Thursday, 2017-08-17

*** thorst has joined #openstack-keystone00:01
ayoungkmalloc, you can get debugging help from jdennis as that is pretty much his fulltime job now00:02
*** thorst has quit IRC00:02
ayoungknikolla, ^^00:02
ayoungand keycloak will give you both SAML and OpenIDC00:02
knikollaayoung: thanks!00:03
knikollaayoung: btw we're hosted by the red hat boston office for the summer.00:03
ayoungknikolla, I need to come in at some point00:04
*** lucasxu has joined #openstack-keystone00:18
*** lucasxu has quit IRC00:19
*** wasmum has quit IRC00:21
*** edmondsw has joined #openstack-keystone00:37
*** aojea has joined #openstack-keystone00:40
*** edmondsw has quit IRC00:42
*** aojea has quit IRC00:45
*** lwanderley has joined #openstack-keystone00:45
*** lwanderley has quit IRC00:48
*** kbaegis1 has quit IRC00:50
*** kbaegis has joined #openstack-keystone00:52
*** thorst has joined #openstack-keystone01:03
*** Shunli has joined #openstack-keystone01:05
*** thorst has quit IRC01:08
*** kbaegis has quit IRC01:17
*** kbaegis has joined #openstack-keystone01:18
*** kbaegis has quit IRC01:19
*** guoshan has joined #openstack-keystone01:28
*** spzala has joined #openstack-keystone01:28
*** otleimat has quit IRC01:35
*** thorst has joined #openstack-keystone01:38
*** thorst has quit IRC01:39
*** aojea has joined #openstack-keystone01:41
*** thorst has joined #openstack-keystone01:42
*** aojea has quit IRC01:47
lbragstadayoung: knikolla kmalloc i had a long discussion with jdennis in boston about federation01:47
lbragstadi think getting him to proof what we do for testing (and the setup) would be awesome01:48
*** aselius has quit IRC01:50
*** r-daneel_ has joined #openstack-keystone01:53
*** r-daneel has quit IRC01:53
*** r-daneel_ is now known as r-daneel01:53
knikollalbragstad: sounds great!01:56
*** mjax has quit IRC01:58
*** mjax has joined #openstack-keystone02:03
*** mjax has quit IRC02:04
*** r-daneel has quit IRC02:17
*** r-daneel has joined #openstack-keystone02:17
*** zhurong has joined #openstack-keystone02:19
*** thorst has quit IRC02:20
*** edmondsw has joined #openstack-keystone02:26
*** edmondsw has quit IRC02:30
*** spzala has quit IRC02:56
*** spzala has joined #openstack-keystone02:56
*** mjax has joined #openstack-keystone02:59
*** mjax has quit IRC03:04
*** spzala has quit IRC03:06
openstackgerritLance Bragstad proposed openstack/keystone master: Call methods with kwargs instead of positionals  https://review.openstack.org/49433703:20
openstackgerritLance Bragstad proposed openstack/keystone master: Implement backend logic for global roles  https://review.openstack.org/49433803:20
*** thorst has joined #openstack-keystone03:20
*** thorst has quit IRC03:25
*** rajalokan has joined #openstack-keystone03:32
*** aojea has joined #openstack-keystone03:43
*** gyee has quit IRC03:44
*** nicolasbock has joined #openstack-keystone03:46
*** aojea has quit IRC03:47
*** prashkre__ has joined #openstack-keystone03:51
*** links has joined #openstack-keystone04:01
*** spzala has joined #openstack-keystone04:01
*** dave-mcc_ has quit IRC04:02
*** spzala has quit IRC04:06
*** edmondsw has joined #openstack-keystone04:14
*** edmondsw has quit IRC04:18
*** masber has joined #openstack-keystone04:20
*** thorst has joined #openstack-keystone04:22
*** thorst has quit IRC04:26
openstackgerritLance Bragstad proposed openstack/keystone master: Call methods with kwargs instead of positionals  https://review.openstack.org/49433704:31
openstackgerritLance Bragstad proposed openstack/keystone master: Implement backend logic for global roles  https://review.openstack.org/49433804:31
openstackgerritLance Bragstad proposed openstack/keystone master: Implement manager logic for global roles  https://review.openstack.org/49437104:31
openstackgerritTin Lam proposed openstack/python-keystoneclient master: Add project tags to keystoneclient  https://review.openstack.org/48122304:35
openstackgerritTin Lam proposed openstack/keystone master: Add JSON schema validation for project tags  https://review.openstack.org/48448304:37
*** prashkre__ has quit IRC04:41
*** openstack has quit IRC04:42
*** openstack has joined #openstack-keystone04:43
*** ff has joined #openstack-keystone04:43
*** masber has joined #openstack-keystone04:43
*** slunkad has joined #openstack-keystone04:43
*** jamiec has joined #openstack-keystone04:43
*** timothyb89 has joined #openstack-keystone04:43
*** spotz has joined #openstack-keystone04:43
*** ChanServ sets mode: +o lbragstad04:43
*** ppiela has joined #openstack-keystone04:43
*** NikitaKonovalov has joined #openstack-keystone04:44
*** freerunner has joined #openstack-keystone04:44
*** nkinder has joined #openstack-keystone04:44
*** flwang has joined #openstack-keystone04:44
*** guoshan has joined #openstack-keystone04:44
*** jrist has joined #openstack-keystone04:44
*** rha has joined #openstack-keystone04:44
*** oomichi has joined #openstack-keystone04:44
*** rvba has joined #openstack-keystone04:44
*** johnthetubaguy has joined #openstack-keystone04:44
*** jdennis has joined #openstack-keystone04:44
*** mfisch has joined #openstack-keystone04:44
*** EmilienM has joined #openstack-keystone04:44
*** jlvillal has joined #openstack-keystone04:44
*** jrist has quit IRC04:44
*** jrist has joined #openstack-keystone04:44
*** markvoelker has joined #openstack-keystone04:44
*** rvba has quit IRC04:45
*** rvba has joined #openstack-keystone04:45
*** mfisch has quit IRC04:45
*** mfisch has joined #openstack-keystone04:45
*** akrzos has joined #openstack-keystone04:45
*** iurygregory has joined #openstack-keystone04:45
*** openstackstatus has joined #openstack-keystone04:45
*** kaisers has joined #openstack-keystone04:45
*** matteus_silva has joined #openstack-keystone04:45
*** zeus is now known as Guest18004:45
*** dansmith has joined #openstack-keystone04:45
*** cburgess has joined #openstack-keystone04:45
*** mtreinish has joined #openstack-keystone04:45
*** bradjones has joined #openstack-keystone04:45
*** Dinesh_Bhor has joined #openstack-keystone04:45
*** ChanServ sets mode: +v openstackstatus04:45
*** ducttape_ has joined #openstack-keystone04:46
*** dansmith is now known as Guest5376204:46
*** EmilienM has quit IRC04:46
*** EmilienM has joined #openstack-keystone04:46
*** zigo has joined #openstack-keystone04:46
*** andreykurilin has joined #openstack-keystone04:46
*** mattoliverau has joined #openstack-keystone04:46
*** timburke has joined #openstack-keystone04:46
*** aloga has joined #openstack-keystone04:46
*** bradjones is now known as Guest4542004:46
*** dgonzalez has joined #openstack-keystone04:47
*** hugokuo has joined #openstack-keystone04:47
*** Adobeman has joined #openstack-keystone04:47
*** hemna has joined #openstack-keystone04:47
*** zzzeek has joined #openstack-keystone04:47
*** rybridges1 has joined #openstack-keystone04:47
*** clenimar has joined #openstack-keystone04:47
*** amrith has joined #openstack-keystone04:47
*** kevinbenton has joined #openstack-keystone04:47
*** htruta has joined #openstack-keystone04:48
*** amrith is now known as Guest5500504:48
*** gagehugo has joined #openstack-keystone04:48
*** charz has joined #openstack-keystone04:48
*** DinaBelova has joined #openstack-keystone04:49
*** jistr has joined #openstack-keystone04:49
*** zhurong has joined #openstack-keystone04:49
*** clayton has joined #openstack-keystone04:49
*** dims has joined #openstack-keystone04:49
*** ianw has joined #openstack-keystone04:49
*** john5223_ has joined #openstack-keystone04:49
*** stevemar has joined #openstack-keystone04:49
*** jhesketh has joined #openstack-keystone04:49
*** jaosorior has joined #openstack-keystone04:49
*** dims is now known as Guest5839704:49
*** Tahvok has joined #openstack-keystone04:50
*** andreaf has joined #openstack-keystone04:50
*** Krenair has joined #openstack-keystone04:51
*** jidar has joined #openstack-keystone04:51
*** med_ has joined #openstack-keystone04:52
*** med_ is now known as Guest7521304:52
*** chrome0 has joined #openstack-keystone04:54
*** rodrigods has joined #openstack-keystone04:54
*** tristanC has joined #openstack-keystone04:56
*** zhurong has quit IRC04:59
*** openstackgerrit has joined #openstack-keystone04:59
openstackgerritLance Bragstad proposed openstack/keystone master: Implement global role assignments for users  https://review.openstack.org/49437404:59
*** spzala has joined #openstack-keystone05:01
*** szaher has joined #openstack-keystone05:04
*** spzala has quit IRC05:05
*** markvoelker has quit IRC05:07
*** masuberu has joined #openstack-keystone05:18
*** masber has quit IRC05:21
*** thorst has joined #openstack-keystone05:22
*** masber has joined #openstack-keystone05:25
*** thorst has quit IRC05:27
*** masuberu has quit IRC05:28
*** zhurong has joined #openstack-keystone05:29
*** jaosorior has quit IRC05:32
*** jaosorior has joined #openstack-keystone05:32
*** tobberydberg has joined #openstack-keystone05:37
*** rarora has joined #openstack-keystone05:38
*** tobberydberg has quit IRC05:39
*** tobberydberg has joined #openstack-keystone05:39
*** mvk has joined #openstack-keystone05:48
*** tobberydberg has quit IRC05:51
*** mvk_ has joined #openstack-keystone05:57
*** rcernin has joined #openstack-keystone05:57
*** mvk has quit IRC05:59
*** maestropandy has joined #openstack-keystone06:00
*** maestropandy has left #openstack-keystone06:00
*** zigo_ has joined #openstack-keystone06:01
zigo_Hello everyone. I want some help related to federated keystone. I just want to know where i need to add multiple gmail users.06:02
*** spzala has joined #openstack-keystone06:02
*** edmondsw has joined #openstack-keystone06:02
*** brad[] has joined #openstack-keystone06:03
zigo_Should the users be registered at keystone end? Or at the IdP end?06:06
