| *** gyee has quit IRC | 00:14 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 01:44 | |
| *** rezzycavalheiro has joined #openstack-keystone | 02:05 | |
| *** felipemonteiro has joined #openstack-keystone | 02:08 | |
| rezzycavalheiro | Hello cmurphy and kmalloc! I'm applying for the Outreachy internship and I should use this chanel for help on getting started! I was wonderign if, to start contributing, should I follow the instructions on the reference links provided and then work on the low-hanging-fruit topics to contribute? Thank you | 02:10 |
|---|---|---|
| *** openstackgerrit has joined #openstack-keystone | 02:22 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Remove useless "clean" file https://review.openstack.org/612954 | 02:22 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Refactor flask domain config resources https://review.openstack.org/613182 | 02:26 |
| *** ebukha has joined #openstack-keystone | 02:29 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Updating doc of unified limit https://review.openstack.org/612226 | 02:37 |
| kmalloc | vishakha: looks good | 02:45 |
| *** Dinesh_Bhor has quit IRC | 03:07 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 03:13 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Set Default and resource limit as defined schema https://review.openstack.org/610479 | 03:13 |
| *** itlinux has quit IRC | 03:17 | |
| vishakha | kmalloc: : Thank you | 03:21 |
| *** felipemonteiro has quit IRC | 03:32 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: nit: remove some useless code https://review.openstack.org/612625 | 03:37 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: nit: remove some useless code https://review.openstack.org/612625 | 03:44 |
| *** lbragstad has quit IRC | 04:00 | |
| *** felipemonteiro has joined #openstack-keystone | 04:28 | |
| *** ebukha has quit IRC | 04:36 | |
| *** erus has joined #openstack-keystone | 04:45 | |
| erus | hi | 04:45 |
| *** spsurya has joined #openstack-keystone | 04:51 | |
| *** shyamb has joined #openstack-keystone | 05:01 | |
| *** rezzycavalheiro has quit IRC | 05:09 | |
| *** felipemonteiro has quit IRC | 05:16 | |
| *** shyamb has quit IRC | 05:17 | |
| *** Dinesh_Bhor has quit IRC | 05:20 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 05:23 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Trivial: Remove repeated if conditions https://review.openstack.org/613198 | 05:37 |
| *** ebukha has joined #openstack-keystone | 05:41 | |
| *** shyamb has joined #openstack-keystone | 06:01 | |
| *** Dinesh_Bhor has quit IRC | 06:08 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Remove useless "clean" file https://review.openstack.org/612954 | 06:09 |
| *** Dinesh_Bhor has joined #openstack-keystone | 06:10 | |
| openstackgerrit | Mike Chen proposed openstack/keystone master: Remove unused logging module https://review.openstack.org/613207 | 06:23 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Deprecate eventlet related configuration https://review.openstack.org/613210 | 06:28 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Deprecate eventlet related configuration https://review.openstack.org/568764 | 06:30 |
| openstackgerrit | Dao Cong Tien proposed openstack/keystone master: Adds doc8 check to pep8 https://review.openstack.org/583196 | 06:38 |
| *** xek has joined #openstack-keystone | 06:49 | |
| *** ebukha has quit IRC | 06:52 | |
| *** xek has quit IRC | 06:59 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Remove "crypt_strength" option https://review.openstack.org/613218 | 06:59 |
| *** rcernin has quit IRC | 07:00 | |
| *** pcaruana has joined #openstack-keystone | 07:04 | |
| *** Dinesh_Bhor has quit IRC | 07:42 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 07:46 | |
| *** Emine has joined #openstack-keystone | 07:46 | |
| *** sapd1 has quit IRC | 07:57 | |
| *** sapd1 has joined #openstack-keystone | 07:58 | |
| *** shyamb has quit IRC | 08:00 | |
| *** shyamb has joined #openstack-keystone | 08:17 | |
| *** xek has joined #openstack-keystone | 08:57 | |
| *** shyamb has quit IRC | 09:15 | |
| *** shyamb has joined #openstack-keystone | 09:17 | |
| openstackgerrit | Collins Okolo proposed openstack/keystone master: Update third endpoint legacy port for Keystone v3 API https://review.openstack.org/613171 | 09:37 |
| *** pas-ha has joined #openstack-keystone | 09:40 | |
| pas-ha | hi all, have a question re docs vs reality - docs say that Keystone v3 API version in Pike is 3.9 https://developer.openstack.org/api-ref/identity/v3/index.html#what-s-new-in-version-3-9-pike but the code in stable/pike clearly states 3.8 https://git.openstack.org/cgit/openstack/keystone/tree/keystone/version/__init__.py?h=refs/heads/stable/pike#n15 | 09:42 |
