| *** roxanaghe has quit IRC | 00:03 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Improve domain configuration API docs https://review.openstack.org/348591 | 00:07 |
|---|---|---|
| openstackgerrit | Eric Brown proposed openstack/keystone: Improve domain configuration API docs https://review.openstack.org/348591 | 00:08 |
| *** marekd2 has joined #openstack-keystone | 00:17 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Improve domain configuration API docs https://review.openstack.org/348591 | 00:17 |
| *** shaleh has quit IRC | 00:19 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Improve domain configuration API docs https://review.openstack.org/348591 | 00:20 |
| *** adu has joined #openstack-keystone | 00:21 | |
| *** marekd2 has quit IRC | 00:22 | |
| *** sdake has quit IRC | 00:23 | |
| *** hwcomcn has joined #openstack-keystone | 00:24 | |
| *** tqtran has quit IRC | 00:25 | |
| *** ddieterly has joined #openstack-keystone | 00:29 | |
| *** adu has quit IRC | 00:37 | |
| *** woodster_ has quit IRC | 00:39 | |
| *** ddieterly is now known as ddieterly[away] | 00:47 | |
| *** jamielennox is now known as jamielennox|away | 00:49 | |
| *** ddieterly[away] has quit IRC | 00:51 | |
| *** tonytan4ever has joined #openstack-keystone | 00:53 | |
| *** code-R has joined #openstack-keystone | 00:53 | |
| *** code-R_ has joined #openstack-keystone | 00:54 | |
| *** hwcomcn has quit IRC | 00:55 | |
| *** gyee has quit IRC | 00:57 | |
| *** tonytan4ever has quit IRC | 00:58 | |
| *** code-R has quit IRC | 00:58 | |
| *** Gorian_ has quit IRC | 01:01 | |
| *** browne has quit IRC | 01:01 | |
| *** roxanaghe has joined #openstack-keystone | 01:03 | |
| *** roxanaghe has quit IRC | 01:07 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password history requirements https://review.openstack.org/328339 | 01:10 |
| *** itisha has quit IRC | 01:10 | |
| *** sdake has joined #openstack-keystone | 01:13 | |
| *** sdake has quit IRC | 01:13 | |
| *** sdake has joined #openstack-keystone | 01:13 | |
| *** sdake_ has joined #openstack-keystone | 01:15 | |
| *** sdake has quit IRC | 01:18 | |
| *** timcline has quit IRC | 01:24 | |
| *** timcline has joined #openstack-keystone | 01:24 | |
| *** timcline has quit IRC | 01:29 | |
| *** tonytan4ever has joined #openstack-keystone | 01:34 | |
| *** jamielennox|away is now known as jamielennox | 01:34 | |
| *** gordc has quit IRC | 01:34 | |
| *** EinstCrazy has joined #openstack-keystone | 01:44 | |
| stevemar | o/ | 01:44 |
| *** EinstCrazy has quit IRC | 01:45 | |
| *** davechen has joined #openstack-keystone | 01:45 | |
| *** EinstCrazy has joined #openstack-keystone | 01:45 | |
| *** adriant has quit IRC | 01:48 | |
| *** sdake_ has quit IRC | 02:19 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/348628 | 02:29 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth: Updated from global requirements https://review.openstack.org/348629 | 02:29 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/348630 | 02:29 |
| *** jamielennox is now known as jamielennox|away | 02:32 | |
| *** gordc has joined #openstack-keystone | 02:33 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/oslo.policy: Updated from global requirements https://review.openstack.org/348661 | 02:33 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/348674 | 02:34 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove the extensions repos https://review.openstack.org/348521 | 02:39 |
| *** tonytan4ever has quit IRC | 02:41 | |
| *** richm has quit IRC | 02:43 | |
| *** TxGVNN has joined #openstack-keystone | 02:57 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add schema validation to update user v2 https://review.openstack.org/345022 | 03:05 |
| stevemar | dolphm: dstanek lbragstad henrynash rderose davechen jamielennox|away bknudson i'm off tomorrow and monday for stat holidays - i'll be working a bit over the weekend as it'll be nice and quiet but likely not on tomorrow at all | 03:15 |
| *** bill_az has quit IRC | 03:26 | |
| openstackgerrit | Merged openstack/keystone: TOTP auth not functional in python3 https://review.openstack.org/348081 | 03:30 |
| *** davechen has quit IRC | 03:35 | |
| *** iurygregory_ has quit IRC | 03:37 | |
| *** tonytan4ever has joined #openstack-keystone | 03:42 | |
| *** gordc has quit IRC | 03:45 | |
| *** tonytan4ever has quit IRC | 03:47 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add schema validation to create user v2 https://review.openstack.org/348531 | 03:49 |
| *** gordc has joined #openstack-keystone | 03:53 | |
| *** adriant has joined #openstack-keystone | 03:59 | |
| *** davechen has joined #openstack-keystone | 04:00 | |
| *** davechen has quit IRC | 04:01 | |
| *** browne has joined #openstack-keystone | 04:02 | |
| *** roxanaghe has joined #openstack-keystone | 04:04 | |
| *** gordc has quit IRC | 04:04 | |
| *** roxanaghe has quit IRC | 04:09 | |
| *** browne has quit IRC | 04:10 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add schema validation to create service in v2 https://review.openstack.org/346962 | 04:12 |
| rderose | stevemar: alright, have a nice weekend | 04:13 |
| *** links has joined #openstack-keystone | 04:13 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add schema validation to create user v2 https://review.openstack.org/348531 | 04:17 |
