Thursday, 2016-10-13

« Wednesday, 2016-10-12 Index Friday, 2016-10-14 »
*** spzala has quit IRC00:01
*** sdake_ has joined #openstack-keystone00:11
*** sdake has quit IRC00:14
*** agrebennikov has quit IRC00:15
*** vern has quit IRC00:18
*** dflorea has quit IRC00:21
*** gagehugo has quit IRC00:24
*** adrian_otto has quit IRC00:26
*** ddieterly has joined #openstack-keystone00:33
*** markvoelker has joined #openstack-keystone00:40
*** markvoelker has quit IRC00:45
*** adrian_otto has joined #openstack-keystone00:47
*** hoangcx has joined #openstack-keystone00:56
*** ddieterly is now known as ddieterly[away]01:04
*** markvoelker has joined #openstack-keystone01:12
*** ddieterly[away] is now known as ddieterly01:13
*** atod has joined #openstack-keystone01:13
*** guoshan has joined #openstack-keystone01:20
openstackgerritGeorge Tian proposed openstack/keystone: optimize code  https://review.openstack.org/38479801:28
*** adrian_otto has quit IRC01:30
openstackgerritgecong proposed openstack/keystoneauth: Fix a typo in base.py  https://review.openstack.org/38570701:31
*** davechen has joined #openstack-keystone01:34
*** adrian_otto has joined #openstack-keystone01:36
*** adrian_otto has quit IRC01:38
stevemarrodrigods: dolphm, bknudson and morgan have +2 power on stable branches01:41
*** adrian_otto has joined #openstack-keystone01:41
stevemarrodrigods: i added dolphm to the review01:41
*** ddieterly has quit IRC01:46
dolphmbreton: no01:52
openstackgerritDave Chen proposed openstack/keystone: Invalidate trust when the related project is deleted  https://review.openstack.org/38444401:53
openstackgerritDave Chen proposed openstack/keystone: Invalidate trust when the trustor or trustee is deleted  https://review.openstack.org/36935401:53
*** iurygregory__ has left #openstack-keystone01:54
*** adrian_otto has quit IRC02:06
*** dave-mccowan has joined #openstack-keystone02:09
*** spzala has joined #openstack-keystone02:11
openstackgerritmelissaml proposed openstack/keystoneauth: Fix a typo in opts.py  https://review.openstack.org/38571602:28
*** Nakato has quit IRC02:32
*** Nakato has joined #openstack-keystone02:33
openstackgerritMerged openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/38565602:50
*** Ephur has quit IRC02:51
*** Ephur has joined #openstack-keystone02:52
*** Ephur has quit IRC02:52
*** gus has quit IRC02:52
*** Ephur has joined #openstack-keystone02:54
openstackgerritMerged openstack/keystoneauth: Fix a typo in base.py  https://review.openstack.org/38570702:55
*** Ephur has joined #openstack-keystone02:55
*** Ephur has quit IRC02:55
*** ddieterly has joined #openstack-keystone02:55
*** Ephur has joined #openstack-keystone02:56
*** Ephur has quit IRC02:56
*** Ephur has joined #openstack-keystone02:57
*** Ephur has quit IRC02:57
*** Ephur has joined #openstack-keystone02:58
*** Ephur has joined #openstack-keystone03:00
*** Ephur has quit IRC03:00
*** Ephur has joined #openstack-keystone03:01
*** Ephur has quit IRC03:02
*** ddieterly is now known as ddieterly[away]03:03
*** Ephur has joined #openstack-keystone03:04
*** Ephur has quit IRC03:04
*** ddieterly[away] has quit IRC03:04
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/38565503:05
*** Ephur has joined #openstack-keystone03:06
*** Ephur has quit IRC03:06
*** Ephur has joined #openstack-keystone03:08
*** Ephur has joined #openstack-keystone03:08
*** Ephur has quit IRC03:09
*** Ephur has joined #openstack-keystone03:09
*** Ephur has quit IRC03:10
*** dave-mccowan has quit IRC03:10
*** Ephur has joined #openstack-keystone03:10
*** Ephur has quit IRC03:10
*** Ephur has joined #openstack-keystone03:11
*** Ephur has quit IRC03:11
*** Ephur has joined #openstack-keystone03:12
*** Ephur has joined #openstack-keystone03:13
*** Ephur has quit IRC03:13
*** Ephur has joined #openstack-keystone03:14
*** Ephur has quit IRC03:14
*** Ephur has joined #openstack-keystone03:15
*** Ephur has quit IRC03:15
*** Ephur has joined #openstack-keystone03:17
*** Ephur has quit IRC03:17
*** Ephur has joined #openstack-keystone03:18
*** adrian_otto has joined #openstack-keystone03:18
*** Ephur has quit IRC03:18
*** adrian_otto has quit IRC03:19
*** Ephur has joined #openstack-keystone03:20
*** Ephur has quit IRC03:20
*** Ephur has joined #openstack-keystone03:21
*** Ephur has quit IRC03:21
*** Ephur has joined #openstack-keystone03:22
*** Ephur has joined #openstack-keystone03:22
*** Ephur has quit IRC03:23
*** Ephur has joined #openstack-keystone03:23
*** adrian_otto has joined #openstack-keystone03:24
*** Ephur has joined #openstack-keystone03:25
*** Ephur has quit IRC03:25
*** adrian_otto has quit IRC03:26
*** Ephur has joined #openstack-keystone03:26
*** Ephur has quit IRC03:26
*** adrian_otto has joined #openstack-keystone03:27
*** dikonoo has joined #openstack-keystone03:30
*** Ephur has joined #openstack-keystone03:30
*** Ephur has quit IRC03:30
*** Ephur has joined #openstack-keystone03:32
*** Ephur has quit IRC03:32
*** atod has quit IRC03:32
*** Ephur has joined #openstack-keystone03:33
*** Ephur has quit IRC03:33
*** Ephur has joined #openstack-keystone03:34
*** Ephur has quit IRC03:34
*** spzala has quit IRC03:35
*** spzala has joined #openstack-keystone03:35
*** adrian_otto has quit IRC03:35
*** Ephur has joined #openstack-keystone03:37
*** Ephur has quit IRC03:37
*** Ephur has joined #openstack-keystone03:38
*** Ephur has quit IRC03:38
*** Ephur has joined #openstack-keystone03:38
*** Ephur has quit IRC03:39
*** jidar has quit IRC03:39
*** Ephur has joined #openstack-keystone03:39
*** Ephur has quit IRC03:40
*** spzala has quit IRC03:40
*** Ephur has joined #openstack-keystone03:41
*** links has joined #openstack-keystone03:45
*** Ephur has quit IRC03:46
*** jaosorior has joined #openstack-keystone03:51
*** guoshan has quit IRC03:58
*** mewald has joined #openstack-keystone04:01
*** mewald has quit IRC04:06
*** wangqun has joined #openstack-keystone04:08
openstackgerritMerged openstack/keystone: Updating the document regarding LDAP options  https://review.openstack.org/37933404:10
*** atod has joined #openstack-keystone04:11
*** mewald has joined #openstack-keystone04:16
openstackgerritSteve Martinelli proposed openstack/keystone: Add docs for PCI-DSS  https://review.openstack.org/37442204:18
*** jidar has joined #openstack-keystone04:19
*** mewald has quit IRC04:21
*** jaosorior has quit IRC04:21
*** jaosorior has joined #openstack-keystone04:21
*** mewald has joined #openstack-keystone04:31
*** ChanServ sets mode: +v topol_04:33
*** topol_ is now known as topol04:33
*** mewald has quit IRC04:36
*** dflorea has joined #openstack-keystone04:44
*** mewald has joined #openstack-keystone04:51
*** mewald has quit IRC05:00
stevemarSpamapS: you're saying to change it to ix_revocation_event_audit_id_issued_before, right? re: https://review.openstack.org/#/c/376523/31/keystone/common/sql/expand_repo/versions/010_expand_add_revocation_event_index.py05:04
*** dflorea has quit IRC05:08
*** atod has quit IRC05:09
*** dflorea has joined #openstack-keystone05:09
*** mewald has joined #openstack-keystone05:21
*** spzala has joined #openstack-keystone05:36
*** haplo37_ has quit IRC05:37
*** haplo37_ has joined #openstack-keystone05:40
*** spzala has quit IRC05:40
*** richm has quit IRC05:41
wangqunHi guys, I met a question about the domain in keystone v3. We call the token api by the following way:05:41
wangquncurl -i   -H "Content-Type: application/json"   -d '{05:42
