystone | 13:06 | |
| *** radez_g0n3 is now known as radez | 13:08 | |
| *** jsavak has joined #openstack-keystone | 13:08 | |
| *** mylu has joined #openstack-keystone | 13:20 | |
| *** piyanai has joined #openstack-keystone | 13:22 | |
| *** arunkant has joined #openstack-keystone | 13:23 | |
| *** richm has joined #openstack-keystone | 13:23 | |
| *** mflobo1 has joined #openstack-keystone | 13:24 | |
| *** mflobo1 has left #openstack-keystone | 13:24 | |
| *** ayoung has joined #openstack-keystone | 13:26 | |
| *** ChanServ sets mode: +v ayoung | 13:26 | |
| *** stevemar has quit IRC | 13:26 | |
| *** stevemar has joined #openstack-keystone | 13:26 | |
| openstackgerrit | Henrique Truta proposed openstack/python-keystoneclient: Add is_domain field to v3 token https://review.openstack.org/198062 | 13:28 |
| *** edmondsw has quit IRC | 13:28 | |
| *** bdossant_ has joined #openstack-keystone | 13:30 | |
| *** arunkant_ has joined #openstack-keystone | 13:31 | |
| *** bdossant has quit IRC | 13:32 | |
| *** piyanai has quit IRC | 13:33 | |
| *** stevemar has quit IRC | 13:33 | |
| *** ajayaa has joined #openstack-keystone | 13:33 | |
| *** arunkant has quit IRC | 13:35 | |
| *** TheIntern has joined #openstack-keystone | 13:42 | |
| odyssey4me | whoops, this is pretty bad: https://bugs.launchpad.net/keystone/+bug/1470635 | 13:43 |
| openstack | Launchpad bug 1470635 in puppet-keystone "endpoints added with v3 are not visible with v2" [High,Confirmed] | 13:43 |
| *** jdandrea has joined #openstack-keystone | 13:43 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:47 | |
| openstackgerrit | Henrique Truta proposed openstack/keystonemiddleware: WIP: Handling is_domain token attribute from keystone https://review.openstack.org/198076 | 13:53 |
| *** henrynash has quit IRC | 13:53 | |
| *** bdossant_ has quit IRC | 13:55 | |
| *** btully has joined #openstack-keystone | 13:56 | |
| *** chenhong has joined #openstack-keystone | 13:57 | |
| *** haypo has joined #openstack-keystone | 13:58 | |
| *** kiran-r has quit IRC | 13:58 | |
| *** bdossant has joined #openstack-keystone | 13:58 | |
| haypo | hi. FYI i just proposed the patch "Make gate-keystone-python34 voting and add gate" https://review.openstack.org/#/c/200092/ | 13:58 |
| *** pserebryakov has quit IRC | 14:00 | |
| *** Mzoo__ has joined #openstack-keystone | 14:00 | |
| *** Kennan2 has joined #openstack-keystone | 14:03 | |
| *** Kennan has quit IRC | 14:04 | |
| *** edmondsw has joined #openstack-keystone | 14:09 | |
| *** chenhong has quit IRC | 14:11 | |
| *** browne has joined #openstack-keystone | 14:11 | |
| *** chenhong has joined #openstack-keystone | 14:11 | |
| *** amakarov_away is now known as amakarov | 14:15 | |
| *** jsavak has quit IRC | 14:15 | |
| *** chenhong has quit IRC | 14:16 | |
| *** chenhong has joined #openstack-keystone | 14:17 | |
| *** annasort has quit IRC | 14:17 | |
| *** jsavak has joined #openstack-keystone | 14:18 | |
| Mzoo__ | Hi experts. I have an openstack identity unit test question. | 14:20 |
| *** piyanai has joined #openstack-keystone | 14:20 | |
| Mzoo__ | formData = {'action': 'tenants__delete__%s' % project_id} res = self.client.post(INDEX_URL, formData) returns no html response. Does anybody know why? | 14:20 |
| Mzoo__ | After the execution, res value is: Accept-Language, Cookie X-Frame-Options: SAMEORIGIN Content-Type: text/html; charset=utf-8 Location: http://testserver/identity/ Content-Language: en | 14:21 |
| Mzoo__ | But I want to get html elements from the response | 14:21 |
| Mzoo__ | Why tenants__delete__ action returns no body in keystone test unit? | 14:22 |
| *** bdossant has quit IRC | 14:22 | |
| *** piyanai has quit IRC | 14:23 | |
| lbragstad | Mzoo__: delete /tenant returns 204 no content | 14:25 |
| openstackgerrit | Henrique Truta proposed openstack/python-keystoneclient: Add is_domain field to v3 project-scoped token https://review.openstack.org/198062 | 14:25 |
| *** stevemar has joined #openstack-keystone | 14:25 | |
| *** henrynash has joined #openstack-keystone | 14:25 | |
| *** ChanServ sets mode: +v henrynash | 14:25 | |
| lbragstad | Mzoo__: also, keystone supports application/json as a content-type | 14:25 |
| *** stevemar has quit IRC | 14:25 | |
| *** stevemar has joined #openstack-keystone | 14:26 | |
| Mzoo__ | lbragstad: Thanks, but how can I write test unit for deleting tenants(test_delete_tenant)? No body wrote it before, and it needs to be written | 14:26 |
| lbragstad | Mzoo__: you do get a response object back that you can make assertions on | 14:27 |
| Mzoo__ | Yes, but the body is empty. This is my portion of code: formData = {'action': 'tenants__delete__%s' % current_project_id} res = self.client.post(INDEX_URL, formData) | 14:28 |
| lbragstad | Mzoo__: http://cdn.pasteraw.com/tdhes8nm7zafkwpy5hkixiqfhqq27ho | 14:28 |
| lbragstad | Mzoo__: I'm not sure i understand the formData section, are you trying to delete a tenant or create one? | 14:29 |
| Mzoo__ | lbragstad: Thanks, I want to delete tenant. | 14:29 |
| *** bdossant has joined #openstack-keystone | 14:29 | |
| *** piyanai has joined #openstack-keystone | 14:30 | |
| Mzoo__ | lbragstad: I want to get horizon success message after the deletion of tenant. But the response body is empty | 14:30 |
