| *** arunkant has joined #openstack-keystone | 00:03 | |
| *** gagehugo has quit IRC | 00:06 | |
| *** tqtran has quit IRC | 00:07 | |
| *** dikonoor has joined #openstack-keystone | 00:09 | |
| *** dikonoor has quit IRC | 00:18 | |
| *** markvoelker has joined #openstack-keystone | 00:22 | |
| *** ddieterly has joined #openstack-keystone | 00:22 | |
| *** markvoelker has quit IRC | 00:27 | |
| *** phalmos has joined #openstack-keystone | 00:42 | |
| *** phalmos has quit IRC | 00:54 | |
| *** dave-mcc_ has joined #openstack-keystone | 00:54 | |
| *** dave-mccowan has quit IRC | 00:55 | |
| *** ddieterly has quit IRC | 00:57 | |
| *** browne has quit IRC | 01:04 | |
| tonyb | Can someone take a quick look at: http://logs.openstack.org/90/381890/3/gate/gate-cross-keystone-python27-db-ubuntu-xenial/b6d48e7/console.html#_2016-10-05_22_37_43_851778 and tell me if it look slike a false positive to them? | 01:04 |
|---|---|---|
| tonyb | it's a requirements (consstraints) chnage but not one used in keystone so I'm assuming it is a false positive but I'd like a seconf opinion bfore I 'recheck' it | 01:05 |
| tonyb | Hmm maybe not the only hits in logstash are for this review ... | 01:08 |
| *** code-R has joined #openstack-keystone | 01:14 | |
| *** knikolla_ has quit IRC | 01:25 | |
| *** morgan has quit IRC | 01:27 | |
| *** dave-mccowan has joined #openstack-keystone | 01:28 | |
| *** dave-mcc_ has quit IRC | 01:29 | |
| *** code-R_ has joined #openstack-keystone | 01:33 | |
| *** ddieterly has joined #openstack-keystone | 01:35 | |
| *** code-R has quit IRC | 01:36 | |
| trananhkma | stevemar, step 9 in guideline of upgrading without downtime: http://docs.openstack.org/developer/keystone/upgrading.html#upgrading-without-downtime -- "Upgrade all keystone nodes to the next release, and restart them one at a time" | 01:44 |
| trananhkma | stevemar, if all nodes down, how can it be 'without downtime'? | 01:44 |
| trananhkma | stevemar, should we update this? | 01:45 |
| *** dave-mccowan has quit IRC | 02:01 | |
| *** code-R_ has quit IRC | 02:03 | |
| *** code-R has joined #openstack-keystone | 02:03 | |
| *** ddieterly has quit IRC | 02:05 | |
| *** code-R_ has joined #openstack-keystone | 02:10 | |
| *** code-R has quit IRC | 02:14 | |
| *** iurygregory_ has quit IRC | 02:25 | |
| *** spzala has joined #openstack-keystone | 02:31 | |
| *** jorge_munoz has quit IRC | 02:34 | |
| *** code-R has joined #openstack-keystone | 02:37 | |
| *** code-R_ has quit IRC | 02:37 | |
| *** jorge_munoz has joined #openstack-keystone | 02:38 | |
| *** haplo37_ has quit IRC | 02:39 | |
| *** haplo37_ has joined #openstack-keystone | 02:41 | |
| *** mordred has quit IRC | 03:03 | |
| *** mordred has joined #openstack-keystone | 03:06 | |
| *** nicolasbock has joined #openstack-keystone | 03:11 | |
| *** sdake has joined #openstack-keystone | 03:14 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/378829 | 03:27 |
| *** spzala has quit IRC | 03:28 | |
| *** code-R has quit IRC | 03:43 | |
| *** sdake_ has joined #openstack-keystone | 03:45 | |
| *** knikolla_ has joined #openstack-keystone | 03:45 | |
| *** sdake has quit IRC | 03:47 | |
| *** links has joined #openstack-keystone | 03:47 | |
| *** r1chardj0n3s has joined #openstack-keystone | 03:48 | |
| r1chardj0n3s | ohai folks - I need to do some dev/testing in Horizon against a federated keystone, and would like your advice on the absolutely easiest possible way I could set that up - preferably on a single box | 03:49 |
| r1chardj0n3s | this isn't for any kind of deployment, it's purely for dev and testing | 03:50 |
| *** code-R has joined #openstack-keystone | 03:52 | |
| *** code-R_ has joined #openstack-keystone | 03:53 | |
| *** code-R has quit IRC | 03:57 | |
| *** nicolasbock has quit IRC | 04:03 | |
| *** morgan has joined #openstack-keystone | 04:07 | |
| *** GB21 has joined #openstack-keystone | 04:11 | |
| *** phalmos has joined #openstack-keystone | 04:11 | |
| *** agireud has quit IRC | 04:16 | |
| *** alee has quit IRC | 04:16 | |
| *** agireud has joined #openstack-keystone | 04:24 | |
| *** markvoelker has joined #openstack-keystone | 04:25 | |
| *** jaosorior has joined #openstack-keystone | 04:25 | |
| *** GB21 has quit IRC | 04:26 | |
| *** markvoelker has quit IRC | 04:30 | |
| *** code-R has joined #openstack-keystone | 04:37 | |
| *** code-R_ has quit IRC | 04:37 | |
| *** GB21 has joined #openstack-keystone | 04:38 | |
| *** code-R_ has joined #openstack-keystone | 04:41 | |
| *** code-R has quit IRC | 04:44 | |
| *** bjolo_ has joined #openstack-keystone | 05:06 | |
| *** code-R has joined #openstack-keystone | 05:07 | |
| *** code-R_ has quit IRC | 05:07 | |
| *** knikolla_ has quit IRC | 05:07 | |
| *** thebloggu has quit IRC | 05:10 | |
| *** phalmos has quit IRC | 05:11 | |
| *** code-R has quit IRC | 05:12 | |
| *** haplo37_ has quit IRC | 05:15 | |
| *** haplo37_ has joined #openstack-keystone | 05:17 | |
| *** david-lyle has joined #openstack-keystone | 05:19 | |
| *** markvoelker has joined #openstack-keystone | 05:26 | |
| *** markvoelker has quit IRC | 05:31 | |
| *** richm has quit IRC | 05:40 | |
| *** alex_xu has quit IRC | 05:48 | |
| breton | morning, keystone | 05:51 |
| *** alex_xu has joined #openstack-keystone | 05:51 | |
| *** adriant has quit IRC | 05:54 | |
| *** jaosorior has quit IRC | 05:55 | |
| *** jaosorior has joined #openstack-keystone | 05:57 | |
| *** david-lyle_ has joined #openstack-keystone | 06:04 | |
| *** david-lyle has quit IRC | 06:04 | |
| *** sdake_ has quit IRC | 06:11 | |
| *** david-lyle_ has quit IRC | 06:12 | |
| *** code-R has joined #openstack-keystone | 06:14 | |
| *** rcernin has joined #openstack-keystone | 06:15 | |
| *** code-R_ has joined #openstack-keystone | 06:16 | |
| *** code-R has quit IRC | 06:19 | |
| *** markvoelker has joined #openstack-keystone | 06:27 | |
| *** markvoelker has quit IRC | 06:32 | |
| *** pnavarro has joined #openstack-keystone | 06:32 | |
| *** jorge_munoz_ has joined #openstack-keystone | 06:42 | |
| *** jorge_munoz has quit IRC | 06:43 | |
| *** jorge_munoz_ is now known as jorge_munoz | 06:43 | |
| *** code-R_ has quit IRC | 07:03 | |
| *** amoralej|off is now known as amoralej | 07:10 | |
| *** tesseract- has joined #openstack-keystone | 07:11 | |
