Monday, 2016-11-21

*** dave-mccowan has joined #openstack-keystone00:01
*** davechen has quit IRC00:04
*** davechen has joined #openstack-keystone00:04
*** alex_xu has joined #openstack-keystone00:05
*** rvba has quit IRC00:20
*** rvba has joined #openstack-keystone00:24
*** rvba has quit IRC00:24
*** rvba has joined #openstack-keystone00:24
*** kiran-r has joined #openstack-keystone01:18
*** zhangjl has joined #openstack-keystone01:20
openstackgerritMerged openstack/keystone-specs: Devstack Plugin for Keystone  https://review.openstack.org/39584101:22
*** kiran-r has quit IRC01:27
*** mnaser has quit IRC01:52
*** mnaser has joined #openstack-keystone02:08
openstackgerritDave Chen proposed openstack/keystone: Enable bootstrapping keystone with identity LDAP backend  https://review.openstack.org/39596702:09
openstackgerritDave Chen proposed openstack/keystone: Fix the misspelling in `keystone/tests/unit/test_cli.py`  https://review.openstack.org/40002102:09
openstackgerritSteve Martinelli proposed openstack/keystone: Verbose 401/403 debug responses  https://review.openstack.org/37243302:13
*** g2[Sea] is now known as g202:14
*** g2 is now known as g2-i02:17
*** g2-i is now known as g202:17
openstackgerritSteve Martinelli proposed openstack/keystone: Verbose 401/403 debug responses  https://review.openstack.org/37243302:18
openstackgerritSteve Martinelli proposed openstack/keystone: Special 401/403 debug responses with qa disabled  https://review.openstack.org/37779202:20
*** spzala has quit IRC02:26
openstackgerritDave Chen proposed openstack/keystone: Enable bootstrapping keystone with identity LDAP backend  https://review.openstack.org/39596702:29
*** sudorandom has quit IRC02:56
*** sudorandom has joined #openstack-keystone02:56
*** rderose has quit IRC02:56
*** rderose has joined #openstack-keystone02:57
*** harlowja has quit IRC02:57
*** pleia2 has quit IRC02:58
*** pleia2 has joined #openstack-keystone03:00
*** raddaoui has quit IRC03:11
*** raddaoui has joined #openstack-keystone03:11
*** jascott1 has quit IRC03:12
*** hugokuo has quit IRC03:12
*** rmstar has quit IRC03:14
*** rmstar has joined #openstack-keystone03:15
*** hugokuo has joined #openstack-keystone03:17
openstackgerritSteve Martinelli proposed openstack/keystone: Reduce revoke events for disabled domains and projects  https://review.openstack.org/25327303:18
openstackgerritSteve Martinelli proposed openstack/keystone: Verbose 401/403 debug responses  https://review.openstack.org/37243303:30
openstackgerritSteve Martinelli proposed openstack/keystone: Special 401/403 debug responses with qa disabled  https://review.openstack.org/37779203:31
*** tqtran has joined #openstack-keystone03:35
*** diazjf has quit IRC03:39
*** tqtran has quit IRC03:39
*** namnh has joined #openstack-keystone03:40
*** links has joined #openstack-keystone03:46
openstackgerritDave Chen proposed openstack/keystone: Verbose 401/403 debug responses  https://review.openstack.org/37243303:53
davechenstevemar: did a minor update to make it consistent across the change, pls take another look. ^03:57
*** dave-mccowan has quit IRC04:12
stevemarthanks davechen :)04:15
*** links has quit IRC04:17
*** udesale has joined #openstack-keystone05:07
*** sorrison has joined #openstack-keystone05:07
*** GB21 has joined #openstack-keystone05:32
*** dikonoor has joined #openstack-keystone05:32
openstackgerritJamie Lennox proposed openstack/keystone: Allow fetching an expired token  https://review.openstack.org/38209805:52
*** GB21 has quit IRC05:56
*** GB21 has joined #openstack-keystone06:19
*** masuberu has joined #openstack-keystone06:23
*** jaosorior has joined #openstack-keystone06:25
*** masber has quit IRC06:26
*** masuberu has quit IRC06:31
*** masuberu has joined #openstack-keystone06:31
*** GB21 has quit IRC06:33
*** adriant has quit IRC06:36
*** richm has quit IRC06:41
*** jaosorior has quit IRC06:46
*** jaosorior has joined #openstack-keystone06:47
*** GB21 has joined #openstack-keystone07:01
*** guoshan has joined #openstack-keystone07:06
*** pcaruana has joined #openstack-keystone07:17
*** masber has joined #openstack-keystone07:34