*** spzala has quit IRC06:06
*** edmondsw has quit IRC06:06
*** breton has joined #openstack-keystone06:06
*** markvoelker has joined #openstack-keystone06:08
*** mvpnitesh has joined #openstack-keystone06:09
*** zigo_ has quit IRC06:12
*** tobberydberg has joined #openstack-keystone06:21
*** tobberydberg has quit IRC06:21
*** tobberydberg has joined #openstack-keystone06:22
*** thorst has joined #openstack-keystone06:23
*** zigo_ has joined #openstack-keystone06:27
*** thorst has quit IRC06:28
*** obre has joined #openstack-keystone06:40
*** markvoelker has quit IRC06:42
*** pcaruana has joined #openstack-keystone06:42
*** aojea has joined #openstack-keystone06:45
*** zigo_ has quit IRC06:46
*** tesseract has joined #openstack-keystone06:47
*** aojea has quit IRC06:49
*** prashkre has joined #openstack-keystone06:53
*** hoonetorg has joined #openstack-keystone06:54
*** davechen has joined #openstack-keystone07:01
*** nicolasbock has joined #openstack-keystone07:09
*** Dinesh_Bhor has quit IRC07:11
*** kukacz has joined #openstack-keystone07:12
*** tobberydberg has quit IRC07:16
openstackgerritzhengliuyang proposed openstack/keystone master: Don't need set ephemeral user's domain when mapping  https://review.openstack.org/49440507:16
*** Dinesh_Bhor has joined #openstack-keystone07:18
*** kukacz_ has joined #openstack-keystone07:18
*** kukacz has quit IRC07:21
*** thorst has joined #openstack-keystone07:24
*** mvpnitesh has quit IRC07:26
*** mkrcmari__ has joined #openstack-keystone07:28
*** frickler has joined #openstack-keystone07:29
*** thorst has quit IRC07:29
*** mvk_ has quit IRC07:32
*** lbragstad has quit IRC07:33
*** lbragstad_ has joined #openstack-keystone07:33
*** mkrcmari__ has quit IRC07:33
*** markvoelker has joined #openstack-keystone07:40
*** mkrcmari__ has joined #openstack-keystone07:46
*** iogg has joined #openstack-keystone07:50
*** edmondsw has joined #openstack-keystone07:50
*** Drankis has joined #openstack-keystone07:51
*** edmondsw has quit IRC07:54
*** zzzeek has quit IRC07:56
*** john5223_ has quit IRC07:57
*** tesseract has quit IRC07:58
*** zzzeek has joined #openstack-keystone07:59
*** john5223 has joined #openstack-keystone07:59
*** spzala has joined #openstack-keystone08:03
*** tobberydberg__ has joined #openstack-keystone08:09
*** prashkre has quit IRC08:10
*** spzala has quit IRC08:10
*** tobberydberg__ has quit IRC08:12
*** markvoelker has quit IRC08:12
*** odyssey4me_ is now known as odyssey4me08:15
*** openstackgerrit has quit IRC08:17
*** Anticimex has joined #openstack-keystone08:19
*** aojea has joined #openstack-keystone08:19
*** thorst has joined #openstack-keystone08:25
*** dulek has quit IRC08:27
*** thorst has quit IRC08:30
*** sapd has joined #openstack-keystone08:33
*** aojea has quit IRC08:37
*** prashkre has joined #openstack-keystone08:39
*** iogg has quit IRC08:44
*** ioggstream has joined #openstack-keystone08:44
*** markvoelker has joined #openstack-keystone09:10
*** openstackgerrit has joined #openstack-keystone09:15
openstackgerritzhengliuyang proposed openstack/keystone master: Update parameters in sp and idp  https://review.openstack.org/49444909:15
*** afazekas is now known as afazekas|sick09:19
*** frickler has left #openstack-keystone09:25
*** thorst has joined #openstack-keystone09:26
*** thorst has quit IRC09:30
*** edmondsw has joined #openstack-keystone09:38
*** aloga has quit IRC09:41
*** aloga has joined #openstack-keystone09:41
*** aloga has quit IRC09:42
*** edmondsw has quit IRC09:42
*** markvoelker has quit IRC09:43
*** aloga has joined #openstack-keystone09:46
*** afazekas|sick is now known as afazekas09:47
*** aloga has quit IRC09:50
*** aloga has joined #openstack-keystone09:50
*** aloga has quit IRC09:55
*** aloga has joined #openstack-keystone09:55
Dinesh_Bhorcmurphy: Hi, you there?10:04
*** mvk_ has joined #openstack-keystone10:04
cmurphyDinesh_Bhor: hi, what can i do for you?10:06
Dinesh_Bhorcmurphy: Need your guidance about this: https://review.openstack.org/#/c/329913/6/keystoneclient/base.py@32610:07
*** spzala has joined #openstack-keystone10:07
*** mkrcmari__ has quit IRC10:08
Dinesh_Bhorcmurphy: At line #322 I am passing objs.request_ids to _prepare_return_value which is going to be list10:08
cmurphyDinesh_Bhor: okay give me a minute to context switch and reread10:11
Dinesh_Bhorcmurphy: yes please10:11
*** spzala has quit IRC10:12
*** chrome0 has quit IRC10:14
*** dgonzalez has quit IRC10:14
*** dgonzalez has joined #openstack-keystone10:16
*** chrome0 has joined #openstack-keystone10:16
samueldmqmorning keystone10:22
*** stl_ has joined #openstack-keystone10:25
*** thorst has joined #openstack-keystone10:27
*** zhurong has quit IRC10:27
*** thorst has quit IRC10:31
*** zhurong has joined #openstack-keystone10:32
cmurphyDinesh_Bhor: why is objs.request_ids a list? why is it not just one request id? because making one list() call is only one request, iiuc, so it would only have one id10:33
