| openstackgerrit | ayoung proposed openstack/keystone-specs master: Add fine-grained-restrictions-for-app-creds https://review.openstack.org/396331 | 00:16 |
|---|---|---|
| *** gyee has quit IRC | 00:21 | |
| *** masber has quit IRC | 00:22 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 00:28 | |
| *** Dinesh_Bhor has quit IRC | 00:31 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 00:33 | |
| *** odyssey4me has quit IRC | 00:38 | |
| *** odyssey4me has joined #openstack-keystone | 00:39 | |
| cloudnull | lbragstad: ping | 00:45 |
| *** edmondsw has quit IRC | 00:46 | |
| cloudnull | or anyone for that matter. in the osa gate we're seeing - http://logs.openstack.org/47/552047/31/check/openstack-ansible-deploy-aio_lxc-ubuntu-xenial/3ebf2e1/job-output.txt.gz#_2018-03-22_23_55_49_311626 curious if others have seen this? | 00:46 |
| cloudnull | this testing against the current head of master. | 00:47 |
| *** idlemind has quit IRC | 00:47 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/555558 | 01:02 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/555559 | 01:02 |
| *** masber has joined #openstack-keystone | 01:12 | |
| *** harlowja_ has quit IRC | 01:13 | |
| *** bhagyashris has quit IRC | 01:26 | |
| *** germs has left #openstack-keystone | 01:26 | |
| *** bhagyashris has joined #openstack-keystone | 01:27 | |
| *** sapd has quit IRC | 01:34 | |
| adriant | kmalloc, mordred, cmurphy: as a stop gap, can we add a lazy fetch util into keystoneauth that takes a keystone url, and if it isn't a versioned one, fetches a versioned one? | 01:35 |
| adriant | so to the v2/v3 plugind you'd do: auth_url=lazy_version(my_auth_url) | 01:35 |
| adriant | and when the plugin goes to fetch setup the url it does the eval to make it v2/v3 | 01:36 |
| adriant | that doesn't change the underlying behavior, but gives us a better way to allow people to use versioned or verionless urls without hitting stupid errors with the versioned plugins. | 01:37 |
| adriant | that way it's entirely opt-in and we can safely add it to the docs as the default example | 01:37 |
| adriant | it still sucks, but it's better than nothing if we can't change the error | 01:38 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/oslo.policy master: Updated from global requirements https://review.openstack.org/555580 | 01:40 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/555586 | 01:47 |
| *** zhurong has joined #openstack-keystone | 01:52 | |
| *** dangtrinhnt has joined #openstack-keystone | 01:56 | |
| *** sapd has joined #openstack-keystone | 02:01 | |
| *** Dinesh_Bhor has quit IRC | 02:12 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 02:22 | |
| *** germs has joined #openstack-keystone | 02:28 | |
| *** edmondsw has joined #openstack-keystone | 02:34 | |
| *** edmondsw has quit IRC | 02:39 | |
| *** masber has quit IRC | 02:41 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 03:15 | |
| *** masber has joined #openstack-keystone | 03:19 | |
| *** AlexeyAbashkin has quit IRC | 03:20 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Clean up token extra code https://review.openstack.org/555279 | 03:42 |
| *** itlinux has quit IRC | 03:59 | |
| *** germs has quit IRC | 04:01 | |
| *** germs has joined #openstack-keystone | 04:02 | |
| openstackgerrit | Doug Hellmann proposed openstack/keystone master: add lower-constraints job https://review.openstack.org/555624 | 04:03 |
| openstackgerrit | Doug Hellmann proposed openstack/keystoneauth master: add lower-constraints job https://review.openstack.org/555625 | 04:03 |