| *** gagehugo_ has quit IRC | 04:18 | |
| *** code-R_ has quit IRC | 04:22 | |
| *** code-R has joined #openstack-keystone | 04:22 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password expires validation https://review.openstack.org/333360 | 04:38 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 04:44 |
| *** tonytan4ever has joined #openstack-keystone | 04:47 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/348630 | 04:52 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 04:58 |
| openstackgerrit | Merged openstack/keystoneauth: Updated from global requirements https://review.openstack.org/348629 | 05:09 |
| *** songjian has joined #openstack-keystone | 05:19 | |
| *** songjian has left #openstack-keystone | 05:19 | |
| *** amitkqed has quit IRC | 05:19 | |
| *** amitkqed has joined #openstack-keystone | 05:20 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 05:20 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 05:22 |
| *** GB21 has joined #openstack-keystone | 05:22 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 05:25 |
| openstackgerrit | henry-nash proposed openstack/keystone: Remove the extensions repos https://review.openstack.org/348521 | 05:25 |
| openstackgerrit | Merged openstack/keystone: Add schema for enabling a user https://review.openstack.org/344057 | 05:26 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 05:34 |
| *** GB21 has quit IRC | 05:36 | |
| *** GB21 has joined #openstack-keystone | 05:37 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Add rolling upgrade steps to keystone-manage https://review.openstack.org/337680 | 05:37 |
| openstackgerrit | Merged openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/348674 | 05:44 |
| openstackgerrit | Tin Lam proposed openstack/keystone: Add schema validation to v2 update tenant https://review.openstack.org/348738 | 05:45 |
| openstackgerrit | Swapnil Kulkarni (coolsvap) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 05:49 |
| *** davechen has joined #openstack-keystone | 05:50 | |
| openstackgerrit | Merged openstack/oslo.policy: Updated from global requirements https://review.openstack.org/348661 | 05:56 |
| davechen | stevemar: enjoy the holidays. | 05:57 |
| *** davechen has quit IRC | 06:06 | |
| *** david-lyle has joined #openstack-keystone | 06:07 | |
| *** davechen has joined #openstack-keystone | 06:10 | |
| *** code-R has quit IRC | 06:12 | |
| *** code-R has joined #openstack-keystone | 06:13 | |
| openstackgerrit | Merged openstack/keystone: Document the domain config API as stable https://review.openstack.org/348560 | 06:23 |
| *** tonytan4ever has quit IRC | 06:30 | |
| *** GB21 has quit IRC | 06:36 | |
| *** tesseract- has joined #openstack-keystone | 06:37 | |
| *** TxGVNN has quit IRC | 06:40 | |
| *** maestropandy has joined #openstack-keystone | 06:40 | |
| *** david-lyle has quit IRC | 06:45 | |
| *** pcaruana has joined #openstack-keystone | 06:45 | |
| *** avvdemarchis has joined #openstack-keystone | 06:49 | |
| *** GB21 has joined #openstack-keystone | 06:49 | |
| openstackgerrit | Kevin Benton proposed openstack/keystone: [DO NOT MERGE]: test for neutron short life tokens https://review.openstack.org/348755 | 06:50 |
| *** itisha has joined #openstack-keystone | 06:53 | |
| *** roxanaghe has joined #openstack-keystone | 06:53 | |
| *** GB21 has quit IRC | 06:57 | |
| *** roxanaghe has quit IRC | 06:58 | |
| *** GB21 has joined #openstack-keystone | 07:02 | |
| *** GB21 has quit IRC | 07:07 | |
| *** adriant has quit IRC | 07:09 | |
| openstackgerrit | Swapnil Kulkarni (coolsvap) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 07:12 |
| *** GB21 has joined #openstack-keystone | 07:18 | |
| breton | notmyname: probably no good endpoints in the catalog | 07:28 |
| *** tonytan4ever has joined #openstack-keystone | 07:31 | |
| *** sheel has joined #openstack-keystone | 07:32 | |
| *** pnavarro has quit IRC | 07:32 | |
| *** GB21 has quit IRC | 07:33 | |
| *** tonytan4ever has quit IRC | 07:36 | |
| *** code-R has quit IRC | 07:40 | |
| *** code-R has joined #openstack-keystone | 07:40 | |
| *** TxGVNN has joined #openstack-keystone | 07:41 | |
| *** afred312_ has joined #openstack-keystone | 07:42 | |
| *** marekd2 has joined #openstack-keystone | 07:44 | |
| *** afred312 has quit IRC | 07:45 | |
| *** dkehn has quit IRC | 07:45 | |
| *** dkehn_ has joined #openstack-keystone | 07:58 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** code-R has quit IRC | 08:06 | |
| *** brancal has joined #openstack-keystone | 08:06 | |
| *** GB21 has joined #openstack-keystone | 08:34 | |
| *** marekd has quit IRC | 08:39 | |
| *** roxanaghe has joined #openstack-keystone | 08:41 | |
| *** daemontool has joined #openstack-keystone | 08:44 | |
| *** roxanaghe has quit IRC | 08:46 | |
| *** pnavarro has joined #openstack-keystone | 08:51 | |
| *** marekd has joined #openstack-keystone | 08:53 | |
| *** ChanServ sets mode: +v marekd | 08:53 | |
| *** marekd has quit IRC | 08:57 | |
| *** marekd has joined #openstack-keystone | 09:01 | |
| *** ChanServ sets mode: +v marekd | 09:01 | |
| *** maestropandy has quit IRC | 09:25 | |
| openstackgerrit | Jinxing Fang proposed openstack/keystone: Remove fatal_deprecations config https://review.openstack.org/348799 | 09:27 |
| *** permalac has joined #openstack-keystone | 09:33 | |
| *** GB21 has quit IRC | 09:46 | |
