| *** code-R_ has quit IRC | 00:17 | |
| *** ddieterly has joined #openstack-keystone | 00:19 | |
| *** roxanaghe has quit IRC | 00:20 | |
| *** bapalm has quit IRC | 00:22 | |
| *** bapalm has joined #openstack-keystone | 00:25 | |
| *** code-R has joined #openstack-keystone | 00:32 | |
| *** adrian_otto has quit IRC | 00:33 | |
| *** gyee has quit IRC | 00:38 | |
| *** code-R has quit IRC | 00:40 | |
| *** code-R has joined #openstack-keystone | 00:41 | |
| *** bjornar_ has quit IRC | 00:51 | |
| openstackgerrit | Merged openstack/keystone: Improve keystone.conf [trust] documentation https://review.openstack.org/340582 | 00:53 |
|---|---|---|
| *** ddieterly has quit IRC | 01:02 | |
| *** spzala has quit IRC | 01:03 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 01:09 |
| stevemar | jdennis1: yes that is why, and yeah, git blame would also work | 01:19 |
| stevemar | jdennis1: saves you one step i guess | 01:20 |
| *** spzala has joined #openstack-keystone | 01:21 | |
| *** spzala has quit IRC | 01:21 | |
| *** spzala_ has joined #openstack-keystone | 01:22 | |
| *** spzala_ has quit IRC | 01:25 | |
| *** EinstCrazy has joined #openstack-keystone | 01:32 | |
| *** wangqun has joined #openstack-keystone | 01:33 | |
| *** jaosorior has joined #openstack-keystone | 01:40 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password strength requirements https://review.openstack.org/320586 | 01:55 |
| *** EinstCrazy has quit IRC | 02:09 | |
| *** EinstCrazy has joined #openstack-keystone | 02:10 | |
| *** browne has quit IRC | 02:17 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password strength requirements https://review.openstack.org/320586 | 02:18 |
| *** diazjf has joined #openstack-keystone | 02:21 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 02:38 |
| *** richm has quit IRC | 02:54 | |
| *** EinstCrazy has quit IRC | 02:54 | |
| *** mvk has quit IRC | 02:56 | |
| *** ddieterly has joined #openstack-keystone | 03:01 | |
| *** EinstCrazy has joined #openstack-keystone | 03:03 | |
| *** ddieterly has quit IRC | 03:15 | |
| *** TxGVNN has joined #openstack-keystone | 03:15 | |
| *** spzala has joined #openstack-keystone | 03:26 | |
| *** spzala has quit IRC | 03:31 | |
| *** markvoelker has joined #openstack-keystone | 03:32 | |
| *** markvoelker_ has joined #openstack-keystone | 03:35 | |
| *** markvoelker has quit IRC | 03:38 | |
| *** diazjf has quit IRC | 03:39 | |
| openstackgerrit | Merged openstack/keystone: Use request object in policy enforcement https://review.openstack.org/338693 | 03:40 |
| *** rderose has quit IRC | 03:40 | |
| *** markvoelker has joined #openstack-keystone | 03:46 | |
| kean | # openstack image list | 03:48 |
| kean | Service Unavailable (HTTP 503) | 03:49 |
| kean | Any one know this error ? | 03:49 |
| kean | 2016-07-12 11:47:32.091 2170 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 03:49 |
| kean | 2016-07-12 11:47:32.108 2170 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 03:49 |
| kean | 2016-07-12 11:47:32.109 2170 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data | 03:49 |
| kean | 2016-07-12 11:47:32.111 2170 INFO eventlet.wsgi.server [-] 192.168.0.7 - - [12/Jul/2016 11:47:32] "GET /v2/images HTTP/1.1" 503 370 0.035601 | 03:49 |
| *** markvoelker_ has quit IRC | 03:49 | |
| kean | error log from glance.api.log | 03:49 |
| jamielennox | kean: looks like the glance service users credentials are wrong | 03:50 |
| jamielennox | (or failling in some way) | 03:50 |
| kean | jamielennox, oh what should I do for debug this one ? | 03:52 |
| *** spzala has joined #openstack-keystone | 03:52 | |
| jamielennox | kean: take the user from the [keystone_authtoken] part of your glance.conf and make sure that you can actually log in with the user, if that works then its a matter of why that information is not being sent to keystone correctly | 03:53 |
| *** spzala has quit IRC | 03:57 | |
| *** julim has quit IRC | 03:58 | |
| *** tqtran has quit IRC | 04:00 | |
| *** links has joined #openstack-keystone | 04:02 | |
| *** code-R has quit IRC | 04:05 | |
| *** code-R has joined #openstack-keystone | 04:06 | |
| kean | jamielennox, thank let me try | 04:09 |
| *** GB21 has joined #openstack-keystone | 04:21 | |
| *** code-R has quit IRC | 04:37 | |
| *** TxGVNN has quit IRC | 04:37 | |
| *** code-R has joined #openstack-keystone | 04:37 | |
| *** TxGVNN has joined #openstack-keystone | 04:51 | |
| kean | jamielennox, # openstack --os-auth-url http://192.168.0.7:35357/v3 --os-project-domain-name default --os-user-domain-name default --os-project-name service --os-username glance token issue | 04:54 |
| kean | +------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 04:54 |
| kean | | Field | Value | | 04:54 |
| kean | +------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 04:54 |
| kean | | expires | 2016-07-12T05:53:38.012766Z | | 04:54 |
| kean | | id | gAAAAABXhHfSeZn8XfG67IrlpNnpIx_dV3m8-Ogq3gpDGANdP4YWxtkj6DIY9YXgTAh2i0XfGfYBxNvZnMi9NkIqmOfmj6QMHkzXE_r5IIjkSfk5ZkeAdZbnkpTqf0uh8_AYjtxk29eAe1nWxyCOMcxFwoglAtW5KTgvltk1_f1nUb-Tm8Y2A7Q | | 04:54 |
| kean | | project_id | 941b052456ee42f6804d7d7c07b5ad44 | | 04:54 |
| kean | | user_id | f83374e1584347e59bfa1c56184bbc14 | | 04:54 |
| kean | +------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 04:54 |
| *** tqtran has joined #openstack-keystone | 04:59 | |
| *** d0ugal has quit IRC | 05:01 | |
| *** fawadkhaliq has joined #openstack-keystone | 05:01 | |
| *** tqtran has quit IRC | 05:03 | |
| kean | jamielennox, # openstack --os-auth-url http://192.168.0.7:35357/v3 --os-project-domain-name default --os-user-domain-name default --os-project-name admin --os-username glance token issue | 05:05 |
| kean | The request you have made requires authentication. (HTTP 401) (Request-ID: req-7ad4b994-de1d-4ff9-b212-56ac32da941e) | 05:05 |
| jamielennox | kean: ok, it's more likely you want your glance user in the service project, are you saying you were trying to config to the admin project? | 05:13 |
| kean | jamielennox, no , but now is config | 05:14 |
| kean | jamielennox, # openstack --os-auth-url http://192.168.0.7:35357/v3 --os-project-domain-name default --os-user-domain-name default --os-project-name admin --os-username glance token issue | 05:14 |
| kean | +------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 05:14 |
| kean | | Field | Value | | 05:14 |
| kean | +------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 05:14 |
| kean | | expires | 2016-07-12T06:14:50.846946Z | | 05:15 |
| kean | | id | gAAAAABXhHzKm-yb1eOjYz3gmbBHghWrCssan7pnBHgXuB1Lqj45N6T5oVXDhtVu1ZaPJ5k5UNQGZ8FIhTfqTh0NGNRqvK4sv6zN28sYAhjt2roE9ZjC8_sm4fM4LbT3N4bkOrIGyDpUph2gOyjeMT7gSaM7On_iPOOl2zM7MAYdWPneCk77vtI | | 05:15 |
| kean | | project_id | 4de5aa2f32ad4fe39afd343d428869da | | 05:15 |