wangqun            "auth": {05:42
wangqun                "identity": {05:42
wangqun                    "methods": [ "password" ],05:42
wangqun                    "password": {05:42
wangqun                        "user": {05:42
wangqun                            "name": "testuser",05:42
wangqun                            "domain": { "id": "default" },05:42
wangqun                            "password": "***"05:42
wangqun                        }05:42
wangqun                    }05:42
wangqun                },05:42
wangqun                "scope": {05:42
wangqun                    "project": {05:42
wangqun                        "id": "0bb9f13b356b4acd9f50ac736aa5f9a2",05:42
wangqun                        "domain": { "id": "default" }05:42
wangqun                    }05:42
wangqun                }05:42
wangqun            }05:42
wangqun        }05:42
wangqun' http://localhost:5000/v3/auth/tokens05:42
wangqun Is the domain in the project of the curl api way the same with the domain of the project when we create project to use the domain?05:42
wangqunping stevemar05:43
wangqunHi stevemar, could you help me to tell the question?05:43
*** vern has joined #openstack-keystone05:44
*** atod has joined #openstack-keystone05:46
wangqunCould anyone help to explain the problem?05:51
SpamapSstevemar: yes05:54
*** guoshan has joined #openstack-keystone05:59
*** guoshan has quit IRC06:04
jamielennoxwangqun: i don't understand the question06:07
jamielennoxcreate project to use the domain?06:07
wangqunNo, we don,t need to deliver the domain when we create the project.06:09
wangqunBut we can find the domain value in the project tables in db.06:09
wangqunThe default value of domain is 'default'.06:10
wangqunI'm sorry we can deliver the domain value when we create the project. We can use the following way:06:12
wangqun{06:12
wangqun    "project": {06:12
wangqun        "description": "My new project",06:12
wangqun        "domain_id": "default",06:12
wangqun        "enabled": true,06:12
wangqun        "is_domain": false,06:12
wangqun        "name": "myNewProject"06:12
wangqun    }06:12
wangqun}06:12
wangqunIf we don't deliver the project'domain value. Its value will be the CONF.identity.default_domain_id.06:12
wangqunping jamielennox06:13
wangqunHave you understand the question?06:14
jamielennoxwangqun: that's mostly correct - i don't think you can create a project without a domain_id in v3, the default_domain_id is what is applied to projects created by v206:15
jamielennoxbut maybe it works06:15
jamielennoxbut i'm not sure what you're having problems with06:16
morganjamielennox: you cannot create a project w/o domain_id in v306:16
morganjamielennox: you are correct on both accounts06:16
wangqunNo. you don't understand my means. It must have the domain in v3.06:17
jamielennoxmorgan: thought so, haven't done it via curl for a long time06:17
wangqunwe can deliver the domain value when we create the project. We can use the following curl api way:06:17
wangqun{06:17
wangqun    "project": {06:17
wangqun        "description": "My new project",06:17
wangqun        "domain_id": "default",06:17
wangqun        "enabled": true,06:17
wangqun        "is_domain": false,06:17
wangqun        "name": "myNewProject"06:17
wangqun    }06:17
wangqun}06:17
morganright.06:17
morganerm, correct.06:18
wangqunIf we don't deliver the domain it will be the  CONF.identity.default_domain_id.06:18
morganit shouldn't06:18
morganit (should be required in v406:18
morganerm v306:18
morganif it isn't required, it is a bug.06:18
morganv2 is the only form that shouldn't require a domain id for creation.06:18
wangqundef _get_domain_id_from_token(self, request):06:19
wangqun        """Get the domain_id for a v3 create call.06:19
wangqun        In the case of a v3 create entity call that does not specify a domain06:19
wangqun        ID, the spec says that we should use the domain scoping from the token06:19
wangqun        being used.06:19
wangqun        """06:19
wangqun        # return if domain scoped06:19
wangqun        if request.context.domain_id:06:19
wangqun            return request.context.domain_id06:19
wangqun        if request.context.is_admin:06:19
wangqun            raise exception.ValidationError(06:19
wangqun                _('You have tried to create a resource using the admin '06:19
wangqun                  'token. As this token is not within a domain you must '06:19
wangqun                  'explicitly include a domain for this resource to '06:19
wangqun                  'belong to.'))06:19
morganright. that is the code. that is *bad* imo06:19
wangqun        # TODO(henry-nash): We should issue an exception here since if06:19
wangqun        # a v3 call does not explicitly specify the domain_id in the06:19
wangqun        # entity, it should be using a domain scoped token.  However,06:19
wangqun        # the current tempest heat tests issue a v3 call without this.06:20
wangqun        # This is raised as bug #1283539.  Once this is fixed, we06:20
openstackbug 1283539 in tempest "Tempest heat test calls keystone v3 user api with domain_id" [Undecided,Expired] https://launchpad.net/bugs/128353906:20
wangqun        # should remove the line below and replace it with an error.06:20
wangqun        #06:20
morganyeah the TODO is the behavior that should be expected06:20
wangqun        # Ahead of actually changing the code to raise an exception, we06:20
wangqun        # issue a deprecation warning.06:20
jamielennoxwangqun: you're going to get kicked for spam if you keep posting blocks like that to the channel06:20
wangqun        versionutils.report_deprecated_feature(06:20
wangqun            LOG,06:20
wangqun            _LW('Not specifying a domain during a create user, group or '06:20
wangqun                'project call, and relying on falling back to the '06:20
wangqun                'default domain, is deprecated as of Liberty. There is no '06:20
wangqun                'plan to remove this compatibility, however, future API '06:20
wangqun                'versions may remove this, so please specify the domain '06:20
wangqun                'explicitly or use a domain-scoped token.'))06:20
wangqun        return CONF.identity.default_domain_id06:20
wangqunYes.06:20
wangqunI'm sorry to do so.06:20
morganyou may want to use paste.openstack.org for the big blocks like that06:21
morganin the future06:21
jamielennoxoh yea, there was a caveat that if you had a domain scoped token you didn't have to supply a domain_id06:21
wangqunYes. I have the question about the domain.06:21
jamielennoxbut they aren't used much06:21
morganjamielennox: yeah butas you can see deprecated behavior06:21
wangqunWe can call the token by the api curl way.06:21
wangqunlike this:06:22
wangquncurl -i   -H "Content-Type: application/json"   -d '{06:22
wangqun            "auth": {06:22
wangqun                "identity": {06:22
wangqun                    "methods": [ "password" ],06:22
wangqun                    "password": {06:22
wangqun                        "user": {06:22
wangqun                            "name": "testuser",06:22
wangqun                            "domain": { "id": "default" },06:22
wangqun                            "password": "***"06:22
wangqun                        }06:22
wangqun                    }06:22
wangqun                },06:22
wangqun                "scope": {06:22
wangqun                    "project": {06:22
