| *** shoutm has joined #openstack-keystone | 00:10 | |
| openstackgerrit | Merged openstack/keystone: Fix logging in federation/idp.py https://review.openstack.org/203047 | 00:16 |
|---|---|---|
| *** toddnni_ has joined #openstack-keystone | 00:18 | |
| *** devlaps has quit IRC | 00:18 | |
| *** mylu has joined #openstack-keystone | 00:19 | |
| *** mylu has quit IRC | 00:19 | |
| *** mylu has joined #openstack-keystone | 00:20 | |
| *** dims_ has quit IRC | 00:20 | |
| *** bapalm_ has joined #openstack-keystone | 00:20 | |
| *** clayton- has joined #openstack-keystone | 00:20 | |
| *** cburgess_ has joined #openstack-keystone | 00:21 | |
| *** cburgess has quit IRC | 00:21 | |
| *** jdennis has quit IRC | 00:21 | |
| *** toddnni has quit IRC | 00:21 | |
| *** toddnni_ is now known as toddnni | 00:21 | |
| *** bapalm has quit IRC | 00:21 | |
| *** clayton has quit IRC | 00:21 | |
| *** samueldmq has quit IRC | 00:21 | |
| *** clayton- is now known as clayton | 00:21 | |
| *** jdennis has joined #openstack-keystone | 00:22 | |
| *** shadower has quit IRC | 00:23 | |
| *** shadower has joined #openstack-keystone | 00:23 | |
| *** mylu has quit IRC | 00:24 | |
| *** bradjones has quit IRC | 00:25 | |
| morgan | gyee, dstanek, lhcheng, jamielennox, https://review.openstack.org/#/c/217319/1 someone +2/+A that it's trivial and should just land | 00:27 |
| lhcheng | morgan: on it | 00:27 |
| morgan | lhcheng: also take a moment to take in and appreciate the epic level of bike shed going on there | 00:28 |
| jamielennox | morgan: done | 00:28 |
| *** shoutm_ has joined #openstack-keystone | 00:28 | |
| jamielennox | didn't bother reading comments, trivial | 00:28 |
| lhcheng | morgan: hah | 00:29 |
| lhcheng | really? | 00:29 |
| morgan | the shed is now green | 00:29 |
| lhcheng | yeah, that's a lot | 00:29 |
| *** shoutm has quit IRC | 00:29 | |
| morgan | i facepalmed pretty hard | 00:29 |
| *** wasmum- has joined #openstack-keystone | 00:31 | |
| *** mtaylor has joined #openstack-keystone | 00:31 | |
| *** mylu has joined #openstack-keystone | 00:32 | |
| *** gabriel-1 has joined #openstack-keystone | 00:33 | |
| *** htruta` has joined #openstack-keystone | 00:33 | |
| *** agireud- has joined #openstack-keystone | 00:34 | |
| lhcheng | morgan: glad that it is not just horizon that has that. :P I remember people having hangout session spending hours deciding how to name a folder. | 00:35 |
| *** agireud has quit IRC | 00:35 | |
| *** akscram1 has quit IRC | 00:35 | |
| *** gabriel-bezerra has quit IRC | 00:35 | |
| *** mordred has quit IRC | 00:36 | |
| *** htruta has quit IRC | 00:36 | |
| *** wasmum has quit IRC | 00:36 | |
| *** agireud- is now known as agireud | 00:36 | |
| morgan | lhcheng: simple, call it "thing" | 00:36 |
| morgan | lhcheng: if thing is insufficient, fix it later | 00:36 |
| morgan | lhcheng: we are now agile development | 00:36 |
| morgan | lhcheng: :P | 00:36 |
| lhcheng | morgan: tough to make a call if there's a lot of experts | 00:39 |
| lhcheng | https://www.youtube.com/watch?v=BKorP55Aqvg | 00:39 |
| lhcheng | enjoy :) | 00:39 |
| morgan | can the red lines be blue? | 00:40 |
| morgan | or with transparent ink | 00:40 |
| lhcheng | yeah, it so simple | 00:40 |
| lhcheng | so simple don't have to explain it | 00:41 |
| *** hrou has joined #openstack-keystone | 00:41 | |
| *** akscram1 has joined #openstack-keystone | 00:42 | |
| *** _cjones_ has quit IRC | 00:43 | |
| *** ayoung has joined #openstack-keystone | 00:45 | |
| *** ChanServ sets mode: +v ayoung | 00:45 | |
| *** shoutm_ has quit IRC | 00:46 | |
| *** shoutm has joined #openstack-keystone | 00:48 | |
| *** lhcheng has quit IRC | 01:01 | |
| *** dims_ has joined #openstack-keystone | 01:05 | |
| *** jdandrea has quit IRC | 01:05 | |
| *** ankita_wagh has quit IRC | 01:15 | |
| *** r-daneel has quit IRC | 01:17 | |
| *** stevemar has joined #openstack-keystone | 01:19 | |
| *** ChanServ sets mode: +v stevemar | 01:19 | |
| *** geoffarnold is now known as geoffarnoldX | 01:20 | |
| *** geoffarnoldX is now known as geoffarnold | 01:28 | |
| *** samueldmq has joined #openstack-keystone | 01:28 | |
| *** stevemar has quit IRC | 01:29 | |
| *** stevemar has joined #openstack-keystone | 01:30 | |
| *** ChanServ sets mode: +v stevemar | 01:30 | |
| *** dims_ has quit IRC | 01:34 | |
| *** ebalduf has joined #openstack-keystone | 01:37 | |
| *** ebalduf has quit IRC | 01:41 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 01:43 | |
| *** spandhe has quit IRC | 01:50 | |
| *** htruta` is now known as htruta | 01:53 | |
| *** erhudy1 has quit IRC | 01:57 | |
| *** mylu has quit IRC | 02:01 | |
| *** mylu has joined #openstack-keystone | 02:02 | |
| *** shoutm has quit IRC | 02:05 | |
| *** shoutm has joined #openstack-keystone | 02:13 | |
| *** stevemar_ has joined #openstack-keystone | 02:20 | |
| *** ChanServ sets mode: +v stevemar_ | 02:20 | |
| *** gyee has quit IRC | 02:24 | |
| *** doug-fish has joined #openstack-keystone | 02:26 | |
| *** stevemar has quit IRC | 02:28 | |
| *** akscram1 has quit IRC | 02:28 | |
| *** geoffarnold is now known as geoffarnoldX | 02:30 | |
| *** lhcheng has joined #openstack-keystone | 02:38 | |
| *** ChanServ sets mode: +v lhcheng | 02:38 | |
| *** mylu has quit IRC | 02:49 | |
| *** geoffarnoldX is now known as geoffarnold | 02:49 | |
| *** mylu has joined #openstack-keystone | 02:50 | |
| *** geoffarnold is now known as geoffarnoldX | 02:50 | |
| *** ankita_wagh has joined #openstack-keystone | 03:00 | |
| *** diazjf has quit IRC | 03:04 | |
| *** doug-fish has quit IRC | 03:07 | |
| *** richm has quit IRC | 03:08 | |
| *** zzzeek has joined #openstack-keystone | 03:12 | |
| *** zzzeek has quit IRC | 03:16 | |
| *** fifieldt has joined #openstack-keystone | 03:18 | |
| *** lhcheng has quit IRC | 03:20 | |
| *** boris-42 has quit IRC | 03:30 | |
| *** mylu has quit IRC | 03:40 | |
| *** lhcheng has joined #openstack-keystone | 03:41 | |
| *** ChanServ sets mode: +v lhcheng | 03:41 | |
| *** david-lyle has joined #openstack-keystone | 03:41 | |
| *** jgriffith has joined #openstack-keystone | 03:45 | |
| jgriffith | any keystone folks around: https://bugs.launchpad.net/keystone/+bug/1496222 | 03:45 |
| openstack | Launchpad bug 1496222 in Keystone "Requirements update breaks keystone install on 3'rd party CI systems" [Undecided,New] | 03:45 |
| *** shoutm has quit IRC | 03:48 | |
| *** shoutm_ has joined #openstack-keystone | 03:49 | |
| *** boris-42 has joined #openstack-keystone | 03:49 | |
| *** boris-42 has quit IRC | 03:49 | |
| *** boris-42 has joined #openstack-keystone | 03:49 | |
| *** ayoung has quit IRC | 03:58 | |
| *** pkarikh has quit IRC | 04:08 | |
| *** pkarikh has joined #openstack-keystone | 04:08 | |
| *** ajayaa has joined #openstack-keystone | 04:12 | |
| *** geoffarnoldX is now known as geoffarnold | 04:14 | |
| *** ankita_wagh has quit IRC | 04:29 | |
| *** akscram1 has joined #openstack-keystone | 04:29 | |
| *** sdake has joined #openstack-keystone | 04:33 | |
| *** sdake_ has joined #openstack-keystone | 04:34 | |
| *** roxanagh_ has joined #openstack-keystone | 04:35 | |
| *** Nirupama has joined #openstack-keystone | 04:35 | |
| *** stevemar_ has quit IRC | 04:38 | |
| *** sdake has quit IRC | 04:38 | |
| *** ankita_wagh has joined #openstack-keystone | 04:41 | |
| *** david-lyle has quit IRC | 04:42 | |
| *** diazjf has joined #openstack-keystone | 04:44 | |
| *** david-lyle has joined #openstack-keystone | 04:45 | |
| *** geoffarnold is now known as geoffarnoldX | 04:54 | |
| *** sdake_ has quit IRC | 04:56 | |
| *** diazjf has left #openstack-keystone | 04:56 | |
| *** amit213 has quit IRC | 04:59 | |
| *** sdake has joined #openstack-keystone | 04:59 | |
| *** amit213 has joined #openstack-keystone | 04:59 | |
| *** diazjf has joined #openstack-keystone | 05:03 | |
| *** diazjf has left #openstack-keystone | 05:03 | |
| *** sdake_ has joined #openstack-keystone | 05:10 | |
| *** sdake has quit IRC | 05:14 | |
