*** rk4n has quit IRC | 00:04 | |
*** ngupta has quit IRC | 00:07 | |
*** iurygregory has quit IRC | 00:16 | |
*** markvoelker has joined #openstack-keystone | 00:24 | |
*** markvoelker_ has joined #openstack-keystone | 00:25 | |
*** stingaci has quit IRC | 00:25 | |
*** adu has joined #openstack-keystone | 00:27 | |
*** markvoelker has quit IRC | 00:29 | |
*** timcline has joined #openstack-keystone | 00:29 | |
*** markvoelker_ has quit IRC | 00:30 | |
openstackgerrit | Merged openstack/keystonemiddleware: Fix AttributeError on cached-invalid token checks https://review.openstack.org/319527 | 00:30 |
---|---|---|
*** timcline has quit IRC | 00:34 | |
*** krotscheck_dcm is now known as krotscheck | 00:39 | |
*** lhcheng has quit IRC | 00:39 | |
*** lhcheng has joined #openstack-keystone | 00:40 | |
*** ChanServ sets mode: +v lhcheng | 00:40 | |
*** iurygregory has joined #openstack-keystone | 00:41 | |
*** chlong has joined #openstack-keystone | 01:00 | |
*** rk4n has joined #openstack-keystone | 01:04 | |
*** rk4n has quit IRC | 01:10 | |
*** ddieterly has quit IRC | 01:22 | |
*** EinstCrazy has joined #openstack-keystone | 01:26 | |
*** lhcheng has quit IRC | 01:30 | |
*** timcline has joined #openstack-keystone | 01:30 | |
*** timcline has quit IRC | 01:35 | |
*** wxy has joined #openstack-keystone | 01:36 | |
*** TxGVNN has joined #openstack-keystone | 01:45 | |
openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add release notes for return-request-id-to-caller https://review.openstack.org/276644 | 01:48 |
*** EinstCrazy has quit IRC | 01:50 | |
*** ddieterly has joined #openstack-keystone | 01:51 | |
*** ddieterly is now known as ddieterly[away] | 01:52 | |
notmorgan | jamielennox: https://review.openstack.org/319711 | 01:53 |
notstevemar | notmorgan: going to write "Related-Bug: #1584289" in the review | 01:53 |
openstack | bug 1584289 in keystonemiddleware "AttributeError while logging use of a token already cached as invalid" [Critical,Fix released] https://launchpad.net/bugs/1584289 - Assigned to Brian Cline (briancline) | 01:53 |
*** EinstCrazy has joined #openstack-keystone | 01:53 | |
notmorgan | notstevemar: sounds good | 01:53 |
jamielennox | notstevemar: ah, beat me to it, agree on related bug | 01:54 |
notmorgan | also https://review.openstack.org/319701 | 01:54 |
notmorgan | notstevemar: feel free to edit that review | 01:55 |
notmorgan | or .. i can | 01:55 |
notmorgan | *shrug* | 01:55 |
notmorgan | or.. | 01:55 |
notmorgan | hah beat me to it | 01:55 |
notstevemar | :) | 01:56 |
notmorgan | notstevemar: should be easy to go https://review.openstack.org/#/c/315198/ | 01:56 |
patchbot | notmorgan: patch 315198 - keystone - Add new functionality to @wip | 01:56 |
notstevemar | notmorgan: whammo | 01:57 |
*** notstevemar is now known as stevemar | 01:57 | |
*** EinstCrazy has quit IRC | 01:57 | |
notmorgan | stevemar: i'll but henry tomorrow for https://review.openstack.org/#/c/319629/ unless jamielennox wants to push it through | 01:58 |
patchbot | notmorgan: patch 319629 - keystone - Isolate common ldap code to the identity backend | 01:58 |
notmorgan | stevemar: henry's concern is a non-issue because __init__ imports | 01:58 |
notmorgan | stevemar: but that is going to be a beast to handle any rebases on | 01:58 |
stevemar | notmorgan: should also be easy: https://review.openstack.org/#/c/291024/ | 01:59 |
patchbot | stevemar: patch 291024 - python-keystoneclient - map fixtures to keystoneauth | 01:59 |
jamielennox | notmorgan: if henry has a -1 i'd let him do it unless you have something you are needing it for right now | 01:59 |
notmorgan | jamielennox: the main reason i pinged you is because that is just going to be a beast to rebase at all. but his concern was re a rename, but __init__ imports core, so his concern was a non-issue | 02:00 |
stevemar | notmorgan: i also fixed up https://review.openstack.org/#/c/271135/ | 02:01 |
patchbot | stevemar: patch 271135 - keystone - remove deprecated revoke_by_expiration function | 02:01 |
notmorgan | stevemar: hm. so.. unless ksc replaces it's session code with ksa's... i worry that is the wrong approach. | 02:01 |
notmorgan | stevemar: because fixtures no longer represent the code in ksc...if someone is using it | 02:01 |
notmorgan | stevemar: but i'll defer to jamielennox | 02:01 |
jamielennox | so fixtures just produces a dictionary response that it is then up to you to mock out somehow | 02:02 |
stevemar | jamielennox: notmorgan: y'all plan on removing ksc's session/auth code, or just deprecating and pointing to ksa? | 02:03 |
jamielennox | i don't think there is any reason that changing the session would affect that | 02:03 |
stevemar | yeah, fixtures seemed like a harmless first step | 02:03 |
notmorgan | stevemar: i expect we'll just drop the code in ksc | 02:03 |
*** EinstCrazy has joined #openstack-keystone | 02:03 | |
jamielennox | stevemar: i had an attempt at that a while ago | 02:03 |
notmorgan | stevemar: way better | 02:03 |
jamielennox | it turns out super difficult to be exactly compatible | 02:03 |
stevemar | jamielennox: how'd that go? | 02:03 |
stevemar | eek | 02:03 |
jamielennox | little things like exception base classes | 02:03 |
jamielennox | or the changes in accessinfo | 02:03 |
jamielennox | i think it's easier to mark it as deprecated and let it rot | 02:04 |
stevemar | jamielennox: okay with me | 02:04 |
stevemar | jamielennox: notmorgan i'm okay with abandoning the fixtures patch if we're just going to let things rot out | 02:05 |
notmorgan | stevemar: well i just +2/A'd it | 02:05 |
stevemar | doh | 02:05 |
notmorgan | if we're abandoning should abandon now ;) | 02:05 |
jamielennox | stevemar: doesn't really matter for that | 02:05 |
jamielennox | because it's a direct change over, but i wouldn't put too much effort into moving stuff | 02:05 |
*** rk4n has joined #openstack-keystone | 02:07 | |
*** rk4n has quit IRC | 02:13 | |
*** ddieterly[away] is now known as ddieterly | 02:13 | |
openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add release notes for return-request-id-to-caller https://review.openstack.org/276644 | 02:18 |