wangqun                        "id": "0bb9f13b356b4acd9f50ac736aa5f9a2",06:22
wangqun                        "domain": { "id": "default" }06:22
wangqun                    }06:22
wangqun                }06:22
wangqun            }06:22
wangqun        }06:22
wangqun' http://localhost:5000/v3/auth/tokens06:22
*** guoshan has joined #openstack-keystone06:23
wangqunI want to know the project domain in the curl api  if is the same with domain value in the project table of db.06:23
wangqunping morgan06:23
wangqunping jamielennox06:23
wangqunCan you understand my means?06:24
jamielennoxwangqun: the project is in the default domain06:24
jamielennoxand default is the id so it will be the same as in the tables06:25
morganwangqun: so the "default" domain we create has the id "default"06:25
morganwangqun: any domain except that special domain will have a standard uuid.06:25
morganit is a special case for v2 compatibility06:25
wangqunOh... The scope project domian in the curl token api is the same the project table in the db.06:26
wangqunAm I right?06:26
morganin this case, yes.06:26
morganbecause the project is in that domain06:26
morganif the project was in another domain, no.06:26
jamielennoxright, typically (devstack) id=domain name=Domain06:26
jamielennoxdamnit06:26
jamielennoxid=default name=Default06:26
wangqunOk, I also have another question about it.06:27
wangqunWe can look the curl token api that it have domain value in both user and project.06:27
wangqunAre both of them  the same values?06:28
morgannot always, if i'm reading your question06:28
jamielennoxthey don't have to be06:28
wangqunI think user should want to access the project in the domain.06:28
morganthey are only the same if both the user and the project are in the same domain06:29
openstackgerritMerged openstack/keystone: Add docs for PCI-DSS  https://review.openstack.org/37442206:29
jamielennoxthink of domains as resource ownership, your user is owned by a domain and your project is owned by a domain06:29
jamielennoxif you have a role across domains you can still use it, but in most cases they will be the same because you are operating in your department/customer06:29
wangqunOh... I got it. Thanks jamielennox, morgan. :)06:30
*** mewald has quit IRC06:41
*** code-R has joined #openstack-keystone06:47
*** mewald has joined #openstack-keystone06:50
*** code-R_ has joined #openstack-keystone06:54
*** rcernin has joined #openstack-keystone06:56
*** code-R has quit IRC06:57
*** gus has joined #openstack-keystone07:01
*** dflorea has quit IRC07:04
*** tesseract- has joined #openstack-keystone07:04
*** atod has quit IRC07:08
*** crinkle has quit IRC07:18
*** crinkle has joined #openstack-keystone07:19
*** mewald has quit IRC07:22
*** code-R has joined #openstack-keystone07:25
*** code-R_ has quit IRC07:25
*** mewald has joined #openstack-keystone07:30
*** code-R has quit IRC07:45
openstackgerritGeorge Tian proposed openstack/keystone: optimize code  https://review.openstack.org/38479807:56
*** hoangcx has quit IRC07:59
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:00
*** amoralej|off is now known as amoralej08:01
*** code-R has joined #openstack-keystone08:02
*** code-R_ has joined #openstack-keystone08:06
*** code-R has quit IRC08:09
*** mewald has quit IRC08:13
bretonoh wow08:22
bretonmorning, keystone08:23
*** mewald has joined #openstack-keystone08:25
*** code-R_ has quit IRC08:26
*** code-R has joined #openstack-keystone08:26
*** GB21 has joined #openstack-keystone08:28
*** mewald has quit IRC08:34
*** spzala has joined #openstack-keystone08:36
*** spzala has quit IRC08:41
*** asettle has joined #openstack-keystone08:46
*** spzala has joined #openstack-keystone08:52
*** kragniz has quit IRC08:53
*** kragniz has joined #openstack-keystone08:54
openstackgerritGeorge Tian proposed openstack/keystone: remove redundant code and noramalized an arg  https://review.openstack.org/38482408:55
*** spzala has quit IRC08:56
*** spzala has joined #openstack-keystone09:08
*** adrian_otto has joined #openstack-keystone09:08
*** spzala has quit IRC09:12
*** ChanServ has quit IRC09:14
*** jaosorior is now known as jaosorior_lunch09:16
*** wasmum has quit IRC09:17
*** jraim has quit IRC09:17
*** frickler has quit IRC09:17
*** jmccrory has quit IRC09:17
*** raddaoui has quit IRC09:17
*** kragniz has quit IRC09:17
*** zzzeek has quit IRC09:17
*** crinkle has quit IRC09:17
*** sdake_ has quit IRC09:17
*** gerhardq1x has quit IRC09:17
*** openstackgerrit has quit IRC09:17
*** amoralej has quit IRC09:17
*** HenryG has quit IRC09:17
*** jlwhite has quit IRC09:17
*** rha has quit IRC09:17
*** wangqun has quit IRC09:17
*** Nakato has quit IRC09:17
*** mordred has quit IRC09:17
*** dtroyer has quit IRC09:17
*** dstanek has quit IRC09:17
*** mgagne_ has quit IRC09:17
*** zigo has quit IRC09:17
*** rm_work has quit IRC09:17
*** chris_hultin|AWA has quit IRC09:17
*** baffle has quit IRC09:17
*** mjb` has quit IRC09:17
*** jdennis has quit IRC09:17
*** adam_g` has quit IRC09:17
*** mnaser has quit IRC09:17
*** pjm6 has quit IRC09:17
*** sudorandom has quit IRC09:17
*** hrybacki has quit IRC09:17
*** morgan has quit IRC09:17
*** tsufiev has quit IRC09:17
*** aloga has quit IRC09:17
*** AlexeyAbashkin has quit IRC09:17
*** robcresswell has quit IRC09:17
*** rderose has quit IRC09:17
*** martinus__ has quit IRC09:17
*** harlowja has quit IRC09:17
*** jlk has quit IRC09:17
*** xek_ has quit IRC09:17
*** TonyXu has quit IRC09:17
*** nikhil has quit IRC09:17
*** briancurtin has quit IRC09:17
*** DuncanT has quit IRC09:17
*** zhiyan has quit IRC09:17
*** ctracey has quit IRC09:17
*** d34dh0r53 has quit IRC09:17
*** Kimmo__ has quit IRC09:17
*** htruta has quit IRC09:17
*** GB21 has quit IRC09:17
*** rcernin has quit IRC09:17
*** jaosorior_lunch has quit IRC09:17
*** nkinder has quit IRC09:17
*** vkramskikh has quit IRC09:17
*** knikolla has quit IRC09:17
*** odyssey4me has quit IRC09:17
*** BrAsS_mO- has quit IRC09:17
*** alex_xu_ has quit IRC09:17
*** mvk has quit IRC09:17
*** topol has quit IRC09:17
*** jistr has quit IRC09:17
*** fungi has quit IRC09:17
*** andrewbogott has quit IRC09:17
*** flaper87 has quit IRC09:17
*** oomichi has quit IRC09:17
*** d0ugal has quit IRC09:17
*** krotscheck has quit IRC09:17
*** twouters has quit IRC09:17
*** beddari has quit IRC09:17
*** rvba` has quit IRC09:17
*** wolsen has quit IRC09:17
*** auggy has quit IRC09:17
*** serverascode has quit IRC09:17
*** AndyWojo has quit IRC09:17
*** _fortis has quit IRC09:17
*** dolphm has quit IRC09:17
*** lbragstad has quit IRC09:17
*** med_ has quit IRC09:17
*** adrian_otto has quit IRC09:17
*** asettle has quit IRC09:17
*** vern has quit IRC09:17
*** basilAB has quit IRC09:17
*** redrobot has quit IRC09:17
*** Guest66666 has quit IRC09:17
*** AlexOughton has quit IRC09:17
*** dobson has quit IRC09:17
*** EmilienM has quit IRC09:17
*** SpamapS has quit IRC09:17
*** timburke has quit IRC09:17
*** kevinbenton has quit IRC09:17
*** boris-42 has quit IRC09:17
*** madorn has quit IRC09:17
*** sigmavirus has quit IRC09:17
*** dims has quit IRC09:17
*** mancdaz has quit IRC09:17
*** pkoraca has quit IRC09:17
*** cargonza has quit IRC09:17
*** BlackDex has quit IRC09:17
*** briancline has quit IRC09:17
*** johnthetubaguy has quit IRC09:17
*** cburgess has quit IRC09:17
*** tonyb has quit IRC09:17
*** breton has quit IRC09:17
*** jhesketh has quit IRC09:17
*** jhesketh has joined #openstack-keystone09:19
*** antwash has