| kean | | user_id | f83374e1584347e59bfa1c56184bbc14 | | 05:15 |
| kean | +------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 05:15 |
| jamielennox | i'd be careful with the big pastes, you must be near a flood kick | 05:15 |
| *** jojden has joined #openstack-keystone | 05:15 | |
| *** markvoelker_ has joined #openstack-keystone | 05:16 | |
| kean | jamielennox, But error same as before:# openstack image list | 05:17 |
| kean | Service Unavailable (HTTP 503) | 05:17 |
| kean | # openstack image list | 05:18 |
| kean | Service Unavailable (HTTP 503) | 05:18 |
| kean | [root@instance-k0d8a4 ~]# tail /var/log/keystone/keystone.log | 05:18 |
| kean | 2016-07-12 13:14:50.847 1173 INFO keystone.token.providers.fernet.utils [req-bd735e47-b14a-481c-a60e-7e979e0b889d - - - - -] Loaded 2 encryption keys (max_active_keys=3) from: /etc/keystone/fernet-keys/ | 05:18 |
| kean | 2016-07-12 13:15:20.315 1172 INFO keystone.common.wsgi [req-ef4bc9fc-4256-40e4-9688-b91f408cb52d - - - - -] GET http://192.168.0.7:35357/v3/ | 05:18 |
| kean | 2016-07-12 13:15:20.332 1173 INFO keystone.common.wsgi [req-c44a13b9-53d2-4e47-bb04-c889b3b8a7c0 - - - - -] POST http://192.168.0.7:35357/v3/auth/tokens | 05:18 |
| kean | 2016-07-12 13:15:20.413 1173 INFO keystone.token.providers.fernet.utils [req-c44a13b9-53d2-4e47-bb04-c889b3b8a7c0 - - - - -] Loaded 2 encryption keys (max_active_keys=3) from: /etc/keystone/fernet-keys/ | 05:18 |
| kean | 2016-07-12 13:15:20.436 1172 INFO keystone.common.wsgi [req-a86dce9f-77f9-42aa-b756-2b347a7246c9 - - - - -] POST http://192.168.0.7:35357/v3/auth/tokens | 05:18 |
| kean | 2016-07-12 13:15:20.503 1172 INFO keystone.token.providers.fernet.utils [req-a86dce9f-77f9-42aa-b756-2b347a7246c9 - - - - -] Loaded 2 encryption keys (max_active_keys=3) from: /etc/keystone/fernet-keys/ | 05:18 |
| kean | 2016-07-12 13:15:20.520 1175 INFO keystone.common.wsgi [req-62cc0674-7a78-429b-9cba-2b9106833931 - - - - -] POST http://127.0.0.1:35357/v2.0/tokens | 05:18 |
| kean | 2016-07-12 13:15:20.525 1175 WARNING keystone.common.wsgi [req-62cc0674-7a78-429b-9cba-2b9106833931 - - - - -] Authorization failed. The request you have made requires authentication. from 127.0.0.1 | 05:18 |
| kean | 2016-07-12 13:15:20.534 1172 INFO keystone.common.wsgi [req-4eae8541-6872-4331-8979-87cf9cbd87f1 - - - - -] POST http://127.0.0.1:35357/v2.0/tokens | 05:18 |
| kean | 2016-07-12 13:15:20.541 1172 WARNING keystone.common.wsgi [req-4eae8541-6872-4331-8979-87cf9cbd87f1 - - - - -] Authorization failed. The request you have made requires authentication. from 127.0.0.1 | 05:18 |
| *** david-lyle has joined #openstack-keystone | 05:18 | |
| *** markvoelker has quit IRC | 05:19 | |
| *** woodburn has quit IRC | 05:21 | |
| jamielennox | does the glance log tell you anything | 05:22 |
| kean | # tail /var/log/glance/api.log | 05:23 |
| kean | 2016-07-12 13:11:30.243 2169 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data | 05:23 |
| kean | 2016-07-12 13:11:30.244 2169 INFO eventlet.wsgi.server [-] 192.168.0.7 - - [12/Jul/2016 13:11:30] "GET /v2/schemas/image HTTP/1.1" 503 370 0.031557 | 05:23 |
| kean | 2016-07-12 13:12:33.341 2170 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 05:23 |
| kean | 2016-07-12 13:12:33.359 2170 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 05:23 |
| kean | 2016-07-12 13:12:33.360 2170 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data | 05:23 |
| kean | 2016-07-12 13:12:33.363 2170 INFO eventlet.wsgi.server [-] 192.168.0.7 - - [12/Jul/2016 13:12:33] "GET /v2/schemas/image HTTP/1.1" 503 370 0.035146 | 05:23 |
| kean | 2016-07-12 13:15:20.527 2169 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 05:23 |
| kean | 2016-07-12 13:15:20.546 2169 WARNING keystonemiddleware.auth_token [-] Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 05:23 |
| kean | 2016-07-12 13:15:20.547 2169 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Identity server rejected authorization necessary to fetch token data | 05:23 |
| kean | 2016-07-12 13:15:20.549 2169 INFO eventlet.wsgi.server [-] 192.168.0.7 - - [12/Jul/2016 13:15:20] "GET /v2/images HTTP/1.1" 503 370 0.034971 | 05:23 |
| *** sdake_ has joined #openstack-keystone | 05:25 | |
| *** breton has quit IRC | 05:26 | |
| jamielennox | kean: i'm not sure i know how to help next, you're in that stuck position of not having enough info to debug because it's security sensitive | 05:27 |
| openstackgerrit | Swapnil Kulkarni (coolsvap) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 05:27 |
| jamielennox | I'm guessing its something stupid like a misconfiguration | 05:27 |
| jamielennox | rpdb is always a last resort | 05:28 |
| kean | jamielennox, thanks you anyway | 05:29 |
| jojden | can anybody explain me how the policy.json is working | 05:29 |
| *** itisha has quit IRC | 05:40 | |
| *** breton has joined #openstack-keystone | 05:41 | |
| henrynash | jojden: what aspect of policy.json do you want to know about? | 05:42 |
| *** markvoelker_ has quit IRC | 05:45 | |
| *** breton has quit IRC | 05:46 | |
| *** breton has joined #openstack-keystone | 05:47 | |
| *** breton has quit IRC | 05:54 | |
| *** breton has joined #openstack-keystone | 05:54 | |
| kean | jamielennox, Maybe it's my openstack-keystone service doest't start ? | 05:56 |
| *** fawadkhaliq has quit IRC | 05:58 | |
| *** rcernin has joined #openstack-keystone | 05:58 | |
| kean | but it's no need restart in newer release . | 05:59 |
| jojden | hi henrymash | 06:02 |
| jojden | I want to know how we can implement it in the project | 06:03 |
| jojden | means | 06:03 |
| jojden | I want to create new project with pecan. | 06:03 |
| jojden | I want to do the authorization using policy.json | 06:03 |
| jojden | how to do that | 06:03 |
| jojden | Do u have any reference for that ? | 06:04 |
| *** d0ugal has joined #openstack-keystone | 06:04 | |
| jojden | henrynash | 06:04 |
| henrynash | jojden: oops, awfk | 06:04 |
| henrynash | jojden: a new openstack service? | 06:05 |
| jojden | yea | 06:05 |
| jojden | henrynash | 06:05 |
| henrynash | jojden: so a service uses the json plocy file by calling oslo.policy to enforce a given api call | 06:05 |
| jojden | yes | 06:06 |
| henrynash | jojden: a service receives, from the caller, a token as proof of auth and the server does the following: | 06:06 |
| henrynash | jojden: calls the keystone librabry to validate the token to ensure it is still valid | 06:07 |
| jojden | henrynash can we do private chat | 06:08 |
| *** breton has quit IRC | 06:14 | |
| *** roxanaghe has joined #openstack-keystone | 06:16 | |
| *** code-R has quit IRC | 06:19 | |
| *** code-R has joined #openstack-keystone | 06:19 | |
| *** breton has joined #openstack-keystone | 06:21 | |
| *** roxanaghe has quit IRC | 06:21 | |
| *** breton has quit IRC | 06:26 | |