*** ddieterly is now known as ddieterly[away] | 02:23 | |
*** ddieterly[away] is now known as ddieterly | 02:24 | |
*** ddieterly is now known as ddieterly[away] | 02:24 | |
*** ddieterly[away] is now known as ddieterly | 02:25 | |
*** ddieterly has joined #openstack-keystone | 02:27 | |
*** ddieterly is now known as ddieterly[away] | 02:27 | |
*** timcline has joined #openstack-keystone | 02:31 | |
*** lhcheng has joined #openstack-keystone | 02:32 | |
*** ChanServ sets mode: +v lhcheng | 02:32 | |
openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Create a Config object https://review.openstack.org/319715 | 02:33 |
openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Simply local_oslo_config handling https://review.openstack.org/319716 | 02:33 |
openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Consolidate user agent calculation https://review.openstack.org/319717 | 02:33 |
*** timcline has quit IRC | 02:35 | |
openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties https://review.openstack.org/296246 | 02:36 |
*** lhcheng has quit IRC | 02:37 | |
*** TxGVNN has quit IRC | 02:48 | |
*** TxGVNN has joined #openstack-keystone | 02:54 | |
openstackgerrit | Merged openstack/keystone: Add new functionality to @wip https://review.openstack.org/315198 | 02:57 |
*** wanghua has joined #openstack-keystone | 02:58 | |
openstackgerrit | Merged openstack/python-keystoneclient: map fixtures to keystoneauth https://review.openstack.org/291024 | 03:02 |
*** rk4n has joined #openstack-keystone | 03:09 | |
*** rk4n has quit IRC | 03:14 | |
*** ddieterly[away] has quit IRC | 03:27 | |
*** amit213 has quit IRC | 03:32 | |
*** timcline has joined #openstack-keystone | 03:32 | |
*** EinstCrazy has quit IRC | 03:35 | |
*** EinstCrazy has joined #openstack-keystone | 03:35 | |
*** timcline has quit IRC | 03:37 | |
*** harbor2 has quit IRC | 03:50 | |
*** jbell8 has joined #openstack-keystone | 03:55 | |
*** EinstCrazy has quit IRC | 04:01 | |
*** jbell8 has quit IRC | 04:11 | |
*** rk4n has joined #openstack-keystone | 04:11 | |
*** rk4n has quit IRC | 04:15 | |
*** dave-mcc_ has quit IRC | 04:22 | |
*** ngupta has joined #openstack-keystone | 04:28 | |
*** timcline has joined #openstack-keystone | 04:32 | |
*** timcline has quit IRC | 04:37 | |
*** jaosorior has joined #openstack-keystone | 04:37 | |
*** TxGVNN has quit IRC | 04:56 | |
*** chlong has quit IRC | 05:08 | |
*** rk4n has joined #openstack-keystone | 05:12 | |
*** fawadkhaliq has joined #openstack-keystone | 05:18 | |
*** rk4n has quit IRC | 05:20 | |
*** TxGVNN has joined #openstack-keystone | 05:20 | |
*** roxanagh_ has joined #openstack-keystone | 05:21 | |
*** sheel has joined #openstack-keystone | 05:21 | |
*** roxanagh_ has quit IRC | 05:22 | |
*** chlong has joined #openstack-keystone | 05:25 | |
*** ianw has quit IRC | 05:26 | |
*** d34dh0r53 has quit IRC | 05:27 | |
*** eglute_s has quit IRC | 05:27 | |
*** sigmavirus24_awa has quit IRC | 05:27 | |
*** cloudnull has quit IRC | 05:27 | |
*** d34dh0r53 has joined #openstack-keystone | 05:29 | |
*** eglute has joined #openstack-keystone | 05:30 | |
*** ianw has joined #openstack-keystone | 05:30 | |
*** EinstCrazy has joined #openstack-keystone | 05:30 | |
*** timcline has joined #openstack-keystone | 05:33 | |
*** TxGVNN has quit IRC | 05:34 | |
*** timcline has quit IRC | 05:38 | |
*** ngupta has quit IRC | 05:39 | |
*** rcernin has joined #openstack-keystone | 05:45 | |
*** eglute has quit IRC | 05:51 | |
*** d34dh0r53 has quit IRC | 05:51 | |
*** d34dh0r53 has joined #openstack-keystone | 05:51 | |
*** eglute has joined #openstack-keystone | 05:52 | |
*** eglute has quit IRC | 05:52 | |
*** d34dh0r53 has quit IRC | 05:52 | |
*** d34dh0r53 has joined #openstack-keystone | 05:52 | |
*** d34dh0r53 has quit IRC | 05:52 | |
*** d34dh0r53 has joined #openstack-keystone | 05:53 | |
*** eglute has joined #openstack-keystone | 05:53 | |
*** lhcheng has joined #openstack-keystone | 05:56 | |
*** ChanServ sets mode: +v lhcheng | 05:56 | |
*** GB21 has joined #openstack-keystone | 06:03 | |
*** zqfan has joined #openstack-keystone | 06:06 | |
*** fawadkhaliq has quit IRC | 06:16 | |
*** rk4n has joined #openstack-keystone | 06:16 | |
*** rk4n has quit IRC | 06:21 | |
*** chlong has quit IRC | 06:25 | |
*** timcline has joined #openstack-keystone | 06:34 | |
*** timcline has quit IRC | 06:38 | |
*** belmoreira has joined #openstack-keystone | 06:43 | |
*** tesseract has joined #openstack-keystone | 06:47 | |
*** roxanagh_ has joined #openstack-keystone | 07:03 | |
*** roxanagh_ has quit IRC | 07:07 | |
*** jaosorior has quit IRC | 07:10 | |
*** jaosorior has joined #openstack-keystone | 07:10 | |
*** rk4n has joined #openstack-keystone | 07:18 | |
*** hugokuo has quit IRC | 07:22 | |
*** timburke has quit IRC | 07:22 | |
*** charz has quit IRC | 07:23 | |
*** rk4n has quit IRC | 07:23 | |
*** lhcheng has quit IRC | 07:26 | |
*** henrynash has joined #openstack-keystone | 07:31 | |
*** ChanServ sets mode: +v henrynash | 07:31 | |
*** timcline has joined #openstack-keystone | 07:35 | |
*** EinstCrazy has quit IRC | 07:36 | |
*** timcline has quit IRC | 07:39 | |
*** henrynash has quit IRC | 07:40 | |
*** EinstCrazy has joined #openstack-keystone | 07:41 | |
aloga | stevemar: thank you for the early reviews on oidc :) | 07:43 |