| lbragstad | Mzoo__: then you might want to try using something like self.client.delete instead of a post operation. But I'm not 100% sure since I don't know what your self.client object is | 14:30 |
| *** bdossant has quit IRC | 14:30 | |
| lbragstad | Mzoo__: oh... | 14:30 |
| lbragstad | you're unit testing horizon | 14:30 |
| Mzoo__ | lbragstad: Yes, :) | 14:31 |
| openstackgerrit | Henrique Truta proposed openstack/keystonemiddleware: Handling is_domain token attribute from keystone https://review.openstack.org/198076 | 14:32 |
| lbragstad | Mzoo__: I'd probably drop into their irc channel and run your question by them | 14:32 |
| lbragstad | Mzoo__: #openstack-horizon | 14:32 |
| Mzoo__ | lbragstad: OK, I will got it on that channel | 14:32 |
| Mzoo__ | lbragstad: Are you asking? I can do it if you are busy now? | 14:37 |
| lbragstad | Mzoo__: you can feel free to drop into the #openstack-horizon channel whenever since that's where the horizon folks hang out | 14:38 |
| *** jecarey has joined #openstack-keystone | 14:41 | |
| *** mabrams has quit IRC | 14:41 | |
| *** jsavak has quit IRC | 14:43 | |
| *** bdossant has joined #openstack-keystone | 14:43 | |
| *** jsavak has joined #openstack-keystone | 14:43 | |
| *** dims has quit IRC | 14:45 | |
| openstackgerrit | Henrique Truta proposed openstack/python-keystoneclient: Add is_domain field to v3 project-scoped token https://review.openstack.org/198062 | 14:45 |
| mfisch | morning k-stoners. is there any reason at all to use memcache with fernet tokens? Would it cache token validations? | 14:46 |
| *** dims has joined #openstack-keystone | 14:50 | |
| *** marzif_ has joined #openstack-keystone | 14:53 | |
| *** annasort has joined #openstack-keystone | 14:55 | |
| openstackgerrit | Richard Megginson proposed openstack/keystone: add federation docs for mod_auth_mellon https://review.openstack.org/198083 | 14:58 |
| *** fhubik is now known as fhubik_afk | 15:02 | |
| *** csoukup has joined #openstack-keystone | 15:02 | |
| dstanek | Mzoo__: yeah, talking to horizon will be your best bet :-) | 15:06 |
| *** fhubik_afk is now known as fhubik | 15:06 | |
| *** browne has quit IRC | 15:07 | |
| *** pnavarro has joined #openstack-keystone | 15:10 | |
| *** diazjf has joined #openstack-keystone | 15:13 | |
| *** arunkant__ has joined #openstack-keystone | 15:15 | |
| *** viktors has left #openstack-keystone | 15:16 | |
| *** arunkant has joined #openstack-keystone | 15:17 | |
| *** arunkant_ has quit IRC | 15:18 | |
| *** Mzoo__ has quit IRC | 15:19 | |
| *** arunkant__ has quit IRC | 15:20 | |
| *** haypo has quit IRC | 15:22 | |
| *** jsavak has quit IRC | 15:22 | |
| *** jsavak has joined #openstack-keystone | 15:23 | |
| *** jamielennox is now known as jamielennox|away | 15:23 | |
| samueldmq | ayoung: the oslo.policy code should just be a new function into policy.py code, right ? | 15:29 |
| *** fhubik is now known as fhubik_afk | 15:29 | |
| samueldmq | ayoung: something like def overlay_policy(self, dynamic_policy) | 15:30 |
| *** dims has quit IRC | 15:30 | |
| ayoung | samueldmq, yes, or even a diff in how were create the object | 15:31 |
| ayoung | there is a directory structure. I'd expect that to be read only from nova. | 15:32 |
| *** jamielennox|away is now known as jamielennox | 15:32 | |
| *** dims has joined #openstack-keystone | 15:32 | |
| *** dims has quit IRC | 15:32 | |
| ayoung | and so we need another place to hold dynamic | 15:32 |
| *** e0ne is now known as e0ne_ | 15:32 | |
| *** dims has joined #openstack-keystone | 15:33 | |
| *** lufix3 has quit IRC | 15:33 | |
| samueldmq | ayoung: not sure I follow .. | 15:34 |
| samueldmq | ayoung: i) we get the dynamic policy ii) load the policy from file iii) do the overlay iv) write back to the file | 15:35 |
| ayoung | samueldmq, start with nova/policy.py | 15:35 |
| ayoung | that gets a dir to read the policy files. | 15:35 |
| ayoung | we currently have logic to merge multiple policy files from that dir | 15:36 |
| ayoung | which is...wonly | 15:36 |
| samueldmq | ayoung: every project should be using the policy.py defned in oslo.policy right ? | 15:36 |
| ayoung | samueldmq, yes, but nova has their own they call first | 15:36 |
| samueldmq | ayoung: but I don't understand why I should go to nova first .. they don't even use oslo.policy | 15:37 |
| *** piyanai has quit IRC | 15:37 | |
| samueldmq | ayoung: I see the code in oslo.policy, and individual projects calling it, independently if they have a wrapper policy.py or not | 15:37 |
| samueldmq | ayoung: that's how I see, maybe there is something I am not aware of | 15:37 |
| ayoung | http://git.openstack.org/cgit/openstack/nova/tree/nova/policy.py#n23 | 15:38 |
| ayoung | so that is the first thing: | 15:38 |
| ayoung | still using the incubated version | 15:38 |
| ayoung | but lets say they upgrade to library | 15:38 |
| ayoung | http://git.openstack.org/cgit/openstack/nova/tree/nova/policy.py#n51 create the enforcer | 15:39 |
| ayoung | the oslo code lets it be a directory | 15:39 |
| samueldmq | I thought the overlay_policy call should be somehting called by middleware | 15:40 |
| samueldmq | why do I need to see the enforcement code in services ? | 15:40 |