| *** roxanagh_ has quit IRC | 05:16 | |
| *** lhcheng has quit IRC | 05:21 | |
| *** lhcheng has joined #openstack-keystone | 05:23 | |
| *** ChanServ sets mode: +v lhcheng | 05:23 | |
| *** hrou has quit IRC | 05:33 | |
| *** roxanagh_ has joined #openstack-keystone | 05:41 | |
| *** agireud has quit IRC | 05:41 | |
| *** agireud has joined #openstack-keystone | 05:41 | |
| *** lsmola has joined #openstack-keystone | 05:42 | |
| *** shoutm_ has quit IRC | 05:44 | |
| *** EinstCrazy has joined #openstack-keystone | 06:06 | |
| *** lhcheng has quit IRC | 06:09 | |
| *** _cjones_ has joined #openstack-keystone | 06:09 | |
| *** ankita_wagh has quit IRC | 06:09 | |
| *** _cjones_ has quit IRC | 06:09 | |
| *** _cjones_ has joined #openstack-keystone | 06:10 | |
| *** shoutm has joined #openstack-keystone | 06:12 | |
| *** henrynash has joined #openstack-keystone | 06:13 | |
| *** ChanServ sets mode: +v henrynash | 06:13 | |
| *** topol has quit IRC | 06:17 | |
| *** roxanagh_ has quit IRC | 06:25 | |
| *** markvoelker has quit IRC | 06:25 | |
| *** ParsectiX has joined #openstack-keystone | 06:29 | |
| *** e0ne has joined #openstack-keystone | 06:37 | |
| *** stevemar has joined #openstack-keystone | 06:38 | |
| *** ChanServ sets mode: +v stevemar | 06:38 | |
| *** e0ne has quit IRC | 06:39 | |
| *** drjones has joined #openstack-keystone | 06:40 | |
| *** stevemar has quit IRC | 06:42 | |
| *** _cjones_ has quit IRC | 06:44 | |
| *** btully has quit IRC | 06:46 | |
| *** henrynash has quit IRC | 07:19 | |
| *** boris-42 has quit IRC | 07:19 | |
| *** ParsectiX has quit IRC | 07:19 | |
| openstackgerrit | Zhao Jian proposed openstack/python-keystoneclient: Add support for grant_type "authorization_code" https://review.openstack.org/223946 | 07:23 |
| *** ParsectiX has joined #openstack-keystone | 07:24 | |
| *** henrynash has joined #openstack-keystone | 07:25 | |
| *** boris-42 has joined #openstack-keystone | 07:25 | |
| *** cameron.freenode.net sets mode: +v henrynash | 07:25 | |
| *** markvoelker has joined #openstack-keystone | 07:26 | |
| *** EinstCrazy has quit IRC | 07:27 | |
| *** henrynash has quit IRC | 07:28 | |
| *** markvoelker has quit IRC | 07:30 | |
| *** roxanaghe has quit IRC | 07:42 | |
| *** pnavarro|off has joined #openstack-keystone | 07:55 | |
| *** lhcheng has joined #openstack-keystone | 07:57 | |
| *** ChanServ sets mode: +v lhcheng | 07:57 | |
| *** drjones has quit IRC | 07:57 | |
| *** _cjones_ has joined #openstack-keystone | 07:58 | |
| *** fhubik has joined #openstack-keystone | 07:59 | |
| *** fhubik is now known as fhubik_brb | 08:00 | |
| *** lhcheng has quit IRC | 08:02 | |
| *** e0ne has joined #openstack-keystone | 08:03 | |
| *** pece has joined #openstack-keystone | 08:04 | |
| *** fhubik_brb is now known as fhubik | 08:05 | |
| *** kiran-r has joined #openstack-keystone | 08:09 | |
| *** sdake has joined #openstack-keystone | 08:11 | |
| *** sdake_ has quit IRC | 08:12 | |
| *** jistr has joined #openstack-keystone | 08:19 | |
| *** e0ne has quit IRC | 08:24 | |
| *** shoutm has quit IRC | 08:33 | |
| *** _cjones_ has quit IRC | 08:45 | |
| *** e0ne has joined #openstack-keystone | 08:46 | |
| *** pnavarro|off is now known as pnavarro | 09:04 | |
| *** fhubik is now known as fhubik_brb | 09:13 | |
| *** aix has joined #openstack-keystone | 09:18 | |
| *** ninag has joined #openstack-keystone | 09:19 | |
| *** topol has joined #openstack-keystone | 09:19 | |
| *** ChanServ sets mode: +v topol | 09:19 | |
| *** ninag has quit IRC | 09:23 | |
| *** topol has quit IRC | 09:24 | |
| *** markvoelker has joined #openstack-keystone | 09:26 | |
| *** sdake has quit IRC | 09:30 | |
| *** markvoelker has quit IRC | 09:31 | |
| *** fhubik_brb is now known as fhubik | 09:32 | |
| *** dims_ has joined #openstack-keystone | 09:35 | |
| *** stevemar has joined #openstack-keystone | 09:40 | |
| *** ChanServ sets mode: +v stevemar | 09:40 | |
| *** stevemar has quit IRC | 09:44 | |
| *** lhcheng has joined #openstack-keystone | 09:46 | |
| *** ChanServ sets mode: +v lhcheng | 09:46 | |
| *** _cjones_ has joined #openstack-keystone | 09:47 | |
| *** bigjools has quit IRC | 09:49 | |
| *** lhcheng has quit IRC | 09:51 | |
| *** _cjones_ has quit IRC | 09:52 | |
| *** fhubik is now known as fhubik_brb | 10:05 | |
| *** lhcheng has joined #openstack-keystone | 10:10 | |
| *** ChanServ sets mode: +v lhcheng | 10:10 | |
| *** lhcheng has quit IRC | 10:15 | |
| *** topol has joined #openstack-keystone | 10:24 | |
| *** ChanServ sets mode: +v topol | 10:24 | |
| *** topol has quit IRC | 10:28 | |
| *** hidekazu has quit IRC | 10:37 | |
| *** bigjools has joined #openstack-keystone | 10:42 | |
| *** aix has quit IRC | 10:50 | |
| *** e0ne has quit IRC | 10:56 | |
| openstackgerrit | Merged openstack/keystone: Removed the extra http:// from JSON schema link https://review.openstack.org/217319 | 11:01 |
| *** aix has joined #openstack-keystone | 11:03 | |
| *** mtaylor is now known as mordred | 11:12 | |
| *** e0ne has joined #openstack-keystone | 11:13 | |
| *** doug-fish has joined #openstack-keystone | 11:17 | |
| *** _cjones_ has joined #openstack-keystone | 11:17 | |
| *** fhubik_brb is now known as fhubik | 11:22 | |
| *** _cjones_ has quit IRC | 11:22 | |
| *** markvoelker has joined #openstack-keystone | 11:27 | |
| *** markvoelker has quit IRC | 11:32 | |
| *** davechen has joined #openstack-keystone | 11:35 | |
| *** davechen has left #openstack-keystone | 11:35 | |
| *** davechen has joined #openstack-keystone | 11:35 | |
| *** gordc has joined #openstack-keystone | 11:39 | |
| *** doug-fish has quit IRC | 11:41 | |
| *** doug-fish has joined #openstack-keystone | 11:42 | |
| *** urulama has quit IRC | 11:44 | |
| *** urulama has joined #openstack-keystone | 11:44 | |
| *** doug-fish has quit IRC | 11:46 | |
| *** doug-fish has joined #openstack-keystone | 11:46 | |
| *** boris-42 has quit IRC | 11:50 | |
| *** katkapilatova has joined #openstack-keystone | 11:52 | |
| *** ParsectiX has quit IRC | 11:56 | |
| *** raildo-afk is now known as raildo | 12:02 | |
| *** dsirrine has joined #openstack-keystone | 12:06 | |
| *** markvoelker has joined #openstack-keystone | 12:12 | |
| *** _cjones_ has joined #openstack-keystone | 12:19 | |
| *** nicodemos has joined #openstack-keystone | 12:22 | |
| *** EinstCrazy has joined #openstack-keystone | 12:23 | |
| *** _cjones_ has quit IRC | 12:23 | |
| *** kiran-r has quit IRC | 12:25 | |
| *** ajayaa has quit IRC | 12:29 | |
| *** edmondsw has joined #openstack-keystone | 12:33 | |
| *** e0ne has quit IRC | 12:38 | |
| *** EinstCrazy has quit IRC | 12:40 | |
| *** ninag has joined #openstack-keystone | 12:43 | |
| *** kiran-r has joined #openstack-keystone | 12:44 | |
| *** thiagop has joined #openstack-keystone | 12:44 | |
| *** ninag has quit IRC | 12:45 | |
| *** raildo is now known as raildo-afk | 12:45 | |
| *** ninag has joined #openstack-keystone | 12:45 | |
| *** davechen has quit IRC | 12:47 | |
| *** dims_ has quit IRC | 12:47 | |
| *** davechen has joined #openstack-keystone | 12:48 | |
| *** hockeynut has quit IRC | 12:49 | |
| *** lbragstad has quit IRC | 12:49 | |
| *** jacorob has quit IRC | 12:49 | |
| *** blewis_ has quit IRC | 12:49 | |
| *** comstud has quit IRC | 12:50 | |
| *** blewis has joined #openstack-keystone | 12:50 | |
| *** blewis is now known as Guest68187 | 12:50 | |
| *** hockeynut has joined #openstack-keystone | 12:50 | |
| *** jacorob has joined #openstack-keystone | 12:50 | |
| *** comstud has joined #openstack-keystone | 12:51 | |
| *** lbragstad has joined #openstack-keystone | 12:51 | |
| *** henrynash has joined #openstack-keystone | 12:52 | |
| *** ChanServ sets mode: +v henrynash | 12:52 | |
| *** aix has quit IRC | 12:56 | |
| *** shoutm has joined #openstack-keystone | 12:58 | |
| *** dims_ has joined #openstack-keystone | 12:58 | |
| *** henrynash has quit IRC | 12:59 | |
| *** raildo-afk is now known as raildo | 13:08 | |
