| *** rderose has quit IRC | 00:00 | |
| *** chlong has quit IRC | 00:05 | |
| *** spzala has joined #openstack-keystone | 00:06 | |
| ayoung | ldapsearch -x -H ldap://ldap.corp.redhat.com -L -b 'dc=redhat,dc=com' 'sn=Fainberg' 'dn' | 00:08 |
|---|---|---|
| ayoung | dn: uid=mfainber,ou=users,dc=redhat,dc=com | 00:08 |
| *** aginwala has quit IRC | 00:09 | |
| ayoung | rodrigods, does that LDAP query work for you? | 00:10 |
| rodrigods | ayoung, lol was just trying myself | 00:10 |
| ayoung | ldapsearch -x -H ldap://ldap.corp.redhat.com -L -b 'dc=redhat,dc=com' 'sn=Sousa' 'dn' | 00:10 |
| ayoung | dn: uid=rsousa,ou=users,dc=redhat,dc=com | 00:10 |
| *** spzala has quit IRC | 00:11 | |
| ayoung | Nope that is not you | 00:11 |
| ayoung | dn: uid=rduartes,ou=users,dc=redhat,dc=com | 00:12 |
| ayoung | I'm guesing | 00:12 |
| *** aginwala has joined #openstack-keystone | 00:12 | |
| rodrigods | ayoung, ldapsearch -x -H ldap://ldap.corp.redhat.com -L -b 'dc=redhat,dc=com' 'sn=Duarte Sousa' 'dn' | 00:12 |
| ayoung | I cheated...I did givenName=Rodrigo | 00:13 |
| rodrigods | lol | 00:13 |
| ayoung | rodrigods, and now I need to figure out our internal build system again to do a backport RPM....this time I'm putting it on my blog | 00:14 |
| rodrigods | ayoung, and i'm trying to figure out how to use one of the testing tools here | 00:14 |
| *** edtubill has joined #openstack-keystone | 00:16 | |
| *** edtubill has quit IRC | 00:18 | |
| *** edtubill has joined #openstack-keystone | 00:19 | |
| *** timcline has joined #openstack-keystone | 00:22 | |
| *** timcline has quit IRC | 00:27 | |
| *** itlinux has quit IRC | 00:36 | |
| *** aginwala has quit IRC | 00:36 | |
| *** aginwala has joined #openstack-keystone | 00:40 | |
| *** pgbridge has quit IRC | 00:45 | |
| *** edtubill has quit IRC | 00:48 | |
| *** dgonzalez has quit IRC | 00:48 | |
| *** gangaec has quit IRC | 00:49 | |
| *** frickler has quit IRC | 00:49 | |
| *** frickler has joined #openstack-keystone | 00:50 | |
| *** dgonzalez has joined #openstack-keystone | 00:50 | |
| *** TxGVNN has joined #openstack-keystone | 00:54 | |
| *** furface has quit IRC | 00:59 | |
| *** edtubill has joined #openstack-keystone | 01:00 | |
| *** gyee has quit IRC | 01:03 | |
| *** stingaci has joined #openstack-keystone | 01:05 | |
| *** GB21 has quit IRC | 01:06 | |
| *** spzala has joined #openstack-keystone | 01:07 | |
| *** spzala has quit IRC | 01:12 | |
| *** edtubill has quit IRC | 01:16 | |
| *** haplo37 has joined #openstack-keystone | 01:18 | |
| *** timcline has joined #openstack-keystone | 01:23 | |
| *** dan_nguyen has quit IRC | 01:26 | |
| *** timcline has quit IRC | 01:27 | |
| *** chlong has joined #openstack-keystone | 01:31 | |
| *** spzala has joined #openstack-keystone | 01:33 | |
| *** EinstCrazy has joined #openstack-keystone | 01:34 | |
| *** stingaci has quit IRC | 01:37 | |
| *** EinstCra_ has joined #openstack-keystone | 02:06 | |
| *** woodster_ has quit IRC | 02:08 | |
| *** EinstCrazy has quit IRC | 02:09 | |
| *** tonytan4ever has quit IRC | 02:09 | |
| *** aginwala has quit IRC | 02:13 | |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties https://review.openstack.org/296246 | 02:13 |
| *** edtubill has joined #openstack-keystone | 02:30 | |
| *** fangxu has quit IRC | 02:38 | |
| *** jasonsb has quit IRC | 02:48 | |
| *** jasonsb has joined #openstack-keystone | 02:48 | |
| *** furface has joined #openstack-keystone | 02:51 | |
| *** jorge_munoz has quit IRC | 02:56 | |
| *** edtubill has quit IRC | 02:56 | |
| *** stingaci has joined #openstack-keystone | 02:59 | |
| *** jorge_munoz has joined #openstack-keystone | 02:59 | |
| *** daemontool_ has quit IRC | 03:04 | |
| *** stingaci has quit IRC | 03:06 | |
| *** richm has quit IRC | 03:07 | |
| *** jasonsb has quit IRC | 03:16 | |
| *** itlinux has joined #openstack-keystone | 03:18 | |
| *** lhcheng has joined #openstack-keystone | 03:20 | |
| *** ChanServ sets mode: +v lhcheng | 03:20 | |
| *** markvoelker has quit IRC | 03:20 | |
| *** julim has quit IRC | 03:33 | |
| *** amit213 has quit IRC | 03:33 | |
| *** julim has joined #openstack-keystone | 03:33 | |
| *** amit213 has joined #openstack-keystone | 03:33 | |
| stevemar | lbragstad: we're on the hot seat :O https://bugs.launchpad.net/keystone/+bug/1578866 | 03:38 |
| openstack | Launchpad bug 1578866 in OpenStack Identity (keystone) "test_user_update_own_password failing intermittently" [High,Confirmed] | 03:38 |
| *** dan_nguyen has joined #openstack-keystone | 03:38 | |
| ayoung | stevemar, 1 second granularity in tokens is a PITA | 03:44 |
| ayoung | stevemar, 2 bytes. That is what it would cost us to get subsecond granularity. | 03:45 |
| *** jasonsb has joined #openstack-keystone | 03:52 | |
| *** spzala has quit IRC | 03:53 | |
| *** spzala has joined #openstack-keystone | 03:53 | |
| *** spzala has quit IRC | 03:58 | |
| *** rbridgeman_ has joined #openstack-keystone | 04:01 | |
| *** links has joined #openstack-keystone | 04:02 | |
| *** dan_nguyen has quit IRC | 04:13 | |
| *** markvoelker has joined #openstack-keystone | 04:21 | |
| *** dave-mcc_ has quit IRC | 04:26 | |
| *** markvoelker has quit IRC | 04:26 | |
| *** aginwala has joined #openstack-keystone | 04:28 | |
| *** rbridgeman_ has quit IRC | 04:36 | |
| *** spzala has joined #openstack-keystone | 04:54 | |
| *** GB21 has joined #openstack-keystone | 04:56 | |
| *** spzala has quit IRC | 04:59 | |
| *** GB21 has quit IRC | 05:02 | |
| *** spzala has joined #openstack-keystone | 05:02 | |
| *** GB21 has joined #openstack-keystone | 05:02 | |
| *** lhcheng has quit IRC | 05:07 | |
| *** spzala has quit IRC | 05:07 | |
| *** markvoelker has joined #openstack-keystone | 05:22 | |
| *** markvoelker has quit IRC | 05:26 | |
| *** GB21 has quit IRC | 05:33 | |
| *** lhcheng has joined #openstack-keystone | 05:38 | |
| *** ChanServ sets mode: +v lhcheng | 05:38 | |
| *** yolanda has joined #openstack-keystone | 05:55 | |
| *** furface has quit IRC | 06:02 | |
| *** spzala has joined #openstack-keystone | 06:03 | |
| *** jasonsb has quit IRC | 06:08 | |
| *** GB21 has joined #openstack-keystone | 06:08 | |
| *** jasonsb has joined #openstack-keystone | 06:08 | |
| *** spzala has quit IRC | 06:08 | |
| *** TxGVNN has quit IRC | 06:09 | |
| *** jasonsb has quit IRC | 06:13 | |
| *** jasonsb has joined #openstack-keystone | 06:16 | |
| *** lhcheng has quit IRC | 06:22 | |
