Tuesday, 2015-07-14

*** jdennis has joined #openstack-keystone00:07
openstackgerritHenrique Truta proposed openstack/keystone: List projects filtering by is_domain flag  https://review.openstack.org/15839800:11
openstackgerritHenrique Truta proposed openstack/keystone: Honor domain operations in project table  https://review.openstack.org/14376300:11
openstackgerritHenrique Truta proposed openstack/keystone: Change project name constraint  https://review.openstack.org/15837200:11
*** topol has joined #openstack-keystone00:13
*** ChanServ sets mode: +v topol00:13
*** topol_ has joined #openstack-keystone00:16
*** ChanServ sets mode: +v topol_00:16
*** topol has quit IRC00:17
openstackgerritHenrique Truta proposed openstack/keystone: Restrict inherited role assignments to subdomains  https://review.openstack.org/16418000:19
*** htruta_ has joined #openstack-keystone00:20
*** topol_ has quit IRC00:21
*** ankita_wagh has quit IRC00:25
*** jaosorior has quit IRC00:26
*** ajayaa has quit IRC00:36
*** spandhe has quit IRC00:49
*** thedodd has quit IRC00:51
openstackgerritMerged openstack/keystone: Updating sample configuration file  https://review.openstack.org/20131900:55
openstackgerritguang-yee proposed openstack/keystonemiddleware: Enforce endpoint constraint  https://review.openstack.org/17766101:00
*** marzif_ has joined #openstack-keystone01:01
*** gyee has quit IRC01:02
*** crc32 has quit IRC01:03
openstackgerritHenrique Truta proposed openstack/keystone: Add is_domain in token response  https://review.openstack.org/19733101:03
openstackgerritHenrique Truta proposed openstack/keystone: Bye Bye Domain Table  https://review.openstack.org/16185401:03
openstackgerritHenrique Truta proposed openstack/keystone: Remove domain table references  https://review.openstack.org/16593601:03
*** bradjones_ has joined #openstack-keystone01:06
*** bradjones_ has quit IRC01:06
*** bradjones_ has joined #openstack-keystone01:06
*** bradjones has quit IRC01:06
*** bradjones_ is now known as bradjones01:07
*** fangzhou has quit IRC01:11
*** marzif_ has quit IRC01:14
*** geoffarnold has joined #openstack-keystone01:14
*** htruta_ has quit IRC01:14
*** chlong-afk has joined #openstack-keystone01:15
*** geoffarnold has quit IRC01:16
*** geoffarnold has joined #openstack-keystone01:17
*** ankita_wagh has joined #openstack-keystone01:19
*** ayoung-onfire is now known as ayoung01:23
*** jkomg has joined #openstack-keystone01:27
*** davechen has joined #openstack-keystone01:32
*** ankita_wagh has quit IRC01:32
*** jkomg has quit IRC01:32
*** dims__ has joined #openstack-keystone01:34
*** ankita_wagh has joined #openstack-keystone01:34
*** tqtran has quit IRC01:36
*** dims_ has quit IRC01:38
*** iurygregory has left #openstack-keystone01:40
*** davechen1 has joined #openstack-keystone01:42
*** davechen has quit IRC01:44
*** markvoelker has quit IRC01:44
*** davechen1 is now known as davechen01:47
*** zzzeek has quit IRC01:48
*** chenhong has joined #openstack-keystone01:50
chenhongayoung: ping.01:51
*** jdandrea has quit IRC01:51
ayoungchenhong, Ni Hao Ma?01:51
chenhongayoung: Haha, wo hen hao. You know Chinese?01:51
chenhongayoung: Can you approve this change, https://review.openstack.org/#/c/187899/ . Jenkins liked it.01:52
ayoungchenhong, Wǒ bù huì shuō zhōngguó huà01:52
ayoungchenhong, done01:53
chenhongayoung: Dan shi ni hui yong pinyin ?01:53
chenhongayoung: Thanks01:53
chenhongayoung: xie xie01:53
ayoungBu Kerchi01:54
*** browne has quit IRC01:54
chenhongayoung: shi 'bu ke qi'01:54
ayoungchenhong, I remembered how it sounded, couldn't remember the pniyin01:54
chenhongayoung: I think you are already good at that.01:55
ayoungchenhong,01:55
ayoung我善于利用计算机工具来翻译。01:55
chenhongayoung: Google translate?01:56
ayoungchenhong, shi01:56
chenhongayoung: 你看得懂汉字么?01:56
ayoungchenhong,  一些01:57
chenhongayoung: 你很厉害了01:57
*** geoffarnold has quit IRC01:57
*** lhcheng has quit IRC02:01
*** geoffarnold has joined #openstack-keystone02:03
*** chenhong has quit IRC02:04
*** chenhong has joined #openstack-keystone02:05
*** davechen1 has joined #openstack-keystone02:08
*** btully has quit IRC02:08
davechen1ayoung: Amazing! I should talk with you in Chinese in the summit, haha.02:08
ayoungdavechen1, I took one semester about 10 years ago.  I learned but the first step of the 1000 li journey that is speaking Chinese02:09
*** davechen has quit IRC02:09
*** davechen1 is now known as davechen02:09
davechenayoung: you have a good memory, I nearly forgot what I did ten year ago.02:10
chenhongdavechen: you last name is 陈?02:12
davechenchenhong: yes.02:12
davechenchenhong: both of us, I think.02:12
*** dims_ has joined #openstack-keystone02:12
chenhongdavechen: No, my fullname is Chenhong Liu. Mine is 刘02:13
davechenlol.02:13
