| *** nkinder has quit IRC | 00:02 | |
| *** roxanagh_ has quit IRC | 00:03 | |
| *** BjoernT has joined #openstack-keystone | 00:07 | |
| *** sdake has joined #openstack-keystone | 00:08 | |
| *** BjoernT has quit IRC | 00:09 | |
| *** iurygregory_ has joined #openstack-keystone | 00:11 | |
| *** ddieterly has joined #openstack-keystone | 00:16 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth: Allow prompting for password when CLI loading https://review.openstack.org/248524 | 00:21 |
|---|---|---|
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth: Add prompt parameter to Opt https://review.openstack.org/338614 | 00:21 |
| *** timcline has joined #openstack-keystone | 00:26 | |
| *** roxanagh_ has joined #openstack-keystone | 00:28 | |
| *** timcline has quit IRC | 00:31 | |
| *** ddieterly is now known as ddieterly[away] | 00:37 | |
| *** ddieterly[away] has quit IRC | 00:38 | |
| *** ddieterly has joined #openstack-keystone | 00:39 | |
| *** ddieterly has quit IRC | 00:41 | |
| *** david-lyle has quit IRC | 00:42 | |
| *** david-lyle__ has joined #openstack-keystone | 00:45 | |
| *** david-lyle__ has quit IRC | 00:45 | |
| *** sdake has quit IRC | 00:49 | |
| *** ddieterly has joined #openstack-keystone | 00:55 | |
| *** tqtran has quit IRC | 01:07 | |
| *** timcline has joined #openstack-keystone | 01:20 | |
| *** code-R has quit IRC | 01:21 | |
| *** code-R_ has joined #openstack-keystone | 01:21 | |
| *** EinstCrazy has joined #openstack-keystone | 01:22 | |
| *** kean has joined #openstack-keystone | 01:22 | |
| *** timcline has quit IRC | 01:25 | |
| *** code-R_ has quit IRC | 01:29 | |
| *** code-R has joined #openstack-keystone | 01:36 | |
| *** wangqun has joined #openstack-keystone | 01:38 | |
| *** aastha has quit IRC | 01:39 | |
| *** tonytan4ever has quit IRC | 01:41 | |
| stevemar | oh hai jamielennox and notmorgan | 01:43 |
| stevemar | dolphm: thank you for doing bug triaging <3 | 01:47 |
| *** sdake has joined #openstack-keystone | 01:50 | |
| *** ddieterly has quit IRC | 01:50 | |
| *** ddieterly has joined #openstack-keystone | 01:57 | |
| mordred | notmorgan, stevemar, jamielennox: I do not have a strong opinion. I think prompting for password while using a thing is a terrible user experience and that we should pretty much never do it. HOWEVER, as long as it doesn't all of a sudden cause prompting to get injected into something where it wasn't happening before, I'm not all the way -2 on it | 02:00 |
| *** ddieterly has quit IRC | 02:01 | |
| mordred | (I think it's a bad idea generally because reacting to password=None by prompting makes using presence or absence of parameters to figure out which auth plugin should be used, or to validate that required parameters have been provided and give useful error messages much much harder | 02:01 |
| mordred | since you have no way of knowing if password is missing becaue the user wants for some reason to _type_ the password in on a prompt | 02:01 |
| mordred | or if the password is missing because of a mistake on the user's part, like in a script or something | 02:01 |
| *** spzala has joined #openstack-keystone | 02:02 | |
| mordred | so the user would likely get a weird error from their stript like "cannot read stdin from a tty" when it should be saying "required parameter password missing" | 02:02 |
| mordred | BUT ... as jamielennox says, this is a cat that's out of the bag and exists in our ecosystem already | 02:03 |
| mordred | (sorry for spamming with thinking out loud) | 02:04 |
| *** TxGVNN has joined #openstack-keystone | 02:05 | |
| *** julim has joined #openstack-keystone | 02:05 | |
| stevemar | mordred: your spamming is welcomed | 02:09 |
| *** browne has quit IRC | 02:10 | |
| * mordred hands everyone some toast to go with the spam | 02:11 | |
| *** timcline has joined #openstack-keystone | 02:15 | |
| jamielennox | so i've definitely isolated it to just the keystoneauth cli loading - which os-c-c replicated | 02:17 |
| jamielennox | my feeling is that we should never be guessing what auth_type you want based on params, i hate that | 02:17 |
| jamielennox | OSC can provide a default plugin that is used with all the params it wants and do something consistent with them, but trawling the available plugins to figure out what's available is terrible | 02:18 |
| jamielennox | i agree that it's tough to know the difference between the user actually wanting to provide no password - maybe we should be marking required=True on all these password options as well and only prompt when required& prompt - but that would be a decision for os-c-c | 02:19 |
| jamielennox | or OSC? i'm not sure who is handling that | 02:19 |
| *** timcline has quit IRC | 02:19 | |
| *** tonytan4ever has joined #openstack-keystone | 02:42 | |
| *** chrisshattuck has joined #openstack-keystone | 02:47 | |
| *** tonytan4ever has quit IRC | 02:47 | |
| *** spzala has quit IRC | 02:48 | |
| openstackgerrit | Bin Zhou proposed openstack/keystone: Correct reraising of exception https://review.openstack.org/338660 | 02:50 |
| mordred | jamielennox: I'm starting to have some thoughts ... | 02:52 |
| mordred | jamielennox: but it's bedtime - I'll try to communicate them after I've slept on them | 02:52 |
| jamielennox | this has rarely ended well | 02:52 |
| jamielennox | :) - yea no worries not a rush | 02:53 |
| mordred | :) | 02:53 |
| openstackgerrit | Andrew Liu proposed openstack/keystone: Added cache for id mapping manager https://review.openstack.org/328820 | 02:53 |
| *** browne has joined #openstack-keystone | 02:54 | |
| *** Nakato has quit IRC | 02:57 | |
| *** woodster_ has quit IRC | 02:59 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Remove get_auth_context https://review.openstack.org/338667 | 03:01 |
| *** Nakato has joined #openstack-keystone | 03:03 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Remove get_auth_context https://review.openstack.org/338667 | 03:14 |
| *** diazjf has joined #openstack-keystone | 03:16 | |
| *** diazjf has quit IRC | 03:20 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Add is_admin property to request https://review.openstack.org/338674 | 03:23 |
| *** tonytan4ever has joined #openstack-keystone | 03:27 | |
| *** richm has quit IRC | 03:29 | |
| *** shaleh has quit IRC | 03:34 | |
| *** chrisshattuck has quit IRC | 03:37 | |
| *** roxanagh_ has quit IRC | 03:37 | |
| *** jamielennox is now known as jamielennox|away | 03:43 | |
| *** nkinder has joined #openstack-keystone | 03:47 | |
| *** sdake has quit IRC | 03:48 | |
| *** code-R_ has joined #openstack-keystone | 03:49 | |
| *** iurygregory_ has quit IRC | 03:49 | |
| *** code-R has quit IRC | 03:51 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Remove last parts of query_string from context https://review.openstack.org/337014 | 03:53 |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Pass request to build_driver_hints https://review.openstack.org/336980 | 03:53 |