| openstackgerrit | Doug Hellmann proposed openstack/keystonemiddleware master: add lower-constraints job https://review.openstack.org/555626 | 04:04 |
| *** zhurong has quit IRC | 04:04 | |
| lbragstad | cloudnull: hmm | 04:15 |
| lbragstad | cloudnull: looks like issues with fernet key creation? | 04:15 |
| lbragstad | i have seen anything like that yet | 04:15 |
| cloudnull | yea its odd | 04:15 |
| lbragstad | looks like a whole bunch of issues starting the service afterwords, too | 04:16 |
| cloudnull | here's another job with it http://logs.openstack.org/21/552721/17/check/openstack-ansible-deploy-aio_lxc-ubuntu-xenial/944407f/job-output.txt.gz#_2018-03-23_01_51_54_125106 | 04:17 |
| cloudnull | we tell the handlers to fire no matter if the play fails. | 04:17 |
| cloudnull | which in this case is causing a mess of errors | 04:18 |
| cloudnull | i have an aio spinning now see if i can get the same thing going locally | 04:18 |
| cloudnull | just curious if you'all have seen that before | 04:18 |
| lbragstad | huh - looks like the same trace | 04:18 |
| *** harlowja has joined #openstack-keystone | 04:19 | |
| cloudnull | yup | 04:20 |
| cloudnull | it could be something specific to how we build the keystone . but idk atm . | 04:20 |
| lbragstad | eventlet is blowing up? | 04:20 |
| lbragstad | from oslo.messaging | 04:21 |
| *** edmondsw has joined #openstack-keystone | 04:23 | |
| lbragstad | oh - keystone -> keystone.conf -> oslo.messaging -> oslo.service -> eventlet -> boom.. | 04:23 |
| *** links has joined #openstack-keystone | 04:26 | |
| *** edmondsw has quit IRC | 04:27 | |
| cloudnull | ill have a environment up in a few to try and reproduce | 04:28 |
| lbragstad | https://github.com/eventlet/eventlet/issues/370 | 04:28 |
| cloudnull | ORLY | 04:29 |
| cloudnull | if it blows up ill give that a try | 04:29 |
| lbragstad | https://stackoverflow.com/questions/40184788/protocol-not-found-socket-getprotobyname | 04:30 |
| lbragstad | apparently the netbase package can fix it? | 04:30 |
| lbragstad | if that's the actual problem? | 04:31 |
| * lbragstad has no idea what net is | 04:31 | |
| * lbragstad also has no idea what a base is | 04:31 | |
| *** gus has quit IRC | 04:36 | |
| *** gus has joined #openstack-keystone | 04:37 | |
| lbragstad | that apparently works... http://paste.openstack.org/show/709474/ | 04:44 |
| lbragstad | i wonder if something changed with the image or packages that mucked with /etc/protocols | 04:44 |
| cloudnull | yea we've recently switch to a more minimal image. | 04:46 |
| lbragstad | huh.. | 04:46 |
| cloudnull | I've got https://review.openstack.org/#/c/555614 up and https://review.openstack.org/#/c/552047 which depends on the change. | 04:48 |
| cloudnull | hope it makes it go :) | 04:48 |
| cloudnull | sorry for the channel noise, but thanks a bunch for the help. | 04:48 |
| *** sapd_ has joined #openstack-keystone | 04:51 | |
| *** sapd has quit IRC | 04:51 | |
| lbragstad | not a problem - let us know if it ends up being a keystone problem we can help with | 04:53 |
| cloudnull | i think that'll make it go but i'll keep an eye on it . | 04:53 |
| lbragstad | yeah | 04:54 |
| cloudnull | thanks lbragstad! | 04:54 |
| lbragstad | anytime, sir! | 04:54 |
| *** Dinesh_Bhor has quit IRC | 05:02 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 05:05 | |
| *** harlowja has quit IRC | 05:12 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 05:15 | |
| *** AlexeyAbashkin has quit IRC | 05:19 | |
| *** gyankum has joined #openstack-keystone | 05:23 | |