*** dims__ has quit IRC02:13
*** albertom has quit IRC02:14
*** richm has quit IRC02:17
*** dims__ has joined #openstack-keystone02:18
*** dims_ has quit IRC02:19
*** albertom has joined #openstack-keystone02:20
*** davechen1 has joined #openstack-keystone02:24
*** davechen has quit IRC02:26
*** geoffarnold has quit IRC02:36
*** davechen1 is now known as davechen02:37
*** albertom has quit IRC02:38
*** btully has joined #openstack-keystone02:39
*** tobe has joined #openstack-keystone02:42
*** btully has quit IRC02:43
*** albertom has joined #openstack-keystone02:45
*** lhcheng has joined #openstack-keystone02:47
*** ChanServ sets mode: +v lhcheng02:47
*** markvoelker has joined #openstack-keystone02:54
*** markvoelker has quit IRC02:55
*** markvoelker has joined #openstack-keystone02:55
*** browne has joined #openstack-keystone02:55
*** ankita_wagh has quit IRC03:07
*** nigelb has joined #openstack-keystone03:09
*** mabrams has joined #openstack-keystone03:23
*** dims__ has quit IRC03:27
*** jkomg has joined #openstack-keystone03:28
*** rm_work|away is now known as rm_work03:31
*** jkomg has quit IRC03:33
*** crc32 has joined #openstack-keystone03:34
openstackgerritMerged openstack/keystone: Add testcases for list_role_assignments of v3 domains  https://review.openstack.org/18789903:36
*** albertom has quit IRC03:38
*** chenhong has quit IRC03:42
*** albertom has joined #openstack-keystone03:45
*** hrou has quit IRC03:46
*** rm_work is now known as rm_work|away03:48
*** jkomg has joined #openstack-keystone03:49
*** jkomg has quit IRC03:54
*** topol has joined #openstack-keystone04:19
*** ChanServ sets mode: +v topol04:19
*** ankita_wagh has joined #openstack-keystone04:22
*** boris-42 has quit IRC04:22
*** rm_work|away is now known as rm_work04:41
*** topol has quit IRC04:45
*** topol has joined #openstack-keystone04:45
*** ChanServ sets mode: +v topol04:45
*** topol has quit IRC04:46
*** markvoelker_ has joined #openstack-keystone04:48
*** markvoelker has quit IRC04:50
*** markvoelker_ has quit IRC04:52
*** markvoelker has joined #openstack-keystone04:57
*** crc32 has quit IRC04:58
*** markvoelker has quit IRC05:03
openstackgerritNing Sun proposed openstack/keystone: Fixes grammar in setup.rst in doc source  https://review.openstack.org/20141705:06
*** markvoelker has joined #openstack-keystone05:08
*** btully has joined #openstack-keystone05:11
*** ankita_wagh has quit IRC05:11
*** markvoelker has quit IRC05:16
*** markvoelker has joined #openstack-keystone05:22
*** markvoelker has quit IRC05:28
*** afazekas has joined #openstack-keystone05:32
*** topol has joined #openstack-keystone05:46
*** ChanServ sets mode: +v topol05:46
*** jkomg has joined #openstack-keystone05:50
*** topol has quit IRC05:50
*** jkomg has quit IRC05:54
*** Kennan has quit IRC06:02
*** Kennan has joined #openstack-keystone06:03
*** chlong-afk has quit IRC06:09
*** jkomg has joined #openstack-keystone06:10
*** ankita_wagh has joined #openstack-keystone06:12
*** jkomg has quit IRC06:15
*** rm_work is now known as rm_work|away06:17
*** kiran-r has joined #openstack-keystone06:36
*** belmoreira has joined #openstack-keystone06:36
*** kiran-r has quit IRC06:58
*** kiran-r has joined #openstack-keystone07:01
*** _fortis has joined #openstack-keystone07:01
*** fhubik has joined #openstack-keystone07:02
openstackgerritTakashi NATSUME proposed openstack/oslo.policy: Fix typo of 'available' in token_fixture.py  https://review.openstack.org/20143507:04
*** ankita_wagh has quit IRC07:05
*** kiran-r has quit IRC07:08
*** _fortis has quit IRC07:17
*** hakimo has joined #openstack-keystone07:18
*** hakimo has quit IRC07:19
*** hakimo has joined #openstack-keystone07:20
openstackgerritDave Chen proposed openstack/keystone: Region creation with id given also need schema validation  https://review.openstack.org/20100707:21
openstackgerritDave Chen proposed openstack/keystone: Show helpful message when request body is not provided  https://review.openstack.org/19590307:21
*** _fortis has joined #openstack-keystone07:29
*** topol has joined #openstack-keystone07:36
*** ChanServ sets mode: +v topol07:36
*** chlong-afk has joined #openstack-keystone07:37
*** topol has quit IRC07:41
*** browne has quit IRC07:41
*** jistr has joined #openstack-keystone07:42
*** fhubik is now known as fhubik_afk07:50
*** woodster_ has quit IRC07:51
*** alex_xu has quit IRC07:52
*** alex_xu has joined #openstack-keystone07:55
*** fhubik_afk is now known as fhubik08:05
*** lhcheng has quit IRC08:08
*** jkomg has joined #openstack-keystone08:11
*** jkomg has quit IRC08:16
*** topol has joined #openstack-keystone08:16
*** ChanServ sets mode: +v topol08:16
*** btully has quit IRC08:18
*** topol has quit IRC08:21
*** bdossant has joined #openstack-keystone08:28
*** kiran-r has joined #openstack-keystone08:29
*** kiran-r has quit IRC08:29
*** fhubik is now known as fhubik_afk08:30
*** christx2 has joined #openstack-keystone08:30
*** kiran-r has joined #openstack-keystone08:31
*** jkomg has joined #openstack-keystone08:32
*** christx2 has quit IRC08:33
*** christx2 has joined #openstack-keystone08:33
*** _kiran_ has joined #openstack-keystone08:35
*** kiran-r has quit IRC08:35
*** jkomg has quit IRC08:37
*** _kiran_ has quit IRC08:40
*** tobe has quit IRC08:48
*** aix has joined #openstack-keystone08:51
*** fhubik_afk is now known as fhubik08:55
*** tobe has joined #openstack-keystone08:58
*** aix has quit IRC08:58
*** e0ne has joined #openstack-keystone09:03
openstackgerritjiaxi proposed openstack/keystone: Invalid URLs are not suppressed when creating endpoint  https://review.openstack.org/20051209:03