*** EinstCra_ has joined #openstack-keystone | 07:46 | |
*** EinstCrazy has quit IRC | 07:46 | |
*** henrynash has joined #openstack-keystone | 07:49 | |
*** ChanServ sets mode: +v henrynash | 07:49 | |
*** adu has quit IRC | 07:52 | |
*** rk4n has joined #openstack-keystone | 07:58 | |
*** zzzeek has quit IRC | 08:00 | |
*** zzzeek has joined #openstack-keystone | 08:01 | |
*** rk4n has quit IRC | 08:03 | |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix typo on class name https://review.openstack.org/319763 | 08:08 |
*** sdake_ has quit IRC | 08:10 | |
*** sdake has joined #openstack-keystone | 08:11 | |
*** dmk0202 has joined #openstack-keystone | 08:19 | |
*** roxanagh_ has joined #openstack-keystone | 08:21 | |
*** TxGVNN has joined #openstack-keystone | 08:24 | |
*** roxanagh_ has quit IRC | 08:26 | |
*** fawadkhaliq has joined #openstack-keystone | 08:28 | |
*** pnavarro has joined #openstack-keystone | 08:29 | |
*** fawadkhaliq has quit IRC | 08:30 | |
*** timcline has joined #openstack-keystone | 08:35 | |
*** timcline has quit IRC | 08:41 | |
*** jistr has joined #openstack-keystone | 08:58 | |
*** jistr has quit IRC | 09:00 | |
*** jistr has joined #openstack-keystone | 09:01 | |
samueldmq | morning | 09:08 |
*** aurelien__ has joined #openstack-keystone | 09:16 | |
openstackgerrit | Merged openstack/oslo.policy: Add reno for release notes management https://review.openstack.org/319305 | 09:30 |
*** afazekas is now known as afazekas_food | 09:35 | |
*** timcline has joined #openstack-keystone | 09:36 | |
*** d0ugal has quit IRC | 09:40 | |
*** d0ugal has joined #openstack-keystone | 09:41 | |
*** timcline has quit IRC | 09:41 | |
*** rk4n has joined #openstack-keystone | 09:43 | |
*** pece has joined #openstack-keystone | 09:46 | |
*** fawadkhaliq has joined #openstack-keystone | 09:48 | |
*** rk4n has quit IRC | 09:51 | |
*** hoonetorg has quit IRC | 09:53 | |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix option definition https://review.openstack.org/319810 | 09:55 |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: Redefine all get_options methods to be class methods https://review.openstack.org/319811 | 09:55 |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix typo on class name https://review.openstack.org/319763 | 09:55 |
*** _amrith_ is now known as amrith | 10:04 | |
jamielennox | aloga: hey, is this your nick for ^ | 10:04 |
aloga | jamielennox: yes | 10:06 |
aloga | jamielennox: I see your comments :-/ | 10:07 |
*** hoonetorg has joined #openstack-keystone | 10:07 | |
aloga | jamielennox: let me check if the failure that I got was cause by other code | 10:07 |
*** roxanagh_ has joined #openstack-keystone | 10:09 | |
aloga | jamielennox: argh, so sorry | 10:11 |
aloga | jamielennox: I misinterpreted the error | 10:12 |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix option definition https://review.openstack.org/319810 | 10:13 |
*** roxanagh_ has quit IRC | 10:14 | |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix typo on class name https://review.openstack.org/319763 | 10:15 |
aloga | jamielennox: sorry for the noise :( | 10:15 |
*** rk4n has joined #openstack-keystone | 10:24 | |
*** alex_xu has quit IRC | 10:27 | |
*** EinstCra_ has quit IRC | 10:28 | |
*** alex_xu has joined #openstack-keystone | 10:29 | |
jamielennox | aloga: it's fine | 10:30 |
jamielennox | aloga: you've been putting up some good ksa patches, i wanted to see what was going on with the classmethod options thing | 10:31 |
jamielennox | and see if the nick was you as i was going to ping you the other day and didn't know your name | 10:31 |
*** afazekas_food is now known as afazekas | 10:31 | |
*** amrith is now known as _amrith_ | 10:33 | |
aloga | jamielennox: thanks then :) | 10:33 |
*** timcline has joined #openstack-keystone | 10:37 | |
*** timcline has quit IRC | 10:42 | |
*** pgreg has joined #openstack-keystone | 10:54 | |
*** sdake has quit IRC | 11:04 | |
*** julim has joined #openstack-keystone | 11:04 | |
*** alex_xu has quit IRC | 11:07 | |
*** hoonetorg has quit IRC | 11:10 | |
*** alex_xu has joined #openstack-keystone | 11:11 | |
*** _amrith_ is now known as amrith | 11:14 | |
*** hoonetorg has joined #openstack-keystone | 11:15 | |
*** raildo-afk is now known as raildo | 11:16 | |
*** henrynash has quit IRC | 11:17 | |
*** iurygregory has quit IRC | 11:19 | |
*** GB21 has quit IRC | 11:26 | |
*** timcline has joined #openstack-keystone | 11:38 | |
*** adu has joined #openstack-keystone | 11:38 | |
*** timcline has quit IRC | 11:42 | |
*** iurygregory has joined #openstack-keystone | 11:46 | |
*** dave-mccowan has joined #openstack-keystone | 11:47 | |
*** roxanagh_ has joined #openstack-keystone | 11:57 | |
*** henrynash has joined #openstack-keystone | 11:58 | |
*** ChanServ sets mode: +v henrynash | 11:58 | |
*** GB21 has joined #openstack-keystone | 12:00 | |
*** aurelien__ has quit IRC | 12:01 | |
*** aurelien__ has joined #openstack-keystone | 12:02 | |
*** roxanagh_ has quit IRC | 12:02 | |
*** rk4n has quit IRC | 12:07 | |
*** rodrigods has quit IRC | 12:16 | |
*** rodrigods has joined #openstack-keystone | 12:16 | |
*** jed56 has joined #openstack-keystone | 12:21 | |
*** GB21 has quit IRC | 12:23 | |
*** fawadkhaliq has quit IRC | 12:24 | |
*** henrynash has quit IRC | 12:26 | |
*** adu has quit IRC | 12:27 | |
*** edmondsw has joined #openstack-keystone | 12:28 | |
*** jdennis has quit IRC | 12:28 | |
*** jdennis has joined #openstack-keystone | 12:28 | |
*** jdennis has quit IRC | 12:31 | |
*** timcline has joined #openstack-keystone | 12:38 | |
*** timcline has quit IRC | 12:43 | |
*** pgreg has quit IRC | 12:49 | |
*** rk4n has joined #openstack-keystone | 12:49 | |
*** aurelien__ has quit IRC | 12:51 | |
*** karthikeayan has joined #openstack-keystone | 12:51 | |
karthikeayan | hi all, do i have to configure credentials for all the services in keystone? | 12:53 |
*** jsavak has joined #openstack-keystone | 12:54 | |
*** pauloewerton has joined #openstack-keystone | 12:54 | |
*** aurelien__ has joined #openstack-keystone | 12:55 | |
*** ddieterly has joined #openstack-keystone | 12:59 | |
*** karthikeayan has quit IRC | 12:59 | |
*** ddieterly has quit IRC | 13:04 | |
*** sigmavirus24 has joined #openstack-keystone | 13:12 | |
*** jdennis has joined #openstack-keystone | 13:13 | |
*** spzala has joined #openstack-keystone | 13:24 | |
*** daemontool has joined #openstack-keystone | 13:26 | |
*** ddieterly has joined #openstack-keystone | 13:30 | |
*** richm has joined #openstack-keystone | 13:31 | |
knikolla | o/ | 13:31 |