| *** breton has joined #openstack-keystone | 06:28 | |
| *** GB21 has quit IRC | 06:32 | |
| *** GB21 has joined #openstack-keystone | 06:34 | |
| *** sheel has joined #openstack-keystone | 06:34 | |
| *** d0ugal has quit IRC | 06:43 | |
| *** sdake_ has quit IRC | 06:49 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:56 | |
| *** fawadkhaliq has quit IRC | 06:59 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:59 | |
| *** tesseract- has joined #openstack-keystone | 07:00 | |
| *** pcaruana has joined #openstack-keystone | 07:00 | |
| *** tqtran has joined #openstack-keystone | 07:01 | |
| *** tqtran has quit IRC | 07:06 | |
| *** david-lyle has quit IRC | 07:22 | |
| *** breton has quit IRC | 07:27 | |
| *** breton has joined #openstack-keystone | 07:41 | |
| *** breton has quit IRC | 07:49 | |
| *** breton has joined #openstack-keystone | 07:50 | |
| *** bj0rnar has quit IRC | 07:52 | |
| *** daemontool has joined #openstack-keystone | 07:53 | |
| *** breton has quit IRC | 07:55 | |
| *** jrist has joined #openstack-keystone | 07:55 | |
| *** breton has joined #openstack-keystone | 07:56 | |
| *** fawadkhaliq has quit IRC | 07:59 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** breton has quit IRC | 08:01 | |
| *** fawadkhaliq has joined #openstack-keystone | 08:01 | |
| *** breton has joined #openstack-keystone | 08:02 | |
| *** fawadkhaliq has quit IRC | 08:05 | |
| *** breton has quit IRC | 08:07 | |
| *** TxGVNN has quit IRC | 08:09 | |
| *** jistr has joined #openstack-keystone | 08:22 | |
| *** mvk has joined #openstack-keystone | 08:24 | |
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/oslo.policy: Add Python 3.5 classifier and venv https://review.openstack.org/340777 | 08:41 |
| *** fawadkhaliq has joined #openstack-keystone | 09:02 | |
| *** tqtran has joined #openstack-keystone | 09:03 | |
| *** TxGVNN has joined #openstack-keystone | 09:03 | |
| *** fawadkhaliq has quit IRC | 09:06 | |
| *** tqtran has quit IRC | 09:07 | |
| *** raildo-afk has quit IRC | 09:09 | |
| *** code-R has quit IRC | 09:10 | |
| openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add wrapper classes for return-request-id-to-caller https://review.openstack.org/261188 | 09:18 |
| *** GB21 has quit IRC | 09:22 | |
| *** fawadkhaliq has joined #openstack-keystone | 09:24 | |
| *** GB21 has joined #openstack-keystone | 09:31 | |
| *** bjornar_ has joined #openstack-keystone | 09:40 | |
| *** bjornar_ has quit IRC | 09:43 | |
| *** jaosorior has quit IRC | 09:49 | |
| *** jaosorior has joined #openstack-keystone | 09:49 | |
| *** henrynash has quit IRC | 09:54 | |
| *** d0ugal has joined #openstack-keystone | 10:02 | |
| *** wangqun has quit IRC | 10:07 | |
| *** breton has joined #openstack-keystone | 10:16 | |
| *** TxGVNN has quit IRC | 10:28 | |
| *** EinstCrazy has quit IRC | 10:36 | |
| *** henrynash has joined #openstack-keystone | 10:41 | |
| *** ChanServ sets mode: +v henrynash | 10:41 | |
| *** rodrigods has quit IRC | 10:48 | |
| *** wangqun has joined #openstack-keystone | 10:48 | |
| *** rodrigods has joined #openstack-keystone | 10:48 | |
| jojden | https://bugs.launchpad.net/oslo.policy/+bug/1602206 | 11:00 |
| openstack | Launchpad bug 1602206 in oslo.policy "sample code to implement oslo policy " [Undecided,New] | 11:00 |
| jojden | https://bugs.launchpad.net/oslo.policy/+bug/1602206 | 11:00 |
| openstackgerrit | Adrian Vladu proposed openstack/oslo.policy: Fixed unit tests running on Windows https://review.openstack.org/340537 | 11:01 |
| *** julim has joined #openstack-keystone | 11:05 | |
| *** sdake has joined #openstack-keystone | 11:07 | |
| *** sdake_ has joined #openstack-keystone | 11:08 | |
| *** sdake has quit IRC | 11:13 | |
| *** mvk has quit IRC | 11:21 | |
| *** julim has quit IRC | 11:23 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Add migration-complete step to keystone-manage https://review.openstack.org/337680 | 11:24 |
| *** ddieterly has joined #openstack-keystone | 11:26 | |
| *** GB21 has quit IRC | 11:26 | |
| *** ddieterly has quit IRC | 11:31 | |
| openstackgerrit | Mikhail Nikolaenko proposed openstack/python-keystoneclient: Fill Client parameters when using session https://review.openstack.org/339150 | 11:32 |
| *** GB21 has joined #openstack-keystone | 11:37 | |
| *** henrynash has quit IRC | 11:46 | |
| *** henrynash has joined #openstack-keystone | 11:50 | |
| *** ChanServ sets mode: +v henrynash | 11:50 | |
| *** fawadkhaliq has quit IRC | 11:50 | |
| *** mvk has joined #openstack-keystone | 11:52 | |
| *** TxGVNN has joined #openstack-keystone | 11:56 | |
| *** tqtran has joined #openstack-keystone | 12:05 | |
| *** david_cu has joined #openstack-keystone | 12:05 | |
| *** ddieterly has joined #openstack-keystone | 12:06 | |
| *** tqtran has quit IRC | 12:10 | |
| *** sdake_ has quit IRC | 12:16 | |
| *** fawadkhaliq has joined #openstack-keystone | 12:17 | |
| *** henrynash has quit IRC | 12:18 | |
| *** nisha has joined #openstack-keystone | 12:19 | |
| *** nisha is now known as Guest81936 | 12:20 | |
| *** fawadkhaliq has quit IRC | 12:20 | |
| *** pnavarro has joined #openstack-keystone | 12:21 | |
| *** pauloewerton has joined #openstack-keystone | 12:25 | |
| *** spzala has joined #openstack-keystone | 12:27 | |
| *** GB21 has quit IRC | 12:29 | |
| *** ddieterly is now known as ddieterly[away] | 12:31 | |
| *** ddieterly[away] is now known as ddieterly | 12:31 | |
| *** jrist has quit IRC | 12:31 | |
| *** ddieterly has quit IRC | 12:32 | |
| *** spzala has quit IRC | 12:32 | |
| *** markvoelker has joined #openstack-keystone | 12:34 | |
| *** ddieterly has joined #openstack-keystone | 12:35 | |
| *** samueldmq has joined #openstack-keystone | 12:37 | |
| *** ChanServ sets mode: +v samueldmq | 12:37 | |
| samueldmq | morning keystone | 12:37 |
| topol | keystone folks arent up this early samueldmq :-) | 12:41 |
| samueldmq | topol: hey o/ | 12:42 |
| topol | only us folks who now have kids old enough that school starts at 7:30am EST | 12:42 |
| *** ddieterly has quit IRC | 12:42 | |
| samueldmq | topol: hehe it's almost 10 am here, so I am late :-) | 12:43 |
| topol | samueldmq :-) | 12:43 |
| *** henrynash has joined #openstack-keystone | 12:43 | |
| *** ChanServ sets mode: +v henrynash | 12:43 | |
| dstanek | samueldmq: topol: o/ | 12:46 |
| samueldmq | dstanek: o/ | 12:46 |
| dstanek | topol: very true. having kids is a natural alarm | 12:47 |
| *** jed56 has joined #openstack-keystone | 12:47 | |
| *** henrynash has quit IRC | 12:50 | |
| *** jrist has joined #openstack-keystone | 12:50 | |
| topol | dstanek finally all my kids start school at around 7:30am. Before I had one at 7:30 and one at 9:15 so it was like batch processing. Now I can concurrently get them out the door. Err out of my hair :-) | 12:53 |
| *** edmondsw has joined #openstack-keystone | 12:58 | |