*** tqtran has joined #openstack-keystone07:35
*** tqtran has quit IRC07:35
*** rdo has quit IRC07:36
*** masuberu has quit IRC07:36
*** rdo has joined #openstack-keystone07:37
*** belmoreira has joined #openstack-keystone07:38
*** GB21 has quit IRC07:45
*** masuberu has joined #openstack-keystone07:56
*** GB21 has joined #openstack-keystone07:57
*** masuberu has quit IRC07:58
*** masber has quit IRC07:58
*** masber has joined #openstack-keystone07:58
*** boris-42 has quit IRC08:06
*** kamal___ has quit IRC08:07
*** boris-42 has joined #openstack-keystone08:08
*** kamal___ has joined #openstack-keystone08:08
*** amoralej|off is now known as amoralej08:27
*** GB21 has quit IRC08:31
*** jpich has joined #openstack-keystone08:39
*** GB21 has joined #openstack-keystone08:47
*** zzzeek has quit IRC09:00
*** zzzeek has joined #openstack-keystone09:03
*** GB21 has quit IRC09:33
*** asettle has joined #openstack-keystone09:35
*** GB21 has joined #openstack-keystone09:45
*** zhangjl has quit IRC10:04
*** dikonoor has quit IRC10:11
*** GB21 has quit IRC10:13
openstackgerritJulia Varlamova proposed openstack/keystone: Change DevStack plugin to setup multi-Keystone  https://review.openstack.org/39947210:18
*** dikonoor has joined #openstack-keystone10:20
*** GB21 has joined #openstack-keystone10:30
*** guoshan has quit IRC10:40
*** dikonoor has quit IRC10:44
*** udesale has quit IRC10:47
*** dikonoor has joined #openstack-keystone11:03
*** namnh has quit IRC11:06
*** richm has joined #openstack-keystone11:09
*** tesseract has joined #openstack-keystone11:10
*** tesseract is now known as Guest9374011:11
*** GB21 has quit IRC11:16
*** mvk has quit IRC11:29
*** GB21 has joined #openstack-keystone11:39
*** guoshan has joined #openstack-keystone11:41
*** guoshan has quit IRC11:46
*** nicolasbock has joined #openstack-keystone11:58
*** dave-mccowan has joined #openstack-keystone12:04
*** masber has quit IRC12:17
*** masber has joined #openstack-keystone12:17
-openstackstatus- NOTICE: We are currently having capacity issues with our ubuntu-xenial nodes. We have addressed the issue but will be another few hours before new images have been uploaded to all cloud providers.12:19
*** catintheroof has joined #openstack-keystone12:31
*** mvk has joined #openstack-keystone12:39
*** guoshan has joined #openstack-keystone12:42
*** guoshan has quit IRC12:47
*** jaosorior is now known as jaosorior_brb13:09
*** GB21 has quit IRC13:15
*** edmondsw has joined #openstack-keystone13:18
alogastevemar, jamielennox: I am still working on the OIDC support, in the meanwhile I've put the OIDC auth code grant type as an auth plugin https://github.com/indigo-dc/keystoneauth-oidc-authz-code13:24
*** lamt has joined #openstack-keystone13:24
*** amoralej is now known as amoralej|lunch13:24
alogastevemar, jamielennox: now the question is, what should we do with the keystoneauth1.identity.v3.oidc.OidcAuthorizationCode class (https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/identity/v3/oidc.py#L379)?13:25
*** mvk has quit IRC13:29
*** raildo has joined #openstack-keystone13:35
*** clenimar has joined #openstack-keystone13:39
*** guoshan has joined #openstack-keystone13:43
*** guoshan has quit IRC13:47
*** BlackDex has quit IRC14:08
openstackgerritDavid Stanek proposed openstack/keystone: Verbose 401/403 debug responses  https://review.openstack.org/37243314:12
*** jperry has joined #openstack-keystone14:21
*** BlackDex has joined #openstack-keystone14:23
*** belmorei_ has joined #openstack-keystone14:32
*** belmoreira has quit IRC14:33
stevemarhow many folks around for the meeting this week?14:35
lbragstadstevemar i'll be here14:36
*** amoralej|lunch is now known as amoralej14:37
*** dikonoor has quit IRC14:37
bretono/14:41
*** guoshan has joined #openstack-keystone14:44
*** mvk has joined #openstack-keystone14:45
lamtstevemar o/ also, thanks for splitting that patch14:45
*** jaosorior_brb has quit IRC14:46
*** jaosorior_brb has joined #openstack-keystone14:47
*** guoshan has quit IRC14:48
stevemarlbragstad: ill be at openstack day14:50
stevemari assume with US thxgiving itll be quiet14:50
