| *** lhcheng has quit IRC | 00:11 | |
| *** geoffarnold has joined #openstack-keystone | 00:16 | |
| *** markvoelker has quit IRC | 00:32 | |
| *** dims has joined #openstack-keystone | 00:42 | |
| *** raildo_ has joined #openstack-keystone | 00:44 | |
| *** dims has quit IRC | 00:44 | |
| *** openstackgerrit has quit IRC | 00:51 | |
| *** openstackgerrit has joined #openstack-keystone | 00:52 | |
| *** samueldmq has quit IRC | 01:08 | |
| *** raildo_ has quit IRC | 01:08 | |
| *** iurygregory has quit IRC | 01:09 | |
| *** ericksonsantos has quit IRC | 01:09 | |
| *** gabriel-bezerra has quit IRC | 01:09 | |
| *** raildo has quit IRC | 01:10 | |
| *** dims has joined #openstack-keystone | 01:24 | |
| *** dims_ has joined #openstack-keystone | 01:28 | |
| *** dims has quit IRC | 01:31 | |
| *** geoffarnold has quit IRC | 01:34 | |
| *** geoffarnold has joined #openstack-keystone | 01:38 | |
| *** davechen has joined #openstack-keystone | 01:38 | |
| *** geoffarnold has quit IRC | 01:42 | |
| *** chenhong has joined #openstack-keystone | 01:58 | |
| *** lhcheng has joined #openstack-keystone | 01:59 | |
| *** ChanServ sets mode: +v lhcheng | 01:59 | |
| *** vilobhmm1 has quit IRC | 02:01 | |
| *** vilobhmm has joined #openstack-keystone | 02:02 | |
| *** hrou has joined #openstack-keystone | 02:03 | |
| *** lhcheng has quit IRC | 02:04 | |
| *** esp has joined #openstack-keystone | 02:22 | |
| *** tobe has joined #openstack-keystone | 02:29 | |
| *** chenhong has quit IRC | 02:55 | |
| *** chenhong has joined #openstack-keystone | 02:55 | |
| *** ankita_wagh has joined #openstack-keystone | 03:00 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Show helpful message when request body is not provided https://review.openstack.org/195903 | 03:01 |
|---|---|---|
| *** tobe has quit IRC | 03:01 | |
| *** tobe has joined #openstack-keystone | 03:03 | |
| *** vilobhmm has quit IRC | 03:05 | |
| *** vilobhmm has joined #openstack-keystone | 03:06 | |
| *** chenhong has quit IRC | 03:15 | |
| *** chenhong has joined #openstack-keystone | 03:16 | |
| *** chenhong has left #openstack-keystone | 03:33 | |
| *** chenhong has joined #openstack-keystone | 03:33 | |
| *** dims_ has quit IRC | 03:48 | |
| *** lhcheng has joined #openstack-keystone | 03:48 | |
| *** ChanServ sets mode: +v lhcheng | 03:48 | |
| *** mylu has joined #openstack-keystone | 03:50 | |
| *** lhcheng has quit IRC | 03:53 | |
| *** tobe has quit IRC | 03:55 | |
| *** tobe has joined #openstack-keystone | 03:56 | |
| *** ankita_wagh has quit IRC | 03:59 | |
| *** btully has joined #openstack-keystone | 04:08 | |
| *** ankita_wagh has joined #openstack-keystone | 04:10 | |
| *** lhcheng has joined #openstack-keystone | 04:13 | |
| *** ChanServ sets mode: +v lhcheng | 04:13 | |
| *** lhcheng has quit IRC | 04:17 | |
| jamielennox | any core here? can someone just +A this, it's a cherry-pick from ksc master for the mock issue, | 04:22 |
| jamielennox | https://review.openstack.org/#/c/200978/ | 04:22 |
| *** chenhong has quit IRC | 04:28 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Add classifier for Python 3.4 https://review.openstack.org/200990 | 04:44 |
| openstackgerrit | Eric Brown proposed openstack/keystone: Add classifier for Python 3.4 https://review.openstack.org/200990 | 04:45 |
| *** dims has joined #openstack-keystone | 04:48 | |
| *** spandhe has joined #openstack-keystone | 04:54 | |
| *** dims has quit IRC | 04:55 | |
| *** hrou has quit IRC | 04:57 | |
| *** pcaruana has quit IRC | 05:08 | |
| *** spandhe has quit IRC | 05:16 | |
| *** mylu has quit IRC | 05:29 | |
| *** crc32 has joined #openstack-keystone | 05:34 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Replace reference of ksc with osc https://review.openstack.org/200998 | 05:50 |
| *** chenhong has joined #openstack-keystone | 05:58 | |
| *** Kennan has joined #openstack-keystone | 06:03 | |
| *** Kennan2 has quit IRC | 06:03 | |
| *** spandhe has joined #openstack-keystone | 06:13 | |
| *** rwsu has joined #openstack-keystone | 06:14 | |
| *** rwsu has quit IRC | 06:16 | |
| *** hogepodge has quit IRC | 06:19 | |
| *** hogepodge has joined #openstack-keystone | 06:26 | |
| *** btully has quit IRC | 06:32 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Region creation with id given also need schema validation https://review.openstack.org/201007 | 06:33 |
| openstackgerrit | Eric Brown proposed openstack/keystone: Deprecate LDAP assignment driver options https://review.openstack.org/201008 | 06:34 |
| *** rm_work|away is now known as rm_work | 06:35 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Show helpful message when request body is not provided https://review.openstack.org/195903 | 06:35 |
| *** lhcheng has joined #openstack-keystone | 06:41 | |
| *** ChanServ sets mode: +v lhcheng | 06:41 | |
| *** pcaruana has joined #openstack-keystone | 06:42 | |
| *** henrynash has joined #openstack-keystone | 06:46 | |
| *** ChanServ sets mode: +v henrynash | 06:46 | |
| *** spandhe has quit IRC | 06:50 | |
| *** afazekas has quit IRC | 06:50 | |
| *** crc32 has quit IRC | 06:54 | |
| openstackgerrit | Deepti Ramakrishna proposed openstack/keystone: Reuse token_ref fetched in AuthContextMiddleware. https://review.openstack.org/190863 | 06:55 |
| *** vilobhmm has quit IRC | 06:59 | |
| *** jaosorior has joined #openstack-keystone | 07:02 | |
| *** pnavarro has joined #openstack-keystone | 07:13 | |
| *** pnavarro has quit IRC | 07:18 | |
| marekd | morganfainberg: many thanks for pushing this: https://review.openstack.org/#/c/200325/ | 07:21 |
| *** browne has quit IRC | 07:22 | |
| marekd | jamielennox: Approved. | 07:22 |
| jamielennox | marekd: cheers | 07:22 |
| *** ankita_wagh has quit IRC | 07:27 | |
| *** chlong-weekend is now known as chlong-afk | 07:33 | |
| *** btully has joined #openstack-keystone | 07:34 | |
| *** afazekas has joined #openstack-keystone | 07:36 | |
| *** btully has quit IRC | 07:38 | |
| *** Kennan has quit IRC | 07:46 | |
| *** Kennan has joined #openstack-keystone | 07:46 | |
| *** christx2 has joined #openstack-keystone | 07:55 | |
| *** christx2 has quit IRC | 07:57 | |
| *** christx2 has joined #openstack-keystone | 07:57 | |
| *** jistr has joined #openstack-keystone | 08:02 | |
| *** mabrams has joined #openstack-keystone | 08:03 | |
| *** fhubik has joined #openstack-keystone | 08:03 | |
| *** fhubik is now known as fhubik_afk | 08:04 | |
| *** fhubik_afk is now known as fhubik | 08:09 | |
| *** odyssey4me has joined #openstack-keystone | 08:22 | |
| *** ajayaa has joined #openstack-keystone | 08:31 | |
| *** odyssey4me has quit IRC | 08:42 | |
| openstackgerrit | Marek Denis proposed openstack/keystoneauth-saml2: Depend on keystoneauth https://review.openstack.org/186854 | 08:42 |
| *** fhubik is now known as fhubik_afk | 08:43 | |
| *** fhubik_afk is now known as fhubik | 08:43 | |
| *** marzif__ has quit IRC | 08:45 | |
| *** jamielennox has quit IRC | 08:46 | |
| *** odyssey4me has joined #openstack-keystone | 08:50 | |
| *** henrynash has quit IRC | 08:50 | |
| *** henrynash has joined #openstack-keystone | 08:53 | |
| *** ChanServ sets mode: +v henrynash | 08:53 | |
| *** lhcheng has quit IRC | 08:55 | |
| openstackgerrit | Marek Denis proposed openstack/keystoneauth-saml2: Depend on keystoneauth https://review.openstack.org/186854 | 08:57 |
| *** odyssey4me_ has joined #openstack-keystone | 08:59 | |
| *** ajayaa has quit IRC | 08:59 | |
| *** odyssey4me has quit IRC | 09:00 | |
| *** odyssey4me_ is now known as odyssey4me | 09:01 | |
| *** aix has joined #openstack-keystone | 09:08 | |
| *** ajayaa has joined #openstack-keystone | 09:14 | |
| *** henrynash has quit IRC | 09:19 | |
| *** e0ne has joined #openstack-keystone | 09:19 | |
| *** fhubik is now known as fhubik_afk | 09:21 | |
| *** fhubik_afk is now known as fhubik | 09:24 | |
| *** lhcheng has joined #openstack-keystone | 09:32 | |
| *** ChanServ sets mode: +v lhcheng | 09:32 | |
| *** davechen has left #openstack-keystone | 09:36 | |
| *** e0ne is now known as e0ne_ | 09:36 | |
| *** bdossant has joined #openstack-keystone | 09:38 | |
| *** odyssey4me has quit IRC | 09:39 | |
| *** odyssey4me has joined #openstack-keystone | 09:40 | |
| *** jamielennox has joined #openstack-keystone | 09:46 | |
| *** ChanServ sets mode: +v jamielennox | 09:46 | |
| *** ajayaa has quit IRC | 09:49 | |
| *** henrynash has joined #openstack-keystone | 09:53 | |
| *** ChanServ sets mode: +v henrynash | 09:53 | |
| *** dims has joined #openstack-keystone | 09:58 | |
| *** christx2 has quit IRC | 10:00 | |
| *** e0ne_ is now known as e0ne | 10:05 | |
| *** ajayaa has joined #openstack-keystone | 10:05 | |
| *** marzif has joined #openstack-keystone | 10:07 | |
| *** lhcheng has quit IRC | 10:08 | |
| *** marzif_ has joined #openstack-keystone | 10:10 | |
| *** christx2 has joined #openstack-keystone | 10:17 | |
| *** krykowski has quit IRC | 10:18 | |
| *** [BNC]krykowski has joined #openstack-keystone | 10:19 | |
| *** [BNC]krykowski is now known as krykowski | 10:21 | |
| *** henrynash has quit IRC | 10:29 | |
| *** henrynash has joined #openstack-keystone | 10:35 | |
| *** ChanServ sets mode: +v henrynash | 10:35 | |
| *** christx2 has quit IRC | 10:36 | |
| *** e0ne is now known as e0ne_ | 10:43 | |
| *** e0ne_ is now known as e0ne | 10:43 | |
| *** chenhong has quit IRC | 10:43 | |
| *** aix has quit IRC | 10:44 | |
| *** browne has joined #openstack-keystone | 10:49 | |
| *** fhubik is now known as fhubik_afk | 10:54 | |
| *** christx2 has joined #openstack-keystone | 10:55 | |
| *** fhubik_afk is now known as fhubik | 10:55 | |
| *** browne has quit IRC | 10:58 | |
| *** fhubik has quit IRC | 10:58 | |
| *** e0ne is now known as e0ne_ | 11:01 | |
| *** belmoreira has joined #openstack-keystone | 11:06 | |
| *** browne has joined #openstack-keystone | 11:08 | |
| *** aix has joined #openstack-keystone | 11:11 | |