*** ngupta has joined #openstack-keystone | 13:32 | |
*** belmoreira has quit IRC | 13:32 | |
*** sheel has quit IRC | 13:35 | |
*** timcline has joined #openstack-keystone | 13:39 | |
*** timcline has quit IRC | 13:44 | |
*** ddieterly is now known as ddieterly[away] | 13:49 | |
*** adu has joined #openstack-keystone | 13:50 | |
*** gagehugo has joined #openstack-keystone | 13:55 | |
*** ddieterly[away] is now known as ddieterly | 13:56 | |
*** sdake has joined #openstack-keystone | 13:56 | |
*** ametts has joined #openstack-keystone | 13:58 | |
*** sdake_ has joined #openstack-keystone | 14:00 | |
*** sdake has quit IRC | 14:02 | |
*** henrynash has joined #openstack-keystone | 14:08 | |
*** ChanServ sets mode: +v henrynash | 14:08 | |
*** woodster_ has joined #openstack-keystone | 14:12 | |
*** belmoreira has joined #openstack-keystone | 14:17 | |
*** ngupta has quit IRC | 14:18 | |
*** sheel has joined #openstack-keystone | 14:20 | |
*** afred312 has joined #openstack-keystone | 14:21 | |
*** pnavarro has quit IRC | 14:24 | |
*** jaugustine has joined #openstack-keystone | 14:25 | |
*** pnavarro has joined #openstack-keystone | 14:32 | |
*** tonytan4ever has joined #openstack-keystone | 14:32 | |
*** henrynash has quit IRC | 14:34 | |
*** ngupta has joined #openstack-keystone | 14:35 | |
yolanda | hi stevemar, i'm working on the betamax fixture,where can i get a list of possible request/response values for keystone? for example i found i'm masking username, but it also can be seen as 'user': 'name' ... | 14:36 |
*** sdake_ has quit IRC | 14:38 | |
*** timcline has joined #openstack-keystone | 14:40 | |
*** darosale has joined #openstack-keystone | 14:42 | |
*** timcline has quit IRC | 14:45 | |
*** phalmos has joined #openstack-keystone | 14:45 | |
*** roxanagh_ has joined #openstack-keystone | 14:46 | |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: Check that all defined entry points can be loaded https://review.openstack.org/319980 | 14:47 |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: Check that all defined entry points can be loaded https://review.openstack.org/319980 | 14:51 |
*** mvk has quit IRC | 14:51 | |
*** roxanagh_ has quit IRC | 14:51 | |
*** pushkaru has joined #openstack-keystone | 14:51 | |
*** daemontool has quit IRC | 14:52 | |
*** markvoelker has joined #openstack-keystone | 14:56 | |
*** tonytan4ever has quit IRC | 14:59 | |
*** sdake has joined #openstack-keystone | 14:59 | |
*** jed56 has quit IRC | 14:59 | |
*** doug-fish has joined #openstack-keystone | 15:00 | |
*** ngupta has quit IRC | 15:00 | |
*** timcline has joined #openstack-keystone | 15:04 | |
*** rderose has joined #openstack-keystone | 15:09 | |
*** jsavak has quit IRC | 15:09 | |
*** ddieterly is now known as ddieterly[away] | 15:09 | |
*** jaosorior has quit IRC | 15:10 | |
*** jsavak has joined #openstack-keystone | 15:10 | |
*** jaosorior has joined #openstack-keystone | 15:11 | |
*** rk4n has quit IRC | 15:11 | |
*** fawadkhaliq has joined #openstack-keystone | 15:13 | |
*** amrith is now known as _amrith_ | 15:15 | |
notmorgan | stevemar: atom.io is so close to being what i need. couple minor fixes... | 15:19 |
notmorgan | samueldmq: and i think it could be my primary editor. some refactor stuff is not there | 15:19 |
notmorgan | stevemar, not samueldmq | 15:19 |
*** ddieterly[away] is now known as ddieterly | 15:20 | |
*** jed56 has joined #openstack-keystone | 15:24 | |
*** daemontool has joined #openstack-keystone | 15:30 | |
notmorgan | samueldmq, dstanek, ayoung, bknudson: https://review.openstack.org/#/c/319629/ lets land this if we're going to consolidate code. | 15:31 |
patchbot | notmorgan: patch 319629 - keystone - Isolate common ldap code to the identity backend | 15:31 |
ayoung | notmorgan, let me give it a quick once through, but it should be ok. Are you OK with LDAP stuff being harder to backport as a result? | 15:32 |
*** lhcheng has joined #openstack-keystone | 15:33 | |
*** ChanServ sets mode: +v lhcheng | 15:33 | |
notmorgan | ayoung: yes. | 15:34 |
notmorgan | ayoung: i fully expect very little backporting of the ldap stuff | 15:34 |
ayoung | notmorgan, should be OK | 15:34 |
notmorgan | ayoung: there just isn't a lot of reasons to backport ldap code. | 15:34 |
ayoung | notmorgan, just that stuff falls no my shoulders.... | 15:35 |
*** adelia has joined #openstack-keystone | 15:35 | |
notmorgan | ayoung: we already have massive issues backporting ldap cause removal of assignment, etc etc etc | 15:35 |
ayoung | yep | 15:35 |
*** timcline has quit IRC | 15:35 | |
*** henrynash has joined #openstack-keystone | 15:35 | |
*** ChanServ sets mode: +v henrynash | 15:35 | |
notmorgan | mostly i am pinging people early on this one, because i am not going to maintain the rebase hell on this type of code shuffle. | 15:35 |
notmorgan | it's just too much code being moved to rebase over and over. | 15:36 |
notmorgan | the smaller improvements to ldap will be easy to rebase comparitively | 15:36 |
*** ngupta has joined #openstack-keystone | 15:36 | |
*** belmoreira has quit IRC | 15:39 | |
ayoung | git review -d 319629 | 15:39 |
ayoung | git checkout HEAD~1 keystone/common/ldap/core.py | 15:39 |
ayoung | diff keystone/common/ldap/core.py keystone/identity/backends/ldap/common.py | 15:40 |
ayoung | No output | 15:40 |
ayoung | I can +2 that | 15:40 |
*** edtubill has joined #openstack-keystone | 15:42 | |
ayoung | notmorgan, +2A | 15:42 |
*** rk4n has joined #openstack-keystone | 15:45 | |
*** rk4n has quit IRC | 15:46 | |
*** rk4n has joined #openstack-keystone | 15:46 | |
*** TxGVNN has quit IRC | 15:47 | |
*** dmk0202 has quit IRC | 15:47 | |
*** tonytan4ever has joined #openstack-keystone | 15:48 | |
*** ngupta has quit IRC | 15:52 | |
ayoung | rodrigods, only https://review.openstack.org/#/c/302299/16/keystone_tempest_plugin/tests/api/identity/v3/test_identity_providers.py is at all complicated. Otherwise a trivial patch | 15:53 |
patchbot | ayoung: patch 302299 - keystone - Add identity providers integration tests | 15:53 |