| pas-ha | and the commit bumping it to 3.9 was merged long after Pike release, in the late December of 2017 https://git.openstack.org/cgit/openstack/keystone/commit/?id=b8c7cafe091ce0c05b0baf33b49deaf1bd8a0806 | 09:44 |
| pas-ha | so where is the truth? :-) | 09:44 |
| *** shyamb has quit IRC | 09:45 | |
| cmurphy | pas-ha: I just made that change to the api-ref to refer to the release names, I might have messed it up, let me try to confirm | 09:45 |
| *** shyamb has joined #openstack-keystone | 09:45 | |
| pas-ha | cmurphy: thanks | 09:46 |
| cmurphy | pas-ha: i think the tags stuff was meant to be queens not pike | 09:52 |
| cmurphy | i think somehow we ended up doing both 3.9 and 3.10 in queens | 09:54 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Fix api-ref v3.9 release identifier https://review.openstack.org/613257 | 10:00 |
| *** Dinesh_Bhor has quit IRC | 10:11 | |
| *** shyamb has quit IRC | 10:21 | |
| *** shyamb has joined #openstack-keystone | 10:22 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 10:29 | |
| *** ebukha has joined #openstack-keystone | 10:30 | |
| *** ebukha has quit IRC | 10:32 | |
| *** Emine has quit IRC | 10:38 | |
| *** Emine has joined #openstack-keystone | 10:39 | |
| *** shyamb has quit IRC | 10:39 | |
| *** Dinesh_Bhor has quit IRC | 10:56 | |
| *** shyamb has joined #openstack-keystone | 11:13 | |
| *** dave-mccowan has joined #openstack-keystone | 11:15 | |
| *** raildo has joined #openstack-keystone | 12:14 | |
| *** jistr_ is now known as jistr | 12:14 | |
| *** erus has quit IRC | 12:15 | |
| *** pcaruana has quit IRC | 12:26 | |
| *** pcaruana has joined #openstack-keystone | 12:39 | |
| *** shyamb has quit IRC | 12:51 | |
| openstackgerrit | Juan Antonio Osorio Robles proposed openstack/oslo.policy master: Add ability to pass in target data for the oslopolicy-checker https://review.openstack.org/613313 | 12:52 |
| *** bnemec has joined #openstack-keystone | 12:56 | |
| *** orange_julius has quit IRC | 12:59 | |
| *** ebukha has joined #openstack-keystone | 13:04 | |
| *** felipemonteiro has joined #openstack-keystone | 13:23 | |
| *** aojea_ has joined #openstack-keystone | 13:26 | |
| *** jistr is now known as jistr|call | 13:29 | |
| *** tobberydberg has joined #openstack-keystone | 13:30 | |
| *** d0ugal has quit IRC | 13:33 | |
| *** lbragstad has joined #openstack-keystone | 13:33 | |
| *** ChanServ sets mode: +o lbragstad | 13:33 | |
| *** d0ugal has joined #openstack-keystone | 13:34 | |
| *** pcaruana has quit IRC | 13:37 | |
| *** d0ugal has quit IRC | 13:49 | |
| *** aojea_ has quit IRC | 13:50 | |
| *** aojea_ has joined #openstack-keystone | 13:51 | |
| *** mchlumsky_ has quit IRC | 13:54 | |
| *** aojea_ has quit IRC | 13:55 | |
| *** ayoung has quit IRC | 13:57 | |
| *** mchlumsky has joined #openstack-keystone | 14:06 | |
| -openstackstatus- NOTICE: Zuul and Nodepool services are being restarted to migrate them to a new Zookeeper cluster. THis brings us an HA database running on newer servers. | 14:39 | |
| *** jistr|call is now known as jistr | 14:50 | |
| gagehugo | yeah tags were in queens | 14:54 |
| *** tobberydberg has quit IRC | 14:56 | |
| cmurphy | yeah i remember it came after pike by like this much -->| |<-- | 14:57 |
| gagehugo | yup, heh | 14:58 |
| *** devx has quit IRC | 15:04 | |
| *** tobberydberg has joined #openstack-keystone | 15:05 | |
| *** devx has joined #openstack-keystone | 15:05 | |
| *** ebukha has quit IRC | 15:13 | |
| *** tobberydberg has quit IRC | 15:13 | |
| kmalloc | cmurphy: we could probably do a derived thing :P | 15:23 |
| kmalloc | kinda like PBR does for git-versiobns | 15:23 |
| kmalloc | but it might be very magical in sphinx land. | 15:23 |
| cmurphy | heh | 15:23 |
| kmalloc | and that worries me | 15:23 |
| *** tobberydberg has joined #openstack-keystone | 15:25 | |
| -openstackstatus- NOTICE: The Zuul and Nodepool database transition is complete. Changes updated during the Zuul outage may need to be rechecked. | 15:31 | |
| *** erus has joined #openstack-keystone | 15:44 | |
| erus | Hi everybody :) | 15:44 |
| kmalloc | erus: allo | 15:47 |
| * kmalloc queues Labyrinth "Did you say hello", "no I said allo, but close enough" ;) | 15:48 | |
| erus | everything ok? | 15:48 |
| kmalloc | yah, it's just slow to get started some mornings | 15:49 |
| kmalloc | ^_^ | 15:49 |
| erus | that's true :) | 15:49 |
| kmalloc | i think i need to hit coffee #2 and i might be able to get started thinking about code. | 15:50 |