| *** e0ne_ is now known as e0ne | 11:14 | |
| openstackgerrit | Eric Brown proposed openstack/keystonemiddleware: Mismatched version of setup.cfg classifier https://review.openstack.org/201084 | 11:20 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Provide config option to direct inheritance rules https://review.openstack.org/200434 | 11:20 |
| *** christx2 has quit IRC | 11:20 | |
| *** chenhong has joined #openstack-keystone | 11:24 | |
| openstackgerrit | Eric Brown proposed openstack/keystonemiddleware: Mismatched version of setup.cfg classifier https://review.openstack.org/201084 | 11:25 |
| *** henrynash has quit IRC | 11:35 | |
| *** tobe has quit IRC | 11:36 | |
| openstackgerrit | Eric Brown proposed openstack/keystoneauth: py34 not py33 is tested and supported https://review.openstack.org/201088 | 11:36 |
| openstackgerrit | Eric Brown proposed openstack/keystonemiddleware: py34 not py33 is tested and supported https://review.openstack.org/201084 | 11:37 |
| *** marzif_ has quit IRC | 11:37 | |
| *** marzif_ has joined #openstack-keystone | 11:37 | |
| openstackgerrit | Eric Brown proposed openstack/keystonemiddleware: py34 not py33 is tested and supported https://review.openstack.org/201084 | 11:43 |
| openstackgerrit | Eric Brown proposed openstack/keystoneauth: py34 not py33 is tested and supported https://review.openstack.org/201088 | 11:43 |
| *** fhubik has joined #openstack-keystone | 11:46 | |
| openstackgerrit | Eric Brown proposed openstack/keystoneauth-saml2: Update .gitreview to reflect actual project name https://review.openstack.org/201090 | 11:47 |
| *** marzif_ has quit IRC | 11:49 | |
| openstackgerrit | Eric Brown proposed openstack/keystoneauth-saml2: py34 not py33 is tested and supported https://review.openstack.org/201091 | 11:50 |
| *** marzif_ has joined #openstack-keystone | 11:50 | |
| openstackgerrit | Eric Brown proposed openstack/python-keystoneclient: py34 not py33 is tested and supported https://review.openstack.org/201092 | 11:53 |
| *** LukeHinds has joined #openstack-keystone | 12:02 | |
| openstackgerrit | jiaxi proposed openstack/keystone: Invalid URLs are not suppressed when creating endpoint https://review.openstack.org/200512 | 12:05 |
| *** bknudson has quit IRC | 12:14 | |
| *** hrou has joined #openstack-keystone | 12:16 | |
| *** bjornar has quit IRC | 12:16 | |
| *** ajayaa has quit IRC | 12:27 | |
| *** e0ne is now known as e0ne_ | 12:33 | |
| *** edmondsw has joined #openstack-keystone | 12:36 | |
| *** gordc has joined #openstack-keystone | 12:38 | |
| *** Protux has joined #openstack-keystone | 12:38 | |
| *** mtecer has joined #openstack-keystone | 12:39 | |
| *** bknudson has joined #openstack-keystone | 12:40 | |
| *** ChanServ sets mode: +v bknudson | 12:40 | |
| *** e0ne_ is now known as e0ne | 12:46 | |
| *** bknudson has quit IRC | 12:46 | |
| *** mtecer has quit IRC | 12:52 | |
| *** dims has quit IRC | 12:55 | |
| *** jsavak has joined #openstack-keystone | 12:57 | |
| *** Guest33195 has joined #openstack-keystone | 12:57 | |
| *** Guest33195 is now known as dims_ | 12:58 | |
| *** bknudson has joined #openstack-keystone | 12:59 | |
| *** ChanServ sets mode: +v bknudson | 12:59 | |
| *** christx2 has joined #openstack-keystone | 13:03 | |
| *** richm has joined #openstack-keystone | 13:05 | |
| *** TheIntern has joined #openstack-keystone | 13:14 | |
| *** belmoreira has quit IRC | 13:20 | |
| *** edmondsw has quit IRC | 13:25 | |
| *** chenhong has quit IRC | 13:26 | |
| *** edmondsw has joined #openstack-keystone | 13:32 | |
| *** ericksonsantos has joined #openstack-keystone | 13:33 | |
| *** raildo has joined #openstack-keystone | 13:33 | |
| *** iurygregory has joined #openstack-keystone | 13:33 | |
| *** bdossant_ has joined #openstack-keystone | 13:34 | |
| *** samueldmq has joined #openstack-keystone | 13:34 | |
| *** bdossant has quit IRC | 13:35 | |
| *** henrynash has joined #openstack-keystone | 13:38 | |
| *** ChanServ sets mode: +v henrynash | 13:38 | |
| *** raildo has quit IRC | 13:40 | |
| *** bdossant_ has quit IRC | 13:43 | |
| *** raildo has joined #openstack-keystone | 13:44 | |
| *** bjornar has joined #openstack-keystone | 13:49 | |
| *** jdandrea has joined #openstack-keystone | 13:50 | |
| *** gabriel-bezerra has joined #openstack-keystone | 13:55 | |
| *** jsavak has quit IRC | 13:56 | |
| *** jsavak has joined #openstack-keystone | 13:59 | |
| *** tellesnobrega has joined #openstack-keystone | 14:00 | |
| *** jecarey has joined #openstack-keystone | 14:08 | |
| *** marzif_ has quit IRC | 14:09 | |
| *** marzif_ has joined #openstack-keystone | 14:10 | |
| *** browne1 has joined #openstack-keystone | 14:11 | |
| *** browne has quit IRC | 14:11 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:14 | |
| *** btully has joined #openstack-keystone | 14:16 | |
| jdandrea | Reality check Q: Are v2 tokens compatible with v3 but not the other way around, or are they not compatible at all? | 14:19 |
| *** mylu has joined #openstack-keystone | 14:19 | |
| bknudson | jdandrea: if the token was made using v3 and it's not in the default domain then validating it using v2 will fail | 14:20 |
| jdandrea | bknudson: Thanks. How about the other direction? | 14:20 |
| bknudson | you can validate v2 tokens using v3... I don't think there's any restrictions on that. | 14:20 |
| jdandrea | bknudson: Thank you! | 14:21 |
| *** zzzeek has joined #openstack-keystone | 14:31 | |
| *** markvoelker has joined #openstack-keystone | 14:33 | |
| *** stevemar has joined #openstack-keystone | 14:36 | |
| *** ChanServ sets mode: +v stevemar | 14:36 | |
| stevemar | anyone have an opinion on https://review.openstack.org/#/c/190863/ ? | 14:37 |
| stevemar | seems like theres just a lot of moving around for the sake of moving around | 14:37 |
| *** fhubik is now known as fhubik_afk | 14:38 | |
| bknudson | stevemar: rebuilding the token_model.KeystoneToken seems like a minor performance issue | 14:39 |
| bknudson | and also error-prone | 14:40 |
| stevemar | bknudson: the token model rebuild is error prone? | 14:40 |
| *** zzzeek has quit IRC | 14:40 | |
| bknudson | stevemar: the code needs to check for exception.TokenNotFound for some reason. Does it go to the database? | 14:42 |
| *** markvoelker_ has joined #openstack-keystone | 14:42 | |
| *** browne has joined #openstack-keystone | 14:42 | |
| bknudson | a function could be made to get the token out of the context rather than copy-pasting | 14:43 |
| stevemar | yeah, i was thinking of making a utility function | 14:43 |
| stevemar | lots o copy paste going on | 14:43 |
| *** markvoelker has quit IRC | 14:44 | |
| *** browne1 has quit IRC | 14:45 | |
| *** zzzeek has joined #openstack-keystone | 14:45 | |
| *** chenhong has joined #openstack-keystone | 14:47 | |
| jdandrea | New reality check Q: Do tokens (v2 or v3) have tenant scope? That is, given a token can I find out the tenant that was in play when it was issued? | 14:48 |
| *** ajayaa has joined #openstack-keystone | 14:48 | |
| chenhong | dstanek: ping | 14:48 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain field in Project Table https://review.openstack.org/157427 | 14:49 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraint https://review.openstack.org/158372 | 14:49 |
| *** htruta has joined #openstack-keystone | 14:49 | |
| *** fhubik_afk is now known as fhubik | 14:54 | |
| stevemar | jdandrea: the project the token is capable of being used with should be in the token data | 14:55 |
| openstackgerrit | Merged openstack/keystone: Replace reference of ksc with osc https://review.openstack.org/200998 | 14:56 |
| marekd | morganfainberg: jamielennox: the proper way to import ksa is import keystoneauth1 not keystoneauth, right? | 14:59 |
| morganfainberg | marekd: yes | 15:00 |
| marekd | morganfainberg: thank you. | 15:00 |
| morganfainberg | For the newest release | 15:00 |
| marekd | morganfainberg: i like the latest and stuff :-) | 15:00 |
| morganfainberg | Hehe | 15:00 |
| morganfainberg | We need to remove Oslo.config from it and I think we are very close to done. | 15:01 |
| morganfainberg | I don't know how to do that though. Need to bug jamielennox | 15:01 |
| jdandrea | stevemar: Thanks! | 15:01 |
| jdandrea | If I understand correctly, I can't get the default tenant using v2 (given a token and nothing else), but I *can* get that in v3. | 15:07 |
| *** ChanServ changes topic to "Keystone MidCycle this week, no IRC meeting." | 15:08 | |
| *** ankita_wagh has joined #openstack-keystone | 15:08 | |
| * marekd #yay | 15:09 | |
| dims_ | morganfainberg: is this the current etherpad for mid-cycle? https://etherpad.openstack.org/p/keystone-liberty-midcycle-meetup | 15:12 |
| bknudson | I wonder where I'm supposed to show up on Wed. | 15:13 |
| bknudson | I'll be in the area, so I would just wander around | 15:13 |
| dims_ | bknudson: i was going to ask the same question :) | 15:13 |
| * morganfainberg points to ayoung | 15:13 | |
| dims_ | and what time do we start :) | 15:13 |
| morganfainberg | ask him | 15:13 |
| morganfainberg | ;) | 15:14 |
| bknudson | dims_: is there a good coffee shop around there? | 15:14 |
| dims_ | :) | 15:14 |
| morganfainberg | dims_: and yes that is the etherpad afaik | 15:14 |
| lbragstad | bknudson: dims_ I'd be up for some coffee | 15:14 |
| *** afazekas has quit IRC | 15:15 | |
| *** jaosorior has quit IRC | 15:16 | |
| ayoung | I got points? Cool! | 15:16 |
| dims_ | lbragstad: bknudson: http://pavementcoffeehouse.com/content/736-commonwealth | 15:16 |
| ayoung | yes there is bknudson | 15:16 |
| lbragstad | oh, cool.. that's really close | 15:17 |
| lbragstad | when is everyone getting into Boston? | 15:17 |
| dims_ | ayoung: we are all eagerly waiting for the location and time :) | 15:17 |
| dims_ | lbragstad: am commuting :) | 15:18 |
| lbragstad | I'll be in town sometime tomorrow afternoon | 15:18 |
| bknudson | lbragstad: me too | 15:19 |
