*** edmondsw has joined #openstack-keystone | 00:02 | |
*** thorst has joined #openstack-keystone | 00:03 | |
*** edmondsw has quit IRC | 00:06 | |
*** thorst has quit IRC | 00:07 | |
*** thorst has joined #openstack-keystone | 00:07 | |
*** thorst has quit IRC | 00:08 | |
*** edmondsw has joined #openstack-keystone | 00:33 | |
*** edmondsw has quit IRC | 00:56 | |
*** Shunli has joined #openstack-keystone | 01:07 | |
*** thorst has joined #openstack-keystone | 01:11 | |
*** thorst has quit IRC | 01:11 | |
*** fried_rice is now known as efried | 01:32 | |
*** d0ugal has quit IRC | 01:36 | |
*** edmondsw has joined #openstack-keystone | 01:55 | |
*** edmondsw has quit IRC | 01:59 | |
*** d0ugal has joined #openstack-keystone | 01:59 | |
*** namnh has joined #openstack-keystone | 02:21 | |
*** masber has quit IRC | 02:47 | |
*** thorst has joined #openstack-keystone | 03:02 | |
*** dave-mccowan has quit IRC | 03:05 | |
*** thorst has quit IRC | 03:08 | |
openstackgerrit | wangxiyuan proposed openstack/keystone-specs master: block diag quota scenarios https://review.openstack.org/441203 | 03:13 |
---|---|---|
*** aojea has joined #openstack-keystone | 03:15 | |
*** aojea has quit IRC | 03:19 | |
*** nicolasbock has quit IRC | 03:26 | |
*** masber has joined #openstack-keystone | 03:33 | |
*** wes_dillingham has quit IRC | 03:34 | |
*** edmondsw has joined #openstack-keystone | 03:43 | |
*** edmondsw has quit IRC | 03:47 | |
*** Dinesh_Bhor has joined #openstack-keystone | 04:19 | |
*** Suramya has joined #openstack-keystone | 04:36 | |
*** jaosorior has joined #openstack-keystone | 05:02 | |
*** gvrangan has joined #openstack-keystone | 05:08 | |
*** edmondsw has joined #openstack-keystone | 05:31 | |
*** edmondsw has quit IRC | 05:36 | |
*** spectr has joined #openstack-keystone | 05:52 | |
*** josecastroleon has joined #openstack-keystone | 06:17 | |
*** magicboiz has joined #openstack-keystone | 06:21 | |
*** magicboiz has quit IRC | 06:26 | |
openstackgerrit | wangxiyuan proposed openstack/keystone-specs master: WIP: very very early sketch of possible limits API https://review.openstack.org/455709 | 06:34 |
*** magicboiz has joined #openstack-keystone | 06:35 | |
*** josecastroleon has quit IRC | 06:37 | |
*** ioggstream has joined #openstack-keystone | 06:55 | |
*** pcaruana has joined #openstack-keystone | 07:00 | |
*** josecastroleon has joined #openstack-keystone | 07:05 | |
*** aojea has joined #openstack-keystone | 07:16 | |
*** edmondsw has joined #openstack-keystone | 07:19 | |
*** aojea has quit IRC | 07:20 | |
*** edmondsw has quit IRC | 07:24 | |
*** jistr is now known as jistr|mtgs | 07:26 | |
*** tesseract has joined #openstack-keystone | 07:27 | |
*** AlexeyAbashkin has joined #openstack-keystone | 07:37 | |
*** Suramya has quit IRC | 07:46 | |
*** sm_ has joined #openstack-keystone | 08:10 | |
*** AlexeyAbashkin has quit IRC | 08:12 | |
*** AlexeyAbashkin has joined #openstack-keystone | 08:12 | |
*** spectr has quit IRC | 08:35 | |
*** spectr has joined #openstack-keystone | 08:49 | |
*** josecastroleon has quit IRC | 09:02 | |
*** josecastroleon has joined #openstack-keystone | 09:04 | |
*** jmlowe_ has joined #openstack-keystone | 09:07 | |
*** edmondsw has joined #openstack-keystone | 09:08 | |
*** jmlowe has quit IRC | 09:08 | |
*** sm_ has quit IRC | 09:09 | |
*** edmondsw has quit IRC | 09:12 | |
*** arxcruz|off is now known as arxcruz | 09:19 | |
*** mvk has quit IRC | 09:27 | |
*** Shunli has quit IRC | 09:28 | |
*** spectr has quit IRC | 09:31 | |
*** spectr has joined #openstack-keystone | 09:31 | |
*** mvk has joined #openstack-keystone | 10:02 | |
*** spectr has quit IRC | 10:04 | |
*** Suramya has joined #openstack-keystone | 10:09 | |
*** magicboiz has quit IRC | 10:10 | |
*** magicboiz has joined #openstack-keystone | 10:15 | |
*** aojea has joined #openstack-keystone | 10:16 | |
*** magicboiz has quit IRC | 10:19 | |
*** aojea has quit IRC | 10:20 | |
*** spectr has joined #openstack-keystone | 10:21 | |
*** namnh has quit IRC | 10:22 | |
*** magicboiz has joined #openstack-keystone | 10:26 | |
*** spectr has quit IRC | 10:45 | |
openstackgerrit | wangxiyuan proposed openstack/keystone-specs master: block diag quota scenarios https://review.openstack.org/441203 | 10:46 |