stl_Hello, i am trying to learn use of openstack api clients in python code. I have simple keystone project list call but it timeouts and use internal IP behind proxy nodes instead of hostname passed in auth_url environment variable. Code and output here https://pastebin.com/NA2JG2BC Neutron's list_floatingips() works. Am I missing something? Thank you.10:37
Dinesh_Bhorcmurphy: In case of pagination I guess we will get list of responses ([<request.Response>, <request.Response>, <request.Response>])10:37
*** guoshan has quit IRC10:37
Dinesh_Bhorcmurphy: and each response is going to have a request-id10:37
*** guoshan has joined #openstack-keystone10:38
cmurphyDinesh_Bhor: okay, well that makes sense. it should be commented though.10:39
cmurphyDinesh_Bhor: it still strikes me as odd that you're expecting two fundamentally different object types as an argument, though, Response and list10:39
*** markvoelker has joined #openstack-keystone10:40
cmurphyDinesh_Bhor: i'm trying to think of a way to improve it10:42
Dinesh_Bhorcmurphy: yeah, it will be great if I get some help.10:43
*** guoshan has quit IRC10:43
Dinesh_Bhorcmurphy: I will make it more explicit by adding comments10:43
*** stlbigdog has joined #openstack-keystone10:58
cmurphyDinesh_Bhor: i think i understand now why there are basically three cases being handled, i wonder if the findall case could be simplified by just taking the objs object from self.list() and resetting the data, like objs.data = response_data11:00
cmurphythen the else case on lines 47-51 could go away11:00
*** stlbigdog has quit IRC11:05
Dinesh_Bhorcmurphy: Okay yes, understood. thanks. I will make that change11:06
cmurphyDinesh_Bhor: cool11:06
Dinesh_Bhorcmurphy: thanks you so much for your time. I will get back to you if I need any guidance11:07
*** spzala has joined #openstack-keystone11:09
*** spzala has quit IRC11:13
*** markvoelker has quit IRC11:13
openstackgerritzhengliuyang proposed openstack/keystone master: Don't need set ephemeral user's domain when mapping  https://review.openstack.org/49440511:14
*** nicolasbock_ has joined #openstack-keystone11:18
*** markvoelker has joined #openstack-keystone11:21
*** nicolasbock has quit IRC11:21
*** ioggstream has quit IRC11:22
*** edmondsw has joined #openstack-keystone11:26
*** thorst has joined #openstack-keystone11:27
cmurphyDinesh_Bhor: no problem11:28
*** edmondsw has quit IRC11:30
*** thorst has quit IRC11:32
*** brad[] has quit IRC11:36
*** Guest58397 is now known as dims11:37
*** aojea has joined #openstack-keystone11:38
*** brad[] has joined #openstack-keystone11:38
*** thorst has joined #openstack-keystone11:45
*** aojea has quit IRC11:50
*** sbezverk has joined #openstack-keystone11:53
*** davechen has quit IRC11:54
*** davechen has joined #openstack-keystone11:54
*** raildo has joined #openstack-keystone11:59
*** mvk has joined #openstack-keystone12:04
*** ioggstream has joined #openstack-keystone12:06
*** mvk_ has quit IRC12:06
*** ff is now known as flaper8712:07
*** flaper87 is now known as Guest3891712:08
*** spzala has joined #openstack-keystone12:09
*** Guest38917 has quit IRC12:11
*** spzala has quit IRC12:14
*** aojea has joined #openstack-keystone12:17
*** stl_ has quit IRC12:22
*** edmondsw has joined #openstack-keystone12:25
samueldmqmordred: morning, just updated https://review.openstack.org/#/c/494193/ to depend on the right patch12:28
samueldmqlet's see how happy jenkins will get12:28
samueldmqactually, I updated https://review.openstack.org/#/c/493582 to depend on ^12:31
*** dave-mccowan has joined #openstack-keystone12:38
mordredsamueldmq: I believe we need the https://review.openstack.org/#/c/494194/ too ... BUT - I don't think we'll see the tests pass becaues shade's jobs aren't set up to use keystoneauth from source12:43
samueldmqmordred: ah true, I've put it back. I was looking at the dependency graph backwards12:45
samueldmqmordred: is that easy to add ? would be nice to get things working before we approve12:45
mordredsamueldmq: happens to me all the time :)12:45
mordredsamueldmq: it's not, unfortunately - I've been doing local testing12:45
mordredlemme check - I think the devstack jobs are12:46
samueldmqI mean, we can always test locally .. but the more shade uses ksa, the better if we can add that ability12:46
* samueldmq nods12:46
mordredyah. with zuul v3 in a few weeks it'll be MUCH easier12:46
samueldmqgreat!12:46
samueldmqI saw you had an email out about it. being able to easily use it in another system other than openstack is great12:47