| dstanek | :-) | 13:00 |
| *** nisha has joined #openstack-keystone | 13:00 | |
| dstanek | i have 4 so i know the feeling | 13:00 |
| *** nisha is now known as nisha_ | 13:00 | |
| *** Guest81936 has quit IRC | 13:00 | |
| *** lamt has joined #openstack-keystone | 13:01 | |
| *** nisha_ is now known as nisha | 13:03 | |
| *** woodster_ has joined #openstack-keystone | 13:04 | |
| *** nisha is now known as Guest1678 | 13:04 | |
| *** jojden has quit IRC | 13:09 | |
| *** ddieterly has joined #openstack-keystone | 13:15 | |
| *** Guest1678 is now known as nisha_ | 13:17 | |
| *** nisha_ has quit IRC | 13:17 | |
| *** nisha_ has joined #openstack-keystone | 13:17 | |
| *** ddieterly is now known as ddieterly[away] | 13:20 | |
| *** julim has joined #openstack-keystone | 13:21 | |
| *** julim has quit IRC | 13:23 | |
| *** spzala has joined #openstack-keystone | 13:25 | |
| *** ddieterly[away] is now known as ddieterly | 13:26 | |
| *** tonytan4ever has joined #openstack-keystone | 13:27 | |
| *** jrist_ has joined #openstack-keystone | 13:29 | |
| *** nisha_ has quit IRC | 13:30 | |
| *** d0ugal_ has joined #openstack-keystone | 13:30 | |
| *** nisha_ has joined #openstack-keystone | 13:31 | |
| *** itisha has joined #openstack-keystone | 13:31 | |
| *** jrist has quit IRC | 13:32 | |
| *** d0ugal has quit IRC | 13:33 | |
| *** jrist_ has quit IRC | 13:34 | |
| *** d0ugal_ is now known as d0ugal | 13:35 | |
| *** d0ugal is now known as Guest65715 | 13:36 | |
| *** Guest65715 has quit IRC | 13:36 | |
| *** d0ugal_ has joined #openstack-keystone | 13:36 | |
| *** richm has joined #openstack-keystone | 13:37 | |
| *** ddieterly is now known as ddieterly[away] | 13:39 | |
| *** code-R has joined #openstack-keystone | 13:40 | |
| *** jaosorior has quit IRC | 13:40 | |
| *** sdake_ has joined #openstack-keystone | 13:41 | |
| lbragstad | morning! | 13:41 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Allow id string validation to be configurable https://review.openstack.org/334673 | 13:44 |
| *** d0ugal_ has quit IRC | 13:44 | |
| *** d0ugal has joined #openstack-keystone | 13:44 | |
| *** jrist_ has joined #openstack-keystone | 13:45 | |
| *** rderose has joined #openstack-keystone | 13:47 | |
| *** wangqun has quit IRC | 13:47 | |
| *** ddieterly[away] is now known as ddieterly | 13:48 | |
| *** clenimar has quit IRC | 13:48 | |
| *** michauds has joined #openstack-keystone | 13:49 | |
| *** erhudy has joined #openstack-keystone | 13:51 | |
| *** amrith has quit IRC | 13:51 | |
| *** clenimar has joined #openstack-keystone | 13:52 | |
| *** amrith has joined #openstack-keystone | 13:52 | |
| *** code-R_ has joined #openstack-keystone | 13:52 | |
| *** code-R has quit IRC | 13:55 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 13:57 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 13:57 |
| *** sheel has quit IRC | 14:06 | |
| *** ivasilevskaya has quit IRC | 14:09 | |
| *** markvoelker has quit IRC | 14:11 | |
| *** ravelar159 has joined #openstack-keystone | 14:13 | |
| *** gordc has joined #openstack-keystone | 14:13 | |
| *** timburke_ has joined #openstack-keystone | 14:15 | |
| *** samueldmq has quit IRC | 14:15 | |
| *** timburke has quit IRC | 14:15 | |
| *** Nakato has quit IRC | 14:15 | |
| *** jlk has quit IRC | 14:15 | |
| *** sigmavirus has quit IRC | 14:15 | |
| openstackgerrit | Merged openstack/oslo.policy: Fixed unit tests running on Windows https://review.openstack.org/340537 | 14:15 |
| *** jlk` has joined #openstack-keystone | 14:15 | |
| *** links has quit IRC | 14:15 | |
| *** Nakato has joined #openstack-keystone | 14:16 | |
| *** _sigmavirus24 has joined #openstack-keystone | 14:17 | |
| *** tonytan_brb has joined #openstack-keystone | 14:17 | |
| *** samueldmq has joined #openstack-keystone | 14:17 | |
| *** ChanServ sets mode: +v samueldmq | 14:17 | |
| *** timburke_ is now known as timburke | 14:18 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: PCI-DSS Adds password_expires_at to API specs https://review.openstack.org/340964 | 14:18 |
| *** _sigmavirus24 is now known as sigmavirus | 14:19 | |
| *** sigmavirus has joined #openstack-keystone | 14:19 | |
| *** tonytan4ever has quit IRC | 14:20 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: PCI-DSS Adds password_expires_at to API specs https://review.openstack.org/340964 | 14:21 |
| *** spzala has quit IRC | 14:22 | |
| stevemar | o/ | 14:23 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password expires validation https://review.openstack.org/333360 | 14:23 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 14:25 |
| *** aastha has joined #openstack-keystone | 14:26 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 14:26 |
| *** nisha_ has quit IRC | 14:27 | |
| *** woodburn has joined #openstack-keystone | 14:27 | |
| *** markvoelker has joined #openstack-keystone | 14:30 | |
| *** gagehugo has joined #openstack-keystone | 14:31 | |
| *** julim has joined #openstack-keystone | 14:31 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 14:34 |
| *** tonytan4ever has joined #openstack-keystone | 14:36 | |
| *** phalmos has joined #openstack-keystone | 14:37 | |
| samueldmq | stevemar: o/ | 14:38 |
| *** tonytan_brb has quit IRC | 14:39 | |
| *** diazjf has joined #openstack-keystone | 14:39 | |
| *** samueldmq has quit IRC | 14:42 | |
| *** clenimar has quit IRC | 14:43 | |
| *** clenimar has joined #openstack-keystone | 14:43 | |
| *** clenimar_ has joined #openstack-keystone | 14:43 | |
| *** clenimar_ has quit IRC | 14:43 | |
| *** clenimar has quit IRC | 14:43 | |
| *** clenimar has joined #openstack-keystone | 14:44 | |
| *** diazjf has quit IRC | 14:45 | |
| *** samueldmq has joined #openstack-keystone | 14:45 | |
| *** ChanServ sets mode: +v samueldmq | 14:45 | |
| stevemar | samueldmq: o/ | 14:45 |
| *** TxGVNN has quit IRC | 14:46 | |
| *** david-lyle has joined #openstack-keystone | 14:46 | |
| * samueldmq needs to set up another IRC bouncer | 14:46 | |
| *** slberger has joined #openstack-keystone | 14:47 | |
| *** code-R_ has quit IRC | 14:51 | |
| *** mariusv has joined #openstack-keystone | 14:51 | |
| *** diazjf has joined #openstack-keystone | 14:54 | |
| *** nisha_ has joined #openstack-keystone | 14:55 | |
| *** jed56 has quit IRC | 14:55 | |
| *** spzala has joined #openstack-keystone | 14:56 | |
| *** slberger has quit IRC | 14:56 | |
| *** pnavarro has quit IRC | 14:58 | |
| zigo | I'm seeing a bunch of stuff in other-requirements.txt in ksc, I wonder why they are useful. | 15:00 |
| samueldmq | zigo: you mean what other-requirements are for ? | 15:01 |
| samueldmq | zigo: or are you seeing something that shouldn't be there? | 15:02 |
| zigo | samueldmq: It looks like most would be pulled transitively anyway. | 15:02 |