| *** code-R has joined #openstack-keystone | 07:13 | |
| *** jidar_ has joined #openstack-keystone | 07:16 | |
| *** jidar has quit IRC | 07:16 | |
| *** jidar_ is now known as jidar | 07:17 | |
| *** pcaruana has joined #openstack-keystone | 07:26 | |
| *** ash__ has joined #openstack-keystone | 07:27 | |
| *** code-R has quit IRC | 07:27 | |
| *** markvoelker has joined #openstack-keystone | 07:28 | |
| *** code-R has joined #openstack-keystone | 07:28 | |
| *** markvoelker has quit IRC | 07:32 | |
| *** code-R has quit IRC | 07:34 | |
| *** bjolo_ has quit IRC | 07:42 | |
| *** mvk has quit IRC | 07:51 | |
| *** ash__ has quit IRC | 07:54 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:01 | |
| *** haplo37_ has quit IRC | 08:01 | |
| *** haplo37_ has joined #openstack-keystone | 08:03 | |
| *** code-R has joined #openstack-keystone | 08:12 | |
| *** code-R_ has joined #openstack-keystone | 08:13 | |
| *** qwertyco_ has joined #openstack-keystone | 08:15 | |
| *** code-R has quit IRC | 08:17 | |
| *** jaosorior is now known as jaosorior_lunch | 08:17 | |
| *** code-R_ has quit IRC | 08:18 | |
| *** qwertyco_ has quit IRC | 08:21 | |
| *** qwertyco has joined #openstack-keystone | 08:21 | |
| *** mvk has joined #openstack-keystone | 08:23 | |
| *** qwertyco is now known as qwertyco_ | 08:24 | |
| *** qwertyco_ has quit IRC | 08:26 | |
| *** qwertyco has joined #openstack-keystone | 08:26 | |
| *** spzala has joined #openstack-keystone | 08:28 | |
| *** spzala has quit IRC | 08:33 | |
| *** pnavarro has quit IRC | 08:35 | |
| *** asettle has joined #openstack-keystone | 08:39 | |
| *** qwertyco has quit IRC | 08:58 | |
| *** qwertyco has joined #openstack-keystone | 08:58 | |
| *** qwertyco has quit IRC | 08:58 | |
| *** qwertyco has joined #openstack-keystone | 08:59 | |
| *** bjolo_ has joined #openstack-keystone | 09:02 | |
| *** qwertyco has quit IRC | 09:14 | |
| *** qwertyco has joined #openstack-keystone | 09:14 | |
| *** qwertyco has quit IRC | 09:21 | |
| *** qwertyco has joined #openstack-keystone | 09:21 | |
| *** code-R has joined #openstack-keystone | 09:25 | |
| *** mvk has quit IRC | 09:29 | |
| *** code-R_ has joined #openstack-keystone | 09:29 | |
| *** code-R has quit IRC | 09:32 | |
| *** hoangcx has joined #openstack-keystone | 09:35 | |
| *** jaosorior_lunch has quit IRC | 09:36 | |
| *** jaosorior_lunch has joined #openstack-keystone | 09:36 | |
| *** qwertyco has quit IRC | 09:37 | |
| *** qwertyco has joined #openstack-keystone | 09:37 | |
| *** mvk has joined #openstack-keystone | 09:41 | |
| *** jaosorior_lunch is now known as jaosorior | 09:44 | |
| *** woodster_ has quit IRC | 10:00 | |
| *** jorge_munoz has quit IRC | 10:04 | |
| *** richm has joined #openstack-keystone | 10:10 | |
| *** hoangcx has quit IRC | 10:11 | |
| *** hoangcx has joined #openstack-keystone | 10:12 | |
| *** hoangcx has quit IRC | 10:12 | |
| *** code-R_ has quit IRC | 10:24 | |
| *** code-R has joined #openstack-keystone | 10:24 | |
| *** nicolasbock has joined #openstack-keystone | 10:32 | |
| *** pjm6 has quit IRC | 10:54 | |
| *** pjm6 has joined #openstack-keystone | 10:54 | |
| dstanek | r1chardj0n3s: i have an ansible role that i use to set a testshib test | 11:02 |
| *** d0ugal has quit IRC | 11:05 | |
| *** d0ugal has joined #openstack-keystone | 11:06 | |
| *** d0ugal has quit IRC | 11:06 | |
| *** d0ugal has joined #openstack-keystone | 11:06 | |
| *** code-R has quit IRC | 11:13 | |
| r1chardj0n3s | dstanek: please tell me more (though I'm actually about to go to bed :-) | 11:23 |
| dstanek | r1chardj0n3s: i was planning on pushing anyway. i can make it a priority to get done this morning. i just have to get the kids off to school | 11:25 |
| dstanek | i have a role 'keystone-sp' that is pretty simple and only used a handful of optional vars | 11:26 |
| *** code-R has joined #openstack-keystone | 11:26 | |
| r1chardj0n3s | dstanek: simple sounds awesome :-D | 11:26 |
| dstanek | it is mostly hard coded at this point to just work with testshib although i have been tweaking it to work with other IdPs so i can test single logout | 11:27 |
| dstanek | i also have a 'devstack' role that fires up devstack and a playbook that combines the two | 11:27 |
| r1chardj0n3s | dstanek: I have literally no idea what testshib is :-) | 11:28 |
| r1chardj0n3s | but I do know "devstack" and "IdP" and "hard coded" and other words and phrases you use | 11:28 |
| r1chardj0n3s | :-) | 11:28 |
| dstanek | testshib is a public IdP running the shibboleth software. it is useful for testing service providers | 11:28 |
| dstanek | r1chardj0n3s: :-) | 11:28 |
| dstanek | what do you need to use as an IdP? or does it not really matter for your purpose? | 11:29 |
| r1chardj0n3s | ah, excellent! I was greatly afeared of the shibboleth "documentation" today | 11:29 |
| r1chardj0n3s | I really don't care what is used, as long as Horizon thinks keystone is federated :-) | 11:29 |
| r1chardj0n3s | I need to sort out some issues in our user interface that don't allow federated users to perform some actions | 11:30 |
| r1chardj0n3s | and the only way I can be certain of fixes is to reproduce the original issues | 11:30 |
| dstanek | r1chardj0n3s: nice, that's what i was working on yesterday. specifically domain admins | 11:30 |
| r1chardj0n3s | yep, that sounds familiar | 11:30 |
| dstanek | by the time you wake up i'll have some stuff for you to generate the environment | 11:31 |
| r1chardj0n3s | that's awesome, thanks! | 11:31 |
| dstanek | np. i'll send you an email when it's done | 11:32 |
| dstanek | it's tested on U16.04 and F24 | 11:32 |
| *** code-R has quit IRC | 11:32 | |
| bjolo | morning | 11:33 |
| *** spzala has joined #openstack-keystone | 11:33 | |
| dstanek | bjolo: good morning | 11:33 |
| bjolo | im trying to setup keystone v3 with the policy.v3cloudsample.json file | 11:35 |
| bjolo | but i dont know if it is working correctly (one indicator is that i dont get the domains tab visible in horizon) | 11:35 |
| bjolo | is there a way i can test what type of token i get from keystone? | 11:36 |
| bjolo | i.e. can i prove that from a keystone perspective, i am cloud_admin? | 11:36 |
| bjolo | my installation is a fresh openstack-kolla newton | 11:37 |
| bjolo | and a devstack | 11:37 |
| bjolo | both behave the same | 11:37 |