| *** jamielennox|away is now known as jamielennox | 03:56 | |
| *** roxanagh_ has joined #openstack-keystone | 03:57 | |
| *** chrisshattuck has joined #openstack-keystone | 03:58 | |
| *** browne has quit IRC | 04:01 | |
| *** nkinder has quit IRC | 04:02 | |
| *** links has joined #openstack-keystone | 04:03 | |
| *** tqtran has joined #openstack-keystone | 04:06 | |
| *** chrisshattuck has quit IRC | 04:09 | |
| *** chrisshattuck has joined #openstack-keystone | 04:09 | |
| *** sheel has joined #openstack-keystone | 04:09 | |
| *** tqtran has quit IRC | 04:11 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Remove the _is_v2 and _is_v3 helpers https://review.openstack.org/338686 | 04:21 |
| *** sdake has joined #openstack-keystone | 04:32 | |
| *** jamielennox is now known as jamielennox|away | 04:35 | |
| *** jamielennox|away is now known as jamielennox | 04:42 | |
| *** tonytan4ever has quit IRC | 04:44 | |
| *** spzala has joined #openstack-keystone | 04:49 | |
| *** sdake has quit IRC | 04:51 | |
| *** spzala has quit IRC | 04:54 | |
| *** sdake has joined #openstack-keystone | 04:54 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Use request object in policy enforcement https://review.openstack.org/338693 | 05:09 |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Remove get_auth_context https://review.openstack.org/338667 | 05:12 |
| *** chrisshattuck has quit IRC | 05:20 | |
| *** chrisshattuck has joined #openstack-keystone | 05:21 | |
| *** sdake has quit IRC | 05:26 | |
| *** M00nr41n has joined #openstack-keystone | 05:37 | |
| *** chrisshattuck has quit IRC | 05:41 | |
| *** nk2527 has quit IRC | 05:47 | |
| *** danpawlik has quit IRC | 06:06 | |
| *** danpawlik has joined #openstack-keystone | 06:07 | |
| *** sdake has joined #openstack-keystone | 06:10 | |
| *** tonytan4ever has joined #openstack-keystone | 06:14 | |
| *** rcernin has joined #openstack-keystone | 06:18 | |
| *** sdake has quit IRC | 06:19 | |
| *** sdake has joined #openstack-keystone | 06:19 | |
| *** tonytan4ever has quit IRC | 06:20 | |
| *** sdake has quit IRC | 06:29 | |
| openstackgerrit | Roxana Gherle proposed openstack/keystone: Fix the username value in federated tokens https://review.openstack.org/335617 | 06:29 |
| *** tqtran has joined #openstack-keystone | 06:30 | |
| *** tqtran has quit IRC | 06:34 | |
| openstackgerrit | Roxana Gherle proposed openstack/keystone: Not ready for reviews:Fix the username value in federated tokens https://review.openstack.org/335617 | 06:35 |
| *** roxanagh_ has quit IRC | 06:36 | |
| *** sdake has joined #openstack-keystone | 06:39 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Use AccessInfo in UserAuthPlugin instead of custom https://review.openstack.org/338714 | 06:44 |
| *** jed56 has joined #openstack-keystone | 06:48 | |
| *** sdake has quit IRC | 06:55 | |
| *** tesseract- has joined #openstack-keystone | 07:03 | |
| *** code-R has joined #openstack-keystone | 07:07 | |
| *** code-R_ has quit IRC | 07:07 | |
| *** pnavarro has joined #openstack-keystone | 07:20 | |
| *** rvba has joined #openstack-keystone | 07:21 | |
| *** rvba has quit IRC | 07:21 | |
| *** rvba has joined #openstack-keystone | 07:21 | |
| *** code-R has quit IRC | 07:24 | |
| *** amoralej|off is now known as amoralej | 07:29 | |
| *** roxanagh_ has joined #openstack-keystone | 07:37 | |
| henrynash_ | jamielennox: hi | 07:38 |
| *** pnavarro has quit IRC | 07:40 | |
| *** pnavarro has joined #openstack-keystone | 07:40 | |
| *** roxanagh_ has quit IRC | 07:41 | |
| *** jpena|off is now known as jpena | 07:46 | |
| *** nisha has joined #openstack-keystone | 07:49 | |
| *** nisha is now known as Guest79606 | 07:49 | |
| *** spzala has joined #openstack-keystone | 07:49 | |
| *** spzala has quit IRC | 07:53 | |
| *** mvk has joined #openstack-keystone | 07:57 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** jrist has quit IRC | 08:07 | |
| *** Guest79606 has quit IRC | 08:08 | |
| *** nisha_ has joined #openstack-keystone | 08:09 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 08:10 |
| *** tonytan4ever has joined #openstack-keystone | 08:15 | |
| *** openstackgerrit has quit IRC | 08:18 | |
| *** openstackgerrit has joined #openstack-keystone | 08:18 | |
| *** tonytan4ever has quit IRC | 08:20 | |
| *** pcaruana has joined #openstack-keystone | 08:30 | |
| *** pnavarro has quit IRC | 08:42 | |
| breton | rodrigods: | 08:57 |
| *** jrist has joined #openstack-keystone | 09:00 | |
| *** jrist has quit IRC | 09:00 | |
| *** jrist has joined #openstack-keystone | 09:00 | |
| jamielennox | henrynash_: hey | 09:03 |
| henrynash_ | jamielennox: hi. | 09:07 |
| henrynash_ | jamielennox: let me find my quetsion…hold on | 09:07 |
| henrynash_ | jamielennox: ag yes, so in : https://review.openstack.org/#/c/337014/2/keystone/common/request.py | 09:08 |
| patchbot | henrynash_: patch 337014 - keystone - Remove last parts of query_string from context | 09:08 |
| henrynash_ | jamielennox: my question was why we need to use mixed() rather than items() | 09:08 |
| jamielennox | henrynash_: oh, um, no reason particularly | 09:09 |
| jamielennox | params is not a real dict, it's a webob multidict or something | 09:09 |
| jamielennox | so i was just browsing the code looking for something that iterated all the params and saw that | 09:09 |
| jamielennox | list() would have been on a subclass, but would work just as well | 09:09 |
| henrynash_ | jamielennox: ah, so dict(of items) is eqivilent to the multidict retruned by mixed() | 09:10 |
| henrynash_ | ? | 09:10 |
| jamielennox | https://github.com/Pylons/webob/blob/master/webob/multidict.py#L132 | 09:11 |
| jamielennox | yea, it just mashes together cases where there are two params | 09:11 |
| jamielennox | but even looking at that it does self.items() so that would work as well | 09:11 |
| henrynash_ | it just wasn’t clear to me whether there was an subtelty in the change to mixed (and clearly mixed() does morea thn just dict(items)) | 09:13 |
| openstackgerrit | jingtao liang proposed openstack/pycadf: Fix order of arguments in assertEqual https://review.openstack.org/338781 | 09:15 |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Remove last parts of query_string from context https://review.openstack.org/337014 | 09:18 |
| jamielennox | henrynash_: that should fix it ^ | 09:18 |
| henrynash_ | jamielennox: yep! | 09:18 |
| *** roxanagh_ has joined #openstack-keystone | 09:20 | |
| *** roxanagh_ has quit IRC | 09:24 | |
| henrynash_ | jammielennox: (henry in predantic mode today)…so this is also slight different than before (i.e. using mixed where we used to do dict(items): https://review.openstack.org/#/c/337014/2/keystone/tests/unit/test_wsgi.py | 09:31 |
| patchbot | henrynash_: patch 337014 - keystone - Remove last parts of query_string from context | 09:31 |
| *** tonytan4ever has joined #openstack-keystone | 09:31 | |
| jamielennox | henrynash_: oh, damn, yea, won't make much difference but it should be consistent | 09:32 |