| *** dangtrinhnt has quit IRC | 05:34 | |
| openstackgerrit | melissaml proposed openstack/keystonemiddleware master: Follow the new PTI for document build https://review.openstack.org/551857 | 06:11 |
| *** AlexeyAbashkin has joined #openstack-keystone | 06:17 | |
| *** Dinesh_Bhor has quit IRC | 06:18 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 06:19 | |
| *** zhurong has joined #openstack-keystone | 06:21 | |
| *** AlexeyAbashkin has quit IRC | 06:22 | |
| openstackgerrit | melissaml proposed openstack/keystonemiddleware master: Follow the new PTI for document build https://review.openstack.org/551857 | 06:29 |
| *** aojea has joined #openstack-keystone | 06:52 | |
| *** josecastroleon has joined #openstack-keystone | 07:17 | |
| *** pcaruana has joined #openstack-keystone | 07:21 | |
| openstackgerrit | melissaml proposed openstack/keystonemiddleware master: Follow the new PTI for document build https://review.openstack.org/551857 | 07:26 |
| *** aojea has quit IRC | 07:28 | |
| *** Dinesh_Bhor has quit IRC | 07:30 | |
| *** zhurong has quit IRC | 07:30 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 07:30 | |
| *** martinus__ has joined #openstack-keystone | 07:42 | |
| *** Dinesh_Bhor has quit IRC | 07:44 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 07:48 | |
| *** edmondsw has joined #openstack-keystone | 07:59 | |
| cmurphy | adriant: i mean wouldn't lazy_version() end up being like four lines of code? not sure why that would need to be implemented in keystoneauth | 07:59 |
| cmurphy | and i'm on your side about the versioned plugins being more friendly but i'm also unclear why the generic plugin isn't meeting your needs | 08:00 |
| *** AlexeyAbashkin has joined #openstack-keystone | 08:02 | |
| *** edmondsw has quit IRC | 08:03 | |
| *** tesseract has joined #openstack-keystone | 08:20 | |
| *** rcernin has quit IRC | 09:20 | |
| *** Dinesh_Bhor has quit IRC | 09:43 | |
| *** edmondsw has joined #openstack-keystone | 09:47 | |
| *** edmondsw has quit IRC | 09:51 | |
| *** rcernin has joined #openstack-keystone | 10:08 | |
| adriant | cmurphy: in the specific bit of code in question... I built two sessions side by side v2 and v3 and was testing something. So generic didn't help :P | 10:55 |
| adriant | so I just reused some old code I had which given a version would make the endpoint the right version if it wasn't already | 10:56 |
| adriant | honestly, in most cases I do use generic, this was just an odd little thing that cropped up and I was curious | 10:57 |
| *** annp has quit IRC | 11:06 | |
| openstackgerrit | melissaml proposed openstack/keystonemiddleware master: Follow the new PTI for document build https://review.openstack.org/551857 | 11:11 |
| *** josecastroleon has quit IRC | 11:12 | |
| *** pcaruana has quit IRC | 11:27 | |
| *** dangtrinhnt has joined #openstack-keystone | 11:37 | |
| *** dangtrinhnt has quit IRC | 11:53 | |
| *** raildo has joined #openstack-keystone | 11:54 | |
| *** usr2033 has joined #openstack-keystone | 11:55 | |
| *** jaosorior has quit IRC | 11:56 | |
| *** edmondsw has joined #openstack-keystone | 12:03 | |
| *** DevX has quit IRC | 12:10 | |
| *** odyssey4me has quit IRC | 12:12 | |
| *** odyssey4me has joined #openstack-keystone | 12:12 | |
| *** josecastroleon has joined #openstack-keystone | 12:19 | |
| openstackgerrit | Doug Hellmann proposed openstack/ldappool master: add lower-constraints job https://review.openstack.org/555757 | 12:29 |
| *** NM has joined #openstack-keystone | 12:30 | |
| *** pcaruana has joined #openstack-keystone | 12:30 | |