*** spectr has joined #openstack-keystone | 10:47 | |
openstackgerrit | Chengwei Yang proposed openstack/keystone master: policy.v3cloudsample.json: remove redundant blank space https://review.openstack.org/514257 | 11:00 |
*** dave-mccowan has joined #openstack-keystone | 11:04 | |
*** nicolasbock has joined #openstack-keystone | 11:07 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 11:15 |
Tahvok | Hey guys! | 11:17 |
Tahvok | Trying to get myself around ldap configuration | 11:17 |
Tahvok | I've created another domain and made it work with ldap | 11:18 |
Tahvok | I can create projects in it, and assign groups from ldap - works like a charm | 11:18 |
Tahvok | However, I've tried to assign a group as domain admin | 11:18 |
Tahvok | And when connecting via horizon as a member from this group, I cannot see any projects of this domain! | 11:19 |
Tahvok | Am I missing something? Isn't domain admin should be ablet to control all projects inside it? | 11:19 |
*** nicolasbock has quit IRC | 11:39 | |
*** erlon has joined #openstack-keystone | 11:42 | |
*** nicolasbock has joined #openstack-keystone | 11:52 | |
*** thorst has joined #openstack-keystone | 11:59 | |
*** thorst_ has joined #openstack-keystone | 12:00 | |
*** thorst_ has quit IRC | 12:01 | |
*** wes_dillingham has joined #openstack-keystone | 12:03 | |
*** thorst has quit IRC | 12:04 | |
*** thorst has joined #openstack-keystone | 12:04 | |
*** nicolasbock has quit IRC | 12:05 | |
*** nicolasbock has joined #openstack-keystone | 12:06 | |
*** josecastroleon has quit IRC | 12:11 | |
*** raildo has joined #openstack-keystone | 12:13 | |
*** raildo has quit IRC | 12:13 | |
*** josecastroleon has joined #openstack-keystone | 12:14 | |
*** raildo has joined #openstack-keystone | 12:20 | |
*** edmondsw has joined #openstack-keystone | 12:21 | |
*** edmondsw has quit IRC | 12:21 | |
*** edmondsw has joined #openstack-keystone | 12:22 | |
*** josecastroleon has quit IRC | 12:22 | |
*** nicolasbock has quit IRC | 12:39 | |
*** pcaruana has quit IRC | 12:41 | |
*** nicolasbock has joined #openstack-keystone | 12:46 | |
*** panbalag has joined #openstack-keystone | 12:46 | |
*** panbalag has left #openstack-keystone | 12:47 | |
*** gvrangan has quit IRC | 13:06 | |
knikolla | o/ | 13:09 |
*** McClymontS has joined #openstack-keystone | 13:21 | |
*** Dave has quit IRC | 13:22 | |
*** jmlowe_ has quit IRC | 13:22 | |
*** Dave has joined #openstack-keystone | 13:27 | |
*** MeltedLux has quit IRC | 13:30 | |
*** MeltedLux has joined #openstack-keystone | 13:33 | |
lbragstad | o/ | 13:43 |
*** jmlowe has joined #openstack-keystone | 13:58 | |
openstackgerrit | Merged openstack/keystone master: policy.v3cloudsample.json: remove redundant blank space https://review.openstack.org/514257 | 13:58 |
openstackgerrit | Merged openstack/keystone master: Refactor test_backend_ldap tests https://review.openstack.org/507694 | 13:58 |
*** MeltedLux has quit IRC | 14:03 | |
*** jaosorior has quit IRC | 14:08 | |
lbragstad | congrats cmurphy!! | 14:14 |
cmurphy | :) | 14:14 |
*** david-lyle has joined #openstack-keystone | 14:21 | |
*** wes_dillingham has quit IRC | 14:31 | |
openstackgerrit | Merged openstack/keystone master: Remove expired password v2 test https://review.openstack.org/513966 | 14:32 |
*** wes_dillingham has joined #openstack-keystone | 14:33 | |
*** MeltedLux has joined #openstack-keystone | 14:38 | |
lbragstad | is anyone here interested in participating in http://lists.openstack.org/pipermail/openstack-dev/2017-October/123854.html ? | 14:47 |