rodrigods | ayoung, yeah, but are just direct API tests | 15:53 |
rodrigods | just to make sure the IdPClient works | 15:53 |
ayoung | rodrigods, what is with idempotent id? | 15:54 |
rodrigods | ayoung, something to make sure a test has a unique way to be identified | 15:54 |
rodrigods | this is a tempest thing | 15:54 |
ayoung | rodrigods, ? | 15:54 |
ayoung | OK | 15:55 |
rodrigods | ayoung, http://docs.openstack.org/developer/tempest/HACKING.html#test-identification-with-idempotent-id | 15:55 |
ayoung | rodrigods, joy | 15:55 |
ayoung | rodrigods, the rest is trivial. +2 | 15:56 |
rodrigods | ayoung, ++ | 15:56 |
rodrigods | have a 4 patch chain (testing all federated api clients) | 15:56 |
rodrigods | landing the first is the big step, since it has some boiler plating | 15:56 |
*** mou has joined #openstack-keystone | 15:59 | |
*** ngupta has joined #openstack-keystone | 16:00 | |
notmorgan | ayoung: i fixed the caching for https://review.openstack.org/#/c/311652/ looks like the ksm 4.5.0 error broke CI for it | 16:04 |
patchbot | notmorgan: patch 311652 - keystone - Replace revoke tree with linear search | 16:04 |
ayoung | notmorgan, too many tests are failing there. Suspect that it is not fixed yet | 16:04 |
notmorgan | ayoung: there is a minor change i'd prefer to make long term on caching the event - but that would be to eliminate the datetime->str->datetime | 16:04 |
notmorgan | ayoung: i just rechecked this morning | 16:05 |
ayoung | notmorgan, I'd be OK with that fix | 16:05 |
notmorgan | ayoung: after the 4.5.0 blacklist went in | 16:05 |
ayoung | notmorgan, I would say a recheck would work if only one of the tasks failed | 16:05 |
ayoung | ah | 16:05 |
ayoung | cool...lets see.. | 16:05 |
notmorgan | yeah basically ksm was raising AttributeError on invalid tokens cached | 16:05 |
notmorgan | breaking lots of things | 16:05 |
*** rcernin has quit IRC | 16:14 | |
*** roxanagh_ has joined #openstack-keystone | 16:17 | |
*** gyee has joined #openstack-keystone | 16:20 | |
*** ChanServ sets mode: +v gyee | 16:20 | |
*** ddieterly is now known as ddieterly[away] | 16:21 | |
*** roxanagh_ has quit IRC | 16:22 | |
adelia | is there a way to configure the oslopolicy-checker access token to check the access a user has to a project they are not a member of? | 16:27 |
*** pnavarro has quit IRC | 16:28 | |
notmorgan | adelia: what are you trying to accomplish | 16:28 |
notmorgan | adelia: will help us answer your question. | 16:28 |
adelia | I am trying to make sure my cloud_admin can perform actions in projects he is not explicitly added ot | 16:28 |
*** jaugustine has quit IRC | 16:28 | |
notmorgan | adelia: going to defer to ayoung and henrynash here | 16:29 |
notmorgan | adelia: but i know ayoung is in a meeting, so might take him a bit to respond. | 16:29 |
adelia | no prob, thank you | 16:29 |
*** ddieterly[away] is now known as ddieterly | 16:29 | |
henrynash | adelia: yep, ayoung is your guy for this…. | 16:32 |
*** raddaoui has joined #openstack-keystone | 16:32 | |
*** jsavak has quit IRC | 16:33 | |
*** jsavak has joined #openstack-keystone | 16:33 | |
samueldmq | notmorgan: ayoung: re patch 311652 | 16:35 |
patchbot | samueldmq: https://review.openstack.org/#/c/311652/ - keystone - Replace revoke tree with linear search | 16:36 |
*** timcline has joined #openstack-keystone | 16:36 | |
samueldmq | testing that on both keystone and tempest gates has had good results, no race condition showed up so far (1 run + 2 rechecks) | 16:37 |
samueldmq | I just need to have it passing again so I can continue testing | 16:37 |
*** charz has joined #openstack-keystone | 16:37 | |
samueldmq | when are we going to have keystonemiddleware 4.5.1? | 16:38 |
*** setuid has left #openstack-keystone | 16:38 | |
*** rk4n has quit IRC | 16:39 | |
*** timcline has quit IRC | 16:40 | |
notmorgan | samueldmq: now. | 16:42 |
notmorgan | samueldmq: and we now have ~4 failures or so | 16:42 |
notmorgan | which are probably real issues | 16:43 |
*** hugokuo has joined #openstack-keystone | 16:43 | |
*** timburke has joined #openstack-keystone | 16:44 | |
*** rcernin has joined #openstack-keystone | 16:46 | |
*** rk4n has joined #openstack-keystone | 16:48 | |
openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/319882 | 16:51 |
*** jaosorior has quit IRC | 16:55 | |
*** ddieterly is now known as ddieterly[away] | 16:56 | |
*** tonytan4ever has quit IRC | 16:56 | |
*** aurelien__ has quit IRC | 16:58 | |
*** jsavak has quit IRC | 16:59 | |
*** jsavak has joined #openstack-keystone | 17:00 | |
ayoung | samueldmq, was that with or without caching? | 17:03 |
ayoung | adelia, get a token for cloud_admin and try openstack server list | 17:04 |
ayoung | or flavor list | 17:04 |
*** chrisshattuck has joined #openstack-keystone | 17:05 | |
openstackgerrit | Merged openstack/keystone: Isolate common ldap code to the identity backend https://review.openstack.org/319629 | 17:10 |
*** alexander__ is now known as amakarov | 17:10 | |
*** adu has quit IRC | 17:11 | |
*** sdake has quit IRC | 17:15 | |
notmorgan | ayoung: the race looks solve both ways | 17:16 |
ayoung | notmorgan, ship it! | 17:16 |
notmorgan | ayoung: gotta fix the other issues first. :P | 17:16 |
*** rk4n has quit IRC | 17:16 | |
notmorgan | ayoung: these don't look to be racy, more just legit issues. | 17:16 |
*** sdake has joined #openstack-keystone | 17:17 | |
*** roxanagh_ has joined #openstack-keystone | 17:18 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements https://review.openstack.org/314284 | 17:19 |
ayoung | notmorgan, its happening in teardown | 17:19 |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/317007 | 17:19 |
openstackgerrit | Ron De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements https://review.openstack.org/314284 | 17:20 |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/317007 | 17:21 |
ayoung | http://git.openstack.org/cgit/openstack/tempest/tree/tempest/test.py#n551 | 17:21 |