| *** tlbr has quit IRC | 09:52 | |
| *** tlbr has joined #openstack-keystone | 09:53 | |
| *** tlbr has quit IRC | 09:53 | |
| *** tlbr has joined #openstack-keystone | 09:54 | |
| *** tlbr has quit IRC | 09:54 | |
| *** tlbr has joined #openstack-keystone | 09:56 | |
| *** tlbr is now known as Guest45466 | 09:56 | |
| *** GB21 has joined #openstack-keystone | 09:58 | |
| *** Guest45466 has quit IRC | 10:00 | |
| *** tlbr_ has joined #openstack-keystone | 10:13 | |
| *** sheel has quit IRC | 10:16 | |
| *** tlbr_ has quit IRC | 10:17 | |
| *** maestropandy has joined #openstack-keystone | 10:18 | |
| *** EinstCrazy has quit IRC | 10:19 | |
| *** davechen has left #openstack-keystone | 10:23 | |
| *** sdake has joined #openstack-keystone | 10:25 | |
| *** kswiatek_ has quit IRC | 10:27 | |
| *** roxanaghe has joined #openstack-keystone | 10:30 | |
| *** roxanaghe has quit IRC | 10:34 | |
| *** marekd2 has quit IRC | 10:56 | |
| *** marekd2 has joined #openstack-keystone | 10:57 | |
| *** TxGVNN has quit IRC | 10:59 | |
| *** GB21 has quit IRC | 11:00 | |
| *** marekd2 has quit IRC | 11:01 | |
| *** marekd2 has joined #openstack-keystone | 11:01 | |
| *** andreykurilin has joined #openstack-keystone | 11:07 | |
| andreykurilin | hi all! | 11:08 |
| andreykurilin | Can anybody help me? it looks like Rally started fail with latest keystoneauth | 11:08 |
| andreykurilin | my fault. root cause is not in keystoneauth, it is keystone-api change. https://github.com/openstack/keystone/commit/529ff14940ebd15849e74acab47b29715c1debb6 | 11:17 |
| andreykurilin | catched exception: http://logs.openstack.org/88/348788/1/check/gate-rally-dsvm-keystone-v2api-rally/992e7ee/rally-plot/results.html.gz#/KeystoneBasic.create_user_set_enabled_and_delete/failures | 11:18 |
| andreykurilin | failed rally code - https://github.com/openstack/rally/blob/master/rally/plugins/openstack/scenarios/keystone/utils.py#L43-L50 | 11:18 |
| andreykurilin | and it looks like everything is ok at rally and keystoneclient sides - https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/v2_0/users.py#L60-L62 | 11:19 |
| *** rodrigods has quit IRC | 11:19 | |
| *** rodrigods has joined #openstack-keystone | 11:19 | |
| breton | andreykurilin: file a bugreport please | 11:20 |
| breton | andreykurilin: rally passes `id` in the dict. The new code doesn't want it :) | 11:21 |
| stevemar | breton: i'm so glad you are here to guard the keystone castle during the EU times :P | 11:21 |
| breton | oh | 11:21 |
| breton | andreykurilin: so it's in keystoneclient? | 11:21 |
| andreykurilin__ | Yes | 11:21 |
| breton | oh well. | 11:21 |
| stevemar | we did just release a new version... | 11:22 |
| breton | stevemar: https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/v2_0/users.py#L60-L62 -- master ksc sends "id", but https://review.openstack.org/#/c/344057/ forbids it (merged 6 hours ago) | 11:23 |
| patchbot | breton: patch 344057 - keystone - Add schema for enabling a user (MERGED) | 11:23 |
| breton | i think we need to revert 344057 | 11:23 |
| andreykurilin | +1 | 11:23 |
| andreykurilin | :) | 11:23 |
| andreykurilin | can propose a change:) | 11:23 |
| breton | fix the client, release it, re-revert | 11:24 |
| breton | andreykurilin: file a bugreport please | 11:24 |
| breton | andreykurilin: will you? If no, i'll do it | 11:24 |
| andreykurilin | breton: unfortunately, my internet provider has a problem with access to launchpad:( so I have no ability to file a bug :( | 11:25 |
| breton | andreykurilin: ok, will file it now | 11:25 |
| andreykurilin | thx | 11:25 |
| *** sdake has quit IRC | 11:27 | |
| *** maestropandy has quit IRC | 11:27 | |
| *** aastha has quit IRC | 11:29 | |
| *** lamt_ has quit IRC | 11:31 | |
| *** tonytan4ever has joined #openstack-keystone | 11:32 | |
| stevemar | breton: maybe fix the client? | 11:33 |
| stevemar | breton: there's no need to send the id in the payload, it's in the URL path | 11:33 |
| stevemar | same with "update_password" | 11:34 |
| breton | stevemar: can we fix and release it quickly enough? | 11:34 |
| stevemar | breton: i can file for a release, but whats the rush? won't rally code pick it up from master ksc? | 11:34 |
| breton | there is no need to send the id, but what if people do it? | 11:34 |
| breton | andreykurilin: will rally pick the fix up from master keystonclient? | 11:35 |
| stevemar | hmm, we could always change https://review.openstack.org/#/c/344057/4/keystone/identity/schema.py line 74 to True | 11:35 |
| patchbot | stevemar: patch 344057 - keystone - Add schema for enabling a user (MERGED) | 11:35 |
| *** Guest5363 has joined #openstack-keystone | 11:36 | |
| *** Guest5363 has quit IRC | 11:36 | |
| andreykurilin | breton, stevemar: no. rally will not pick up master ksc. but we can use latest ksc release(without waiting g-r) | 11:36 |
| andreykurilin | or we can turn off failed scenarios. I do not like this idea, but we can temporary do it | 11:37 |
| stevemar | breton: want to fix the client? i'll file the bug and create a new release | 11:37 |
| *** tonytan4ever has quit IRC | 11:37 | |
| stevemar | hmm.. but older clients will fail now | 11:38 |
| stevemar | bah, damn inconsistent APIs | 11:38 |
| stevemar | breton: changing the schema to accept additional properties should work | 11:38 |
| breton | stevemar: lets fix keystone by setting line 74 to True | 11:38 |