| *** markvoelker has joined #openstack-keystone | 06:23 | |
| *** markvoelker has quit IRC | 06:27 | |
| *** browne has quit IRC | 06:29 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:31 | |
| *** haplo37 has quit IRC | 06:38 | |
| *** yolanda has quit IRC | 06:46 | |
| *** yolanda has joined #openstack-keystone | 06:47 | |
| *** fangxu has joined #openstack-keystone | 06:51 | |
| *** kfox1111 has quit IRC | 06:53 | |
| *** yolanda has quit IRC | 07:02 | |
| *** spzala has joined #openstack-keystone | 07:04 | |
| *** permalac has joined #openstack-keystone | 07:06 | |
| *** yolanda has joined #openstack-keystone | 07:06 | |
| *** spzala has quit IRC | 07:10 | |
| *** aginwala has quit IRC | 07:13 | |
| *** aginwala has joined #openstack-keystone | 07:14 | |
| *** fawadkhaliq has quit IRC | 07:14 | |
| *** itlinux has quit IRC | 07:14 | |
| *** yolanda has quit IRC | 07:21 | |
| *** ankur has joined #openstack-keystone | 07:22 | |
| *** markvoelker has joined #openstack-keystone | 07:23 | |
| *** markvoelker has quit IRC | 07:28 | |
| *** yolanda has joined #openstack-keystone | 07:32 | |
| *** fawadkhaliq has joined #openstack-keystone | 07:33 | |
| *** TxGVNN has joined #openstack-keystone | 07:33 | |
| *** openstackstatus has quit IRC | 07:38 | |
| *** openstackstatus has joined #openstack-keystone | 07:39 | |
| *** ChanServ sets mode: +v openstackstatus | 07:39 | |
| *** henrynash has joined #openstack-keystone | 07:43 | |
| *** ChanServ sets mode: +v henrynash | 07:43 | |
| *** GB21 has quit IRC | 07:44 | |
| *** daemontool has joined #openstack-keystone | 07:53 | |
| *** chlong has quit IRC | 07:54 | |
| *** henrynash has quit IRC | 07:57 | |
| *** nkinder has quit IRC | 07:59 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** TxGVNN has quit IRC | 08:02 | |
| *** TxGVNN has joined #openstack-keystone | 08:02 | |
| *** zzzeek has joined #openstack-keystone | 08:02 | |
| *** mkrcmari__ has joined #openstack-keystone | 08:05 | |
| *** spzala has joined #openstack-keystone | 08:07 | |
| *** andrewbogott_ has joined #openstack-keystone | 08:08 | |
| *** mvk_ has quit IRC | 08:08 | |
| *** dmk0202 has joined #openstack-keystone | 08:08 | |
| *** andrewbogott has quit IRC | 08:09 | |
| *** andrewbogott_ is now known as andrewbogott | 08:09 | |
| *** spzala has quit IRC | 08:11 | |
| *** TxGVNN has quit IRC | 08:14 | |
| *** mhickey has joined #openstack-keystone | 08:23 | |
| *** pnavarro has joined #openstack-keystone | 08:27 | |
| *** aginwala has quit IRC | 08:28 | |
| *** jaosorior has joined #openstack-keystone | 08:32 | |
| *** jistr has joined #openstack-keystone | 08:32 | |
| *** nkinder has joined #openstack-keystone | 08:33 | |
| *** pcaruana has joined #openstack-keystone | 08:36 | |
| *** GB21 has joined #openstack-keystone | 08:37 | |
| *** mkrcmari__ has quit IRC | 08:43 | |
| *** henrynash has joined #openstack-keystone | 08:49 | |
| *** ChanServ sets mode: +v henrynash | 08:49 | |
| *** jorge_munoz has quit IRC | 08:49 | |
| *** jorge_munoz has joined #openstack-keystone | 08:52 | |
| *** henrynash has quit IRC | 08:54 | |
| *** henrynash_ has joined #openstack-keystone | 08:54 | |
| *** ChanServ sets mode: +v henrynash_ | 08:54 | |
| *** fawadkhaliq has quit IRC | 08:54 | |
| *** fhubik has joined #openstack-keystone | 08:55 | |
| *** tesseract has joined #openstack-keystone | 08:56 | |
| *** tesseract is now known as Guest42930 | 08:56 | |
| *** EinstCra_ has quit IRC | 08:59 | |
| *** EinstCrazy has joined #openstack-keystone | 09:00 | |
| *** TxGVNN has joined #openstack-keystone | 09:00 | |
| *** alex_xu has quit IRC | 09:03 | |
| *** alex_xu has joined #openstack-keystone | 09:05 | |
| *** spzala has joined #openstack-keystone | 09:08 | |
| *** spzala has quit IRC | 09:13 | |
| *** henrynash_ has quit IRC | 09:14 | |
| *** mkrcmari__ has joined #openstack-keystone | 09:28 | |
| *** mhickey has quit IRC | 09:47 | |
| *** jaosorior is now known as jaosorior_lunch | 09:59 | |
| *** mhickey has joined #openstack-keystone | 10:02 | |
| *** ekarlso has quit IRC | 10:08 | |
| *** spzala has joined #openstack-keystone | 10:09 | |
| *** spzala has quit IRC | 10:14 | |
| *** fangxu has quit IRC | 10:14 | |
| *** fangxu has joined #openstack-keystone | 10:15 | |
| *** haplo37 has joined #openstack-keystone | 10:16 | |
| *** dims has quit IRC | 10:20 | |
| *** GB21 has quit IRC | 10:21 | |
| *** pnavarro has quit IRC | 10:24 | |
| *** markvoelker has joined #openstack-keystone | 10:26 | |
| openstackgerrit | Divya K Konoor proposed openstack/keystone: Honor ldap_filter on filtered user list https://review.openstack.org/312126 | 10:28 |
| *** markvoelker has quit IRC | 10:30 | |
| samueldmq | morning | 10:36 |
| *** fhubik has quit IRC | 10:43 | |
| *** EinstCrazy has quit IRC | 10:50 | |
| andreaf | morning | 10:54 |
| andreaf | I'm working on extending tempest to support domain scoped and unscoped tokens (it only supports project scoped ones atm) - and I would like to have some reviews / feedback from keystone folks as well: https://review.openstack.org/#/q/status:open+project:openstack/tempest+branch:master+topic:domain_scoped_tokens | 10:56 |
| *** dmk0202 has quit IRC | 10:57 | |
| *** dmk0202 has joined #openstack-keystone | 10:57 | |
| *** dims has joined #openstack-keystone | 11:02 | |
| openstackgerrit | Gyorgy Szombathelyi proposed openstack/keystone: Enhance federation group mapping validation https://review.openstack.org/313502 | 11:06 |
| *** mhickey has quit IRC | 11:07 | |
| openstackgerrit | Gyorgy Szombathelyi proposed openstack/keystone: Enhance federation group mapping validation https://review.openstack.org/313504 | 11:08 |
| *** spzala has joined #openstack-keystone | 11:10 | |
| *** jaosorior_lunch has quit IRC | 11:11 | |
| *** jaosorior_lunch has joined #openstack-keystone | 11:12 | |
| *** jaosorior_lunch is now known as jaosorior | 11:12 | |
| *** spzala has quit IRC | 11:15 | |
| *** pnavarro has joined #openstack-keystone | 11:16 | |
| *** mhickey has joined #openstack-keystone | 11:20 | |
| *** lhcheng has joined #openstack-keystone | 11:24 | |
| *** ChanServ sets mode: +v lhcheng | 11:24 | |
| *** haplo37 has quit IRC | 11:25 | |
| *** haplo37 has joined #openstack-keystone | 11:26 | |
| *** markvoelker has joined #openstack-keystone | 11:27 | |
| *** GB21 has joined #openstack-keystone | 11:27 | |
| *** markvoelker has quit IRC | 11:31 | |