lbragstadyeah - probably14:51
lbragstadstevemar doesn't look like we have a whole lot on the meeting agenda so far - so it might be quick14:52
stevemarlbragstad: y, might cancel14:53
lbragstadstevemar ok14:55
lbragstadstevemar where is openstack day?14:55
stevemarlbragstad: montreal14:55
stevemarim on a train now :)14:55
lbragstadnice14:55
lbragstadsounds like fun!14:55
stevemarlbragstad: i'll ask around before cancelling14:56
lbragstadcool14:56
stevemardolphm: https://review.openstack.org/#/c/399472/14:56
rodrigodsstevemar, o/15:00
stevemaro/15:00
rodrigodsstevemar, for the meeting question ^ :)15:00
stevemar:)15:00
stevemarwe'll have at least 3!15:00
rodrigodsstevemar, where is the openstack day you will be attending?15:01
stevemarrodrigods: montreal15:01
rodrigodsstevemar, next year come to Natal!15:01
rodrigodscc samueldmq15:02
stevemarhehe15:02
stevemardifferent budgeting contraints there! :P15:02
stevemartheres one in france going on too tomorrow15:02
stevemari'm hoping EmilienM is around tonight ;)15:03
*** chris_hultin|AWA is now known as chris_hultin15:09
stevemardolphm ayoung dstanek jamielennox henrynash_ let me know if youll make the meeting this week15:20
dstanekstevemar: i'll be there15:21
ayoungI plan on it15:23
breton{1} keystone.tests.unit.identity.backends.test_sql.MySQLOpportunisticIdentityDriverTestCase.test_update_group [102.570847s] ... ok15:23
breton102s15:23
* breton sighs15:23
EmilienMstevemar: unfortunatly, I'm just back from PTO and I won't be able to make it15:25
knikollao/15:25
*** ravelar has joined #openstack-keystone15:26
stevemardstanek: you guys are making it hard to cancel the meeting :)15:30
*** jaugustine has joined #openstack-keystone15:35
dstanekstevemar: you can cancel if you like. there are plenty of other things i could b doing15:38
dstanekstevemar: want me to make those Forbidden* changes?15:38
*** phalmos has joined #openstack-keystone15:40
openstackgerritSteve Martinelli proposed openstack/keystone: Update configuration.rst documentation  https://review.openstack.org/39973015:42
openstackgerritSteve Martinelli proposed openstack/keystone: move content from configuringservices to configuration  https://review.openstack.org/39978715:43
*** guoshan has joined #openstack-keystone15:44
*** guoshan has quit IRC15:49
ayoungkwargs kindof suck15:51
lbragstadayoung because it's a PITA to figure out what they are?15:55
*** iurygregory has joined #openstack-keystone15:56
*** bknudson has joined #openstack-keystone15:59
*** ChanServ sets mode: +v bknudson15:59
*** bknudson has left #openstack-keystone16:00
*** xarses has joined #openstack-keystone16:00
stevemardstanek: sure, make the changes, we can fast track it16:04
ayounglbragstad, that too16:04
ayounglbragstad, in this case, there is a huge (day wasting) difference between:  self.patch('/url_patterns/%s' % pattern_1_id, body=pattern_1_updated)  and self.patch('/url_patterns/%s' % pattern_1_id, pattern_1_updated)16:05
lbragstadlet me guess - you need the one with the body kwarg16:06
*** pcaruana has quit IRC16:06
openstackgerritSteve Martinelli proposed openstack/keystone: Move docs from key_terms to architecture  https://review.openstack.org/39976016:08
openstackgerritSteve Martinelli proposed openstack/keystone: Remove extension and auth_token middleware docs  https://review.openstack.org/39976716:08
openstackgerritSteve Martinelli proposed openstack/keystone: clean up developer docs  https://review.openstack.org/39978116:09
*** Guest93740 has quit IRC16:11
stevemarwhen in doubt, name the args :)16:11
stevemarayoung: just install the human->python interpreter in your brain like dolphm / dstanek and bknudson did16:17
ayoungstevemar, I really am not wired for Python.  I like static typing.  I want the compiler to do as much work for me as possible.16:18
*** belmorei_ has quit IRC16:24
*** chrisplo has quit IRC16:24
openstackgerritBoris Bobrov proposed openstack/keystone: Fix doc example  https://review.openstack.org/40033316:32
*** agrebennikov has joined #openstack-keystone16:40
breton400333? :(16:40
bretonwho got the get?16:40
bretonhttps://review.openstack.org/#/c/400000/16:40