| *** richm has joined #openstack-keystone | 13:08 | |
| *** e0ne has joined #openstack-keystone | 13:09 | |
| *** aix has joined #openstack-keystone | 13:10 | |
| *** pece has quit IRC | 13:19 | |
| *** _cjones_ has joined #openstack-keystone | 13:19 | |
| *** ParsectiX has joined #openstack-keystone | 13:23 | |
| *** _cjones_ has quit IRC | 13:24 | |
| *** ninag has quit IRC | 13:26 | |
| *** ninag has joined #openstack-keystone | 13:27 | |
| *** ninag has quit IRC | 13:27 | |
| *** hrou has joined #openstack-keystone | 13:27 | |
| *** ninag has joined #openstack-keystone | 13:27 | |
| *** fhubik is now known as fhubik_brb | 13:29 | |
| *** kiran-r has quit IRC | 13:32 | |
| *** davechen1 has joined #openstack-keystone | 13:34 | |
| *** ninag has quit IRC | 13:36 | |
| *** davechen has quit IRC | 13:36 | |
| *** ninag has joined #openstack-keystone | 13:36 | |
| *** jsavak has joined #openstack-keystone | 13:37 | |
| *** LukeHinds has joined #openstack-keystone | 13:42 | |
| *** ebalduf has joined #openstack-keystone | 13:43 | |
| *** Nirupama has quit IRC | 13:44 | |
| *** fhubik_brb is now known as fhubik | 13:47 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:47 | |
| *** ninag_ has joined #openstack-keystone | 13:48 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 13:48 | |
| *** dsirrine has quit IRC | 13:49 | |
| *** ayoung has joined #openstack-keystone | 13:49 | |
| *** ChanServ sets mode: +v ayoung | 13:49 | |
| *** ebalduf has quit IRC | 13:50 | |
| *** davechen has joined #openstack-keystone | 13:51 | |
| *** ninag has quit IRC | 13:51 | |
| *** davechen1 has quit IRC | 13:52 | |
| *** nicodemos has quit IRC | 13:54 | |
| *** erhudy has joined #openstack-keystone | 13:54 | |
| *** tellesnobrega is now known as tellesnobrega_af | 13:57 | |
| *** zzzeek has joined #openstack-keystone | 14:02 | |
| *** annasort has quit IRC | 14:03 | |
| *** thiagop has quit IRC | 14:03 | |
| *** dsirrine has joined #openstack-keystone | 14:04 | |
| *** iurygregory has quit IRC | 14:04 | |
| *** jsavak has quit IRC | 14:04 | |
| *** ericksonsantos has quit IRC | 14:04 | |
| *** jsavak has joined #openstack-keystone | 14:06 | |
| *** henrynash has joined #openstack-keystone | 14:07 | |
| *** ChanServ sets mode: +v henrynash | 14:07 | |
| *** ParsectiX has quit IRC | 14:08 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: functional tests for keystone on subpaths https://review.openstack.org/196186 | 14:09 |
| *** davechen has left #openstack-keystone | 14:10 | |
| *** aix has quit IRC | 14:11 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:11 | |
| *** r-daneel has joined #openstack-keystone | 14:12 | |
| *** jecarey has joined #openstack-keystone | 14:16 | |
| *** tellesnobrega_af is now known as tellesnobrega | 14:17 | |
| *** Ephur has joined #openstack-keystone | 14:19 | |
| *** _cjones_ has joined #openstack-keystone | 14:21 | |
| *** aix has joined #openstack-keystone | 14:22 | |
| *** pgbridge has joined #openstack-keystone | 14:25 | |
| *** _cjones_ has quit IRC | 14:25 | |
| ayoung | bknudson, now that we use entrypoints instead of have keystone-all etc...how do I generate them? python setup.py build does not create them | 14:27 |
| *** sdake_ has joined #openstack-keystone | 14:27 | |
| *** btully has joined #openstack-keystone | 14:28 | |
| *** jsavak has quit IRC | 14:28 | |
| *** jsavak has joined #openstack-keystone | 14:29 | |
| *** jorge_munoz has joined #openstack-keystone | 14:29 | |
| ayoung | GAH PYTHON! | 14:29 |
| ayoung | OK...entyrpoints are wonderful, but I do not want to install to run a CLI. I don't want a venv. I want to build and use in my user-isolated realm.... | 14:30 |
| *** tellesnobrega is now known as tellesnobrega_af | 14:30 | |
| *** openstackgerrit has quit IRC | 14:31 | |
| *** tellesnobrega_af is now known as tellesnobrega | 14:31 | |
| *** openstackgerrit has joined #openstack-keystone | 14:32 | |
| lbragstad | ayoung: don't you just need it to be a package then? you don't want to expose the project through a CLI entry point, but having it in a package would still allow you to import it into another project, etc... right? | 14:32 |
| *** tellesnobrega is now known as tellesnobrega_af | 14:32 | |
| ayoung | lbragstad, I'm talkking about for development... | 14:33 |
| ayoung | lbragstad, It ok, I'll use the venv | 14:33 |
| *** topol has joined #openstack-keystone | 14:33 | |
| *** ChanServ sets mode: +v topol | 14:33 | |
| ayoung | but I often ran the Keystone server in my home build dir to make sure RPMS etc were all good. I can do it using python and importing the entry point. Its just anotherthing that python does its own way | 14:34 |
| *** annasort has joined #openstack-keystone | 14:34 | |
| lbragstad | ayoung: if you're trying to get it working for development can't you just install in in a venv with python setup.py? | 14:34 |
| ayoung | lbragstad, I can. It just does not make sense for one of my use patterns, and the bin scripts not being gneerated by python setup.py is a bit frustrating | 14:35 |
| *** slberger has joined #openstack-keystone | 14:35 | |
| *** jsavak has quit IRC | 14:36 | |
| ayoung | lbragstad, I might be able to run the scripts inside the venv without activating it, but have not tried yet. We have an issue where we need to run older version ofthe unit tests, but run aainst the RPMS installed on the system for dependencies, too | 14:36 |
| ayoung | and I wanted to run the migrations to make sure it worked against a real MySQL server, not just sqlite... | 14:36 |
| ayoung | little things... | 14:36 |
| lbragstad | ayoung: it should work in a development env venv if you pass entry_points using your setup.py script | 14:37 |
| *** jsavak has joined #openstack-keystone | 14:37 | |
| *** david-lyle has quit IRC | 14:37 | |
| *** tellesnobrega_af is now known as tellesnobrega | 14:38 | |
| *** pnavarro has quit IRC | 14:38 | |
| *** ninag_ has quit IRC | 14:39 | |
| *** ninag has joined #openstack-keystone | 14:39 | |
| ayoung | lbragstad, ? | 14:40 |
| *** raildo is now known as raildo-afk | 14:41 | |
| *** raildo-afk is now known as raildo | 14:41 | |
| lbragstad | ayoung: http://cdn.pasteraw.com/ahvhx4dsfm83kmv4dzpal3jfomaess3 | 14:42 |
| bknudson | ayoung: pip install doesn't create them? | 14:42 |
| ayoung | bknudson, I don't want to run pip install | 14:42 |
| *** ebalduf has joined #openstack-keystone | 14:42 | |
| ayoung | bknudson, I wanted to just do bin/keystone-manage | 14:42 |
| *** jecarey has quit IRC | 14:42 | |
| ayoung | so python setup.py build creats a lib but not a bin | 14:42 |
| lbragstad | ayoung: the entry_points part should create a bin for you that points the module you want to use as the entry point | 14:43 |
| ayoung | lbragstad, doing python setup.py build? | 14:43 |
| lbragstad | ayoung: try python setup.py install | 14:44 |
| ayoung | lbragstad, no | 14:44 |
| ayoung | that installs into the /usr/lib tree on RH based installs | 14:44 |
| *** ninag has quit IRC | 14:44 | |
| ayoung | build is supposed to do this, not install | 14:44 |
| *** geoffarnoldX is now known as geoffarnold | 14:45 | |
| *** phalmos has joined #openstack-keystone | 14:45 | |
| *** ninag has joined #openstack-keystone | 14:46 | |
| lbragstad | ayoung: strange, I just did this yesterday but not on RH and it installed my project bins into a venv | 14:46 |
| ayoung | lbragstad, I can do what I need by activating the venv for now | 14:47 |
| ayoung | lbragstad, I think you used tox | 14:47 |
| lbragstad | nope | 14:47 |
| lbragstad | I used python setup.py | 14:47 |
| bknudson | virtualenv keystone-install && keystone-install/bin/pip install . | 14:47 |
| ayoung | lbragstad, just doing python setup.py build should not create a venv | 14:47 |
| ayoung | GAH | 14:47 |
| lbragstad | btw, this was for a side project, not keystone | 14:47 |
| ayoung | Ok..tis is a pcakaging type workflow, not upstream development | 14:48 |
| ayoung | I want to test a patch | 14:48 |