| *** tonytan4ever has quit IRC | 09:35 | |
| *** pnavarro has joined #openstack-keystone | 09:41 | |
| *** nisha_ has quit IRC | 09:45 | |
| *** nisha_ has joined #openstack-keystone | 09:45 | |
| *** bjornar_ has joined #openstack-keystone | 09:46 | |
| *** nisha__ has joined #openstack-keystone | 09:48 | |
| *** nisha_ has quit IRC | 09:50 | |
| *** nisha has joined #openstack-keystone | 09:54 | |
| *** nisha is now known as Guest77657 | 09:54 | |
| *** nisha__ has quit IRC | 09:57 | |
| *** daemontool has joined #openstack-keystone | 10:07 | |
| *** EinstCrazy has quit IRC | 10:11 | |
| *** Guest77657 has quit IRC | 10:14 | |
| *** nisha_ has joined #openstack-keystone | 10:15 | |
| *** nisha_ has quit IRC | 10:20 | |
| *** wangqun has quit IRC | 10:23 | |
| *** tqtran has joined #openstack-keystone | 10:32 | |
| *** nisha_ has joined #openstack-keystone | 10:35 | |
| *** rodrigods has quit IRC | 10:36 | |
| *** rodrigods has joined #openstack-keystone | 10:36 | |
| *** tqtran has quit IRC | 10:37 | |
| rodrigods | breton, hey | 10:42 |
| *** nisha_ has quit IRC | 10:54 | |
| *** nisha has joined #openstack-keystone | 10:54 | |
| *** nisha is now known as Guest79040 | 10:54 | |
| *** Guest79040 has quit IRC | 10:55 | |
| *** Guest79040 has joined #openstack-keystone | 10:55 | |
| *** ddieterly has joined #openstack-keystone | 10:55 | |
| *** Guest79040 has quit IRC | 10:57 | |
| *** nisha_ has joined #openstack-keystone | 10:57 | |
| nisha_ | o/ | 10:58 |
| *** TxGVNN has quit IRC | 11:00 | |
| breton | rodrigods: hi. I wanted to ask something else about how to run tempest without docker, but have figured it out already | 11:05 |
| *** nisha__ has joined #openstack-keystone | 11:08 | |
| breton | rodrigods: *without devstack | 11:09 |
| *** nisha_ has quit IRC | 11:11 | |
| *** nisha__ is now known as nisha_ | 11:14 | |
| *** jpena is now known as jpena|lunch | 11:20 | |
| *** amoralej is now known as amoralej|lunch | 11:21 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Use request object in policy enforcement https://review.openstack.org/338693 | 11:24 |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Add is_admin property to request https://review.openstack.org/338674 | 11:24 |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Add the oslo_context to the environment and request https://review.openstack.org/338885 | 11:24 |
| openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: fix OpenID Connect authorization code grant_type https://review.openstack.org/330006 | 11:24 |
| openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: move the get_unscoped_auth_ref into the base class https://review.openstack.org/337140 | 11:24 |
| openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: add discovery document support https://review.openstack.org/330464 | 11:24 |
| openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystoneauth: oidc: deprecate grant_type argument https://review.openstack.org/330465 | 11:24 |
| *** ayoung has quit IRC | 11:27 | |
| *** TxGVNN has joined #openstack-keystone | 11:28 | |
| *** gordc has joined #openstack-keystone | 11:32 | |
| *** GB21 has joined #openstack-keystone | 11:32 | |
| *** samueldmq has joined #openstack-keystone | 11:33 | |
| *** ChanServ sets mode: +v samueldmq | 11:33 | |
| samueldmq | morning keystone | 11:34 |
| *** ddieterly has quit IRC | 11:34 | |
| *** ayoung has joined #openstack-keystone | 11:39 | |
| *** ChanServ sets mode: +v ayoung | 11:39 | |
| *** EinstCrazy has joined #openstack-keystone | 11:40 | |
| aloga | hi samueldmq | 11:44 |
| * nisha_ waves hello to samueldmq | 11:45 | |
| *** ayoung has quit IRC | 11:48 | |
| *** spzala has joined #openstack-keystone | 11:50 | |
| samueldmq | aloga: nisha_ o/ | 11:54 |
| *** spzala has quit IRC | 11:54 | |
| *** ddieterly has joined #openstack-keystone | 11:56 | |
| *** ddieterly has quit IRC | 11:58 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Add migration-complete step to keystone-manage https://review.openstack.org/337680 | 11:59 |
| nisha_ | samueldmq, I am trying to find the return type when test_delete is run for service | 12:05 |
| nisha_ | samueldmq, I am getting this as return type for delete, type 'tuple' | 12:06 |
| *** itisha has joined #openstack-keystone | 12:07 | |
| nisha_ | samueldmq, whereas as expected I get this return type for the get service test, class 'keystoneclient.v3.services.Service' | 12:07 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Add migration-complete step to keystone-manage https://review.openstack.org/337680 | 12:11 |
| *** pauloewerton has joined #openstack-keystone | 12:12 | |
| rodrigods | breton, cool | 12:13 |
| nisha_ | samueldmq, should I write this, :returns: <Response [204]>, None and :rtype: 'tuple' | 12:13 |
| *** mdavidson has quit IRC | 12:21 | |
| samueldmq | nikhil: nah, this <Response [204]> is an object, right ? | 12:33 |
| samueldmq | nikhil: not you, nisha_ ^ | 12:33 |
| *** tqtran has joined #openstack-keystone | 12:33 | |
| *** tonytan4ever has joined #openstack-keystone | 12:33 | |
| samueldmq | nisha_: so we need to figure out what is its tyep | 12:33 |
| samueldmq | type | 12:33 |
| nisha_ | samueldmq, hmm so how to find that | 12:33 |
| nisha_ | how to retrive the first element from tuple | 12:34 |
| samueldmq | nisha_: if it's saying tuple, try type(response[0]) to see what it gives | 12:34 |
| nisha_ | aaah, thanks | 12:34 |
| *** Raildo has joined #openstack-keystone | 12:35 | |
| *** zzzeek has quit IRC | 12:37 | |
| *** mdavidson has joined #openstack-keystone | 12:37 | |
| *** tonytan4ever has quit IRC | 12:38 | |
| nisha_ | samueldmq, class 'requests.models.Response' | 12:38 |
| *** tqtran has quit IRC | 12:38 | |
| samueldmq | nisha_: correct | 12:38 |
| *** EinstCrazy has quit IRC | 12:40 | |
| *** Raildo has quit IRC | 12:41 | |
| *** wangqun has joined #openstack-keystone | 12:43 | |
| *** ddieterly has joined #openstack-keystone | 12:45 | |
| *** richm has joined #openstack-keystone | 12:49 | |
| *** Raildo has joined #openstack-keystone | 12:50 | |
| *** ddieterly has quit IRC | 12:53 | |
| *** jpena|lunch is now known as jpena | 12:55 | |
| *** roxanagh_ has joined #openstack-keystone | 12:56 | |
| *** Raildo has quit IRC | 12:56 | |
| *** wangqun has quit IRC | 13:00 | |
| *** roxanagh_ has quit IRC | 13:00 | |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 regions https://review.openstack.org/338063 | 13:02 |
| *** links has quit IRC | 13:02 | |
| nisha_ | samueldmq, have a look please ^ | 13:04 |
| *** sdake has joined #openstack-keystone | 13:07 | |
| *** nisha_ has quit IRC | 13:07 | |
| *** amoralej|lunch is now known as amoralej | 13:10 | |
| *** tonytan4ever has joined #openstack-keystone | 13:12 | |
| *** M00nr41n has quit IRC | 13:15 | |
| *** spzala has joined #openstack-keystone | 13:17 | |
| openstackgerrit | Merged openstack/keystone: Correct reraising of exception https://review.openstack.org/338660 | 13:18 |