| bjolo | http://www.symantec.com/connect/blogs/domain-support-horizon-here | 11:37 |
| dstanek | bjolo: i finished the day yesterday confused on how it could actually work. at this point i can't get it to work either | 11:37 |
| *** spzala has quit IRC | 11:37 | |
| dstanek | bjolo: one thing you need to do is put your policy in horizon's conf directory too | 11:38 |
| bjolo | i have done that | 11:38 |
| bjolo | see the symantec blogg. need a special version of policy.json file since horizon does not support the default one | 11:39 |
| bjolo | dstanek, so you can confirm that it is not working for you either? | 11:39 |
| dstanek | bjolo: i moved this to the horizon channel | 11:39 |
| bjolo | have done that | 11:40 |
| bjolo | but i kinda need to prove that keystone works first | 11:40 |
| bjolo | so back to my original question | 11:40 |
| bjolo | how can i verify/validate that i am cloud_admin? | 11:40 |
| dstanek | bjolo: do something that requires you to be a cloud admin | 11:42 |
| *** alex_xu has quit IRC | 12:12 | |
| *** alex_xu has joined #openstack-keystone | 12:14 | |
| *** qwertyco has quit IRC | 12:24 | |
| *** qwertyco has joined #openstack-keystone | 12:24 | |
| *** lamt has quit IRC | 12:25 | |
| *** edmondsw has joined #openstack-keystone | 12:26 | |
| *** alex_xu has quit IRC | 12:27 | |
| *** alex_xu has joined #openstack-keystone | 12:29 | |
| *** markvoelker has joined #openstack-keystone | 12:31 | |
| *** code-R has joined #openstack-keystone | 12:34 | |
| *** ddieterly has joined #openstack-keystone | 12:37 | |
| *** ddieterly has quit IRC | 12:41 | |
| *** jaosorior has quit IRC | 12:41 | |
| *** code-R_ has joined #openstack-keystone | 12:49 | |
| *** links has quit IRC | 12:50 | |
| *** code-R has quit IRC | 12:53 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Verbose 401/403 debug responses https://review.openstack.org/372433 | 12:56 |
| *** raildo has joined #openstack-keystone | 12:56 | |
| *** spzala has joined #openstack-keystone | 12:59 | |
| stevemar | o/ | 13:02 |
| *** dave-mccowan has joined #openstack-keystone | 13:04 | |
| *** ayoung has joined #openstack-keystone | 13:04 | |
| *** ChanServ sets mode: +v ayoung | 13:04 | |
| *** nishaYadav has joined #openstack-keystone | 13:05 | |
| *** nishaYadav is now known as Guest10034 | 13:05 | |
| *** namnh has joined #openstack-keystone | 13:05 | |
| *** links has joined #openstack-keystone | 13:05 | |
| *** agireud has quit IRC | 13:10 | |
| *** Guest10034 has quit IRC | 13:10 | |
| breton | newton has just been released | 13:16 |
| *** agireud has joined #openstack-keystone | 13:18 | |
| *** haplo37_ has quit IRC | 13:28 | |
| dstanek | morning | 13:29 |
| *** haplo37_ has joined #openstack-keystone | 13:30 | |
| cnf | ohai | 13:30 |
| lbragstad | jo/ | 13:32 |
| cnf | anyone know why i'd get "ServiceCatalogException: Invalid service catalog service: object-store" in horizon logs? | 13:32 |
| dstanek | cnf: is that a horizon exception? | 13:42 |
| cnf | dstanek yes | 13:44 |
| lbragstad | here is an easy review for folks if anyone has time to review - https://review.openstack.org/#/c/382453/ | 13:45 |
| lbragstad | ^ closes a bug | 13:45 |
| cnf | dstanek it's gone now, but i am uncertain what I changed? | 13:46 |
| *** ash__ has joined #openstack-keystone | 13:47 | |
| cnf | dstanek http://paste.openstack.org/show/584678/ is the full traceback, if you want | 13:47 |
| amakarov | lbragstad, please review mine https://review.openstack.org/#/c/372433/ if I addressed your comments properly? | 13:48 |
| dstanek | cnf: that appears to be a horizon thing | 13:49 |
| *** phalmos has joined #openstack-keystone | 13:50 | |
| *** GB21 has quit IRC | 13:53 | |
| * cnf hangs his head | 13:56 | |
| *** nicolasbock has quit IRC | 13:58 | |
| *** tonytan4ever has joined #openstack-keystone | 13:59 | |
| *** sdake has joined #openstack-keystone | 13:59 | |
| *** nicolasbock has joined #openstack-keystone | 14:01 | |
| *** knikolla_ has joined #openstack-keystone | 14:03 | |
| *** namnh has quit IRC | 14:06 | |
| *** tonytan4ever has quit IRC | 14:06 | |
| *** tonytan4ever has joined #openstack-keystone | 14:06 | |
| *** ddieterly has joined #openstack-keystone | 14:08 | |
| *** sdake has quit IRC | 14:15 | |
| *** bjolo_ has quit IRC | 14:18 | |
| *** knikolla_ has quit IRC | 14:24 | |
| knikolla | o/ | 14:27 |
| *** jorge_munoz has joined #openstack-keystone | 14:31 | |
| *** ash__ has quit IRC | 14:34 | |
| *** chris_hultin|AWA is now known as chris_hultin | 14:34 | |
| *** ddieterly is now known as ddieterly[away] | 14:38 | |
| *** qwertyco has quit IRC | 14:41 | |
| *** ddieterly[away] is now known as ddieterly | 14:42 | |
| *** DuncanT has quit IRC | 14:55 | |
| *** phalmos_ has joined #openstack-keystone | 14:55 | |
| *** raddaoui has quit IRC | 14:55 | |
| *** boris-42 has quit IRC | 14:55 | |
| *** cargonza has quit IRC | 14:55 | |
| *** andrewbogott has quit IRC | 14:55 | |
| *** pkoraca has quit IRC | 14:55 | |
| *** AndyWojo has quit IRC | 14:55 | |
| *** hrybacki has quit IRC | 14:55 | |
| *** phalmos has quit IRC | 14:58 | |
| cnf | does keystone still support v2 in mikata, or is that disabled? | 15:00 |
| dstanek | cnf: still supported, but deprecated I believe | 15:00 |
| cnf | hmm | 15:00 |
| cnf | then cyberduck is doing stupid things | 15:00 |
| *** ravelar has joined #openstack-keystone | 15:01 | |
| cnf | it still uses V2, and keystone doesn't seem to be accepting it | 15:01 |
| amakarov | lbragstad, if I call _LW(msg), where msg = "string %s" % "injected" what will be i18n'ed? | 15:04 |
| dstanek | cnf: what do you mean by accept? | 15:09 |
| dstanek | cnf: is the v2 api enabled? | 15:10 |
| cnf | uhm, good question, how do you enable it? | 15:10 |
| cnf | or disable it | 15:10 |
| lbragstad | amakarov prior to your patch - those log statements were LOG.warning(_LW('Some warning message')) - right? | 15:11 |
| lbragstad | All i'm saying is that if we are doing a _LW before logging the message - we should continue that pattern with your patch | 15:11 |
| dstanek | amakarov: you want to do _LW('string %s") % "injected" | 15:11 |
| dstanek | 15:12 | |
| lbragstad | dstanek thanks | 15:12 |
| lbragstad | amakarov dstanek knows everything there is to know about logging/internationization/string injection ;) | 15:12 |
