openstackgerrit | Merged openstack/keystone master: Do not log token string https://review.openstack.org/592505 | 00:32 |
---|---|---|
*** nicolasbock has quit IRC | 00:36 | |
*** dave-mccowan has joined #openstack-keystone | 00:58 | |
*** r-daneel has quit IRC | 01:35 | |
*** jdennis has quit IRC | 01:57 | |
*** HW_Peter has quit IRC | 02:36 | |
*** Nel1x has joined #openstack-keystone | 02:49 | |
*** Nel1x has quit IRC | 03:11 | |
*** dave-mccowan has quit IRC | 03:45 | |
*** blake has joined #openstack-keystone | 03:59 | |
*** blake has quit IRC | 04:10 | |
*** josecastroleon has quit IRC | 05:50 | |
*** josecastroleon has joined #openstack-keystone | 05:51 | |
*** Tahvok has quit IRC | 06:06 | |
*** Tahvok has joined #openstack-keystone | 06:11 | |
*** ravirjn has quit IRC | 06:27 | |
*** shyamb has joined #openstack-keystone | 06:45 | |
*** pcaruana has joined #openstack-keystone | 06:54 | |
*** rcernin has quit IRC | 06:55 | |
mbuil | cmurphy: yesterday I had a talk with the edge guys and they had in mind a demo where a user logs into Horizon from the SP using federation. As far as I saw yesterday, the only way to interact with the SP is through a token and changing OS_URL, so I guess what they had in mind is currently not possible, or? | 07:08 |
*** cz2 has left #openstack-keystone | 07:20 | |
*** josecastroleon has quit IRC | 07:26 | |
cmurphy | mbuil: it is possible to use horizon but you have to log in to the IdP not the SP | 07:28 |
mbuil | cmurphy: and could you see or interact with the SP resources from the IdP somehow? | 07:29 |
cmurphy | mbuil: yes, it should actually be pretty seamless, you just select the SP from a menu and then it will pretty much act like you've logged into the SP | 07:30 |
mbuil | cmurphy: ah nice. I'll try that right away :) | 07:31 |
cmurphy | because it gets the token up front and has the catalog from that, it knows where all the endpoints are | 07:31 |
*** rha has joined #openstack-keystone | 07:41 | |
*** jaosorior has quit IRC | 07:47 | |
*** shyamb has quit IRC | 07:47 | |
*** mvkr has quit IRC | 08:08 | |
*** josecastroleon has joined #openstack-keystone | 08:12 | |
*** mvkr has joined #openstack-keystone | 08:55 | |
*** shyamb has joined #openstack-keystone | 08:56 | |
*** shyambiradar has joined #openstack-keystone | 09:25 | |
*** shyamb has quit IRC | 09:29 | |
*** shyambiradar has quit IRC | 09:43 | |
*** shyamb has joined #openstack-keystone | 09:43 | |
openstackgerrit | Merged openstack/ldappool master: fix tox python3 overrides https://review.openstack.org/591927 | 09:45 |
*** shyamb has quit IRC | 10:03 | |
*** shyam89 has joined #openstack-keystone | 10:03 | |
*** josecastroleon has quit IRC | 10:06 | |
*** shyam89 has quit IRC | 10:30 | |
*** nicolasbock has joined #openstack-keystone | 10:35 | |
*** shyam89 has joined #openstack-keystone | 10:51 | |
*** dklyle has quit IRC | 10:55 | |
*** david-lyle has joined #openstack-keystone | 10:55 | |
*** shyam89 has quit IRC | 11:07 | |
*** shyam89 has joined #openstack-keystone | 11:07 | |
*** dave-mccowan has joined #openstack-keystone | 11:19 | |
*** josecastroleon has joined #openstack-keystone | 11:22 | |
*** shyam89 has quit IRC | 11:47 | |
*** shyam89 has joined #openstack-keystone | 11:54 | |
*** shyamb has joined #openstack-keystone | 12:09 | |
*** shyam89 has quit IRC | 12:12 | |
*** raildo has joined #openstack-keystone | 12:12 | |
*** jaypipes has quit IRC | 12:16 | |
*** mchlumsky has joined #openstack-keystone | 12:29 | |
*** josecastroleon has quit IRC | 12:52 | |
*** TheJulia is now known as needssleep | 12:55 | |
*** shyamb has quit IRC | 13:02 | |
*** shyam89 has joined #openstack-keystone | 13:03 | |
*** vrv_ has joined #openstack-keystone | 13:25 | |
*** aning has left #openstack-keystone | 13:31 | |
*** aning has joined #openstack-keystone | 13:31 | |
*** imacdonn has quit IRC | 13:42 | |
*** imacdonn has joined #openstack-keystone | 13:42 | |
*** felipemonteiro has joined #openstack-keystone | 13:51 | |
*** shyam89 has quit IRC | 13:57 | |
*** dansmith is now known as steelydan | 13:58 | |
*** steelydan is now known as SteelyDan | 13:58 | |
*** hoonetorg has quit IRC | 14:02 | |
*** hoonetorg has joined #openstack-keystone | 14:03 | |
*** hoonetorg has quit IRC | 14:09 | |
*** josecastroleon has joined #openstack-keystone | 14:21 | |
hrybacki | o/ | 14:29 |
*** hoonetorg has joined #openstack-keystone | 14:34 | |
*** r-daneel has joined #openstack-keystone | 14:44 | |
*** felipemonteiro has quit IRC | 14:47 | |
*** felipemonteiro has joined #openstack-keystone | 14:50 | |
*** r-daneel has quit IRC | 15:00 | |
*** felipemonteiro has quit IRC | 15:01 | |
*** cburgess has quit IRC | 15:02 | |
*** cburgess has joined #openstack-keystone | 15:03 | |
*** josecastroleon has quit IRC | 15:06 | |
*** cburgess has quit IRC | 15:08 | |
*** cburgess has joined #openstack-keystone | 15:09 | |
*** devx has quit IRC | 15:40 | |
*** devx has joined #openstack-keystone | 15:42 | |
*** vrv_ has quit IRC | 15:46 | |
openstackgerrit | Merged openstack/keystonemiddleware master: add releasenotes to readme.rst https://review.openstack.org/591947 | 15:51 |
openstackgerrit | Gage Hugo proposed openstack/keystoneauth master: Add nosec to usage of SHA1 https://review.openstack.org/593094 | 16:00 |
gagehugo | kmalloc ^ bandit was updated to 1.5, ksa now is failing the bandit check | 16:01 |
gagehugo | on a sha1 usage | 16:01 |
*** r-daneel has joined #openstack-keystone | 16:04 | |
*** pas-ha has quit IRC | 16:41 | |
*** pas-ha has joined #openstack-keystone | 16:42 | |
*** gyee has joined #openstack-keystone | 16:52 | |
kmalloc | just exempt it | 16:53 |
kmalloc | there is zero reason our use of SHA1 is an issue we're using it for obfuscating logs. | 16:53 |
kmalloc | yep | 16:53 |
kmalloc | i see you did that. | 16:53 |
kmalloc | gagehugo: alternative is to use sha256 | 16:54 |
kmalloc | gagehugo: really it is fine to change the hash we use as long as we're consisting within a release | 16:54 |
openstackgerrit | Merged openstack/keystone master: Remove get_catalog from manage layer https://review.openstack.org/575704 | 16:57 |
kmalloc | gagehugo: -1, but only becaue the TODO is pointless. | 16:58 |
kmalloc | gagehugo: we can not suppress by moving to sha256 or we can nosec and say "this is for logging only" | 16:59 |
gagehugo | kmalloc ok, I'll update that | 17:27 |
openstackgerrit | Gage Hugo proposed openstack/keystoneauth master: Change log hashing to SHA256 https://review.openstack.org/593094 | 17:39 |
*** r-daneel_ has joined #openstack-keystone | 18:07 | |
*** r-daneel has quit IRC | 18:08 | |
*** r-daneel_ is now known as r-daneel | 18:08 | |
*** josecastroleon has joined #openstack-keystone | 18:40 | |
*** gyee has quit IRC | 18:43 | |
*** r-daneel_ has joined #openstack-keystone | 18:43 | |
*** r-daneel has quit IRC | 18:44 | |
*** r-daneel_ is now known as r-daneel | 18:44 | |
*** r-daneel has quit IRC | 18:46 | |
*** josecastroleon has quit IRC | 18:49 | |
*** r-daneel has joined #openstack-keystone | 19:15 | |
*** nicolasbock has quit IRC | 19:50 | |
*** nicolasbock has joined #openstack-keystone | 19:55 | |
*** raildo has quit IRC | 21:22 | |
*** nicolasbock has quit IRC | 21:59 | |
openstackgerrit | Merged openstack/keystoneauth master: Change log hashing to SHA256 https://review.openstack.org/593094 | 22:10 |
*** r-daneel has quit IRC | 23:01 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!