*** aix has joined #openstack-keystone09:03
*** fhubik is now known as fhubik_afk09:06
*** tsubic has joined #openstack-keystone09:08
*** krykowski has joined #openstack-keystone09:10
*** fhubik_afk is now known as fhubik09:12
*** e0ne is now known as e0ne_09:12
tsubichello, when trying to create a service for keystone during the installation (I am following the guide) I get a python Import error: No module named seralization, but I have installed it with PIP, any tips?09:15
*** e0ne_ is now known as e0ne09:16
*** btully has joined #openstack-keystone09:27
*** chenhong has joined #openstack-keystone09:29
*** btully has quit IRC09:31
*** marzif_ has joined #openstack-keystone09:33
*** fhubik is now known as fhubik_afk09:39
*** topol has joined #openstack-keystone09:46
*** ChanServ sets mode: +v topol09:46
*** dims_ has joined #openstack-keystone09:48
Kennanhi just one question about cli?09:51
*** topol has quit IRC09:51
openstackgerritDave Chen proposed openstack/keystone: Show helpful message when request body is not provided  https://review.openstack.org/19590309:51
openstackgerritDave Chen proposed openstack/keystone: Region creation with id given also need schema validation  https://review.openstack.org/20100709:51
Kennanas keystone cli would be deprecate09:51
Kennanand openstack cli would be used to support both v3 and v2.009:51
Kennanso in https://github.com/openstack/python-openstackclient09:51
KennanHow to make sure one cli is v3 ?09:51
Kennanis it through export OS_AUTH_URL=<url-to-openstack-identity> ?  V3 or v2.0?09:52
KennanOr other ways ?09:52
openstackgerritDave Chen proposed openstack/keystone: Show helpful message when request body is not provided  https://review.openstack.org/19590309:55
*** davechen has left #openstack-keystone09:55
chenhongKennan: you can export OS_IDENTITY_API_VERSION or use --os-identity-api-version of openstackclient09:57
chenhongKennan: take a look a at '$openstack --help' and search for 'identity'09:58
*** e0ne is now known as e0ne_09:58
*** e0ne_ is now known as e0ne10:01
*** Kennan has quit IRC10:03
*** Kennan has joined #openstack-keystone10:03
*** kiran-r has joined #openstack-keystone10:03
*** topol has joined #openstack-keystone10:06
*** ChanServ sets mode: +v topol10:06
*** chenhong has quit IRC10:21
*** aix has quit IRC10:21
*** topol has quit IRC10:23
*** rdo has quit IRC10:27
*** rdo has joined #openstack-keystone10:29
*** jkomg has joined #openstack-keystone10:32
*** aix has joined #openstack-keystone10:34
*** fhubik_afk is now known as fhubik10:36
*** jkomg has quit IRC10:37
*** e0ne is now known as e0ne_10:45
*** e0ne_ is now known as e0ne10:49
*** fhubik is now known as fhubik_afk10:57
*** mabrams has quit IRC10:59
*** afazekas has quit IRC11:02
*** openstackgerrit has quit IRC11:09
*** openstackgerrit has joined #openstack-keystone11:10
*** afazekas has joined #openstack-keystone11:17
*** topol has joined #openstack-keystone11:23
*** ChanServ sets mode: +v topol11:23
openstackgerritjiaxi proposed openstack/keystone: when creating a group without specifying a domain should return 400  https://review.openstack.org/20151111:27
*** topol has quit IRC11:28
openstackgerritjiaxi proposed openstack/keystone: when creating a group without specifying a domain should return 400  https://review.openstack.org/20151111:37
*** tobe has quit IRC11:37
*** tobe has joined #openstack-keystone11:39
*** e0ne is now known as e0ne_11:39
*** e0ne_ is now known as e0ne11:41
*** afazekas has quit IRC11:42
*** tobe has quit IRC11:46
*** e0ne is now known as e0ne_11:56
*** fhubik_afk is now known as fhubik11:57
*** fhubik is now known as fhubik_afk11:57
*** btully has joined #openstack-keystone11:57
*** e0ne_ is now known as e0ne11:59
*** btully has quit IRC12:02
*** raildo has joined #openstack-keystone12:07
*** edmondsw has joined #openstack-keystone12:09
*** afazekas has joined #openstack-keystone12:10
*** openstack has joined #openstack-keystone12:11
*** edmondsw has quit IRC12:14
*** edmondsw has joined #openstack-keystone12:19
*** gordc has joined #openstack-keystone12:20
*** ig0r_ has joined #openstack-keystone12:24
samueldmqjamielennox: ping - https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/__init__.py#L918-L92112:30
samueldmqjamielennox: I got scared by '!!! - UNDER NO CIRCUMSTANCES COPY ANY OF THIS CODE - !!!' and went read the comment around it :-)12:31
samueldmqjamielennox: the patch you mentioned there already merged, that's why I am pinging you12:31
jamielennoxsamueldmq: heh, yea, it's there ot scare a bit12:32
jamielennoxit was merged, i don't know if the requirements have caught up12:32
jamielennoxbut i haven't looke for a while12:32
openstackgerritDave Chen proposed openstack/keystone: Show helpful message when request body is not provided  https://review.openstack.org/19590312:32
samueldmqjamielennox: yep, that's scaring people .. almost pressed the 'eject' button on my chair12:34
samueldmqhehe :)12:34
morganfainbergZzzzzzzzz12:36
samueldmqmorganfainberg: o/12:36
* morganfainberg 12:37
* morganfainberg looks at time. At empty suitcase and airport distance.12:37
morganfainbergMaybe i should pack12:37
morganfainbergjamielennox: if we kill oslo.config in ksa, and land the split loading stuff, i think were pretty close to done12:39