| amakarov | lbragstad, dstanek thanks for insight ) | 15:14 |
| dstanek | amakarov: yw | 15:16 |
| dstanek | if you need the injected string translated it is possible if it's a constant | 15:17 |
| amakarov | dstanek, that's the core of my question :) | 15:17 |
| *** r-daneel has joined #openstack-keystone | 15:17 | |
| dstanek | amakarov: do you have a sample somewhere? | 15:18 |
| *** code-R_ has quit IRC | 15:18 | |
| amakarov | dstanek, https://review.openstack.org/#/c/372433/9/keystone/token/controllers.py | 15:19 |
| dstanek | amakarov: those are just IDs. there is nothing to translate | 15:20 |
| dstanek | amakarov: the translation is static and done ahead of time. it's not dymamic. the only part that is dynamic is picking the translated string *if* it is available | 15:21 |
| dstanek | amakarov: this is how you'd do it if you had constants: http://paste.openstack.org/raw/584706/ | 15:21 |
| amakarov | dstanek, yes, I think it's obvious: how can one create translation files for something that WILL be defined in runtime? | 15:22 |
| dstanek | exactly. so what exactly is your question? | 15:23 |
| *** boris-42 has joined #openstack-keystone | 15:24 | |
| amakarov | dstanek, I wanted to clarify what lbragstad ment in his comment | 15:25 |
| amakarov | lbragstad, about this comment: https://review.openstack.org/#/c/372433/9/keystone/v2_crud/user_crud.py | 15:26 |
| lbragstad | amakarov yep | 15:26 |
| amakarov | I agree it may be a breach, though what do you think about fixing in in another patch? | 15:27 |
| amakarov | this one pursue it's purpose | 15:27 |
| *** marekd2 has joined #openstack-keystone | 15:28 | |
| lbragstad | amakarov previously - we would just raise an Unauthorized exception without a specific message - now we are providing a message as well as whatever assertion error was excepted. | 15:29 |
| amakarov | lbragstad, otoh, creating a vulnerability to solve it in the future causes some doubts... | 15:29 |
| *** hrybacki has joined #openstack-keystone | 15:29 | |
| amakarov | lbragstad, yep | 15:29 |
| lbragstad | The way the message is worded makes it seem like the new password has something wrong with it | 15:29 |
| lbragstad | and by the series of events - the new password isn't even checked yet | 15:30 |
| lbragstad | so it would only be an issue with the current password | 15:30 |
| amakarov | lbragstad, so it's just about the form of the message - not about the information we provide to a potential attacker? | 15:30 |
| openstackgerrit | Merged openstack/keystone: Default the resource backend to SQL https://review.openstack.org/382453 | 15:31 |
| lbragstad | amakarov well - that's something to think about too | 15:31 |
| lbragstad | in that case - if the authentication with the current password fails, a 401 unauthorized makes sense | 15:31 |
| *** pnavarro has joined #openstack-keystone | 15:32 | |
| *** tonytan_brb has joined #openstack-keystone | 15:32 | |
| amakarov | well, are you agree on sending "Password change failed" for now? Without details? | 15:34 |
| amakarov | lbragstad, ^ | 15:34 |
| *** nicolasbock has quit IRC | 15:34 | |
| lbragstad | amakarov well - the password change failed but not because of the new password | 15:35 |
| lbragstad | that's the part that is confusing | 15:35 |
| *** tonytan4ever has quit IRC | 15:35 | |
| *** andrewbogott has joined #openstack-keystone | 15:35 | |
| amakarov | lbragstad, attacker can analyse the code and understand the reason anyway | 15:36 |
| *** DuncanT has joined #openstack-keystone | 15:36 | |
| *** andrewbogott has quit IRC | 15:37 | |
| *** andrewbogott has joined #openstack-keystone | 15:37 | |
| dstanek | cnf: there would be /v2.0 entries in the paste.ini | 15:37 |
| lbragstad | amakarov i'm thinking about user experience. previously if the current password failed we didn't emit any message about "password change" failing - we just emitted a 401. Now we are going to emit a "password change" failed message which could lead a user to think the request failed because of the new password they used, when that wasn't the case at all | 15:38 |
| amakarov | lbragstad, I suggest sending something similar to "v2 password change failed due to rejected authentication" | 15:38 |
| lbragstad | amakarov yeah - that would be better | 15:38 |
| *** adrian_otto has joined #openstack-keystone | 15:38 | |
| cnf | dstanek yeah, they seem to be there | 15:39 |
| dstanek | cnf: what's the issue you are having? | 15:40 |
| amakarov | lbragstad, ookay - now to fight pep8 :) | 15:40 |
| lbragstad | amakarov perfect | 15:40 |
| *** cargonza has joined #openstack-keystone | 15:41 | |
| amakarov | dstanek, how to resolve "H701 Empty localization string" ? | 15:41 |
| amakarov | I'm using _LW(msg) syntax | 15:42 |
| cnf | dstanek can't make cyberduck work on v2 (which is what it uses) | 15:42 |
| *** raddaoui has joined #openstack-keystone | 15:42 | |
| amakarov | iirc it's your hack in the tests that raises it? | 15:42 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Default the assignment backend to SQL https://review.openstack.org/382428 | 15:42 |
| dstanek | H701 is not my error message | 15:43 |
| dstanek | what is msg and why are you not using a constant? | 15:43 |
| lbragstad | stevemar rodrigods had to resolve an import that snuck out from under me - https://review.openstack.org/#/c/382428/ | 15:43 |
| *** AndyWojo has joined #openstack-keystone | 15:43 | |
| amakarov | dstanek, https://review.openstack.org/#/c/372433/9/keystone/common/request.py | 15:43 |
| amakarov | see first lbragstad's comment | 15:44 |
| amakarov | dstanek, I want to avoid # noqa it possible | 15:45 |
| amakarov | *if | 15:45 |
| dstanek | amakarov: i don't think _(var) actually works. i think it has to be a constant | 15:46 |
| dstanek | errr...literal in this case | 15:46 |
| amakarov | lbragstad, can you suggest something about this? ^^ | 15:46 |
| *** nicolasbock has joined #openstack-keystone | 15:46 | |
| dstanek | amakarov: http://docs.openstack.org/developer/oslo.i18n/guidelines.html#using-a-marker-function | 15:47 |
| dstanek | you need to use a literal string | 15:47 |
| amakarov | dstanek, ok, got it. lbragstad are you ok with literals? | 15:48 |
| dstanek | amakarov: i'd just keep it that way. create the 'msg' var and use it later | 15:49 |