ayoung | which calls | 17:21 |
*** sdake has quit IRC | 17:22 | |
*** ddieterly[away] is now known as ddieterly | 17:22 | |
adelia | ayoung: flavor list isn't working for unrelated reasons, but the server list is controlled by a specific rule. I can go through and test each api separately, but I was just trying to see if there was a shortcut | 17:22 |
*** roxanagh_ has quit IRC | 17:23 | |
ayoung | adelia, nope, no short cuts. Keystone does not manage policy for the other services, so what they do is up to them. You can use the Policy CLI to make it go faster | 17:23 |
ayoung | but you need the policy file | 17:23 |
*** harlowja has joined #openstack-keystone | 17:24 | |
adelia | ayoung: bummer. so no way to specify projects in the access token then? | 17:26 |
ayoung | adelia I thought there was... | 17:28 |
*** tqtran has joined #openstack-keystone | 17:30 | |
*** ddieterly is now known as ddieterly[away] | 17:31 | |
ayoung | adelia, I guess not. The project ID does not come from a consistent location in the resource. Its kind of a problem elsewhere, too | 17:31 |
*** jsavak has quit IRC | 17:31 | |
*** jsavak has joined #openstack-keystone | 17:33 | |
*** timcline has joined #openstack-keystone | 17:37 | |
*** timcline has quit IRC | 17:41 | |
*** spzala has quit IRC | 17:44 | |
*** spzala has joined #openstack-keystone | 17:45 | |
*** spzala has quit IRC | 17:50 | |
*** jsavak has quit IRC | 17:50 | |
*** pushkaru has quit IRC | 17:51 | |
*** jsavak has joined #openstack-keystone | 17:51 | |
*** chrisshattuck has quit IRC | 17:52 | |
*** chrisshattuck has joined #openstack-keystone | 17:52 | |
*** tonytan4ever has joined #openstack-keystone | 17:54 | |
*** tonytan4ever has quit IRC | 17:55 | |
*** browne has joined #openstack-keystone | 17:58 | |
*** stingaci has joined #openstack-keystone | 18:04 | |
*** tonytan4ever has joined #openstack-keystone | 18:05 | |
*** timcline has joined #openstack-keystone | 18:05 | |
*** timcline has quit IRC | 18:10 | |
*** ig0r_ has joined #openstack-keystone | 18:15 | |
*** doug-fis_ has joined #openstack-keystone | 18:16 | |
*** doug-fis_ has quit IRC | 18:16 | |
*** doug-fis_ has joined #openstack-keystone | 18:16 | |
*** roxanagh_ has joined #openstack-keystone | 18:19 | |
*** doug-fish has quit IRC | 18:19 | |
SamYaple | I ahve a question about the cache section of the keystone.conf Is section used at all when using fernet tokens? just for revocations perhaps? | 18:20 |
*** ddieterly[away] is now known as ddieterly | 18:21 | |
*** roxanagh_ has quit IRC | 18:23 | |
*** fawadkhaliq has quit IRC | 18:28 | |
*** agrebennikov has joined #openstack-keystone | 18:30 | |
*** agrebennikov has quit IRC | 18:30 | |
*** agrebennikov has joined #openstack-keystone | 18:30 | |
*** adu has joined #openstack-keystone | 18:31 | |
*** mou has quit IRC | 18:32 | |
*** max__ has joined #openstack-keystone | 18:33 | |
*** tonytan4ever has quit IRC | 18:33 | |
*** max__ is now known as Guest66394 | 18:33 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/317007 | 18:34 |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/317007 | 18:35 |
*** ddieterly is now known as ddieterly[away] | 18:36 | |
*** ddieterly[away] is now known as ddieterly | 18:42 | |
*** rk4n has joined #openstack-keystone | 18:45 | |
*** diazjf has joined #openstack-keystone | 18:46 | |
samueldmq | ayoung: as far as I tested, it was without cache | 18:47 |
*** pece has quit IRC | 18:48 | |
ayoung | samueldmq, um, which cache section? | 18:49 |
ayoung | its for all caching | 18:50 |
*** neophy has joined #openstack-keystone | 18:51 | |
*** tonytan4ever has joined #openstack-keystone | 18:52 | |
samueldmq | ayoung: I tested this https://review.openstack.org/#/c/311652/14 | 18:52 |
patchbot | samueldmq: patch 311652 - keystone - Replace revoke tree with linear search | 18:52 |
*** pushkaru has joined #openstack-keystone | 18:52 | |
samueldmq | that simply removes the cache bits | 18:53 |
notmorgan | samueldmq: and i'm -1 on that. | 18:57 |
*** tonytan_brb has joined #openstack-keystone | 18:59 | |
*** tonytan4ever has quit IRC | 19:00 | |
*** doug-fis_ has quit IRC | 19:03 | |
samueldmq | notmorgan: I was okay with that, but if we can make it work with cache, even better! | 19:05 |
samueldmq | notmorgan: I appreciate you're fixing the cache bits in there | 19:06 |
*** timcline has joined #openstack-keystone | 19:06 | |
notmorgan | so the general view i have here is that if we take something and the only way of landing code is to remove caching capabilities from it - we have a bad design | 19:06 |
notmorgan | if it already was cachable | 19:06 |
samueldmq | notmorgan: even if that shows to solve the bug ? | 19:08 |
notmorgan | samueldmq: then we have a bug in the cache that needs to be fixed. | 19:09 |
samueldmq | (I am not sure that solved, just had a few runs) | 19:09 |
samueldmq | notmorgan: agreed | 19:09 |
notmorgan | samueldmq: but if you *cant* solve it with caching on, the design itself is flawed somewhere. | 19:09 |
*** timcline has quit IRC | 19:10 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/317007 | 19:14 |
samueldmq | notmorgan: sure, let's try to fix it with caching enable, I believe we can :) | 19:14 |
*** markvoelker has quit IRC | 19:14 | |
*** markvoelker has joined #openstack-keystone | 19:15 | |
*** ngupta has quit IRC | 19:15 | |
samueldmq | notmorgan: we don't need to be in a hurry anymore, devstack change's been reverted already | 19:15 |
samueldmq | just make sure we make progress and make fernet default again this cycle | 19:16 |
*** jsavak has quit IRC | 19:18 | |
*** tesseract has quit IRC | 19:21 | |
*** jsavak has joined #openstack-keystone | 19:25 | |
*** clenimar has quit IRC | 19:25 | |
bknudson | make fernet great again | 19:27 |
*** daemontool has quit IRC | 19:29 | |
samueldmq | bknudson: ++ | 19:30 |
*** _amrith_ is now known as amrith | 19:31 | |
*** spzala has joined #openstack-keystone | 19:33 | |
*** jsavak has quit IRC | 19:34 | |
*** roxanagh_ has joined #openstack-keystone | 19:34 | |
*** jsavak has joined #openstack-keystone | 19:35 | |
bknudson | do we have a keystone test job that runs with fernet? | 19:36 |