| breton | ++ | 11:38 |
| stevemar | breton: i'll file the bug and grumble | 11:39 |
| stevemar | breton: meh, just use existing one ... "Related-Bug: #1603905" | 11:39 |
| openstack | bug 1603905 in OpenStack Identity (keystone) "V2 API: enable a user doesn't work" [Medium,Fix released] https://launchpad.net/bugs/1603905 - Assigned to Dave Chen (wei-d-chen) | 11:39 |
| stevemar | breton: gonna toss up a fix, i can quickly approve | 11:39 |
| stevemar | breton: (that was meant to be a question to you) | 11:40 |
| *** tangchen has quit IRC | 11:40 | |
| *** itisha has quit IRC | 11:40 | |
| breton | stevemar: https://bugs.launchpad.net/keystone/+bug/1607751 | 11:40 |
| openstack | Launchpad bug 1607751 in OpenStack Identity (keystone) "Schema for enabling users breaks keystoneclient and other projects" [Undecided,New] | 11:40 |
| breton | stevemar: will submit to review in a couple of minutes | 11:41 |
| stevemar | breton: cool | 11:41 |
| stevemar | we could remove it from the client too. it's not needed there at all | 11:41 |
| *** tangchen has joined #openstack-keystone | 11:42 | |
| *** maestropandy has joined #openstack-keystone | 11:43 | |
| *** maestropandy has left #openstack-keystone | 11:43 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Allow attributes other than `enabled` in schema https://review.openstack.org/348851 | 11:45 |
| dstanek | morning | 11:46 |
| stevemar | breton: thank you | 11:46 |
| stevemar | dstanek: howdy partner | 11:46 |
| dstanek | stevemar: what's up with that xenial job? | 11:49 |
| breton | will fix ksc after lunch | 11:49 |
| stevemar | dstanek: what about it? | 11:49 |
| stevemar | breton: thank you sir | 11:49 |
| stevemar | dstanek: they're all xenial-y now1 | 11:50 |
| *** marekd2 has quit IRC | 11:50 | |
| stevemar | dstanek: infra is/was moving to xenial for stuff, so it isn't a complete surprise | 11:50 |
| dstanek | stevemar: one of them keeps choking on reviews | 11:50 |
| stevemar | oh? | 11:50 |
| stevemar | dstanek: which? | 11:50 |
| dstanek | stevemar: i'll have to look to see if it's the same one each time.. | 11:51 |
| dstanek | stevemar: maybe it's just neutron full as i've seen that mail a couple of times. xenial was a red herring | 11:52 |
| *** tangchen has quit IRC | 11:58 | |
| *** gordc has joined #openstack-keystone | 12:02 | |
| *** marekd2 has joined #openstack-keystone | 12:03 | |
| *** marekd2_ has joined #openstack-keystone | 12:04 | |
| *** marekd2 has quit IRC | 12:04 | |
| *** tlbr_ has joined #openstack-keystone | 12:05 | |
| *** hwcomcn has joined #openstack-keystone | 12:05 | |
| stevemar | dstanek: possiprobably | 12:06 |
| *** hwcomcn has quit IRC | 12:07 | |
| *** hwcomcn has joined #openstack-keystone | 12:07 | |
| *** hwcomcn has quit IRC | 12:09 | |
| *** tlbr_ has quit IRC | 12:09 | |
| *** hwcomcn has joined #openstack-keystone | 12:10 | |
| *** hwcomcn has quit IRC | 12:11 | |
| *** hwcomcn has joined #openstack-keystone | 12:12 | |
| *** hwcomcn has quit IRC | 12:13 | |
| *** hwcomcn has joined #openstack-keystone | 12:14 | |
| *** itisha has joined #openstack-keystone | 12:16 | |
| *** pauloewerton has joined #openstack-keystone | 12:23 | |
| *** mhu has quit IRC | 12:27 | |
| *** mhu has joined #openstack-keystone | 12:34 | |
| *** Guest41883 has joined #openstack-keystone | 12:35 | |
| *** Guest41883 has quit IRC | 12:40 | |
| *** tlbr_ has joined #openstack-keystone | 12:48 | |
| *** maestropandy1 has joined #openstack-keystone | 12:52 | |
| *** bill_az has joined #openstack-keystone | 12:52 | |
| *** tlbr_ has quit IRC | 12:52 | |
| *** edmondsw has joined #openstack-keystone | 12:54 | |
| *** maestropandy1 has left #openstack-keystone | 12:56 | |
| *** maestropandy has joined #openstack-keystone | 13:00 | |
| *** tonytan4ever has joined #openstack-keystone | 13:04 | |
| *** maestropandy has left #openstack-keystone | 13:04 | |
| *** links has quit IRC | 13:07 | |
| *** tonytan4ever has quit IRC | 13:08 | |
| *** samueldmq has joined #openstack-keystone | 13:09 | |
| *** ChanServ sets mode: +v samueldmq | 13:09 | |
| *** ianw has quit IRC | 13:10 | |
| *** ianw has joined #openstack-keystone | 13:10 | |
| *** jsavak has joined #openstack-keystone | 13:14 | |
| *** samueldmq has quit IRC | 13:16 | |
| *** nkinder has joined #openstack-keystone | 13:16 | |
| openstackgerrit | Boris Bobrov proposed openstack/python-keystoneclient: Do not send user ids as payload https://review.openstack.org/348881 | 13:19 |
| *** tlbr has joined #openstack-keystone | 13:19 | |
| *** tlbr is now known as Guest28658 | 13:20 | |
| openstackgerrit | Tin Lam proposed openstack/keystone: Add schema validation to v2 update tenant https://review.openstack.org/348738 | 13:23 |
| *** Guest28658 has quit IRC | 13:24 | |
| openstackgerrit | Tin Lam proposed openstack/keystone: Add schema validation to v2 update tenant https://review.openstack.org/348738 | 13:28 |
| *** samueldmq has joined #openstack-keystone | 13:32 | |
| *** ChanServ sets mode: +v samueldmq | 13:32 | |
| lbragstad | samueldmq i created a bug for the revocation caching stuff - https://bugs.launchpad.net/keystone/+bug/1607553 | 13:35 |
| openstack | Launchpad bug 1607553 in OpenStack Identity (keystone) "Revocation event caching is broken" [Undecided,New] | 13:35 |
| *** ddieterly has joined #openstack-keystone | 13:35 | |