| *** pkoraca has joined #openstack-keystone | 15:49 | |
| amakarov | dstanek, like msg = _LW("whatever") ? | 15:49 |
| dstanek | amakarov: yes. the thing in _() has to be a literal, but the var can be used anywhere | 15:50 |
| amakarov | dstanek, the problem is that the same message is translated with _() and _LW() | 15:51 |
| amakarov | so I HAVE to repeat the literal | 15:51 |
| dstanek | i think the way it works is that a script parses the Python code looking for strings inside of the hints. then those are shipped to translators. the script doesn't try to evaluate the code to figure out if the thing passed into the hints is actually a static string. | 15:51 |
| amakarov | dstanek, makes sense | 15:51 |
| dstanek | amakarov: no, use the same one. the one that is wrapped in _() | 15:52 |
| amakarov | dstanek, so be it | 15:52 |
| dstanek | amakarov: anything in _() will be translated. the others are prioritized and may not be translated | 15:52 |
| dstanek | for example the things a user sees should be _(), but logs should be _L?(). if they don't have time to translate all the warnings for log files that's not as big of a deal | 15:53 |
| dstanek | amakarov: http://docs.openstack.org/developer/oslo.i18n/guidelines.html#choosing-a-marker-function | 15:53 |
| *** woodburn has joined #openstack-keystone | 15:54 | |
| *** haplo37_ has quit IRC | 15:57 | |
| *** haplo37_ has joined #openstack-keystone | 15:59 | |
| *** rcernin has quit IRC | 16:01 | |
| *** david-lyle has joined #openstack-keystone | 16:01 | |
| stevemar | newton is out the door :) | 16:02 |
| stevemar | thanks everyone for helping to make a great release | 16:02 |
| amakarov | stevemar, so keystone is great again? ;) | 16:03 |
| stevemar | amakarov: i wouldn't go so far as to say that | 16:03 |
| stevemar | amakarov: my goal is always: make keystone less bad | 16:03 |
| amakarov | stevemar, it there a list of bad things in keystone? launchpad bugs? | 16:04 |
| *** nishaYadav has joined #openstack-keystone | 16:04 | |
| *** ravelar has quit IRC | 16:04 | |
| nishaYadav | o/ | 16:05 |
| stevemar | amakarov: i was mostly trying to be funny :P | 16:05 |
| stevemar | amakarov: but i'm working on a list of things i think we should have | 16:05 |
| amakarov | stevemar, me too :) | 16:05 |
| knikolla | yay for newton! | 16:08 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Verbose 401/403 debug responses https://review.openstack.org/372433 | 16:12 |
| amakarov | lbragstad, dstanek ^^ | 16:12 |
| *** gyee has joined #openstack-keystone | 16:13 | |
| *** jistr is now known as jistr|afk | 16:14 | |
| *** adrian_otto has quit IRC | 16:15 | |
| *** spzala has quit IRC | 16:25 | |
| *** mvk has quit IRC | 16:27 | |
| *** nishaYadav_ has joined #openstack-keystone | 16:31 | |
| *** tesseract- has quit IRC | 16:31 | |
| *** nishaYadav_ has quit IRC | 16:33 | |
| *** nishaYadav_ has joined #openstack-keystone | 16:34 | |
| *** nishaYadav has quit IRC | 16:34 | |
| *** ravelar has joined #openstack-keystone | 16:34 | |
| *** ravelar has quit IRC | 16:34 | |
| *** ravelar has joined #openstack-keystone | 16:37 | |
| *** gyee has quit IRC | 16:51 | |
| *** pnavarro has quit IRC | 16:52 | |
| *** ddieterly is now known as ddieterly[away] | 16:54 | |
| *** tonytan_brb is now known as tonytan4ever | 16:54 | |
| *** jistr|afk is now known as jistr | 16:57 | |
| *** ddieterly[away] is now known as ddieterly | 16:57 | |
| *** nishaYadav_ has quit IRC | 16:58 | |
| *** nishaYadav_ has joined #openstack-keystone | 16:58 | |
| *** sdake has joined #openstack-keystone | 17:01 | |
| *** jamielennox|away has quit IRC | 17:02 | |
| *** asettle__ has joined #openstack-keystone | 17:02 | |
| *** david-lyle has quit IRC | 17:03 | |
| *** woodster_ has joined #openstack-keystone | 17:05 | |
| *** asettle has quit IRC | 17:07 | |
| *** asettle__ has quit IRC | 17:07 | |
| *** marekd2 has quit IRC | 17:08 | |
| *** mvk has joined #openstack-keystone | 17:10 | |
| *** jamielennox|away has joined #openstack-keystone | 17:16 | |
| *** jamielennox|away is now known as jamielennox | 17:16 | |
| *** ChanServ sets mode: +v jamielennox | 17:16 | |
| *** ddieterly is now known as ddieterly[away] | 17:19 | |
| *** martinus__ has quit IRC | 17:22 | |
| *** marekd2 has joined #openstack-keystone | 17:24 | |
| *** david-lyle has joined #openstack-keystone | 17:25 | |
| *** tqtran has joined #openstack-keystone | 17:27 | |
| *** gagehugo has joined #openstack-keystone | 17:33 | |
| *** gagehugo has quit IRC | 17:37 | |
| stevemar | dolphm: if you have a few minutes there are 2 mitaka patches that can be approved: https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:stable/mitaka | 17:37 |
| *** marekd2 has quit IRC | 17:43 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove driver version from docs https://review.openstack.org/383163 | 17:44 |
| openstackgerrit | Merged openstack/keystone: Default the assignment backend to SQL https://review.openstack.org/382428 | 17:50 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove driver version from identity backend test names https://review.openstack.org/383166 | 17:53 |
| *** david-lyle has quit IRC | 17:55 | |
| *** gyee has joined #openstack-keystone | 17:57 | |
| *** tonytan4ever has quit IRC | 18:01 | |
| *** tonytan4ever has joined #openstack-keystone | 18:01 | |
| *** david-lyle has joined #openstack-keystone | 18:06 | |
| morgan | stevemar: +3 on both of those | 18:06 |
| stevemar | morgan: thanks! :) | 18:06 |
| *** marekd2 has joined #openstack-keystone | 18:09 | |
| *** gagehugo has joined #openstack-keystone | 18:10 | |
| openstackgerrit | Deepak proposed openstack/keystonemiddleware: Changed the home-page link https://review.openstack.org/383183 | 18:10 |
| *** marekd2 has quit IRC | 18:18 | |
| *** ddieterly[away] has quit IRC | 18:19 | |
| *** marekd2 has joined #openstack-keystone | 18:19 | |
| *** amoralej is now known as amoralej|off | 18:22 | |
| *** marekd2 has quit IRC | 18:23 | |
| openstackgerrit | Deepak proposed openstack/keystone-specs: Changed the home-page link https://review.openstack.org/383195 | 18:23 |
| *** spzala has joined #openstack-keystone | 18:24 | |
| *** asettle has joined #openstack-keystone | 18:24 | |