| zigo | And I even see python3.4 / python3.5 as a direct dependency as being a mistake. | 15:02 |
| zigo | python3-all should be in use. | 15:02 |
| samueldmq | zigo: yes from other projecs | 15:02 |
| zigo | Are these runtime or dev depends btw? | 15:03 |
| *** slberger has joined #openstack-keystone | 15:03 | |
| samueldmq | zigo: why? we support python3.4, so it's needed for dev | 15:03 |
| zigo | samueldmq: python3-all will pull all available versions of python in a given system. | 15:03 |
| samueldmq | zigo: we could be more specific then, I agree with you | 15:03 |
| zigo | samueldmq: Let's say we add python3.6 in Debian (wont happen before Stretch is released, but let's just pretend), then this becomes wrong. | 15:03 |
| zigo | samueldmq: So, is this build-depends or just runtime depends that I'm seeing here? | 15:04 |
| zigo | What's the intend? | 15:04 |
| samueldmq | zigo: I know it setups dev dependencies, not sure about deployment deps, let me check | 15:05 |
| zigo | Cheers. | 15:06 |
| samueldmq | zigo: well, it may setup any dependency, it ' more about what is the meaning of other-requirements.txt in openstack projs | 15:06 |
| samueldmq | stevemar: any idea ? ^ | 15:07 |
| zigo | To me, it really looks like none of these are being useful. I can give individual examples... | 15:07 |
| samueldmq | zigo: even for running tests locally there are some external dependencies that can't be installed with pip | 15:08 |
| samueldmq | that's what bindep is for | 15:08 |
| zigo | Right. | 15:09 |
| samueldmq | bindep is the tool that runs on other-requirements | 15:09 |
| zigo | What is libldap2 for? | 15:09 |
| zigo | grep -r ldap * <--- returns nothing | 15:09 |
| zigo | gettext is only referenced once in setup.cfg, I fail to understand why. | 15:10 |
| samueldmq | zigo: see http://docs.openstack.org/developer/keystone/setup.html#installing-dependencies | 15:10 |
| samueldmq | zigo: I believe other-requirements has been built based on that doc | 15:10 |
| samueldmq | zigo: if you think there is something that is not needed anymore, please submit a patch fixing it | 15:11 |
| *** code-R has joined #openstack-keystone | 15:11 | |
| zigo | samueldmq: Well, I'd like to understand the intend first... | 15:11 |
| samueldmq | zigo: intent of other-requirements ? | 15:12 |
| samueldmq | zigo: you can use bindep to check your environment is okay VS getting strange errors trying to run code without the needed libs | 15:13 |
| *** jaugustine has joined #openstack-keystone | 15:17 | |
| *** adrian_otto has joined #openstack-keystone | 15:18 | |
| *** belmoreira has joined #openstack-keystone | 15:18 | |
| *** timcline has joined #openstack-keystone | 15:19 | |
| *** mnikolaenko1 has joined #openstack-keystone | 15:19 | |
| *** timcline has quit IRC | 15:20 | |
| *** timcline has joined #openstack-keystone | 15:20 | |
| *** ametts has joined #openstack-keystone | 15:21 | |
| *** Dave_____ has joined #openstack-keystone | 15:21 | |
| stevemar | zigo: you can probably remove the ldap ones from ksclient safely | 15:22 |
| zigo | stevemar: Cheers. | 15:23 |
| zigo | stevemar: I'll attempt a few patch... :P | 15:23 |
| samueldmq | stevemar: nice. we are talking to infra folks about this too | 15:23 |
| stevemar | zigo: i see you're already talking to the infra guys, thats the right move, they are heading this initiatve | 15:23 |
| stevemar | ++ | 15:23 |
| samueldmq | stevemar: zigo asked some questions there, hoepfully things are clear now :) | 15:23 |
| samueldmq | stevemar looks everywhere, he was already looking at -infra ..... | 15:24 |
| samueldmq | :) | 15:24 |
| *** david-lyle has quit IRC | 15:24 | |
| knikolla | stevemar is like the eye of sauron | 15:25 |
| *** Dave has quit IRC | 15:25 | |
| stevemar | knikolla: :) | 15:25 |
| *** Dave_____ is now known as Dave | 15:25 | |
| stevemar | knikolla: or i just lurk in all the channels with notifications for the word "keystone" :) | 15:26 |
| *** ericksonsantos has joined #openstack-keystone | 15:26 | |
| openstackgerrit | Thomas Goirand proposed openstack/python-keystoneclient: Fix other-requirements.txt for deb based distros https://review.openstack.org/341007 | 15:28 |
| knikolla | one highlighted word to rule them all | 15:29 |
| zigo | There you go. | 15:30 |
| openstackgerrit | Thomas Goirand proposed openstack/keystone: Fix python{3,}-all-dev depends in deb based https://review.openstack.org/341010 | 15:30 |
| dstanek | so for that review what core has the technical expertise in that area to help review? i'm assuming it would be an easy one to merge. | 15:34 |
| *** sdake_ has quit IRC | 15:36 | |
| *** sdake_ has joined #openstack-keystone | 15:36 | |
| *** diazjf has left #openstack-keystone | 15:37 | |
| *** mnikolaenko1 has left #openstack-keystone | 15:38 | |
| samueldmq | dstanek: if there is an explanation why some dependencies are not needed anymore | 15:38 |
| samueldmq | dstanek: somehting like dependency X is always overwriting Y, that should an easy review | 15:39 |
| *** mnikolaenko1 has joined #openstack-keystone | 15:39 | |
| dstanek | samueldmq: maybe, but i don't know what any of that stuff actually means. i have no background on what they are doing with other-requirements.txt | 15:39 |
| samueldmq | dstanek: afaict it reflects http://docs.openstack.org/developer/keystone/setup.html#installing-dependencies | 15:40 |
| samueldmq | dstanek: because there are some dependencies that can't be installed with pip | 15:40 |
| samueldmq | dstanek: so we have other-requirements to be run with bindep (https://github.com/openstack-infra/bindep) | 15:41 |
| dstanek | what uses that? | 15:41 |
| dstanek | ah | 15:41 |
| dstanek | i'll have to read up on what that is actually doing | 15:41 |
| *** haplo37_ has joined #openstack-keystone | 15:42 | |
| *** belmoreira has quit IRC | 15:42 | |
| *** ericksonsantos has left #openstack-keystone | 15:46 | |
| *** ericksonsantos has joined #openstack-keystone | 15:48 | |
| nisha_ | I had some problem in my devstack, so I ran ./unstack.sh ./clean.sh and then ./stack.sh | 15:50 |
| nisha_ | But I am getting this error, http://paste.openstack.org/show/530941/ | 15:50 |
| nisha_ | Can anyone please help? | 15:50 |
| *** ddieterly is now known as ddieterly[away] | 15:54 | |
| *** gyee has joined #openstack-keystone | 15:55 | |
| *** ChanServ sets mode: +v gyee | 15:55 | |
| stevemar | nisha_: maybe try running ./clean.sh | 15:57 |
| *** adu has joined #openstack-keystone | 15:57 | |
| *** ddieterly[away] is now known as ddieterly | 15:57 | |
| *** spzala has quit IRC | 16:00 | |
| *** pcaruana has quit IRC | 16:00 | |
| samueldmq | dstanek: openstack projects are adopting that | 16:01 |
| samueldmq | dstanek: yes, let me know if I can help with anything | 16:01 |
| *** spzala has joined #openstack-keystone | 16:03 | |
| *** rcernin has quit IRC | 16:03 | |