| *** rcernin has quit IRC | 12:30 | |
| *** voelzmo has joined #openstack-keystone | 12:31 | |
| *** panbalag has joined #openstack-keystone | 12:33 | |
| openstackgerrit | Doug Hellmann proposed openstack/keystoneauth master: add lower-constraints job https://review.openstack.org/555625 | 12:33 |
| openstackgerrit | Doug Hellmann proposed openstack/keystonemiddleware master: add lower-constraints job https://review.openstack.org/555626 | 12:34 |
| openstackgerrit | Doug Hellmann proposed openstack/keystone master: add lower-constraints job https://review.openstack.org/555624 | 12:41 |
| *** voelzmo has quit IRC | 12:47 | |
| usr2033 | hi, how can i compare get parameter like project id with api parameter in policy.json? i tried this one domain_id:%(target.project.domain_id)s | 12:55 |
| *** usr2033 has quit IRC | 13:17 | |
| *** panbalag has quit IRC | 13:25 | |
| *** dklyle has quit IRC | 13:27 | |
| *** idlemind has joined #openstack-keystone | 13:30 | |
| *** dansmith is now known as superdan | 13:39 | |
| *** jdennis has quit IRC | 13:40 | |
| *** jdennis has joined #openstack-keystone | 13:41 | |
| *** panbalag has joined #openstack-keystone | 13:42 | |
| *** panbalag has left #openstack-keystone | 13:42 | |
| *** josecastroleon has quit IRC | 13:46 | |
| *** panbalag has joined #openstack-keystone | 13:51 | |
| *** d0ugal_ has joined #openstack-keystone | 13:56 | |
| *** d0ugal has quit IRC | 13:57 | |
| *** links has quit IRC | 13:58 | |
| knikolla | o/ | 14:02 |
| lbragstad | o/ | 14:03 |
| *** dave-mccowan has joined #openstack-keystone | 14:07 | |
| lbragstad | kmalloc: do you know of any tricks for using our current caching implementation to cache instances of python objects? | 14:10 |
| lbragstad | i mean, technically, everything in python is an object... but the token model | 14:11 |
| lbragstad | or an instance of it | 14:11 |
| gagehugo | o/ | 14:17 |
| *** gus has quit IRC | 14:18 | |
| *** usr2033 has joined #openstack-keystone | 14:22 | |
| *** usr2033 has quit IRC | 14:22 | |
| *** usr2033 has joined #openstack-keystone | 14:22 | |
| lbragstad | knikolla: did you catch the federated user issue that was brought up yesterday? | 14:28 |
| knikolla | lbragstad: no. have a link to the eavesdrop? | 14:29 |
| *** dave-mcc_ has joined #openstack-keystone | 14:29 | |
| lbragstad | knikolla: http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2018-03-22.log.html#t2018-03-22T19:47:04 | 14:29 |
| *** gus has joined #openstack-keystone | 14:30 | |
| lbragstad | i thought that was pretty interesting... | 14:30 |
| lbragstad | it *felt* mapping purge related... but we couldn't quite nail it down | 14:30 |
| *** dave-mccowan has quit IRC | 14:32 | |
| *** spilla has joined #openstack-keystone | 14:32 | |
| knikolla | lbragstad: gists are no longer up | 14:40 |
| lbragstad | ahh | 14:43 |
| lbragstad | DevX was going to try a couple things and check back | 14:43 |
| *** r-daneel has joined #openstack-keystone | 14:44 | |
| -openstackstatus- NOTICE: zuul.o.o has been restarted to pick up latest code base and clear memory usage. Both check / gate queues were saved, be sure to check your patches and recheck when needed. | 14:51 | |
| *** NM has quit IRC | 14:55 | |
| *** david-lyle has joined #openstack-keystone | 14:57 | |
| *** NM has joined #openstack-keystone | 14:59 | |
| *** d0ugal__ has joined #openstack-keystone | 15:01 | |
| *** d0ugal_ has quit IRC | 15:01 | |
| *** d0ugal__ has quit IRC | 15:02 | |
| *** d0ugal has joined #openstack-keystone | 15:02 | |
| *** r-daneel has quit IRC | 15:04 | |