| *** GB21 has quit IRC | 13:18 | |
| *** woodster_ has joined #openstack-keystone | 13:21 | |
| *** sdake_ has joined #openstack-keystone | 13:23 | |
| *** sdake has quit IRC | 13:27 | |
| *** ddieterly has joined #openstack-keystone | 13:27 | |
| *** nkinder has joined #openstack-keystone | 13:32 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add test coverage for trust tokens and domains https://review.openstack.org/265455 | 13:44 |
| *** zzzeek has joined #openstack-keystone | 13:44 | |
| *** sigmavirus_away is now known as sigmavirus | 13:45 | |
| *** ddieterly is now known as ddieterly[away] | 13:49 | |
| lbragstad | if anyone is itching to do a review - here is an easy one that closes a bug | 13:50 |
| lbragstad | https://review.openstack.org/#/c/265455/3 | 13:50 |
| patchbot | lbragstad: patch 265455 - keystone - Add test coverage for trust tokens and domains | 13:50 |
| samueldmq | lbragstad: couple of comments/questions inline | 13:54 |
| *** Raildo has joined #openstack-keystone | 13:54 | |
| *** ddieterly[away] is now known as ddieterly | 13:57 | |
| *** ericksonsantos has quit IRC | 14:00 | |
| *** code-R has joined #openstack-keystone | 14:01 | |
| *** sheel has quit IRC | 14:05 | |
| stevemar | lbragstad: will do | 14:08 |
| *** danpawlik has quit IRC | 14:08 | |
| *** tonytan_brb has joined #openstack-keystone | 14:12 | |
| *** ravelar159 has joined #openstack-keystone | 14:12 | |
| *** tonytan4ever has quit IRC | 14:15 | |
| *** Raildo has quit IRC | 14:23 | |
| *** EinstCra_ has joined #openstack-keystone | 14:24 | |
| *** jaugustine has joined #openstack-keystone | 14:24 | |
| *** roxanagh_ has joined #openstack-keystone | 14:25 | |
| *** BjoernT has joined #openstack-keystone | 14:25 | |
| lbragstad | dstanek samueldmq henrynash_ comments addressed - https://review.openstack.org/#/c/265455/4 | 14:26 |
| patchbot | lbragstad: patch 265455 - keystone - Add test coverage for trust tokens and domains | 14:26 |
| *** roxanagh_ has quit IRC | 14:27 | |
| samueldmq | lbragstad: I still have a comment there, see if it makes sense | 14:33 |
| *** nisha_ has joined #openstack-keystone | 14:35 | |
| *** raildo-afk is now known as raildo | 14:37 | |
| dstanek | mugsie: /b 24 | 14:38 |
| dstanek | mugsie: ignore me | 14:38 |
| *** rderose has joined #openstack-keystone | 14:41 | |
| *** tonytan_brb is now known as tonytan4ever | 14:41 | |
| stevemar | dstanek: o_O | 14:44 |
| dstanek | stevemar: life is hard | 14:44 |
| nisha_ | rodrigods, will this fit better in the test_update_region? :param bool enabled: whether the region is enabled or not, determining | 14:45 |
| nisha_ | if it appears in the catalog. | 14:45 |
| nisha_ | rodrigods, :param bool enabled: whether the region is enabled or not, determining if it appears in the catalog. | 14:45 |
| *** ayoung has joined #openstack-keystone | 14:48 | |
| *** ChanServ sets mode: +v ayoung | 14:48 | |
| *** gagehugo has joined #openstack-keystone | 14:50 | |
| *** jaugustine has quit IRC | 14:50 | |
| *** pushkaru has joined #openstack-keystone | 14:51 | |
| *** ametts has joined #openstack-keystone | 14:51 | |
| *** bjornar_ has quit IRC | 14:52 | |
| nisha_ | rodrigods, I am writing this, please mention here or on patch if you have another suggestion, :param bool enabled: determining if the region appears in the catalog by enabling or disabling it. | 14:53 |
| nisha_ | samueldmq, ^ | 14:59 |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 regions https://review.openstack.org/338063 | 14:59 |
| *** phalmos has joined #openstack-keystone | 15:01 | |
| *** nk2527 has joined #openstack-keystone | 15:01 | |
| *** nk2527 has quit IRC | 15:01 | |
| *** KevinE has joined #openstack-keystone | 15:01 | |
| *** nk2527 has joined #openstack-keystone | 15:01 | |
| *** nk2527 has quit IRC | 15:01 | |
| *** KevinE has quit IRC | 15:02 | |
| *** nk2527 has joined #openstack-keystone | 15:02 | |
| *** KevinE has joined #openstack-keystone | 15:02 | |
| *** jaugustine has joined #openstack-keystone | 15:03 | |
| *** diazjf has joined #openstack-keystone | 15:03 | |
| *** nk2527_ has joined #openstack-keystone | 15:04 | |
| *** nk2527 has quit IRC | 15:04 | |
| *** nk2527_ has quit IRC | 15:04 | |
| *** timcline has joined #openstack-keystone | 15:04 | |
| *** timcline has quit IRC | 15:05 | |
| *** diazjf1 has joined #openstack-keystone | 15:05 | |
| *** timcline has joined #openstack-keystone | 15:05 | |
| *** nk2527 has joined #openstack-keystone | 15:06 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Expose bug with Fernet tokens and trusts https://review.openstack.org/265455 | 15:06 |
| *** diazjf has quit IRC | 15:08 | |
| *** KevinE has quit IRC | 15:09 | |
| *** sdake_ has quit IRC | 15:13 | |
| *** sdake has joined #openstack-keystone | 15:14 | |
| *** pumarani__ has joined #openstack-keystone | 15:14 | |
| *** pushkaru has quit IRC | 15:14 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Support nested domains to provide additional project namespaces https://review.openstack.org/332940 | 15:15 |
| *** pnavarro has quit IRC | 15:15 | |
| lbragstad | samueldmq I see what you mean, I added that test case to the patch and cleaned up the bug report to be more descriptive of the situation that causes the issue | 15:15 |
| *** jmlowe1 has joined #openstack-keystone | 15:16 | |
| jmlowe1 | I'm having some trouble with an update from liberty to mitaka, I'm getting the following error mod_wsgi (pid=43721): Exception occurred processing WSGI script '/usr/bin/keystone-wsgi-public'. | 15:17 |
| jmlowe1 | Does anybody have any hints? | 15:18 |
| *** ddieterly is now known as ddieterly[away] | 15:19 | |
| *** code-R has quit IRC | 15:21 | |
| *** david-lyle__ has joined #openstack-keystone | 15:21 | |
| *** aufi has joined #openstack-keystone | 15:21 | |
| *** jaugustine has quit IRC | 15:22 | |
| aufi | Hi, I have a question related to keystone regions - Does each region have its own users or users are shared from "top level" keystone? | 15:22 |
| jmlowe1 | aufi: afaik everything in keystone is shared between regions, nothing else is shared | 15:23 |
| dstanek | aufi: yeah, a region in keystone is really a catalog concept | 15:24 |
| *** david-lyle__ is now known as david-lyle | 15:24 | |
| aufi | jmlowe1: ok, sounds reasonable, I started to be unsure when I saw different keystone endpoints - so endpoints provide different catalogs, but use same authentication as top level keystone, right? | 15:25 |
| aufi | endpoints for each region | 15:25 |
| aufi | jmlowe1: dstanek: thanks! | 15:26 |
| *** roxanagh_ has joined #openstack-keystone | 15:27 | |
| jmlowe1 | Here is a paste of my error logs http://paste.openstack.org/show/526986/ | 15:28 |
| jmlowe1 | I'm sure it's just some little wsgi thingy, but I don't know where to look | 15:28 |
| openstackgerrit | Merged openstack/pycadf: Fix order of arguments in assertEqual https://review.openstack.org/338781 | 15:29 |