| nisha_ | stevemar, thanks, will run it again | 16:06 |
| *** daemontool has quit IRC | 16:06 | |
| *** tonytan_brb has joined #openstack-keystone | 16:07 | |
| *** spzala has quit IRC | 16:08 | |
| *** tqtran has joined #openstack-keystone | 16:08 | |
| *** sdake_ has quit IRC | 16:09 | |
| *** tesseract- has quit IRC | 16:09 | |
| *** tonytan4ever has quit IRC | 16:09 | |
| *** sdake_ has joined #openstack-keystone | 16:10 | |
| *** simondodsley has joined #openstack-keystone | 16:10 | |
| *** tqtran has quit IRC | 16:12 | |
| *** david-lyle has joined #openstack-keystone | 16:13 | |
| openstackgerrit | Yatin Kumbhare proposed openstack/keystoneauth: Add Python 3.5 classifier and venv https://review.openstack.org/341065 | 16:17 |
| *** daemontool has joined #openstack-keystone | 16:19 | |
| openstackgerrit | Yatin Kumbhare proposed openstack/keystonemiddleware: Add Python 3.5 classifier and venv https://review.openstack.org/341066 | 16:19 |
| nisha_ | stevemar, still getting the same error. Anything else I can try? | 16:20 |
| *** david-lyle has quit IRC | 16:21 | |
| *** sdake_ has quit IRC | 16:24 | |
| *** d0ugal has quit IRC | 16:24 | |
| *** jlk` is now known as jlk | 16:26 | |
| *** jlk has quit IRC | 16:27 | |
| *** jlk has joined #openstack-keystone | 16:27 | |
| *** ninag has joined #openstack-keystone | 16:27 | |
| stevemar | nisha_: whats the output of $ pip freeze and $ env | grep OS | 16:27 |
| *** catintheroof has joined #openstack-keystone | 16:28 | |
| *** jrist_ has quit IRC | 16:30 | |
| *** gagehugo has quit IRC | 16:31 | |
| *** ninag has quit IRC | 16:32 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/340036 | 16:36 |
| *** david-lyle has joined #openstack-keystone | 16:36 | |
| nisha_ | stevemar, I ran them inside the devstack directory, got this, for $ env | grep OS | 16:39 |
| *** tqtran has joined #openstack-keystone | 16:39 | |
| nisha_ | stevemar, env LESSCLOSE=/usr/bin/lesspipe %s %s | 16:39 |
| stevemar | nisha_: not much :( | 16:39 |
| stevemar | nisha_: damn, i wonder whats wrong | 16:39 |
| nisha_ | stevemar, this for the pip command, http://paste.openstack.org/show/530954/ | 16:39 |
| nisha_ | stevemar, this happened with me last time too. So, I had set up a new VM | 16:40 |
| *** sdake_ has joined #openstack-keystone | 16:40 | |
| *** chris__hultin is now known as chris_hultin | 16:40 | |
| *** ebalduf_ has joined #openstack-keystone | 16:41 | |
| *** rderose_ has joined #openstack-keystone | 16:43 | |
| stevemar | nisha_: whats your local.conf look like? | 16:43 |
| stevemar | do you have reclone set to true? | 16:43 |
| nisha_ | stevemar, le me check | 16:44 |
| nisha_ | stevemar, I can't find reclone anywhere in local.conf | 16:46 |
| *** rderose has quit IRC | 16:47 | |
| *** david-lyle_ has joined #openstack-keystone | 16:47 | |
| *** david-lyle has quit IRC | 16:48 | |
| *** roxanaghe has joined #openstack-keystone | 16:50 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 16:51 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 16:53 |
| stevemar | nisha_: paste your local.conf if you can | 16:57 |
| nisha_ | stevemar, thanks here, http://paste.openstack.org/show/530956/ | 17:00 |
| stevemar | nisha_: may i suggest an alternate? | 17:01 |
| nisha_ | stevemar, sure | 17:01 |
| stevemar | nisha_: try http://paste.openstack.org/show/530959/ | 17:03 |
| stevemar | nisha_: it just runs keystone, nothing else | 17:05 |
| stevemar | if anything it'll fail faster :P | 17:05 |
| nisha_ | stevemar, hehe okay | 17:05 |
| nisha_ | stevemar, is it like using git clone for just keystone then? | 17:06 |
| stevemar | nisha_: yeah | 17:06 |
| stevemar | nisha_: you can also update your keystoneauth1 and keystonemiddleware pip installs | 17:06 |
| nisha_ | stevemar, oh how to do that? | 17:07 |
| dstanek | nisha_: pip install -U keystoneauth1 keystonemiddleware | 17:09 |
| *** mvk has quit IRC | 17:09 | |
| dstanek | nisha_: if all else fails just create a new VM | 17:10 |
| *** jrist_ has joined #openstack-keystone | 17:10 | |
| nisha_ | thanks dstanek | 17:11 |
| nisha_ | dstanek, just to be sure, after these, i will run ./unstack.sh and then ./clean.sh and finally ./stack.sh | 17:12 |
| nisha_ | stevemar, dstanek thanks will let you know if it works | 17:13 |
| stevemar | nisha_: that pretty much exhausts your options :) cc dstanek | 17:13 |
| dstanek | i've had unstacking issues in the past. so now i just create VMs | 17:17 |
| *** sdake_ has quit IRC | 17:17 | |
| *** gagehugo has joined #openstack-keystone | 17:20 | |
| *** jrist_ has quit IRC | 17:21 | |
| *** spzala has joined #openstack-keystone | 17:24 | |
| * nisha_ is wondering why this keeps happening with everyone, now and then? | 17:25 | |
| nisha_ | My VM was working nicely until I restarted it today. Does it have something to do with what I did or there is bug or things are like this in clouds :/ | 17:26 |
| *** spzala_ has joined #openstack-keystone | 17:27 | |
| *** spzala has quit IRC | 17:27 | |
| *** samueldmq has quit IRC | 17:27 | |
| *** jmlowe has quit IRC | 17:31 | |
| *** jmlowe has joined #openstack-keystone | 17:31 | |
| *** jmlowe has quit IRC | 17:31 | |
| *** ddieterly is now known as ddieterly[away] | 17:33 | |
| *** ddieterly[away] is now known as ddieterly | 17:34 | |
| *** topol_ has joined #openstack-keystone | 17:34 | |
| *** ChanServ sets mode: +v topol_ | 17:34 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 17:35 |
| *** topol_ has quit IRC | 17:36 | |
| gyee | stevemar, dtroyer, I am having trouble running openstackclient unit tests, even master branch is giving me trouble | 17:37 |
| gyee | AttributeError: 'module' object has no attribute 'select_auth_plugin' | 17:37 |
| gyee | is osc_lib out of sync or something? | 17:37 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 17:37 |
| nisha_ | dstanek, stevemar ./stack.sh ran successfully :D | 17:40 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password history requirements https://review.openstack.org/328339 | 17:42 |
| *** spzala_ has quit IRC | 17:42 | |
| *** spzala has joined #openstack-keystone | 17:42 | |
| *** adu has quit IRC | 17:44 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password history requirements https://review.openstack.org/328339 | 17:45 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password strength requirements https://review.openstack.org/320586 | 17:46 |
| *** spzala has quit IRC | 17:47 | |
| *** mvk has joined #openstack-keystone | 17:49 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 17:54 |
| *** henrynash has joined #openstack-keystone | 17:54 | |
| *** ChanServ sets mode: +v henrynash | 17:54 | |
| *** tonytan_brb has quit IRC | 17:54 | |
| *** ddieterly is now known as ddieterly[away] | 17:55 | |
| stevemar | nisha_: yay | 17:56 |
| stevemar | gyee: yep | 17:56 |