*** jaosorior_brb is now known as jaosorior16:42
*** guoshan has joined #openstack-keystone16:45
*** guoshan has quit IRC16:50
openstackgerritRon De Rose proposed openstack/keystone: Remove brackets from doc config example  https://review.openstack.org/40033716:53
openstackgerritRon De Rose proposed openstack/keystone: Remove brackets from doc config example  https://review.openstack.org/40033716:53
*** josecastroleon has quit IRC16:56
*** mnaser has quit IRC16:57
*** Zer0Byte__ has joined #openstack-keystone16:58
breton"Fix doc example" sounds like i typed the tags for a tweet16:59
*** asettle has quit IRC17:00
*** mnaser has joined #openstack-keystone17:03
*** GB21 has joined #openstack-keystone17:04
*** rmstar has quit IRC17:06
openstackgerritRodrigo Duarte proposed openstack/keystone: WIP: Federated authentication via ECP functional tests  https://review.openstack.org/32476917:06
lbragstadbreton do you think this needs to be reworded? https://review.openstack.org/#/c/397339/7/keystone/conf/default.py17:09
openstackgerritSteve Martinelli proposed openstack/keystone: clean up developer docs  https://review.openstack.org/39978117:18
*** rmstar has joined #openstack-keystone17:20
*** chrisplo has joined #openstack-keystone17:21
*** bknudson has joined #openstack-keystone17:31
*** ChanServ sets mode: +v bknudson17:31
*** jpich has quit IRC17:31
bretonlbragstad: yes, thank you, commented back in the review17:38
openstackgerritMerged openstack/keystone: Fix the misspelling in `keystone/tests/unit/test_cli.py`  https://review.openstack.org/40002117:39
lbragstadbreton cool17:41
lbragstadalright - i'm headed to lunch17:41
*** guoshan has joined #openstack-keystone17:46
*** guoshan has quit IRC17:51
*** markvoelker_ has joined #openstack-keystone17:52
*** markvoelker has quit IRC17:53
*** markvoelker has joined #openstack-keystone17:55
*** markvoelker_ has quit IRC17:57
*** GB21 has quit IRC17:57
stevemareat all the sandwiches18:00
*** xarses has quit IRC18:09
*** harlowja has joined #openstack-keystone18:14
*** jperry has quit IRC18:23
*** tqtran has joined #openstack-keystone18:23
*** jaosorior has quit IRC18:24
*** jperry has joined #openstack-keystone18:24
*** jperry has quit IRC18:28
*** jperry has joined #openstack-keystone18:29
stevemarbreton: still around?18:38
openstackgerritKam Nasim proposed openstack/keystone: Network conn timeout on Identity LDAP backend  https://review.openstack.org/39094818:40
*** amoralej is now known as amoralej|off18:44
bretonstevemar: yes18:44
stevemarbreton: so, been thinking about the request id thing, want to chat with dhellmann in -release again?18:45
bretonstevemar: yes18:47
*** belmoreira has joined #openstack-keystone18:51
*** jamielennox is now known as jamielennox|away18:52
openstackgerritTin Lam proposed openstack/keystone: Enable CADF notification format by default  https://review.openstack.org/39733918:58
openstackgerritSteve Martinelli proposed openstack/keystone: Swap the notification formats in the docs  https://review.openstack.org/39993819:00
*** jamielennox|away is now known as jamielennox19:00
*** guoshan has joined #openstack-keystone19:01
*** chlong has joined #openstack-keystone19:03
*** guoshan has quit IRC19:05
openstackgerritRichard Avelar proposed openstack/keystone: Remove unused statements in matches  https://review.openstack.org/39339919:11
*** stream10 has joined #openstack-keystone19:14
stevemarlamt: time to make lbragstad happy :P19:23
stevemarlamt: then we'll kick it through19:23
lamtstevemar: working on it now19:23
lbragstadlamt thanks for the promptness ;)19:24
lamtlbragstad np19:24
openstackgerritTin Lam proposed openstack/keystone: Enable CADF notification format by default  https://review.openstack.org/39733919:35
*** belmoreira has quit IRC19:38
*** phalmos has quit IRC19:46
openstackgerritDavid Stanek proposed openstack/keystone: Normalizes use of ForbiddenAction  https://review.openstack.org/40038719:48
openstackgerritDavid Stanek proposed openstack/keystone: Normalizes use of ForbiddenAction in trusts  https://review.openstack.org/40038719:49