| *** GB21 has quit IRC | 11:34 | |
| *** GB21 has joined #openstack-keystone | 11:39 | |
| *** alex_xu has quit IRC | 11:42 | |
| *** yolanda has quit IRC | 11:43 | |
| *** GB21 has quit IRC | 11:44 | |
| *** alex_xu has joined #openstack-keystone | 11:47 | |
| *** GB21 has joined #openstack-keystone | 11:48 | |
| *** yolanda has joined #openstack-keystone | 11:48 | |
| *** spzala has joined #openstack-keystone | 12:11 | |
| *** raildo-afk is now known as raildo | 12:13 | |
| *** markvoelker has joined #openstack-keystone | 12:14 | |
| *** rderose has joined #openstack-keystone | 12:16 | |
| *** spzala has quit IRC | 12:16 | |
| *** ekarlso has joined #openstack-keystone | 12:19 | |
| *** GB21 has quit IRC | 12:20 | |
| *** gordc has joined #openstack-keystone | 12:21 | |
| *** alex_xu has quit IRC | 12:22 | |
| *** alex_xu has joined #openstack-keystone | 12:25 | |
| *** lhcheng has quit IRC | 12:26 | |
| *** rodrigods has quit IRC | 12:29 | |
| *** rodrigods has joined #openstack-keystone | 12:29 | |
| *** david_cu has joined #openstack-keystone | 12:32 | |
| *** ninag has joined #openstack-keystone | 12:39 | |
| rderose | edtubill: regarding PCI, I agree with Steve's table changes; probably need a created_by column as well | 12:41 |
| rderose | edtubill: as an approach, we could probably come up with the db design to satisfy all of the requirements and then divide the work up by PCI number | 12:44 |
| rderose | edtubill: let me know what you think | 12:44 |
| *** ayoung has quit IRC | 12:48 | |
| *** alejandrito has joined #openstack-keystone | 12:52 | |
| alejandrito | Hi! one quick question, did anyone has experience making this work ? http://docs.openstack.org/developer/keystone/auth-totp.html | 12:53 |
| *** mhickey has quit IRC | 12:57 | |
| *** sdake has joined #openstack-keystone | 13:00 | |
| *** EinstCrazy has joined #openstack-keystone | 13:02 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for endpoint policy drivers https://review.openstack.org/212006 | 13:02 |
| *** yolanda has quit IRC | 13:02 | |
| *** haplo37 has quit IRC | 13:03 | |
| *** Srushti has quit IRC | 13:06 | |
| *** yolanda has joined #openstack-keystone | 13:07 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Create unit tests for the policy drivers https://review.openstack.org/212957 | 13:10 |
| *** pauloewerton has joined #openstack-keystone | 13:10 | |
| *** jsavak has joined #openstack-keystone | 13:12 | |
| *** spzala has joined #openstack-keystone | 13:12 | |
| samueldmq | rderose: you're quick | 13:15 |
| samueldmq | :) | 13:15 |
| rderose | samuelmq: started early this morning, feeling much better today | 13:17 |
| rderose | :) | 13:17 |
| *** spzala has quit IRC | 13:17 | |
| *** lhcheng has joined #openstack-keystone | 13:19 | |
| *** ChanServ sets mode: +v lhcheng | 13:19 | |
| samueldmq | rderose: nice | 13:19 |
| *** pcaruana has quit IRC | 13:25 | |
| *** lhcheng has quit IRC | 13:25 | |
| *** lhcheng has joined #openstack-keystone | 13:25 | |
| *** ChanServ sets mode: +v lhcheng | 13:25 | |
| *** ankur has quit IRC | 13:27 | |
| *** tonytan4ever has joined #openstack-keystone | 13:28 | |
| dstanek | alejandrito: i had it working to test | 13:32 |
| dstanek | with google authenticator | 13:32 |
| *** BigWillie has joined #openstack-keystone | 13:34 | |
| *** lhcheng has quit IRC | 13:45 | |
| dstanek | rderose: is there a PCI patch already? | 13:45 |
| *** timcline has joined #openstack-keystone | 13:46 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:48 | |
| rderose | dstanek: no, only a spec I believe | 13:49 |
| alejandrito | guys, do you think would be easy to backport the TOTP auth plugin to liberty ? | 13:50 |
| alejandrito | dstanek, ^ | 13:50 |
| samueldmq | alejandrito: upstream? we don't backport features | 13:51 |
| *** csoukup has joined #openstack-keystone | 13:51 | |
| alejandrito | samueldmq, ok, so, if i want to implement TOTP on a productive liberty cloud, what would be the best way to do it ? | 13:52 |
| dstanek | alejandrito: you can probably just take the code and wrap it up in it's own Python package | 13:53 |
| *** lhcheng has joined #openstack-keystone | 13:54 | |
| *** ChanServ sets mode: +v lhcheng | 13:54 | |
| rderose | dstanek: but in the etherpad link, steve has some notes about table changes (re: PCI stuff) | 13:55 |
| dstanek | rderose: do you have the link handy? | 13:55 |
| *** edmondsw has joined #openstack-keystone | 13:55 | |
| *** timcline has quit IRC | 13:56 | |
| *** timcline has joined #openstack-keystone | 13:56 | |
| rderose | dstanek: https://etherpad.openstack.org/p/keystone-newton-pci-dss | 13:58 |
| dstanek | rderose: thanks | 13:58 |
| *** lhcheng has quit IRC | 13:58 | |
| rderose | dstanek: see under "work to be done" | 13:58 |
| *** lhcheng has joined #openstack-keystone | 13:58 | |
| *** ChanServ sets mode: +v lhcheng | 13:58 | |
| *** sdake_ has joined #openstack-keystone | 14:00 | |
| *** ametts has joined #openstack-keystone | 14:00 | |
| alejandrito | dstanek, samueldmq cant i just take totp.py and put it into liberty's plugins dir ? | 14:01 |
| dstanek | alejandrito: probably, but that's not very repeatable. if that's something you can manage then you can see if it works | 14:02 |
| *** pauloewerton has quit IRC | 14:03 | |
| *** sdake has quit IRC | 14:04 | |
| *** pauloewerton has joined #openstack-keystone | 14:05 | |
| alejandrito | dstanek, thx ^_^ | 14:05 |
| *** alejandrito has quit IRC | 14:05 | |
| *** catintheroof has joined #openstack-keystone | 14:05 | |
| *** ayoung has joined #openstack-keystone | 14:07 | |
| *** ChanServ sets mode: +v ayoung | 14:07 | |
| *** ramishra has quit IRC | 14:07 | |
| *** ramishra has joined #openstack-keystone | 14:07 | |
| *** spzala has joined #openstack-keystone | 14:14 | |
| *** catintheroof has quit IRC | 14:15 | |
| -openstackstatus- NOTICE: Zuul is currently recovering from a large number of changes, it will take a few hours until your job is processed. Please have patience and enjoy a great weekend! | 14:15 | |
| bknudson | I blame monasca-analytics. | 14:16 |
| *** links has quit IRC | 14:17 | |
| rodrigods | lol | 14:17 |
| *** spzala has quit IRC | 14:18 | |
| *** r-daneel has joined #openstack-keystone | 14:26 | |
| *** catintheroof has joined #openstack-keystone | 14:27 | |
| *** spzala has joined #openstack-keystone | 14:28 | |
| *** EinstCrazy has quit IRC | 14:30 | |