| mfisch | stevemar: are there any docs on the password expiry stuff in newton? | 18:25 |
| *** ddieterly has joined #openstack-keystone | 18:25 | |
| mfisch | like how to enable it, manage it, figure out who's going to expire in the next 7 days etc | 18:26 |
| *** jorge_munoz has quit IRC | 18:27 | |
| mfisch | does any tooling know how to use it yet? osc? | 18:28 |
| openstackgerrit | Andreas Jaeger proposed openstack/keystone: Enable release notes translation https://review.openstack.org/383223 | 18:28 |
| openstackgerrit | Andreas Jaeger proposed openstack/keystoneauth: Enable release notes translation https://review.openstack.org/383224 | 18:28 |
| openstackgerrit | Andreas Jaeger proposed openstack/keystonemiddleware: Enable release notes translation https://review.openstack.org/383225 | 18:28 |
| openstackgerrit | Merged openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/383134 | 18:30 |
| *** asettle has quit IRC | 18:35 | |
| mfisch | I think cache_on_issue should default to True | 18:38 |
| mfisch | if token caching is enabled why wouldn't you want that | 18:38 |
| mfisch | I'm going to change that so I can vote in April! | 18:40 |
| *** nishaYadav_ has quit IRC | 18:41 | |
| *** asettle has joined #openstack-keystone | 18:44 | |
| *** haplo37_ has quit IRC | 18:45 | |
| *** haplo37_ has joined #openstack-keystone | 18:47 | |
| dolphm | mfisch: +10 | 18:49 |
| mfisch | https://review.openstack.org/#/c/383333/ | 18:49 |
| mfisch | dont know why it didnt show up here | 18:49 |
| mfisch | let me know if it needs more changes | 18:50 |
| mfisch | that should probably land in O at this point | 18:50 |
| *** harlowja has quit IRC | 18:50 | |
| stevemar | mfisch: catching up on your rambles | 18:50 |
| mfisch | lol | 18:51 |
| dolphm | mfisch's soliloquy hour | 18:51 |
| mfisch | just enjoy talking to myself | 18:51 |
| lbragstad | lol | 18:51 |
| stevemar | mfisch: so we were undecided on enabling token caching to true by default | 18:51 |
| stevemar | we didn't have solid performance numbers we could rely on | 18:52 |
| mfisch | not token caching | 18:52 |
| *** asettle has quit IRC | 18:52 | |
| mfisch | cache_on_issue | 18:52 |
| stevemar | right, caching token *on issue* | 18:52 |
| stevemar | we (mostly i) just wanted it to bake a little longer | 18:52 |
| mfisch | I mean if you turn token caching on, then that should just be on | 18:52 |
| mfisch | stevemar: so default on for O? | 18:52 |
| dolphm | cache all the things everywhere all the time | 18:52 |
| mfisch | caching itself should probably default true but thats more complex | 18:53 |
| stevemar | mfisch: if you report back with positive feedback, sure | 18:53 |
| mfisch | it introduces a dep on memcache | 18:53 |
| mfisch | k | 18:53 |
| mfisch | stevemar: poking around on N in my free time | 18:53 |
| mfisch | we still dont have M out to the world thanks to the cinder quota bug | 18:53 |
| lbragstad | dolphm just return 200 OK | 18:53 |
| stevemar | mfisch: also, for your question about PCI (password expiry stuff), the docs are in progress: https://review.openstack.org/#/c/374422/7 | 18:54 |
| stevemar | mfisch: i've been too slow to review them | 18:54 |
| mfisch | how would the user get notified that their password was expiring? | 18:55 |
| mfisch | we can't do a windows NT login pop-up | 18:55 |
| dolphm | mfisch: we're working with horizon first cc- rderose | 18:55 |
| mfisch | k | 18:56 |
| mfisch | we have a horizon monkey here and I will ping him | 18:56 |
| mfisch | I hope it looks like this http://bit.ly/2dOwlFb | 18:56 |
| *** ducttape_ has joined #openstack-keystone | 18:56 | |
| *** david-lyle has quit IRC | 18:57 | |
| mfisch | ducttape_: the new PCI password stuff for keystone will be fronted by horizon to warn on password expiry etc | 18:57 |
| mfisch | rderose is working on it | 18:57 |
| dolphm | mfisch: that would be perfect | 18:57 |
| mfisch | ducttape_: this is the UI I want http://bit.ly/2dOwlFb | 18:57 |
| dolphm | mfisch: rather, your password is going to expire in X days, <here's a password change form> | 18:57 |
| rderose | mfisch: me too :) | 18:57 |
| * ducttape_ haz a sad | 18:57 | |
| rderose | mfisch: unfortunately, it's just an alert message | 18:58 |
| rderose | mfisch dolphm: https://review.openstack.org/#/c/369652/ | 18:58 |
| *** gagehugo has quit IRC | 18:58 | |
| mfisch | what happens with ldap users I wonder | 18:58 |
| rderose | mfisch: password expires in only supported by the sql backend for identity | 18:59 |
| ducttape_ | is you need help with that patch lemme know rderose | 18:59 |
| rderose | mfisch: so password_expires_at would be None for ldap | 18:59 |
| rderose | ducttape: not my patch, see Juan Pablo lopez Gutierrez | 18:59 |
| rderose | he's the owner on the horizon side | 19:00 |
| stevemar | rderose: the thinking is that you'll be alerted by your LDAP system anyway to change your password | 19:00 |
| rderose | stevemar: yeah | 19:00 |
| rderose | exactly | 19:00 |
| mfisch | yes | 19:00 |
| mfisch | I dont want to get in between AD and users | 19:00 |
| mfisch | let AD deal with that | 19:00 |
| rderose | agree | 19:00 |
| mfisch | stevemar: you guys fixed more than 3 bugs in newton | 19:01 |
| mfisch | are the others not Reno worthy? | 19:02 |
| gsilvis | Question about federation-related stuff: Did something about shibboleth on centos break in the last few months? Everyone suggests using the same opensuse repo, but there's now missing dependencies (an old version of openssl) | 19:02 |
| dolphm | maybe only 3 bugs that we couldn't fix in mitaka? | 19:02 |
| stevemar | mfisch: there are probably some notes missing | 19:02 |
| dolphm | hopefully we don't have release notes for bugs we introduced AND fixed in the newton dev cycle | 19:02 |
| mfisch | hah | 19:02 |
| mfisch | true | 19:02 |
| stevemar | some are not reno worthy for sure | 19:03 |
| stevemar | like ... 1505374Unit tests failing with oslo.policy 0.12.0 | 19:03 |
| *** jamielennox has quit IRC | 19:03 | |
| dolphm | if that's a release note, delete it...? | 19:03 |
| stevemar | dolphm: its not | 19:04 |
| mfisch | dolphm: does osprofiler have a perf impact in the paste filter? | 19:04 |
| dolphm | mfisch: last i looked, "theoretically no," because it's disabled by default even though it's in the pipeline | 19:05 |
| *** jamielennox|away has joined #openstack-keystone | 19:05 | |