| dstanek | jmlowe1: it looks like maybe something is wrong with your shadow users backend value. are you using the default? | 15:29 |
| *** chrisshattuck has joined #openstack-keystone | 15:31 | |
| *** roxanagh_ has quit IRC | 15:31 | |
| jmlowe1 | I think I am | 15:32 |
| *** KevinE has joined #openstack-keystone | 15:33 | |
| jmlowe1 | I don't have a shadow section, could that be the problem? | 15:34 |
| *** slberger has joined #openstack-keystone | 15:35 | |
| *** jaugustine has joined #openstack-keystone | 15:37 | |
| *** KevinE has quit IRC | 15:38 | |
| dstanek | jmlowe1: i would actually expect it to use the default which is sql | 15:39 |
| dstanek | do you have any debug logs? | 15:39 |
| *** aastha has joined #openstack-keystone | 15:40 | |
| *** GB21 has joined #openstack-keystone | 15:42 | |
| *** KevinE has joined #openstack-keystone | 15:43 | |
| jmlowe1 | ok, I've moved beyond wsgi problems, I think | 15:45 |
| *** ddieterly[away] is now known as ddieterly | 15:47 | |
| *** sdake has quit IRC | 15:48 | |
| *** pcaruana has quit IRC | 15:49 | |
| jmlowe1 | how about this "There is either no auth token in the request or the certificate issuer is not trusted. No auth context will be set." | 15:49 |
| *** sdake has joined #openstack-keystone | 15:51 | |
| *** pumarani__ has quit IRC | 15:53 | |
| dstanek | jmlowe1: can you give me an example request that you are making? it sounds like you are not providing a token with it | 15:54 |
| *** jaugustine has quit IRC | 15:58 | |
| jmlowe1 | http://paste.openstack.org/show/526990/ | 15:59 |
| jmlowe1 | that's debug output from openstack token issue | 15:59 |
| jmlowe1 | worked before update from liberty to mitaka | 16:00 |
| samueldmq | lbragstad: lgtm, thanks | 16:00 |
| *** code-R has joined #openstack-keystone | 16:01 | |
| dstanek | jmlowe1: that looks like a successful request for /v3 | 16:03 |
| *** code-R_ has joined #openstack-keystone | 16:03 | |
| lbragstad | samueldmq thanks for the reviews | 16:04 |
| samueldmq | lbragstad: np | 16:04 |
| *** code-R has quit IRC | 16:06 | |
| jmlowe1 | oops, missed the error http://paste.openstack.org/show/526991/ | 16:07 |
| jmlowe1 | keystone log http://paste.openstack.org/show/526992/ | 16:08 |
| *** sdake has quit IRC | 16:09 | |
| *** rcernin has quit IRC | 16:10 | |
| *** TxGVNN has quit IRC | 16:19 | |
| *** sdake has joined #openstack-keystone | 16:20 | |
| *** aufi has quit IRC | 16:20 | |
| *** KevinE has quit IRC | 16:20 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the auth plugins abstract base class out of core https://review.openstack.org/339112 | 16:21 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the auth plugins abstract base class out of core https://review.openstack.org/339112 | 16:21 |
| *** M00nr41n has joined #openstack-keystone | 16:21 | |
| dolphm | do we have an etherpad to track topics for the midcycle? | 16:23 |
| *** tesseract- has quit IRC | 16:23 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the auth plugins abstract base class out of core https://review.openstack.org/339112 | 16:24 |
| *** sdake has quit IRC | 16:25 | |
| *** sdake has joined #openstack-keystone | 16:27 | |
| *** roxanagh_ has joined #openstack-keystone | 16:29 | |
| *** edtubill has joined #openstack-keystone | 16:29 | |
| *** samueldmq has quit IRC | 16:30 | |
| *** lmiccini has quit IRC | 16:30 | |
| *** haplo37_ has joined #openstack-keystone | 16:31 | |
| *** samueldmq has joined #openstack-keystone | 16:31 | |
| *** ChanServ sets mode: +v samueldmq | 16:31 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the auth plugins abstract base class out of core https://review.openstack.org/339112 | 16:32 |
| jmlowe1 | ok, here is the html exchagnged http://paste.openstack.org/show/527003/ | 16:32 |
| *** roxanagh_ has quit IRC | 16:33 | |
| *** lmiccini has joined #openstack-keystone | 16:34 | |
| *** samueldmq has quit IRC | 16:34 | |
| *** nisha_ has quit IRC | 16:34 | |
| stevemar | dolphm: i was going to start making one up today! thanks for the reminder | 16:35 |
| stevemar | dolphm: lol apparently we already had one: https://etherpad.openstack.org/p/keystone-newton-midcycle | 16:36 |
| *** nisha_ has joined #openstack-keystone | 16:36 | |
| *** stevemar changes topic to "Newton Deadlines: http://releases.openstack.org/newton/schedule.html | Midcycle (July 20-22, San Jose, CA) https://etherpad.openstack.org/p/keystone-newton-midcycle | Meeting Etherpad https://etherpad.openstack.org/p/keystone-weekly-meeting" | 16:36 | |
| stevemar | dolphm: updated topic | 16:36 |
| stevemar | dolphm: i see you already updated the meeting too | 16:37 |
| stevemar | well then! | 16:37 |
| *** julim has quit IRC | 16:38 | |
| jmlowe1 | ok, my sql backed default domain credentials don't work but my ldap backed non default domain credentials do work | 16:38 |
| jmlowe1 | does that ring any bells? | 16:38 |
| *** julim has joined #openstack-keystone | 16:38 | |
| jmlowe1 | following liberty to mitaka update | 16:38 |
| jmlowe1 | is there possibly a failed data migration? | 16:39 |
| stevemar | jmlowe1: whats the error? | 16:40 |
| *** samueldmq has joined #openstack-keystone | 16:40 | |
| *** ChanServ sets mode: +v samueldmq | 16:40 | |
| jmlowe1 | stevemar: just a generic 401 | 16:41 |
| *** ddieterly is now known as ddieterly[away] | 16:41 | |
| stevemar | jmlowe1: nothing else in the log after turning on debug? | 16:42 |
| *** julim has quit IRC | 16:42 | |
| jmlowe1 | not really | 16:42 |
| jmlowe1 | would not having admin_project_name set cause problems? | 16:43 |
| jmlowe1 | or admin_project_domain_name | 16:44 |
| *** ddieterly[away] is now known as ddieterly | 16:44 | |
| *** browne has joined #openstack-keystone | 16:46 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the credential abstract base class out of core https://review.openstack.org/339133 | 16:51 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the credential abstract base class out of core https://review.openstack.org/339133 | 16:52 |
| dstanek | jmlowe1: so your sql credentials don't work anymore? | 16:57 |
| jmlowe1 | Any idea how an update from Liberty to Mitaka would break the default domain? | 16:57 |
| dstanek | jmlowe1: not that i have seen | 16:57 |
| jmlowe1 | dstanek: correct | 16:57 |
| dstanek | jmlowe1: are you specifying user id or username w/ domain | 16:57 |
| jmlowe1 | dstanek: I guess I should try sql credentials from another domain that isn't default | 16:58 |
| jmlowe1 | http://paste.openstack.org/show/527012/ | 17:00 |
| dstanek | jmlowe1: are you specifying the domain in the request? | 17:02 |
| jmlowe1 | openstack token issue --domain default | 17:04 |
| jmlowe1 | The request you have made requires authentication. (HTTP 401) (Request-ID: req-e7d66529-ee30-42de-bbb7-bef284506e4e) | 17:04 |
| jmlowe1 | also doesn't work | 17:04 |
| jmlowe1 | is there some data migration that happens that I need to explicitly trigger beyond just db_sync ? | 17:07 |