| morganfainberg | i'll be landing tomorrow evening | 15:19 |
| *** rwsu has joined #openstack-keystone | 15:19 | |
| bknudson | flight arrives at 1:45 | 15:19 |
| bknudson | assuming the weather is ok | 15:20 |
| lbragstad | bknudson: I land at 2:28 | 15:20 |
| lbragstad | Logan Intl | 15:20 |
| *** markvoelker has joined #openstack-keystone | 15:20 | |
| bknudson | lbragstad: I can wait around. what's the flight? | 15:20 |
| lbragstad | US Airways 1778 | 15:21 |
| bknudson | lbragstad: I'm on delta 818, in case you get there first | 15:21 |
| lbragstad | bknudson: noted | 15:22 |
| lbragstad | bknudson: what hotel? | 15:22 |
| *** markvoelker_ has quit IRC | 15:22 | |
| lbragstad | Hyatt Regency Cambridge? | 15:22 |
| ayoung | should we all plan on meeting up tomorrow night? | 15:22 |
| bknudson | lbragstad: yep, that's it | 15:22 |
| ayoung | 9 AM start time | 15:22 |
| lbragstad | bknudson: cool! maybe we can split a cab | 15:23 |
| lbragstad | I'd also wait around if anyone else is getting in around that itme' | 15:23 |
| ayoung | morganfainberg, do you have an agenda, or do you want me to write it up? | 15:23 |
| *** markvoelker has quit IRC | 15:23 | |
| morganfainberg | ayoung: I don't have an agenda | 15:23 |
| lbragstad | ayoung: I'd be happy to meet up tomorrow night and start preparing | 15:23 |
| ayoung | OK | 15:23 |
| morganfainberg | the agenda is "do things that we need" | 15:23 |
| ayoung | meet in the hotel bar/restaurant in the Hyatt | 15:24 |
| * morganfainberg isn't at the hyatt...they were out of rooms. | 15:24 | |
| lbragstad | ayoung: time, or are we just going to troll the twitter-sphere | 15:24 |
| morganfainberg | oh just tuesday... hm. maybe i should switch hotels after tuesday... | 15:26 |
| morganfainberg | that hyatt is way less than the one i'm at... | 15:26 |
| ayoung | morganfainberg, where are you staying Tuesday night? | 15:26 |
| * morganfainberg facepalms, nope... prepaid teh hotel for the stya | 15:27 | |
| morganfainberg | ayoung: sheraton | 15:27 |
| morganfainberg | ayoung: other side of the river - ~2mi from BU | 15:27 |
| bknudson | must be really fancy | 15:27 |
| chenhong | morganfainberg: hi, it seems dstanek is not available now. Do you have time to review my two changs? | 15:27 |
| morganfainberg | bknudson: eh, it was about the same as everything in the HP travel system. | 15:27 |
| *** jsavak has quit IRC | 15:27 | |
| ayoung | morganfainberg, Sheraton Boston, at the Hynes? | 15:27 |
| morganfainberg | ayoung: uhm... think so | 15:28 |
| * morganfainberg shrugs. | 15:28 | |
| morganfainberg | i just booked the less expensive of the hotels. | 15:28 |
| morganfainberg | that could do the entire tues->sat for me | 15:28 |
| ayoung | morganfainberg, if the majhority of people are in the Hyatt Cambridge, lets meet up there. Fewer moving pieces. Dump your bags an either walk or T on over. Let me look into Citi bike, too. | 15:29 |
| morganfainberg | ayoung: was going to do either bike or uber over. | 15:29 |
| morganfainberg | NBD. | 15:29 |
| dims_ | ayoung: how about wed morning? | 15:30 |
| ayoung | morganfainberg, not worth Uber. two stops on the Green Line (c I think) and then walk across the bridge. Bike is awesome, but not sure if iuts well established in Boston yet | 15:30 |
| ayoung | http://www.thehubway.com/ | 15:30 |
| ayoung | dims_, where are you coming in from? | 15:30 |
| morganfainberg | ayoung: we'll see how lazy I am an how much uber costs :P | 15:30 |
| morganfainberg | i'm not there yet. | 15:30 |
| dims_ | ayoung: Sharon, MA. far south. i'll take the commuter then green line over | 15:30 |
| stevemar | morganfainberg: ayoung so we're having a team movie night on friday to watch ant man right? | 15:31 |
| ayoung | dims_, ah, excellent | 15:31 |
| ayoung | We used to beat up the Sharon kids | 15:31 |
| morganfainberg | stevemar: uh... *shrug* | 15:31 |
| marekd | stevemar: ant man? | 15:31 |
| dims_ | haha | 15:31 |
| * ayoung grew up in S-TOUGH-ton | 15:31 | |
| marekd | stevemar: uh, i am leaving friday evening :/ | 15:31 |
| dims_ | hadn't heard that :) | 15:31 |
| stevemar | doh! | 15:31 |
| ayoung | morganfainberg, https://secure.thehubway.com/map/ | 15:31 |
| stevemar | me too, but not til 10ish | 15:31 |
| ayoung | morganfainberg, just bring your own helm | 15:31 |
| marekd | stevemar: i have flight at 9.30pm | 15:31 |
| morganfainberg | i was going to rend a road bike for the whole trip... but figured it wasn't worth it. | 15:32 |
| morganfainberg | going to be indoors too much | 15:32 |
| stevemar | marekd: oh wait, my flight departs at 8:55 | 15:32 |
| morganfainberg | ayoung: it's sad, the weather in boston is going to be less humid and cooler than the weather in pasadena | 15:32 |
| *** thedodd has joined #openstack-keystone | 15:32 | |
| stevemar | marekd: looks like we'll be airport travel buddies! | 15:32 |
| morganfainberg | ~80% humidity here :( | 15:32 |
| marekd | stevemar: couldn't ask for a better buddy (no sarcasm!) | 15:32 |
| ayoung | morganfainberg, its really nice here right now. Took the kids to an outdoor pool last two days. | 15:33 |
| morganfainberg | ayoung: no doubt. | 15:33 |
| ayoung | morganfainberg, looks like Hubway is da kine | 15:33 |
| morganfainberg | ayoung: yeah i miht do hubway... i should buy an el-cheapo helmet though. | 15:34 |
| ayoung | There are two near your hotel, and guessing that they will be full in the morning | 15:34 |
| ayoung | ++ | 15:34 |
| dims_ | ayoung: 111 Cummington Mall (MCS Building) on wed? | 15:34 |
| morganfainberg | i don't trust taking my nice helmet with me. | 15:34 |
| ayoung | morganfainberg, temped to learn how to make my own. Use that spray foam or something | 15:34 |
| *** jsavak has joined #openstack-keystone | 15:34 | |
| ayoung | dims_, yeah | 15:34 |
| morganfainberg | ayoung: not worth it. if you miss on making it, you'll have a bad time in a crash | 15:35 |
| ayoung | dims_, trying to find the actual room, it is up on 5. I'll print up some sings to direct people | 15:35 |
| dims_ | guess we start around 9 AM? | 15:35 |
| ayoung | morganfainberg, yeah | 15:35 |
| morganfainberg | ayoung: and, lets be fair, we need you to be able to still program / think | 15:35 |
| morganfainberg | :P | 15:35 |
| ayoung | dims_, https://etherpad.openstack.org/p/keystone-liberty-midcycle-meetup | 15:35 |
| dims_ | ayoung: thanks! | 15:35 |
| ayoung | morganfainberg, I'll be biking in from Arlington. I'll have my real bike and Helmet. | 15:35 |
| morganfainberg | you're not sitting on a transcon flight | 15:36 |
| ayoung | But I need to borrow one in NYC last week | 15:36 |
| ayoung | needed | 15:36 |
| morganfainberg | if it wasn't a transcon i'd totally be doing a nice road bike there :( | 15:36 |
| ayoung | morganfainberg, yeah...just not sure if there is such a thing as "el cheepo:" when if comes to helms | 15:36 |
| *** toddnni has quit IRC | 15:36 | |
| *** radez_g0n3 has quit IRC | 15:36 | |
| *** miguelgrinberg has quit IRC | 15:36 | |
| *** cinerama has quit IRC | 15:36 | |
| *** mordred has quit IRC | 15:36 | |
| *** lars1 has quit IRC | 15:36 | |
| *** Dave has quit IRC | 15:36 | |
| *** nonameentername has quit IRC | 15:36 | |
| *** mitz_ has quit IRC | 15:36 | |
| *** hugokuo has quit IRC | 15:36 | |
| *** mkoderer has quit IRC | 15:36 | |
| *** kragniz has quit IRC | 15:36 | |
| *** charz has quit IRC | 15:36 | |
| *** Zanatoz has quit IRC | 15:36 | |
| *** gsilvis has quit IRC | 15:36 | |
| *** chmouel has quit IRC | 15:36 | |
| *** cburgess has quit IRC | 15:36 | |
| *** telemonster has quit IRC | 15:36 | |
| *** tristanC has quit IRC | 15:36 | |
| *** 18VAACHA6 has quit IRC | 15:36 | |
| *** grantbow has quit IRC | 15:36 | |
| *** kragniz has joined #openstack-keystone | 15:37 | |
| ayoung | morganfainberg, want me to try and scare you up a real bike? | 15:37 |
| *** Dave has joined #openstack-keystone | 15:37 | |
| *** gsilvis has joined #openstack-keystone | 15:37 | |
| *** Zanatoz has joined #openstack-keystone | 15:37 | |
| *** tristanC has joined #openstack-keystone | 15:37 | |
| *** lars1 has joined #openstack-keystone | 15:37 | |
| dims_ | ooo, netsplit | 15:37 |
| *** telemonster has joined #openstack-keystone | 15:37 | |
| *** radez_g0n3 has joined #openstack-keystone | 15:37 | |
| *** dan_ has joined #openstack-keystone | 15:37 | |
| *** radez_g0n3 has quit IRC | 15:37 | |
| *** radez_g0n3 has joined #openstack-keystone | 15:37 | |
| *** nonameentername has joined #openstack-keystone | 15:37 | |
| *** mkoderer has joined #openstack-keystone | 15:37 | |
| *** mitz has joined #openstack-keystone | 15:37 | |
| *** cburgess has joined #openstack-keystone | 15:37 | |
| *** cinerama has joined #openstack-keystone | 15:37 | |
| *** mordred has joined #openstack-keystone | 15:37 | |
| *** miguelgrinberg_ has joined #openstack-keystone | 15:37 | |
| *** toddnni has joined #openstack-keystone | 15:37 | |
| *** dan_ is now known as Guest10549 | 15:37 | |
| morganfainberg | ayoung: all bike helmets have the same crash rating [if they are certified] | 15:37 |
| morganfainberg | ayoung: the cost just is about airflow / etc | 15:37 |
| *** charz has joined #openstack-keystone | 15:37 | |
| *** chmouel has joined #openstack-keystone | 15:37 | |
| ayoung | morganfainberg, define "el cheapo" then, cuz I wasn't able to find anything belo $60 | 15:38 |
| *** pcaruana has quit IRC | 15:38 | |
| *** hugokuo has joined #openstack-keystone | 15:38 | |
| morganfainberg | ... | 15:39 |
| dims_ | ayoung: google maps points to "Physics Research Bldg" | 15:39 |
| *** rm_work is now known as rm_work|away | 15:39 | |
| ayoung | dims_, it has many names | 15:39 |
| dims_ | ah ok | 15:39 |
| gsilvis | it's the Physics Research Building, but also the Biology Research Building (conjoined) | 15:40 |
| *** __morgan__ has joined #openstack-keystone | 15:41 | |
| __morgan__ | ok sooo... | 15:41 |
| __morgan__ | irccloud just died. | 15:41 |