quit IRC09:20
*** tlbr has quit IRC09:20
*** agireud has quit IRC09:20
*** zeus has quit IRC09:21
*** zeus has joined #openstack-keystone09:21
*** Anticimex has quit IRC09:22
*** timss has quit IRC09:22
*** davechen has left #openstack-keystone09:34
*** evrardjp has quit IRC09:41
*** kragniz has joined #openstack-keystone09:57
*** GB21 has joined #openstack-keystone09:57
*** kragniz has quit IRC09:57
*** kragniz has joined #openstack-keystone09:58
*** kragniz has quit IRC09:58
*** kragniz has joined #openstack-keystone09:59
*** tlbr has joined #openstack-keystone10:06
*** zzzeek has joined #openstack-keystone10:06
*** serverascode has joined #openstack-keystone10:07
*** DuncanT has joined #openstack-keystone10:07
*** timss has joined #openstack-keystone10:07
*** antwash has joined #openstack-keystone10:07
*** adrian_otto has joined #openstack-keystone10:07
*** asettle has joined #openstack-keystone10:07
*** vern has joined #openstack-keystone10:07
*** basilAB has joined #openstack-keystone10:07
*** Guest66666 has joined #openstack-keystone10:07
*** redrobot has joined #openstack-keystone10:07
*** AlexOughton has joined #openstack-keystone10:07
*** SpamapS has joined #openstack-keystone10:07
*** EmilienM has joined #openstack-keystone10:07
*** dobson has joined #openstack-keystone10:07
*** timburke has joined #openstack-keystone10:07
*** kevinbenton has joined #openstack-keystone10:07
*** boris-42 has joined #openstack-keystone10:07
*** sigmavirus has joined #openstack-keystone10:07
*** madorn has joined #openstack-keystone10:07
*** dims has joined #openstack-keystone10:07
*** mancdaz has joined #openstack-keystone10:07
*** pkoraca has joined #openstack-keystone10:07
*** cargonza has joined #openstack-keystone10:07
*** johnthetubaguy has joined #openstack-keystone10:07
*** BlackDex has joined #openstack-keystone10:07
*** briancline has joined #openstack-keystone10:07
*** cburgess has joined #openstack-keystone10:07
*** tonyb has joined #openstack-keystone10:07
*** breton has joined #openstack-keystone10:07
*** evrardjp has joined #openstack-keystone10:09
*** jaosorior has joined #openstack-keystone10:09
*** raddaoui has joined #openstack-keystone10:09
*** jraim has joined #openstack-keystone10:09
*** rcernin has joined #openstack-keystone10:09
*** nkinder has joined #openstack-keystone10:09
*** vkramskikh has joined #openstack-keystone10:09
*** knikolla has joined #openstack-keystone10:09
*** odyssey4me has joined #openstack-keystone10:09
*** BrAsS_mO- has joined #openstack-keystone10:09
*** alex_xu_ has joined #openstack-keystone10:09
*** mvk has joined #openstack-keystone10:09
*** topol has joined #openstack-keystone10:09
*** jistr has joined #openstack-keystone10:09
*** fungi has joined #openstack-keystone10:09
*** andrewbogott has joined #openstack-keystone10:09
*** flaper87 has joined #openstack-keystone10:09
*** oomichi has joined #openstack-keystone10:09
*** d0ugal has joined #openstack-keystone10:09
*** krotscheck has joined #openstack-keystone10:09
*** twouters has joined #openstack-keystone10:09
*** beddari has joined #openstack-keystone10:09
*** rvba` has joined #openstack-keystone10:09
*** wolsen has joined #openstack-keystone10:09
*** auggy has joined #openstack-keystone10:09
*** AndyWojo has joined #openstack-keystone10:09
*** _fortis has joined #openstack-keystone10:09
*** dolphm has joined #openstack-keystone10:09
*** lbragstad has joined #openstack-keystone10:09
*** tepper.freenode.net sets mode: +vo topol dolphm10:09
*** wasmum has joined #openstack-keystone10:10
*** jmccrory has joined #openstack-keystone10:10
*** frickler has joined #openstack-keystone10:10
*** wasmum has quit IRC10:10
*** frickler has quit IRC10:10
*** jmccrory has quit IRC10:10
*** evrardjp has quit IRC10:10
*** jaosorior has quit IRC10:10
*** raddaoui has quit IRC10:10
*** jraim has quit IRC10:10
*** rcernin has quit IRC10:10
*** nkinder has quit IRC10:10
*** vkramskikh has quit IRC10:10
*** knikolla has quit IRC10:10
*** odyssey4me has quit IRC10:10
*** BrAsS_mO- has quit IRC10:10
*** alex_xu_ has quit IRC10:10
*** mvk has quit IRC10:10
*** topol has quit IRC10:10
*** jistr has quit IRC10:10
*** fungi has quit IRC10:10
*** andrewbogott has quit IRC10:10
*** flaper87 has quit IRC10:10
*** oomichi has quit IRC10:10
*** d0ugal has quit IRC10:10
*** krotscheck has quit IRC10:10
*** twouters has quit IRC10:10
*** beddari has quit IRC10:10
*** rvba` has quit IRC10:10
*** wolsen has quit IRC10:10
*** auggy has quit IRC10:10
*** AndyWojo has quit IRC10:10
*** _fortis has quit IRC10:10
*** lbragstad has quit IRC10:10
*** dolphm has quit IRC10:10
*** serverascode has quit IRC10:10
*** DuncanT has quit IRC10:10
*** timss has quit IRC10:10
*** antwash has quit IRC10:10
*** adrian_otto has quit IRC10:10
*** asettle has quit IRC10:10
*** vern has quit IRC10:10
*** basilAB has quit IRC10:10
*** Guest66666 has quit IRC10:10
*** redrobot has quit IRC10:10
*** AlexOughton has quit IRC10:10
*** dobson has quit IRC10:10
*** EmilienM has quit IRC10:10
*** timburke has quit IRC10:10
*** SpamapS has quit IRC10:10
*** kevinbenton has quit IRC10:10
*** boris-42 has quit IRC10:10
*** madorn has quit IRC10:10
*** dims has quit IRC10:10
*** sigmavirus has quit IRC10:10
*** mancdaz has quit IRC10:10
*** pkoraca has quit IRC10:10
*** cargonza has quit IRC10:10
*** BlackDex has quit IRC10:10
*** briancline has quit IRC10:10
*** johnthetubaguy has quit IRC10:10
*** cburgess has quit IRC10:10
*** tonyb has quit IRC10:10
*** breton has quit IRC10:10
*** tlbr has quit IRC10:10
*** zzzeek has quit IRC10:10
*** cargonza has joined #openstack-keystone10:19
*** serverascode has joined #openstack-keystone10:27
*** timss has joined #openstack-keystone10:27
*** antwash has joined #openstack-keystone10:27
*** asettle has joined #openstack-keystone10:27
*** vern has joined #openstack-keystone10:27
*** basilAB has joined #openstack-keystone10:27
*** Guest66666 has joined #openstack-keystone10:27
*** redrobot has joined #openstack-keystone10:27
*** AlexOughton has joined #openstack-keystone10:27
*** SpamapS has joined #openstack-keystone10:27
*** EmilienM has joined #openstack-keystone10:27
*** dobson has joined #openstack-keystone10:27
*** timburke has joined #openstack-keystone10:27
*** kevinbenton has joined #openstack-keystone10:27
*** boris-42 has joined #openstack-keystone10:27
*** sigmavirus has joined #openstack-keystone10:27
*** madorn has joined #openstack-keystone10:27
*** dims has joined #openstack-keystone10:27
*** mancdaz has joined #openstack-keystone10:27
*** pkoraca has joined #openstack-keystone10:27
*** johnthetubaguy has joined #openstack-keystone10:27
*** BlackDex has joined #openstack-keystone10:27
*** briancline has joined #openstack-keystone10:27
*** cburgess has joined #openstack-keystone10:27
*** tonyb has joined #openstack-keystone10:27
*** breton has joined #openstack-keystone10:27
*** wasmum has joined #openstack-keystone10:27
*** jmccrory has joined #openstack-keystone10:27
*** frickler has joined #openstack-keystone10:27
*** tlbr has joined #openstack-keystone10:27
*** zzzeek has joined #openstack-keystone10:27
*** jraim has joined #openstack-keystone10:27
*** med_ has joined #openstack-keystone10:27
*** DuncanT has joined #openstack-keystone10:27
*** raddaoui has joined #openstack-keystone10:27
*** evrardjp has joined #openstack-keystone10:27
*** jaosorior has joined #openstack-keystone10:27
*** rcernin has joined #openstack-keystone10:27
*** nkinder has joined #openstack-keystone10:27
*** vkramskikh has joined #openstack-keystone10:27
*** knikolla has joined #openstack-keystone10:27
*** odyssey4me has joined #openstack-keystone10:27
*** BrAsS_mO- has joined #openstack-keystone10:27
*** alex_xu_ has joined #openstack-keystone10:27
*** mvk has joined #openstack-keystone10:27
*** topol has joined #openstack-keystone10:27
*** jistr has joined #openstack-keystone10:27
*** fungi has joined #openstack-keystone10:27
*** andrewbogott has joined #openstack-keystone10:27
*** flaper87 has joined #openstack-keystone10:27
*** oomichi has joined #openstack-keystone10:27
*** d0ugal has joined #openstack-keystone10:27
*** krotscheck has joined #openstack-keystone10:27
*** twouters has joined #openstack-keystone10:27
*** beddari has joined #openstack-keystone10:27
*** rvba` has joined #openstack-keystone10:27
*** wolsen has joined #openstack-keystone10:27
*** auggy has joined #openstack-keystone10:27
*** AndyWojo has joined #openstack-keystone10:27
*** _fortis has joined #openstack-keystone10:27
*** dolphm has joined #openstack-keystone10:27
*** lbragstad has joined #openstack-keystone10:27
*** tepper.freenode.net sets mode: +vo topol dolphm10:27
*** crinkle has joined #openstack-keystone10:28
*** sdake_ has joined #openstack-keystone10:28
*** gerhardq1x has joined #openstack-keystone10:28
*** openstackgerrit has joined #openstack-keystone10:28
*** amoralej has joined #openstack-keystone10:28
*** HenryG has joined #openstack-keystone10:28
*** jlwhite has joined #openstack-keystone10:28
*** rha has joined #openstack-keystone10:28
*** richm has joined #openstack-keystone10:28
*** hrybacki has joined #openstack-keystone10:28
*** d34dh0r53 has joined #openstack-keystone10:28
*** Nakato has joined #openstack-keystone10:28
*** mordred has joined #openstack-keystone10:28
*** dtroyer has joined #openstack-keystone10:28
*** dstanek has joined #openstack-keystone10:28
*** mgagne_ has joined #openstack-keystone10:28
*** zigo has joined #openstack-keystone10:28
*** rm_work has joined #openstack-keystone10:28
*** chris_hultin|AWA has joined #openstack-keystone10:28
*** baffle has joined #openstack-keystone10:28
*** mjb` has joined #openstack-keystone10:28
*** jdennis has joined #openstack-keystone10:28
*** mnaser has joined #openstack-keystone10:28
*** adam_g` has joined #openstack-keystone10:28
*** pjm6 has joined #openstack-keystone10:28
*** sudorandom has joined #openstack-keystone10:28
*** morgan has joined #openstack-keystone10:28
*** tsufiev has joined #openstack-keystone10:28
*** aloga has joined #openstack-keystone10:28
*** AlexeyAbashkin has joined #openstack-keystone10:28
*** robcresswell has joined #openstack-keystone10:28
*** rderose has joined #openstack-keystone10:28
*** martinus__ has joined #openstack-keystone10:28
*** jlk has joined #openstack-keystone10:28
*** xek_ has joined #openstack-keystone10:28
*** TonyXu has joined #openstack-keystone10:28
*** nikhil has joined #openstack-keystone10:28
*** briancurtin has joined #openstack-keystone10:28
*** zhiyan has joined #openstack-keystone10:28
*** ctracey has joined #openstack-keystone10:28
*** Kimmo__ has joined #openstack-keystone10:28
*** htruta has joined #openstack-keystone10:28
*** tepper.freenode.net sets mode: +v dstanek10:28
*** DuncanT has quit IRC10:28
*** mvk has quit IRC10:29
*** serverascode has quit IRC10:29
*** ChanServ has joined #openstack-keystone10:29
*** tepper.freenode.net sets mode: +o ChanServ10:29
*** guoshan has quit IRC10:30
*** d34dh0r53 has quit IRC10:30
*** d34dh0r53 has joined #openstack-keystone10:30
*** jraim has quit IRC10:31
*** nikhil has quit IRC10:32
*** tlbr is now known as Guest7632310:32
*** med_ is now known as Guest3894110:32
*** adrian_otto has joined #openstack-keystone10:32
*** agireud has joined #openstack-keystone10:33
*** DuncanT has joined #openstack-keystone10:33
*** code-R_ has joined #openstack-keystone10:34
*** sdake_ has quit IRC10:35
*** cargonza has quit IRC10:35
*** cargonza has joined #openstack-keystone10:35
*** antwash has quit IRC10:35
*** antwash has joined #openstack-keystone10:35
*** raddaoui has quit IRC10:36
*** raddaoui has joined #openstack-keystone10:36
*** links has quit IRC10:36
*** code-R has quit IRC10:37
*** DuncanT has quit IRC10:37
*** DuncanT has joined #openstack-keystone10:37
*** zeus is now known as Guest1082510:42
*** jaosorior has quit IRC10:44
*** jaosorior has joined #openstack-keystone10:44
*** nikhil has joined #openstack-keystone10:44
*** nicolasbock has joined #openstack-keystone10:47
openstackgerritpawnesh kumar proposed openstack/keystone: Removal of unnecessary sample file from repository  https://review.openstack.org/38589510:47
*** jraim has joined #openstack-keystone10:48
*** links has joined #openstack-keystone10:50
*** serverascode has joined #openstack-keystone10:51
*** mewald has joined #openstack-keystone10:52
*** mvk has joined #openstack-keystone11:00
*** amoralej is now known as amoralej|lunch11:02
*** sdake has joined #openstack-keystone11:03
*** ddieterly has joined #openstack-keystone11:07
*** sdake_ has joined #openstack-keystone11:11
*** sdake has quit IRC11:13
*** markvoelker has quit IRC11:14
*** sdake has joined #openstack-keystone11:27
*** ddieterly has quit IRC11:27
*** haplo37_ has quit IRC11:27
*** sdake_ has quit IRC11:28
*** haplo37_ has joined #openstack-keystone11:30
*** Anticimex has joined #openstack-keystone11:47
*** flaper87 has quit IRC11:56
*** sdake_ has joined #openstack-keystone12:05
*** raildo has joined #openstack-keystone12:06
*** sdake has quit IRC12:06
*** marekd2 has joined #openstack-keystone12:11
*** flaper87 has joined #openstack-keystone12:12
*** flaper87 has quit IRC12:12
*** flaper87 has joined #openstack-keystone12:12
*** edmondsw has joined #openstack-keystone12:13
*** markvoelker has joined #openstack-keystone12:14
*** ddieterly has joined #openstack-keystone12:16
*** markvoelker has quit IRC12:20
*** amoralej|lunch is now known as amoralej12:29
*** guoshan has joined #openstack-keystone12:31
*** ddieterly has quit IRC12:33
*** guoshan has quit IRC12:35
*** spzala has joined #openstack-keystone12:49
*** clenimar has quit IRC12:53
*** GB21 has quit IRC12:58
*** lamt has joined #openstack-keystone12:59
*** bjolo-afk is now known as bjolo13:01
*** jperry has joined #openstack-keystone13:11
*** lamt has quit IRC13:14
*** srihitha_ has joined #openstack-keystone13:16
srihitha_Hi all, i am integrating designate with openstack mitaka in that i am getting keystone error http://paste.openstack.org/show/585608/13:17
srihitha_is there any plugin for that?13:18
stevemarsrihitha_: keystonemiddleware.auth_token should be configured the same for most services13:19
stevemarkeystoners o/13:19
*** maticue has joined #openstack-keystone13:23
maticueHi everyone, Just a simple question. I see that keystone.conf has rabbitmq options. What are those options?13:26
srihitha_stevemar:not understanding what u are saying13:26
*** agrebennikov has joined #openstack-keystone13:27
*** pjm6 has quit IRC13:27
*** ayoung has joined #openstack-keystone13:28
*** ChanServ sets mode: +v ayoung13:28
maticuesrihitha_, I thought that keystone just need connections with the DB. For example, If I read keystone install guide for kilo I only see configuration for DB, and token. However I also see that other keystone implementations have configured also the rabbitmq section. I'd like to know why13:29