| *** ddieterly is now known as ddieterly[away] | 17:08 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the trust abstract base class out of core https://review.openstack.org/339142 | 17:10 |
| *** sdake has quit IRC | 17:11 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Move the trust abstract base class out of core https://review.openstack.org/339142 | 17:11 |
| jmlowe1 | ok, so it seems that sql backed credentials are broken | 17:11 |
| *** ddieterly[away] is now known as ddieterly | 17:11 | |
| dstanek | jmlowe1: hmmm....that debug output you had isn't very helpful. i wish there was more details about why the credentials were invalid | 17:13 |
| jmlowe1 | dstanek: me too | 17:13 |
| dstanek | jmlowe1: is this a production cloud? | 17:14 |
| jmlowe1 | dstanek: unfortunately yes | 17:15 |
| dstanek | jmlowe1: are you able to see if there is a specific error message with the 401? | 17:15 |
| dstanek | jmlowe1: looking through the code there should be lots more debug messaging... | 17:17 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Fix _populate_token_dates method signature https://review.openstack.org/339149 | 17:17 |
| *** geo_ has joined #openstack-keystone | 17:17 | |
| jmlowe1 | dstanek: "There is either no auth token in the request or the certificate issuer is not trusted. No auth context will be set. _build_auth_context /usr/lib/python2.7/site-packages/keystone/middleware/auth.py:71" | 17:17 |
| jmlowe1 | That's really all there is | 17:18 |
| dstanek | jmlowe1: that's really not an error. | 17:19 |
| *** ddieterly is now known as ddieterly[away] | 17:19 | |
| dstanek | jmlowe1: unless someone knows what this issue could be the best i can say is to add some extra debug logs to the code and see where it bails | 17:20 |
| openstackgerrit | Mikhail Nikolaenko proposed openstack/python-keystoneclient: [WIP] Fill Client parameters when using session https://review.openstack.org/339150 | 17:20 |
| jmlowe1 | error messages that contain "or" are less than desirable | 17:20 |
| *** julim has joined #openstack-keystone | 17:20 | |
| *** diazjf1 has quit IRC | 17:20 | |
| dstanek | jmlowe1: it's not an error message. it's just saying that no token or cert was provided in the request | 17:20 |
| *** julim has quit IRC | 17:21 | |
| *** julim has joined #openstack-keystone | 17:23 | |
| *** GB21 has quit IRC | 17:23 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Doc update for moving abstract base classes out of core https://review.openstack.org/339152 | 17:24 |
| *** kean has quit IRC | 17:25 | |
| *** jed56 has quit IRC | 17:25 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Doc update for moving abstract base classes out of core https://review.openstack.org/339152 | 17:25 |
| *** kean has joined #openstack-keystone | 17:25 | |
| jmlowe1 | dstanek: as far as I can tell, my initial token request is failing because I don't have a token | 17:30 |
| jmlowe1 | dstanek: it seems to be unwilling to do password auth against sql and is instead insisting on token or x509 auth | 17:31 |
| *** sdake has joined #openstack-keystone | 17:32 | |
| dstanek | jmlowe1: why do you say that? | 17:32 |
| jmlowe1 | is keystone-manage bootstrap destructive? | 17:32 |
| dstanek | jmlowe1: i'm not sure | 17:32 |
| *** sdake_ has joined #openstack-keystone | 17:34 | |
| jmlowe1 | dstanek: because POST /v3/auth/tokens gets me "error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized" | 17:34 |
| *** code-R_ has quit IRC | 17:35 | |
| dstanek | jmlowe1: i don't know that it's insisting on tokens or certs though | 17:35 |
| *** sdake has quit IRC | 17:37 | |
| jmlowe1 | when I POST to /v3/auth/tokens I shouldn't get this "There is either no auth token in the request or the certificate issuer is not trusted. No aut | 17:38 |
| jmlowe1 | h context will be set. _build_auth_context /usr/lib/python2.7/site-packages/keystone/middleware/auth.py:73 ? | 17:38 |
| dstanek | jmlowe1: i'm pretty sure that happens for every password auth | 17:38 |
| *** jpena has quit IRC | 17:39 | |
| *** amoralej is now known as amoralej|off | 17:42 | |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add region functional tests https://review.openstack.org/339158 | 17:42 |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add region functional tests https://review.openstack.org/339158 | 17:45 |
| *** edtubill has quit IRC | 17:45 | |
| *** M00nr41n has quit IRC | 17:47 | |
| nisha_ | samueldmq, ^ | 17:48 |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 regions https://review.openstack.org/338063 | 17:50 |
| nisha_ | samueldmq, ^ thanks | 17:50 |
| *** daemontool has quit IRC | 17:52 | |
| *** catintheroof has joined #openstack-keystone | 17:53 | |
| *** jaugustine has joined #openstack-keystone | 17:53 | |
| *** thiagolib has joined #openstack-keystone | 17:54 | |
| *** M00nr41n has joined #openstack-keystone | 17:54 | |
| *** M00nr41n has quit IRC | 17:55 | |
| *** sdake_ has quit IRC | 17:57 | |
| jmlowe1 | dstanek: ok, I see that now | 17:57 |
| jmlowe1 | Does this mean something "Expecting to find domain in user - the server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400)" | 17:59 |
| jmlowe1 | I went down to bare bones OS_PASSWORD,OS_AUTH_URL,os-username,os-domain-name | 17:59 |
| *** tqtran has joined #openstack-keystone | 18:00 | |
| openstackgerrit | Richard proposed openstack/keystone: Doc update on enabled external auth and federation By default the external auth is enabled and can cause user_id conflict when REMOTE_USER is set due to the fact that federation uses REMOTE_USER as well. Therefore, the docs were updated to advise users ag https://review.openstack.org/339165 | 18:01 |
| jmlowe1 | right, so that should have been osd-user-domain-id | 18:01 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Doc update for moving abstract base classes out of core https://review.openstack.org/339152 | 18:02 |
| jmlowe1 | Did I ask if keystone-manage bootstrap was destructive? | 18:02 |
| *** nisha_ has quit IRC | 18:03 | |
| openstackgerrit | Richard proposed openstack/keystone: Doc update on enabled external auth and federation https://review.openstack.org/339165 | 18:03 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Doc update for moving abstract base classes out of core https://review.openstack.org/339152 | 18:03 |
| *** david-lyle has quit IRC | 18:04 | |
| *** david-lyle has joined #openstack-keystone | 18:06 | |
| *** jaugustine has quit IRC | 18:07 | |
| *** jaugustine has joined #openstack-keystone | 18:08 | |
| *** jaosorior has joined #openstack-keystone | 18:08 | |
| *** itisha has quit IRC | 18:10 | |
| *** sheel has joined #openstack-keystone | 18:12 | |
| *** ktychkova_ has quit IRC | 18:13 | |
| *** gyee has joined #openstack-keystone | 18:17 | |
| *** ChanServ sets mode: +v gyee | 18:17 | |
| jmlowe1 | what table are the password hashes stored in? | 18:17 |
| *** ddieterly[away] has quit IRC | 18:20 | |