| __morgan__ | ayoung: so helmets, the cheap ones (~$50?) are just less airflow than the pricy ones | 15:42 |
| __morgan__ | they're really all the same protection | 15:42 |
| morganfainberg | ... test ... | 15:43 |
| ayoung | morganfainberg, what do we need to cover: spec reviews, malingering code reviews.... | 15:43 |
| *** christx2 has quit IRC | 15:43 | |
| __morgan__ | ayoung: i think mostly the malingering code stuff | 15:43 |
| __morgan__ | specs for the key featuee things people are working on | 15:44 |
| ayoung | __morgan__, somewhere we have an attendence etherpad | 15:44 |
| __morgan__ | ayoung: on the wiki | 15:44 |
| __morgan__ | ayoung: afaik | 15:44 |
| __morgan__ | https://wiki.openstack.org/wiki/Sprints/KeystoneLibertySprint | 15:45 |
| morganfainberg | ayoung: i can rent one easily | 15:49 |
| *** __morgan__ has quit IRC | 15:49 | |
| *** __morgan__ has joined #openstack-keystone | 15:49 | |
| __morgan__ | ayoung: easy to rent one... | 15:50 |
| __morgan__ | ayoung: just not sure if I want to worry about securing it etc. | 15:50 |
| *** ankita_wagh has quit IRC | 15:51 | |
| *** morganfainberg has quit IRC | 15:51 | |
| *** morganfainberg has joined #openstack-keystone | 15:52 | |
| *** ChanServ sets mode: +v morganfainberg | 15:52 | |
| morganfainberg | ... | 15:54 |
| morganfainberg | oh hey | 15:54 |
| morganfainberg | this is working again | 15:55 |
| *** fhubik has quit IRC | 15:56 | |
| breton | fg | 15:56 |
| breton | sorry. | 15:56 |
| *** jsavak has quit IRC | 15:56 | |
| *** diazjf has joined #openstack-keystone | 15:56 | |
| *** jsavak has joined #openstack-keystone | 15:57 | |
| lbragstad | marekd: around? | 15:58 |
| marekd | lbragstad: not for long, but yes | 15:59 |
| *** mabrams has left #openstack-keystone | 15:59 | |
| lbragstad | marekd: alright, just a super quick question | 16:00 |
| marekd | lbragstad: sure. | 16:00 |
| lbragstad | marekd: http://docs.openstack.org/developer/keystone/federation/shibboleth.html#configuring-shibboleth2-xml | 16:00 |
| morganfainberg | brutal netsplit going on | 16:00 |
| lbragstad | marekd: I can generate my metadata from my keystone service provider | 16:00 |
| lbragstad | marekd: those docs don't necessarily say how to upload that metadata to a Keystone IDP | 16:01 |
| marekd | lbragstad: we don't upload this to Keystone-IdP | 16:01 |
| *** jsavak has quit IRC | 16:01 | |
| lbragstad | marekd: so this step wget --no-check-certificate -O <name of the file> https://service.example.org/Shibboleth.sso/Metadata ? | 16:01 |
| lbragstad | because the docs say 'Upload your Service Provider’s Metadata file to your Identity Provider. This step depends on your Identity Provider choice and is not covered here.' | 16:01 |
| *** jsavak has joined #openstack-keystone | 16:02 | |
| ayoung | topol | 16:03 |
| ayoung | ' | 16:03 |
| ayoung | topol's on site | 16:03 |
| marekd | lbragstad: this is generally true when you setup your Keystone-SP and federate it with a 1-st class IdP (Shibboleth IdP, ADFS or so). Then you will very likely need to hand such metadata to the IdP. In case of K2K and Keystone-IdP we don't do this - Keystone-idp iis just not a fully fledged IdP. | 16:03 |
| *** gyee has joined #openstack-keystone | 16:03 | |
| *** arunkant has joined #openstack-keystone | 16:03 | |
| *** ChanServ sets mode: +v gyee | 16:03 | |
| marekd | lbragstad: but remember that even in K2K, you need Metadata generated by Keystone-idp, and you need to upload this to Keystone-sp. | 16:03 |
| lbragstad | marekd: ok, so I have it backwards | 16:04 |
| marekd | lbragstad: normally it's two way metadata exvhange | 16:04 |
| lbragstad | I need to generate the metadata from the idp and then upload it to the sp | 16:04 |
| marekd | lbragstad: in k2k yes. | 16:04 |
| lbragstad | marekd: in k2k it's only one way | 16:04 |
| lbragstad | ? | 16:04 |
| marekd | lbragstad: yes. | 16:04 |
| lbragstad | marekd: ok, cool. so on the keystone idp i do a `$ keystone-manage saml_idp_metadata > /etc/keystone/saml2_idp_metadata.xml` | 16:05 |
| marekd | normal federation : sp->idp AND idp->sp | 16:05 |
| marekd | k2k: idp->sp | 16:05 |
| lbragstad | and then I place /etc/keystone/saml2_idp_metadata.xml on the keystone sp node | 16:05 |
| marekd | lbragstad: you can place it, very often sp just queries some URL that you specify, and this is also available on Keystone. | 16:06 |
| marekd | such link would be...(let me check) | 16:06 |
| marekd | http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html#retrieve-metadata-properties | 16:06 |
| *** annasort has joined #openstack-keystone | 16:06 | |
| lbragstad | marekd: so I put that URL in the shibboleth2.xml file on the service provider | 16:07 |
| marekd | lbragstad: yep | 16:07 |
| lbragstad | marekd: so the service provider knows where to get the metadata from the idp | 16:07 |
| lbragstad | coo | 16:07 |
| lbragstad | cool* | 16:07 |
| marekd | yes | 16:07 |
| lbragstad | marekd: thanks for your help | 16:08 |
| marekd | lbragstad: no worries! | 16:08 |
| marekd | lbragstad: remember, that this week we fix fedfernet tokens :P | 16:08 |
| lbragstad | marekd: let me give this a shot, I'm working on adding a federation branch to keystone deploy so we can test federated k2k from source | 16:08 |
| marekd | cool! | 16:08 |
| lbragstad | marekd: ++, that's why I want to get this done before the midcycle so that we can use it | 16:08 |
| marekd | i will prepare some machines before i leave tomorrow. Hopefully the internet connectivity will be ok, as we will need to work on VMs in Europe. | 16:09 |
| marekd | ok, need to run. cheers! | 16:09 |
| lbragstad | marekd: sounds good! | 16:10 |
| *** arunkant has quit IRC | 16:10 | |
| *** mylu has quit IRC | 16:10 | |
| chenhong | hi, could somebody review my two changes. There are almost approved, but need core to review them. | 16:10 |
| chenhong | https://review.openstack.org/#/c/187899/ and https://review.openstack.org/#/c/197184/ | 16:10 |
| *** mylu has joined #openstack-keystone | 16:11 | |
| chenhong | gyee: hi | 16:13 |
| ayoung | chenhong, can you get the typo https://review.openstack.org/#/c/197184/4/keystone/tests/unit/test_v3.py | 16:14 |
| ayoung | I'll look through the rest of it, but I assume it is just moving code? | 16:14 |
| gyee | chenhong, looking | 16:15 |
| chenhong | ayoung: The first change need the assignment helper functions from test_v3_assignments | 16:15 |
| ayoung | chenhong, the first change is just a move, right? | 16:15 |
| ayoung | wondering how the type got in there | 16:16 |
| chenhong | ayoung: So, dstanek suggested me to move them up. Yes, just move | 16:16 |
| *** miguelgrinberg_ is now known as miguelgrinberg | 16:16 | |
| gyee | chenhong, found a small typo on the first patch | 16:16 |
| gyee | you want to push another patch? | 16:16 |
| ayoung | and that is a new commnet. Rest of the patch looks good | 16:16 |
| chenhong | ayoung: That's a typo. I fix it now | 16:17 |
| ayoung | chenhong, thanks. JHave to +2 and have it get dropped due to a typo | 16:17 |
| chenhong | ayound: I will fix it right now. Can you look it again later? | 16:17 |
| gyee | ayoung, a non-technical question, are the Ts from airport running all night? | 16:17 |
| ayoung | gyee, fairly late. What time do you arrive? | 16:18 |
| ayoung | chenhong, just ping me when its fixed | 16:19 |
| gyee | ayoung, 10:30pm-ish | 16:19 |
| chenhong | ayoung: thanks. | 16:20 |
| *** mylu has quit IRC | 16:20 | |
| *** chenhong has quit IRC | 16:20 | |
| *** chenhong has joined #openstack-keystone | 16:21 | |
| chenhong | what abount the second change? Is it all right? | 16:21 |
| gyee | second change looks good | 16:21 |
| gsilvis | gyee: the T runs a little past midnight, but not all night | 16:21 |
| *** e0ne has quit IRC | 16:21 | |
| *** mgarza_ has joined #openstack-keystone | 16:22 | |
| gyee | gsilvis, thanks for the info | 16:22 |
| gsilvis | gyee: no problem | 16:22 |
| samueldmq | ayoung: hey | 16:23 |
| * morganfainberg wonders if seat upgrade will happen for flight tomorrow. | 16:24 | |
| ayoung | gyee, you should be fine | 16:24 |
| samueldmq | ayoung: this morning I got very excited when testing the patches for ksmiddleware + oslo.policy | 16:24 |
| gyee | morganfainberg, first class huh? ^^ | 16:24 |
| ayoung | samueldmq, this morning has mee frantically preparintg for the midcycle, as well as trying to test federation with sssd | 16:24 |
| samueldmq | ayoung: I do a change in a policy, update that in keystone, and that affects glance enforcement ;-) | 16:24 |
| morganfainberg | gyee: i'm 3rd on the upgrade list atm - and 6 open seats | 16:24 |
| ayoung | samueldmq, that is how it is supposed to work, cool | 16:25 |
| openstackgerrit | Chenhong Liu proposed openstack/keystone: Centralizing build_role_assignment_* functions https://review.openstack.org/197184 | 16:25 |
| samueldmq | ayoung: yeah, but for now I set middleware to fetch a policy by id .. since I can't do by endpoint_id (lack of support in ksclient) | 16:25 |
| ayoung | samueldmq its a start | 16:25 |
| ayoung | samueldmq, but I kinda want ids to be immutable | 16:26 |
| samueldmq | ayoung: aren't they today already ? | 16:26 |
| morganfainberg | gyee: it's a 737 though, so really it's just businessclass upgrade not the super nice lay-flat 1st class thing | 16:26 |
| ayoung | I kinda want ids to be a sha256 | 16:26 |
| *** ankita_wagh has joined #openstack-keystone | 16:26 | |
| openstackgerrit | Chenhong Liu proposed openstack/keystone: Add testcases for list_role_assignments of v3 domains https://review.openstack.org/187899 | 16:26 |
| *** mylu has joined #openstack-keystone | 16:26 | |
| morganfainberg | ayoung: lets use a ASN1 signature /s | 16:27 |
| morganfainberg | ayoung: as the id... | 16:27 |
| ayoung | morganfainberg, I suspect you are not joking | 16:27 |
| *** ankita_wagh has quit IRC | 16:27 | |
| morganfainberg | ayoung: i am joking | 16:28 |