*** agrebennikov has quit IRC13:33
*** ddieterly has joined #openstack-keystone13:40
*** dave-mccowan has joined #openstack-keystone13:42
*** marekd2 has quit IRC13:42
*** markvoelker has joined #openstack-keystone13:47
*** links has quit IRC13:48
*** nishaYadav has joined #openstack-keystone13:53
*** jaugustine has joined #openstack-keystone13:53
nishaYadavhey all13:55
nishaYadavstevemar, hey13:56
stevemarmaticue: the rabbitmq and other messaging options are not necessary13:56
stevemarmaticue: they are only required if you want keystone to emit notifications when resources are deleted/updated/created13:56
stevemarnishaYadav: whats up13:57
*** adrian_otto has quit IRC13:57
nishaYadavstevemar, anyone other than mtreinish who can help me with the tempest tests? I am not able to catch him on IRC13:58
maticuestevemar, great, that's what I wanted to know. This could be related with a keystone HA implementation ?13:59
*** evrardjp has quit IRC14:00
*** evrardjp has joined #openstack-keystone14:00
stevemarnishaYadav: jordanP can help14:01
*** adrian_otto has joined #openstack-keystone14:01
stevemarmaticue: not necessarily14:01
nishaYadavstevemar, I got little help, but he went offline then, still unavailable :(14:02
nishaYadavstevemar, anyways I am asking my query on #openstack-qa channel now, let's see14:02
stevemarsrihitha_: they "keystone_authtoken" section in desginate.conf, or nova.conf, or any other project.conf, should be roughly the same. double check your designate settings with another project's setting -- cause your error looks like a misconfiguration14:02
maticuestevemar, thank you so much for the information!14:03
stevemarnishaYadav: kenichi should be around too14:03
nishaYadavstevemar, oh, thanks will ping him once :)14:04
stevemarnishaYadav: i think pushing up your change is fine, let's just see what happens14:04
nishaYadavstevemar, alright, will work on that14:06
*** sdake_ has quit IRC14:09
*** sdake has joined #openstack-keystone14:10
*** mewald has quit IRC14:12
*** agrebennikov has joined #openstack-keystone14:14
*** openstackgerrit has quit IRC14:18
*** openstackgerrit has joined #openstack-keystone14:18
*** mewald has joined #openstack-keystone14:24
*** chris_hultin|AWA is now known as chris_hultin14:30
*** guoshan has joined #openstack-keystone14:31
*** guoshan has quit IRC14:36
*** lamt has joined #openstack-keystone14:39
*** dikonoo has quit IRC14:40
*** mvk has quit IRC14:41
*** gagehugo has joined #openstack-keystone14:41
*** adrian_otto has quit IRC14:44
gsilvisI'm trying to run Keystone under Apache, to test some federation things.  As soon as I enable federation in the config file, I start getting the following error:14:53
gsilvis   ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option14:54
gsilvisI've found some things online that talk about this, but nothing that really makes clear what the problem or solution is14:54
dstanekgsilvis: what version of keystone are you using?14:54
*** code-R_ has quit IRC14:55
gsilvisLiberty14:55
gsilvisand I'm using RedHat's packages, with a bastardized set of puppet manifests mostly derived from the Kilo release... so there could be lots of problems there14:56
dstanekgsilvis: hmmm..at some point dolphm fixed that issue for good, but i think it was after liberty14:58
dstanekthe issue is that code somewhere is trying to register arguments after the keystone code has parsed then. typically that means there is an import order problem.14:59
gsilvisthe weird thing is that the error is thrown VERY early in the wsgi script14:59
dstanekwhen you say you enabled federation what you do you mean? added a mapping driver?14:59
gsilvisYes14:59
gsilvisthe very first CLI option that it tries to register, as far as I can tell, throws the error15:00
*** sdake has quit IRC15:00
gsilvishere's the traceback: http://paste.openstack.org/show/585624/15:00
*** sdake has joined #openstack-keystone15:05
*** adrian_otto has joined #openstack-keystone15:05
dstanekgsilvis: let me get in to my wayback machine and poke around. i don't remember if there is a good solution or now15:06
dstaneknot15:06
gsilvisOkay, thanks15:06
*** phalmos has joined #openstack-keystone15:11
openstackgerritGage Hugo proposed openstack/keystone-specs: Add reason to notifications for PCI-DSS events  https://review.openstack.org/38130215:11
*** phalmos_ has joined #openstack-keystone15:14
*** phalmos has quit IRC15:16
*** asettle has quit IRC15:18
*** asettle has joined #openstack-keystone15:18
*** rcernin has quit IRC15:20
dstanekgsilvis: it's almost like initialize_application() is being called more than once in the process15:20
*** spzala has quit IRC15:22
*** spzala has joined #openstack-keystone15:22
gsilvisdstanek: ....hmmmm, interesting15:23
*** afred312 has joined #openstack-keystone15:23
*** spzala has quit IRC15:27
*** phalmos_ has quit IRC15:27
*** nishaYadav has quit IRC15:29
*** spzala has joined #openstack-keystone15:29
*** asettle has quit IRC15:33
*** asettle has joined #openstack-keystone15:33
dstanekgsilvis: and if you just remove mapping from your config it goes back to working?15:33
*** marekd2 has joined #openstack-keystone15:35
openstackgerritRon De Rose proposed openstack/keystone: Add revocation event indexes  https://review.openstack.org/37652315:38
*** mvk has joined #openstack-keystone15:39
gsilvisdstanek: I believe so... let me try15:39
openstackgerritRon De Rose proposed openstack/keystone: Improve check_token validation performance  https://review.openstack.org/38210715:39
gsilvisdstanek: hmmm.  after removing it, it /still/ doesn't work, apparently15:41
gsilvisor wait15:41
gsilvishmmm, maybe this is a problem with my apache configuration then15:41
*** nishaYadav has joined #openstack-keystone15:42
gsilvisdstanek: here's the 35357 apache site config:  http://paste.openstack.org/show/585629/15:43
gsilviswait... now I'm confused15:43
gsilvislet me think about this for a few minutes15:43
dstanekgsilvis: i don't know if this was actually fixed back then https://bugs.launchpad.net/grenade/+bug/146648515:51
openstackLaunchpad bug 1466485 in OpenStack Identity (keystone) "keystone fails with: ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option" [Critical,Expired]15:51
dstanekare you using threaded or multiprocess apache?15:51
gsilvisI'm not sure... how do I determine that?15:53
lbragstadgsilvis that should be in your keystone wsgi file15:54
gsilviswhich file is this?  the wsgi script that mod_wsgi loads?15:56
*** guoshan has joined #openstack-keystone15:56
lbragstadgsilvis it should be somewhere in /etc/apache/sites-enabled/15:56
lbragstadyou should see a file in there for keystone15:56
lbragstadgsilvis kinda like this - https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone-httpd.conf.j215:58
gsilvisI have /etc/httpd/conf.d/10-keystone_wsgi_admin.conf  and a similar one for the main port15:58
dstaneki was actually thinking of the apache threading vs processes15:58
gsilvis(looks like my setup doesn't use the sites-enabled directory)15:58
dstaneki'm just grasping for something here ...15:59
lbragstadZOMG - it's happening! https://review.openstack.org/#/c/374243/15:59
gsilvisWSGIDaemonProcess keystone_admin display-name=keystone-admin group=keystone processes=1 threads=32 user=keystone    <--- is this the information you're looking for?16:00
dstaneklbragstad: woot!16:00
dstanekgsilvis: yeah, i wonder what would happen if you used 5 processes and 1 thread16:00