| ayoung | http://git.openstack.org/cgit/openstack/oslo.policy/tree/oslo_policy/policy.py#n399 | 15:41 |
| ayoung | samueldmq, start by waking through that code | 15:42 |
| ayoung | see how a directory is used if it is there today | 15:42 |
| samueldmq | yeah sure | 15:42 |
| samueldmq | we can have multiple directories | 15:42 |
| samueldmq | we allow that | 15:42 |
| *** piyanai has joined #openstack-keystone | 15:42 | |
| openstackgerrit | David Charles Kennedy proposed openstack/keystone: Remove services with no endpoints from catalog https://review.openstack.org/176383 | 15:43 |
| samueldmq | ayoung: that'd be another class different form Enforcer right ? | 15:45 |
| samueldmq | ayoung: that'd use the same logic for getting to the right policy file in different directories, etc | 15:46 |
| samueldmq | ayoung: is that what you were telling me ? :-) | 15:46 |
| ayoung | samueldmq, Would it? I would think it would be a modification to Enforcer | 15:46 |
| ayoung | right now, it treats all files as equals | 15:46 |
| ayoung | and it iterates through the directory and combines them. How does it combine them now? | 15:47 |
| samueldmq | ayoung: a modification of enforcer would be simpler, though it's not about enforcement, it's a step needed before enforcement, but anyway I agree it can be there | 15:48 |
| ayoung | http://git.openstack.org/cgit/openstack/oslo.policy/tree/oslo_policy/policy.py#n429 | 15:48 |
| *** e0ne_ is now known as e0ne | 15:48 | |
| ayoung | it calls that for each file | 15:48 |
| ayoung | and it sets the rules | 15:48 |
| *** belmoreira has quit IRC | 15:48 | |
| samueldmq | ayoung: so it overrides the already read rules from other files .. | 15:49 |
| ayoung | samueldmq, overwrite vs update. | 15:49 |
| ayoung | I think what we are saying is we want Update | 15:49 |
| ayoung | overwrite is, I think, dump the old. | 15:49 |
| *** fhubik_afk is now known as fhubik | 15:49 | |
| samueldmq | ayoung: if we put the dynamic in the last file and override .. | 15:49 |
| *** fhubik is now known as fhubik_afk | 15:49 | |
| samueldmq | ayoung: hmm . | 15:49 |
| ayoung | exactly | 15:49 |
| ayoung | so it is a file name issue: make sure dynamic gets added last | 15:50 |
| ayoung | and... | 15:50 |
| ayoung | make sure that a new dynamic policy file replaces the old one | 15:50 |
| ayoung | so, what we could do is this: | 15:50 |
| samueldmq | ayoung: just put it in a special file, and read it after doing the for to iterate the others :-) | 15:50 |
| ayoung | start with a blank directory. Copy stock into it. Name it aaaa_stock_policy.json | 15:50 |
| ayoung | then fetch dynamic | 15:51 |
| ayoung | call it | 15:51 |
| ayoung | . Name it zzzz_dynamic_policy.json | 15:51 |
| ayoung | and read the directory in ABC order, with "update" set | 15:51 |
| samueldmq | ayoung: I think this is bad ... putting that as a naming issue .. why don't we modify the code to: | 15:51 |
| samueldmq | ayoung: after doing the for as it does today, read the dynamic policy ? | 15:51 |
| samueldmq | ayoung: instead of tryign to make it override within its existing 'for' statement ? | 15:52 |
| ayoung | samueldmq, this has to be multi-process safe. It needs to be written to a file system | 15:52 |
| ayoung | nova does not even use the oslo.policy with the directoiry yet, but I think dims wrote that code...ask him how it is used. | 15:53 |
| samueldmq | ayoung: yes, and it would | 15:53 |
| ayoung | He'll be at the midcycle next week, so I can also pull him in to the discussion then as well.... | 15:53 |
| *** pnavarro has quit IRC | 15:53 | |
| samueldmq | ayoung: dynamic policy is always written to dynamic-policy.json | 15:54 |
| samueldmq | ayoung: call _load_policy_file in line 402 | 15:54 |
| samueldmq | ayoung: http://git.openstack.org/cgit/openstack/oslo.policy/tree/oslo_policy/policy.py#n390 | 15:54 |
| samueldmq | ayoung: passing dynamic-policy.json | 15:54 |
| samueldmq | ayoung: wouldn't that work ? | 15:54 |
| ayoung | samueldmq, you mean instead of walking the directory? | 15:55 |
| ayoung | make it deliberate? Probably...lets talk with dims | 15:55 |
| amaretskiy | stevemar, ayoung: please take a look at https://review.openstack.org/#/c/188457/ | 15:55 |
| samueldmq | ayoung: after walking those directories ... dynamic-policy.json is in a place we know where | 15:55 |
| *** bdossant has quit IRC | 15:55 | |
| samueldmq | ayoung: and we read from there :) | 15:55 |
| *** stevemar has quit IRC | 15:56 | |
| openstackgerrit | Merged openstack/keystone: Fix the incorrect format for docstring https://review.openstack.org/199867 | 15:56 |
| samueldmq | ayoung: maybe we could use a NamedTemporaryFile in python | 15:59 |
| samueldmq | ayoung: for storing/updating the dynamic policy | 15:59 |
| *** mylu has quit IRC | 16:00 | |
| *** browne has joined #openstack-keystone | 16:01 | |
| *** fhubik_afk is now known as fhubik | 16:01 | |
| *** fhubik has quit IRC | 16:02 | |
| *** bitblt has joined #openstack-keystone | 16:03 | |
| *** shaleh has joined #openstack-keystone | 16:04 | |
| ayoung | amaretskiy, you have to be careful when you ask me that. Somedays, my mood is so black I'll -2 just out of spite. | 16:04 |
| ayoung | No, not really | 16:04 |
| ayoung | plus, I can't -2 rally | 16:05 |
| amaretskiy | ayoung: sorry | 16:05 |