*** mvk has quit IRC12:48
*** catintheroof has joined #openstack-keystone12:49
*** catintheroof has quit IRC12:50
*** catintheroof has joined #openstack-keystone12:50
*** aojea has quit IRC12:51
*** ducttap__ has joined #openstack-keystone12:52
*** aojea has joined #openstack-keystone12:52
*** ducttape_ has quit IRC12:55
*** zhurong has quit IRC12:57
*** spzala has joined #openstack-keystone13:10
*** spzala has quit IRC13:10
*** spzala has joined #openstack-keystone13:11
*** lucasxu has joined #openstack-keystone13:11
*** aojea has quit IRC13:11
*** aojea has joined #openstack-keystone13:15
*** aojea has quit IRC13:23
*** stingaci has joined #openstack-keystone13:29
*** aojea has joined #openstack-keystone13:30
*** Guest53762 is now known as dansmith13:36
*** jmlowe has joined #openstack-keystone13:38
*** sjain has joined #openstack-keystone13:41
*** aojea has quit IRC13:41
*** lbragstad_ is now known as lbragstad13:42
*** ChanServ sets mode: +o lbragstad13:43
*** aojea_ has joined #openstack-keystone13:43
*** aojea__ has joined #openstack-keystone13:45
lbragstado/13:46
*** aojea_ has quit IRC13:48
cmurphy\o13:50
openstackgerritLance Bragstad proposed openstack/keystone master: Implement manager logic for global roles  https://review.openstack.org/49437113:50
openstackgerritLance Bragstad proposed openstack/keystone master: Call methods with kwargs instead of positionals  https://review.openstack.org/49433713:50
openstackgerritLance Bragstad proposed openstack/keystone master: Implement backend logic for global roles  https://review.openstack.org/49433813:50
openstackgerritLance Bragstad proposed openstack/keystone master: Implement global role assignments for users  https://review.openstack.org/49437413:50
*** aojea__ has quit IRC13:50
*** aojea has joined #openstack-keystone13:50
*** mvk has joined #openstack-keystone13:51
*** aojea has quit IRC13:56
*** aojea has joined #openstack-keystone13:59
dave-mccowanhello keystoners!14:00
knikollao/14:00
dave-mccowani have a quick questions about endpoint update.14:00
dave-mccowancan i use it to change the publicURL of keystone itself?14:01
dave-mccowanor is that a special case?14:01
*** gyee has joined #openstack-keystone14:02
gagehugoo/14:05
knikolladave-mccowan: interesting question. i don't think we treat the identity endpoint any differently.14:05
knikolladon't have a devstack up right now to test it out. but will have a look at the code quickly.14:06
dave-mccowanknikolla thanks!  i think endpoint delete is not allowed for identity.  i just wanted to double check that update is OK.14:07
*** aojea has quit IRC14:12
knikolladave-mccowan:14:14
knikolladon't see any safeguards for either delete or update.14:14
dave-mccowanknikolla interesting.  (yup, i just did a "openstack delete endpoint <xx>" and it worked.)14:16
dave-mccowanknikolla  i must have a different problem in my code then.14:17
dave-mccowanknikolla thanks!14:17
knikolladave-mccowan: np14:17
*** sjain has quit IRC14:23
*** aojea has joined #openstack-keystone14:25
*** mvk_ has joined #openstack-keystone14:41
*** Drankis has quit IRC14:42
*** mvk has quit IRC14:44
*** mkrcmari__ has joined #openstack-keystone14:45
*** mvk_ has quit IRC14:48
lbragstadi'm feeling compelled to refactor the test_backend_* modules14:54
knikollalbragstad: good luck15:01
lbragstadknikolla: =/15:01
bretonlbragstad: see you next February15:01
cmurphylol15:02
lbragstadi think part of why our tests are so confusing is that we have a lot of duplication15:02
lbragstadi think i'd settle for documenting the conventions we should strive for15:03
lbragstadlike - test_v3_*.py modules shouldn't invoke any of the managers directly15:04
lbragstad^ example15:04
lbragstadwe also have a lot of tests that setup a ton of stuff but don't actually need it (dstanek was working on cleaning up a bunch of that)15:07
*** otleimat has joined #openstack-keystone15:13
*** agrebennikov has joined #openstack-keystone15:15
*** jmlowe has quit IRC15:17
*** lwanderley has joined #openstack-keystone15:30
*** rcernin has quit IRC15:32
*** jmlowe has joined #openstack-keystone15:34
*** lwanderley has quit IRC15:43
*** stingaci has quit IRC15:53
*** stingaci has joined #openstack-keystone15:53
*** prashkre has quit IRC15:55
*** stingaci has quit IRC15:57
*** dklyle has joined #openstack-keystone15:57
johnthetubaguylbragstad: are you keen to join in the VM & BM room at the PTG, just letting you know thats going to be a thing15:58
lbragstadjohnthetubaguy: absolutely15:58
openstackgerritLance Bragstad proposed openstack/keystone master: Implement manager logic for global roles  https://review.openstack.org/49437115:59
johnthetubaguylbragstad: sweet, I started off an etherpad to collect things, keep meaning to review the stuff from the summit, etc15:59
lbragstadjohnthetubaguy: awesome - i'd like to pick up the policy discussions if possible (pending other topics obviously)15:59
johnthetubaguylbragstad: that would be a good one, only slight alternative is to take that to the API WG room?16:00