| lbragstad | samueldmq I started putting some of my findings in there | 13:35 |
| samueldmq | lbragstad: nice | 13:35 |
| samueldmq | lbragstad: I just saw your comment on https://review.openstack.org/#/c/343875/ | 13:36 |
| patchbot | samueldmq: patch 343875 - keystone - Remove cache from revoke subsystem | 13:36 |
| lbragstad | samueldmq feel free to do the same if you have things that I've missed | 13:36 |
| samueldmq | lbragstad: does it still apply ? or was it that test you did and it worked later ? | 13:36 |
| lbragstad | I'm not sure - that was a couple days ago | 13:38 |
| lbragstad | but those were just issues with the unit tests - which seemed strange to me? | 13:38 |
| *** richm has joined #openstack-keystone | 13:40 | |
| *** catintheroof has quit IRC | 13:42 | |
| *** krypto has joined #openstack-keystone | 13:47 | |
| *** code-R has joined #openstack-keystone | 13:49 | |
| krypto | hello all;any idea on this error with LDAP backend :TRACE keystone.common.wsgi BackendError: {'desc': 'Connect error'} | 13:50 |
| krypto | ldap commands are working | 13:50 |
| krypto | i have tls enabled in keystone.conf | 13:50 |
| samueldmq | lbragstad: yeah, those are strange if they're happening in unittests | 13:53 |
| dstanek | krypto: ldap commands from the comand line or through keystone? | 13:54 |
| dstanek | krypto: it looks to me like it can't connect so i would check your connection settings | 13:55 |
| krypto | dstanek ldap commands triedl ldapwhoami and its working | 13:55 |
| *** code-R_ has joined #openstack-keystone | 13:55 | |
| dstanek | krypto: i would make sure your keystone ldap connection information is correct then. do you have debug logging on? | 13:56 |
| *** edmondsw has quit IRC | 13:56 | |
| *** lamt_ has joined #openstack-keystone | 13:57 | |
| *** thiagolib has quit IRC | 13:58 | |
| *** code-R has quit IRC | 13:58 | |
| *** code-R has joined #openstack-keystone | 14:01 | |
| krypto | dstanek yes debug is on for keystone and ldap but it shows connected to port 389 not sure what i am missing here... can you have a look at the ldap-keystone error log http://paste.ubuntu.com/21403045/ | 14:02 |
| *** nishaYadav has joined #openstack-keystone | 14:02 | |
| * nishaYadav waves hello o/ | 14:03 | |
| nishaYadav | samueldmq, morning | 14:03 |
| *** code-R_ has quit IRC | 14:04 | |
| *** roxanaghe has joined #openstack-keystone | 14:05 | |
| dstanek | krypto: i think that means that it can't connect | 14:08 |
| *** code-R_ has joined #openstack-keystone | 14:08 | |
| *** roxanaghe has quit IRC | 14:10 | |
| dstanek | krypto: did you restart keystone after you changed your ldap creds? | 14:10 |
| *** code-R has quit IRC | 14:11 | |
| krypto | yes dstanek | 14:11 |
| samueldmq | nishaYadav: morning | 14:13 |
| *** nishaYadav has quit IRC | 14:13 | |
| *** hwcomcn has quit IRC | 14:16 | |
| *** nishaYadav has joined #openstack-keystone | 14:18 | |
| *** nishaYadav is now known as Guest78968 | 14:18 | |
| *** Guest78968 is now known as nisha_ | 14:20 | |
| *** thiagolib has joined #openstack-keystone | 14:24 | |
| *** tlbr_ has joined #openstack-keystone | 14:33 | |
| *** edmondsw has joined #openstack-keystone | 14:34 | |
| *** tlbr_ has quit IRC | 14:34 | |
| *** tonytan4ever has joined #openstack-keystone | 14:35 | |
| *** david-lyle has joined #openstack-keystone | 14:42 | |
| *** david-lyle_ has joined #openstack-keystone | 14:46 | |
| *** david-lyle has quit IRC | 14:47 | |
| *** david-lyle__ has joined #openstack-keystone | 14:48 | |
| *** tlbr_ has joined #openstack-keystone | 14:50 | |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 roles https://review.openstack.org/334546 | 14:50 |
| *** david-lyle_ has quit IRC | 14:52 | |
| *** tlbr_ has quit IRC | 14:53 | |
| breton | why can't we validate trust-scoped tokens against the v2.0 API? | 15:00 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 15:02 |
| breton | i think we can get a token from trust in 2.0, so why can't we validate it againts v2.0 API? | 15:02 |
| *** jistr is now known as jistr|call | 15:10 | |
| *** aastha has joined #openstack-keystone | 15:17 | |
| *** jistr|call is now known as jistr | 15:17 | |
| *** slberger has joined #openstack-keystone | 15:19 | |
| *** ayoung has joined #openstack-keystone | 15:22 | |
| *** ChanServ sets mode: +v ayoung | 15:22 | |
| *** david-lyle has joined #openstack-keystone | 15:23 | |
| *** code-R_ has quit IRC | 15:23 | |
| *** david-lyle__ has quit IRC | 15:23 | |
| lbragstad | notmorgan ping - do you know how https://github.com/openstack/oslo.cache/blob/8b8a718507b30a4a2fd36e6c14d1071bd6cca878/oslo_cache/core.py#L65 is suppose to work? | 15:24 |
| lbragstad | I have conf.cache.debug_cache_backend = True in my keystone.conf - but I'm not seeing any sort of CACHE values in my logs | 15:25 |
| breton | it worked for me some time ago | 15:28 |
| *** Guest79767 has joined #openstack-keystone | 15:29 | |
| lbragstad | breton you didn't do anything fancy to get it to work did you? | 15:29 |
| lbragstad | breton technically you should just set conf.cache.debug_cache_backend = True in your keystone.conf and you should see the additional logging in your keystone logs, right? | 15:29 |
| breton | lbragstad: right | 15:31 |
| lbragstad | breton thanks for the info - i'll drop in the oslo channel and see if they have any advice | 15:31 |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add role functional tests https://review.openstack.org/335118 | 15:33 |