| bknudson | better do keystone-install/bin/pip install .[ldap] | 14:48 |
| lbragstad | ayoung: can you use bdist? | 14:48 |
| bknudson | so you get the ldap stuff | 14:48 |
| ayoung | I will eventually build a full RPM and test that way, but as an interim step I want to test the code against the RPMS installed by the repo | 14:48 |
| *** fhubik is now known as fhubik_brb | 14:48 | |
| ayoung | I want to keep my laptop clean, and not install unpackaged code into /lib bknudson | 14:49 |
| bknudson | do you split keystone up into multiple rpms? | 14:49 |
| ayoung | so pip is out | 14:49 |
| ayoung | bknudson, actually, we do, but irrelevant for this. Here is how it works | 14:49 |
| ayoung | we have a repo that is bascially the stable code... | 14:50 |
| lbragstad | doesn't pip -e provide functionality to install into a path? | 14:50 |
| ayoung | we manage some patches independently, though | 14:50 |
| ayoung | and to test that code, I need to build a VM with a clean set of RPMs, so I don;t want to install anything into it via something other than yum, or I end up with a code path that does not reflect what I will deploy in the filed | 14:51 |
| ayoung | field | 14:51 |
| bknudson | yum localinstall . | 14:51 |
| ayoung | so I want to do something like yum install openstack-keystone to get all the deps filled in, then git checkout out the source version to build and test it | 14:52 |
| lbragstad | are you trying to expose an entry point from something maintained outside of keystone? | 14:52 |
| *** fhubik_brb is now known as fhubik | 14:52 | |
| ayoung | bknudson, yes, I will get there, but during the coding phase, I'd rather not have to build an rpm for each test. I want to git checkout <mybranch> then run testr etc | 14:52 |
| ayoung | and also some manual tests, like keystone-manage db_sync | 14:52 |
| morgan | ayoung: pip install should not add anything but the project itself unless the system requirements are insufficient. | 14:53 |
| ayoung | what I really want is for things like entry_points to not replace the existing way of thinking about code | 14:53 |
| bknudson | I'm not sure what the problem is... for the python libraries that keystone uses you want them to be from the rpms and not the venv? | 14:53 |
| ayoung | morgan, in order to run pip install, I have to do sudo. That is a nogo for this workflow | 14:53 |
| ayoung | bknudson, that is correct | 14:54 |
| ayoung | seriously, guys, forget pip | 14:54 |
| morgan | Oh just make a venv with access to the system | 14:54 |
| ayoung | morgan, GAH. | 14:54 |
| ayoung | no | 14:54 |
| ayoung | the system IS the venv here. | 14:54 |
| morgan | Or use sdist | 14:54 |
| ayoung | its a testing vm | 14:54 |
| bknudson | my understanding is that pip is required. | 14:54 |
| ayoung | my understanding is that whomever came up with entry_points for bins was not aware of how many people use code | 14:55 |
| morgan | So pip is the supported workflow. Setup.py install is not for lots of reasons | 14:55 |
| ayoung | python setup.py build should create build/bin | 14:55 |
| morgan | Either you are doing an install or a sdist | 14:55 |
| morgan | Build iirc is not what you want. But you can tag zigo for help here. He can probably guide you a bit better | 14:56 |
| ayoung | "Is the whole world taking crazy pills? He's got one look!" | 14:56 |
| morgan | Though he is likley using a chroot | 14:56 |
| zigo | Can I help? | 14:57 |
| ayoung | morgan, TBH, I don't even really want build. | 14:57 |
| ayoung | zigo, without doing an install I want keystone-manage | 14:57 |
| ayoung | not yusing pip | 14:57 |
| morgan | zigo: which is an entry point | 14:57 |
| ayoung | just from inside my tree, with normal user privs | 14:57 |
| zigo | ayoung: Just write a tiny "entry point script" by hand... | 14:57 |
| *** dims_ has quit IRC | 14:58 | |
| zigo | I did that for some package expecting "setup.py install" when running tests. | 14:58 |
| ayoung | zigo, and this we call progress? | 14:58 |
| bknudson | I guess we could take .venv/bin/keystone-manage and check it into keystone. | 14:58 |
| *** stevemar has joined #openstack-keystone | 14:58 | |
| *** ChanServ sets mode: +v stevemar | 14:58 | |
| *** dims_ has joined #openstack-keystone | 14:58 | |
| bknudson | as bin/keystone-manage | 14:58 |
| zigo | ayoung: Hum... Nop, definitively ! :) | 14:58 |
| *** jistr is now known as jistr|call | 14:58 | |
| ayoung | bknudson, let me try that and see what happends... | 14:59 |
| zigo | ayoung: Maybe you can just call "python setup.py install --root=foo" then take the things from foo/usr/bin. | 14:59 |
| zigo | This would work too. | 14:59 |
| morgan | zigo: thnx. I figured it was something like that | 15:00 |
| ayoung | this worked: | 15:00 |
| ayoung | mkdir build/bin | 15:00 |
| ayoung | cp .tox/py27/bin/keystone-manage build/bin/ | 15:00 |
| ayoung | cd build | 15:00 |
| ayoung | ./bin/keystone-manage db_version | 15:00 |
| *** boris-42 has joined #openstack-keystone | 15:01 | |
| *** openstackgerrit has quit IRC | 15:01 | |
| *** richm has quit IRC | 15:02 | |
| morgan | ayoung: fwiw - i always use a venv. Sometimes i make the venv access the ayatem libs (option when making a venv) then installing there. It will also show you what was insufficient compared to what the system has | 15:02 |
| *** openstackgerrit has joined #openstack-keystone | 15:02 | |
| ayoung | bknudson, it does not feel like someting to check in...more like an extension to setuptools to call PBR console_scripts or someting | 15:02 |
| ayoung | morgan, trying to reduce the tooling necessary for QA, though | 15:02 |
| ayoung | I can work around it | 15:03 |
| morgan | ayoung: or just install keystone and nothing else. That has been my workflow when dealing with needing keystone + system install and not root perms | 15:03 |
| bknudson | I thought we were all using docker now. | 15:03 |
| ayoung | bknudson, I would love it if we deployed keystone inside a container.... | 15:03 |
| morgan | bknudson: oh sorry docker docker docker docker docker docker | 15:03 |
| ayoung | we do these all-in-one images and it means that we can't change the Keystone version due to all the library dependencies.... | 15:04 |
| ayoung | dawkah | 15:04 |
| morgan | Before i request releases of libs anything we need to land? | 15:04 |
| ayoung | revocation events? | 15:05 |
| * ayoung ducks | 15:05 | |
| ayoung | lbragstad, is the issue with sub-second times on fernet tokens a space issue? | 15:05 |
| bknudson | morgan: would be nice to have https://review.openstack.org/#/c/223338/ or something like it | 15:06 |
| dolphm | ayoung: a spec issue | 15:06 |
| morgan | ayoung: and a mitaka target | 15:06 |
| morgan | To fix | 15:06 |
| bknudson | morgan: since that fixes ut issue so we can merge other stuff | 15:06 |
| ayoung | dolphm, what do you mean? | 15:06 |
| dolphm | ayoung: the fernet spec, which we did not write, specifies second-level precision | 15:06 |
| ayoung | ah | 15:06 |
| morgan | bknudson: looking | 15:06 |
| bknudson | morgan: then there's a reqs update: https://review.openstack.org/#/c/221079/ | 15:06 |
| dolphm | ayoung: github.com/fernet/spec | 15:06 |
| ayoung | dolphm, so, the reason we had the sub-second was due to the need for speed in the unit tests: some tests ran so fast that the issue and revoke happend in the same second | 15:07 |
| ayoung | to work around that, I think we can manipulate the clock | 15:07 |
| morgan | ayoung: yeah something to fix next cycle | 15:07 |
| dolphm | ayoung: right, but you can't manipulate the clock from tempest :-/ | 15:07 |
| bknudson | https://github.com/fernet/spec/blob/master/Spec.md#timestamp -- seconds since epoch | 15:07 |
| ayoung | bknudson, thanks | 15:08 |
| bknudson | and you can't require customers to manipulate their clock | 15:08 |
| morgan | There are a few solutions to this issue. But nothing we can fix today | 15:08 |
| morgan | One is revocation events being a <now | 15:08 |