| andrewbogott | I am running aground on keystoneclient.exceptions.BadRequest: Expecting to find domain in project | 14:30 |
| andrewbogott | I remember the easy fix (explicitly set domain=default) but it isn't helping | 14:30 |
| *** slberger has joined #openstack-keystone | 14:31 | |
| andrewbogott | Can anyone help me debug? This is with kilo | 14:31 |
| *** dave-mccowan has joined #openstack-keystone | 14:35 | |
| ayoung | andrewbogott, I can. | 14:35 |
| ayoung | andrewbogott, V2 vs v3? | 14:35 |
| andrewbogott | ayoung: 3, in theory, although maybe I have that messed up somehow | 14:36 |
| andrewbogott | here's a code snippet: | 14:36 |
| andrewbogott | https://phabricator.wikimedia.org/P3010 | 14:36 |
| andrewbogott | I just now added the user_domain_name='default' bit, to no avail | 14:36 |
| ayoung | andrewbogott, OK, then, yes, you need an explict USER_DOMAIN_ID (or NAME) and PROJECT_DOMAIN_ID (or name) in the environment | 14:36 |
| ayoung | andrewbogott, Tenant? Really | 14:37 |
| ayoung | and I thought we were friends. | 14:37 |
| andrewbogott | My environment says... | 14:37 |
| andrewbogott | https://www.irccloud.com/pastebin/dwNZi9IT/ | 14:37 |
| bknudson | the default domain name is Default | 14:37 |
| bknudson | not default | 14:37 |
| bknudson | the default domain id is default | 14:37 |
| ayoung | andrewbogott, yeah, but not sure that the env is used when calling the Python API the way that you do | 14:38 |
| ayoung | ​ tenant_name=project) is not sufficient. | 14:38 |
| andrewbogott | so now I have user_domain_name='Default' in the above code... | 14:39 |
| ayoung | but also what bknudson said is going to burn you after. I think the missing param in the code is what is giving you that error. It is the client checking it, and the error for default vs Default would ceom back from the server | 14:40 |
| ayoung | andrewbogott, can you load that in from a config file? Much cleaner to switch that way. I have an example... | 14:40 |
| *** edtubill has joined #openstack-keystone | 14:41 | |
| andrewbogott | ok! What I needed was... | 14:41 |
| andrewbogott | user_domain_id='default', | 14:41 |
| andrewbogott | project_domain_id='default', | 14:41 |
| andrewbogott | that gets me through | 14:41 |
| andrewbogott | Here's where you tell me that in newer versions of generic.Password those args have a default value of 'default' by default... | 14:42 |
| bknudson | your app should prefer to use the domain names. going forward we'll hope to not be setting the default domain ID (it'll be a random UUID) | 14:43 |
| *** clenimar has quit IRC | 14:43 | |
| ayoung | andrewbogott, https://github.com/admiyo/ossipee/blob/master/ossipee-inventory.py#L9 | 14:43 |
| andrewbogott | That's "in future versions you'll be rewriting all your scripts again" which is not the same thing :) | 14:43 |
| andrewbogott | But, ok! I will keep an eye out. | 14:44 |
| ayoung | andrewbogott, in the future you will be using Ansible, but that is not the same thing | 14:44 |
| ayoung | andrewbogott, but what he is saying is change your current script to use the name of the domain, which is Default not default | 14:44 |
| ayoung | same for project | 14:44 |
| andrewbogott | bknudson: so, I should set _name='Default' rather than _id='default' yes? | 14:44 |
| andrewbogott | I will try | 14:44 |
| ayoung | the IDs are for internal use, and the names are for humans | 14:44 |
| bknudson | andrewbogott: yes. | 14:44 |
| *** dan_nguyen has joined #openstack-keystone | 14:45 | |
| andrewbogott | ok, that seems to work too | 14:45 |
| ayoung | think of the IDs like pointers in C. You have references to them, but you shouldn't do pointer math | 14:45 |
| andrewbogott | yeah, makes sense | 14:45 |
| andrewbogott | ok, thanks all! | 14:45 |
| *** clenimar has joined #openstack-keystone | 14:45 | |
| ayoung | andrewbogott, another happy customer. | 14:46 |
| -openstackstatus- NOTICE: Zuul has been restarted. As a results, we only preserved patches in the gate queue. Be sure to recheck your patches in gerrit if needed. | 14:46 | |
| *** itlinux has joined #openstack-keystone | 14:46 | |
| ayoung | bknudson, I know your availability is getting limited. Would really like your eyes on https://review.openstack.org/#/c/311652/ as I think that is going to make a lot of other things easier to debug over time, to include the Fernet timeout isues | 14:48 |
| patchbot | ayoung: patch 311652 - keystone - Replace revoke tree with linear search | 14:48 |
| bknudson | ayoung: I'll add it to my list. | 14:48 |
| ayoung | bknudson, thanks. The check code has lived in the test_revoke file alongside the tree, as a sanity check. So I have a pretty high degree of confidence that it accepts and rejects the samethings that the existing code does. | 14:49 |
| *** itlinux has quit IRC | 14:51 | |
| *** navidp has joined #openstack-keystone | 14:53 | |
| openstackgerrit | Navid Pustchi proposed openstack/keystonemiddleware: Fix D400 PEP257 violation https://review.openstack.org/313052 | 14:54 |
| *** sdake_ has quit IRC | 14:57 | |
| *** andrewbogott has quit IRC | 14:58 | |
| *** andrewbogott has joined #openstack-keystone | 14:58 | |
| *** jorge_munoz_ has joined #openstack-keystone | 14:58 | |
| *** jorge_munoz has quit IRC | 14:59 | |
| *** jorge_munoz_ is now known as jorge_munoz | 14:59 | |
| *** haplo37 has joined #openstack-keystone | 14:59 | |
| *** jaosorior has quit IRC | 15:02 | |
| *** Guest42930 has quit IRC | 15:05 | |
| *** dan_nguyen has quit IRC | 15:05 | |
| *** david-lyle has joined #openstack-keystone | 15:06 | |
| *** jaugustine has joined #openstack-keystone | 15:07 | |
| *** diazjf has joined #openstack-keystone | 15:09 | |
| *** diazjf1 has joined #openstack-keystone | 15:11 | |
| *** diazjf has quit IRC | 15:13 | |
| *** sdake has joined #openstack-keystone | 15:16 | |
| *** itlinux has joined #openstack-keystone | 15:22 | |
| *** pushkaru has joined #openstack-keystone | 15:26 | |
| lbragstad | stevemar bknudson standing up a tempest/devstack node to see if I can recreate https://bugs.launchpad.net/keystone/+bug/1578866 | 15:30 |
| openstack | Launchpad bug 1578866 in OpenStack Identity (keystone) "test_user_update_own_password failing intermittently" [High,Confirmed] | 15:30 |
| lbragstad | stevemar bknudson let me know if you want your ssh keys on there | 15:30 |
| bknudson | lbragstad: ok, thanks. I'll try to recreate it with a test, too. | 15:30 |