| *** haplo37_ has quit IRC | 17:56 | |
| *** nk2527 has joined #openstack-keystone | 17:57 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:57 | |
| *** samueldmq has joined #openstack-keystone | 17:57 | |
| *** ChanServ sets mode: +v samueldmq | 17:58 | |
| *** haneef has joined #openstack-keystone | 17:58 | |
| *** browne has joined #openstack-keystone | 17:58 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: PCI-DSS Adds password_expires_at to API specs https://review.openstack.org/340964 | 17:59 |
| *** jmlowe has joined #openstack-keystone | 17:59 | |
| stevemar | meeting time! | 18:00 |
| stevemar | ping for meeting ajayaa, amakarov, ayoung, breton, browne, crinkle, claudiub, davechen, david8hu, dolphm, dstanek, edmondsw, gagehugo, gyee, henrynash, hogepodge, htruta, jamielennox, jaugustine, joesavak, jorge_munoz, knikolla, lbragstad, MaxPC, morgan, nkinder, notmorgan, raildo, rodrigods, rderose, roxanaghe, samleon, samueldmq, shaleh, stevemar, tsymanczyk, topol, vivekd, wanghong, xek | 18:00 |
| *** raildo has joined #openstack-keystone | 18:00 | |
| dstanek | pong | 18:01 |
| *** janonymous has quit IRC | 18:06 | |
| *** sdake_ has joined #openstack-keystone | 18:11 | |
| *** tonytan4ever has joined #openstack-keystone | 18:20 | |
| *** chrisshattuck has joined #openstack-keystone | 18:21 | |
| *** agireud has quit IRC | 18:30 | |
| *** adu has joined #openstack-keystone | 18:31 | |
| *** nisha_ has quit IRC | 18:31 | |
| *** agireud has joined #openstack-keystone | 18:31 | |
| *** sdake_ has quit IRC | 18:32 | |
| *** sdake_ has joined #openstack-keystone | 18:33 | |
| *** slberger has quit IRC | 18:37 | |
| *** david-lyle has joined #openstack-keystone | 18:43 | |
| *** spzala has joined #openstack-keystone | 18:48 | |
| *** david-lyle has quit IRC | 18:49 | |
| *** adrian_otto has quit IRC | 18:49 | |
| *** spzala has quit IRC | 18:52 | |
| *** slberger has joined #openstack-keystone | 18:53 | |
| *** ddieterly[away] has quit IRC | 18:56 | |
| *** gagehugo has quit IRC | 19:00 | |
| *** code-R has quit IRC | 19:00 | |
| stevemar | ping | 19:00 |
| jamielennox | amakarov isn't here | 19:00 |
| *** gagehugo has joined #openstack-keystone | 19:00 | |
| jamielennox | stevemar: also i have those two no-spec items on the meeting agenda for a bit now | 19:01 |
| jamielennox | though at this point i just expect they'll be midcycle topics | 19:01 |
| gyee | jamielennox, we may need to refactor tokenless auth, depending how much changes you make to auth_context | 19:01 |
| stevemar | jamielennox: yeah, i noticed that, i think they are best for midcycle too | 19:02 |
| stevemar | keystone-lib is mehhh | 19:02 |
| gyee | anyway, I'll take a look at your code | 19:02 |
| stevemar | and views is gonna be a bunch of refactroing that'll land in O if approved | 19:02 |
| jamielennox | gyee: i don't think it affects tokenless auth because they still pass via auth_context | 19:02 |
| jamielennox | oh? so views was the more interesting of the two but didn't think it would be that hard to approve | 19:03 |
| gyee | jamielennox, k, that's good | 19:03 |
| *** jaugustine has quit IRC | 19:04 | |
| *** henrynash has quit IRC | 19:04 | |
| *** daemontool has quit IRC | 19:04 | |
| *** BjoernT has joined #openstack-keystone | 19:04 | |
| *** ddieterly has joined #openstack-keystone | 19:04 | |
| stevemar | jamielennox: am i wrong in my assessment? | 19:07 |
| *** sdake_ has quit IRC | 19:08 | |
| jamielennox | stevemar: not sure - i just didn't consider views as proposed that big a change, i thought that could have been ok this cycle with a bit of reviewing | 19:08 |
| *** timcline has quit IRC | 19:09 | |
| *** timcline has joined #openstack-keystone | 19:10 | |
| *** spzala has joined #openstack-keystone | 19:14 | |
| *** timcline has quit IRC | 19:15 | |
| *** jmlowe has quit IRC | 19:16 | |
| *** gyee has quit IRC | 19:18 | |
| *** sdake_ has joined #openstack-keystone | 19:26 | |
| *** ebalduf_ has quit IRC | 19:28 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Address follow on comments 328447 https://review.openstack.org/341150 | 19:29 |
| lbragstad | rderose_ ^ follow on comments | 19:29 |
| *** jmlowe has joined #openstack-keystone | 19:29 | |
| *** julim has quit IRC | 19:30 | |
| rderose_ | lbragstad: cool | 19:30 |
| *** david-lyle_ has quit IRC | 19:31 | |
| *** code-R has joined #openstack-keystone | 19:33 | |
| *** david-lyle_ has joined #openstack-keystone | 19:35 | |
| *** slberger1 has joined #openstack-keystone | 19:37 | |
| *** slberger has quit IRC | 19:37 | |
| *** KevinE has joined #openstack-keystone | 19:42 | |
| *** adrian_otto has joined #openstack-keystone | 19:44 | |
| *** timcline has joined #openstack-keystone | 19:46 | |
| *** timcline has quit IRC | 19:50 | |
| *** daemontool has joined #openstack-keystone | 19:50 | |
| *** fawadkhaliq has quit IRC | 19:53 | |
| *** ddieterly is now known as ddieterly[away] | 19:56 | |
| *** jmlowe has quit IRC | 19:59 | |
| *** julim has joined #openstack-keystone | 19:59 | |
| *** amakarov has joined #openstack-keystone | 20:00 | |
| *** sdake_ has quit IRC | 20:01 | |
| *** slberger has joined #openstack-keystone | 20:03 | |
| amakarov | stevemar: sorry, I won't be on midcycle in person - can we use hangout or something to let me in for unified delegation discussion? | 20:03 |
| *** slberger1 has quit IRC | 20:04 | |
| *** timcline has joined #openstack-keystone | 20:05 | |
| *** code-R_ has joined #openstack-keystone | 20:05 | |
| stevemar | amakarov: i'll see what we can do, i don't know anything about the venue, but i will certainly try | 20:06 |
| *** tonytan4ever has quit IRC | 20:08 | |
| *** code-R has quit IRC | 20:08 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 20:09 |
| amakarov | stevemar: thank you. and another question :) I've registered a panel about complete RBAC for the Summit (want some feedback from people, so I want just raise problems there) - can you please suggest me who may be intersted to join? | 20:12 |
| openstackgerrit | Richard proposed openstack/keystone: Improve user experience involving token flush https://review.openstack.org/341165 | 20:12 |
| *** adrian_otto1 has joined #openstack-keystone | 20:15 | |
| stevemar | amakarov: oh i'm sure ayoung would jump on it | 20:16 |
| stevemar | amakarov: maybe ask alaski from nova? | 20:17 |
| *** adrian_otto has quit IRC | 20:19 | |
| amakarov | stevemar: alaski? I've seen his comments in the spec - he looks confused by it :) | 20:19 |
| stevemar | amakarov: he is also doing a lot of oslo.policy work, just a suggestion | 20:20 |
| amakarov | stevemar: oh, I see. thank you again | 20:21 |
| raildo | stevemar, keystone already use oslo.policy to enforce the policy? | 20:23 |
| *** ddieterly[away] is now known as ddieterly | 20:24 | |