| ayoung | morgan, I know...since I am responsible for the original issue (subseconds) I want to make sure the solution is solid... | 15:09 |
| morgan | 1 second window of exposure | 15:09 |
| morgan | So anyway. Next cycle | 15:09 |
| ayoung | does tempest do things that fast, too? | 15:09 |
| morgan | bknudson: first linked patch +A | 15:09 |
| *** roxanaghe has joined #openstack-keystone | 15:09 | |
| morgan | bknudson: requirements change I'll +A once Jenkins approves | 15:10 |
| bknudson | morgan: I could rebase it onto https://review.openstack.org/#/c/223338/ ? | 15:11 |
| bknudson | so that it passes | 15:11 |
| morgan | bknudson: about the same amount of work. Your call. | 15:11 |
| morgan | bknudson: if you do rebase feel free to +2/+A | 15:12 |
| bknudson | I'll do the rebase so we don't have to wait for the first one to merge. | 15:12 |
| morgan | Sounds good | 15:12 |
| openstackgerrit | Brant Knudson proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/221079 | 15:12 |
| ayoung | bknudson, so fernet is only specified for AES 128 crypto? | 15:13 |
| morgan | It also has create time that is 1 second resolution | 15:14 |
| bknudson | ayoung: yes, I guess they figured it was the way to go. | 15:14 |
| morgan | The create time is outside the Aes payload | 15:14 |
| morgan | But AES128 CBC is pretty solid these days, and fernet could expand it to something else down the line | 15:15 |
| bknudson | I guess we could put our own timestamp in the ciphertext and then not use the fernet timestamp? | 15:15 |
| morgan | Or just call it some other gross alcohol and change the crypto | 15:15 |
| bknudson | or just use it for the fernet invalidation | 15:15 |
| bknudson | morgan: what's the grossest alcohol? | 15:15 |
| *** nicodemos has joined #openstack-keystone | 15:15 | |
| morgan | Grappa is up there in my book | 15:16 |
| openstackgerrit | henry-nash proposed openstack/keystone: Issue deprecation warning if domain_id not specified in create call https://review.openstack.org/209848 | 15:16 |
| morgan | I am leaving out the college gross things like aftershock and fireball | 15:16 |
| *** thiagop has joined #openstack-keystone | 15:18 | |
| *** tonytan4ever has joined #openstack-keystone | 15:21 | |
| *** diazjf has joined #openstack-keystone | 15:22 | |
| henrynash | morgan: for RC1, I have two bugs I’d liek to get in: https://review.openstack.org/#/c/209848/3 and https://review.openstack.org/#/c/191976/ | 15:22 |
| henrynash | morgan: could you add them to the list? | 15:22 |
| *** katkapilatova has left #openstack-keystone | 15:24 | |
| henrynash | lbragstad: I wonder if you could reapply your +2 to https://review.openstack.org/#/c/191976/ (had to rebase) | 15:25 |
| bknudson | henrynash: what's up with the migration change in https://review.openstack.org/#/c/191976/ ? | 15:26 |
| bknudson | ok, so it can be backported... | 15:26 |
| henrynash | bknudson: yep | 15:26 |
| henrynash | bknudson: we’ve had at least one customer fall into this hole | 15:26 |
| *** iurygregory has joined #openstack-keystone | 15:28 | |
| bknudson | this looks pretty scary for a backport. | 15:29 |
| bknudson | why is the mutex table being added? | 15:29 |
| *** shoutm has quit IRC | 15:30 | |
| *** jistr|call is now known as jistr | 15:30 | |
| henrynash | bknudson: well, we need some cross-process communication to make sure that we don’t have multiple processes trying to grab teh one and only sql driver at the same time | 15:30 |
| henrynash | bknudson: use SQL seemed a reasonable thing to do for that….but am open to other simpler ways…. | 15:31 |
| bknudson | so this is implementing a whole distributed lock scheme? | 15:31 |
| henrynash | bknudson: basically, yes | 15:32 |
| henrynash | bknudson: just using a row in an sql table to do it | 15:32 |
| bknudson | henrynash: if a server goes down while it's holding a lock that'll require a db operation to clear it out? | 15:34 |
| *** david-ly_ has joined #openstack-keystone | 15:35 | |
| henrynash | bknudson: no, I hope I self heal in that case…. | 15:35 |
| henrynash | bknudson: all the “lock” says is which domain has the mutex….we never wait on it | 15:36 |
| henrynash | bknduson: every time we start a keystone, we’re going to go through each domain config and see which one wants SQL…if we find one that does, and the row in the table already exists and it is for the domain that wants it, we say fine | 15:37 |
| *** jsavak has quit IRC | 15:38 | |
| henrynash | bknudson: if a server crashed deleting a domain (and just before removing the mutex)…we also detect that whenr checking the row in the table to see if the domain that claims to have it still exists | 15:39 |
| bknudson | doesn't really seem like a mutex, it's just a row that says which domain is the sql one? | 15:41 |
| henrynash | bknudson: yeah, you right really! | 15:41 |
| *** david-ly_ is now known as david-lyle | 15:41 | |
| bknudson | mind clearing it up? | 15:41 |
| henrynash | bkudson: in terms of naming? | 15:41 |
| bknudson | yes | 15:41 |
| henrynash | sure, I’ll do that tonight.... | 15:41 |
| bknudson | the table cols could be type | id with a primary index on type | 15:42 |
| bknudson | where type is always 'sql' | 15:42 |
| bknudson | then a second insert would fail because of the conflict | 15:42 |
| henrynash | isn’t that what I’m doing? | 15:42 |
| bknudson | yes, but for some reason the table is called mutex, when it isn't a mutex. | 15:43 |
| henrynash | ah, right…sure…I’ll fix that! | 15:43 |
| henrynash | great, thx | 15:43 |
| *** henrynash has quit IRC | 15:44 | |
| *** jsavak has joined #openstack-keystone | 15:46 | |
| *** jistr has quit IRC | 15:54 | |
| *** devlaps has joined #openstack-keystone | 15:54 | |
| lbragstad | bknudson: our implementation of fernet was original written that way, where the issued at the expires at times were in the ciphertext, but it's redundant with what fernet already does and it bloats the token. | 15:56 |
| *** roxanaghe has quit IRC | 15:57 | |
| bknudson | lbragstad: it's not redundant if it has more info | 15:57 |
| bknudson | could just store the microseconds in the cipher | 15:57 |
| *** pece has joined #openstack-keystone | 15:57 | |
| *** ChanServ sets mode: +o dolphm | 15:57 | |
| lbragstad | ayoung: yep, tempest runs test within a second http://i.imgur.com/Gplkgcc.jpg | 15:58 |
| *** jecarey has joined #openstack-keystone | 15:58 | |
| lbragstad | ayoung: mtrienish was nice enough to do some profiling for us | 15:58 |
| ayoung | lbragstad, so we can put a second delay in the tests that do issue/revoke | 15:59 |
| lbragstad | ayoung: yes, essentially | 15:59 |
| lbragstad | ayoung: I'm working on some patches locally that i'd like to get up by the end of the dya | 15:59 |
| ayoung | morgan, AES is secure today, but symmetric crypto has typically had a short life. Asym algorthms have not changed much, but the symmetric ones have been replaced fairly regularly (me handwaves for time span) | 16:00 |
| *** richm has joined #openstack-keystone | 16:03 | |
| *** jsavak has quit IRC | 16:04 | |
| *** EinstCrazy has joined #openstack-keystone | 16:04 | |
| ayoung | lbragstad, post em and ping me | 16:06 |
| *** EinstCrazy has quit IRC | 16:06 | |
| lbragstad | ayoung: will d | 16:06 |
| lbragstad | do* | 16:06 |
| *** gyee has joined #openstack-keystone | 16:06 | |
| *** ChanServ sets mode: +v gyee | 16:06 | |
| *** jsavak has joined #openstack-keystone | 16:07 | |
| *** EinstCrazy has joined #openstack-keystone | 16:08 | |
| *** EinstCrazy has joined #openstack-keystone | 16:09 | |
| openstackgerrit | Merged openstack/keystonemiddleware: auth_token tests use clean config https://review.openstack.org/223338 | 16:12 |
| *** lhcheng has joined #openstack-keystone | 16:13 | |
| *** ChanServ sets mode: +v lhcheng | 16:13 | |
| *** lhcheng has quit IRC | 16:13 | |
| *** lhcheng has joined #openstack-keystone | 16:13 | |
| *** ChanServ sets mode: +v lhcheng | 16:13 | |
| morgan | Ooh.. Earthquake. :( | 16:14 |