*** e0ne is now known as e0ne_12:42
*** iurygregory has joined #openstack-keystone12:42
*** markvoelker has joined #openstack-keystone12:43
*** e0ne_ is now known as e0ne12:47
*** markvoelker has quit IRC12:47
*** jkomg has joined #openstack-keystone12:54
*** markvoelker has joined #openstack-keystone12:57
*** jkomg has quit IRC12:59
*** hrou has joined #openstack-keystone13:00
*** markvoelker has quit IRC13:01
*** markvoelker has joined #openstack-keystone13:01
*** topol has joined #openstack-keystone13:04
*** ChanServ sets mode: +v topol13:04
*** topol has quit IRC13:04
*** markvoelker has quit IRC13:06
*** dims_ has quit IRC13:09
*** markvoelker has joined #openstack-keystone13:10
*** petertr7_away is now known as petertr713:10
*** dims_ has joined #openstack-keystone13:10
*** dims_ has quit IRC13:13
*** dims_ has joined #openstack-keystone13:13
*** jkomg has joined #openstack-keystone13:15
*** topol has joined #openstack-keystone13:17
*** ChanServ sets mode: +v topol13:17
openstackgerritHenrique Truta proposed openstack/python-keystoneclient: Inhrerit roles project calls on keystoneclient v3  https://review.openstack.org/16761313:19
*** jkomg has quit IRC13:19
*** topol has quit IRC13:21
*** petertr7 is now known as petertr7_away13:25
*** geoffarnold has joined #openstack-keystone13:27
*** jdandrea has joined #openstack-keystone13:29
*** marzif_ has quit IRC13:33
*** marzif_ has joined #openstack-keystone13:33
*** petertr7_away is now known as petertr713:34
*** e0ne is now known as e0ne_13:40
*** christx2 has quit IRC13:40
*** lhcheng has joined #openstack-keystone13:41
*** ChanServ sets mode: +v lhcheng13:41
*** bradjones has quit IRC13:41
*** christx2 has joined #openstack-keystone13:42
*** TheIntern has joined #openstack-keystone13:43
*** bradjones has joined #openstack-keystone13:48
*** bradjones has quit IRC13:48
*** bradjones has joined #openstack-keystone13:48
*** e0ne_ is now known as e0ne13:48
*** jecarey has joined #openstack-keystone13:48
*** fhubik_afk is now known as fhubik13:49
*** akscram has joined #openstack-keystone13:52
samueldmqanyone here using travis-ci.org ?13:55
samueldmqI remember to see dolphm using it13:56
*** richm has joined #openstack-keystone13:56
*** petertr7 is now known as petertr7_away13:59
*** markvoelker_ has joined #openstack-keystone14:00
*** petertr7_away is now known as petertr714:00
tellesnobregaraildo: ping14:01
*** sigmavirus24_awa is now known as sigmavirus2414:01
*** fhubik is now known as fhubik_afk14:01
*** markvoelker has quit IRC14:04
*** fhubik_afk is now known as fhubik14:07
*** Kennan2 has joined #openstack-keystone14:10
*** Kennan has quit IRC14:10
*** fangzhou has joined #openstack-keystone14:11
*** fhubik is now known as fhubik_afk14:13
*** fhubik_afk is now known as fhubik14:16
*** browne has joined #openstack-keystone14:18
jdandreaCan I use /v2.0/tenants and pass a PKI token in the X-Auth-Token header? (Can I use PKI with this endpoint at all?) I'm being told I'm unauthorized and am wondering if I need to send the token some other way.14:19
*** woodster_ has joined #openstack-keystone14:20
*** pnavarro has joined #openstack-keystone14:21
openstackgerritjiaxi proposed openstack/keystone: when creating a group without specifying a domain should return 400  https://review.openstack.org/20151114:22
*** geoffarnold has quit IRC14:22
*** geoffarnold has joined #openstack-keystone14:23
*** samueldmq has quit IRC14:26
*** fhubik has quit IRC14:28
*** samueldmq has joined #openstack-keystone14:28
*** _kiran_ has joined #openstack-keystone14:31
*** btully has joined #openstack-keystone14:32
*** kiran-r has quit IRC14:35
ayoungsamueldmq, so I just about have the Dynamic policy presentation ready.14:35
ayoungI'm going to send you a copy.  Please let me know what I )^)(&*^ up.14:36
*** afazekas has quit IRC14:37
samueldmqayoung: hehe send/share it to samueldmq at gmail14:37
ayoungsamueldmq, its a pdf.  Sent to your other account14:38
ayoungsamueldmq, because that is the one that came up in my mail client.  Need it on gmail, too?14:38
samueldmqayoung: nah it's ok14:38
samueldmqayoung: I'll review it and get some feedback to you14:39
ayoungsamueldmq, thanks14:39
ayoungsamueldmq, it ain't perfect, but it is never going to be...I need it to be coherent.14:39
*** elmiko has joined #openstack-keystone14:40
ayoungmorganfainberg, Hubway has helms for 24.99 + shipping14:40
samueldmqayoung: yeah makes sense14:40
elmikohi folks, quick question about keystoneclient Client objects and trust scoping14:40
ayoungelmiko, preguntame!14:40
elmikoif i am creating a Client from a Session and i want it to be trust scoped, do i specfiy the trust in the Session, the Client, or the auth plugin?14:41
*** fangzhou has quit IRC14:41
* elmiko waves at ayoung 14:41
*** iamjarvo has joined #openstack-keystone14:42
ayoungelmiko, first, tell me what you guess is the right answer?14:42
elmikoadd the trust to the Session with the auth plugin14:43
ayoungelmiko, that is not an answer.  You picked two things14:43
ayoungguess One.14:43
samueldmqayoung: I'll get you a VM running my dynamic delivery stuff, so you probably can have a quick demo in the midcycle14:43
* ayoung stalls for time while he looks up14:43
samueldmqayoung: if you think that's a good idea ...14:43
samueldmqs/my/our14:44
elmikolol, i meant add the trust to the Session in addition to the auth plugin. ie Session(auth_plugin, trust)14:44
ayoungelmiko, I would think that the auth plugin should be sufficient14:45