*** MeltedLux has quit IRC | 14:52 | |
*** jaosorior has joined #openstack-keystone | 14:57 | |
openstackgerrit | Merged openstack/keystone master: Remove/update v2 catalog endpoint tests https://review.openstack.org/513514 | 14:57 |
*** McClymontS has quit IRC | 14:59 | |
openstackgerrit | Merged openstack/keystone master: Remove v2 token test models https://review.openstack.org/513481 | 15:04 |
*** McClymontS has joined #openstack-keystone | 15:05 | |
openstackgerrit | Merged openstack/keystone master: Correct parameter to follow convention https://review.openstack.org/513544 | 15:06 |
openstackgerrit | Murali Annamneni proposed openstack/keystone master: Enables MySQL Cluster support for Keystone https://review.openstack.org/431229 | 15:07 |
lbragstad | could use a stable core review here - https://review.openstack.org/#/c/511096/2 | 15:07 |
lbragstad | cc kmalloc stevemar ^ | 15:08 |
*** MeltedLux has joined #openstack-keystone | 15:23 | |
gagehugo | o/ | 15:25 |
*** jmlowe has quit IRC | 15:31 | |
*** AlexeyAbashkin has quit IRC | 15:37 | |
*** gyee has joined #openstack-keystone | 15:37 | |
*** jmlowe has joined #openstack-keystone | 15:40 | |
*** wes_dillingham has quit IRC | 15:42 | |
*** wes_dillingham has joined #openstack-keystone | 15:43 | |
*** agrebennikov has joined #openstack-keystone | 15:44 | |
*** MeltedLux has quit IRC | 15:45 | |
openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Add scope_types to RuleDefault objects https://review.openstack.org/510222 | 15:50 |
openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Pass creds as a dict in tests https://review.openstack.org/514366 | 15:50 |
lbragstad | dims: curious to get some input on those ^ | 15:52 |
openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Add functionality to deprecate policies https://review.openstack.org/509909 | 15:52 |
*** MeltedLux has joined #openstack-keystone | 15:57 | |
*** McClymontS has quit IRC | 15:59 | |
*** erlon has left #openstack-keystone | 16:09 | |
dims | lbragstad : on the first one, is there ever a case where they pass in a system-wide scope instead of project-specific scope (reverse of the scenario mentioned in lines 736-740) | 16:15 |
*** itlinux has joined #openstack-keystone | 16:18 | |
*** jaosorior has quit IRC | 16:35 | |
*** jaosorior has joined #openstack-keystone | 16:36 | |
lbragstad | dims: in my opinion, a system-wide operation would be something like listing compute hosts | 16:41 |
dims | @lbragstad : i mean, would we flag that as an error? | 16:41 |
lbragstad | eventually - once operators and projects are consuming the proper tokens | 16:42 |
lbragstad | but that enforce_scope bit would be true for both cases (using a project-scoped token to do something system wide and using a system-scoped token to do something project based) | 16:43 |
*** jmlowe has quit IRC | 16:43 | |
lbragstad | it should raise an exception if True for both cases, or at least log a useful warning | 16:43 |
dims | ++ | 16:44 |
lbragstad | in thinking about that though, i wonder if that toggle should be exposed through configuration of the service | 16:45 |
lbragstad | that way operators can enforce scope checking once they stop seeing those warnings, or educate their users about the different types of scope | 16:45 |
lbragstad | dims: also - i'm wondering if there is a better way to test this... | 16:45 |
*** mvk has quit IRC | 16:49 | |
*** AlexeyAbashkin has joined #openstack-keystone | 17:13 | |
*** tsufiev has quit IRC | 17:16 | |
*** AlexeyAbashkin has quit IRC | 17:17 | |
*** gvrangan has joined #openstack-keystone | 17:17 | |
*** tesseract has quit IRC | 17:18 | |
*** tsufiev has joined #openstack-keystone | 17:20 | |
openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Add scope_types to RuleDefault objects https://review.openstack.org/510222 | 17:21 |
lbragstad | dims: added scope to sample generations ^ | 17:22 |