| ayoung | damn | 16:28 |
| morganfainberg | ayoung: it would be awful to use as an id. | 16:28 |
| *** ankita_wagh has joined #openstack-keystone | 16:28 | |
| chenhong | ayoung: ping. The new patch sets are submitted | 16:28 |
| ayoung | morganfainberg, I'd like to make is the SHA256, and that way we can: identity two different things that need the same policy as actually using the same policy | 16:28 |
| ayoung | chenhong, +2 on the first | 16:28 |
| *** edmondsw has quit IRC | 16:29 | |
| ayoung | gyee, care to kick that one over..it is trivial | 16:29 |
| morganfainberg | ayoung: sure. | 16:29 |
| ayoung | and a good refactoring ,suggested by dstanek | 16:29 |
| gyee | ayoung, yes, waiting on jenkins | 16:29 |
| morganfainberg | ayoung: and it at least is something we can "know" before upload | 16:29 |
| morganfainberg | so covers my concern | 16:29 |
| ayoung | gyee, no need to wait on jenkis. If Jenkins doesn;t like it, it will reject it. | 16:29 |
| gyee | ayoung, k | 16:29 |
| chenhong | Thanks to all of you. | 16:29 |
| ayoung | and we are not in crazy merge deadlines right now | 16:29 |
| gyee | morganfainberg, you staying in the Hyatt too? | 16:30 |
| morganfainberg | gyee: no | 16:30 |
| ayoung | chenhong, did we really not have any tests for these>? | 16:31 |
| morganfainberg | gyee: they were booked up =/ | 16:31 |
| gyee | ah | 16:31 |
| morganfainberg | gyee: staying at the sheraton. | 16:31 |
| gyee | looks like it will be rain most of next week | 16:31 |
| gyee | walking in the rain will be fun :) | 16:31 |
| chenhong | ayoung: When I wrote these test cases in early June, we didn't have any. | 16:31 |
| lbragstad | \o/ gyee that's a good thing | 16:31 |
| *** _cjones_ has joined #openstack-keystone | 16:31 | |
| lbragstad | then i can use my awesome openstack rain jacket from Vancouver | 16:32 |
| *** grantbow has joined #openstack-keystone | 16:32 | |
| *** grantbow has joined #openstack-keystone | 16:32 | |
| gyee | lbragstad, good idea! | 16:32 |
| ayoung | chenhong, the tests are good, but I bet you looked in the wrong place. | 16:32 |
| lbragstad | gyee: it was like it was planned! | 16:32 |
| chenhong | ayoung: As I always following review in keystone, we still have none. | 16:32 |
| ayoung | willing to let these go in anyway, but let me see... | 16:32 |
| morganfainberg | ayoung: i was pondering doing a rental from: http://www.urbanadventours.com/rent/road/ | 16:32 |
| morganfainberg | ayoung: but that gets pricy for just "wandering" aroudn the city | 16:32 |
| morganfainberg | ayoung: i think the one you linked (citybike equiv) before is the best bet | 16:33 |
| ayoung | morganfainberg, there are bike racks/ locks right outside the Physics building | 16:33 |
| morganfainberg | ayoung: but $100/day is pricy for ~2mi | 16:33 |
| gyee | lbragstad, all in the grand plan | 16:33 |
| ayoung | Hub bikes are clunky, but they will get you around | 16:33 |
| morganfainberg | i don't think i'll get a real ride in | 16:33 |
| ayoung | morganfainberg, when do you flee? | 16:33 |
| morganfainberg | ayoung: sat. morning | 16:33 |
| morganfainberg | i think | 16:33 |
| * morganfainberg checks | 16:33 | |
| lbragstad | I'm tempted to try and get a run in | 16:33 |
| chenhong | ayoung: Does any other place have these test cases? | 16:33 |
| ayoung | morganfainberg, ooooh, we can get you a bike ride in, then | 16:33 |
| morganfainberg | yeah 750am saturday | 16:34 |
| lbragstad | ayoung: any recommendations? ^ | 16:34 |
| ayoung | lbragstad, for bike rides? | 16:34 |
| *** krykowski has quit IRC | 16:34 | |
| ayoung | lbragstad, for run, esplanade | 16:34 |
| lbragstad | ayoung: just running | 16:34 |
| ayoung | lbragstad, along the river, north or south, good run routes | 16:34 |
| morganfainberg | ayoung: i wont get my ~100mi of riding in this week :( but i'll get at least 20 today | 16:34 |
| lbragstad | ayoung: ++ thanks! | 16:34 |
| ayoung | lbragstad, http://www.angio.net/personal/run/charles_river_map.jpg | 16:35 |
| *** jsavak has quit IRC | 16:35 | |
| *** kiran-r has joined #openstack-keystone | 16:35 | |
| samueldmq | morganfainberg: ayoung actually ... if we keep the policy by endpoints (it doesn't matter if we get the id by look up with the URL), the deployer'd need the id to associate the policy to the endpoint :( | 16:35 |
| morganfainberg | ayoung: but if you think there would *actually* be time for a real ride i'll pack my shoes and other things. | 16:35 |
| *** jsavak has joined #openstack-keystone | 16:35 | |
| ayoung | lbragstad, see up where is says fresh pond? That is where I will be coming from | 16:35 |
| lbragstad | ayoung: oh man... | 16:35 |
| samueldmq | ayoung: morganfainberg I meant policy by endpoint id | 16:35 |
| ayoung | morganfainberg, Friday night, after the closing ceremonies. Big loop around the river | 16:36 |
| ayoung | samueldmq, so, on endpoint ID, ... I think we can calculate, based one the URL. What if we do this: | 16:36 |
| lbragstad | ayoung: this is perfect, thanks | 16:36 |
| morganfainberg | ayoung: hm.. i'll toss my shoes in the bag. prob should toss the pedals in too. | 16:36 |
| ayoung | admin user queries the entire service catalog from Keystone, once | 16:36 |
| ayoung | looks through the endpoints, pulls out the URLS | 16:36 |
| ayoung | and looks for one that gives a"python string startswith" match of the current URL | 16:37 |
| gyee | lbragstad, what's your pace? 8min/mile? | 16:37 |
| lbragstad | gyee: depends on if I'm training for anything ;) | 16:37 |
| ayoung | morganfainberg, I have a bigger bike map somewhere, too | 16:37 |
| * morganfainberg needs to start running... | 16:37 | |
| lbragstad | gyee: wanna join? | 16:38 |
| samueldmq | ayoung: that's not covering morgan's requirement .. we still need to look up the ids at keystone this way | 16:38 |
| gyee | I am about 10min/mile | 16:38 |
| gyee | gettin old | 16:38 |
| lbragstad | gyee: that works for me | 16:38 |
| * morganfainberg wonders if convincing lbragstad to do a 70.3 would be possible. | 16:38 | |
| *** anhhuynx has joined #openstack-keystone | 16:38 | |
| samueldmq | ayoung: and we'll always need if we do policy by endpoint_id | 16:38 |
| *** raildo has quit IRC | 16:38 | |
| morganfainberg | gyee: whats a 10min/mile pace like? | 16:38 |
| lbragstad | morganfainberg: maybe after a beer or two you could talk me into it | 16:38 |
| morganfainberg | i've not been running in a looong time | 16:38 |
| ayoung | samueldmq, what requreiment? | 16:38 |
| gyee | morganfainberg, snaily | 16:38 |
| lbragstad | gyee: I'll start training for the SA half in about 8 weeks | 16:39 |
| morganfainberg | lbragstad: the question is could i convince you and would i just need to keep feeding you beer to keep you convinced? | 16:39 |
| samueldmq | ayoung: to be able to configura the dynamic policy based on an info known a priori, like URL | 16:39 |
| morganfainberg | lbragstad: and do you cycle/swim at all | 16:39 |
| openstackgerrit | Solomon proposed openstack/keystone: Adds script that checks for etc/keystone.conf https://review.openstack.org/199758 | 16:39 |
| lbragstad | morganfainberg: nope, been looking at bikes but haven't pull the trigger yet. | 16:39 |
| lbragstad | morganfainberg: just lots of running... | 16:39 |
| morganfainberg | lbragstad: 1.2-mile swim, 56-mile bike ride, 13.1 mile run | 16:40 |
| openstackgerrit | Fernando Diaz proposed openstack/keystone: Adding Documentation for Mapping Combinations https://review.openstack.org/192850 | 16:40 |
| morganfainberg | lbragstad: (in that order) | 16:40 |
| lbragstad | morganfainberg: so a half iron man | 16:40 |
| *** christx2 has joined #openstack-keystone | 16:40 | |
| morganfainberg | lbragstad: yep | 16:40 |
| lbragstad | morganfainberg: I'd do that | 16:40 |
| morganfainberg | lbragstad: 70.3 miles | 16:40 |
| *** TheIntern has quit IRC | 16:40 | |
| morganfainberg | lbragstad: nice. my goal is to pick one to sign up for towards the end of this year | 16:40 |
| gyee | somebody call an ambulance for me at about 20 miles in :) | 16:41 |
| morganfainberg | the entrance fees are pricy. | 16:41 |
| morganfainberg | like $300-500 | 16:41 |
| morganfainberg | though | 16:41 |
| ayoung | samueldmq, this is all known A-priori... | 16:41 |
| lbragstad | morganfainberg: yeah, they are... | 16:41 |
| *** chenhong has quit IRC | 16:41 | |
| lbragstad | gyee: that's where I usually start to give out... | 16:41 |
| ayoung | samueldmq, if a request makes it through the middleware, it will be the right URL | 16:41 |
| *** chenhong has joined #openstack-keystone | 16:41 | |
| morganfainberg | lbragstad: i just bought my tri bike ;) | 16:41 |
| lbragstad | morganfainberg: nice! | 16:41 |
| ayoung | so, lets say that the CMS, once it registers the endpoint with Keystone, just needs to do a wget of the discovery URL: | 16:42 |
| ayoung | http://nova:port/ | 16:42 |
| samueldmq | ayoung: the fetch will be automatic .. but the OS-ENDPOINT-POLICY tells us we need endpoint_ids to associate | 16:42 |
| *** christx2 has quit IRC | 16:42 | |
| morganfainberg | https://usercontent.irccloud-cdn.com/file/WKzB7H3b/IMG_0420.JPG | 16:42 |
| *** christx2 has joined #openstack-keystone | 16:42 | |
| ayoung | with that URL, passed in to keystone middleware, we can select the endpoint | 16:42 |
| morganfainberg | lbragstad: ^^ | 16:42 |
| ayoung | morganfainberg, is ^^ right? | 16:42 |
| morganfainberg | ayoung: reading | 16:43 |
| ayoung | morganfainberg, if a user hits the endpoint, will the "*right* URL be passed in? | 16:43 |
| lbragstad | morganfainberg: <3 awesome | 16:43 |
| gyee | nice bike! | 16:43 |
| morganfainberg | lbragstad: haven't put the 404s on it yet or the electronic shifters. | 16:43 |
| morganfainberg | lbragstad: but it's awesome. | 16:43 |
| ayoung | so, say it does a request for http://nova:port/someurl and that is protected by auth token middleware, would ATM get http://nova:port/someurl | 16:43 |