ayoungelmiko, plus, I don't see trust as a session parameter anyway14:46
elmikoayoung: ok, so instantiate the auth plugin with the trust as a param?14:46
ayoungelmiko, anyway, I think the right answer is just on the auth plugin14:46
gsilvisayoung: any thoughts on the mix&match federation talk proposal?14:46
elmikoayoung: ok, cool. i just wasn't sure what the proper methodology was. thanks!14:46
ayounggsilvis, was unware.  Link?14:47
gsilvisayoung: sent it to your email14:47
ayounggsilvis, at 1 AM...reading now14:47
ayounggsilvis, the short, though, is I expected you would present.  THanks for providing the details14:48
gsilvisayoung: yup :)14:48
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20160114:48
ayounggsilvis, is this for Tokyo?14:48
gsilvisayoung: yeah14:48
*** chenhong has joined #openstack-keystone14:49
ayounggsilvis, get it in on the system, and you can edit it ex-post-factor14:49
ayoungfacto14:49
gsilvisayoung: oh really?  okay, great14:49
ayounggsilvis, yeah, and you need bios etc14:49
*** markvoelker_ has quit IRC14:49
samueldmqayoung:  ?14:50
ayounggsilvis, I would make it a bit more definitive;14:50
ayounginstead of "we are proposing, make it something more like "we are building"14:50
*** markvoelker has joined #openstack-keystone14:50
samueldmqayoung: what about the vm with the current fetch code running to a quick demo in the midcycle ?14:50
ayounggsilvis, this is for the marketing side of the conference, not the developer right?14:50
ayoungalso:  instead of the14:50
gsilvisayoung: yeah, I'm working on bios today too...14:51
ayoungNote, make it part of the doc, and drop the term Defense14:51
*** csoukup has joined #openstack-keystone14:51
*** topol has joined #openstack-keystone14:52
*** ChanServ sets mode: +v topol14:52
gsilvisayoung: I don't actually know---does this sound like a marketing side talk to you?  My target audience is all of the Nova and Cinder developers who told us "well, try it!"14:52
*** topol_ has joined #openstack-keystone14:53
*** ChanServ sets mode: +v topol_14:53
gsilvisayoung: as in 'defense in depth'?  Do you have a suggested replacement?14:54
*** tsubic has left #openstack-keystone14:54
*** markvoelker has quit IRC14:55
ayounggsilvis, not that part,  in the note14:55
ayounggsilvis, sent you back a slightly edited version14:55
ayounggsilvis, yeah, but presetning on the main summit side as well is worth it.  Just be prepared to give the talk again on the development side, too.14:56
*** topol has quit IRC14:56
*** rwsu has joined #openstack-keystone14:56
*** e0ne is now known as e0ne_14:56
*** zzzeek has joined #openstack-keystone14:57
*** topol has joined #openstack-keystone14:57
*** ChanServ sets mode: +v topol14:57
*** topol_ has quit IRC14:57
*** rwsu has quit IRC14:58
*** rwsu has joined #openstack-keystone14:58
*** e0ne_ is now known as e0ne14:59
*** mylu has joined #openstack-keystone14:59
openstackgerritBoris Bobrov proposed openstack/keystone: alembic initial support  https://review.openstack.org/15005715:00
*** lhcheng has quit IRC15:00
*** topol has quit IRC15:01
ayoungsamueldmq, not a bad idea.  We could even try to video conf you in for a demo15:04
*** mylu has quit IRC15:04
samueldmqayoung: yes would work for me :)15:05
*** _kiran_ is now known as kiran-r15:05
*** mylu has joined #openstack-keystone15:05
ayoungsamueldmq, OK.  let me try something15:06
samueldmqayoung: also I'll probably record a video-demo, you could use it to show15:06
samueldmqayoung: k once I've everything set up we can arrange how to show what we have15:06
*** mylu has quit IRC15:08
*** mylu has joined #openstack-keystone15:09
*** alex_xu has quit IRC15:09
*** alex_xu has joined #openstack-keystone15:10
*** ig0r_ has quit IRC15:10
*** ig0r__ has joined #openstack-keystone15:11
ayoungsamueldmq, see my PM?15:13
*** pnavarro has quit IRC15:14
*** chenhong has quit IRC15:14
*** jkomg has joined #openstack-keystone15:15
samueldmqayoung: looking now15:16
openstackgerritBoris Bobrov proposed openstack/keystone: alembic initial support  https://review.openstack.org/15005715:16
*** petertr7 is now known as petertr7_away15:18
*** ig0r_ has joined #openstack-keystone15:18
*** ig0r__ has quit IRC15:19
*** jkomg has quit IRC15:20
*** diazjf has joined #openstack-keystone15:23
*** belmoreira has quit IRC15:26
*** markvoelker has joined #openstack-keystone15:26
*** bdossant has quit IRC15:29
*** jkomg has joined #openstack-keystone15:35
*** petertr7_away is now known as petertr715:35
*** topol has joined #openstack-keystone15:38
*** ChanServ sets mode: +v topol15:38
*** geoffarnold has quit IRC15:40
*** geoffarnold has joined #openstack-keystone15:41
*** ig0r__ has joined #openstack-keystone15:41
*** ig0r_ has quit IRC15:43
*** marzif_ has quit IRC15:52
*** marzif_ has joined #openstack-keystone15:52
*** e0ne is now known as e0ne_15:53
*** e0ne_ is now known as e0ne15:54
openstackgerritMerged openstack/oslo.policy: Fix typo of 'available' in token_fixture.py  https://review.openstack.org/20143515:56
*** mylu has quit IRC15:58
*** geoffarnold has quit IRC15:59
*** marzif_ has quit IRC15:59
*** geoffarnold has joined #openstack-keystone16:00
*** shaleh has joined #openstack-keystone16:01
gsilvisI'm trying to use a scoped token that I got through K2K, and I'm getting the following error:16:03