| *** usr2033 has quit IRC | 15:10 | |
| *** itlinux has joined #openstack-keystone | 15:21 | |
| *** bhagyashris has quit IRC | 15:24 | |
| *** melwitt is now known as jgwentworth | 15:26 | |
| *** DevX has joined #openstack-keystone | 15:32 | |
| DevX | lbragstad: Thanks for all your help yesterday. I figured out what happend. TLDR: propperties changed with in the AD like cn, etc | 15:33 |
| lbragstad | ahh... so the IDs were changing underneath you? | 15:34 |
| DevX | yeah | 15:35 |
| lbragstad | weird, did the config change when edir went away? | 15:36 |
| DevX | which resulted in the public_id of the id_mapping table to change | 15:36 |
| DevX | no, that was at the AD | 15:36 |
| DevX | the edir was a readonly | 15:36 |
| lbragstad | huh - interesting | 15:36 |
| DevX | it was there to help in a wirld ldap v2 bandaid as AD is ldap v3 only | 15:37 |
| *** marius1 has joined #openstack-keystone | 15:37 | |
| lbragstad | aha - gotcha | 15:37 |
| DevX | so the fix was to make the public_id from id_mapping match the user_id from the nonlocal_user table | 15:38 |
| lbragstad | so the fact that authentication started failing and edir was removed were coincidence | 15:38 |
| DevX | so it was a Layer 8 problem :) | 15:38 |
| DevX | right | 15:38 |
| lbragstad | lol | 15:38 |
| DevX | the rootcause was a change in cn's and other attributes done at the AD level | 15:38 |
| DevX | Once again thanks for all the help | 15:39 |
| lbragstad | anytime, not sure how much i helped, but it was a mind-bender ;) | 15:39 |
| DevX | well you gave me the clue | 15:40 |
| DevX | when you noticed the local_user | 15:40 |
| lbragstad | oh - from the logging? | 15:40 |
| DevX | yeah | 15:40 |
| *** links has joined #openstack-keystone | 15:40 | |
| DevX | i had not taken that into consideration | 15:41 |
| lbragstad | sure | 15:41 |
| DevX | i figure that was a foreign key | 15:41 |
| *** gyee has joined #openstack-keystone | 15:41 | |
| *** NM has quit IRC | 15:41 | |
| *** josecastroleon has joined #openstack-keystone | 15:42 | |
| *** links has quit IRC | 15:46 | |
| -openstackstatus- NOTICE: Gerrit will be temporarily unreachable as we restart it to complete the rename of some projects. | 15:49 | |
| *** marius1 has quit IRC | 15:49 | |
| *** NM has joined #openstack-keystone | 15:58 | |
| *** gyankum has quit IRC | 16:00 | |
| *** jroll has quit IRC | 16:07 | |
| *** jroll has joined #openstack-keystone | 16:10 | |
| *** wes_dillingham has joined #openstack-keystone | 16:10 | |
| *** panbalag has quit IRC | 16:11 | |
| *** panbalag has joined #openstack-keystone | 16:11 | |
| *** AlexeyAbashkin has quit IRC | 16:14 | |
| *** panbalag has left #openstack-keystone | 16:14 | |
| *** josecastroleon has quit IRC | 16:15 | |
| *** jroll has quit IRC | 16:15 | |
| *** jroll has joined #openstack-keystone | 16:16 | |
| *** harlowja has joined #openstack-keystone | 16:16 | |
| *** jmlowe has quit IRC | 16:25 | |
| *** germs has quit IRC | 16:26 | |
| *** germs has joined #openstack-keystone | 16:27 | |
| *** germs has quit IRC | 16:27 | |
| *** germs has joined #openstack-keystone | 16:27 | |
| *** josecastroleon has joined #openstack-keystone | 16:31 | |
| DevX | lbragstad: is the mapping ID table supposed to update the user table? as I have a problem as the result of the underling AD changes | 16:35 |
| *** josecastroleon has quit IRC | 16:36 | |
| *** NM has quit IRC | 16:48 | |
| *** david-lyle has quit IRC | 16:52 | |
| *** NM has joined #openstack-keystone | 16:59 | |
| *** masber has quit IRC | 17:06 | |
| lbragstad | DevX: not that i know of - but i'd have to double check the code | 17:17 |