| *** KevinE has joined #openstack-keystone | 18:20 | |
| catintheroof | Hi, quick question, does openstack cli supports to manipulate ENDPOINT FILTER ? | 18:20 |
| *** jaugustine has quit IRC | 18:23 | |
| *** code-R has joined #openstack-keystone | 18:25 | |
| *** code-R_ has joined #openstack-keystone | 18:27 | |
| *** code-R has quit IRC | 18:30 | |
| *** jaugustine has joined #openstack-keystone | 18:33 | |
| *** rcernin has joined #openstack-keystone | 18:39 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Fix fernet token validate for disabled domains/trusts https://review.openstack.org/339176 | 18:39 |
| jmlowe1 | so I finally figured it out, my password table was cleared by 'keystone-manage sync_db' | 18:42 |
| jmlowe1 | really not happy | 18:43 |
| jaosorior | ayoung: hey dude, you know if nate is around? | 18:44 |
| ayoung | jaosorior, HEY! Didn't expect you back. | 18:44 |
| jaosorior | I'm not : ₩ | 18:44 |
| jaosorior | :P | 18:44 |
| ayoung | jaosorior, he's got -away on his internal status. I can proxy if you need | 18:44 |
| jaosorior | Can you tell him i tried to ping him on IRC? | 18:45 |
| ayoung | wilco jaosorior | 18:45 |
| *** tqtran is now known as tqtran-afk | 18:46 | |
| jaosorior | ayoung: thanks dude. How's it going over there? | 18:46 |
| * stevemar waves at jaosorior | 18:46 | |
| jaosorior | stevemar: hey! Greetings from México | 18:47 |
| ayoung | jaosorior, lets just say we will have a lot to talk about when you and I are both back and focused on Tripleo | 18:47 |
| stevemar | jaosorior: not finland? :) | 18:47 |
| lbragstad | dstanek samueldmq ^ another patch to fix fernet + trusts | 18:48 |
| ayoung | stevemar, he's on a trip to the homeland ATM | 18:48 |
| jaosorior | Vacations :D | 18:48 |
| stevemar | jaosorior: ayoung jump over to san jose in 2 weeks for the keystone midcycle ;) | 18:49 |
| *** woodster_ has quit IRC | 18:49 | |
| *** jaugustine has quit IRC | 18:49 | |
| stevemar | or stay and visit family and have fun, if you're into that sort of thing :P | 18:49 |
| *** diazjf has joined #openstack-keystone | 18:50 | |
| *** jaugustine has joined #openstack-keystone | 18:50 | |
| *** julim has quit IRC | 18:51 | |
| *** itisha has joined #openstack-keystone | 18:52 | |
| jaosorior | Lol | 18:53 |
| *** geo_ has quit IRC | 18:53 | |
| *** daemontool has joined #openstack-keystone | 18:54 | |
| jaosorior | ayoung: anything tripleo related that i should prepare for when I'm back? | 18:54 |
| *** bjornar_ has joined #openstack-keystone | 18:57 | |
| *** EinstCra_ has quit IRC | 19:01 | |
| *** ddieterly has joined #openstack-keystone | 19:02 | |
| *** EinstCrazy has joined #openstack-keystone | 19:02 | |
| *** dan_nguyen has joined #openstack-keystone | 19:02 | |
| *** ddieterly is now known as ddieterly[away] | 19:03 | |
| *** spzala has quit IRC | 19:07 | |
| *** jaugustine has quit IRC | 19:07 | |
| *** jaugustine has joined #openstack-keystone | 19:08 | |
| *** jaugustine has quit IRC | 19:08 | |
| *** jaugustine has joined #openstack-keystone | 19:09 | |
| *** diazjf has quit IRC | 19:09 | |
| *** diazjf has joined #openstack-keystone | 19:10 | |
| *** woodster_ has joined #openstack-keystone | 19:13 | |
| *** dan_nguyen has quit IRC | 19:13 | |
| *** woodburn has quit IRC | 19:16 | |
| dstanek | jmlowe1: cleared? | 19:19 |
| jmlowe1 | dstanek: yes cleared, loosing the contents of my password table wasn't cool | 19:21 |
| dstanek | jmlowe1: did the migrations fail? | 19:21 |
| jmlowe1 | I'm guessing a bad cascade | 19:21 |
| jmlowe1 | not that I can tell | 19:21 |
| dstanek | jmlowe1: so the user records were there, but the password column was empty? | 19:22 |
| *** ametts has quit IRC | 19:23 | |
| dstanek | s/column/table | 19:23 |
| jmlowe1 | dstanek: no records in the table | 19:24 |
| jmlowe1 | select count(*) password; | 19:24 |
| jmlowe1 | 0 rows returned | 19:25 |
| jmlowe1 | there is a delete on cascade | 19:25 |
| dstanek | jmlowe1: is the password column gone from the user table now? | 19:25 |
| jmlowe1 | or cascade on delete rather | 19:25 |
| jmlowe1 | seemingly | 19:25 |
| jmlowe1 | let me check | 19:25 |
| *** jaugustine has quit IRC | 19:25 | |
| *** ddieterly[away] is now known as ddieterly | 19:26 | |
| dstanek | that would seem to indicate that migration 091 somehow failed | 19:26 |
| jmlowe1 | http://paste.openstack.org/show/527032/ | 19:26 |
| *** jaugustine has joined #openstack-keystone | 19:27 | |
| jmlowe1 | http://paste.openstack.org/show/527033/ | 19:28 |
| *** jaugustine has quit IRC | 19:32 | |
| *** jaugustine has joined #openstack-keystone | 19:32 | |
| *** tonytan4ever has quit IRC | 19:32 | |
| dstanek | rderose: ^ | 19:32 |
| *** spzala has joined #openstack-keystone | 19:33 | |
| dstanek | jmlowe1: when did you get that error? when you originally ran db_sync? | 19:33 |
| *** roxanagh_ has joined #openstack-keystone | 19:37 | |
| rderose | jmlowe1 dstanek: "InvalidVersionError: 91 is not 92" that's a new one for me. Does this mean we're missing a placeholder version perhaps? | 19:38 |
| jmlowe1 | there was some mixed distro going on here, versions come from upstream so that shouldn't be a problem right? | 19:39 |
| dstanek | rderose: not sure about the specific error...but it looks like 091 may have failed somehow. the tables were changed, but the password data wasn't migrated. | 19:40 |
| dstanek | jmlowe1: what is different between what you run and upstream? | 19:40 |
| jmlowe1 | rdo bits and ubuntu 15.10 bits | 19:41 |
| *** lamt has quit IRC | 19:41 | |
| *** roxanagh_ has quit IRC | 19:42 | |
| rderose | dstanek: hmm... okay, I know this was recently changed: https://review.openstack.org/#/c/332994/ | 19:44 |
| patchbot | rderose: patch 332994 - keystone (stable/mitaka) - Correct domain_id and name constraint dropping (MERGED) | 19:44 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Fix fernet token validate for disabled domains/trusts https://review.openstack.org/339176 | 19:45 |
| *** tonytan4ever has joined #openstack-keystone | 19:49 | |
| *** ddieterly is now known as ddieterly[away] | 19:52 | |
| ayoung | jaosorior, TLS stuff, of course | 19:54 |
| *** tonytan_brb has joined #openstack-keystone | 19:55 | |
| *** tonytan4ever has quit IRC | 19:56 | |
| dstanek | rderose: i don't think that would clear the passwords table | 19:57 |
| *** edtubill has joined #openstack-keystone | 19:58 | |
| *** ddieterly[away] is now known as ddieterly | 20:00 | |
| rderose | dstanek: no, it's strange because if the migration failed the script would have stopped. but actually the last lines were executed: # drop user columns | 20:01 |
| rderose | jmlowe1: ^ | 20:01 |
| dstanek | rderose: i'm wondering if the local user count could have failed | 20:01 |
| openstackgerrit | Eric Brown proposed openstack/keystone: Ensure status code is always passed as int https://review.openstack.org/339214 | 20:02 |
| *** slberger1 has joined #openstack-keystone | 20:03 | |
| *** slberger has quit IRC | 20:03 | |