| dolphm | but if it were me, i wouldn't deploy it if i wasn't going to use it | 19:05 |
| mfisch | we heavily customize the pipeline already so I may consider removing | 19:05 |
| dolphm | mfisch: ++ | 19:06 |
| *** jamielennox|away is now known as jamielennox | 19:06 | |
| *** ChanServ sets mode: +v jamielennox | 19:06 | |
| mfisch | I'm keeping cors the Banquet Filter | 19:06 |
| dolphm | mfisch: how do you feel about the whole "paste is not configuration" fear mongering? i mean "perspective" | 19:06 |
| mfisch | not sure I've heard that phrase | 19:06 |
| mfisch | whats the ref? | 19:06 |
| stevemar | mfisch: commented on your patch | 19:06 |
| mfisch | k | 19:07 |
| stevemar | dolphm: the paste should be in .conf and not in a separate file? | 19:07 |
| *** tonytan4ever has quit IRC | 19:07 | |
| dolphm | mfisch: this is old, but this sentiment lives on http://lists.openstack.org/pipermail/openstack-dev/2012-July/000277.html | 19:08 |
| mfisch | I could see it belonging in the config file but I dont think there's a strong argument to change it now | 19:08 |
| dolphm | stevemar: it's fine for it to be a separate file, but it's advantageous for deployers to be able to configure the pipeline, and counter-productive for upstream to prevent them from doing so | 19:09 |
| *** ducttape_ has quit IRC | 19:09 | |
| mfisch | we need to be able to change it | 19:09 |
| mfisch | yeah I'm pretty firm on that one | 19:09 |
| dolphm | mfisch: i agree. | 19:10 |
| stevemar | interesting | 19:10 |
| mfisch | we have audit stuff, tenant profiling stuff and some security stuff in ours | 19:11 |
| *** adrian_otto has joined #openstack-keystone | 19:11 | |
| *** adrian_otto has quit IRC | 19:15 | |
| openstackgerrit | Matt Fischer proposed openstack/keystone: cache_on_issue default to true https://review.openstack.org/383333 | 19:15 |
| *** nkinder has quit IRC | 19:15 | |
| mfisch | I didnt know you could do formatting in reno thats cool | 19:15 |
| *** nkinder has joined #openstack-keystone | 19:16 | |
| stevemar | mfisch: you sure can | 19:16 |
| stevemar | mfisch: https://review.openstack.org/#/c/375914/6/releasenotes/notes/removed-as-of-ocata-436bb4b839e74494.yaml | 19:16 |
| stevemar | mfisch: i'll enforce release notes this cycle | 19:17 |
| mfisch | we've enforced them in puppet since M I think | 19:17 |
| mfisch | they work well | 19:17 |
| stevemar | mfisch: we do them for features and other stuff, not well enough | 19:18 |
| morgan | unless you need direct access to the keystone app via your filters you could do it without paste. | 19:18 |
| *** adrian_otto has joined #openstack-keystone | 19:18 | |
| morgan | i would love if paste was killed and removed | 19:18 |
| stevemar | mfisch: you can include hyperlinks too ;) | 19:18 |
| morgan | if you're just doing introspection on requests and responses (headers etc), there are better ways that wedging your code into the running wsgi app | 19:19 |
| morgan | such as modifying the paste pipeline | 19:19 |
| morgan | but i expect i've lost that argument long ago | 19:20 |
| dstanek | morgan: ++ there are already middlewares that do that | 19:20 |
| morgan | dstanek: exactly | 19:20 |
| *** agireud has quit IRC | 19:21 | |
| *** ddieterly is now known as ddieterly[away] | 19:28 | |
| *** agireud has joined #openstack-keystone | 19:29 | |
| *** sileht has quit IRC | 19:31 | |
| *** sileht has joined #openstack-keystone | 19:32 | |
| *** ddieterly[away] is now known as ddieterly | 19:32 | |
| *** agireud has quit IRC | 19:33 | |
| *** ravelar has quit IRC | 19:35 | |
| *** ravelar has joined #openstack-keystone | 19:36 | |
| *** agireud has joined #openstack-keystone | 19:43 | |
| *** tonytan4ever has joined #openstack-keystone | 19:45 | |
| *** gyee has quit IRC | 19:47 | |
| *** dave-mccowan has quit IRC | 19:49 | |
| *** gagehugo has joined #openstack-keystone | 19:52 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Improve check_token validation performance https://review.openstack.org/382107 | 19:55 |
| *** dave-mccowan has joined #openstack-keystone | 19:59 | |
| *** ravelar has quit IRC | 20:00 | |
| *** dave-mcc_ has joined #openstack-keystone | 20:01 | |
| *** dave-mccowan has quit IRC | 20:04 | |
| *** agireud has quit IRC | 20:06 | |
| *** david-lyle has joined #openstack-keystone | 20:06 | |
| bknudson | I think cors and sizelimit should be handled by uwsgi / apache / the wsgi container. | 20:07 |
| *** sdake has quit IRC | 20:09 | |
| *** tonytan4ever has quit IRC | 20:16 | |
| *** harlowja has joined #openstack-keystone | 20:17 | |
| *** code-R has joined #openstack-keystone | 20:22 | |
| *** code-R_ has joined #openstack-keystone | 20:31 | |
| *** code-R has quit IRC | 20:34 | |
| *** browne has joined #openstack-keystone | 20:40 | |
| *** superklaus has joined #openstack-keystone | 20:40 | |
| *** dave-mcc_ has quit IRC | 20:41 | |
| openstackgerrit | Merged openstack/keystone: Remove password history validation from admin password resets https://review.openstack.org/379030 | 20:41 |
| superklaus | hello. I insatlled devstack and can run an instance of cirrOS. when trying to use neutron cli, it says "An auth plugin is required to fetch a token" | 20:42 |
| superklaus | like, if I do neutron net-list, it says "An auth plugin is required to fetch a token" | 20:43 |
| superklaus | any help would be appreciated | 20:43 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: cache_on_issue default to true https://review.openstack.org/383333 | 20:44 |
| dstanek | superklaus: did you source openrc? | 20:46 |
| superklaus | that fixed it. thank you | 20:47 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove driver version_specifiers from tests https://review.openstack.org/383460 | 20:59 |
| *** code-R_ has quit IRC | 20:59 | |
| *** superklaus has quit IRC | 21:00 | |
| *** marekd2 has joined #openstack-keystone | 21:01 | |
| *** raildo has quit IRC | 21:01 | |
| *** dave-mccowan has joined #openstack-keystone | 21:01 | |
| *** ayoung has quit IRC | 21:02 | |
| *** marekd2 has quit IRC | 21:05 | |
| *** code-R has joined #openstack-keystone | 21:07 | |
| *** nicolasbock has quit IRC | 21:13 | |
| *** tonytan4ever has joined #openstack-keystone | 21:16 | |
| *** harlowja has quit IRC | 21:17 | |