*** jmlowe has joined #openstack-keystone | 17:26 | |
*** rmascena has joined #openstack-keystone | 17:28 | |
*** raildo has quit IRC | 17:30 | |
*** mvk has joined #openstack-keystone | 17:32 | |
*** ioggstream has quit IRC | 17:40 | |
*** ayoung has quit IRC | 17:51 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Outline policy goals https://review.openstack.org/460344 | 18:12 |
lbragstad | cc knikolla ^ | 18:12 |
openstackgerrit | Nicolas Helgeson proposed openstack/keystonemiddleware master: Use oslo_cache in auth_token middleware https://review.openstack.org/513862 | 18:14 |
*** ayoung has joined #openstack-keystone | 18:14 | |
*** aojea has joined #openstack-keystone | 18:24 | |
*** gvrangan has quit IRC | 18:30 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Add policy roadmap for security https://review.openstack.org/462733 | 18:36 |
lbragstad | knikolla: addressed your comments in ^ too | 18:37 |
*** rmcallis has joined #openstack-keystone | 18:38 | |
*** McClymontS has joined #openstack-keystone | 18:48 | |
*** McClymontS has quit IRC | 18:51 | |
*** itlinux has quit IRC | 18:52 | |
*** harlowja has joined #openstack-keystone | 18:53 | |
*** itlinux has joined #openstack-keystone | 18:56 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Specification for system roles https://review.openstack.org/464763 | 19:06 |
*** aojea has quit IRC | 19:16 | |
*** aojea has joined #openstack-keystone | 19:31 | |
*** aojea has quit IRC | 19:33 | |
*** aojea has joined #openstack-keystone | 19:34 | |
*** prashkre has joined #openstack-keystone | 19:38 | |
*** itlinux has quit IRC | 19:39 | |
*** aojea has quit IRC | 19:43 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Specification for system roles https://review.openstack.org/464763 | 19:46 |
*** wes_dillingham has quit IRC | 19:56 | |
*** AlexeyAbashkin has joined #openstack-keystone | 19:58 | |
*** AlexeyAbashkin has quit IRC | 20:02 | |
*** jmlowe has quit IRC | 20:14 | |
*** nicolasbock has quit IRC | 20:48 | |
*** rmascena has quit IRC | 20:50 | |
*** prashkre has quit IRC | 20:55 | |
*** prashkre has joined #openstack-keystone | 20:57 | |
*** prashkre has quit IRC | 21:01 | |
*** thorst has quit IRC | 21:02 | |
*** jmlowe has joined #openstack-keystone | 21:15 | |
*** edmondsw has quit IRC | 21:20 | |
*** rderose has joined #openstack-keystone | 21:24 | |
*** rderose has quit IRC | 21:26 | |
*** rderose has joined #openstack-keystone | 21:26 | |
*** thorst has joined #openstack-keystone | 21:27 | |
*** dave-mccowan has quit IRC | 21:28 | |
*** thorst has quit IRC | 21:31 | |
*** MasterOfBugs has joined #openstack-keystone | 21:34 | |
*** pramodrj07 has joined #openstack-keystone | 21:34 | |
*** aselius has joined #openstack-keystone | 21:40 | |
*** wes_dillingham has joined #openstack-keystone | 21:41 | |
*** jmlowe has quit IRC | 21:50 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add system grant policies https://review.openstack.org/514471 | 22:00 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement controller logic for system roles https://review.openstack.org/514472 | 22:00 |
*** jmlowe has joined #openstack-keystone | 22:08 | |
*** aloga has quit IRC | 22:08 | |
*** aloga has joined #openstack-keystone | 22:09 | |
*** aloga has quit IRC | 22:19 | |
*** rderose has quit IRC | 22:23 | |
*** jmlowe has quit IRC | 22:24 | |
*** jmlowe has joined #openstack-keystone | 22:24 | |
*** aloga has joined #openstack-keystone | 22:30 | |
*** Suramya has quit IRC | 22:38 | |
*** aloga has quit IRC | 22:40 | |
*** thorst has joined #openstack-keystone | 22:46 | |
*** edmondsw has joined #openstack-keystone | 22:48 | |
*** dave-mccowan has joined #openstack-keystone | 22:48 | |
*** thorst has quit IRC | 22:51 | |
*** edmondsw has quit IRC | 22:52 | |
*** aloga has joined #openstack-keystone | 23:08 | |
*** agrebennikov has quit IRC | 23:19 | |
*** dave-mccowan has quit IRC | 23:27 | |
*** gmann has joined #openstack-keystone | 23:57 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!