| gyee | morgan, just now? | 16:19 |
| *** henrynash has joined #openstack-keystone | 16:19 | |
| *** ChanServ sets mode: +v henrynash | 16:19 | |
| dstanek | morgan: that's the signal to move to the East coast | 16:19 |
| *** henrynash has quit IRC | 16:21 | |
| morgan | dstanek: eh. Was maybe a 3.0 | 16:21 |
| gyee | 3.0 is baby | 16:21 |
| *** EinstCrazy has quit IRC | 16:22 | |
| *** sdake_ is now known as sdake | 16:23 | |
| *** henrynash has joined #openstack-keystone | 16:26 | |
| *** ChanServ sets mode: +v henrynash | 16:26 | |
| *** roxanaghe has joined #openstack-keystone | 16:31 | |
| *** ebalduf has quit IRC | 16:35 | |
| *** ebalduf has joined #openstack-keystone | 16:35 | |
| dstanek | morgan: looking at the bike shed review you mentioned yesterday. what are the migration rules for rst that are mentioned? | 16:35 |
| *** ayoung has quit IRC | 16:36 | |
| *** diazjf has quit IRC | 16:41 | |
| *** diazjf has joined #openstack-keystone | 16:41 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Issue deprecation warning if domain_id not specified in create call https://review.openstack.org/209848 | 16:41 |
| *** phalmos has quit IRC | 16:43 | |
| *** diazjf has quit IRC | 16:46 | |
| *** tonytan4ever has quit IRC | 16:47 | |
| *** ankita_wagh has joined #openstack-keystone | 16:49 | |
| *** richm has quit IRC | 16:50 | |
| slberger | has any one experienced any performance deterioration with a single keystone node when making concurrent write requests to it? so like deleting 100 tenants using 10 threads at once | 16:52 |
| *** browne has joined #openstack-keystone | 16:54 | |
| morgan | dstanek: not sure. But ultimately fixing a typo like that did not justify 5 patches | 16:56 |
| *** diazjf has joined #openstack-keystone | 16:57 | |
| *** _cjones_ has joined #openstack-keystone | 16:58 | |
| *** exploreshaifali has joined #openstack-keystone | 16:59 | |
| morgan | Oh earthquake was a 4.5. Looks like on/near San Andreas fault | 16:59 |
| dstanek | has anyone gotten ldap identity working in devstack? | 17:03 |
| bknudson | dstanek: it's worked for me in the past. | 17:03 |
| morgan | dstanek: not recently | 17:03 |
| *** fhubik has quit IRC | 17:04 | |
| dstanek | it's been one problem after another - current failure is http://paste.openstack.org/show/464960/ | 17:05 |
| dstanek | bknudson: i'm also using your patch so things actually get installed | 17:05 |
| *** richm has joined #openstack-keystone | 17:05 | |
| bknudson | it should work without my patch | 17:06 |
| *** lsmola has quit IRC | 17:13 | |
| *** nicodemos has quit IRC | 17:16 | |
| *** e0ne has quit IRC | 17:19 | |
| *** exploreshaifali has quit IRC | 17:19 | |
| *** jsavak has quit IRC | 17:23 | |
| *** jsavak has joined #openstack-keystone | 17:24 | |
| openstackgerrit | Merged openstack/keystone: Support project hierarchies in data driver tests https://review.openstack.org/154485 | 17:24 |
| *** geoffarnold has quit IRC | 17:29 | |
| *** geoffarnold has joined #openstack-keystone | 17:31 | |
| *** spandhe has joined #openstack-keystone | 17:31 | |
| *** phalmos has joined #openstack-keystone | 17:32 | |
| dstanek | bknudson: without your patch i have to manually install python-ldap and ldappool | 17:35 |
| bknudson | dstanek: https://review.openstack.org/#/c/208153/7/lib/ldap is where ldappool happened before | 17:36 |
| bknudson | devstack might assume that python-ldap is installed via packages? | 17:37 |
| dstanek | bknudson: ah, i bet it would have worked fine then. when i first started i had issues adding the ldap service (meaning i did it wrong), but changed the keystone backend to ldap | 17:38 |
| dstanek | so i guess i am just stuck at the cn=config ldap error after all | 17:38 |
| *** jsavak has quit IRC | 17:41 | |
| *** jsavak has joined #openstack-keystone | 17:41 | |
| *** topol has quit IRC | 17:46 | |
| *** topol_ has joined #openstack-keystone | 17:48 | |
| *** ChanServ sets mode: +v topol_ | 17:48 | |
| *** jsavak has quit IRC | 17:49 | |
| *** henrynash has quit IRC | 17:51 | |
| *** phalmos has quit IRC | 17:52 | |
| *** topol_ has quit IRC | 17:52 | |
| *** ankita_w_ has joined #openstack-keystone | 17:54 | |
| *** sdake_ has joined #openstack-keystone | 17:54 | |
| *** ankita_wagh has quit IRC | 17:56 | |
| *** sdake has quit IRC | 17:58 | |
| *** e0ne has joined #openstack-keystone | 17:59 | |
| *** jsavak has joined #openstack-keystone | 17:59 | |
| *** ankita_w_ has quit IRC | 18:00 | |
| *** ankita_wagh has joined #openstack-keystone | 18:00 | |
| *** ayoung has joined #openstack-keystone | 18:00 | |
| *** ChanServ sets mode: +v ayoung | 18:00 | |
| *** mylu has joined #openstack-keystone | 18:03 | |
| *** geoffarn_ has joined #openstack-keystone | 18:04 | |
| *** LukeHinds has quit IRC | 18:05 | |
| *** jsavak has quit IRC | 18:06 | |
| *** geoffarnold has quit IRC | 18:07 | |
| *** jsavak has joined #openstack-keystone | 18:07 | |
| *** ankita_w_ has joined #openstack-keystone | 18:09 | |
| *** ankita_wagh has quit IRC | 18:09 | |
| *** henrynash has joined #openstack-keystone | 18:11 | |
| *** ChanServ sets mode: +v henrynash | 18:11 | |
| *** jorge_munoz has quit IRC | 18:11 | |
| *** openstackgerrit has quit IRC | 18:16 | |
| *** pece has quit IRC | 18:16 | |
| *** fhubik has joined #openstack-keystone | 18:17 | |
| *** openstackgerrit has joined #openstack-keystone | 18:17 | |
| *** fhubik has quit IRC | 18:17 | |
| *** e0ne has quit IRC | 18:18 | |
| *** e0ne has joined #openstack-keystone | 18:20 | |
| stevemar | jamielennox: around? | 18:26 |
| stevemar | dstanek: i tried it around the mid-cycle and it worked | 18:27 |
| *** tonytan4ever has joined #openstack-keystone | 18:28 | |
| dstanek | stevemar: i'm just reading up on slapd now :-( | 18:28 |
| *** david-lyle has quit IRC | 18:30 | |
| *** boris-42 has quit IRC | 18:30 | |
| dstanek | stevemar: i think this is all because i'm using f22 | 18:37 |
| dstanek | first issue was the switch from hdb to mdb as the default - now there is some inappropriate matching going on | 18:38 |
| *** phalmos has joined #openstack-keystone | 18:40 | |
| *** aix has quit IRC | 18:46 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Relax newly imposed sql driver restriction for domain config https://review.openstack.org/191976 | 18:46 |
| *** henrynash has quit IRC | 18:46 | |
| *** mylu has quit IRC | 18:47 | |
| *** mylu has joined #openstack-keystone | 18:47 | |
| bknudson | keystone exceptions are a mess. | 18:51 |
| *** henrynash has joined #openstack-keystone | 18:55 | |
| *** ChanServ sets mode: +v henrynash | 18:55 | |
| *** ninag has quit IRC | 18:56 | |
| *** ninag has joined #openstack-keystone | 18:56 | |
| morgan | dstanek: dirserv has some tools that make it easier to standup than raw slapd | 18:59 |
| morgan | dstanek: but it's about the same | 18:59 |
| *** roxanaghe has quit IRC | 19:00 | |
| *** roxanaghe has joined #openstack-keystone | 19:00 | |
| *** ninag has quit IRC | 19:01 | |
| *** jorge_munoz has joined #openstack-keystone | 19:01 | |
| *** roxanaghe has quit IRC | 19:02 | |
| *** ninag has joined #openstack-keystone | 19:03 | |
| *** roxanaghe has joined #openstack-keystone | 19:05 | |
| *** phalmos has quit IRC | 19:06 | |
| *** wasmum- has quit IRC | 19:08 | |
| *** csoukup has joined #openstack-keystone | 19:08 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Issue deprecation warning if domain_id not specified in create call https://review.openstack.org/209848 | 19:09 |
| *** ninag has quit IRC | 19:11 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Remove unused code in domain config checking https://review.openstack.org/194057 | 19:11 |
| *** ninag has joined #openstack-keystone | 19:11 | |
| *** henrynash has quit IRC | 19:13 | |
| dstanek | morgan: getting closer. now i'm getting a duplicate attribute error | 19:13 |
| *** amakarov is now known as amakarov_away | 19:15 | |
| *** ninag has quit IRC | 19:17 | |
| *** tonytan4ever has quit IRC | 19:18 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/221079 | 19:20 |