| *** pnavarro has quit IRC | 15:31 | |
| lbragstad | cc dolphm dstanek ^ | 15:32 |
| *** sdake has quit IRC | 15:32 | |
| lbragstad | looks like https://review.openstack.org/#/c/311761/ just failed because of the negative role tests... | 15:32 |
| patchbot | lbragstad: patch 311761 - requirements - Require Babel>=2.3.4 | 15:32 |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Federated Query APIs https://review.openstack.org/313604 | 15:33 |
| ayoung | rderose, ^^ is for you. It does not have the API changes yet. | 15:33 |
| *** dmk0202 has quit IRC | 15:33 | |
| bknudson | lbragstad: I've tried the scenario locally and I get token invalid (even without the sleep after changing password) | 15:33 |
| bknudson | so I'm going to put this in a loop and see if it ever happens. | 15:33 |
| lbragstad | hmmm | 15:34 |
| lbragstad | bknudson so you haven't been able to recreate it with keystone, devstack, and tempest on master? | 15:34 |
| *** dmk0202 has joined #openstack-keystone | 15:34 | |
| bknudson | lbragstad: I'm just starting up master keystone in devstack. Not using tempest. | 15:35 |
| rderose | ayoung: okay, looking now | 15:35 |
| bknudson | I'm too lazy to figure out tempest config | 15:35 |
| lbragstad | bknudson oh - got it | 15:35 |
| ayoung | bknudson, lbragstad I really suspect that simplifying the revoke path will make these easier to debug. I think that is what is rejecting tokens | 15:36 |
| *** catintheroof has quit IRC | 15:36 | |
| ayoung | lbragstad, so please look at https://review.openstack.org/#/c/311652/ | 15:36 |
| lbragstad | ayoung in the case we are seeing it's *not* rejecting a token and it should be | 15:36 |
| patchbot | ayoung: patch 311652 - keystone - Replace revoke tree with linear search | 15:36 |
| ayoung | lbragstad, also easier to debug with the above code | 15:36 |
| bknudson | if I can recreate then it'll be easy enough to apply the patch and see if it helps | 15:37 |
| lbragstad | ++ | 15:38 |
| *** dmk0202 has quit IRC | 15:39 | |
| *** jsavak has quit IRC | 15:42 | |
| *** TxGVNN has quit IRC | 15:43 | |
| dstanek | morgan: have you done anything for https://bugs.launchpad.net/keystone/+bug/1572341 yet? | 15:44 |
| openstack | Launchpad bug 1572341 in OpenStack Identity (keystone) "Failed migration 90 -> 91 Can't DROP 'ixu_user_name_domain_id'" [High,Triaged] | 15:44 |
| *** dave-mccowan has quit IRC | 15:50 | |
| rderose | ayoung: at first glance, the spec good; describes problem and exactly what we discussed at the summit | 15:52 |
| rderose | ayoung: I'll review more closely later and add my comments, but I like it! | 15:53 |
| lbragstad | bknudson I'm running tempest.api.identity.v2.test_users in a loop until it fails with latest keystone, devstack, and tempest | 15:53 |
| lbragstad | bknudson my keystone sha 7a18200ff6fb80a2408dbbe3172fe73dfb13366c | 15:53 |
| lbragstad | my devstack sha 8d27280f3e845841e78acf659a7e8b605122517e | 15:53 |
| ayoung | rderose, cool. I would suggest that the next thing you do is try to do the API portion of the spec review, as that will flush out some more gremlins | 15:53 |
| ayoung | and it will let you think through implementaiton | 15:53 |
| rderose | ayoung: sounds good | 15:54 |
| *** jsavak has joined #openstack-keystone | 15:55 | |
| morgan | dstanek: nope. | 15:55 |
| navidp | dstanek, it seems the error is with memcache https://bugs.launchpad.net/keystone/+bug/1287757 | 15:59 |
| openstack | Launchpad bug 1287757 in OpenStack Identity (keystone) kilo "Optimization: Don't prune events on every get" [High,Fix released] - Assigned to Morgan Fainberg (mdrnstm) | 15:59 |
| navidp | dstanek, the pooled memchached token is not updating in time, causing the tree to be rebuilt | 16:00 |
| navidp | dstanek, what is your suggestion? | 16:00 |
| lbragstad | bknudson I'm at 60 consecutive tempest runs of tempest.api.identity.v2.test_users.IdentityUsersTest.test_user_update_own_password without a failure | 16:01 |
| *** dan_nguyen has joined #openstack-keystone | 16:02 | |
| bknudson | lbragstad: this is strange. | 16:03 |
| lbragstad | bknudson I wonder if it only fails when the revocation table gets super bloated? | 16:03 |
| *** yolanda has quit IRC | 16:03 | |
| lbragstad | bknudson i'm now at 80 consecutive runs and I have 700 revocation events stored in the revocation table | 16:04 |
| stevemar | samueldmq: want to take a quick look at https://review.openstack.org/#/c/313052/3 | 16:04 |
| patchbot | stevemar: patch 313052 - keystonemiddleware - Fix D400 PEP257 violation | 16:04 |
| bknudson | lbragstad: does the tempest test still have the sleep(1) in it? Try removing the sleep | 16:05 |
| lbragstad | bknudson yeah - tempest has the sleep in it still | 16:05 |
| *** aginwala has joined #openstack-keystone | 16:06 | |
| *** roxanaghe has joined #openstack-keystone | 16:07 | |
| *** johnthetubaguy has quit IRC | 16:08 | |
| *** johnthetubaguy has joined #openstack-keystone | 16:08 | |
| dstanek | navidp: that causes the tree to be rebuilt? | 16:09 |
| lbragstad | bknudson I do see the test execution time getting slower and slower | 16:10 |
| *** dmellado is now known as dmellado|off | 16:10 | |
| navidp | yes and as well as other nodes accept the token while it is invalidated on the other node, | 16:10 |
| navidp | dstanek, base on this ocmment which i dont know if it is valid https://bugs.launchpad.net/keystone/+bug/1503312/comments/24 | 16:10 |
| openstack | Launchpad bug 1503312 in OpenStack Identity (keystone) "Optimization: Don't rebuild revoke-tree in each validate-token call" [Medium,In progress] | 16:10 |
| dstanek | navidp: so not related to that other bug? | 16:12 |
| *** roxanaghe has quit IRC | 16:12 | |
| dstanek | navidp: do you know where the rebuild is invoked? | 16:12 |
| navidp | dstanek, there is two patches uploaded which is not updated recently and their approach is to invalidate the revocation tree | 16:13 |
| navidp | dstanek, this is must be an issue with backend = keystone.cache.memcache_pool for the revocation tree | 16:14 |
| dstanek | navidp: ok, i'll take a look at bug in a big. i curious to know what is actually happening so that we can determine if it is a bug | 16:15 |
| *** sdake has joined #openstack-keystone | 16:15 | |
| navidp | dstanek, I will try to test it and see if I get the same issue | 16:16 |
| *** woodster_ has joined #openstack-keystone | 16:16 | |
| *** frontrunner has joined #openstack-keystone | 16:21 | |