bknudson | the uwsgi one could be changed to fernet. | 19:36 |
*** roxanagh_ has quit IRC | 19:39 | |
*** doug-fish has joined #openstack-keystone | 19:46 | |
*** amrith is now known as _amrith_ | 19:46 | |
*** ddieterly is now known as ddieterly[away] | 19:46 | |
*** jsavak has quit IRC | 19:54 | |
*** ddieterly[away] is now known as ddieterly | 19:55 | |
*** ngupta has joined #openstack-keystone | 19:59 | |
*** ig0r_ has quit IRC | 19:59 | |
*** BjoernT has joined #openstack-keystone | 20:00 | |
*** timcline has joined #openstack-keystone | 20:06 | |
*** darosale has quit IRC | 20:09 | |
*** timcline has quit IRC | 20:11 | |
openstackgerrit | guang-yee proposed openstack/keystonemiddleware: Determine project name from oslo_config or local config https://review.openstack.org/320123 | 20:12 |
*** arunkant has quit IRC | 20:15 | |
*** arunkant has joined #openstack-keystone | 20:18 | |
*** sdake has joined #openstack-keystone | 20:21 | |
*** jsavak has joined #openstack-keystone | 20:23 | |
*** ngupta has quit IRC | 20:30 | |
*** diazjf has quit IRC | 20:31 | |
*** roxanagh_ has joined #openstack-keystone | 20:35 | |
*** shaleh has joined #openstack-keystone | 20:36 | |
*** sdake has quit IRC | 20:37 | |
*** darosale has joined #openstack-keystone | 20:37 | |
openstackgerrit | Merged openstack/keystone: Move identity.backends.sql model code to sql_model.py https://review.openstack.org/292611 | 20:38 |
*** roxanagh_ has quit IRC | 20:40 | |
*** ngupta has joined #openstack-keystone | 20:44 | |
*** _amrith_ is now known as amrith | 20:46 | |
*** sdake has joined #openstack-keystone | 20:47 | |
*** ddieterly is now known as ddieterly[away] | 20:47 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: Config settings to support PCI-DSS https://review.openstack.org/314679 | 20:48 |
*** doug-fis_ has joined #openstack-keystone | 20:49 | |
*** diazjf has joined #openstack-keystone | 20:51 | |
*** sdake_ has joined #openstack-keystone | 20:51 | |
openstackgerrit | werner mendizabal proposed openstack/keystone: Support encryption of credentials in Keystone https://review.openstack.org/317169 | 20:52 |
*** doug-fish has quit IRC | 20:52 | |
*** ddieterly[away] is now known as ddieterly | 20:52 | |
*** doug-fis_ has quit IRC | 20:53 | |
*** sdake has quit IRC | 20:54 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements https://review.openstack.org/314284 | 20:59 |
*** diazjf has quit IRC | 20:59 | |
*** gagehugo has quit IRC | 21:00 | |
*** julim has quit IRC | 21:01 | |
*** amrith is now known as _amrith_ | 21:01 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements https://review.openstack.org/314284 | 21:03 |
*** agireud has quit IRC | 21:04 | |
*** ddieterly is now known as ddieterly[away] | 21:05 | |
*** jsavak has quit IRC | 21:07 | |
*** timcline has joined #openstack-keystone | 21:07 | |
*** agireud has joined #openstack-keystone | 21:09 | |
openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Migrate identity /v3 docs from api-ref repo https://review.openstack.org/320145 | 21:09 |
samueldmq | stevemar: notmorgan: first in the chain ^ | 21:09 |
samueldmq | bknudson: cc ^ | 21:10 |
samueldmq | :) | 21:10 |
*** timcline has quit IRC | 21:12 | |
*** mvk has joined #openstack-keystone | 21:13 | |
openstackgerrit | Merged openstack/keystoneauth: oidc: fix option definition https://review.openstack.org/319810 | 21:18 |
openstackgerrit | Merged openstack/keystoneauth: oidc: fix typo on class name https://review.openstack.org/319763 | 21:18 |
*** tonytan_brb has quit IRC | 21:21 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: Add password table columns to meet PCI-DSS change password requirements https://review.openstack.org/314284 | 21:21 |
*** browne has quit IRC | 21:25 | |
*** adu has quit IRC | 21:27 | |
*** ddieterly[away] is now known as ddieterly | 21:27 | |
*** spzala has quit IRC | 21:27 | |
*** spzala has joined #openstack-keystone | 21:28 | |
*** rk4n has quit IRC | 21:29 | |
*** neophy has quit IRC | 21:31 | |
*** spzala has quit IRC | 21:32 | |
*** edmondsw has quit IRC | 21:34 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/320156 | 21:34 |
*** henrynash has quit IRC | 21:35 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/320156 | 21:35 |
*** daemontool has joined #openstack-keystone | 21:36 | |
notmorgan | /query shaleh | 21:37 |
notmorgan | ugh... | 21:37 |
bknudson | shaleh is not a robot! | 21:37 |
bknudson | (as far as I know) | 21:38 |
shaleh | bknudson: what makes you say shaleh is not a robot? | 21:38 |
bknudson | ok, now I think you are a robot. | 21:39 |
*** pauloewerton has quit IRC | 21:40 | |
*** edtubill has quit IRC | 21:43 | |
*** adelia has quit IRC | 21:45 | |
*** sheel has quit IRC | 21:45 | |
*** pushkaru has quit IRC | 21:48 | |
notmorgan | bknudson: shaleh might be a very good turing test | 21:48 |
openstackgerrit | Sean Perry proposed openstack/keystone-specs: Cleanup 'implied roles' section of Identity API V3 spec https://review.openstack.org/298925 | 21:49 |
*** rk4n has joined #openstack-keystone | 21:50 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/320156 | 21:54 |
openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow LDAP and custom driver users https://review.openstack.org/305487 | 21:55 |
*** browne has joined #openstack-keystone | 21:57 | |
*** darosale has quit IRC | 21:58 | |
*** BjoernT has quit IRC | 21:58 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/320156 | 22:07 |
*** timcline has joined #openstack-keystone | 22:08 | |
*** phalmos has quit IRC | 22:08 | |
openstackgerrit | guang-yee proposed openstack/keystone: Added X-Forwarding-For support. https://review.openstack.org/309038 | 22:11 |
*** timcline has quit IRC | 22:13 | |
jamielennox | gyee: does https://github.com/openstack/oslo.middleware/blob/master/oslo_middleware/http_proxy_to_wsgi.py handle that? | 22:15 |