| *** Guest79767 has quit IRC | 15:34 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 15:37 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 15:37 |
| *** diazjf has joined #openstack-keystone | 15:38 | |
| breton | lbragstad: as far as i understand something is wrong with actual logging | 15:39 |
| *** sdake has joined #openstack-keystone | 15:39 | |
| *** tlbr_ has joined #openstack-keystone | 15:40 | |
| *** code-R has joined #openstack-keystone | 15:44 | |
| *** bill_az has quit IRC | 15:44 | |
| *** marekd2_ has quit IRC | 15:44 | |
| *** marekd2 has joined #openstack-keystone | 15:45 | |
| *** tlbr_ has quit IRC | 15:45 | |
| lbragstad | breton really? | 15:45 |
| lbragstad | breton like, logging in keystone? | 15:45 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 15:46 |
| *** marekd2 has quit IRC | 15:46 | |
| *** marekd2 has joined #openstack-keystone | 15:47 | |
| breton | lbragstad: i don't know. But get() of the debug proxy gets called, and debug logging is disabled for _LOG at that point for some reason. | 15:48 |
| breton | but i see all other debug messages in the log | 15:48 |
| lbragstad | breton strange | 15:50 |
| *** roxanaghe has joined #openstack-keystone | 15:52 | |
| *** roxanaghe has quit IRC | 15:56 | |
| *** GB21 has joined #openstack-keystone | 15:56 | |
| breton | lbragstad: i asked someone | 16:00 |
| breton | lbragstad: logging level of all libraries (including oslo libs) is controlled by parameter default_log_levels | 16:00 |
| *** pcaruana has quit IRC | 16:01 | |
| breton | lbragstad: default_log_levels=oslo_cache=DEBUG | 16:01 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 16:02 |
| lbragstad | breton awesome, trying that quick | 16:02 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 16:04 |
| lbragstad | breton interesting - that worked! | 16:04 |
| lbragstad | thanks! | 16:04 |
| breton | lbragstad: i have a question for you too | 16:05 |
| lbragstad | breton go for it | 16:05 |
| breton | lbragstad: after reading your note on https://review.openstack.org/#/c/345686/4/keystone/tests/unit/test_auth.py i started to figure out why trust-scoped tokens cannot be validated on v2.0. | 16:05 |
| patchbot | breton: patch 345686 - keystone - Make AuthWithTrust testable against uuid and fernet | 16:05 |
| breton | lbragstad: Why can we issue a trust-scoped token on v2.0 and cannot validate it? | 16:05 |
| lbragstad | breton that was the byproduct of a time-crunched refactor I believe | 16:06 |
| lbragstad | breton at the time - we were trying to consolidate all the fernet token provider stuff into keystone/token/providers/common.py | 16:06 |
| lbragstad | so that uuid and fernet would take more of the same code path when creating and authenticating tokens | 16:06 |
| lbragstad | so - I did two things | 16:06 |
| lbragstad | er... I proposed two patches | 16:06 |
| lbragstad | one to get v2.0 trust auth working with fernet and v2.0 and one to migrate fernet validation into keystone/token/providers/common.py as is (without being able to validate trusts on v2.0 because that's how fernet was originally implemented) | 16:07 |
| lbragstad | breton here is the other patch that I had up https://review.openstack.org/#/c/278693/ | 16:08 |
| patchbot | lbragstad: patch 278693 - keystone - Make fernet support trust auth against v2.0 | 16:08 |
| lbragstad | but - I haven't had a chance to dust it off and get it rebased | 16:08 |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 credentials https://review.openstack.org/348506 | 16:09 |
| breton | lbragstad: so uuid stopped supporting v2.0 validation too? | 16:09 |
| lbragstad | breton I don't think so - I believe uuid tokens still support trust scoped token validation like they always have | 16:09 |
| breton | lbragstad: keystone.tests.unit.test_v3_trust.TestTrustOperations.test_validate_trust_scoped_token_against_v2_returns_unauthorized says no | 16:10 |
| lbragstad | breton ah - you're right | 16:11 |
| lbragstad | i was looking at a separate test that was specific to trust scoped tokens being removed from the token backend when a trust is deleted | 16:11 |
| openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add credential functional tests https://review.openstack.org/348557 | 16:11 |
| breton | i don't understand why | 16:12 |
| lbragstad | breton we were probably shooting to keep both providers consistent | 16:12 |
| *** jed56 has quit IRC | 16:15 | |
| breton | i'll probably bring it up at the meeting | 16:16 |
| lbragstad | breton sure | 16:16 |
| lbragstad | breton we can finish up the patch that I have to include trust-scoped token validation on v2.0 | 16:17 |
| lbragstad | as long as we get consensus | 16:17 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 16:18 |
| openstackgerrit | Merged openstack/keystone: Remove the extensions repos https://review.openstack.org/348521 | 16:19 |
| *** nisha_ has quit IRC | 16:21 | |
| *** jed56 has joined #openstack-keystone | 16:26 | |
| *** Guest30197 has joined #openstack-keystone | 16:28 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Minimum password age requirements https://review.openstack.org/343314 | 16:29 |
| *** tesseract- has quit IRC | 16:30 | |
| *** bill_az has joined #openstack-keystone | 16:30 | |
| *** permalac has quit IRC | 16:31 | |