| ayoung | amaretskiy, nah, you are doing superb work...keep it up | 16:05 |
| *** dims_ has joined #openstack-keystone | 16:05 | |
| ayoung | amaretskiy, I just don't know Rally...what does adding these do? | 16:06 |
| *** dims has quit IRC | 16:09 | |
| amaretskiy | ayoung: this patch adds more rally scenarios, so there are more data available about some keystone api performance, just click on gate-rally-dsvm-keystone and you see a report, and there is a "HTML report" available on this page with graphs | 16:10 |
| amaretskiy | ayoung: for example: before this patch: http://logs.openstack.org/75/167675/22/check/gate-rally-dsvm-keystone/007b8c5/rally-plot/results.html.gz | 16:11 |
| amaretskiy | ayoung: and after this patch: http://logs.openstack.org/57/188457/3/check/gate-rally-dsvm-keystone/5ae6d35/rally-plot/results.html.gz | 16:11 |
| ayoung | amaretskiy, so, I like adding more token type runs, but the user stuff is, I think, barking up the wrong tree. I want us to stop using Keystone to store users. THose come from existing stores. | 16:11 |
| ayoung | amaretskiy, so, it depends on who wants the data...I'll leave that to you to determine. | 16:12 |
| ayoung | amaretskiy, but, in the global scheme of things, listing users is a bad idea. All the other things should be low-occurance use cases | 16:13 |
| ayoung | token create and validates far outstrip those | 16:13 |
| *** ankita_wagh has joined #openstack-keystone | 16:13 | |
| ayoung | amaretskiy, so...take it for what it is worth? | 16:14 |
| amaretskiy | ayoung: I can remove some scenarios, just ask that | 16:14 |
| ayoung | amaretskiy, I don't think it is for me to say | 16:14 |
| ayoung | amaretskiy, it depends on who is asking for the data. | 16:14 |
| ayoung | amaretskiy, but I don't see token-create or token validate here: http://logs.openstack.org/57/188457/3/check/gate-rally-dsvm-keystone/5ae6d35/rally-plot/results.html.gz | 16:15 |
| ayoung | is that done somewhere else? | 16:15 |
| *** TheIntern has quit IRC | 16:15 | |
| *** _cjones_ has joined #openstack-keystone | 16:16 | |
| *** mylu has joined #openstack-keystone | 16:16 | |
| amaretskiy | ayoung: https://github.com/openstack/rally/tree/master/samples/tasks/scenarios/authenticate | 16:17 |
| amaretskiy | ayoung: there are a lot of another scenarios already exist in rally, they can be added easily | 16:18 |
| ayoung | amaretskiy, ah, thanks/. | 16:18 |
| *** piyanai has left #openstack-keystone | 16:18 | |
| ayoung | amaretskiy, so...this is kindof awesome | 16:18 |
| amaretskiy | ayoung: I just put some generic scenarios into this patch | 16:18 |
| *** lufix3 has joined #openstack-keystone | 16:18 | |
| ayoung | I guess what I am saying is, when would these rally scenarios run? If they are going to slow down other things, I personally would not care about the user ones, but other people will | 16:19 |
| *** afazekas has quit IRC | 16:19 | |
| ayoung | and, does this mean that they get run on code checkin? Only when deliberately run on a new install? | 16:20 |
| amaretskiy | ayoung: these scenarios run only on keystone gates, that is job "gate-rally-dsvm-keystone" and results data is for developers | 16:20 |
| ayoung | amaretskiy, cool | 16:21 |
| *** jamielennox is now known as jamielennox|away | 16:21 | |
| amaretskiy | ayoung: generally these scenarios are intended to give information "how cool is new keystone code" | 16:21 |
| ayoung | amaretskiy, then I would defer to PTL. Since we don't run against LDAP in Rally, It really is not testing the codepaths I care about | 16:22 |
| *** boris-42 has quit IRC | 16:22 | |
| amaretskiy | ayoung: olay with these html reports - there are angular-and-d3js-based charts | 16:22 |
| amaretskiy | *play | 16:22 |
| ayoung | ++ | 16:22 |
| amaretskiy | ayoung: thank you | 16:23 |
| ayoung | amaretskiy, can you move those to V3? | 16:23 |
| amaretskiy | ayoung: rally supports v3, so I will try that | 16:24 |
| ayoung | we are actually trying to kill the V2 API, so the more we test V3 , the better | 16:24 |
| ayoung | amaretskiy, ++ | 16:24 |
| amaretskiy | ayoung: great! I'm starting switching scenarios to v3 | 16:25 |
| amaretskiy | ayoung: + I will add some "authenticate" scenarios | 16:25 |
| ayoung | amaretskiy, so I -1ed but it is a soft -1. If you feel they need to go in, feel free to ignore, or ask me to remove | 16:26 |
| amaretskiy | ayoung: ok, thank you! | 16:26 |
| *** lufix3 has quit IRC | 16:28 | |
| *** jamielennox|away is now known as jamielennox | 16:29 | |
| samueldmq | ayoung: 'overwrite=True' ignores the already read policies at all | 16:32 |
| samueldmq | ayoung: while setting it to False means that an override is what we do | 16:32 |
| samueldmq | ayoung: is that right ? | 16:32 |
| ayoung | yes. read that as | 16:32 |
| ayoung | "overwrite all rules" versus "merge" | 16:32 |
| ayoung | we want merge | 16:32 |
| samueldmq | ++ | 16:33 |
| *** kiran-r has joined #openstack-keystone | 16:33 | |
| samueldmq | ayoung: as I am not that familiar with that code, I am going to TDD here :) | 16:34 |
| ayoung | samueldmq, as well you should....let me know what you find, please | 16:34 |
| *** mgarza_ has joined #openstack-keystone | 16:35 | |
| samueldmq | ayoung: sure, thanks for helping :) | 16:35 |