| *** aix has joined #openstack-keystone | 19:25 | |
| *** phalmos has joined #openstack-keystone | 19:29 | |
| *** pumaranikar has joined #openstack-keystone | 19:34 | |
| *** e0ne has quit IRC | 19:35 | |
| *** ebalduf has quit IRC | 19:36 | |
| *** wasmum has joined #openstack-keystone | 19:37 | |
| *** henrynash has joined #openstack-keystone | 19:38 | |
| *** ChanServ sets mode: +v henrynash | 19:38 | |
| *** henrynash has quit IRC | 19:42 | |
| *** ebalduf has joined #openstack-keystone | 19:46 | |
| *** mylu has quit IRC | 19:47 | |
| *** topol has joined #openstack-keystone | 19:49 | |
| *** ChanServ sets mode: +v topol | 19:49 | |
| *** sdake has joined #openstack-keystone | 19:49 | |
| *** roxanaghe has quit IRC | 19:51 | |
| *** sdake_ has quit IRC | 19:52 | |
| *** tonytan4ever has joined #openstack-keystone | 19:53 | |
| *** mylu has joined #openstack-keystone | 19:58 | |
| *** ninag has joined #openstack-keystone | 19:59 | |
| *** dyasny has joined #openstack-keystone | 20:00 | |
| dyasny | hi all | 20:01 |
| *** ninag has quit IRC | 20:01 | |
| dyasny | how would one debug this error: ERROR keystone.common.wsgi [-] {'desc': 'Inappropriate authentication'} (trying to set up an ldap backend) | 20:02 |
| *** ninag has joined #openstack-keystone | 20:02 | |
| *** openstackstatus has quit IRC | 20:02 | |
| *** mestery has quit IRC | 20:02 | |
| *** openstackstatus has joined #openstack-keystone | 20:03 | |
| *** ChanServ sets mode: +v openstackstatus | 20:03 | |
| *** mestery has joined #openstack-keystone | 20:03 | |
| *** mylu has quit IRC | 20:05 | |
| *** mylu has joined #openstack-keystone | 20:06 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 20:06 | |
| *** ninag has quit IRC | 20:06 | |
| dstanek | dyasny: that looks like a failure to login to ldap. are your [ldap] user and password settings correct? | 20:06 |
| *** ninag has joined #openstack-keystone | 20:08 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 20:08 | |
| *** stevemar has quit IRC | 20:08 | |
| *** annasort has quit IRC | 20:08 | |
| *** stevemar has joined #openstack-keystone | 20:09 | |
| *** ChanServ sets mode: +v stevemar | 20:09 | |
| dyasny | dstanek, frankly, my ldap can be queried without a login | 20:10 |
| dyasny | dstanek, so ldapsearch works whether I provide crednetials or not | 20:11 |
| *** stevemar has quit IRC | 20:11 | |
| *** jsavak has quit IRC | 20:20 | |
| dstanek | dyasny: so what do you have in keystone's configuration? | 20:20 |
| dyasny | dstanek, pretty much this: https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/red-hat-enterprise-linux-openstack-platform-7-users-and-identity-management-guide/chapter-3-identity-management | 20:21 |
| dstanek | dyasny: is that a valid user for you? | 20:22 |
| dyasny | dstanek, I'm using another user, but the queryworks | 20:23 |
| dstanek | dyasny: i think that user/password combination must be valid | 20:23 |
| dstanek | dyasny: or i think you can leave user/password both blank | 20:25 |
| dstanek | but you for sure can't put invalid credentials in there | 20:25 |
| dyasny | dstanek, mine are valid... is there a way to see what code keystone actually runs to authenticate? | 20:26 |
| dyasny | like set logging to debug osmehow? | 20:26 |
| dstanek | dyasny: i think this is it: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/ldap/core.py#n1282 | 20:27 |
| dstanek | dyasny: if you can connect with the user/password from your config them i'm a little stumped | 20:28 |
| dstanek | dyasny: these are the relevant config values: http://git.openstack.org/cgit/openstack/keystone/tree/etc/keystone.conf.sample#n908 | 20:29 |
| *** jsavak has joined #openstack-keystone | 20:31 | |
| *** pumaranikar has quit IRC | 20:33 | |
| *** pumaranikar has joined #openstack-keystone | 20:34 | |
| *** annasort has joined #openstack-keystone | 20:34 | |
| dyasny | dstanek, thanks | 20:35 |
| dstanek | dyasny: get it working? | 20:35 |
| dyasny | dstanek, no, I think there might be something with the ldap backend that requires tweaking, going to make sure the python code works with auth first, and then apply that to keystone | 20:37 |
| dstanek | dyasny: ok. have you tried to change your config to not use a username/password? | 20:39 |
| *** roxanaghe has joined #openstack-keystone | 20:40 | |
| dyasny | dstanek, how do I do that? | 20:41 |
| dstanek | dyasny: i think you can just comment them out | 20:42 |
| dstanek | i'm guessing that it will run the queries without logging in, but i've only used the ldap backend with devstack and you need a username/password to access it | 20:43 |
| *** csoukup has quit IRC | 20:43 | |
| ayoung | dyasny, 'Inappropriate authentication' sounds like you can't query ldap...maybe you actually specified a user whenre you menat to be anonymous? | 20:45 |
| ayoung | dyasny, I could fix it for you. Let me send you a contract with my hourly rates. | 20:46 |
| ayoung | Oh, damn, you work for my employer... | 20:46 |
| morgan | dstanek, bknudson: any patches not inflight that need love before I start rolling up releases? | 20:46 |
| dstanek | morgan: not to my knowledge | 20:46 |
| morgan | ayoung: you should still contract out for that... or is that a conflict of interest? | 20:46 |
| morgan | ayoung: :P | 20:46 |
| dyasny | ayoung, whoops :) | 20:46 |
| ayoung | morgan, unfortunatly, yes. I could make a killing | 20:47 |
| * dyasny takes a screenshot and saves it into the potential blackmail folder | 20:47 | |
| morgan | ayoung: hehe | 20:47 |
| *** tonytan4ever has quit IRC | 20:47 | |
| bknudson | morgan: keystoneclient bug https://docs.python.org/2/library/uuid.html#uuid.uuid4 | 20:47 |
| morgan | dyasny: oh don't worry we all have lots of that on ayoung already. I don't think one more would make a difference | 20:47 |
| ayoung | Ooh, Chronicals of the Lensman just arrived in the mail. | 20:47 |
| morgan | bknudson: looking | 20:47 |
| dstanek | ayoung: f22 nearly killed me today | 20:47 |
| ayoung | Um, dyasny sorry, I can't help you right now.... | 20:47 |
| morgan | dstanek: solutioin: don't use f22 | 20:47 |
| ayoung | heh | 20:47 |
| dyasny | morgan, but but but I want to make a killing too! | 20:47 |
| * ayoung sadly puts book aside | 20:47 | |
| morgan | bknudson: uhm... what is that bug? | 20:48 |
| ayoung | dyasny, OK, so what do you have for the following values.... | 20:48 |
| dstanek | morgan: Canonical makes me sad so I have moved on | 20:48 |
| bknudson | morgan: oops, pasted wrong link | 20:48 |
| morgan | dstanek: I hear suse is fun | 20:48 |
| morgan | dstanek: :P | 20:48 |
| dyasny | ayoung, before we drop into values, I think I know the problem - our ldap is open for queries, but it is not an authentication source, kerberos is elsewhere | 20:48 |
| bknudson | morgan: https://review.openstack.org/#/c/155758/ | 20:48 |
| morgan | bknudson: hehe aha that looks more interesting | 20:49 |
| ayoung | url = ldap://localhost | 20:49 |
| ayoung | dyasny, ah | 20:49 |
| ayoung | dyasny, you tring to use corporate LDAP? | 20:49 |
| morgan | bknudson: *facepalm* yes | 20:49 |
| morgan | we need that | 20:49 |
| dyasny | ayoung, indeed | 20:49 |
| morgan | bknudson: +2/+A | 20:50 |
| * dyasny just realised this must be the culprit | 20:50 | |
| ayoung | dyasny, ok...that should actually work. But...probably don;t want it to | 20:50 |
| *** jorge_munoz has quit IRC | 20:50 | |
| *** mylu has quit IRC | 20:50 | |
| * morgan wonders if leaving now it owuld be possible to get 120km bike ride in before dark | 20:50 | |
| ayoung | So, yeah, you can authenticate against corp LDAP, but then the user does a simple bind, which means their password goes by way of Keystone. And, Keystone really shouldn't see users passwords. | 20:50 |
| bknudson | I don't see anything in keystonemiddleware | 20:50 |
| ayoung | But it will work | 20:50 |
| morgan | bknudson: yeah ksm looks clear | 20:51 |
| ayoung | a better approach would be to use SAML and Federation | 20:51 |