| *** jamielennox|away is now known as jamielennox | 16:32 | |
| *** pnavarro has quit IRC | 16:32 | |
| *** Guest30197 has quit IRC | 16:33 | |
| *** roxanaghe has joined #openstack-keystone | 16:34 | |
| *** tqtran has joined #openstack-keystone | 16:34 | |
| *** samueldmq has quit IRC | 16:35 | |
| *** tqtran_ has joined #openstack-keystone | 16:35 | |
| *** diazjf has quit IRC | 16:36 | |
| *** nishaYadav has joined #openstack-keystone | 16:38 | |
| *** tqtran has quit IRC | 16:38 | |
| *** tlbr_ has joined #openstack-keystone | 16:40 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 16:41 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 16:42 |
| *** tlbr_ has quit IRC | 16:44 | |
| *** nishaYadav has quit IRC | 16:45 | |
| *** marekd2 has quit IRC | 16:46 | |
| *** tonytan_brb has joined #openstack-keystone | 16:48 | |
| *** tonytan4ever has quit IRC | 16:51 | |
| *** tangchen has joined #openstack-keystone | 16:56 | |
| *** roxanaghe has quit IRC | 16:58 | |
| *** tangchen has quit IRC | 17:01 | |
| *** brancal has quit IRC | 17:10 | |
| *** samueldmq has joined #openstack-keystone | 17:11 | |
| *** ChanServ sets mode: +v samueldmq | 17:11 | |
| *** adrian_otto has joined #openstack-keystone | 17:19 | |
| *** roxanaghe has joined #openstack-keystone | 17:20 | |
| *** tlbr_ has joined #openstack-keystone | 17:25 | |
| *** Gorian_ has joined #openstack-keystone | 17:28 | |
| *** ddieterly is now known as ddieterly[away] | 17:29 | |
| *** tlbr_ has quit IRC | 17:30 | |
| *** TxGVNN has joined #openstack-keystone | 17:34 | |
| *** itlinux has quit IRC | 17:35 | |
| *** jamielennox is now known as jamielennox|away | 17:35 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Limit password changes per day https://review.openstack.org/348915 | 17:38 |
| openstackgerrit | Merged openstack/keystone: Allow attributes other than `enabled` in schema https://review.openstack.org/348851 | 17:41 |
| *** krypto has quit IRC | 17:51 | |
| *** spzala has joined #openstack-keystone | 17:52 | |
| *** links has joined #openstack-keystone | 17:54 | |
| *** jsavak has quit IRC | 18:02 | |
| *** jsavak has joined #openstack-keystone | 18:02 | |
| *** avvdemarchis has quit IRC | 18:07 | |
| *** slberger1 has joined #openstack-keystone | 18:09 | |
| *** slberger has quit IRC | 18:09 | |
| *** jdennis has quit IRC | 18:10 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Add dummy domain_id column to cached role https://review.openstack.org/347543 | 18:16 |
| *** TxGVNN has quit IRC | 18:17 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 18:26 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Move Identity Provider API to its own file https://review.openstack.org/349009 | 18:28 |
| samueldmq | stevemar: lbragstad: ^ | 18:28 |
| *** GB21 has quit IRC | 18:32 | |
| *** jsavak has quit IRC | 18:33 | |
| *** jsavak has joined #openstack-keystone | 18:33 | |
| samueldmq | stevemar: lbragstad: I will do the same for the other TODO notes in the federation docs ... but I want to get some feedback on that first, and I'd like to rename the index.inc to index.rst, but I am unable to make the relative imports (when using .rst) | 18:35 |
| samueldmq | :/ | 18:35 |
| *** dkehn_ has quit IRC | 18:40 | |
| samueldmq | I left a comment in the review, .rst expertise is welcome :) | 18:40 |
| *** samueldmq has quit IRC | 18:40 | |
| *** jed56 has quit IRC | 18:45 | |
| *** sdake has quit IRC | 18:47 | |
| *** diazjf has joined #openstack-keystone | 18:48 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Password history requirements https://review.openstack.org/328339 | 18:49 |
| *** ddieterly[away] is now known as ddieterly | 18:50 | |
| *** dkehn_ has joined #openstack-keystone | 18:52 | |
| *** hoonetorg has quit IRC | 18:56 | |
| *** adrian_otto has quit IRC | 18:59 | |
| *** tlbr has joined #openstack-keystone | 19:00 | |
| *** tlbr is now known as Guest84124 | 19:00 | |
| *** Guest84124 has quit IRC | 19:04 | |
| *** fifieldt has quit IRC | 19:07 | |
| *** roxanaghe has quit IRC | 19:10 | |
| *** fifieldt has joined #openstack-keystone | 19:18 | |
| *** dkehn_ has quit IRC | 19:19 | |
| *** links has quit IRC | 19:20 | |
| *** raildo has quit IRC | 19:23 | |
| *** dkehn_ has joined #openstack-keystone | 19:32 | |
| *** sdake has joined #openstack-keystone | 19:35 | |
| *** edmondsw has quit IRC | 19:35 | |
| openstackgerrit | Merged openstack/keystone: Make AuthWithTrust testable against uuid and fernet https://review.openstack.org/345686 | 19:36 |
| *** diazjf has quit IRC | 19:37 | |
| openstackgerrit | Merged openstack/keystone: Allow V2TestCase to be tested against fernet and uuid https://review.openstack.org/345687 | 19:37 |
| *** tlbr has joined #openstack-keystone | 19:42 | |
| *** tlbr is now known as Guest79100 | 19:42 | |
| *** diazjf has joined #openstack-keystone | 19:45 | |
| *** brancal has joined #openstack-keystone | 19:48 | |
| *** Guest79100 has quit IRC | 19:51 | |
| *** raildo has joined #openstack-keystone | 19:52 | |
| *** slberger1 has quit IRC | 19:55 | |
| *** gordc has quit IRC | 19:56 | |
| openstackgerrit | Kam Nasim proposed openstack/keystone: Add default project_id to user ref on role grant https://review.openstack.org/349059 | 19:58 |
| *** sdake has quit IRC | 19:59 | |
| *** ddieterly is now known as ddieterly[away] | 20:01 | |
| *** ddieterly[away] is now known as ddieterly | 20:01 | |