gyee | jamielennox, it doesn't replace REMOTE_ADDR I think | 22:17 |
gyee | that's what ends up in the log | 22:17 |
jamielennox | can it/should it? | 22:17 |
gyee | it should, if we are standardizing on oslo.middleware | 22:17 |
jamielennox | gyee: ++ i would like to deprecate our x-forwarded-proto handling to that | 22:18 |
jamielennox | because it handles the newer protocols for everyone | 22:18 |
notmorgan | dstanek: i now dub you stanke due to a typo when i was talking w/ jamielennox :P | 22:18 |
gyee | you mean enable oslo.middleware by default and remove our code? | 22:18 |
gyee | I am down with that | 22:18 |
jamielennox | gyee: ++ | 22:19 |
jamielennox | ok - coffee | 22:20 |
*** pushkaru has joined #openstack-keystone | 22:21 | |
*** daemontool_ has joined #openstack-keystone | 22:21 | |
*** daemontool has quit IRC | 22:22 | |
*** roxanagh_ has joined #openstack-keystone | 22:23 | |
*** tonytan4ever has joined #openstack-keystone | 22:25 | |
*** roxanagh_ has quit IRC | 22:28 | |
*** spzala has joined #openstack-keystone | 22:28 | |
*** adu has joined #openstack-keystone | 22:29 | |
*** ddieterly is now known as ddieterly[away] | 22:29 | |
openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS 8.2.4: User must change their password requirements https://review.openstack.org/320156 | 22:32 |
*** ddieterly[away] is now known as ddieterly | 22:34 | |
*** daemontool_ has quit IRC | 22:34 | |
*** diazjf has joined #openstack-keystone | 22:35 | |
*** adu has quit IRC | 22:35 | |
*** spzala has quit IRC | 22:37 | |
*** diazjf has quit IRC | 22:37 | |
*** spzala has joined #openstack-keystone | 22:37 | |
*** spzala has quit IRC | 22:41 | |
*** spzala has joined #openstack-keystone | 22:41 | |
*** darrenc_ has joined #openstack-keystone | 22:46 | |
*** dobson` has joined #openstack-keystone | 22:47 | |
*** tonyb_ has joined #openstack-keystone | 22:48 | |
*** BlackDex_ has joined #openstack-keystone | 22:49 | |
*** Dave____ has joined #openstack-keystone | 22:49 | |
*** skoude_ has joined #openstack-keystone | 22:49 | |
*** jhesketh_ has joined #openstack-keystone | 22:49 | |
*** dstanek_ has joined #openstack-keystone | 22:51 | |
*** lbragstad_ has joined #openstack-keystone | 22:51 | |
*** dolphm_ has joined #openstack-keystone | 22:51 | |
*** ChanServ sets mode: +o dolphm_ | 22:51 | |
*** odyssey4me_ has joined #openstack-keystone | 22:51 | |
*** dutsmoc has joined #openstack-keystone | 22:51 | |
*** tlbr_ has joined #openstack-keystone | 22:51 | |
*** afazekas_ has joined #openstack-keystone | 22:52 | |
*** dtroyer_zz has joined #openstack-keystone | 22:52 | |
*** _d34dh0r53_ has joined #openstack-keystone | 22:52 | |
*** rm_work| has joined #openstack-keystone | 22:52 | |
*** zigo_ has joined #openstack-keystone | 22:52 | |
*** dave-mccowan has quit IRC | 22:52 | |
*** mvk has quit IRC | 22:53 | |
*** rcernin has quit IRC | 22:53 | |
*** d0ugal has quit IRC | 22:53 | |
*** eglute has quit IRC | 22:53 | |
*** d34dh0r53 has quit IRC | 22:53 | |
*** briancurtin has quit IRC | 22:53 | |
*** josecastroleon has quit IRC | 22:53 | |
*** Dave has quit IRC | 22:53 | |
*** andrewbogott has quit IRC | 22:53 | |
*** skoude has quit IRC | 22:53 | |
*** rm_work has quit IRC | 22:53 | |
*** odyssey4me has quit IRC | 22:53 | |
*** lbragstad has quit IRC | 22:53 | |
*** samueldmq has quit IRC | 22:53 | |
*** comstud has quit IRC | 22:53 | |
*** dobson has quit IRC | 22:53 | |
*** tonyb has quit IRC | 22:53 | |
*** jhesketh has quit IRC | 22:53 | |
*** mjb has quit IRC | 22:53 | |
*** darrenc has quit IRC | 22:53 | |
*** knikolla has quit IRC | 22:53 | |
*** zigo has quit IRC | 22:53 | |
*** dolphm has quit IRC | 22:53 | |
*** afazekas has quit IRC | 22:53 | |
*** gus has quit IRC | 22:53 | |
*** tlbr has quit IRC | 22:53 | |
*** BlackDex has quit IRC | 22:53 | |
*** dtroyer has quit IRC | 22:53 | |
*** dstanek has quit IRC | 22:53 | |
*** stian_ has quit IRC | 22:53 | |
*** dstanek_ is now known as dstanek | 22:53 | |
*** rm_work| is now known as rm_work | 22:53 | |
*** ddieterly is now known as ddieterly[away] | 22:53 | |
*** dolphm_ is now known as dolphm | 22:53 | |
*** mjb has joined #openstack-keystone | 22:53 | |
*** ChanServ sets mode: +v dstanek | 22:54 | |
*** rm_work has quit IRC | 22:54 | |
*** rm_work has joined #openstack-keystone | 22:54 | |
*** knikolla has joined #openstack-keystone | 22:54 | |
*** eglute has joined #openstack-keystone | 22:55 | |
*** doug-fish has joined #openstack-keystone | 22:57 | |
*** doug-fish has quit IRC | 22:57 | |
*** gus has joined #openstack-keystone | 22:58 | |
*** spzala has quit IRC | 22:58 | |
*** chlong has joined #openstack-keystone | 22:58 | |
*** ddieterly[away] has quit IRC | 22:59 | |
*** darrenc_ is now known as darrenc | 23:01 | |
*** tonytan4ever has quit IRC | 23:06 | |
*** timcline has joined #openstack-keystone | 23:09 | |
*** dave-mccowan has joined #openstack-keystone | 23:10 | |
*** ametts has quit IRC | 23:10 | |
*** dave-mcc_ has joined #openstack-keystone | 23:12 | |
*** timcline has quit IRC | 23:13 | |
*** adu has joined #openstack-keystone | 23:15 | |
*** rk4n has quit IRC | 23:15 | |
*** dave-mccowan has quit IRC | 23:16 | |
*** rderose has quit IRC | 23:16 | |
*** raddaoui has quit IRC | 23:17 | |
*** furface has quit IRC | 23:20 | |
*** ddieterly has joined #openstack-keystone | 23:30 | |
*** lbragstad_ is now known as lbragstad | 23:33 | |
*** stian_ has joined #openstack-keystone | 23:38 | |
*** pushkaru has quit IRC | 23:38 | |
*** pushkaru has joined #openstack-keystone | 23:38 | |
*** mvk has joined #openstack-keystone | 23:38 | |
*** adu has quit IRC | 23:38 | |
*** briancurtin has joined #openstack-keystone | 23:39 | |
*** pushkaru has quit IRC | 23:40 | |
*** pushkaru has joined #openstack-keystone | 23:40 | |
*** tonyb_ is now known as tonyb | 23:43 | |
*** chrisshattuck has quit IRC | 23:43 | |
*** pushkaru has quit IRC | 23:44 | |
*** ddieterly has quit IRC | 23:51 | |
*** iurygregory has quit IRC | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!