johnthetubaguylbragstad: I spoke to my new team about StackHPC about the policy changes, and the response was basically "awesome", just the docs + in code bit.16:01
lbragstadjohnthetubaguy: sweet16:03
lbragstadi also have a room dedicated to policy stuff16:03
lbragstadjohnthetubaguy: https://etherpad.openstack.org/p/policy-queens-ptg16:04
*** blake has joined #openstack-keystone16:06
*** lwanderley has joined #openstack-keystone16:07
*** rcernin has joined #openstack-keystone16:08
kmallocVM & BM?16:10
*** blake_ has joined #openstack-keystone16:14
*** blake has quit IRC16:17
*** aojea has quit IRC16:18
lbragstadkmalloc: virtual machine and baremetal group16:25
*** spzala has quit IRC16:25
kmallocah16:25
*** spzala has joined #openstack-keystone16:25
lbragstada group dedicated towards improving those ^ usecases16:27
lbragstadkmalloc: you should totally attend that session16:28
kmallocprobably16:28
lbragstadkmalloc: you'd have some good feedback16:28
lbragstadcc johnthetubaguy16:28
kmallocremidns me... i need to book travel.16:28
* kmalloc goes and does thatr16:28
*** stingaci has joined #openstack-keystone16:29
*** spzala has quit IRC16:30
*** aselius has joined #openstack-keystone16:30
*** r-daneel has joined #openstack-keystone16:32
*** stingaci has quit IRC16:33
*** blake_ has quit IRC16:33
*** blake has joined #openstack-keystone16:34
*** aojea has joined #openstack-keystone16:36
*** blake_ has joined #openstack-keystone16:37
openstackgerritLance Bragstad proposed openstack/keystone master: Implement manager logic for global roles  https://review.openstack.org/49437116:40
*** blake has quit IRC16:40
*** stingaci has joined #openstack-keystone16:41
*** blake_ has quit IRC16:41
*** sapd has quit IRC16:43
*** sapd has joined #openstack-keystone16:44
*** blake has joined #openstack-keystone16:44
kmalloclbragstad: ok i arrive around noon(ish) for monday16:47
kmallocand leave friday at 5 (so need to head to the airport around 3.16:48
lbragstadkmalloc: works for me16:49
kmalloclbragstad: can we do some releases of ksa/ksm/ksc soon?16:50
kmalloci would like to get a released version w/o positional out there16:50
*** lwanderley has quit IRC16:53
*** lwanderley has joined #openstack-keystone16:53
*** spzala has joined #openstack-keystone16:54
*** blake has quit IRC16:58
*** mkrcmari__ has quit IRC16:58
*** mjax has joined #openstack-keystone17:03
*** aojea has quit IRC17:13
*** SamYaple has joined #openstack-keystone17:25
*** raildo has quit IRC17:33
*** aojea has joined #openstack-keystone17:34
*** aojea has quit IRC17:36
*** raildo has joined #openstack-keystone17:46
*** aojea has joined #openstack-keystone17:50
*** prashkre has joined #openstack-keystone17:52
lbragstadkmalloc: yeah - i don't see a problem with that17:52
*** aojea has quit IRC17:54
*** lwanderley has quit IRC18:05
*** ioggstream has quit IRC18:11
ayounghrybacki, I found a minor typo in the implied_roles change which I fixed, but then decided it needed a little more18:16
ayounghrybacki,  https://review.openstack.org/#/c/290253/25..26/releasenotes/notes/add-implied-role-0cdafb131fbd7453.yaml18:16
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Create Queens directory for specs  https://review.openstack.org/49466618:17
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Propose project tags work to Queens  https://review.openstack.org/49466718:17
hrybackigood add, thanks ayoung!18:18
openstackgerritLance Bragstad proposed openstack/keystone master: Implement manager logic for global roles  https://review.openstack.org/49437118:31
*** jmlowe has quit IRC18:32
*** jmlowe has joined #openstack-keystone18:33
*** nicolasbock_ has quit IRC18:43
cmurphykmalloc: there's a few more ksa patches in the queue that could get in before a release https://review.openstack.org/#/q/status:open+project:openstack/keystoneauth+label:code-review%253D%252B2+NOT+label:verified%253D-118:46
*** jmlowe has quit IRC18:46
*** jmlowe has joined #openstack-keystone18:48
*** blake has joined #openstack-keystone18:49
*** blake has quit IRC18:50
lbragstadjohnthetubaguy: do you know what the vm/bm stuff is going to be happening? I assume that is going to be on monday or tuesday?18:50
kmalloccmurphy: https://review.openstack.org/#/c/489413/1 -1, it's trying too hard to be clever and not meeting our debugging needs18:51
kmalloccmurphy: that should really be written out long-form and not guessing if an attribute (e.g. @property) etc is something interesting.18:52
kmallocit is for debugging.18:52
kmallocmake it useful before merging :)18:52
kmallocefried: ^ cc18:52
kmalloccmurphy: other two are +2/+A18:52
efriedkmalloc Sigh, okay.18:54
*** catintheroof has quit IRC18:54
kmallocefried: sorry man.18:55
efriedkmalloc Way I did it, you don't have to remember to update it if we add more fields.18:55
efriedAnd the info isn't for any functional purpose per se; just for debugging ease.18:56
kmallocyou should also add a __repr__18:56