*** josecastroleon has joined #openstack-keystone19:56
jamielennoxstevemar: i'll be at the meeting if it's on, i don't care if you cancel it19:58
*** josecastroleon has quit IRC20:01
*** guoshan has joined #openstack-keystone20:02
*** arunkant_ has joined #openstack-keystone20:06
openstackgerritLance Bragstad proposed openstack/keystone: Swap the notification formats in the docs  https://review.openstack.org/39993820:06
*** guoshan has quit IRC20:06
*** belmoreira has joined #openstack-keystone20:16
*** belmoreira has quit IRC20:24
*** diazjf has joined #openstack-keystone20:25
*** asettle has joined #openstack-keystone20:26
*** Zer0Byte__ has quit IRC20:35
openstackgerritSteve Martinelli proposed openstack/keystone: Swap the notification formats in the docs  https://review.openstack.org/39993820:40
*** guoshan has joined #openstack-keystone21:03
*** guoshan has quit IRC21:07
*** asettle has quit IRC21:08
*** asettle has joined #openstack-keystone21:08
*** asettle has quit IRC21:13
*** ravelar has quit IRC21:21
*** dave-mccowan has quit IRC21:24
*** phalmos has joined #openstack-keystone21:27
*** ravelar has joined #openstack-keystone21:28
*** ravelar has quit IRC21:33
*** stream10 has quit IRC21:36
*** phalmos_ has joined #openstack-keystone21:41
*** adriant has joined #openstack-keystone21:43
*** phalmos has quit IRC21:44
*** guoshan has joined #openstack-keystone22:03
*** guoshan has quit IRC22:08
openstackgerritGage Hugo proposed openstack/keystone: Add reason to notifications for PCI-DSS  https://review.openstack.org/39675222:10
*** edmondsw has quit IRC22:34
*** jaugustine has quit IRC22:35
rodrigodsknikolla, around?22:50
knikollarodrigods: hey22:50
rodrigodsknikolla, maybe we can register the sp in testshib: https://github.com/OpenClemson/vagrant-testshib-sp22:51
openstackgerritOndřej Nový proposed openstack/keystone: Remove trailing "d" from -days param of OpenSSL command  https://review.openstack.org/40043322:51
rodrigodsi mean, automatically22:51
knikollarodrigods: i see, there's a /vagrant/scripts/upload-metadata.sh /path/to/metadata.xml22:51
*** chlong has quit IRC22:52
rodrigodsknikolla, if it is hard to setup the idp, we can go with that for a while22:52
knikollarodrigods: if that script *just works* (tm), it's worth a shot22:54
rodrigodsugh, the idp requires java + tomcat22:54
knikollarodrigods: yeah, i was playing around setting that up today22:54
rodrigodsknikolla, having success?22:54
knikollarodrigods: not yet done, but haven't seen any blocker yet.22:55
*** diazjf has quit IRC22:55
knikollarodrigods: if it gets too hard or complicated, there's the docker alternative.22:55
rodrigodsknikolla, good22:55
*** jperry has quit IRC22:58
*** phalmos_ has quit IRC23:02
*** guoshan has joined #openstack-keystone23:04
*** lamt has quit IRC23:08
*** guoshan has quit IRC23:09
adriantout of curiousity, what actually uses the 'cert' credential type in keystone?23:09
adriantOr are there any other openstack projects which do?23:10
adriantI can't find any code in Keystone that actually uses the 'cert' type by grepping through the code but I could have easily missed it.23:10
adriantI remember reading that Keystone supported authentication via certs, but I can't find that code.23:13
*** lamt has joined #openstack-keystone23:13
openstackgerritayoung proposed openstack/keystone: Refactor is_admin  https://review.openstack.org/38771023:14
openstackgerritayoung proposed openstack/keystone: Refactor is_admin  https://review.openstack.org/38771023:18
*** chris_hultin is now known as chris_hultin|AWA23:19
adriantayoung: did you work on the tokenless cert authentication code? I'm just trying to work out if anything actually uses the credential 'cert' type.23:26
chrisplorodrigods: you trying to set up pysaml2 example idp?23:34
openstackgerritAdrian Turjak proposed openstack/keystone-specs: User self management of TOTP credentials  https://review.openstack.org/34570523:38
*** lamt has quit IRC23:40
*** tqtran has quit IRC23:42
*** tqtran has joined #openstack-keystone23:42
*** openstack has joined #openstack-keystone23:43
*** nicolasbock has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!