*** guoshan has quit IRC16:01
*** tqtran has joined #openstack-keystone16:01
gsilvisdstanek: I'll try that16:01
bretonalthough it is useless to use threads, it should not happen16:02
*** phalmos has joined #openstack-keystone16:03
gsilvisWith processes=5 threads=1, and with federation still enabled, I still get the same error16:03
bretongsilvis: try looking in the logs right after apache was restarted16:03
gsilviswait, I'm sorry16:05
gsilvisthis is a different error now.16:05
*** tesseract- has quit IRC16:06
gsilvisfirst, of all, there's a warning 'No handlers could be found for logger "oslo_config.cfg"'.  but then 'ValueError: Empty module name'16:06
bretonfull log please16:06
*** dflorea has joined #openstack-keystone16:07
gsilvishttp://paste.openstack.org/show/585635/16:07
gsilvissorry, I can't quite tell when I restarted apache16:08
gsilvisbut it was before 12:05, clearly16:08
gsilvisso apparently both errors happen16:08
*** phalmos has quit IRC16:08
*** gyee has joined #openstack-keystone16:10
bretongsilvis: something is wrong with your [auth]methods option16:10
gsilvis... if this is the error, I will be very sad.  can there be any spaces in the comma-separated list?16:11
* breton shrugs16:11
bretonprobably no16:11
gsilvisokay, after fixing that, the 'ValueError' disappears16:13
* gsilvis fixes that in the puppet manifests too ...16:13
bretonhas the "cli already registered" disappeared?16:13
gsilvisNo, I still reliably get    ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option16:14
*** phalmos has joined #openstack-keystone16:14
*** ddieterly is now known as ddieterly[away]16:15
bretonsomething is still wrong! Any other errors except this? It might be ArgsAlreadyParsedError, but with different traceback16:16
gsilvisbreton: puppet's still running... I'll check in a couple of minutes16:17
rderosestevemar: around?16:18
openstackgerritRon De Rose proposed openstack/keystone: Return password_expires_at during auth  https://review.openstack.org/36700816:21
openstackgerritRon De Rose proposed openstack/keystone: Return password_expires_at during auth  https://review.openstack.org/36700816:23
*** ddieterly[away] is now known as ddieterly16:30
bretongsilvis: sorry, gotta go. Please post apache log right after restarting it, i'll take a look if nobody will16:30
gsilvisbreton: thanks for your help16:30
*** amoralej is now known as amoralej|off16:33
*** xenogear has quit IRC16:35
*** jaugustine has quit IRC16:36
*** jaugustine has joined #openstack-keystone16:39
*** sdake_ has joined #openstack-keystone16:42
*** nishaYadav has quit IRC16:42
*** ddieterly is now known as ddieterly[away]16:43
*** sdake has quit IRC16:46
*** woodster_ has joined #openstack-keystone16:55
*** xenogear has joined #openstack-keystone16:57
*** guoshan has joined #openstack-keystone16:57
*** sdake_ is now known as sdake17:01
*** guoshan has quit IRC17:02
*** dikonoo has joined #openstack-keystone17:04
*** ddieterly[away] is now known as ddieterly17:04
*** marekd2 has quit IRC17:05
*** phalmos has quit IRC17:06
openstackgerritMerged openstack/keystone: One validate method to rule them all...  https://review.openstack.org/37424317:07
* lbragstad is liberated by ^ 17:08
*** browne has joined #openstack-keystone17:12
*** ddieterly is now known as ddieterly[away]17:17
*** mvk has quit IRC17:17
*** lamt has quit IRC17:18
*** code-R has joined #openstack-keystone17:21
*** artmr has joined #openstack-keystone17:22
*** code-R_ has joined #openstack-keystone17:22
*** spzala has quit IRC17:23
*** code-R has quit IRC17:26
stevemarrderose: ja17:26
stevemarlbragstad: have a beer17:26
lbragstadstevemar it's only 12:30 here17:27
lbragstad:)17:27
stevemarlunch beer ¯\_(ツ)_/¯17:27
lbragstadlol17:27
rderosestevemar: just looking at your comment...17:27
rderosestevemar: the link you added has the user object in the response parameters17:28
rderosestevemar: I do see the point of updating the example, will do that now17:28
rderosestevemar: do we need to have release notes?17:28
openstackgerritRon De Rose proposed openstack/keystone: Move the token abstract base class out of core  https://review.openstack.org/38610217:30
openstackgerritRon De Rose proposed openstack/keystone: Move the token abstract base class out of core  https://review.openstack.org/38610217:30
*** Zer0Byte__ has joined #openstack-keystone17:33
openstackgerritRon De Rose proposed openstack/keystone: Move the token abstract base class out of core  https://review.openstack.org/38610217:33
stevemarrderose: yes, for anything user facing17:40
*** jaosorior has quit IRC17:40
*** jaosorior has joined #openstack-keystone17:40
stevemarrderose: i'm happy to add them for your if you want17:40
*** dikonoo has quit IRC17:41
rderosestevemar: I got it17:41
rderosestevemar: get your red pen ready17:41
*** spzala has joined #openstack-keystone17:42
lbragstadugh - i hated the red pen17:43
stevemari've been bringing out the red pen a lot these days :P17:43
stevemarsomeones gotta do it now that bknudson has fallen off the radar17:43
lbragstadi swear my teachers thought my papers were coloring books and the only color they had was red17:44
lbragstadstevemar you've inherited the red pen17:44
*** dflorea has quit IRC17:48
*** spzala has quit IRC17:48
*** phalmos has joined #openstack-keystone17:50
*** gyee has quit IRC17:50
*** adam_g` is now known as adam_g17:55
*** adam_g has quit IRC17:55
*** adam_g has joined #openstack-keystone17:55
openstackgerritRon De Rose proposed openstack/keystone: Move the token abstract base class out of core  https://review.openstack.org/38610217:56
openstackgerritRon De Rose proposed openstack/keystone: Move the token abstract base class out of core  https://review.openstack.org/38610218:02
*** dflorea has joined #openstack-keystone18:16
*** lamt has joined #openstack-keystone18:17
*** sdake_ has joined #openstack-keystone18:19
*** code-R_ has quit IRC18:20
*** sdake has quit IRC18:20
*** ddieterly[away] is now known as ddieterly18:21
*** ddieterly is now known as ddieterly[away]18:23
*** thiagolib has joined #openstack-keystone18:25
*** ddieterly[away] is now known as ddieterly18:27
*** phalmos has quit IRC18:29
*** phalmos has joined #openstack-keystone18:31
*** adu has joined #openstack-keystone18:32
*** dflorea has quit IRC18:35
openstackgerritRon De Rose proposed openstack/keystone: Remove backend dependencies from token provider  https://review.openstack.org/38613618:35
*** mewald has left #openstack-keystone18:36
*** code-R has joined #openstack-keystone18:37
stevemarlbragstad: want to punt https://review.openstack.org/#/c/385241/ through the uprights?18:41
openstackgerritSean Dague proposed openstack/keystoneauth: be more explicit about connection errors  https://review.openstack.org/38614318:43
*** chris_hultin is now known as chris_hultin|AWA18:45
*** michauds has joined #openstack-keystone18:49
*** code-R has quit IRC18:53
*** code-R has joined #openstack-keystone18:54
stevemaror someone else ? :)   ^18:56
*** guoshan has joined #openstack-keystone18:58
*** spzala has joined #openstack-keystone18:59
stevemarSpamapS: if you're interested in another revoke fix: https://review.openstack.org/#/c/382107/2518:59
*** sdake has joined #openstack-keystone19:01
*** adu has quit IRC19:01
lbragstadstevemar i had a question - but i gave it a +219:02
