| *** dave-mcc_ has quit IRC | 01:37 | |
| *** dave-mccowan has joined #openstack-keystone | 02:00 | |
| *** oikiki has joined #openstack-keystone | 02:38 | |
| *** ayoung has quit IRC | 03:08 | |
| *** rmcall has quit IRC | 03:29 | |
| *** rmcall has joined #openstack-keystone | 03:45 | |
| *** edmondsw has joined #openstack-keystone | 03:54 | |
| *** dave-mccowan has quit IRC | 03:55 | |
| *** edmondsw has quit IRC | 03:58 | |
| *** Supun has joined #openstack-keystone | 04:01 | |
| *** Supun has quit IRC | 04:02 | |
| *** Supun has joined #openstack-keystone | 04:03 | |
| *** oikiki has quit IRC | 04:08 | |
| *** lbragstad has joined #openstack-keystone | 04:44 | |
| *** ChanServ sets mode: +o lbragstad | 04:44 | |
| *** edmondsw has joined #openstack-keystone | 05:42 | |
| *** edmondsw has quit IRC | 05:47 | |
| *** hoonetorg has quit IRC | 06:02 | |
| *** hoonetorg has joined #openstack-keystone | 06:15 | |
| *** lbragstad has quit IRC | 06:27 | |
| *** openstackgerrit has joined #openstack-keystone | 06:57 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Imported Translations from Zanata https://review.openstack.org/545656 | 06:57 |
|---|---|---|
| *** Supun has quit IRC | 07:00 | |
| *** Supun has joined #openstack-keystone | 07:01 | |
| *** masber has joined #openstack-keystone | 07:06 | |
| *** Supun has quit IRC | 07:08 | |
| *** edmondsw has joined #openstack-keystone | 07:31 | |
| *** edmondsw has quit IRC | 07:35 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 08:32 | |
| *** masber has quit IRC | 09:09 | |
| *** rmcall has quit IRC | 09:12 | |
| *** AlexeyAbashkin has quit IRC | 09:14 | |
| *** Supun has joined #openstack-keystone | 09:28 | |
| *** Supun has quit IRC | 09:48 | |
| *** Adri2000 has quit IRC | 09:55 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 10:11 | |
| *** AlexeyAbashkin has quit IRC | 10:15 | |
| *** Supun has joined #openstack-keystone | 10:50 | |
| *** Supun has quit IRC | 11:07 | |
| *** edmondsw has joined #openstack-keystone | 11:07 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 11:09 | |
| *** edmondsw has quit IRC | 11:11 | |
| *** AlexeyAbashkin has quit IRC | 11:14 | |
| *** anis has joined #openstack-keystone | 11:17 | |
| *** anis has quit IRC | 11:26 | |
| *** nixi_ has joined #openstack-keystone | 11:35 | |
| *** nixi_ has quit IRC | 11:44 | |
| *** nixi_ has joined #openstack-keystone | 11:48 | |
| *** nixi__ has joined #openstack-keystone | 11:52 | |
| *** nixi_ has quit IRC | 11:55 | |
| *** nixi__ has quit IRC | 11:58 | |
| *** nixi_ has joined #openstack-keystone | 12:05 | |
| *** Kamix has joined #openstack-keystone | 12:06 | |
| nixi_ | hi i using this link https://docs.openstack.org/keystone/latest/advanced-topics/federation/shibboleth.html to setup shibboleth but the question is this, in configuring keystone virtual host ,what should i replace with question mark? | 12:07 |
| nixi_ | WSGIScriptAliasMatch ^(/v3/OS-FEDERATION/identity_providers/.*?/protocols/.*?/auth)$ /usr/local/bin/keystone-wsgi-public/$1 in this part | 12:07 |
| *** Kamix has quit IRC | 12:07 | |
| cmurphy | nixi_: you don't need to replace it, it's a regular expression to match anything, but if you wanted to you could replace the first .*? with the ID of the identity provider and the second one with the ID of the protocol | 12:25 |
| nixi_ | thanks cmurphy, these configs are the same for centos ? | 12:27 |
| cmurphy | nixi_: I think so but I haven't tested it on centos | 12:28 |
| nixi_ | how can i find the identity provider id and the id of protocol | 12:32 |
| nixi_ | ? | 12:32 |
| cmurphy | nixi_: at that point in the tutorial you won't have those yet, you'll create them later here https://docs.openstack.org/keystone/latest/advanced-topics/federation/federated_identity.html#identity-provider | 12:40 |
| cmurphy | so you could put whatever you want in the apache config as long as you remember it for later | 12:40 |