| *** jistr has quit IRC | 16:37 | |
| *** ankita_wagh has quit IRC | 16:41 | |
| *** e0ne has quit IRC | 16:42 | |
| *** bitblt has quit IRC | 16:45 | |
| *** mylu has quit IRC | 16:45 | |
| *** Diagonal has joined #openstack-keystone | 16:54 | |
| *** fangzhou has joined #openstack-keystone | 16:55 | |
| *** chenhong has quit IRC | 16:55 | |
| *** amaretskiy has quit IRC | 16:56 | |
| Diagonal | I have an authentication question - I wrote a Python script using the OpenStack API that tears some VMs up and down, and I want to run it as a service/daemon that automatically restarts with its machine. But I can't hardcode a user/password into the script for security reasons - is there a recommended way to authenticate to Keystone for services without manual interaction? | 16:56 |
| *** vhoward has quit IRC | 16:57 | |
| *** lhcheng has joined #openstack-keystone | 16:57 | |
| *** ChanServ sets mode: +v lhcheng | 16:57 | |
| samueldmq | ayoung: are there plans to deprecate that policy_dirs thing ? | 16:57 |
| samueldmq | ayoung: I do think that is really useless and bad to have .. that policy.py should be something MUCH simpler than what it is today :( | 16:58 |
| *** ayoung has quit IRC | 17:01 | |
| *** TheIntern has joined #openstack-keystone | 17:04 | |
| *** afazekas has joined #openstack-keystone | 17:06 | |
| *** afazekas has quit IRC | 17:12 | |
| *** shaleh has quit IRC | 17:13 | |
| *** x58 has quit IRC | 17:16 | |
| *** mylu has joined #openstack-keystone | 17:16 | |
| morganfainberg | Hm | 17:17 |
| *** mylu has quit IRC | 17:18 | |
| *** mylu has joined #openstack-keystone | 17:19 | |
| *** boris-42 has joined #openstack-keystone | 17:20 | |
| samueldmq | morganfainberg: ? :) | 17:20 |
| *** shettyg has joined #openstack-keystone | 17:20 | |
| morganfainberg | samueldmq: I said "hm" I think it is self explanatory :P. I mean... hi! | 17:21 |
| samueldmq | morganfainberg: hm | 17:22 |
| samueldmq | morganfainberg: meaning ... hi o/ | 17:22 |
| morganfainberg | Exactly | 17:22 |
| shettyg | Hello All. I work for the openvswitch team and I am currently integrating Docker with OpenStack Neutron via the OVN project. I need some help from Keystone experts around what is the best way to handle passwords. | 17:22 |
| *** ankita_wagh has joined #openstack-keystone | 17:22 | |
| samueldmq | morganfainberg: (I am saying hi to you .. actually) | 17:22 |
| morganfainberg | shettyg: well, it depends on what you're needing to do ;). But I'm sure we can help. | 17:22 |
| shettyg | To summarize, it increasingly looks like I will have to store tenant passwords (in some way) in each tenant VM where he runs Docker. (This may change in the future based on Docker's API extensibility) | 17:23 |
| *** geoffarnold has quit IRC | 17:24 | |
| shettyg | So the option I have now is that I can encode tenant passwords in a way and store it in a root read-only location | 17:24 |
| shettyg | But does keystone provide a better way? | 17:24 |
| *** afazekas has joined #openstack-keystone | 17:24 | |
| lbragstad | rodrigods: o/ you around? | 17:25 |
| morganfainberg | shettyg: well, in liberty we hope to allow x509 client certs for auth | 17:25 |
| rodrigods | lbragstad, hi, I'm here | 17:25 |
| lbragstad | rodrigods: have a minute for a couple quick questions on http://blog.rodrigods.com/playing-with-keystone-to-keystone-federation/ | 17:25 |
| lbragstad | ? | 17:25 |
| rodrigods | lbragstad, yep! | 17:25 |
| morganfainberg | shettyg: but, to be honest, that's mostly what people are doing today. They might use ec2 credentials, but it's about the same | 17:25 |
| shettyg | morganfainberg: Is there any documentation that I can read to get a summary? | 17:25 |
| lbragstad | rodrigods: awesome, I'm working on writing a keystone-deploy branch that pretty much follows those directions (along with the upstream ones) | 17:26 |
| *** x58 has joined #openstack-keystone | 17:26 | |
| lbragstad | rodrigods: I *think* I have the keystone service provider and keystone identity provider setup correctly | 17:26 |
| morganfainberg | shettyg: let me find the x509 spec - but realize it won't be ready until liberty release. You may want to count on passwords for today | 17:26 |
| morganfainberg | And move to better as it becomes possible | 17:26 |
| lbragstad | rodrigods: but, I'm hitting an issue when I go to create the mapping using the service provider's client, I get a 404 | 17:27 |
| shettyg | morganfainberg That is fine. Start with storing encoded passwords in root read only and move from there. When is 'liberty' supposed to come out? | 17:28 |
| rodrigods | lbragstad, hmm strange... can you put the mapping and the call in a paste? | 17:28 |
| morganfainberg | shettyg: October 15th ish? | 17:28 |
| lbragstad | rodrigods: here is what I'm using https://gist.github.com/lbragstad/808933e517d94f465421 | 17:28 |
| morganfainberg | I'd need to look at the schedule to be sure. | 17:29 |
| lbragstad | rodrigods: which is very similar to the one you wrote but I modified it slightly to get it to setup both the idp and the sp in the same run (not sure if that makes sense) | 17:29 |
| rodrigods | lbragstad, it is failing here https://gist.github.com/lbragstad/808933e517d94f465421#file-gistfile1-py-L75-L80 , right? | 17:30 |