| rderose | jmlowe1, dstanek: so there are rows in local_user, but not in the password table? | 20:03 |
| openstackgerrit | Eric Brown proposed openstack/keystone: Add a py35 tox venv for Python 3.5 support https://review.openstack.org/337952 | 20:04 |
| jmlowe1 | rderose: correct, local_user was populated, password had zero rows | 20:11 |
| rderose | dstanek: hmm... that ^ could mean that the local_user table got populated with the wrong user.id, but I don't think so... | 20:17 |
| *** gagehugo has quit IRC | 20:20 | |
| *** tonytan_brb has quit IRC | 20:29 | |
| *** geo_ has joined #openstack-keystone | 20:29 | |
| *** daemontool has quit IRC | 20:36 | |
| *** slberger1 has quit IRC | 20:44 | |
| *** sheel has quit IRC | 20:45 | |
| *** diazjf has quit IRC | 20:46 | |
| *** gordc has quit IRC | 20:47 | |
| *** slberger has joined #openstack-keystone | 20:47 | |
| rderose | dstanek: and we do have a relatively extensive test for this as well: https://github.com/openstack/keystone/blob/master/keystone/tests/unit/test_sql_upgrade.py#L737 | 20:49 |
| *** tqtran-afk is now known as tqtran | 20:52 | |
| *** spzala has quit IRC | 20:53 | |
| *** tonytan4ever has joined #openstack-keystone | 20:54 | |
| *** diazjf has joined #openstack-keystone | 20:55 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Isolate token caching into its own region https://review.openstack.org/339234 | 20:56 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Invalidate token cache on domain disablement https://review.openstack.org/339235 | 20:56 |
| openstackgerrit | Richard proposed openstack/keystone: Doc update on enabled external auth and federation https://review.openstack.org/339165 | 20:57 |
| rderose | dstanek: so I'm baffled as to how this could happen | 20:57 |
| rderose | dstanek jmlowe1: I'm reinstalling devstack now, I'll try to recreate the error when it's done | 20:57 |
| lbragstad | dolphm ^ that's what i have so far | 20:58 |
| *** jaugustine has quit IRC | 21:03 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Isolate token caching into its own region https://review.openstack.org/339234 | 21:06 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Invalidate token cache on domain disablement https://review.openstack.org/339235 | 21:08 |
| *** rcernin has quit IRC | 21:17 | |
| *** agireud has quit IRC | 21:20 | |
| *** david-lyle has quit IRC | 21:21 | |
| *** haplo37_ has quit IRC | 21:22 | |
| *** pauloewerton has quit IRC | 21:23 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Increase test coverage for token APIs https://review.openstack.org/339241 | 21:23 |
| *** david-lyle has joined #openstack-keystone | 21:23 | |
| *** raildo is now known as raildo-afk | 21:30 | |
| *** dan_nguyen has joined #openstack-keystone | 21:31 | |
| *** edtubill has quit IRC | 21:32 | |
| *** ayoung has quit IRC | 21:34 | |
| *** ozialien10 has joined #openstack-keystone | 21:35 | |
| *** jmlowe1 has quit IRC | 21:42 | |
| *** geo_ has quit IRC | 21:43 | |
| *** dan_nguyen has quit IRC | 21:43 | |
| openstackgerrit | Richard proposed openstack/keystone: Doc update on enabled external auth and federation https://review.openstack.org/339165 | 21:52 |
| *** ravelar159 has quit IRC | 21:56 | |
| *** chrisshattuck has quit IRC | 21:59 | |
| *** tonytan4ever has quit IRC | 22:00 | |
| *** diazjf has quit IRC | 22:01 | |
| *** jaosorior has quit IRC | 22:04 | |
| *** Raildo has joined #openstack-keystone | 22:06 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Use http_client constants instead of hardcoding https://review.openstack.org/339252 | 22:06 |
| *** darrenc is now known as darrenc_afk | 22:06 | |
| *** Raildo has quit IRC | 22:06 | |
| *** david-lyle has quit IRC | 22:07 | |
| *** slberger has left #openstack-keystone | 22:11 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Use http_client constants instead of hardcoding https://review.openstack.org/339252 | 22:12 |
| *** ddieterly is now known as ddieterly[away] | 22:19 | |
| *** KevinE has quit IRC | 22:20 | |
| *** sigmavirus is now known as sigmavirus_away | 22:20 | |
| *** rderose has quit IRC | 22:20 | |
| *** ozialien10 has quit IRC | 22:22 | |
| *** darrenc_afk is now known as darrenc | 22:26 | |
| *** samueldmq has quit IRC | 22:28 | |
| *** jmlowe has joined #openstack-keystone | 22:32 | |
| openstackgerrit | Brad Topol proposed openstack/keystone: Mark the domain config via API as stable https://review.openstack.org/339259 | 22:33 |
| *** timcline has quit IRC | 22:35 | |
| openstackgerrit | Merged openstack/keystone: Remove get_auth_context https://review.openstack.org/338667 | 22:35 |
| *** timcline has joined #openstack-keystone | 22:35 | |
| *** EinstCrazy has quit IRC | 22:38 | |
| *** catintheroof has quit IRC | 22:40 | |
| *** timcline has quit IRC | 22:40 | |
| *** edtubill has joined #openstack-keystone | 22:40 | |
| *** ddieterly[away] is now known as ddieterly | 22:41 | |
| *** phalmos has quit IRC | 22:44 | |
| *** julim has joined #openstack-keystone | 22:44 | |
| *** chrisshattuck has joined #openstack-keystone | 22:52 | |
| *** chrisshattuck has quit IRC | 22:52 | |
| openstackgerrit | Roxana Gherle proposed openstack/keystone: Not ready for reviews:Fix the username value in federated tokens https://review.openstack.org/335617 | 22:55 |
| *** ddieterly has quit IRC | 22:55 | |
| *** dan_nguyen has joined #openstack-keystone | 23:04 | |
| *** thiagolib has quit IRC | 23:08 | |
| *** rderose has joined #openstack-keystone | 23:10 | |
| *** roxanagh_ has joined #openstack-keystone | 23:13 | |
| *** sorrison has quit IRC | 23:16 | |
| *** sorrison has joined #openstack-keystone | 23:17 | |
| *** roxanagh_ has quit IRC | 23:18 | |
| *** BjoernT has quit IRC | 23:21 | |
| *** dan_nguyen has quit IRC | 23:22 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Use http_client constants instead of hardcoding https://review.openstack.org/339252 | 23:24 |
| *** julim has quit IRC | 23:27 | |
| breton | ugh, why py27 requires postgresql and libpq-dev? | 23:30 |
| *** julim has joined #openstack-keystone | 23:32 | |
| *** shaleh has joined #openstack-keystone | 23:32 | |
| shaleh | when enabling cache what is the current preference? dogpile.cache.memcached? oslo_cache.memcache_pool? The docs here http://docs.openstack.org/developer/keystone/configuration.html say dogpile. The sample keystone.conf in the tree says oslo_cache. | 23:34 |
| breton | no difference actually | 23:34 |
| breton | with keystone under apache they are almost the same. | 23:34 |
| shaleh | breton: true. But we are doing a poor job of documenting expectation. | 23:35 |
| shaleh | since there are choices the implies subtleties exist. | 23:35 |
| *** ayoung has joined #openstack-keystone | 23:36 | |
| *** ChanServ sets mode: +v ayoung | 23:36 | |
| *** dan_nguyen has joined #openstack-keystone | 23:36 | |
| *** code-R_ has quit IRC | 23:54 | |
| *** roxanaghe has quit IRC | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!