| *** agrebennikov has joined #openstack-keystone | 16:22 | |
| *** rbridgeman has joined #openstack-keystone | 16:24 | |
| lbragstad | bknudson interesting... if you look through all the traces here http://logstash.openstack.org/#/dashboard/file/logstash.json?query=message:%5C%22testtools.matchers._impl.MismatchError:%20%26lt%3Bbound%20method%20V3TokenClient.auth%20of%20%26lt%3Btempest.lib.services.identity.v3.token_client.V3TokenClient%5C%22%20AND%20tags:%5C%22console%5C%22%20AND%20voting:1&from=10d | 16:26 |
| *** catintheroof has joined #openstack-keystone | 16:27 | |
| lbragstad | you only see v3 tempest.api.identity.v3.test_users.IdentityV3UsersTest.test_user_update_own_password fail | 16:27 |
| lbragstad | the v2 version of that same test always passes - tempest.api.identity.v2.test_users.IdentityUsersTest.test_user_update_own_password [1.937001s] ... ok | 16:27 |
| lbragstad | which is what I'm testing | 16:27 |
| bknudson | oh, I've been testing using v3 apis. | 16:28 |
| *** mtreinish has quit IRC | 16:28 | |
| lbragstad | bknudson gotcha | 16:28 |
| bknudson | I'll try switching to v2. | 16:29 |
| bknudson | the bug says v2, but you're saying it's v3 that's failing? | 16:29 |
| *** jidar has quit IRC | 16:29 | |
| lbragstad | bknudson yeah - I can't get it to fail on v2.0 | 16:30 |
| lbragstad | bknudson and i'm up to 222 consecutive runs | 16:31 |
| bknudson | my tests hasn't failed after 775. my test should keep working for 60 minutes when the admin token expires. | 16:32 |
| lbragstad | I do notice severe performance degradation once there are about 1500 rows in the revocation_events table | 16:34 |
| *** mtreinish has joined #openstack-keystone | 16:35 | |
| openstackgerrit | Navid Pustchi proposed openstack/keystonemiddleware: Fix D204 PEP257 violation and enable D301 and D209 https://review.openstack.org/313636 | 16:35 |
| *** jsavak has quit IRC | 16:36 | |
| openstackgerrit | Navid Pustchi proposed openstack/keystonemiddleware: Fix D204 PEP257 violation and enable D301 and D209 https://review.openstack.org/313636 | 16:36 |
| *** jidar has joined #openstack-keystone | 16:39 | |
| *** dmk0202 has joined #openstack-keystone | 16:40 | |
| *** sdake_ has joined #openstack-keystone | 16:42 | |
| *** sdake has quit IRC | 16:45 | |
| *** aginwala has quit IRC | 16:46 | |
| *** jsavak has joined #openstack-keystone | 16:46 | |
| lbragstad | bknudson I can't really seem to get the v3 version of that test to fail either.. | 16:51 |
| lbragstad | bknudson i'm just going to loop the identity tests and run it until something blows up | 16:51 |
| *** gyee has joined #openstack-keystone | 16:52 | |
| *** ChanServ sets mode: +v gyee | 16:52 | |
| *** dmk0202 has quit IRC | 16:55 | |
| *** roxanaghe has joined #openstack-keystone | 16:57 | |
| *** dmk0202 has joined #openstack-keystone | 16:57 | |
| *** dmk0202 has quit IRC | 17:01 | |
| *** roxanaghe has quit IRC | 17:06 | |
| *** jistr has quit IRC | 17:07 | |
| *** lupine has quit IRC | 17:09 | |
| *** jasonsb has quit IRC | 17:11 | |
| *** jasonsb has joined #openstack-keystone | 17:12 | |
| *** roxanaghe has joined #openstack-keystone | 17:12 | |
| *** jsavak has quit IRC | 17:16 | |
| *** jasonsb has quit IRC | 17:17 | |
| *** dave-mccowan has joined #openstack-keystone | 17:17 | |
| *** haplo37 has quit IRC | 17:18 | |
| bknudson | lbragstad: my test ran until the admin token expired, so wasn't able to recreate after 2092 iteration | 17:23 |
| *** fangxu has quit IRC | 17:25 | |
| *** aginwala has joined #openstack-keystone | 17:28 | |
| *** roxanaghe has quit IRC | 17:29 | |
| *** roxanaghe has joined #openstack-keystone | 17:29 | |
| *** spzala has quit IRC | 17:32 | |
| *** spzala has joined #openstack-keystone | 17:32 | |
| *** spzala has quit IRC | 17:37 | |
| *** aginwala has quit IRC | 17:37 | |
| *** jsavak has joined #openstack-keystone | 17:39 | |
| *** lupine has joined #openstack-keystone | 17:40 | |
| *** lupine has quit IRC | 17:41 | |
| *** lupine has joined #openstack-keystone | 17:41 | |
| *** lupine_ has joined #openstack-keystone | 17:41 | |
| *** lupine_ has quit IRC | 17:41 | |
| *** jsavak has quit IRC | 17:45 | |
| *** yolanda has joined #openstack-keystone | 17:46 | |
| *** jsavak has joined #openstack-keystone | 17:46 | |
| *** aginwala has joined #openstack-keystone | 17:47 | |
| *** gagehugo has joined #openstack-keystone | 17:50 | |
| *** yolanda has quit IRC | 17:54 | |
| *** navidp has quit IRC | 17:54 | |
| *** yarkot1 has quit IRC | 17:57 | |
| *** sdake_ is now known as sdake | 17:57 | |
| lbragstad | bknudson I've ran the entire tempest.api.identity test suite for over an hour consecutively and I can't recreate | 18:01 |
| *** lupine has quit IRC | 18:01 | |
| lbragstad | side note - each test is taking about 7 seconds to run because of how many revocation events are being stored | 18:02 |
| *** lupine has joined #openstack-keystone | 18:02 | |
| *** lupine has quit IRC | 18:02 | |
| *** lupine has joined #openstack-keystone | 18:02 | |
| dstanek | lbragstad: ouch | 18:06 |
| lbragstad | dstanek yeah - keystone is dog slow | 18:06 |
| lbragstad | dstanek bknudson maybe it doesn't happen as a result of the revocation table bloating? | 18:07 |
| *** yarkot1 has joined #openstack-keystone | 18:07 | |
| bknudson | why would revocation table bloating cause tokens to remain valid? | 18:07 |
| lbragstad | bknudson no idea | 18:08 |
| lbragstad | just wasn't going to rule it out | 18:08 |
| *** fangxu has joined #openstack-keystone | 18:11 | |
| lbragstad | dolphm were you ever able to get https://github.com/openstack/tempest/blob/master/tempest/api/identity/admin/v2/test_roles_negative.py to fail? | 18:18 |
| *** pushkaru has quit IRC | 18:20 | |
| *** tonytan4ever has quit IRC | 18:22 | |
| *** BigWillie has quit IRC | 18:24 | |
| *** BigWillie has joined #openstack-keystone | 18:26 | |
| *** lamt has joined #openstack-keystone | 18:27 | |
| *** pushkaru has joined #openstack-keystone | 18:29 | |
| *** sdake_ has joined #openstack-keystone | 18:31 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Fix D400 PEP257 violation https://review.openstack.org/313052 | 18:33 |
| *** sdake has quit IRC | 18:33 | |
| *** stingaci has joined #openstack-keystone | 18:34 | |
| *** navidp has joined #openstack-keystone | 18:36 | |
| *** gordc has quit IRC | 18:36 | |
| *** catintheroof has quit IRC | 18:41 | |