| *** michauds has joined #openstack-keystone | 21:18 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove driver version_specifiers from tests https://review.openstack.org/383460 | 21:18 |
| *** asettle has joined #openstack-keystone | 21:20 | |
| *** asettle has quit IRC | 21:21 | |
| *** tonytan4ever has quit IRC | 21:22 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove driver version specifiers from tests https://review.openstack.org/383460 | 21:22 |
| *** chris_hultin is now known as chris_hultin|AWA | 21:23 | |
| *** jorge_munoz has joined #openstack-keystone | 21:25 | |
| *** ddieterly is now known as ddieterly[away] | 21:28 | |
| *** jorge_munoz_ has joined #openstack-keystone | 21:28 | |
| lbragstad | breton the osic performance bot is up and fixed | 21:29 |
| *** jorge_munoz has quit IRC | 21:30 | |
| *** jorge_munoz_ is now known as jorge_munoz | 21:30 | |
| lbragstad | breton I had to rework some of the playbook due to osa changes for newton | 21:30 |
| *** code-R has quit IRC | 21:31 | |
| *** ddieterly[away] is now known as ddieterly | 21:31 | |
| *** ddieterly is now known as ddieterly[away] | 21:32 | |
| lbragstad | rodrigods ping | 21:32 |
| *** david-lyle_ has joined #openstack-keystone | 21:34 | |
| *** david-lyle has quit IRC | 21:34 | |
| *** david-lyle has joined #openstack-keystone | 21:35 | |
| *** adrian_otto has quit IRC | 21:35 | |
| *** david-lyle has quit IRC | 21:35 | |
| *** david-lyle has joined #openstack-keystone | 21:35 | |
| lbragstad | rodrigods finally getting around to https://github.com/lbragstad/keystone-performance/pull/13/files | 21:35 |
| *** adriant has joined #openstack-keystone | 21:35 | |
| lbragstad | rodrigods does ab -e not require a filename as an argument? | 21:35 |
| *** agireud has joined #openstack-keystone | 21:37 | |
| *** harlowja has joined #openstack-keystone | 21:39 | |
| *** harlowja has quit IRC | 21:39 | |
| *** david-lyle_ has quit IRC | 21:39 | |
| *** harlowja has joined #openstack-keystone | 21:39 | |
| *** ravelar has joined #openstack-keystone | 21:44 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Improve check_token validation performance https://review.openstack.org/382107 | 21:45 |
| *** rcernin has joined #openstack-keystone | 21:47 | |
| *** david-lyle has quit IRC | 21:56 | |
| *** rcernin has quit IRC | 21:59 | |
| *** rcernin has joined #openstack-keystone | 21:59 | |
| *** spzala has quit IRC | 22:04 | |
| breton | lbragstad: thank you. Can i check already merged patches? | 22:10 |
| *** sdake has joined #openstack-keystone | 22:13 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/383115 | 22:13 |
| bknudson | breton: post a revert and check experimental it. | 22:17 |
| rodrigods | lbragstad, hmm think i get from a tutorial somewhere | 22:17 |
| rodrigods | worked for me, though | 22:17 |
| *** ayoung has joined #openstack-keystone | 22:21 | |
| *** ChanServ sets mode: +v ayoung | 22:21 | |
| *** ddieterly[away] has quit IRC | 22:32 | |
| *** ddieterly has joined #openstack-keystone | 22:36 | |
| *** TonyXu has quit IRC | 22:41 | |
| *** TonyXu has joined #openstack-keystone | 22:42 | |
| *** michauds has quit IRC | 22:44 | |
| *** nicolasbock has joined #openstack-keystone | 22:49 | |
| *** ddieterly has quit IRC | 22:50 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth: Allow specifying client and service info to user_agent https://review.openstack.org/357633 | 22:54 |
| ianw | jamielennox: around? question on https://review.openstack.org/#/c/366922/ | 22:55 |
| jamielennox | ianw: yea | 22:55 |
| ianw | the issue seems to be that OS_IDENTITY_API_VERSION is set to "2" on devstack subnodes, but i think that is probably unintentional | 22:55 |
| ianw | subnodes that don't have keystone installed | 22:55 |
| jamielennox | ianw: i'd really like to prevent that one | 22:57 |
| jamielennox | there's nothing that should be running in devstack without v3 api | 22:57 |
| ianw | that's what i thought :) | 22:57 |
| jamielennox | we are actively trying to get gate jobs going that disable v2 | 22:57 |
| ianw | it seems like that we just need to move the definition out. actually, i'm having deja-vu, there might be a change to do that | 22:58 |
| jamielennox | ianw: i left a -1, i've never run the multinode case so i don't know how to test anything there but yea, i would look to move the OS_IDENTITY_API_VERSION=3 somewhere basic | 23:00 |
| jamielennox | this is all part of the v3 everywhere that i haven't pushed recently | 23:00 |
| ianw | I think https://review.openstack.org/#/c/350801/2 will fix it | 23:00 |
| jamielennox | ianw: yea, that makes sense to me | 23:02 |
| *** ayoung has quit IRC | 23:05 | |
| *** spzala has joined #openstack-keystone | 23:05 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Improve check_token validation performance https://review.openstack.org/382107 | 23:10 |
| *** spzala has quit IRC | 23:11 | |
| jamielennox | stevemar: can you escalate https://review.openstack.org/#/c/357633/ to be included in next release | 23:18 |
| *** marekd2 has joined #openstack-keystone | 23:21 | |
| jamielennox | stevemar: also, any reason for just +1 on https://review.openstack.org/#/c/336972/ ? | 23:23 |
| jamielennox | i understand you don't care either way but you're like the only person that reviews that sort of stuff | 23:24 |
| *** marekd2 has quit IRC | 23:25 | |
| *** rcernin has quit IRC | 23:36 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Doctor check for LDAP domain specific configs https://review.openstack.org/361435 | 23:42 |
| *** ayoung has joined #openstack-keystone | 23:50 | |
| *** ChanServ sets mode: +v ayoung | 23:50 | |
| *** phalmos_ has quit IRC | 23:51 | |
| stevemar | jamielennox: lol | 23:53 |
| stevemar | jamielennox: why did i only +1 that?! | 23:54 |
| stevemar | ayoung: can you kick https://review.openstack.org/#/c/336972/ through? | 23:54 |
| stevemar | jamielennox: the ksa one i was going to look at today | 23:54 |
| jamielennox | stevemar: awesome, yea, it's a little bit to wrap your head around but sean and i discussed it a lot at the midcycle | 23:55 |
| jamielennox | was supposed to have gone in last cycle but i kind of forgot about it | 23:55 |
| *** pcaruana has quit IRC | 23:55 | |
| *** ravelar has quit IRC | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!