kmallocin that case18:56
kmalloci think18:57
kmallocanyway.18:57
kmalloci would be explicit18:57
kmallocor at the very least don't wedge it all into a list comprehension like that18:58
kmalloci would rather be explicit on waht is important, 90% of the time if someone is debugging something like pdb should be used.18:58
kmallocwhich allows looking at the data structure18:59
kmalloca __str__ shouldn't be wedging in all the data on the object18:59
kmalloca __repr__ should be a string that shows the construction (copy/pastable in some cases) of the object (aka, rebuildable if possible)18:59
kmalloci wont block it but -1.19:00
kmalloci don't personally like that it's trying to wedge all the data in by being overly clever - just my $0.00219:00
*** ioggstream has joined #openstack-keystone19:02
*** spzala has quit IRC19:07
efriedkmalloc I understand.19:10
openstackgerritGage Hugo proposed openstack/keystone master: Add new tags attribute to project  https://review.openstack.org/47031719:11
openstackgerritGage Hugo proposed openstack/keystone master: Add JSON schema validation for project tags  https://review.openstack.org/48448319:11
openstackgerritGage Hugo proposed openstack/keystone master: Add database migration for project tags  https://review.openstack.org/48445619:11
openstackgerritGage Hugo proposed openstack/keystone master: Add policy for project tags  https://review.openstack.org/48675719:11
openstackgerritGage Hugo proposed openstack/keystone master: Refactor removal of duplicate projects/domains  https://review.openstack.org/49157419:11
efried__repr__ is supposed to be rebuildable via eval.  I don't see that we need that (unless it was gonna replace the guts of the __copy__ method, mebbe).19:11
kmallocright19:12
kmallocanyway19:12
efriedkmalloc And as for pdb - that's pretty much exactly the reason I was doing this.19:12
kmallocif you're doing it w/ pdb, you can directly introspect though19:12
efriedSo I don't have to do dir() to remember what attrs there are, and then print 'em out individually.19:12
efriedRight, I can now say str(epd) rather than ^^19:13
kmallocmy opinion stands.19:13
kmallocbut like i said, i'm not going to -2 or hodl it up19:13
kmallocif another core (than me/cmurphy) agrees with your reasoning, they are welcome to (and should) +2/+A it19:14
kmallocyou can ask mordred he is core on KSA19:14
* mordred looks19:14
*** efried has quit IRC19:18
*** efried has joined #openstack-keystone19:24
*** jmlowe has quit IRC19:26
*** ducttap__ has quit IRC19:26
*** ducttape_ has joined #openstack-keystone19:26
efriedSorry guys, my connection dropped.  kmalloc cmurphy Thanks for the reviews.  I'll let it stew in my brain for a bit, and either update or abandon.19:36
openstackgerritLance Bragstad proposed openstack/keystone master: Implement global role assignments for users  https://review.openstack.org/49437419:40
lbragstadknikolla: ^ that passes for me locally19:41
lbragstadneeds tests and the other half of the implementation for groups19:41
lbragstadi should have those done by eod19:41
knikollalbragstad: awesome! will review as soon as i get a spare minute from the ceph situation.19:42
lbragstadknikolla: sounds good!19:42
*** Guest55005 is now known as amrith20:02
*** raildo has quit IRC20:06
*** itlinux has joined #openstack-keystone20:12
*** rcernin has quit IRC20:16
openstackgerritMerged openstack/keystoneauth master: Adapter.get_conf_options(deprecated_opts)  https://review.openstack.org/49089520:17
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Create Queens directory for specs  https://review.openstack.org/49466620:18
*** hoonetorg has quit IRC20:36
ayoungitlinux, in general, ask LDAP/Keystone questions in here20:39
ayoungdon20:39
ayoungI have never seen "Maybe" for a value as enabled...I suspect that Keystone will not match that, and the users would be treated as disabled20:39
openstackgerritEric Fried proposed openstack/keystoneauth master: Protect against missing interface attribute  https://review.openstack.org/48856820:50
itlinuxthanks ayoung: the user however can login and do all steps..20:56
itlinuxso just want to verify20:57
itlinuxhello all.. talking to ayoung: about ldap users showing enabled = maybe the user can login and do the tasked but not sure why it shows maybe.. this is running ocata..20:58
ayoungitlinux, I guess it depends on how the enabled/disabled check works.  I have not looked at it in a while20:58
itlinuxcool.. does anyone have a default working ldap.conf file with filters.. so I could check against! TY20:59
*** lucasxu has quit IRC21:01
ayoungitlinux, what LDAP backend are you using?  What is the user object?21:03
itlinuxopenldap and the user is inetOrgPerson21:04
ayoungitlinux, http://git.openstack.org/cgit/openstack/keystone/tree/keystone/conf/ldap.py#n159  says what attribute to use and http://git.openstack.org/cgit/openstack/keystone/tree/keystone/conf/ldap.py#n168  says to invert, converting enabled to disabled.21:04