| lbragstad | fancy | 16:43 |
| ayoung | even if it is through a load balancer, etc? | 16:43 |
| morganfainberg | ayoung: yeah we might have an issue there | 16:44 |
| ayoung | morganfainberg, do the URLs get rewritten? | 16:44 |
| morganfainberg | ayoung: so, the request URL shouldn't be rewritten in most cases, but there is no guarantee | 16:44 |
| ayoung | I mean, the user requests that, I would think that the load balancer might mcuk with the IP address. | 16:44 |
| morganfainberg | ayoung: depends on the loadbalancer | 16:44 |
| ayoung | but not the Hostname | 16:44 |
| morganfainberg | ayoung: hostname might be mucked with too | 16:44 |
| morganfainberg | think non-reverse proxy | 16:45 |
| anhhuynx | morganfainberg: I'm having an issue with this bug https://bugs.launchpad.net/keystone/+bug/1473489 where the test script is doing it correctly but you cannot do it the normal method | 16:45 |
| openstack | Launchpad bug 1473489 in Keystone "Identity API v3 does not accept more than one query parameter" [Medium,Triaged] - Assigned to Anh Huynh (anhx-huynh) | 16:45 |
| morganfainberg | anhhuynx: that is the challenge with some of these bugs :( | 16:45 |
| ayoung | morganfainberg, "non-reverse proxy" would actually rewrite the contents of the HTTP request, not just the packet Header? | 16:45 |
| anhhuynx | morganfainberg: why would the test do it correctly? | 16:45 |
| anhhuynx | morganfainberg: do the tests run on separate methods? | 16:46 |
| morganfainberg | ayoung: it wouldn't proxy the request - it would make a new request to [backend_host]/<back_end_path> | 16:46 |
| morganfainberg | ayoung: people do L7 load balancing all the time | 16:46 |
| morganfainberg | ayoung: esp. if SSL is terminated at the LB | 16:46 |
| stevemar | theres a random "please describe" field when registering for summit | 16:46 |
| morganfainberg | anhhuynx: it could run through a slightly different code path | 16:46 |
| morganfainberg | anhhuynx: this is why we're trying to move to "functional" testing | 16:46 |
| morganfainberg | rather than trying to wedge the whole server into the test framework as well | 16:47 |
| ayoung | morganfainberg, so in those cases, the original URL requested is not preserved? That seems like it violates a spec or two | 16:47 |
| gyee | stevemar, yeah, just put some random shit in there | 16:47 |
| morganfainberg | anhhuynx: we(you and the rest of us) are going to also need to debug the tests. | 16:47 |
| stevemar | gyee: yeah, i did | 16:47 |
| lbragstad | stevemar: you bringing your shoes to Boston? | 16:47 |
| morganfainberg | ayoung: nope, totally valid to terminate the user request and make a new request to the backend | 16:47 |
| stevemar | i wasn't planning on going barefoor | 16:47 |
| stevemar | foot* | 16:48 |
| morganfainberg | ayoung: you can do any level of rewriting at that point. | 16:48 |
| ayoung | morganfainberg, yeah, that is true. Just unfriendly | 16:48 |
| gyee | stevemar, heh | 16:48 |
| morganfainberg | ayoung: and people do it. | 16:48 |
| morganfainberg | ayoung: so you're 100% spot on, can't assume URL is sane unless we just hard-code the URL into the config and pass that as the "get-policy" identifier | 16:48 |
| morganfainberg | s/hard code/specify | 16:48 |
| lbragstad | stevemar: damn... | 16:48 |
| ayoung | morganfainberg, so, we could do autodiscovery of endpoint in the normal case, and fallback to requireing URL as a config value in the reverse proxy case | 16:49 |
| stevemar | lbragstad: lol what were you referring to? i'm lost | 16:49 |
| lbragstad | stevemar: running shoes? | 16:49 |
| morganfainberg | ayoung: reverse proxy should be mostly ok, it's when you do full L7 balancing/termination+new request | 16:49 |
| stevemar | lbragstad: are we all running? is that a thing we're trying to organize? | 16:49 |
| gyee | stevemar, I actually do zero-drop these days | 16:50 |
| ayoung | morganfainberg, so lets start with the reverse proxy working case, and fall back to explicit url? | 16:50 |
| morganfainberg | ayoung: yeah thats fine. | 16:50 |
| anhhuynx | morganfainberg: you think it's better for me to try and fix my bug without messing with the tests? | 16:50 |
| morganfainberg | ayoung: direct access/reverse proxy|explicit url | 16:50 |
| lbragstad | stevemar: I was thinking about going for one, ayoung had a map of some cool trails | 16:50 |
| stevemar | lbragstad: i'm slow AF | 16:51 |
| morganfainberg | anhhuynx: you're going to need tests anyway - so we can fix the bug, but we need to ensure we don't regress | 16:51 |
| stevemar | i'll bring a pair, we can try for tuesday? | 16:51 |
| lbragstad | stevemar: sure! | 16:51 |
| stevemar | get ready for some heavy breathing and old man slowness | 16:51 |
| *** raildo has joined #openstack-keystone | 16:52 | |
| lbragstad | stevemar: lol, i'm just excited because it's not texas heat | 16:52 |
| stevemar | true that | 16:52 |
| samueldmq | ayoung: what do you need to put me as a speaker of the policy thing at the summit as well ? | 16:52 |
| samueldmq | ayoung: is it just my profile in openstack.org ? (https://www.openstack.org/community/members/profile/13876) | 16:53 |
| ayoung | samueldmq, I think so...let me see | 16:53 |
| morganfainberg | lbragstad: i'll toss in a pair of running shoes as well. just expect my running fitness to be *bad* compared to cycling. | 16:53 |
| anhhuynx | morganfainberg: how can we use the tests against regression if they have bugs in them? | 16:54 |
| stevemar | morganfainberg: i expect my any fitness to be bad compared to anything | 16:54 |
| stevemar | unless we're playing baseball, then i'll school you all :P | 16:55 |
| morganfainberg | stevemar: see i don't play baseball... so I'm safe there | 16:55 |
| gyee | you mean video game? :) | 16:55 |
| ayoung | samueldmq, what is your current title and affiliation? | 16:56 |
| morganfainberg | anhhuynx: figuring out why the test don't behave the same way is just as important as fixing the bugs. then we can confirm no regressions | 16:56 |
| samueldmq | ayoung: not sure we have specific titles .. just put 'Software Engineer' and affiliation 'HP / Distributed Systems Laboratory' | 16:58 |
| samueldmq | ayoung: is that something that can be updated later ? | 16:58 |
| samueldmq | morganfainberg: about the sfe for dynamic policies ? what is the next step ? | 16:59 |
| *** spandhe has joined #openstack-keystone | 16:59 | |
| samueldmq | morganfainberg: have to have a vote in the meeting ? wait to be decided in the midcycle ? | 17:00 |
| morganfainberg | samueldmq: having the cores respond to the email and say "yes/no" | 17:00 |
| morganfainberg | samueldmq: or voice concerns | 17:00 |
| samueldmq | morganfainberg: k I will do a request for votes in the meeting tomorrow .. since nobody responded so far | 17:00 |
| samueldmq | sounds right ? | 17:00 |
| morganfainberg | wont be a meeting tomorrow :P | 17:00 |
| morganfainberg | poke the cores today! :) | 17:01 |
| samueldmq | so I guess I won't ask at the meeting tomorrow | 17:01 |
| morganfainberg | most of us are travelling tomorrow | 17:01 |
| ayoung | samueldmq, https://www.openstack.org/summit/tokyo-2015/call-for-speakers/manage/4007/speaker/594/ | 17:01 |
| samueldmq | ayoung: editing right now .. thanks a ton | 17:02 |
| *** tqtran-afk has joined #openstack-keystone | 17:05 | |
| *** topol has joined #openstack-keystone | 17:05 | |
| *** ChanServ sets mode: +v topol | 17:05 | |
| *** vilobhmm has joined #openstack-keystone | 17:05 | |
| *** tqtran-afk is now known as tqtran | 17:05 | |
| anhhuynx | morganfainberg: there's this weird behavior with the test script where if I run pdb on it long enough just looking at stuffs and not modifying anything the script would actually fail | 17:06 |
| samueldmq | ayoung: am I presenting 'Using Kerberos in OpenStack' as well ? | 17:07 |
| samueldmq | :-) | 17:07 |
| dstanek | chenhong: hi | 17:08 |
| chenhong | dstanek: hi. | 17:09 |
| chenhong | dstanek: I looked for you to review my changes. But ayoung and gyee already reviewed them. Are you back from vacation? | 17:10 |
| ayoung | samueldmq, did I put you on the wrong one? | 17:10 |
| samueldmq | ayoung: you've put me on both | 17:10 |
| ayoung | samueldmq, you want to talk about Kerberos? | 17:10 |
| ayoung | Heh | 17:10 |
| *** jsavak has quit IRC | 17:11 | |
| samueldmq | ayoung: if I can learn what it is until tokyo I'd be happy to practice my presentation skills | 17:11 |
| ayoung | samueldmq, nah, I asked marekd if he wants to, but jhe hasn't responded yet | 17:12 |
| samueldmq | ayoung: k wfm | 17:12 |
| samueldmq | and now that's time! | 17:12 |
| samueldmq | keystone cores: could you please place your vote on the SFE for Dynamic Policies request by responding to https://www.mail-archive.com/openstack-dev@lists.openstack.org/msg57416.html ? | 17:12 |
| ayoung | samueldmq, I think you are only on the one, now. Let me see if it added you to the lab as well | 17:12 |
| samueldmq | dolphm: ayoung bknudson dstanek gyee henrynash jamielennox marekd morganfainberg stevemar topol ^^ please vote on the SFE for dynamic policies | 17:13 |
| dstanek | chenhong: yeah, my vacation was just Friday....today i've been closing open loops because I'll be traveling to Boston tomorrow | 17:13 |
| *** TheIntern has joined #openstack-keystone | 17:13 | |
| *** marzif_ has quit IRC | 17:13 | |
| chenhong | dstanek: You all going to Boston for mid cycle sprint | 17:13 |
| chenhong | with all you of have enjoy the sprint | 17:14 |
| chenhong | with all of you enjoy the sprint | 17:15 |
| ayoung | GAH, openstack meetup is Thursdan, not Wednesday. | 17:15 |
| *** ankita_w_ has joined #openstack-keystone | 17:16 | |
| *** ankita_wagh has quit IRC | 17:16 | |
| *** jsavak has joined #openstack-keystone | 17:17 | |
| gyee | samueldmq, morganfainberg, how do I vote? just do a reply all? | 17:17 |
| morganfainberg | gyee: yes. | 17:18 |
| gyee | okey | 17:18 |