*** guoshan has quit IRC19:03
*** sdake_ has quit IRC19:04
*** code-R_ has joined #openstack-keystone19:06
stevemarlbragstad: it just means that it'll be in the request data payload, wrapped in JSON19:06
*** adrian_otto has quit IRC19:07
lbragstadoh - got it19:07
*** adrian_otto has joined #openstack-keystone19:07
*** code-R has quit IRC19:09
*** code-R_ has quit IRC19:18
openstackgerritMerged openstack/oslo.policy: Enable release notes translation  https://review.openstack.org/38332019:23
openstackgerritMerged openstack/oslo.policy: Perform basic checks on policy definitions  https://review.openstack.org/37349119:23
openstackgerritColleen Murphy proposed openstack/keystone: Update, correct, and enhance federation docs  https://review.openstack.org/37121019:24
*** asettle has quit IRC19:34
*** ddieterly is now known as ddieterly[away]19:34
*** dflorea has joined #openstack-keystone19:35
openstackgerritMerged openstack/keystone: Add revocation event indexes  https://review.openstack.org/37652319:39
*** dflorea has quit IRC19:42
*** Guest38941 is now known as med_19:46
*** med_ has quit IRC19:46
*** med_ has joined #openstack-keystone19:46
lbragstaddoes anyone know the story behind allowing trusts to be created with a project id or roles?19:50
dstanekstevemar: rderose: is there any reason why nobody punted https://review.openstack.org/#/c/382107/25 through?19:51
rderosedstanek: would like to give spamaps one more look19:52
* SpamapS looking now19:53
lbragstadi'm trying to understand how https://github.com/openstack/keystone/blob/master/keystone/tests/unit/test_auth.py#L1043-L1060 is useful19:54
SpamapSdstanek: rderose I just +1'd 382107 so +A away19:55
openstackgerritMerged openstack/keystone: [api] add a note about project name restrictions  https://review.openstack.org/38524119:55
SpamapSgreat work.. really excited to see that work completed.19:55
rderoseSpamapS: thank you for all your help!19:56
*** tqtran has quit IRC19:56
rderoseSpamapS: your feedback steered us in the right direction :)19:56
stevemarSpamapS: yes, thanks for the feedback :)19:57
dstanekthanks SpamapS19:57
SpamapSMay the optimizer be with you.19:57
rderose:)19:57
lbragstadlol ++19:57
*** guoshan has joined #openstack-keystone19:59
*** code-R has joined #openstack-keystone20:02
*** ddieterly[away] is now known as ddieterly20:02
*** guoshan has quit IRC20:03
*** code-R_ has joined #openstack-keystone20:04
*** artmr has quit IRC20:04
*** clenimar has joined #openstack-keystone20:05
*** chris_hultin|AWA is now known as chris_hultin20:06
*** code-R has quit IRC20:07
*** samueldmq has quit IRC20:18
*** adrian_otto has quit IRC20:18
*** openstackgerrit has quit IRC20:19
*** openstackgerrit has joined #openstack-keystone20:19
*** samueldmq has joined #openstack-keystone20:21
*** ChanServ sets mode: +v samueldmq20:21
*** code-R_ has quit IRC20:22
*** code-R has joined #openstack-keystone20:22
stevemarmorgan: can you look at https://review.openstack.org/#/c/386190/ too20:29
*** tqtran has joined #openstack-keystone20:29
morganstevemar: missed that one was looking for it but ended on an unrelated change i needed to -120:33
morganstevemar: done20:33
*** spzala has quit IRC20:33
*** dflorea has joined #openstack-keystone20:38
*** sdake has quit IRC20:44
openstackgerritMerged openstack/keystone: Improve check_token validation performance  https://review.openstack.org/38210720:47
stevemarmorgan: thanks :)20:51
*** raildo has quit IRC20:58
*** edmondsw has quit IRC20:58
*** sdake has joined #openstack-keystone20:59
stevemarmorgan: gah, ksa on mitaka is borked20:59
stevemarbetamax21:00
*** gyee has joined #openstack-keystone21:00
*** ChanServ sets mode: +v gyee21:00
openstackgerritMerged openstack/keystoneauth: Fix a typo in opts.py  https://review.openstack.org/38571621:00
morganstevemar:  =/21:00
openstackgerritMerged openstack/keystoneauth: be more explicit about connection errors  https://review.openstack.org/38614321:00
*** ayoung has quit IRC21:02
*** jamielennox is now known as jamielennox|away21:04
*** dave-mccowan has quit IRC21:04
*** spzala has joined #openstack-keystone21:04
stevemarcrinkle: is https://review.openstack.org/#/c/371210/ ready for review?21:04
*** gagehugo has quit IRC21:08
*** spzala has quit IRC21:09
*** jaugustine has quit IRC21:11
crinklestevemar: yes i think so21:15
stevemarcrinkle: cool :)21:18
*** rakhmerov has quit IRC21:19
*** tsufiev has quit IRC21:19
*** chris_hultin is now known as chris_hultin|AWA21:19
*** rakhmerov has joined #openstack-keystone21:21
*** tsufiev has joined #openstack-keystone21:23
mordredmorgan: you may want to eyeball https://review.openstack.org/386236 ... stable/mitaka tests fail without it21:24
*** spzala has joined #openstack-keystone21:25
*** michauds has quit IRC21:30
*** ddieterly is now known as ddieterly[away]21:33
*** iurygregory_ has joined #openstack-keystone21:34
*** dflorea has quit IRC21:35
*** atod has joined #openstack-keystone21:43
*** mvk has joined #openstack-keystone21:47
*** dflorea has joined #openstack-keystone21:51
*** mvk has quit IRC21:54
*** mvk has joined #openstack-keystone21:54
*** jamielennox|away is now known as jamielennox21:55
*** guoshan has joined #openstack-keystone22:00
*** jperry has quit IRC22:00
*** dflorea has quit IRC22:01
*** guoshan has quit IRC22:04
*** adriant has joined #openstack-keystone22:04
*** code-R has quit IRC22:14
*** agireud has quit IRC22:21
openstackgerritRon De Rose proposed openstack/keystone: Return password_expires_at during auth  https://review.openstack.org/36700822:23
openstackgerritRon De Rose proposed openstack/keystone: Return password_expires_at during auth  https://review.openstack.org/36700822:24
*** ayoung has joined #openstack-keystone22:24
*** ChanServ sets mode: +v ayoung22:24
*** gagehugo has joined #openstack-keystone22:25
*** spzala has quit IRC22:30
*** ddieterly[away] is now known as ddieterly22:30
*** spzala has joined #openstack-keystone22:31
*** ddieterly has quit IRC22:31
*** spzala has quit IRC22:35
*** spzala has joined #openstack-keystone22:37
*** asettle has joined #openstack-keystone22:37
*** asettle has quit IRC22:42
*** spzala_ has joined #openstack-keystone22:43
*** phalmos has quit IRC22:44
*** spzala has quit IRC22:45
*** spzala_ has quit IRC22:47
*** dflorea has joined #openstack-keystone22:58
*** agireud has joined #openstack-keystone22:59
*** lamt has quit IRC23:00
*** dflorea has quit IRC23:01
*** dflorea has joined #openstack-keystone23:03
*** ayoung has quit IRC23:03
*** dflorea has quit IRC23:04
*** dflorea has joined #openstack-keystone23:04
*** jamielennox is now known as jamielennox|away23:20
*** rodrigods has quit IRC23:21
*** rodrigods has joined #openstack-keystone23:21
*** rodrigods has quit IRC23:22
*** rodrigods has joined #openstack-keystone23:22
*** agrebennikov has quit IRC23:28
*** lamt has joined #openstack-keystone23:29
*** iurygregory_ has quit IRC23:30
*** jamielennox|away is now known as jamielennox23:35
*** spzala has joined #openstack-keystone23:37
*** spzala has quit IRC23:41
*** dflorea has quit IRC23:42
*** iurygregory_ has joined #openstack-keystone23:43
*** ayoung has joined #openstack-keystone23:44
*** ChanServ sets mode: +v ayoung23:44
*** dflorea has joined #openstack-keystone23:48
*** thiagolib has quit IRC23:48
*** sdake_ has joined #openstack-keystone23:51
*** sdake has quit IRC23:52
*** spzala has joined #openstack-keystone23:52
« Wednesday, 2016-10-12 Index Friday, 2016-10-14 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!