ayoungso you should not be doing the invert, as I think that is for AD only21:05
itlinuxok21:05
ayoungitlinux, what is user_enabled_attribute21:05
itlinuxI have default settings on that..21:06
*** ioggstream has quit IRC21:06
ayoungitlinux, seems to me that Maybe should not be a positive match21:07
ayounghttp://git.openstack.org/cgit/openstack/keystone/tree/keystone/identity/backends/ldap/core.py#n26321:07
itlinuxok21:07
ayoungint(obj.get('enabled', self.enabled_default)21:07
ayoungah, no21:07
ayounggot that code is icky21:07
ayoungok,  so I think it is doing this:21:08
ayoungobj.get('enabled')  returns "maybe"21:08
ayoungand that evaluates to True in Python21:08
ayounghmmm21:08
ayoungit should be this logic21:09
ayounghttp://git.openstack.org/cgit/openstack/keystone/tree/keystone/identity/backends/ldap/core.py#n26921:09
itlinuxoh.. I really do not have many attributes on those ldap users.. just standard ou..21:09
itlinuxhere is what I have ..21:09
itlinuxhttp://paste.openstack.org/show/618723/21:10
ayoungitlinux, can you debug the server, or is this a live deploy?21:10
itlinuxI can debug.. I just deployed OS here..21:10
itlinuxso it's not really in production yet21:10
ayoungok...I'd recommend putting in a breakpoint and seeing what is actually happening then21:11
ayoungyou can use rpdb and put the break point in21:11
ayoungaround here http://git.openstack.org/cgit/openstack/keystone/tree/keystone/identity/backends/ldap/core.py#n26221:11
itlinuxuhm..21:12
ayounghttps://adam.younglogic.com/2015/02/debugging-openstack-with-rpdb/21:12
ayoungitlinux, just back up the original file you edit so you can restore it21:12
itlinuxok21:12
ayoungitlinux, see what happens when a "maybe" user tries to authenticate.21:13
itlinuxok let me try that.. one sec21:13
itlinuxsorry I am not a python guy.. import rpdb. which file should I edit?21:14
itlinuxthanks ayoung:21:14
ayoungitlinux, what distribution are you running?21:14
itlinuxtripleo ocata21:14
itlinuxrdo21:14
ayoungok,  so the files are installed via RPMS in the directory...21:15
itlinuxok21:15
ayoung/usr/lib64/python2.7/site-packages/keystone21:15
ayoungI think...might be /usr/lib21:15
itlinuxok let me go to the controller21:15
ayoungand under that it the same path as the git repo:21:15
ayoungkeystone/identity/backends/ldap/core.py21:16
itlinuxso this /usr/lib64/python2.7/site-packages/ does not have keystone package21:16
ayoungitlinux,  yum install telnet21:16
ayoungitlinux, drop the 64?21:16
itlinuxok21:16
ayoung /usr/lib/python2.7/site-packages/21:16
itlinuxok that file is there21:17
ayoungso back it up...21:18
ayoungfollow the blog post, let me know if you get stuck21:18
itlinuxI am getting connection refused..21:18
itlinuxiptables?21:18
itlinuxadam is there a way to assign a group member roles ..21:28
itlinuxI got them into a group the group into the project and they can login fine21:28
*** jmlowe has joined #openstack-keystone21:33
openstackgerritSamuel Pilla proposed openstack/python-keystoneclient master: Add project tags to keystoneclient  https://review.openstack.org/48122321:39
*** jmlowe has quit IRC21:45
*** kukacz has joined #openstack-keystone21:56
openstackgerritSamuel Pilla proposed openstack/python-keystoneclient master: Add project tags to keystoneclient  https://review.openstack.org/48122321:59
*** kukacz_ has quit IRC21:59
*** kukacz has quit IRC22:00
*** thorst has quit IRC22:00
*** jmlowe has joined #openstack-keystone22:06
*** aojea has joined #openstack-keystone22:06
*** thorst has joined #openstack-keystone22:11
*** agrebennikov has quit IRC22:20
*** thorst has quit IRC22:23
*** itlinux has quit IRC22:23
*** itlinux has joined #openstack-keystone22:25
*** prashkre has quit IRC22:28
*** thorst has joined #openstack-keystone22:28
openstackgerritLance Bragstad proposed openstack/keystone master: Implement global role assignments for users  https://review.openstack.org/49437422:33
*** openstackgerrit has quit IRC22:33
*** itlinux has quit IRC22:35
*** edmondsw has quit IRC22:36
*** mnaser has joined #openstack-keystone22:38
*** mnaser has left #openstack-keystone22:40
*** stingaci has quit IRC22:47
*** stingaci has joined #openstack-keystone22:48
*** thorst has quit IRC22:51
*** stingaci has quit IRC22:52
*** stingaci has joined #openstack-keystone23:03
*** aojea has quit IRC23:07
*** stingaci has quit IRC23:07
*** stingaci has joined #openstack-keystone23:19
*** stingaci has quit IRC23:23
*** dave-mccowan has quit IRC23:25
*** freerunner has quit IRC23:27
*** freerunner has joined #openstack-keystone23:29
*** stingaci has joined #openstack-keystone23:35
*** stingaci has quit IRC23:39
*** markvoelker has quit IRC23:40
*** stingaci has joined #openstack-keystone23:51
*** stingaci has quit IRC23:56

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!