| *** markvoelker has quit IRC | 00:02 | |
| openstackgerrit | Merged openstack/keystoneauth master: Update sphinx extension logging https://review.openstack.org/611135 | 00:44 |
|---|---|---|
| *** markvoelker has joined #openstack-keystone | 00:58 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs master: Explicit Domain Ids https://review.openstack.org/611201 | 01:13 |
| *** beekneemech has joined #openstack-keystone | 01:17 | |
| *** bnemec has quit IRC | 01:19 | |
| *** imacdonn has quit IRC | 01:22 | |
| *** imacdonn has joined #openstack-keystone | 01:22 | |
| *** markvoelker has quit IRC | 01:32 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 01:44 | |
| *** pooja_jadhav has quit IRC | 01:45 | |
| *** dklyle has joined #openstack-keystone | 01:50 | |
| *** david-lyle has joined #openstack-keystone | 01:53 | |
| *** pooja_jadhav has joined #openstack-keystone | 01:53 | |
| *** dklyle has quit IRC | 01:56 | |
| *** dklyle has joined #openstack-keystone | 01:56 | |
| *** david-lyle has quit IRC | 01:59 | |
| *** jmccrory has joined #openstack-keystone | 02:02 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add a test for idp and federated user cascade deleting https://review.openstack.org/591946 | 02:03 |
| *** bnemec has joined #openstack-keystone | 02:13 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remaining cases of MappingEngineTester https://review.openstack.org/606912 | 02:13 |
| *** beekneemech has quit IRC | 02:15 | |
| *** beekneemech_ has joined #openstack-keystone | 02:15 | |
| *** bnemec has quit IRC | 02:18 | |
| *** dklyle has quit IRC | 02:20 | |
| *** bnemec has joined #openstack-keystone | 02:26 | |
| *** beekneemech_ has quit IRC | 02:29 | |
| *** Dinesh_Bhor has quit IRC | 02:31 | |
| *** beekneemech has joined #openstack-keystone | 02:31 | |
| *** bnemec has quit IRC | 02:34 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 02:35 | |
| *** bnemec has joined #openstack-keystone | 02:48 | |
| *** beekneemech has quit IRC | 02:51 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add release note for unified limit APIs changing https://review.openstack.org/611763 | 03:30 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Allow registered limit's region_id to be None https://review.openstack.org/610887 | 03:43 |
| *** dave-mccowan has quit IRC | 03:53 | |
| *** Dinesh_Bhor has quit IRC | 04:08 | |
| *** beekneemech has joined #openstack-keystone | 04:10 | |
| *** bnemec has quit IRC | 04:13 | |
| *** jaosorior has joined #openstack-keystone | 04:24 | |
| *** bnemec has joined #openstack-keystone | 04:45 | |
| *** beekneemech has quit IRC | 04:48 | |
| *** bnemec has quit IRC | 04:51 | |
| *** bnemec has joined #openstack-keystone | 04:51 | |
| *** beekneemech has joined #openstack-keystone | 05:03 | |
| *** bnemec has quit IRC | 05:06 | |
| *** andreaf has quit IRC | 05:10 | |
| *** andreaf has joined #openstack-keystone | 05:15 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 05:17 | |
| *** felipemonteiro has quit IRC | 05:41 | |
| *** pcaruana has joined #openstack-keystone | 06:14 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Allow registered limit's region_id to be None https://review.openstack.org/610887 | 06:19 |
| *** aning_ has joined #openstack-keystone | 06:24 | |
| *** aning has quit IRC | 06:27 | |
| *** aning has joined #openstack-keystone | 06:32 | |
| *** jaosorior has quit IRC | 06:32 | |
| *** aning_ has quit IRC | 06:34 | |
| *** jaosorior has joined #openstack-keystone | 06:34 | |
| *** Dinesh_Bhor has quit IRC | 06:36 | |
| *** aning_ has joined #openstack-keystone | 06:37 | |
| *** aning__ has joined #openstack-keystone | 06:39 | |