| morganfainberg | gyee: plus comments/concerns/etc | 17:18 |
| samueldmq | ++ | 17:18 |
| gyee | meet-up starts on Thursday?! | 17:18 |
| *** browne has quit IRC | 17:18 | |
| gyee | just Thursday and Friday then? | 17:18 |
| gyee | what's the difference between SFE and FFE? | 17:20 |
| samueldmq | gyee: Spec Freeze Exception is keystone internal .. we've decided to adopt that | 17:21 |
| gyee | k | 17:21 |
| dstanek | chenhong: yep, mid-cycling. | 17:21 |
| *** jkomg has joined #openstack-keystone | 17:21 | |
| samueldmq | gyee: FFE is something defined by the foundation for all the projects I think | 17:21 |
| *** afaranha has joined #openstack-keystone | 17:21 | |
| samueldmq | gyee: that's as far as I can tell you :-) | 17:21 |
| *** afaranha has left #openstack-keystone | 17:21 | |
| gyee | samueldmq, yeah, I just saw the email | 17:22 |
| stevemar | ayoung: whats this now? thursday and friday? | 17:22 |
| * gyee still catching up | 17:22 | |
| samueldmq | gyee: :) | 17:22 |
| ayoung | Heh | 17:22 |
| gyee | Wed is clam chowder tasting day! | 17:22 |
| morganfainberg | stevemar: friday is "we swear we're not goofing off" day | 17:23 |
| zzzeek | morganfainberg: heya, do you have any immediate insight on where I should look regarding this failure? http://paste.openstack.org/show/371790/ | 17:24 |
| ayoung | gyee, I think that is appropriate | 17:24 |
| morganfainberg | zzzeek: that is an old version of oslo_config i think | 17:24 |
| zzzeek | morganfainberg: OK so…why is a brand new tox getting it? | 17:24 |
| morganfainberg | zzzeek: oh wait | 17:24 |
| morganfainberg | derp | 17:24 |
| morganfainberg | that is a config option hasn't been registered yet | 17:25 |
| morganfainberg | and someone is trying to reference it | 17:25 |
| zzzeek | morganfainberg: i suspect a different test is setting this up and because im only running a handful of tests, it isn there | 17:25 |
| zzzeek | e.g. bug | 17:25 |
| zzzeek | :) | 17:25 |
| *** chenhong has quit IRC | 17:25 | |
| morganfainberg | zzzeek: we have some issues where tests are not... well setup. | 17:25 |
| morganfainberg | it's a WIP to fix them all | 17:25 |
| *** vilobhmm has left #openstack-keystone | 17:25 | |
| zzzeek | morganfainberg: this started appearing in the past couple of weeks | 17:25 |
| zzzeek | morganfainberg: OK so i can post a launchpad bug at least | 17:26 |
| morganfainberg | zzzeek: =/ not sure off the top of my head, but i'd say it's likely that a test isnt isolated and not doing the proper setup | 17:27 |
| zzzeek | yep | 17:27 |
| morganfainberg | zzzeek: yean LP bug for sure. | 17:27 |
| *** iamjarvo has joined #openstack-keystone | 17:31 | |
| *** jistr has quit IRC | 17:31 | |
| samueldmq | ayoung: would be something like 'release immediately' for a policy be useful | 17:32 |
| *** ayoung is now known as ayoung-onfire | 17:33 | |
| ayoung-onfire | samueldmq, just got pulled into something | 17:33 |
| samueldmq | ayoung: then we'd include a specific header for tokens which include endpoints that use that policy | 17:33 |
| samueldmq | ayoung-onfire: sure :) | 17:33 |
| *** geoffarnold has joined #openstack-keystone | 17:34 | |
| stevemar | bknudson: ping | 17:34 |
| stevemar | bknudson: make sure you remember to bring the keystone dev jacket, we need to swap! | 17:34 |
| morganfainberg | stevemar: did you guys swap jackets by accident? | 17:35 |
| stevemar | morganfainberg: yep! | 17:35 |
| morganfainberg | lol | 17:35 |
| stevemar | i think it was in the mixup of the last day in the keystone half day | 17:35 |
| stevemar | there were a lot of bags there | 17:35 |
| stevemar | i need to write my name on a tag, like my parents did when i was a kid | 17:36 |
| dims_ | LOL | 17:37 |
| *** geoffarnold has quit IRC | 17:37 | |
| stevemar | there are like 10 jackets that look the exact same! | 17:37 |
| *** chlong-afk has quit IRC | 17:38 | |
| *** crc32 has joined #openstack-keystone | 17:38 | |
| *** geoffarnold has joined #openstack-keystone | 17:40 | |
| *** lhcheng has joined #openstack-keystone | 17:42 | |
| *** ChanServ sets mode: +v lhcheng | 17:42 | |
| *** kiran-r has quit IRC | 17:46 | |
| *** jk|osx has joined #openstack-keystone | 17:49 | |
| morganfainberg | stevemar: i tried to get IRC nicks on the sleeves... | 17:51 |
| morganfainberg | it didn't work out | 17:51 |
| bknudson | stevemar: the jacket is in my bag | 17:51 |
| stevemar | bknudson: <3 | 17:52 |
| *** jkomg has quit IRC | 17:53 | |
| *** edmondsw has joined #openstack-keystone | 17:53 | |
| lbragstad | rodrigods: what config option were you missing here? https://bugs.launchpad.net/keystone/+bug/1384382/comments/6 | 17:59 |
| openstack | Launchpad bug 1384382 in Keystone "GET /OS-FEDERATION/saml2/metadata does not work" [High,Fix released] - Assigned to Lance Bragstad (lbragstad) | 17:59 |
| *** browne has joined #openstack-keystone | 17:59 | |
| *** jsavak has quit IRC | 18:02 | |
| *** jsavak has joined #openstack-keystone | 18:04 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Use migration_cli for db migrations https://review.openstack.org/147548 | 18:09 |
| *** aix has quit IRC | 18:11 | |
| *** shaleh has joined #openstack-keystone | 18:15 | |
| *** __morgan__ has quit IRC | 18:16 | |
| *** geoffarnold has quit IRC | 18:17 | |
| jdandrea | Is PKI or UUID the default in Kilo? | 18:19 |
| *** tellesmvn has joined #openstack-keystone | 18:19 | |
| *** tellesnobrega has quit IRC | 18:20 | |
| *** tellesmvn is now known as tellesnobrega | 18:20 | |
| gyee | UUID | 18:21 |
| jdandrea | gyee: Thx. Did that change from PKI back in ... Icehouse? | 18:21 |
| morganfainberg | jdandrea: yeah. PKI had a lot of issues. | 18:22 |
| morganfainberg | jdandrea: especially around setup and size of tokens | 18:23 |
| jdandrea | morganfainberg: *nodnod* | 18:23 |
| morganfainberg | jdandrea: so, we reverted to uuid default. | 18:23 |
| jdandrea | morganfainberg: Aye, and appreciated! | 18:23 |
| * jdandrea is doing a bit of historical research. ;) | 18:23 | |
| *** jaosorior has joined #openstack-keystone | 18:27 | |
| *** miguelgrinberg has quit IRC | 18:28 | |
| gyee | jdandrea, https://review.openstack.org/#/c/110488/ | 18:28 |
| *** rwsu has quit IRC | 18:29 | |
| *** miguelgrinberg has joined #openstack-keystone | 18:29 | |
| *** miguelgrinberg has quit IRC | 18:29 | |
| *** geoffarnold has joined #openstack-keystone | 18:29 | |
| *** miguelgrinberg has joined #openstack-keystone | 18:30 | |
| jdandrea | gyee: Ahh, I remember this one now. Thank you! | 18:35 |
| *** jsavak has quit IRC | 18:35 | |
| *** jsavak has joined #openstack-keystone | 18:36 | |
| *** jk|osx has quit IRC | 18:38 | |
| *** jk|osx has joined #openstack-keystone | 18:39 | |
| *** rm_work|away is now known as rm_work | 18:54 | |
| topol | where do we vote on the SFE for dynamic policies? here or on the mailing list? | 18:54 |
| lbragstad | wondering if anyone else can reproduce this, I'm trying this on the latest master http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html#retrieve-metadata-properties and I've followed all the steps in the docs, http://docs.openstack.org/developer/keystone/configure_federation.html#keystone-as-an-identity-provider-idp but that call seems to always throw a 404 | 18:54 |
| gyee | topol, mailing list, per morganfainberg | 18:55 |
| gyee | lbragstad, what's your apache keystone conf looks like | 18:55 |
| *** ekarlso has quit IRC | 18:56 | |
| lbragstad | gyee: http://cdn.pasteraw.com/1vl24oi6mez7w90wro7n8y57eadsgm | 18:56 |
| *** henrynash has quit IRC | 18:58 | |
| *** ekarlso has joined #openstack-keystone | 18:58 | |
| lbragstad | gyee: when I hit the idp endpoint, this is what I get http://cdn.pasteraw.com/k8v99pfpwacoie5ujtfcqdf5dtnndpy | 18:59 |
| lbragstad | gyee: so I'm assuming ssl and all that is set up correctly | 18:59 |
| gyee | lbragstad, check your keystone-paste.ini to make sure federation_extension is in the pipeline | 18:59 |
| lbragstad | gyee: it's in there for [pipeline:api_v3] | 19:00 |
| lbragstad | gyee: so I should be able to access it with https://<idp-ip>/v3/OS-FEDERATION/ | 19:00 |
| gyee | you getting 404 in which API call? | 19:01 |
| *** topol has quit IRC | 19:01 | |
| lbragstad | gyee: smh... | 19:02 |
| *** e0ne has joined #openstack-keystone | 19:02 | |
| lbragstad | gyee: https://github.com/dolph/keystone-deploy/blob/master/playbooks/roles/keystone/templates/paste.ini#L74 | 19:03 |
| * lbragstad hangs head... | 19:03 | |
| gyee | hah | 19:03 |
| lbragstad | gyee: thanks | 19:03 |
| lbragstad | let me see if the tests i have work now | 19:04 |
| *** ankita_w_ has quit IRC | 19:05 | |
| *** ankita_wagh has joined #openstack-keystone | 19:07 | |
| *** e0ne is now known as e0ne_ | 19:08 | |
| *** jk|osx has quit IRC | 19:08 | |
| *** jsavak has quit IRC | 19:09 | |
| *** mylu has quit IRC | 19:10 | |
| *** jsavak has joined #openstack-keystone | 19:12 | |
| *** mylu has joined #openstack-keystone | 19:14 | |
| *** jk|osx has joined #openstack-keystone | 19:15 | |
| *** e0ne_ is now known as e0ne | 19:22 | |
| *** anhhuynx has quit IRC | 19:25 | |
| *** iamjarvo has quit IRC | 19:29 | |
| *** _cjones_ has quit IRC | 19:37 | |
| *** _cjones_ has joined #openstack-keystone | 19:37 | |
| *** petertr7 has joined #openstack-keystone | 19:44 | |
| *** edmondsw has quit IRC | 19:46 | |
| openstackgerrit | Merged openstack/keystone: Mask passwords in debug log on user password operations https://review.openstack.org/193695 | 19:47 |
| *** marzif_ has joined #openstack-keystone | 19:52 | |
| *** edmondsw has joined #openstack-keystone | 19:54 | |
| *** rwsu has joined #openstack-keystone | 19:55 | |
| *** woodster_ has joined #openstack-keystone | 19:56 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/201319 | 20:00 |
| *** jkomg has joined #openstack-keystone | 20:04 | |
| *** e0ne is now known as e0ne_ | 20:04 | |
| *** e0ne_ is now known as e0ne | 20:04 | |
| stevemar | ehhh look at my little robot guy, proposing updates | 20:04 |