gsilvisUnauthorized: Unable to find valid groups while using mapping keystone-idp-mapping (Disable debug mode to suppress these details.) (HTTP 401) (Request-ID: req-08d3bf8e-b1e7-4a74-8567-830c0dc4cc12)16:03
gsilvisWhere should I start looking to figure this out?16:03
morganfainbergayoung: wont be into boston until 10 pm now... Missed my flight due to 2.5hrs pf traffic to the airport :(16:04
ayoungmorganfainberg, sorry to hear that.  Things will be more mellow on this end16:04
morganfainbergIm sure.16:05
*** mylu has joined #openstack-keystone16:05
morganfainbergNbd, airline did all the nice things and got me on the next available flight.16:05
openstackgerritBoris Bobrov proposed openstack/keystone: Remove excess transformation to list  https://review.openstack.org/20164816:06
morganfainbergNo fees, etc. sometimes flyig a lot on one airline helps a lot.16:06
ayoungmorganfainberg, glad to hear it.16:06
*** piyanai has joined #openstack-keystone16:06
*** ankita has joined #openstack-keystone16:07
*** boris-42 has joined #openstack-keystone16:14
*** slberger has joined #openstack-keystone16:16
*** e0ne is now known as e0ne_16:16
*** e0ne_ is now known as e0ne16:18
*** kiran-r has quit IRC16:21
*** iamjarvo has quit IRC16:24
*** jk|osx has joined #openstack-keystone16:26
*** jkomg has quit IRC16:29
*** tqtran has joined #openstack-keystone16:31
*** _cjones_ has joined #openstack-keystone16:32
*** Kiall has quit IRC16:34
*** ankita_wagh has joined #openstack-keystone16:36
*** Kiall has joined #openstack-keystone16:37
openstackgerritFernando Diaz proposed openstack/keystone: Adding Documentation for Mapping Combinations  https://review.openstack.org/19285016:40
*** e0ne has quit IRC16:42
*** ankita_wagh has quit IRC16:46
*** mylu has quit IRC16:49
*** mylu has joined #openstack-keystone16:50
*** piyanai has quit IRC16:51
*** mylu has quit IRC16:53
*** piyanai has joined #openstack-keystone16:55
*** mylu has joined #openstack-keystone16:57
*** aix has quit IRC16:59
*** mgarza_ has joined #openstack-keystone17:00
*** mylu has quit IRC17:01
*** browne has quit IRC17:04
*** ankita_wagh has joined #openstack-keystone17:04
*** petertr7 is now known as petertr7_away17:06
*** ankita_w_ has joined #openstack-keystone17:07
*** andrewbogott has joined #openstack-keystone17:09
*** andrewbogott has left #openstack-keystone17:10
*** andrewbogott has joined #openstack-keystone17:10
*** TheIntern has quit IRC17:10
*** ankita_wagh has quit IRC17:10
andrewbogottIs it a mistake that the different services take different formats for their endpoint urls?  I just reviewed the docs and, indeed, they recommend specifying an api version for nova and keystone, /not/ specifying one for glance, and including /$(tenant_id)s for nova.  The python glance client actually strips off the /v2 ending if it’s included in the endpoint.17:11
andrewbogottSeems messy but maybe there’s an actual reason for the diffs?17:11
*** piyanai has quit IRC17:12
*** mylu has joined #openstack-keystone17:13
*** jistr has quit IRC17:14
*** spandhe has joined #openstack-keystone17:17
*** crc32 has joined #openstack-keystone17:21
*** kiran-r has joined #openstack-keystone17:28
*** andrewbogott is now known as andrewbogott_afk17:41
*** ankita_w_ has quit IRC17:43
*** piyanai has joined #openstack-keystone17:45
openstackgerritFernando Diaz proposed openstack/keystone: Move oauth1 into keystone core  https://review.openstack.org/20168417:46
*** mylu has quit IRC17:50
*** fangzhou has joined #openstack-keystone17:51
*** e0ne has joined #openstack-keystone17:51
*** browne has joined #openstack-keystone17:53
*** openstackgerrit has quit IRC17:56
*** openstackgerrit has joined #openstack-keystone17:57
*** ankita_wagh has joined #openstack-keystone17:57
*** mylu has joined #openstack-keystone17:57
*** TheIntern has joined #openstack-keystone18:02
*** petertr7_away is now known as petertr718:07
*** geoffarnold has quit IRC18:08
*** topol has quit IRC18:10
*** topol has joined #openstack-keystone18:12
*** ChanServ sets mode: +v topol18:12
*** topol has quit IRC18:12
*** topol has joined #openstack-keystone18:12
*** ChanServ sets mode: +v topol18:12
*** topol has quit IRC18:12
*** iamjarvo has joined #openstack-keystone18:13
*** mylu has quit IRC18:16
*** e0ne is now known as e0ne_18:17
*** mylu has joined #openstack-keystone18:18
bretondolphm: all these bugreports show that either something is wrong with report_deprecated_feature, or we don't use it right18:23
dolphmbreton: agree, something looks wrong on the oslo side18:23
dolphmbreton: to me18:23
*** wasmum- has joined #openstack-keystone18:24
*** hakimo_ has joined #openstack-keystone18:24
*** iamjarvo has quit IRC18:25
*** rdo_ has joined #openstack-keystone18:26
*** e0ne_ is now known as e0ne18:26
*** geoffarnold has joined #openstack-keystone18:27
*** ankita has quit IRC18:27
*** ankita_w_ has joined #openstack-keystone18:28
*** blewis has joined #openstack-keystone18:29
*** mhu1 has joined #openstack-keystone18:29
*** dtroyer_zz has joined #openstack-keystone18:29
*** _sigmavirus24 has joined #openstack-keystone18:29
*** blewis is now known as Guest988718:29
*** clayton_ has joined #openstack-keystone18:29
*** mgagne_ has joined #openstack-keystone18:29
samueldmqayoung: demo's running ... I created a script as you suggested, 3 minutes should be enough :)18:29