| samueldmq | raildo: yes https://github.com/openstack/keystone/blob/d9c6b50a3ae514e640fa13a344e59fe3649ee0ef/keystone/policy/backends/rules.py#L69 | 20:24 |
| samueldmq | raildo: it's used by all openstack projects that support rbac | 20:25 |
| *** jmlowe has joined #openstack-keystone | 20:25 | |
| *** jmlowe has quit IRC | 20:25 | |
| samueldmq | usign keystone tokens | 20:25 |
| raildo | samueldmq, thanks :) | 20:25 |
| samueldmq | raildo: np | 20:25 |
| *** adrian_otto1 has quit IRC | 20:27 | |
| raildo | samueldmq, so, the line 15 on https://review.openstack.org/#/c/325326/9/specs/keystone/backlog/complete-rbac.rst, doesn't have sense? | 20:27 |
| patchbot | raildo: patch 325326 - keystone-specs - Complete RBAC in keystone | 20:27 |
| raildo | "policy enforcement performed by every service using oslo.policy" | 20:27 |
| *** adrian_otto has joined #openstack-keystone | 20:28 | |
| samueldmq | raildo: it does, although it's a bit confusing as it's written | 20:28 |
| samueldmq | raildo: because there he's telling how the enforcement happens now | 20:29 |
| samueldmq | raildo: which is "separate the process into:" those 2 points | 20:29 |
| raildo | samueldmq, exactly... | 20:29 |
| samueldmq | raildo: he's saying that, instead of that (2 bullet points saying how it is today), he proposes to have a unified approach where everything is done by keysotne | 20:30 |
| samueldmq | raildo: in worst case leave a comment saying it's not clear ... he might improve that phrasing | 20:30 |
| raildo | samueldmq, I'll do this :) thanks again | 20:31 |
| samueldmq | raildo: np | 20:32 |
| *** amakarov has quit IRC | 20:37 | |
| *** ddieterly is now known as ddieterly[away] | 20:40 | |
| *** david-lyle_ has quit IRC | 20:45 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 20:47 |
| *** gyee has joined #openstack-keystone | 20:48 | |
| *** ChanServ sets mode: +v gyee | 20:48 | |
| lbragstad | gyee o/ | 20:48 |
| gyee | lbragstad, yes sir | 20:48 |
| lbragstad | gyee since the mid-cycle is next week - are you interested in going for a couple runs around San Jose? | 20:48 |
| *** david-lyle_ has joined #openstack-keystone | 20:49 | |
| gyee | sure, what do you need? | 20:49 |
| lbragstad | gyee join #openstack-runners ? | 20:49 |
| *** markvoelker has quit IRC | 20:49 | |
| gyee | lbragstad, I heard there are some nice trails near Stanford | 20:49 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 20:50 |
| *** slberger has quit IRC | 20:57 | |
| *** adu has quit IRC | 20:58 | |
| *** markvoelker has joined #openstack-keystone | 21:00 | |
| *** slberger has joined #openstack-keystone | 21:01 | |
| *** henrynash has joined #openstack-keystone | 21:02 | |
| *** ChanServ sets mode: +v henrynash | 21:02 | |
| *** jmlowe has joined #openstack-keystone | 21:02 | |
| *** ddieterly[away] is now known as ddieterly | 21:03 | |
| lbragstad | fyi - if anyone else is interested in getting a run or two in while we're in San Jose feel free to join #openstack-runners | 21:04 |
| *** david-lyle has joined #openstack-keystone | 21:04 | |
| *** jmlowe has left #openstack-keystone | 21:05 | |
| *** rderose_ has quit IRC | 21:11 | |
| *** adu has joined #openstack-keystone | 21:12 | |
| *** Trident has joined #openstack-keystone | 21:13 | |
| *** adu has quit IRC | 21:16 | |
| *** adu has joined #openstack-keystone | 21:17 | |
| *** BjoernT has quit IRC | 21:19 | |
| *** phalmos has quit IRC | 21:19 | |
| *** adu has quit IRC | 21:20 | |
| *** phalmos has joined #openstack-keystone | 21:20 | |
| *** tonytan4ever has joined #openstack-keystone | 21:20 | |
| *** rcernin has joined #openstack-keystone | 21:21 | |
| browne | lbragstad: I recommend the Guadalupe River Trail (very near the midcycle location). | 21:22 |
| lbragstad | browne nice! that looks like it go right by the hotel | 21:23 |
| *** pauloewerton has quit IRC | 21:24 | |
| *** tonytan4ever has quit IRC | 21:26 | |
| *** pnavarro has joined #openstack-keystone | 21:29 | |
| *** chrisshattuck has quit IRC | 21:30 | |
| *** david-lyle has quit IRC | 21:31 | |
| *** spzala has quit IRC | 21:33 | |
| *** spzala has joined #openstack-keystone | 21:34 | |
| *** spzala has quit IRC | 21:34 | |
| *** spzala has joined #openstack-keystone | 21:34 | |
| *** spzala has quit IRC | 21:39 | |
| openstackgerrit | Richard proposed openstack/keystone: Improve user experience involving token flush https://review.openstack.org/341165 | 21:39 |
| *** pnavarro has quit IRC | 21:43 | |
| *** ametts has quit IRC | 21:49 | |
| *** adrian_otto has quit IRC | 21:50 | |
| *** clenimar_ has joined #openstack-keystone | 21:54 | |
| *** markvoelker has quit IRC | 21:59 | |
| *** markvoelker has joined #openstack-keystone | 22:04 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Allow id string validation to be configurable https://review.openstack.org/334673 | 22:06 |
| *** clenimar_ has quit IRC | 22:06 | |
| lbragstad | dstanek i updated ^ | 22:07 |
| lbragstad | but i also left a comment describing what I'm seeing locally | 22:07 |
| *** phalmos has quit IRC | 22:19 | |
| *** clenimar_ has joined #openstack-keystone | 22:19 | |
| raildo | henrynash, ping, cloudstack have subdomains and reseller http://docs.cloudstack.apache.org/projects/cloudstack-administration/en/4.8/accounts.html#domains interesting :) | 22:22 |
| *** david-lyle_ is now known as david-lyle | 22:22 | |
| *** ddieterly has quit IRC | 22:29 | |
| *** erhudy has quit IRC | 22:31 | |
| *** spzala has joined #openstack-keystone | 22:35 | |
| *** rcernin has quit IRC | 22:35 | |
| *** henrynash has quit IRC | 22:36 | |
| *** tonytan4ever has joined #openstack-keystone | 22:37 | |
| *** gordc has quit IRC | 22:40 | |
| *** spzala has quit IRC | 22:40 | |
| *** lamt has quit IRC | 22:41 | |
| *** tonytan4ever has quit IRC | 22:42 | |
| *** gagehugo has quit IRC | 22:47 | |
| rodrigods | raildo, i bet they have a good db model for that use case :P | 22:47 |
| raildo | rodrigods, haha let's go find out | 22:48 |
| *** timcline has quit IRC | 22:51 | |
| *** timcline has joined #openstack-keystone | 22:51 | |
| *** iurygregory_ has joined #openstack-keystone | 22:54 | |
| *** michauds has quit IRC | 22:54 | |
| *** timcline has quit IRC | 22:56 | |
| *** markvoelker has quit IRC | 23:00 | |
| *** markvoelker has joined #openstack-keystone | 23:06 | |
| *** slberger has left #openstack-keystone | 23:09 | |
| *** catintheroof has quit IRC | 23:09 | |
| *** ravelar159 has quit IRC | 23:12 | |
| *** adrian_otto has joined #openstack-keystone | 23:19 | |
| *** spzala has joined #openstack-keystone | 23:36 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/340036 | 23:39 |
| *** spzala has quit IRC | 23:42 | |
| *** tqtran has quit IRC | 23:46 | |
| *** rderose has joined #openstack-keystone | 23:46 | |
| *** code-R_ has quit IRC | 23:54 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!