| *** aning has quit IRC | 06:39 | |
| *** aning_ has quit IRC | 06:41 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add release note for unified limit APIs changing https://review.openstack.org/611763 | 06:52 |
| *** xek has joined #openstack-keystone | 06:57 | |
| *** pcaruana has quit IRC | 07:09 | |
| *** rcernin has quit IRC | 07:17 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 07:26 | |
| *** pcaruana has joined #openstack-keystone | 07:28 | |
| *** pcaruana is now known as pcaruana|elisa| | 07:30 | |
| *** rdopiera has joined #openstack-keystone | 07:51 | |
| *** Dinesh_Bhor has quit IRC | 08:02 | |
| openstackgerrit | Merged openstack/keystone master: Remove deprecated token_flush https://review.openstack.org/609277 | 08:22 |
| openstackgerrit | Merged openstack/oslo.policy master: Update sphinx extension logging https://review.openstack.org/611143 | 08:30 |
| openstackgerrit | Merged openstack/keystone master: Don't quote {posargs} in tox.ini https://review.openstack.org/608824 | 08:34 |
| openstackgerrit | Merged openstack/keystone master: Update doc string for transform_to_group_ids https://review.openstack.org/608681 | 08:34 |
| openstackgerrit | Merged openstack/keystone master: Update notification tests to work with o-m 9.0.0 https://review.openstack.org/609106 | 08:34 |
| openstackgerrit | Merged openstack/keystone master: Fixing update unified limit api-ref https://review.openstack.org/610000 | 08:34 |
| openstackgerrit | Jose Castro Leon proposed openstack/keystone master: Add caching on trust role validation to improve performance https://review.openstack.org/608963 | 09:03 |
| *** Dinesh_Bhor has joined #openstack-keystone | 09:06 | |
| *** zigo has joined #openstack-keystone | 09:14 | |
| openstackgerrit | Merged openstack/keystone master: Fix example for getting system scoped token https://review.openstack.org/611685 | 09:54 |
| *** xek has quit IRC | 10:17 | |
| *** xek has joined #openstack-keystone | 10:18 | |
| *** Dinesh_Bhor has quit IRC | 10:22 | |
| *** dave-mccowan has joined #openstack-keystone | 10:54 | |
| *** rdopiera has quit IRC | 12:29 | |
| *** raildo has joined #openstack-keystone | 12:39 | |
| *** dansmith is now known as SteelyDan | 12:45 | |
| *** rdopiera has joined #openstack-keystone | 13:01 | |
| *** mchlumsky has joined #openstack-keystone | 13:14 | |
| *** jmlowe has joined #openstack-keystone | 13:17 | |
| *** rdopiera has quit IRC | 13:17 | |
| *** rdopiera has joined #openstack-keystone | 13:17 | |
| *** lbragstad is now known as elbragstad | 13:23 | |
| elbragstad | kmalloc sounds good - i can repropose that or do it in a follow up | 13:24 |
| openstackgerrit | Corey Bryant proposed openstack/keystone master: PY3: switch to using unicode text values https://review.openstack.org/611190 | 13:44 |
| openstackgerrit | Corey Bryant proposed openstack/ldappool master: PY3: switch to using unicode text values https://review.openstack.org/611401 | 13:52 |
| openstackgerrit | Corey Bryant proposed openstack/ldappool master: PY3: switch to using unicode text values https://review.openstack.org/611401 | 13:53 |
| *** felipemonteiro has joined #openstack-keystone | 14:08 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add support for client-side rate limiting https://review.openstack.org/605043 | 14:15 |
| *** jistr is now known as jistr|call | 14:29 | |
| *** felipemonteiro has quit IRC | 14:43 | |
| *** jistr|call is now known as jistr | 14:47 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add support for client-side rate limiting https://review.openstack.org/605043 | 14:50 |
| *** pcaruana|elisa| has quit IRC | 14:56 | |