| cmurphy | but the docs are written with the wildcard because it's sort of a chicken and egg problem | 12:40 |
| nixi_ | but a problem , as written in doc it should be a unique id but if i put whatwever i want , how it can be unique | 12:45 |
| *** masber has joined #openstack-keystone | 12:47 | |
| *** narcis has joined #openstack-keystone | 12:53 | |
| cmurphy | nixi_: just don't use it twice :) when you create it it will prevent you from trying to duplicate it | 12:53 |
| narcis | i have the same problem and used this link https://docs.openstack.org/keystone/latest/advanced-topics/federation/shibboleth.html to setup shibboleth and i dont know where is my public vhost configuration to add this directive | 12:55 |
| *** edmondsw has joined #openstack-keystone | 12:56 | |
| narcis | add this wsgiscripalismatchdirective | 12:56 |
| narcis | ???? | 12:56 |
| cmurphy | narcis: it's wherever your keystone apache config is | 12:58 |
| *** dave-mccowan has joined #openstack-keystone | 12:59 | |
| *** edmondsw has quit IRC | 13:00 | |
| narcis | do you mean i should add this to apache config file ? | 13:05 |
| narcis | there are so many config file for apache | 13:06 |
| cmurphy | narcis: no, when you installed keystone then either you created a vhost file or the package did, it might be in /etc/apache2/sites-available or /etc/httpd/conf.d or /etc/apache2/vhost.d depending on your distro | 13:07 |
| cmurphy | it will be specific to keystone, not the general conf file | 13:07 |
| narcis | i have two keystone specific file keystone_wsgi_admin.conf and keystone_wsgi_main.conf ,keystone_wsgi_admin.conf file is for public vhost is it the right file? | 13:11 |
| cmurphy | You could either add it to both or just to the one with "main" in the name, really the fact that there are two files is leftover from the v2 API and there's not really a difference between them | 13:15 |
| narcis | thanks | 13:18 |
| *** links has joined #openstack-keystone | 13:42 | |
| nixi_ | i wanna create domain and projects but it feel that the keystone v2 doesnt supported domains and the output is (can not use v2 authentication with domain scope) | 13:44 |
| nixi_ | i edited the keystonerc_admin file as below | 13:45 |
| nixi_ | export OS_PROJECT_DOMAIN_ID=default export OS_USER_DOMAIN_ID=default export OS_PROJECT_NAME=admin export OS_TENANT_NAME=admin export OS_USERNAME=admin export OS_PASSWORD=.... export OS_AUTH_URL=http://192.168.20.12:35357/v3 export OS_IDENTITY_API_VERSION=3 | 13:45 |
| nixi_ | but the out put is the same | 13:45 |
| nixi_ | sory its not the same i did rerun the rc file and the out put is like that | 13:53 |
| nixi_ | discovering versions from the identity service faild when creating the password plugin attempting to determine version from url | 13:55 |
| nixi_ | i restarted apache and the keystone is running and active | 13:55 |
| *** nixi_ has quit IRC | 14:00 | |
| *** narcis has quit IRC | 14:06 | |
| *** narcis has joined #openstack-keystone | 14:07 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 14:10 | |
| *** AlexeyAbashkin has quit IRC | 14:14 | |
| *** nixi_ has joined #openstack-keystone | 14:22 | |
| *** nixi_ has quit IRC | 14:24 | |
| *** nixi_ has joined #openstack-keystone | 14:24 | |
| *** masber has quit IRC | 14:28 | |
| nixi_ | i wanna create domain and projects but it feel that the keystone v2 doesnt supported domains and the output is (can not use v2 authentication with domain scope) | 14:30 |
| nixi_ | i edited the keystonerc_admin file as below | 14:31 |
| nixi_ | export OS_PROJECT_DOMAIN_ID=default export OS_USER_DOMAIN_ID=default export OS_PROJECT_NAME=admin export OS_TENANT_NAME=admin export OS_USERNAME=admin export OS_PASSWORD=.... export OS_AUTH_URL=http://192.168.20.12:35357/v3 export OS_IDENTITY_API_VERSION=3 | 14:31 |
| nixi_ | but the output is discovering versions from the identity service faild when creating the password plugin attempting to determine version from url | 14:31 |