| lbragstad | yep | 17:30 |
| rodrigods | lbragstad, strange... | 17:31 |
| lbragstad | rodrigods: modifying something quick, | 17:31 |
| *** shaleh has joined #openstack-keystone | 17:32 | |
| shettyg | morganfainberg: A rough date was fine, thanks. I would still be interested in reading how keystone plans to use certs, so that I know that something better is coming along the way. | 17:32 |
| morganfainberg | Sure. Let me find it. Sec | 17:33 |
| morganfainberg | shettyg: http://specs.openstack.org/openstack/keystone-specs/specs/liberty/keystone-tokenless-authz-with-x509-ssl-client-cert.html | 17:33 |
| *** vilobhmm has joined #openstack-keystone | 17:33 | |
| shettyg | morganfainberg: Thanks, much appreciated. | 17:34 |
| lbragstad | rodrigods: modified https://gist.github.com/lbragstad/808933e517d94f465421 | 17:35 |
| lbragstad | rodrigods: same result | 17:35 |
| *** dims_ has quit IRC | 17:35 | |
| rodrigods | lbragstad, the federation extension is enabled, right? | 17:35 |
| lbragstad | rodrigods: isn't it enabled by default now? | 17:36 |
| *** stevemar has joined #openstack-keystone | 17:36 | |
| *** dims has joined #openstack-keystone | 17:37 | |
| *** raildo has quit IRC | 17:37 | |
| lbragstad | rodrigods: I think the link in you post might be outdated too? | 17:37 |
| rodrigods | lbragstad, are you using Kilo? if you are... than it should be :) | 17:37 |
| *** raildo has joined #openstack-keystone | 17:37 | |
| lbragstad | rodrigods: I'm using the latest master | 17:37 |
| lbragstad | bleeding edge! | 17:38 |
| rodrigods | lbragstad, yes, there is an updated tutorial (for Kilo): http://blog.rodrigods.com/it-is-time-to-play-with-keystone-to-keystone-federation-in-kilo/ | 17:38 |
| lbragstad | rodrigods: ah... I'll go pick through this then and modify what've I've got to match | 17:39 |
| *** raildo has quit IRC | 17:40 | |
| *** shettyg has left #openstack-keystone | 17:40 | |
| *** Diagonal has quit IRC | 17:40 | |
| *** raildo has joined #openstack-keystone | 17:41 | |
| *** raildo has quit IRC | 17:42 | |
| *** raildo has joined #openstack-keystone | 17:43 | |
| openstackgerrit | Sam Leong proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 17:44 |
| lbragstad | rodrigods: you didn't need to install libapache2-mod-shib2 because it was included on 14.04? | 17:44 |
| rodrigods | lbragstad, I had to install, iirc | 17:45 |
| lbragstad | ok | 17:45 |
| lbragstad | rodrigods: but not on the identity provider? | 17:45 |
| rodrigods | lbragstad, it is not necessary to install in the IdP side | 17:46 |
| lbragstad | rodrigods: the identity provider only needs xmlsec1 | 17:46 |
| lbragstad | rodrigods: cool | 17:46 |
| rodrigods | lbragstad, and pysaml2 | 17:46 |
| *** fangzhou_ has joined #openstack-keystone | 17:48 | |
| *** fangzhou has quit IRC | 17:49 | |
| *** fangzhou_ is now known as fangzhou | 17:49 | |
| *** raildo_ has joined #openstack-keystone | 17:49 | |
| *** e0ne has joined #openstack-keystone | 17:51 | |
| *** _cjones_ has quit IRC | 17:53 | |
| *** geoffarnold has joined #openstack-keystone | 17:55 | |
| *** skylerberg has joined #openstack-keystone | 17:56 | |
| *** bknudson has quit IRC | 17:59 | |
| *** gordc is now known as gordc_afk | 18:00 | |
| *** _cjones_ has joined #openstack-keystone | 18:00 | |
| *** ankita_wagh has quit IRC | 18:01 | |
| *** ankita_wagh has joined #openstack-keystone | 18:01 | |
| *** mylu has quit IRC | 18:04 | |
| *** afazekas has quit IRC | 18:05 | |
| *** mylu has joined #openstack-keystone | 18:05 | |
| *** kiran-r has quit IRC | 18:09 | |
| *** stevemar has quit IRC | 18:11 | |
| *** ayoung has joined #openstack-keystone | 18:13 | |
| *** ChanServ sets mode: +v ayoung | 18:13 | |
| *** stevemar has joined #openstack-keystone | 18:14 | |
| *** mylu has quit IRC | 18:14 | |
| *** stevemar has quit IRC | 18:15 | |
| *** stevemar has joined #openstack-keystone | 18:15 | |
| *** mylu has joined #openstack-keystone | 18:20 | |
| *** dims has quit IRC | 18:21 | |
| *** jecarey has quit IRC | 18:23 | |
| *** dramakri has joined #openstack-keystone | 18:24 | |
| *** markvoelker has quit IRC | 18:24 | |
| *** markvoelker has joined #openstack-keystone | 18:24 | |
| *** afazekas has joined #openstack-keystone | 18:25 | |
| *** jasonsb has quit IRC | 18:26 | |
| *** jecarey has joined #openstack-keystone | 18:35 | |
| *** jaosorior has quit IRC | 18:36 | |
| *** geoffarnold has quit IRC | 18:43 | |
| *** vilobhmm has left #openstack-keystone | 18:43 | |
| *** afazekas has quit IRC | 18:43 | |
| *** ankita_w_ has joined #openstack-keystone | 18:47 | |
| anteaya | is anyone able to address the comments in this rename patch? https://review.openstack.org/#/c/190631/3 | 18:49 |
| *** raildo_ has quit IRC | 18:50 | |
| anteaya | keystoneclient-saml2 to keystoneauth-saml2 | 18:50 |
| *** ankita_wagh has quit IRC | 18:51 | |
| *** ajayaa has quit IRC | 18:51 | |
| lbragstad | anteaya: I believe marekd is out until next week? but maybe morganfainberg is around? ^ | 18:53 |
| *** x58 has quit IRC | 18:54 | |
| *** geoffarnold has joined #openstack-keystone | 18:54 | |
| *** pnavarro has joined #openstack-keystone | 18:54 | |
| anteaya | lbragstad: thanks | 18:56 |
| anteaya | we need it addressed today or early tomorrow | 18:56 |