| *** ddieterly is now known as ddieterly[away] | 20:01 | |
| *** ddieterly[away] is now known as ddieterly | 20:04 | |
| *** roxanaghe has joined #openstack-keystone | 20:05 | |
| *** slberger has joined #openstack-keystone | 20:07 | |
| *** adrian_otto has joined #openstack-keystone | 20:11 | |
| *** pnavarro has joined #openstack-keystone | 20:15 | |
| *** tonytan_brb has quit IRC | 20:31 | |
| * lbragstad if anyone is look to double check anything - i'd appreciate another pair of eyes on my approach to debugging this (just to see if it makes sense) https://bugs.launchpad.net/keystone/+bug/1607553 | 20:34 | |
| openstack | Launchpad bug 1607553 in OpenStack Identity (keystone) "Revocation event caching is broken" [Undecided,New] | 20:34 |
| *** jsavak has quit IRC | 21:01 | |
| *** raildo has quit IRC | 21:01 | |
| *** jsavak has joined #openstack-keystone | 21:01 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: [api] add blurb about experimental status https://review.openstack.org/347947 | 21:02 |
| *** ddieterly is now known as ddieterly[away] | 21:02 | |
| *** ddieterly[away] is now known as ddieterly | 21:03 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Remove oslo-incubator https://review.openstack.org/337928 | 21:12 |
| *** diazjf has quit IRC | 21:14 | |
| *** slberger has quit IRC | 21:17 | |
| *** brancal has quit IRC | 21:18 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Fix description of option `cache` https://review.openstack.org/347234 | 21:19 |
| *** slberger has joined #openstack-keystone | 21:22 | |
| *** spzala has quit IRC | 21:23 | |
| lbragstad | notmorgan how come the hard_invalidated() logic is the same as the soft_invalidated() logic - https://github.com/openstack/keystone/blob/627eeeaef421867bf501f450cd207c3fb94d56ee/keystone/common/cache/core.py#L86-L90? | 21:28 |
| *** tonytan4ever has joined #openstack-keystone | 21:31 | |
| *** pauloewerton has quit IRC | 21:32 | |
| *** Guest97891 has joined #openstack-keystone | 21:32 | |
| *** ddieterly is now known as ddieterly[away] | 21:32 | |
| *** tonytan4ever has quit IRC | 21:36 | |
| *** pnavarro has quit IRC | 21:36 | |
| *** Guest97891 has quit IRC | 21:39 | |
| *** daemontool has quit IRC | 21:41 | |
| *** dims_ has quit IRC | 21:44 | |
| *** ayoung has quit IRC | 21:44 | |
| *** dims has joined #openstack-keystone | 21:46 | |
| *** tlbr_ has joined #openstack-keystone | 21:46 | |
| *** diazjf has joined #openstack-keystone | 21:46 | |
| *** tlbr_ has quit IRC | 21:47 | |
| *** diazjf has quit IRC | 21:47 | |
| *** jsavak has quit IRC | 21:50 | |
| *** spzala has joined #openstack-keystone | 21:59 | |
| *** tlbr_ has joined #openstack-keystone | 22:00 | |
| breton | lbragstad: that part doesn't work at all | 22:04 |
| *** tlbr_ has quit IRC | 22:04 | |
| *** spzala has quit IRC | 22:04 | |
| breton | lbragstad: see lines 126 and 127. _hard_invalidates and _soft_invalidated are set to a scalar value, once. | 22:05 |
| breton | lbragstad: the logic is the same, because the order of assignment inside dogpile.cache matters | 22:06 |
| *** Guest13477 has joined #openstack-keystone | 22:14 | |
| *** diazjf has joined #openstack-keystone | 22:17 | |
| *** Guest13477 has quit IRC | 22:19 | |
| *** diazjf has quit IRC | 22:23 | |
| *** ddieterly[away] is now known as ddieterly | 22:23 | |
| *** diazjf has joined #openstack-keystone | 22:24 | |
| *** tlbr_ has joined #openstack-keystone | 22:24 | |
| *** diazjf has quit IRC | 22:26 | |
| *** tlbr_ has quit IRC | 22:29 | |
| *** tlbr_ has joined #openstack-keystone | 22:35 | |
| *** dave-mccowan has quit IRC | 22:38 | |
| *** tlbr_ has quit IRC | 22:40 | |
| *** slberger has quit IRC | 22:53 | |
| *** Guest59655 has joined #openstack-keystone | 22:56 | |
| openstackgerrit | Merged openstack/keystoneauth: Fix arguments to _auth_required() https://review.openstack.org/348523 | 22:59 |
| *** Guest59655 has quit IRC | 23:02 | |
| *** Gorian_ has quit IRC | 23:08 | |
| harlowja | qq, guys, whats the best little (somewhat up to date) view on keystone architecture, some folks internally wanted to know | 23:17 |
| harlowja | if there is anything :-P | 23:17 |
| harlowja | i guess http://docs.openstack.org/developer/keystone/architecture.html | 23:19 |
| *** woodster_ has joined #openstack-keystone | 23:21 | |
| *** pgbridge has quit IRC | 23:22 | |
| *** tlbr_ has joined #openstack-keystone | 23:22 | |
| *** ddieterly has quit IRC | 23:24 | |
| *** tonytan4ever has joined #openstack-keystone | 23:25 | |
| *** tlbr_ has quit IRC | 23:27 | |
| *** tlbr has joined #openstack-keystone | 23:34 | |
| *** tlbr is now known as Guest16207 | 23:34 | |
| *** daemontool has joined #openstack-keystone | 23:34 | |
| notmorgan | lbragstad: uhm looking | 23:37 |
| notmorgan | lbragstad: just got home fyi | 23:37 |
| *** Guest16207 has quit IRC | 23:38 | |
| notmorgan | lbragstad: becasuse we don't do async refrshes. | 23:39 |
| notmorgan | lbragstad: we want things actually invalidated *right now* when we invalidate them | 23:39 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 23:40 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Lockout requirements https://review.openstack.org/340074 | 23:43 |
| *** roxanaghe has quit IRC | 23:45 | |
| *** tlbr_ has joined #openstack-keystone | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!