| stevemar | bknudson: you believe fungi and dims, they want to remove ldap on us?! those anarchists | 18:44 |
| dims | LOL | 18:44 |
| bknudson | stevemar: y, nice try. | 18:44 |
| fungi | ldap is dead, long live nis/yp | 18:45 |
| bknudson | please kill ldap | 18:45 |
| lbragstad | ayoung around? | 18:45 |
| bknudson | it's not even RESTful | 18:45 |
| ayoung | lbragstad, yep | 18:46 |
| openstackgerrit | Merged openstack/keystonemiddleware: Fix D204 PEP257 violation and enable D301 and D209 https://review.openstack.org/313636 | 18:46 |
| fungi | may it REST in peace | 18:46 |
| lbragstad | ayoung want to go through your patch for revocation events? | 18:46 |
| ayoung | lbragstad, sure | 18:46 |
| lbragstad | ayoung I have some questions | 18:46 |
| ayoung | fire awy | 18:46 |
| lbragstad | ayoung so - with your patch, we no longer have a tree, right? | 18:46 |
| *** mkrcmari__ has quit IRC | 18:46 | |
| lbragstad | but a flattened list | 18:47 |
| ayoung | lbragstad, correct, it is a list, and we do an exhaustive search from oldest to newest event | 18:47 |
| lbragstad | ok - so we have a list of events (formally the tree) and some attributes from a token | 18:47 |
| openstackgerrit | werner mendizabal proposed openstack/keystone-specs: Credential Encryption https://review.openstack.org/284950 | 18:47 |
| ayoung | lbragstad, yeah. The old tree code maintained the list as well, and used the same events as the nodes of the tree. | 18:48 |
| ayoung | it only used the list for adding new events and cleaning up expired. It was another vestige of assuming we needed to do this in middleware | 18:48 |
| lbragstad | ayoung so if we match some of the token attributes to an event in the list, we have a match right? | 18:48 |
| ayoung | lbragstad, right. If The event says "all tokens for project P are revoked" and the token has proejct P in the user or scope section, it is revoked | 18:49 |
| ayoung | actually, no project in the user section....change hat to domain and it still holds true though | 18:50 |
| lbragstad | ayoung ok - so if we have a match we exit early | 18:50 |
| ayoung | right | 18:50 |
| lbragstad | ok | 18:50 |
| ayoung | so the normal case, where a token is valid goes through the whole list | 18:50 |
| ayoung | lbragstad, which is why I want the follow on change to reduce the number of revokation events to a minimum | 18:50 |
| lbragstad | right | 18:50 |
| ayoung | for example, if a user or project is disabled, we don't want to look for an event for that, we want to look at the identty or resource backends to find that out | 18:51 |
| lbragstad | yeah - we get that for free today with rebuilding the authorization context | 18:51 |
| lbragstad | on validation | 18:51 |
| ayoung | revoke events should be reserved for things that can't otherwise be deduced: password changes, explicit token revocations | 18:51 |
| ayoung | lbragstad, just realize the PCIS effort might even get us the password change one | 18:51 |
| ayoung | lbragstad, also, I don't want to change the code very much on this patch, just port over what has been working in the test directory. Any additional cleanup can be proposed after, with deep scruitiny | 18:53 |
| ayoung | comment changes are OK | 18:53 |
| *** GB21 has joined #openstack-keystone | 18:54 | |
| lbragstad | ayoung ok - I ran a subset of the identity tempest api tests on keystone master to get an idea of how long it was taking. I'm going to do the same with your patch | 18:54 |
| lbragstad | in a minute | 18:54 |
| lbragstad | http://cdn.pasteraw.com/5jdvrgi9iusd3wqltg6m1bb0t7g7ngw | 18:55 |
| rodrigods | why only v2 tests? | 18:55 |
| lbragstad | rodrigods I just picked a set of tests | 18:55 |
| lbragstad | rodrigods and i was trying to get those to expose a transient we've been seeing the gate recently | 18:56 |
| rodrigods | ok | 18:56 |
| ayoung | lbragstad, comparing with tree vs with list? | 18:56 |
| lbragstad | ayoung yeah - since i have things setup anyway | 18:56 |
| rodrigods | need to run both 30 times heh | 18:56 |
| rodrigods | master student feelings | 18:56 |
| ayoung | lbragstad, looking for failures or looking for timeing data? Or both? | 18:56 |
| lbragstad | both | 18:56 |
| lbragstad | more so the timing | 18:56 |
| ayoung | rodrigods, you are starting to think like QE. I love it | 18:56 |
| ayoung | lbragstad, awesome. Let me know what you find. | 18:57 |
| rodrigods | ayoung, really? heh | 18:57 |
| ayoung | lbragstad, even if the tree is slightly faster on checking (which I doubt) I suspect that the overall will be faster when we remove the spurious events | 18:57 |
| *** aginwala has quit IRC | 19:03 | |
| *** tonytan4ever has joined #openstack-keystone | 19:07 | |
| *** dave-mccowan has quit IRC | 19:09 | |
| *** aginwala has joined #openstack-keystone | 19:09 | |
| *** navidp has quit IRC | 19:13 | |
| *** gordc has joined #openstack-keystone | 19:17 | |
| lbragstad | ayoung is the removal of spurious events as subsequent patch? | 19:17 |
| lbragstad | s/as/a/ | 19:18 |
| *** roxanaghe has quit IRC | 19:18 | |
| *** aginwala has quit IRC | 19:20 | |
| *** sdake has joined #openstack-keystone | 19:24 | |
| *** dave-mccowan has joined #openstack-keystone | 19:25 | |
| *** sdake has quit IRC | 19:25 | |
| *** rcernin has joined #openstack-keystone | 19:26 | |
| ayoung | lbragstad, yes, and I need to rewrite it | 19:26 |
| lbragstad | ayoung so - we do see a slight performance increase with your patch http://cdn.pasteraw.com/1uu3nqyf9lxffxbk7ap44mo0pe5xh0b | 19:26 |
| lbragstad | compared to http://cdn.pasteraw.com/5jdvrgi9iusd3wqltg6m1bb0t7g7ngw | 19:26 |
| *** sdake_ has quit IRC | 19:26 | |
| ayoung | lbragstad, good. It was not by itself meant as a performance increase, but glad to know it is not making things worse | 19:27 |
| lbragstad | right | 19:27 |
| *** mkrcmari__ has joined #openstack-keystone | 19:31 | |
| *** spzala has joined #openstack-keystone | 19:34 | |
| *** edtubill has quit IRC | 19:34 | |
| stevemar | anyone know what TZ haypo is in? | 19:35 |
| tristanC | stevemar: he should be UTC+1 | 19:36 |
| *** edtubill has joined #openstack-keystone | 19:37 | |
| *** spzala has quit IRC | 19:39 | |
| openstackgerrit | ayoung proposed openstack/keystone: Replace revoke tree with linear search https://review.openstack.org/311652 | 19:41 |
| *** edtubill has quit IRC | 19:43 | |