*** adam_g` has joined #openstack-keystone18:29
*** sigmavirus24 has quit IRC18:30
*** _sigmavirus24 is now known as sigmavirus2418:30
*** sigmavirus24 has joined #openstack-keystone18:30
*** ankita_wagh has quit IRC18:30
*** jdandrea has quit IRC18:30
*** akscram has quit IRC18:30
*** rdo has quit IRC18:30
*** chlong-afk has quit IRC18:30
*** hakimo has quit IRC18:30
*** Protux has quit IRC18:30
*** ccard has quit IRC18:30
*** jacorob_ has quit IRC18:30
*** zhiyan has quit IRC18:30
*** mhu has quit IRC18:30
*** timburke has quit IRC18:30
*** wasmum has quit IRC18:30
*** clayton has quit IRC18:30
*** dtroyer has quit IRC18:30
*** mgagne has quit IRC18:30
*** adam_g has quit IRC18:30
*** clayton_ is now known as clayton18:30
*** timburke_ has joined #openstack-keystone18:30
*** mhu1 is now known as mhu18:31
*** Guest10549 is now known as dan18:31
*** iamjarvo has joined #openstack-keystone18:32
*** mgagne_ has left #openstack-keystone18:33
*** timburke_ is now known as timburke18:34
*** rm_work|away is now known as rm_work18:36
*** mgagne_ has joined #openstack-keystone18:40
openstackgerritFernando Diaz proposed openstack/keystone: Move oauth1 into keystone core  https://review.openstack.org/20168418:45
*** crc32 has quit IRC18:47
*** tqtran is now known as tqtran-afk18:51
*** topol has joined #openstack-keystone18:52
*** ChanServ sets mode: +v topol18:52
*** topol_ has joined #openstack-keystone18:53
*** ChanServ sets mode: +v topol_18:53
*** slberger has quit IRC18:56
*** openstackgerrit has quit IRC18:56
*** openstackgerrit has joined #openstack-keystone18:56
*** topol has quit IRC18:57
*** topol_ has quit IRC18:58
*** topol has joined #openstack-keystone18:59
*** ChanServ sets mode: +v topol18:59
*** jk|osx has quit IRC19:00
*** piyanai has quit IRC19:08
*** radez_g0n3 is now known as radez19:09
*** amirosh has joined #openstack-keystone19:12
*** tqtran-afk is now known as tqtran19:12
*** slberger has joined #openstack-keystone19:14
amiroshHello, I've updated 2 months old src, now getting ValueError: ("Expected ',' or end-of-list in", "python-ldap>=2.4;python_version=='2.7'", 'at', ";python_version=='2.7'") in test-requirements.txt, any ideas how to fix it? Smth must be updated?19:21
*** petertr7 is now known as petertr7_away19:28
openstackgerritDolph Mathews proposed openstack/keystone: Test v2 tokens being deleted by v3  https://review.openstack.org/20173819:28
*** piyanai has joined #openstack-keystone19:28
*** piyanai has quit IRC19:29
*** piyanai has joined #openstack-keystone19:31
*** topol has quit IRC19:31
*** petertr7_away is now known as petertr719:31
ayoungsamueldmq, cool, give me about 1019:35
*** amirosh has quit IRC19:35
*** mgarza_ has quit IRC19:37
*** mgarza_ has joined #openstack-keystone19:38
*** iamjarvo has quit IRC19:43
myluHi I'm doing k2k federation stuff and I got a "Unable to find valid group using mapping" when I'm use the scoped token to create a keystoneclient.v3.client.Client object. I check that the group that's in my mapping rule is in the project that I scope to.19:45
myluWhere should I look for more information of this problem?19:45
*** ankita has joined #openstack-keystone19:48
*** mgarza_ has quit IRC19:49
*** ccard has joined #openstack-keystone19:49
*** mgarza_ has joined #openstack-keystone19:49
*** chlong-afk has joined #openstack-keystone19:49
*** iamjarvo has joined #openstack-keystone19:51
*** akscram has joined #openstack-keystone19:52
*** radez is now known as radez_g0n319:52
*** mgarza_ has quit IRC19:57
*** mgarza_ has joined #openstack-keystone19:57
*** Protux has joined #openstack-keystone19:57
*** kiran-r has quit IRC19:57
*** ankita_w_ has quit IRC20:00
*** ankita_w_ has joined #openstack-keystone20:01
*** zhiyan has joined #openstack-keystone20:02
*** c_soukup has joined #openstack-keystone20:03
*** csoukup has quit IRC20:07
*** mylu has quit IRC20:07
*** iamjarvo has quit IRC20:08
*** mylu has joined #openstack-keystone20:08
*** mylu has quit IRC20:10
*** mylu has joined #openstack-keystone20:12
diazjfmylu, what does your mapping look like?20:15
myludiazjf:20:16
myludiazjf: [<Mapping id=keystone-idp-mapping, links={u'self': u'http://128.52.183.216:35357/v3/OS-FEDERATION/mappings/keystone-idp-mapping'}, rules=[{u'local': [{u'group': {u'id': u'aca786e0eda0432abc7dfc27c2223fbc'}, u'user': {u'domain': {u'name': u'default'}, u'name': u'federated_user'}}], u'remote': [{u'type': u'openstack_user', u'any_one_of': [u'user1', u'admin']}]}]>]20:16
*** mylu has quit IRC20:18
*** mylu has joined #openstack-keystone20:18
diazjfmake sure a group with that id exists in keystone20:19
diazjfaca786e0eda0432abc7dfc27c2223fbc20:19
diazjfmylu, rodrigods made a blog on this http://blog.rodrigods.com/playing-with-keystone-to-keystone-federation/20:19
myludiazjf: I did I was following his blog20:20
myludiazjf: I did make sure the group exist in project I was scoping to in SP20:20
diazjfmylu, what command are you running thats causing that error?20:21
mylukeystoneclient.v3.client.Client(auth_url='keystone.sp', token='scoped token')20:21
*** iamjarvo has joined #openstack-keystone20:24
*** mylu has quit IRC20:26
*** mylu has joined #openstack-keystone20:27
diazjfits hitting https://github.com/openstack/keystone/blob/2bb4593266a5905679b5a4b3e0058383fbb9c1c5/keystone/exception.py#l185 - l18820:27