| anteaya | we need time to get it in shape for the rename tomorrow | 18:56 |
| anteaya | If blessed I can just spin up a new patch to suit myself | 18:57 |
| anteaya | but anything left out will have to be present in a follow up patch created by somone else | 18:57 |
| anteaya | I'd like not to have to rewrite all the rename patches that need work though, as a by the by | 18:58 |
| lbragstad | rodrigods: I rewrote the ansible playbooks per your updated directions, redeployed two keystone federation nodes on ubuntu 14.04, and revisited the script https://gist.github.com/lbragstad/808933e517d94f465421 | 18:59 |
| lbragstad | rodrigods: still the same issue though when I go to create the mapping (404 not found) | 19:00 |
| openstackgerrit | Sam Leong proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 19:02 |
| dramakri | can any of the cores please take a look at the patch which reuses token_ref fetched in AuthContextMiddleware - https://review.openstack.org/#/c/190863/ ? Rally test result shows that there is ~35 improvement in latency (average, median, 90%ile) for both create and delete token. | 19:04 |
| lbragstad | rodrigods: turns out, if I even try to do a mappings.list() it gives me a 404, so I must have set something up wrong. | 19:07 |
| *** arunkant_ has joined #openstack-keystone | 19:07 | |
| *** hrou has quit IRC | 19:07 | |
| *** hrou has joined #openstack-keystone | 19:08 | |
| raildo | lbragstad: he will be absent for around one hour | 19:08 |
| *** ankita_w_ has quit IRC | 19:08 | |
| lbragstad | raildo: no worries, thanks for the update | 19:09 |
| *** dims has joined #openstack-keystone | 19:10 | |
| *** arunkant has quit IRC | 19:10 | |
| *** ajayaa has joined #openstack-keystone | 19:12 | |
| *** markvoelker has quit IRC | 19:15 | |
| *** markvoelker has joined #openstack-keystone | 19:15 | |
| *** ankita_wagh has joined #openstack-keystone | 19:15 | |
| *** pnavarro has quit IRC | 19:15 | |
| *** TheIntern has quit IRC | 19:16 | |
| *** gordc_afk has quit IRC | 19:16 | |
| *** spandhe has joined #openstack-keystone | 19:17 | |
| boris-42 | ayoung: hi | 19:19 |
| ayoung | boris-42, he | 19:19 |
| ayoung | llo | 19:19 |
| boris-42 | ayoung: we can add more tests for authentication in that test | 19:19 |
| boris-42 | ayoung: rally task* | 19:19 |
| ayoung | boris-42, I'm ok with how it is now, but I'm not the consumer | 19:19 |
| *** x58 has joined #openstack-keystone | 19:22 | |
| *** christx2 has quit IRC | 19:27 | |
| *** dramakri has quit IRC | 19:29 | |
| *** jecarey has quit IRC | 19:30 | |
| dolphm | someone finally reported it as a bug! https://bugs.launchpad.net/keystone/+bug/1470870 | 19:30 |
| openstack | Launchpad bug 1470870 in Keystone "able to POST and GET custom attribute/field in JSON" [Wishlist,Confirmed] | 19:30 |
| *** jsavak has quit IRC | 19:31 | |
| *** jecarey has joined #openstack-keystone | 19:32 | |
| *** htruta_ has joined #openstack-keystone | 19:34 | |
| *** jsavak has joined #openstack-keystone | 19:35 | |
| *** diazjf has quit IRC | 19:42 | |
| *** shaleh has quit IRC | 19:42 | |
| *** mylu has quit IRC | 19:43 | |
| *** diazjf has joined #openstack-keystone | 19:43 | |
| *** mylu has joined #openstack-keystone | 19:46 | |
| *** htruta_ has quit IRC | 19:54 | |
| *** crc32 has joined #openstack-keystone | 19:55 | |
| *** amakarov is now known as amakarov_away | 19:56 | |
| *** _cjones_ has quit IRC | 19:58 | |
| *** mylu has quit IRC | 20:06 | |
| *** dramakri has joined #openstack-keystone | 20:06 | |
| *** _cjones_ has joined #openstack-keystone | 20:06 | |
| *** stevemar has quit IRC | 20:08 | |
| *** stevemar has joined #openstack-keystone | 20:11 | |
| *** stevemar has quit IRC | 20:12 | |
| *** stevemar has joined #openstack-keystone | 20:12 | |
| *** packet has joined #openstack-keystone | 20:16 | |
| *** ducttape_ has joined #openstack-keystone | 20:19 | |
| *** stevemar has quit IRC | 20:19 | |
| *** stevemar has joined #openstack-keystone | 20:21 | |
| *** stevemar has quit IRC | 20:25 | |
| *** jecarey has quit IRC | 20:26 | |
| *** mylu has joined #openstack-keystone | 20:28 | |
| *** gyee has joined #openstack-keystone | 20:28 | |
| *** ChanServ sets mode: +v gyee | 20:28 | |
| *** mylu has quit IRC | 20:30 | |
| *** mylu has joined #openstack-keystone | 20:30 | |
| *** gyee has quit IRC | 20:38 | |
| *** r-daneel has joined #openstack-keystone | 20:39 | |
| *** gyee has joined #openstack-keystone | 20:41 | |
| *** ChanServ sets mode: +v gyee | 20:41 | |
| *** e0ne has quit IRC | 20:42 | |
| *** mylu has quit IRC | 20:42 | |
| *** mylu has joined #openstack-keystone | 20:44 | |
| samueldmq | morganfainberg: ayoung I've good news for you :) | 20:48 |
| *** r-daneel has quit IRC | 20:49 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/oslo.policy: Dynamic Policy Overlay https://review.openstack.org/200257 | 20:49 |
| samueldmq | morganfainberg: ayoung ^ | 20:49 |
| samueldmq | ayoung: I'm going to update my fetch & cache patch at middleware to use this one ^ | 20:54 |
| samueldmq | ayoung: and then we'd have something working .. I'll make it download policy per endpoint_id, setting initially as a middleware config | 20:55 |
| samueldmq | ayoung: hopefully will have something running tomorrow | 20:55 |