| *** pcaruana|elisa| has joined #openstack-keystone | 14:57 | |
| kmalloc | elbragstad: going through all the projects and cleaning up reviews. | 14:58 |
| kmalloc | Got a lot pushed through and abandoned yesterday | 14:58 |
| elbragstad | nice - thanks for doing that | 15:00 |
| *** felipemonteiro has joined #openstack-keystone | 15:00 | |
| *** orange_julius has joined #openstack-keystone | 15:06 | |
| orange_julius | Hey guys quick question regarding AD integration. Is it possible to user multiple user_tree_dn's? We have users in multiple trees that we want to authenticate to Openstack under the same domain | 15:07 |
| *** pcaruana|elisa| has quit IRC | 15:08 | |
| *** pcaruana has joined #openstack-keystone | 15:08 | |
| kmalloc | orange_julius: it's all about building the filter, totally can combine multiple trees as loong as they are based on the same root (same server) | 15:08 |
| orange_julius | What would that look like? All of the examples I see under user_tree_dn reference a specific path, unless you are talking about the user_filter parameter? | 15:29 |
| *** pcaruana has quit IRC | 15:31 | |
| orange_julius | Or do you mean moving the user_tree_dn up so that it is above both trees that I want to filter | 15:31 |
| *** jmlowe has quit IRC | 16:01 | |
| *** beekneemech has quit IRC | 16:08 | |
| *** bnemec has joined #openstack-keystone | 16:08 | |
| *** openstackgerrit has quit IRC | 16:24 | |
| *** ayoung has joined #openstack-keystone | 16:27 | |
| kmalloc | yeah user_filer | 16:42 |
| kmalloc | and you set the DN low so it's below both tree's starts | 16:43 |
| *** bnemec is now known as beekneemech | 16:43 | |
| kmalloc | if you give me a few moments, i cna craft a fun filter for you... that is an example, but my LDAP filter skills are a little rusty | 16:43 |
| kmalloc | the idea is you keep user_tree_dn really far down and expand on the user_filter to isolate just the parts you want | 16:44 |
| kmalloc | mostly it's something like (|(ou:dn:=Chicago)(ou:dn:=Miami))) for limiting the OUs with a (&(objectClass=user) wrapped around it | 16:45 |
| kmalloc | LDAP's (and similarly AD's) querys are very efficient if appropriate filters are applies | 16:46 |
| kmalloc | applied* | 16:46 |
| orange_julius | Ok perfect. Yea we already have filters for groups but our user_tree_dn was one level below where I needed to it be. To be honest I think our entire structure is a little messed up and that is what really needs to change.. but I'm not in charge of that =P | 16:46 |
| orange_julius | Thanks for your help! | 16:46 |
| *** rdopiera has quit IRC | 16:53 | |
| *** felipemonteiro has quit IRC | 16:53 | |
| mordred | kmalloc: I just left a comment on https://review.openstack.org/#/c/600033 that you might want to go disagree with - or agree with | 16:55 |
| kmalloc | mordred: i am guessing i'll agree with your comment | 16:57 |
| kmalloc | but looking | 16:57 |
| kmalloc | mordred: i 100% agree with you. i've added a -2 for now, and will reconsider if the code is changed as you describe *and* it is inappropriate after disucssion to add it to sdk | 17:01 |
| *** gyee has joined #openstack-keystone | 17:12 | |
| *** openstackgerrit has joined #openstack-keystone | 17:20 | |
| openstackgerrit | Merged openstack/keystone master: Implement scaffolding for upgrade checks https://review.openstack.org/608785 | 17:20 |
| openstackgerrit | Merged openstack/keystone master: Register exceptions with a Flask Error Handler https://review.openstack.org/609796 | 17:21 |
| openstackgerrit | Merged openstack/keystone master: Make Request Logging a little better https://review.openstack.org/609804 | 17:21 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Support KWARGS in the cache key generating function(s). https://review.openstack.org/611120 | 17:29 |