| *** ninag has quit IRC | 19:47 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystoneauth: Expose allow paramters URL discovery in adapter https://review.openstack.org/309650 | 19:51 |
| *** pauloewerton has quit IRC | 19:59 | |
| *** dmk0202 has joined #openstack-keystone | 20:05 | |
| *** aginwala has joined #openstack-keystone | 20:07 | |
| *** navidp has joined #openstack-keystone | 20:07 | |
| *** mvk_ has joined #openstack-keystone | 20:08 | |
| *** mkrcmari__ has quit IRC | 20:12 | |
| *** aginwala has quit IRC | 20:17 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Separate protocol schema https://review.openstack.org/308088 | 20:22 |
| *** navidp has quit IRC | 20:25 | |
| *** GB21 has quit IRC | 20:27 | |
| stevemar | tristanC: ah thanks, i'll try him on monday | 20:28 |
| *** GB21 has joined #openstack-keystone | 20:30 | |
| *** BigWillie has quit IRC | 20:30 | |
| *** openstackgerrit has quit IRC | 20:32 | |
| *** openstackgerrit has joined #openstack-keystone | 20:32 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Replace revoke tree with linear search https://review.openstack.org/311652 | 20:34 |
| *** spzala has joined #openstack-keystone | 20:35 | |
| *** jsavak has quit IRC | 20:39 | |
| *** spzala has quit IRC | 20:40 | |
| *** jsavak has joined #openstack-keystone | 20:40 | |
| *** gordc has quit IRC | 20:44 | |
| morgan | o/ | 20:47 |
| * morgan is lurking now and semi-paying attention. | 20:47 | |
| bknudson | morgan-redhat | 20:47 |
| morgan | bknudson: haha | 20:48 |
| bknudson | morgan: what do they have you doing there? | 20:48 |
| bknudson | keystone reviews I hope. | 20:48 |
| morgan | bknudson: going to be writing code for zuul/nodepool as my primary job | 20:48 |
| morgan | bknudson: but i'll still be doing work on keystone. | 20:48 |
| morgan | auth is kindofimportant for nodepool and we have lots of work to still do to make openstack auth sotry better | 20:48 |
| bknudson | make openstack auth great again. | 20:49 |
| morgan | bknudson: it was "never" great before. it was only passible (tries to kill the "make X great" meme in openstack) | 20:49 |
| bknudson | the meme will be over in november | 20:50 |
| morgan | bknudson: i hope it stops sooner :( | 20:50 |
| *** gagehugo has quit IRC | 20:53 | |
| *** jsavak has quit IRC | 20:58 | |
| *** dmk0202 has quit IRC | 20:58 | |
| *** lamt has quit IRC | 20:58 | |
| *** jaugustine has quit IRC | 20:59 | |
| *** agrebennikov has quit IRC | 21:00 | |
| *** raildo is now known as raildo-afk | 21:01 | |
| *** iurygregory has quit IRC | 21:05 | |
| *** roxanaghe has joined #openstack-keystone | 21:18 | |
| *** ayoung has quit IRC | 21:20 | |
| *** roxanaghe has quit IRC | 21:20 | |
| *** roxanaghe has joined #openstack-keystone | 21:22 | |
| *** ametts has quit IRC | 21:24 | |
| *** timcline has quit IRC | 21:26 | |
| *** spzala has joined #openstack-keystone | 21:36 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:38 | |
| *** aginwala has joined #openstack-keystone | 21:38 | |
| *** aginwala has quit IRC | 21:40 | |
| *** spzala has quit IRC | 21:41 | |
| *** timcline has joined #openstack-keystone | 21:42 | |
| *** aginwala has joined #openstack-keystone | 21:44 | |
| *** timcline has quit IRC | 21:45 | |
| *** timcline has joined #openstack-keystone | 21:46 | |
| *** ozialien10 has joined #openstack-keystone | 21:51 | |
| *** timcline has quit IRC | 21:52 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the catalog abstract base class and common code out of core https://review.openstack.org/309238 | 21:58 |
| *** ayoung has joined #openstack-keystone | 22:16 | |
| *** ChanServ sets mode: +v ayoung | 22:16 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/313731 | 22:17 |
| *** navidp has joined #openstack-keystone | 22:19 | |
| rodrigods | lbragstad, ayoung, ^ cool! the performance thing | 22:20 |
| rodrigods | i wonder if stuff hasn't been compared before introducing the revoke tree | 22:20 |
| *** tonytan4ever has quit IRC | 22:24 | |
| *** lhcheng has quit IRC | 22:27 | |
| *** csoukup has quit IRC | 22:29 | |
| *** slberger has left #openstack-keystone | 22:30 | |
| openstackgerrit | Merged openstack/keystone: Move the resource abstract base class out of core https://review.openstack.org/302826 | 22:32 |
| *** roxanaghe has quit IRC | 22:33 | |
| *** david-lyle has quit IRC | 22:35 | |
| *** david-lyle has joined #openstack-keystone | 22:37 | |
| *** spzala has joined #openstack-keystone | 22:37 | |
| *** spzala has quit IRC | 22:42 | |
| *** sdake has joined #openstack-keystone | 22:45 | |
| *** markvoelker has quit IRC | 22:47 | |
| *** sdake_ has joined #openstack-keystone | 22:48 | |
| *** markvoelker has joined #openstack-keystone | 22:48 | |
| *** sdake has quit IRC | 22:50 | |
| samueldmq | stevemar: hey, sorry was afk; it was looking neat | 22:50 |
| *** r-daneel has quit IRC | 22:52 | |
| *** sdake has joined #openstack-keystone | 22:55 | |
| *** sdake_ has quit IRC | 22:56 | |
| *** sdake has quit IRC | 23:05 | |
| *** roxanaghe has joined #openstack-keystone | 23:09 | |
| *** rderose has quit IRC | 23:09 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Improve docs for v3 users https://review.openstack.org/305796 | 23:11 |
| *** aginwala has quit IRC | 23:12 | |
| *** daemontool has quit IRC | 23:12 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Add users functional tests https://review.openstack.org/289306 | 23:12 |
| openstackgerrit | Matthew Edmonds proposed openstack/keystone: Honor ldap_filter on filtered user list https://review.openstack.org/312126 | 23:21 |
| *** lhcheng has joined #openstack-keystone | 23:24 | |
| *** ChanServ sets mode: +v lhcheng | 23:24 | |
| *** sheel has quit IRC | 23:25 | |
| *** rbridgeman has quit IRC | 23:26 | |
| *** richm has joined #openstack-keystone | 23:33 | |
| *** sdake has joined #openstack-keystone | 23:34 | |
| *** edmondsw has quit IRC | 23:34 | |
| *** sdake_ has joined #openstack-keystone | 23:37 | |
| *** richm has quit IRC | 23:38 | |
| *** fangxu has quit IRC | 23:38 | |
| *** sdake has quit IRC | 23:38 | |
| *** fangxu has joined #openstack-keystone | 23:38 | |
| *** spzala has joined #openstack-keystone | 23:38 | |
| *** lhcheng_ has joined #openstack-keystone | 23:41 | |
| *** spzala has quit IRC | 23:43 | |
| *** lhcheng has quit IRC | 23:44 | |
| *** woodster_ has quit IRC | 23:48 | |
| *** gyee has quit IRC | 23:53 | |
| *** stingaci has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!