myludiazjf: yes I believe so20:28
diazjfI would try specifying the other values other than token in keystoneclient.v3.client.Client(auth_url='keystone.sp', token='scoped token')20:28
*** e0ne has quit IRC20:28
*** tqtran is now known as tqtran-afk20:29
myludiazjf: but non of the parameter specifies group id20:31
*** jdandrea has joined #openstack-keystone20:32
diazjfmylu, any with group name?20:34
myludiazjf: not in Client module http://docs.openstack.org/developer/python-keystoneclient/api/keystoneclient.v3.html#module-keystoneclient.v3.projects20:35
*** topol has joined #openstack-keystone20:36
*** ChanServ sets mode: +v topol20:36
diazjfmylu, and the token is scoped. I'm not sure what's going on :-(20:38
myludiazjf: yeah, it's really strange, thanks for looking at it tho20:38
*** mgarza_ has quit IRC20:38
*** mgarza has joined #openstack-keystone20:38
*** pnavarro has joined #openstack-keystone20:39
*** topol has quit IRC20:41
*** mgarza has quit IRC20:42
diazjfmylu, no prob.20:43
*** mylu has quit IRC20:48
*** mgagne_ is now known as mgagne20:50
*** mylu has joined #openstack-keystone20:50
*** raildo has quit IRC20:53
*** geoffarnold has quit IRC20:58
*** geoffarnold has joined #openstack-keystone20:59
*** rm_work is now known as rm_work|away21:01
*** ankita_w_ has quit IRC21:02
*** ankita_wagh has joined #openstack-keystone21:02
*** geoffarnold has quit IRC21:04
*** geoffarnold has joined #openstack-keystone21:04
*** crc32 has joined #openstack-keystone21:05
*** petertr7 is now known as petertr7_away21:12
*** iamjarvo has quit IRC21:18
*** pnavarro has quit IRC21:20
gsilvisayoung: what's the schedule for the midcycle going to be like?21:30
*** iamjarvo has joined #openstack-keystone21:30
*** iamjarvo has quit IRC21:31
*** iamjarvo has joined #openstack-keystone21:32
*** iamjarvo has quit IRC21:32
*** diazjf has left #openstack-keystone21:36
*** iamjarvo has joined #openstack-keystone21:38
*** iamjarvo has quit IRC21:39
*** mylu has quit IRC21:47
*** ankita has quit IRC21:47
*** iamjarvo has joined #openstack-keystone21:48
*** iamjarvo has quit IRC21:49
*** geoffarnold has quit IRC21:51
ayounggsilvis, 9-5ish21:53
*** albertom has quit IRC21:56
*** iamjarvo has joined #openstack-keystone21:56
*** iamjarvo has quit IRC21:56
*** slberger has left #openstack-keystone22:02
*** TheIntern has quit IRC22:02
*** albertom has joined #openstack-keystone22:03
*** tqtran-afk is now known as tqtran22:03
*** mylu has joined #openstack-keystone22:06
*** ayoung has quit IRC22:06
*** edmondsw has quit IRC22:08
*** TheIntern has joined #openstack-keystone22:09
*** hrou has quit IRC22:12
*** mylu has quit IRC22:18
*** jecarey has quit IRC22:19
*** mhu has quit IRC22:28
*** mylu has joined #openstack-keystone22:31
*** darrenc is now known as darrenc_afk22:35
*** mhu has joined #openstack-keystone22:36
*** lhcheng has joined #openstack-keystone22:37
*** ChanServ sets mode: +v lhcheng22:37
*** mylu has quit IRC22:39
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/20160122:39
*** mylu has joined #openstack-keystone22:40
*** zzzeek has quit IRC22:41
*** zzzeek has joined #openstack-keystone22:41
*** mylu has quit IRC22:41
*** christx2 has quit IRC22:42
*** mylu has joined #openstack-keystone22:45
*** gordc has quit IRC22:50
*** amakarov has joined #openstack-keystone22:50
*** zzzeek has quit IRC22:50
*** mylu has quit IRC22:52
*** mylu has joined #openstack-keystone22:52
*** mylu has quit IRC22:55
*** darrenc_afk is now known as darrenc22:56
*** hrou has joined #openstack-keystone23:01
*** mylu has joined #openstack-keystone23:01
*** sigmavirus24 is now known as sigmavirus24_awa23:01
*** tsymanczyk has quit IRC23:01
*** piyanai has quit IRC23:06
*** mylu has quit IRC23:07
amakarovdims_: hi! are you here?23:08
*** _cjones_ has quit IRC23:10
*** mylu has joined #openstack-keystone23:10
*** piyanai has joined #openstack-keystone23:11
*** mylu has quit IRC23:12
*** piyanai has quit IRC23:15
*** c_soukup has quit IRC23:15
*** amakarov has quit IRC23:16
*** amakarov has joined #openstack-keystone23:17
*** dims__ has joined #openstack-keystone23:17
dims__amakarov: pong23:18
dims__amakarov: reached safely? :)23:18
*** pgbridge has quit IRC23:18
*** dims_ has quit IRC23:19
amakarovdims__: yes, had a nice jorney by local trams. I'm in dorm at 10 Buck st.23:19
*** TheIntern has quit IRC23:20
*** mylu has joined #openstack-keystone23:21
*** timothy_symanczy has joined #openstack-keystone23:21
amakarovdims__: even have my very own kitchen here :) Need to buy some food for it, I wonder...23:22
*** mylu has quit IRC23:23
amakarovdims__: Are you in Boston?23:23
*** mylu has joined #openstack-keystone23:23
*** timothy_symanczy is now known as tsymanczyk23:23
*** mylu has quit IRC23:30
*** bitblt has joined #openstack-keystone23:31
* morganfainberg looks around detroit... Yep long day of travel.23:34
*** shaleh has quit IRC23:39
*** mylu has joined #openstack-keystone23:39
*** mhu has quit IRC23:39
*** mhu has joined #openstack-keystone23:43
openstackgerritMerged openstack/keystoneauth-saml2: Update .gitreview to reflect actual project name  https://review.openstack.org/20109023:47
*** geoffarnold has joined #openstack-keystone23:50

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!