| nixi_ | i restarted apache and the keystone is running and active | 14:31 |
| *** edmondsw has joined #openstack-keystone | 14:44 | |
| *** edmondsw has quit IRC | 14:48 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 15:26 | |
| *** AlexeyAbashkin has quit IRC | 15:30 | |
| *** Supun has joined #openstack-keystone | 15:31 | |
| *** nixi_ has quit IRC | 15:35 | |
| *** narcis has quit IRC | 15:36 | |
| *** Supun has quit IRC | 15:42 | |
| *** Supun has joined #openstack-keystone | 15:54 | |
| *** mriedem has joined #openstack-keystone | 15:54 | |
| *** mriedem has left #openstack-keystone | 15:55 | |
| -openstackstatus- NOTICE: Zuul has been restarted and queues were saved. However, patches uploaded after 14:40UTC may have been missed. Please recheck your patchsets where needed. | 15:55 | |
| *** r-daneel_ has joined #openstack-keystone | 15:58 | |
| *** r-daneel has quit IRC | 16:00 | |
| *** r-daneel_ is now known as r-daneel | 16:00 | |
| *** Supun has quit IRC | 16:05 | |
| *** Supun has joined #openstack-keystone | 16:06 | |
| *** r-daneel_ has joined #openstack-keystone | 16:08 | |
| *** r-daneel has quit IRC | 16:09 | |
| *** r-daneel_ is now known as r-daneel | 16:09 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 16:26 | |
| *** Supun has quit IRC | 16:29 | |
| *** Supun has joined #openstack-keystone | 16:29 | |
| *** AlexeyAbashkin has quit IRC | 16:30 | |
| *** Supun has quit IRC | 17:01 | |
| *** agrebennikov has joined #openstack-keystone | 17:10 | |
| *** agrebennikov has quit IRC | 17:15 | |
| *** links has quit IRC | 17:51 | |
| *** r-daneel has quit IRC | 18:16 | |
| *** edmondsw has joined #openstack-keystone | 18:21 | |
| *** nixi_ has joined #openstack-keystone | 18:24 | |
| *** edmondsw has quit IRC | 18:25 | |
| *** links has joined #openstack-keystone | 18:31 | |
| *** nixi_ has quit IRC | 18:45 | |
| *** nixi_ has joined #openstack-keystone | 18:53 | |
| *** nixi__ has joined #openstack-keystone | 18:55 | |
| *** nixi_ has quit IRC | 18:58 | |
| *** r-daneel has joined #openstack-keystone | 19:44 | |
| *** kmalloc has quit IRC | 19:48 | |
| *** r-daneel has quit IRC | 19:48 | |
| *** lbragstad has joined #openstack-keystone | 19:51 | |
| *** ChanServ sets mode: +o lbragstad | 19:51 | |
| *** rmcall has joined #openstack-keystone | 19:54 | |
| *** nixi_girl has joined #openstack-keystone | 19:59 | |
| *** links has quit IRC | 20:03 | |
| *** nixi_girl has quit IRC | 20:07 | |
| *** nixi_girl has joined #openstack-keystone | 20:07 | |
| *** nixi_girl has joined #openstack-keystone | 20:08 | |
| *** edmondsw has joined #openstack-keystone | 20:09 | |
| *** edmondsw has quit IRC | 20:14 | |
| *** narcis has joined #openstack-keystone | 20:17 | |
| *** nixi__ has quit IRC | 20:18 | |
| *** amin_ has joined #openstack-keystone | 20:19 | |
| amin_ | hi what should i use for remote ids in keystone federation ? | 20:21 |
| *** nixi_girl has quit IRC | 20:21 | |
| *** nixi_girl has joined #openstack-keystone | 20:21 | |
| *** narcis has left #openstack-keystone | 20:29 | |
| *** amin_ has quit IRC | 20:36 | |
| *** nixi_girl has quit IRC | 20:36 | |
| *** nixi_girl has joined #openstack-keystone | 21:00 | |
| *** nixi_girl has quit IRC | 21:07 | |
| *** masber has joined #openstack-keystone | 21:36 | |
| *** rcernin has joined #openstack-keystone | 21:43 | |
| *** superdan is now known as dansmith | 21:47 | |
| *** lbragstad has quit IRC | 21:48 | |
| *** edmondsw has joined #openstack-keystone | 21:58 | |
| *** edmondsw has quit IRC | 22:02 | |
| *** masber has quit IRC | 22:11 | |
| *** threestrands has joined #openstack-keystone | 22:17 | |
| *** threestrands has quit IRC | 22:17 | |
| *** threestrands has joined #openstack-keystone | 22:17 | |
| *** masber has joined #openstack-keystone | 22:59 | |
| *** masuberu has joined #openstack-keystone | 23:01 | |
| *** masber has quit IRC | 23:04 | |
| *** masuberu has quit IRC | 23:13 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!