| *** dnguyen has joined #openstack-keystone | 17:39 | |
| openstackgerrit | Morgan Fainberg proposed openstack/python-keystoneclient master: Extends tags comparator support to KSC https://review.openstack.org/525792 | 17:46 |
| openstackgerrit | Morgan Fainberg proposed openstack/python-keystoneclient master: Add release notes for return-request-id-to-caller https://review.openstack.org/276644 | 17:48 |
| *** jmlowe has joined #openstack-keystone | 18:04 | |
| *** ayoung has quit IRC | 18:12 | |
| *** dnguyen has quit IRC | 18:13 | |
| *** dnguyen has joined #openstack-keystone | 18:16 | |
| mordred | kmalloc: cool. I'll see if I can't make the load_from_conf method for sdk sowe can look at it and discuss | 18:18 |
| kmalloc | ++ | 18:18 |
| *** ayoung has joined #openstack-keystone | 18:55 | |
| openstackgerrit | ayoung proposed openstack/keystone master: WIP Catalog for Unscoped Tokens https://review.openstack.org/610975 | 19:04 |
| openstackgerrit | Morgan Fainberg proposed openstack/python-keystoneclient master: Add return-request-id-to-caller function(v3/contrib) https://review.openstack.org/268003 | 19:19 |
| openstackgerrit | Morgan Fainberg proposed openstack/python-keystoneclient master: Add release notes for return-request-id-to-caller https://review.openstack.org/276644 | 19:19 |
| *** dave-mccowan has quit IRC | 19:57 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Add Response class to return request-id to caller https://review.openstack.org/329913 | 20:09 |
| openstackgerrit | Merged openstack/python-keystoneclient master: Add return-request-id-to-caller function(v3) https://review.openstack.org/267456 | 20:09 |
| openstackgerrit | Merged openstack/keystone master: Remaining cases of MappingEngineTester https://review.openstack.org/606912 | 20:20 |
| *** dklyle has joined #openstack-keystone | 20:37 | |
| *** dklyle has quit IRC | 20:50 | |
| *** beekneemech has quit IRC | 20:53 | |
| *** dave-mccowan has joined #openstack-keystone | 21:04 | |
| *** raildo has quit IRC | 21:12 | |
| *** dave-mccowan has quit IRC | 21:13 | |
| *** dnguyen has left #openstack-keystone | 21:39 | |
| *** dnguyen has joined #openstack-keystone | 21:40 | |
| *** dnguyen has quit IRC | 21:40 | |
| elbragstad | anywho | 22:01 |
| kmalloc | ^_^ | 22:02 |
| elbragstad | https://www.youtube.com/watch?v=uRSWFfswxBQ is a demo of how scope types and default roles work together | 22:02 |
| * kmalloc flushes the "MERGE THINGS" lever the last 2 days | 22:02 | |
| elbragstad | i wanted to get around to the credentials patch today, but ran out of time | 22:03 |
| kmalloc | hehe it's all good man | 22:03 |
| elbragstad | i should be able to update it before monday, hopefully | 22:03 |
| *** dklyle has joined #openstack-keystone | 22:03 | |
| kmalloc | elbragstad: this should be a quick +2/+A https://review.openstack.org/#/c/609805/ | 22:03 |
| kmalloc | and that gets us caught up to what has been reviewed for flask | 22:04 |
| *** xek has quit IRC | 22:11 | |
| openstackgerrit | ayoung proposed openstack/keystone master: Replace UUID with id_generator for Federated users https://review.openstack.org/605169 | 23:22 |
| *** bnemec has joined #openstack-keystone | 23:25 | |
| openstackgerrit | Merged openstack/keystone master: Internally defined middleware don't use stevedore https://review.openstack.org/609805 | 23:33 |
| *** felipemonteiro has joined #openstack-keystone | 23:44 | |
| *** gyee has quit IRC | 23:50 | |
| *** dklyle has quit IRC | 23:52 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!