| *** masber has joined #openstack-keystone | 17:18 | |
| *** pcaruana has quit IRC | 17:23 | |
| *** itlinux has quit IRC | 17:27 | |
| *** wes_dillingham has quit IRC | 17:31 | |
| *** wes_dillingham has joined #openstack-keystone | 17:35 | |
| *** masber has quit IRC | 17:37 | |
| openstackgerrit | Merged openstack/keystone master: Remove references to UUID from token documentation https://review.openstack.org/554581 | 17:49 |
| openstackgerrit | Merged openstack/keystone master: Remove references to v2.0 from external developer doc https://review.openstack.org/554690 | 17:49 |
| *** harlowja has quit IRC | 17:50 | |
| *** aojea has joined #openstack-keystone | 17:51 | |
| kmalloc | man. snoooowwwwww in seattle =/ | 17:52 |
| *** AlexeyAbashkin has joined #openstack-keystone | 17:53 | |
| *** felipemonteiro has joined #openstack-keystone | 17:55 | |
| *** AlexeyAbashkin has quit IRC | 17:57 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 17:58 | |
| *** wes_dillingham has quit IRC | 17:59 | |
| *** david-lyle has joined #openstack-keystone | 17:59 | |
| *** jmlowe has joined #openstack-keystone | 18:00 | |
| DevX | lbragstad thanks! | 18:01 |
| *** wes_dillingham has joined #openstack-keystone | 18:03 | |
| *** AlexeyAbashkin has quit IRC | 18:03 | |
| cmurphy | kmalloc: snow here too this week | 18:04 |
| cmurphy | welcome to spring | 18:04 |
| kmalloc | LOL | 18:04 |
| kmalloc | it's a pretty heavy snow, seattle doesn't get much snow. | 18:04 |
| kmalloc | as you knwo from PDX (and you even got more snow there generally) | 18:04 |
| lbragstad | kmalloc: do you know if there is a way to cache python objects? | 18:05 |
| kmalloc | lbragstad: pickle? | 18:05 |
| kmalloc | but that is... semi dangerous | 18:05 |
| lbragstad | right... | 18:05 |
| kmalloc | msgpack. | 18:05 |
| kmalloc | you need to serialize or do a deepcopy to a dict, but not really to external w/o serialization | 18:06 |
| lbragstad | we have memoize wrapping the token provider API methods (which used to deal with dictionaries) | 18:06 |
| lbragstad | ahh | 18:06 |
| kmalloc | so, you need to manage serialization | 18:06 |
| lbragstad | on of the suggestions was to write a to_dict() method into the model | 18:06 |
| kmalloc | so, i would probably put logic into the cache region (proxy) that serializes/deserializes | 18:07 |
| kmalloc | the memcache lib uses pickle behind the scenes, but i wouldnt use that explicitly | 18:08 |
| lbragstad | hmm | 18:08 |
| lbragstad | ok | 18:08 |
| *** aojea has quit IRC | 18:09 | |
| *** aojea has joined #openstack-keystone | 18:12 | |
| openstackgerrit | Andreas Jaeger proposed openstack/keystoneauth master: Remove tox_install.sh and align with constraints consumption https://review.openstack.org/550837 | 18:15 |
| *** aojea has quit IRC | 18:30 | |
| *** itlinux has joined #openstack-keystone | 18:32 | |
| *** harlowja has joined #openstack-keystone | 18:33 | |
| *** wes_dillingham has quit IRC | 18:34 | |
| openstackgerrit | Merged openstack/ldappool master: Updated from global requirements https://review.openstack.org/551498 | 18:35 |
| *** r-daneel has joined #openstack-keystone | 18:37 | |
| *** harlowja has quit IRC | 18:38 | |
| *** itlinux has quit IRC | 18:47 | |
| *** jmlowe has quit IRC | 18:47 | |
| edmondsw | someone asked me how they could tell who is currently logged in | 18:49 |
| *** itlinux has joined #openstack-keystone | 18:49 | |
| edmondsw | I don't see an API that would give you that information... am I overlooking something? | 18:50 |