| samueldmq | ayoung: morganfainberg actually that oslo code is wip .. nova enforcer needs to know the file middleware's enforcer have written to .. :-) | 21:00 |
| *** packet has quit IRC | 21:01 | |
| *** annasort has quit IRC | 21:02 | |
| *** mylu has quit IRC | 21:02 | |
| *** mylu has joined #openstack-keystone | 21:03 | |
| samueldmq | ayoung: morganfainberg actually that oslo code is wip .. nova enforcer needs to know the file middleware's enforcer have written to .. :-) | 21:04 |
| samueldmq | ... sorry, was supposed to be in another terminal ... :( | 21:04 |
| *** mylu has quit IRC | 21:05 | |
| *** ajayaa has quit IRC | 21:05 | |
| *** dims has quit IRC | 21:05 | |
| morganfainberg | Hehe | 21:05 |
| *** mylu has joined #openstack-keystone | 21:06 | |
| *** dims has joined #openstack-keystone | 21:07 | |
| *** sigmavirus24 is now known as emacsraptor | 21:10 | |
| *** emacsraptor is now known as sigmavirus24 | 21:10 | |
| *** mylu has quit IRC | 21:18 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/oslo.policy: Dynamic Policies Overlay https://review.openstack.org/200257 | 21:18 |
| samueldmq | morganfainberg: ayoung I dunno how good or how bad this implementation is ... but it seems to work! | 21:19 |
| samueldmq | o/ | 21:20 |
| *** mylu has joined #openstack-keystone | 21:20 | |
| *** htruta_ has joined #openstack-keystone | 21:25 | |
| *** browne has quit IRC | 21:29 | |
| *** annasort has joined #openstack-keystone | 21:29 | |
| *** TheIntern has joined #openstack-keystone | 21:30 | |
| *** gyee has quit IRC | 21:34 | |
| *** jamielennox is now known as jamielennox|away | 21:37 | |
| *** gyee has joined #openstack-keystone | 21:41 | |
| *** ChanServ sets mode: +v gyee | 21:41 | |
| *** jecarey has joined #openstack-keystone | 21:41 | |
| *** mylu has quit IRC | 21:43 | |
| *** ankita_wagh has quit IRC | 21:45 | |
| *** jecarey has quit IRC | 21:46 | |
| *** ankita_wagh has joined #openstack-keystone | 21:46 | |
| *** jamielennox|away is now known as jamielennox | 21:48 | |
| *** dsirrine has quit IRC | 21:48 | |
| *** lhcheng has quit IRC | 21:49 | |
| *** lhcheng has joined #openstack-keystone | 21:49 | |
| *** ChanServ sets mode: +v lhcheng | 21:49 | |
| *** dsirrine has joined #openstack-keystone | 21:49 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:59 | |
| *** jsavak has quit IRC | 22:02 | |
| *** hrou has quit IRC | 22:02 | |
| *** TheIntern has quit IRC | 22:02 | |
| *** dims has quit IRC | 22:03 | |
| *** dims has joined #openstack-keystone | 22:03 | |
| *** bknudson has joined #openstack-keystone | 22:04 | |
| *** ChanServ sets mode: +v bknudson | 22:04 | |
| lbragstad | does anyone run into this when using shibboleth? http://cdn.pasteraw.com/etzc89ruprma3dvxfseyk2jvzdqz075 | 22:06 |
| *** diazjf has left #openstack-keystone | 22:06 | |
| lbragstad | I'm running ubuntu 14.04, apache 2.4 and shibboleth 2.5.2 -- validated my xml and it seems to be ok to the best of my knowledge, which isn't much ;) | 22:07 |
| lbragstad | oh, and I'm getting that error trying to run shibboleth on the keystone service provider | 22:08 |
| *** david8hu has quit IRC | 22:09 | |
| *** david8hu has joined #openstack-keystone | 22:10 | |
| *** edmondsw has quit IRC | 22:18 | |
| *** browne has joined #openstack-keystone | 22:25 | |
| *** bknudson has quit IRC | 22:27 | |
| *** david8hu has quit IRC | 22:30 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Changing execption type to ValidationError instead of Forbidden https://review.openstack.org/200295 | 22:30 |
| *** david8hu has joined #openstack-keystone | 22:30 | |
| *** RichardRaseley has joined #openstack-keystone | 22:31 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain field in Project Table https://review.openstack.org/157427 | 22:36 |
| *** csoukup has quit IRC | 22:36 | |
| *** dramakri has quit IRC | 22:38 | |
| *** dramakri has joined #openstack-keystone | 22:43 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/oslo.policy: Dynamic Policies Overlay https://review.openstack.org/200257 | 22:43 |
| *** david8hu has quit IRC | 22:44 | |
| *** david8hu has joined #openstack-keystone | 22:45 | |
| *** stevemar has joined #openstack-keystone | 22:49 | |
| *** christx2 has joined #openstack-keystone | 22:50 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraint https://review.openstack.org/158372 | 22:51 |
| *** stevemar has quit IRC | 22:54 | |
| *** ducttape_ has quit IRC | 22:59 | |
| *** christx2 has quit IRC | 23:00 | |
| *** christx2 has joined #openstack-keystone | 23:00 | |
| *** jasonsb has joined #openstack-keystone | 23:05 | |
| *** hrou has joined #openstack-keystone | 23:10 | |
| *** RichardRaseley has quit IRC | 23:14 | |
| *** christx2 has quit IRC | 23:20 | |
| *** david8hu has quit IRC | 23:27 | |
| *** david8hu has joined #openstack-keystone | 23:28 | |
| *** geoffarnold has quit IRC | 23:28 | |
| *** mgarza_ has quit IRC | 23:37 | |
| *** htruta_ has quit IRC | 23:38 | |
| *** openstack has joined #openstack-keystone | 23:38 | |
| *** htruta_ has joined #openstack-keystone | 23:45 | |
| *** mylu has joined #openstack-keystone | 23:46 | |
| *** dramakri has left #openstack-keystone | 23:48 | |
| *** chlong has quit IRC | 23:49 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!