| bknudson | stevemar: you should get credit for those | 20:05 |
| stevemar | bknudson: i should! | 20:05 |
| stevemar | should add co-authored-by line in the git message! | 20:05 |
| stevemar | it'll ensure i get a summit pass forever | 20:05 |
| bknudson | there must have been a release of oslo.messaging ? | 20:05 |
| jdandrea | Trying to use the v3 endpoint to AuthN a v3 token. Suspecting pilot error. Clues/hints welcomed: http://paste.openstack.org/show/372186/ | 20:06 |
| stevemar | bknudson: just today | 20:06 |
| stevemar | bknudson: dims has been releasing oslo.* today | 20:06 |
| stevemar | https://pypi.python.org/pypi/oslo.messaging | 20:06 |
| *** jk|osx has quit IRC | 20:07 | |
| *** mylu has quit IRC | 20:07 | |
| *** mylu has joined #openstack-keystone | 20:08 | |
| stevemar | jdandrea: the port is a little funny | 20:10 |
| stevemar | but the body looks fine | 20:11 |
| stevemar | and thats the right URL | 20:11 |
| jdandrea | stevemar: It sure is. That's how the admins set it up. I would have thought 5000. | 20:11 |
| stevemar | jdandrea: yeah, shouldn't be a big deal though | 20:12 |
| jdandrea | stevemar: I'm glad to know the body looks good. We just did a token-get to get that but, when we put it back in ... hmm. | 20:12 |
| jdandrea | stevemar: Oh! Does the endpoint have to be in keystone's endpoint repository? | 20:12 |
| stevemar | http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3.html#the-token-authentication-method | 20:12 |
| jdandrea | ... because I see that it isn't. | 20:12 |
| stevemar | keystone's endpoint? | 20:12 |
| jdandrea | stevemar: Yes. I only see v2 endpoints listed. | 20:13 |
| jdandrea | (even though I can clearly get at the v3 endpoint) | 20:13 |
| stevemar | that should be fine too | 20:13 |
| jdandrea | Not sure if that matters. In the past I've had issues with heat and this. Ah, ok. Well now I'm *really* puzzled. :) | 20:13 |
| jdandrea | stevemar: Plus notice the error. Could not find token: *47e9ef58909267c90b82f5c081d7c189* | 20:14 |
| stevemar | the error is def. weird | 20:14 |
| *** rwsu has quit IRC | 20:16 | |
| *** geoffarnold has quit IRC | 20:18 | |
| *** alex_xu has quit IRC | 20:18 | |
| raildo | Anyone know where is the correct place to take my doubts out about tempest tests? I didn't find a tempest channel here =/ | 20:19 |
| *** lifeless has quit IRC | 20:20 | |
| *** alex_xu has joined #openstack-keystone | 20:21 | |
| *** lifeless has joined #openstack-keystone | 20:21 | |
| *** geoffarnold has joined #openstack-keystone | 20:21 | |
| bknudson | raildo: the openstack-qa channel | 20:22 |
| raildo | bknudson: thanks :) | 20:22 |
| *** jamiec has quit IRC | 20:23 | |
| *** jamiec has joined #openstack-keystone | 20:26 | |
| *** dguerri` is now known as dguerri | 20:27 | |
| *** rwsu has joined #openstack-keystone | 20:29 | |
| *** geoffarn_ has joined #openstack-keystone | 20:31 | |
| *** LukeHinds has quit IRC | 20:32 | |
| *** jsavak has quit IRC | 20:32 | |
| *** jsavak has joined #openstack-keystone | 20:33 | |
| *** geoffarnold has quit IRC | 20:33 | |
| *** fangzhou has joined #openstack-keystone | 20:41 | |
| *** geoffarnold has joined #openstack-keystone | 20:46 | |
| jdandrea | stevemar: Agreed. I'm at a complete loss as to what's going on there. All of the clusters I use locally have UUID token AuthN. This one particular cluster is not in my purview and uses PKI. :/ | 20:48 |
| *** geoffarn_ has quit IRC | 20:48 | |
| *** tellesnobrega has quit IRC | 20:50 | |
| *** tellesmvn has joined #openstack-keystone | 20:50 | |
| *** jsavak has quit IRC | 20:50 | |
| *** tellesmvn is now known as tellesnobrega | 20:52 | |
| *** jkomg has quit IRC | 20:55 | |
| *** jkomg has joined #openstack-keystone | 20:55 | |
| dolphm | anyone know why some python unittest tools require a colon between modules and class names, some support periods, and some support both? | 20:59 |
| stevemar | jdandrea: i'm guessing its something PKI related | 20:59 |
| stevemar | jdandrea: file a bug? | 20:59 |
| *** guest123 has joined #openstack-keystone | 21:00 | |
| dolphm | jdandrea: why is there a trailing bracket on your token ID in the request? | 21:00 |
| *** dguerri is now known as dguerri` | 21:00 | |
| dolphm | jdandrea: i suspect your token is invalid, and keystone is failing to look it up by hash | 21:01 |
| *** tellesnobrega has left #openstack-keystone | 21:03 | |
| *** geoffarn_ has joined #openstack-keystone | 21:03 | |
| *** tellesnobrega has joined #openstack-keystone | 21:03 | |
| *** geoffarnold has quit IRC | 21:04 | |
| *** tellesnobrega has quit IRC | 21:04 | |
| *** tellesnobrega has joined #openstack-keystone | 21:05 | |
| *** raildo has quit IRC | 21:08 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/201339 | 21:10 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/197254 | 21:10 |
| *** geoffarn_ has quit IRC | 21:10 | |
| *** jkomg has quit IRC | 21:12 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Use oslo.utils intead of home brewed tempfile https://review.openstack.org/201341 | 21:12 |
| *** diazjf has quit IRC | 21:14 | |
| stevemar | bknudson: ^ | 21:17 |
| bknudson | stevemar: didn't we just switch to home-brewed template? | 21:18 |
| bknudson | tempfile | 21:18 |
| stevemar | bknudson: yeah, it was an oversight. i thought only keystone was using tempfile - turns out ceilometer and others use it too | 21:18 |
| stevemar | so i put it back in fileutils | 21:18 |
| bknudson | stevemar: so this requires oslo.utils 1.9.0 ? | 21:19 |
| bknudson | but global requirements has 1.6.0 | 21:19 |
| bknudson | I mean keystone requirements has 1.6.0 | 21:20 |
| stevemar | yeah, bknudson someone already proposed a GR upgrade, waiting for that to come down the pipeline | 21:20 |
| stevemar | https://review.openstack.org/#/c/199506/ | 21:20 |
| bknudson | stevemar: you can use Depends-On in your patch | 21:21 |
| stevemar | true | 21:21 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Use oslo.utils intead of home brewed tempfile https://review.openstack.org/201341 | 21:22 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Use oslo.utils instead of home brewed tempfile https://review.openstack.org/201341 | 21:22 |
| *** diazjf has joined #openstack-keystone | 21:22 | |
| *** mylu has quit IRC | 21:24 | |
| *** topol has joined #openstack-keystone | 21:27 | |
| *** ChanServ sets mode: +v topol | 21:27 | |
| *** gordc has quit IRC | 21:30 | |
| *** jkomg has joined #openstack-keystone | 21:31 | |
| *** dims___ has joined #openstack-keystone | 21:34 | |
| *** e0ne has quit IRC | 21:35 | |
| *** dims_ has quit IRC | 21:35 | |
| *** mylu has joined #openstack-keystone | 21:44 | |
| *** diazjf has left #openstack-keystone | 21:50 | |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware: Enforce endpoint constraint https://review.openstack.org/177661 | 21:56 |
| *** tsymanczyk has joined #openstack-keystone | 21:57 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Register fatal_deprecations before use https://review.openstack.org/201352 | 21:57 |
| *** mylu has quit IRC | 21:58 | |
| *** albertom has quit IRC | 21:58 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Register fatal_deprecations before use https://review.openstack.org/201352 | 21:58 |
| *** guest123 has quit IRC | 21:58 | |
| *** christx2 has quit IRC | 21:59 | |
| *** petertr7 is now known as petertr7_away | 22:03 | |
| *** albertom has joined #openstack-keystone | 22:04 | |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware: Enforce endpoint constraint https://review.openstack.org/177661 | 22:09 |
| *** browne has quit IRC | 22:10 | |
| *** edmondsw has quit IRC | 22:20 | |
| *** bknudson has quit IRC | 22:23 | |
| openstackgerrit | Merged openstack/keystone: Centralizing build_role_assignment_* functions https://review.openstack.org/197184 | 22:24 |
| *** markvoelker has joined #openstack-keystone | 22:27 | |
| *** markvoelker has quit IRC | 22:27 | |
| *** markvoelker has joined #openstack-keystone | 22:27 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/201339 | 22:28 |
| *** hrou has quit IRC | 22:29 | |
| *** dims_ has joined #openstack-keystone | 22:32 | |
| *** stevemar has left #openstack-keystone | 22:33 | |
| *** bradjones has quit IRC | 22:33 | |
| *** dims___ has quit IRC | 22:35 | |
| *** dims__ has joined #openstack-keystone | 22:46 | |
| *** rm_work is now known as rm_work|away | 22:46 | |
| *** thedodd has quit IRC | 22:49 | |
| *** dims_ has quit IRC | 22:49 | |
| *** marzif_ has quit IRC | 22:50 | |
| *** rwsu has quit IRC | 22:52 | |
| *** jecarey has quit IRC | 22:55 | |
| *** dims__ has quit IRC | 22:56 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:57 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixes modules index generated by Sphinx https://review.openstack.org/199320 | 22:57 |
| *** browne has joined #openstack-keystone | 22:58 | |
| *** ankita_wagh has quit IRC | 22:58 | |
| *** TheIntern has quit IRC | 23:00 | |
| *** ankita_wagh has joined #openstack-keystone | 23:01 | |
| *** hrou has joined #openstack-keystone | 23:03 | |
| *** mgarza_ has quit IRC | 23:12 | |
| *** chlong-afk has joined #openstack-keystone | 23:18 | |
| *** darrenc is now known as darrenc_afk | 23:19 | |
| *** thedodd has joined #openstack-keystone | 23:20 | |
| *** jkomg has quit IRC | 23:31 | |
| *** chlong-afk has quit IRC | 23:36 | |
| *** topol has quit IRC | 23:37 | |
| gyee | when did ubuntu one asking for 2-factor auth code? | 23:40 |
| *** dims_ has joined #openstack-keystone | 23:42 | |
| *** darrenc_afk is now known as darrenc | 23:42 | |
| *** jdennis has quit IRC | 23:52 | |
| *** _cjones_ has quit IRC | 23:56 | |
| *** shaleh has quit IRC | 23:58 | |
| *** bradjones has joined #openstack-keystone | 23:58 | |
| *** bradjones has quit IRC | 23:58 | |
| *** bradjones has joined #openstack-keystone | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