| *** r-daneel_ has joined #openstack-keystone | 18:50 | |
| *** r-daneel has quit IRC | 18:52 | |
| *** r-daneel_ is now known as r-daneel | 18:52 | |
| cmurphy | what does "logged in" mean to keystone? has an unexpired token issued? | 18:54 |
| edmondsw | or unrevoked, yeah | 18:54 |
| cmurphy | i don't think we have that now that we only have non persistant tokens | 18:54 |
| *** dave-mcc_ has quit IRC | 18:55 | |
| lbragstad | yeah - we don't have a way to track issued and valid tokens without writing them to disk | 18:55 |
| edmondsw | yeah, that makes sense | 18:55 |
| *** Edozie has joined #openstack-keystone | 18:57 | |
| Edozie | HELP | 18:58 |
| Edozie | Need to figure out who the mentor is for the Keynote Flask project , does anyone know ? | 18:58 |
| *** wes_dillingham has joined #openstack-keystone | 18:58 | |
| *** itlinux has quit IRC | 19:08 | |
| *** harlowja has joined #openstack-keystone | 19:09 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:14 | |
| *** wes_dillingham has quit IRC | 19:15 | |
| *** itlinux has joined #openstack-keystone | 19:15 | |
| *** itlinux has quit IRC | 19:16 | |
| *** AlexeyAbashkin has quit IRC | 19:19 | |
| *** Edozie has quit IRC | 19:20 | |
| *** DevX has quit IRC | 19:21 | |
| *** felipemonteiro__ has joined #openstack-keystone | 19:23 | |
| *** felipemonteiro has quit IRC | 19:26 | |
| lbragstad | Edozie - in case you read scroll back, we don't have a mentor signed up for it yet.. it was an idea we came up with though https://etherpad.openstack.org/p/keystone-internship-ideas | 19:29 |
| *** openstackgerrit has quit IRC | 19:34 | |
| *** jmlowe has joined #openstack-keystone | 19:43 | |
| *** openstackgerrit has joined #openstack-keystone | 19:45 | |
| openstackgerrit | Merged openstack/keystone-tempest-plugin master: Updated from global requirements https://review.openstack.org/551494 | 19:45 |
| openstackgerrit | Merged openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/555559 | 19:45 |
| kmalloc | you could take a look at the notifications and look for logins (without revokes) in the last <token_ttl> (edmondsw), not that I'd recommend that | 19:49 |
| kmalloc | but that would be the mechanism. a lot of apps don't actually know who is logged in if they use cookie sessions (instead of server sessions). | 19:50 |
| edmondsw | yeah | 19:50 |
| kmalloc | and lots of things use cookie sessions. | 19:50 |
| kmalloc | (failures of web-apps, vs say, "who is logged into LDAP" -- that's easy to know) | 19:51 |
| openstackgerrit | Merged openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/555558 | 19:56 |
| *** itlinux has joined #openstack-keystone | 20:07 | |
| *** itlinux has quit IRC | 20:09 | |
| *** jroll has quit IRC | 20:09 | |
| *** tesseract has quit IRC | 20:09 | |
| *** jroll has joined #openstack-keystone | 20:10 | |
| *** r-daneel has quit IRC | 20:11 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/555586 | 20:14 |
| *** AlexeyAbashkin has joined #openstack-keystone | 20:14 | |
| *** devx has joined #openstack-keystone | 20:15 | |
| lbragstad | mmm - the smell of deleting code on a friday is glorious - http://paste.openstack.org/show/710540/ | 20:18 |
| *** AlexeyAbashkin has quit IRC | 20:18 | |
| lbragstad | i can't even handle it | 20:19 |
| *** dave-mccowan has joined #openstack-keystone | 20:19 | |
| devx | lbragstad do you of a way to update the user id? at all the right places. Even though I've figured out the problem haven't come up with a correct fix for this problem. Which would happen when ever changes happen to AD.. | 20:23 |