| *** mylu has joined #openstack-keystone | 20:51 | |
| morgan | bknudson: and i'm looking over Keystoneauth for any minor things to land [very minor or legit bug fixes] | 20:51 |
| morgan | bknudson: not worried about pycadf atm | 20:51 |
| dyasny | ayoung, can you throw some links my way please? | 20:51 |
| *** mylu has quit IRC | 20:52 | |
| bknudson | https://review.openstack.org/#/c/217501/ is gating now for pycadf | 20:52 |
| *** mylu has joined #openstack-keystone | 20:52 | |
| morgan | bknudson: https://review.openstack.org/#/c/222029/ looks like we need it [silly,but was missed] | 20:52 |
| morgan | bknudson: and this one can probably wait: https://review.openstack.org/#/c/223429/ | 20:53 |
| bknudson | if nobody using keystoneauth is complaining about missing https://review.openstack.org/#/c/222029/ I'd say skip it. | 20:53 |
| morgan | bknudson: ok so just waiting on gating for pycadf, ksm, and ksc in flight and the ksa one would be nice to get in but not needed | 20:53 |
| morgan | bknudson: thnx. | 20:53 |
| bknudson | do we need a stable/ branch for keystoneauth? | 20:54 |
| morgan | bknudson: we will get one | 20:54 |
| morgan | bknudson: but no we don't | 20:54 |
| morgan | bknudson: in fact if we ever need one we did it wrong. | 20:54 |
| morgan | if a stable branch is needed we should be on keystoneauth2 | 20:54 |
| bknudson | ah, right. | 20:55 |
| bknudson | the way we do requirements seems off, but I guess we have to deal with the resolver issue | 20:56 |
| openstackgerrit | Merged openstack/pycadf: Updated from global requirements https://review.openstack.org/217501 | 20:56 |
| bknudson | seems like we should be able to say keystone reqs x>=1.0 and nova reqs x>=1.5 ... why not? | 20:56 |
| *** spandhe has quit IRC | 21:00 | |
| *** mylu has quit IRC | 21:02 | |
| *** spandhe has joined #openstack-keystone | 21:02 | |
| openstackgerrit | Merged openstack/keystoneauth: Convert project to os-testr https://review.openstack.org/220131 | 21:03 |
| morgan | bknudson: i dunno. | 21:03 |
| morgan | bknudson: i mean, lifeless might have more info on the resolver issue but eh. | 21:04 |
| *** phalmos has quit IRC | 21:04 | |
| bknudson | morgan: if we deprecate in L we can't remove until N right? | 21:04 |
| morgan | bknudson: depends on what | 21:04 |
| morgan | bknudson: but typically yes | 21:04 |
| bknudson | morgan: https://review.openstack.org/#/c/209848/5/keystone/common/controller.py | 21:05 |
| *** mylu has joined #openstack-keystone | 21:05 | |
| morgan | yeah that needs to be a N cycle removal | 21:05 |
| bknudson | this might go in the "small feature" bucket son only reqs 3 months | 21:05 |
| bknudson | so only | 21:05 |
| morgan | bknudson: i tossed a -1 on it with a comment of 2-cycle removal | 21:06 |
| morgan | but feel free to override/propose a quick change on top of it | 21:06 |
| bknudson | I'll just update it since I agree. | 21:07 |
| bknudson | what are we going to call the N release? | 21:07 |
| *** pumaranikar has quit IRC | 21:07 | |
| morgan | bknudson: "N release" | 21:08 |
| morgan | for this case | 21:08 |
| morgan | :P | 21:08 |
| *** jorge_munoz has joined #openstack-keystone | 21:09 | |
| *** tonytan4ever has joined #openstack-keystone | 21:09 | |
| *** raildo is now known as raildo-afk | 21:10 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Issue deprecation warning if domain_id not specified in create call https://review.openstack.org/209848 | 21:11 |
| lifeless | morgan: resolver issue ? | 21:16 |
| morgan | lifeless: ask bknudson what he meant | 21:16 |
| morgan | lifeless: not sure | 21:17 |
| lifeless | bknudson: ^? | 21:17 |
| bknudson | lifeless: seems like we should be able to say keystone reqs x>=1.0 and nova reqs x>=1.5 ... why not? | 21:17 |
| bknudson | requiring the same min for all projects seems unnecessary. | 21:17 |
| lifeless | bknudson: you mean have differing lower bounds per project within openstack ? | 21:17 |
| bknudson | yes | 21:17 |
| lifeless | bknudson: so, due to pip limitations (issue-988) thats infeasible today | 21:18 |
| lifeless | consider A -> x>1, B | 21:18 |
| lifeless | and B -> x>2 | 21:19 |
| lifeless | pip install A will install x>1, not x>2. | 21:19 |
| lifeless | if x 1.5 is already installed, the result will be that it stays as-is, not upgraded, and B won't work. | 21:19 |
| *** ankita_w_ has quit IRC | 21:20 | |
| lifeless | there are other angles we could talk about like consistency, predictability, the polynomial growth of tests required to be sure that a lower bound really is valid | 21:20 |
| lifeless | the fact we don't even test *any* lower bounds today | 21:20 |
| bknudson | deployers sometimes test lower bounds. | 21:20 |
| lifeless | but issue-988 is a hard requirement to be able to have any confidence in differing lower bounds across the project | 21:20 |
| lifeless | bknudson: how? There's no machinery to select lower bounds within pip (or apt/dnf for that matter) | 21:21 |
| bknudson | lifeless: they deploy without updating the packages and find problems | 21:21 |
| lifeless | bknudson: thats not testing :) | 21:21 |
| lifeless | bknudson: by testing I mean a reproducible automated thing we can do to find problems before it strikes in the field | 21:22 |
| *** mylu has quit IRC | 21:22 | |
| *** mylu has joined #openstack-keystone | 21:23 | |
| *** ankita_wagh has joined #openstack-keystone | 21:23 | |
| *** hrou has quit IRC | 21:24 | |
| *** boris-42 has joined #openstack-keystone | 21:26 | |
| *** diazjf has left #openstack-keystone | 21:31 | |
| *** mylu has quit IRC | 21:34 | |
| *** topol has quit IRC | 21:39 | |
| *** topol has joined #openstack-keystone | 21:40 | |
| *** ChanServ sets mode: +v topol | 21:40 | |
| *** tonytan4ever has quit IRC | 21:40 | |
| *** ebalduf has quit IRC | 21:40 | |
| *** jsavak has quit IRC | 21:44 | |
| *** topol has quit IRC | 21:44 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Avoid message concatenation in error path https://review.openstack.org/155758 | 21:46 |
| *** spandhe has quit IRC | 21:49 | |
| *** jsavak has joined #openstack-keystone | 21:51 | |
| *** david-lyle has joined #openstack-keystone | 21:56 | |
| *** spandhe has joined #openstack-keystone | 22:00 | |
| *** jecarey has quit IRC | 22:02 | |
| *** ninag has quit IRC | 22:04 | |
| *** ninag has joined #openstack-keystone | 22:04 | |
| *** gordc has quit IRC | 22:06 | |
| *** jorge_munoz has quit IRC | 22:08 | |
| *** ninag has quit IRC | 22:08 | |
| *** stevemar has joined #openstack-keystone | 22:10 | |
| *** ChanServ sets mode: +v stevemar | 22:10 | |
| *** jorge_munoz has joined #openstack-keystone | 22:13 | |
| *** stevemar has quit IRC | 22:13 | |
| *** urulama has quit IRC | 22:15 | |
| *** jsavak has quit IRC | 22:15 | |
| *** urulama has joined #openstack-keystone | 22:15 | |
| *** thiagop has quit IRC | 22:16 | |
| *** jorge_munoz has quit IRC | 22:23 | |
| *** slberger has left #openstack-keystone | 22:25 | |
| *** david-lyle has quit IRC | 22:29 | |
| *** dsirrine has quit IRC | 22:34 | |
| *** ebalduf has joined #openstack-keystone | 22:38 | |
| *** ebalduf has quit IRC | 22:44 | |
| openstackgerrit | Lin Hua Cheng proposed openstack/keystone: Respect federated user name in tokens. https://review.openstack.org/211093 | 22:47 |
| *** dims_ has quit IRC | 22:48 | |
| *** henrynash has joined #openstack-keystone | 22:49 | |
| *** ChanServ sets mode: +v henrynash | 22:49 | |
| *** markvoelker has quit IRC | 23:05 | |
| *** hrou has joined #openstack-keystone | 23:24 | |
| *** dims_ has joined #openstack-keystone | 23:32 | |
| *** gyee has quit IRC | 23:35 | |
| openstackgerrit | greghaynes proposed openstack/keystoneauth: Use option dest rather than name in missing error https://review.openstack.org/224348 | 23:36 |
| *** chlong has quit IRC | 23:41 | |
| *** ankita_wagh has quit IRC | 23:46 | |
| *** erhudy has quit IRC | 23:49 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