| kmalloc | devx: there is no good way to update data in keystone based upon AD changes. likely that should create a new user shadow record. | 20:25 |
| kmalloc | AD is an external provider. | 20:25 |
| devx | so it might make sense to just remove the user from the project and then delete user | 20:25 |
| kmalloc | we can only consume data from AD as it is queried/referenced. | 20:25 |
| kmalloc | yeah that is likely the easiest =/ | 20:25 |
| kmalloc | sorry | 20:25 |
| devx | no worries | 20:26 |
| lbragstad | kmalloc: yeah - this was some of what we worked through yesterday - http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2018-03-22.log.html#t2018-03-22T19:47:04 | 20:26 |
| kmalloc | i'd like to provide utilities to make that easier. but it's on a long long list of "well... we'll get there if people are interested" | 20:26 |
| kmalloc | alternative would be to utilize ADFS (SAML2) | 20:27 |
| devx | i did not think about that | 20:29 |
| devx | I'll have to test it | 20:29 |
| *** r-daneel has joined #openstack-keystone | 20:29 | |
| kmalloc | you might run into the same issues., | 20:29 |
| devx | thank you both! | 20:29 |
| kmalloc | yeah | 20:29 |
| *** jmlowe has quit IRC | 20:31 | |
| *** raildo has quit IRC | 20:33 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: WIP: rewrite keystone https://review.openstack.org/545450 | 20:44 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: WIP: Overhaul the rest of the token provider API https://review.openstack.org/555931 | 20:44 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add functional testing gate https://review.openstack.org/531014 | 20:51 |
| *** jmlowe has joined #openstack-keystone | 20:52 | |
| lbragstad | kmalloc: so ^ that second patch passes all but like 8 tests... | 21:08 |
| lbragstad | still some work to do - breaking it apart and whatnot.. but it removes all the keystone/token/providers/common.py | 21:12 |
| *** edmondsw has quit IRC | 21:17 | |
| gagehugo | lbragstad https://review.openstack.org/555934 | 21:29 |
| lbragstad | gagehugo: want me to add you to the core-sec group? | 21:30 |
| gagehugo | sure | 21:31 |
| lbragstad | sweet | 21:31 |
| lbragstad | done | 21:31 |
| gagehugo | hmm I think when I pushed that doc change it didn't save the architecture page | 21:37 |
| gagehugo | :( | 21:37 |
| *** NM has quit IRC | 21:40 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Move fernet specific doctor checks into tokens https://review.openstack.org/527527 | 21:40 |
| *** dave-mccowan has quit IRC | 21:57 | |
| openstackgerrit | Merged openstack/keystoneauth master: Remove tox_install.sh and align with constraints consumption https://review.openstack.org/550837 | 22:00 |
| *** wes_dillingham has joined #openstack-keystone | 22:22 | |
| gyee | lbragstad: ping | 22:25 |
| *** EmilienM has quit IRC | 22:34 | |
| *** EmilienM has joined #openstack-keystone | 22:36 | |
| *** EmilienM has quit IRC | 22:36 | |
| *** EmilienM has joined #openstack-keystone | 22:36 | |
| *** wes_dillingham has quit IRC | 22:39 | |
| *** r-daneel has quit IRC | 22:43 | |
| *** aojea has joined #openstack-keystone | 22:49 | |
| *** martinus__ has quit IRC | 22:50 | |
| *** wes_dillingham has joined #openstack-keystone | 22:52 | |
| *** david-lyle has quit IRC | 22:52 | |
| *** spilla has quit IRC | 23:42 | |
| *** david-lyle has joined #openstack-keystone | 23:50 | |
| *** felipemonteiro__ has quit IRC | 23:52 | |
| *** aojea has quit IRC | 23:54 | |
| *** jgwentworth is now known as melwitt | 23:54 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!