| erus | I just finished my coffee but now I need some food, I'm really hungry :P | 15:51 |
| erus | I have finished a lot of flowcharts, I need a break | 15:52 |
| erus | haha | 15:52 |
| lbragstad | coffee does sound like a good idea... | 15:56 |
| lbragstad | kmalloc https://review.openstack.org/#/c/613364/ contains a fix for the ironic gate | 15:57 |
| kmalloc | lbragstad: yep | 15:58 |
| kmalloc | +1 | 15:58 |
| kmalloc | lbragstad: that one should go out asap. | 15:58 |
| kmalloc | erus: eeeeuuuwww flow charts ;) | 15:58 |
| kmalloc | lbragstad: so... | 15:59 |
| kmalloc | lbragstad: if i get SDK to par with KSC in the near future... you feel good marking ksc as deprecated [officially frozen, no more code unless security fix] | 15:59 |
| kmalloc | this cycle? | 15:59 |
| kmalloc | or within say 90% of par. | 16:00 |
| kmalloc | i already am pushing folks to contribute new things to SDK over ksc. | 16:00 |
| *** itlinux has joined #openstack-keystone | 16:06 | |
| lbragstad | yeah - that seems reasonable | 16:08 |
| kmalloc | i'll propose a doc change (-1 workflow) indicating it's bitrottable | 16:12 |
| kmalloc | and we'll see how far i can get in SDK / OSC in the next week or so | 16:12 |
| kmalloc | but i expect with real focus it can move quick, ksc doesn't really do *that* much | 16:12 |
| kmalloc | (in comparison to the server APIs) | 16:12 |
| cmurphy | hi erus o/ | 16:14 |
| *** gyee has joined #openstack-keystone | 16:16 | |
| *** emine__ has joined #openstack-keystone | 16:21 | |
| *** Emine has quit IRC | 16:24 | |
| *** jhesketh has joined #openstack-keystone | 16:25 | |
| *** mnaser has quit IRC | 16:26 | |
| *** mnaser has joined #openstack-keystone | 16:26 | |
| *** jhesketh_ has quit IRC | 16:27 | |
| knikolla | cmurphy: have you been following things with outreachy? i have not been able to monitor my mail very closely these days. | 16:42 |
| cmurphy | knikolla: yes, i have had several people reach out to me | 16:42 |
| cmurphy | it's a little overwhelming tbh | 16:42 |
| cmurphy | but only one so far for the federation project, that's erus | 16:42 |
| *** imacdonn has quit IRC | 16:42 | |
| *** imacdonn has joined #openstack-keystone | 16:43 | |
| knikolla | cmurphy: did arica reach out to you as well? i just saw an email from yesterday about interest in the federation project | 16:43 |
| cmurphy | knikolla: no i haven't heard from them | 16:44 |
| cmurphy | if you want to forawrd them to me i can handle it | 16:44 |
| openstackgerrit | Merged openstack/keystone master: Trivial: Remove repeated if conditions https://review.openstack.org/613198 | 16:44 |
| cmurphy | they need to record a contribution before they can formally apply so i've been having them get set up with gerrit and then make a 5000->35357 docs fix | 16:44 |
| knikolla | Thanks, I'm a little overwhelmed these days. | 16:45 |
| cmurphy | er 35357->5000 | 16:45 |
| knikolla | cmurphy: just forwarded their email to you | 16:45 |
| cmurphy | thanks | 16:45 |
| knikolla | I'll try to catch up in the following week. Thanks for picking up my slack. | 16:46 |
| cmurphy | no problem | 16:46 |
| *** dnguyen has joined #openstack-keystone | 16:49 | |
| erus | hi cmurphy o/ | 16:51 |
| *** shyamb has joined #openstack-keystone | 16:58 | |
| *** xek has quit IRC | 16:58 | |
| *** xek has joined #openstack-keystone | 16:59 | |
| *** pcaruana has joined #openstack-keystone | 17:03 | |
| *** shyamb has quit IRC | 17:20 | |
| openstackgerrit | Colleen Murphy proposed openstack/python-keystoneclient master: [WIP] Convert functional tests to Zuulv3 https://review.openstack.org/613385 | 17:30 |
| mnaser | good evening cmurphy | 17:35 |
| mnaser | around for a quick application credential question by any chance? :) | 17:35 |
| mnaser | (i'll throw it here anyways) | 17:35 |
| mnaser | why is it that identity:create_application_credential => base.RULE_ADMIN_OR_OWNER | 17:35 |
| mnaser | i have a customer that is trying to experiment (i.e. give swift user role to an app cred user to do things) | 17:36 |
| kmalloc | mnaser: so the idea is admins are allowed to create app-creds (for anyone, iirc), and owner is a check that user_id in the context/app_cred == user_id of the currently authenticated user | 17:42 |
| kmalloc | just looking at the rules. let me check the actual code. | 17:43 |
| mnaser | oh wait | 17:43 |
| mnaser | you're right | 17:43 |
| mnaser | thats not ADMIN_API | 17:43 |
| kmalloc | :) | 17:44 |
| kmalloc | i only know this stuff because i just spent a huge amount of time doing re-working of keystone | 17:44 |
| mnaser | still, customer got: `{"error": {"message": "You are not authorized to perform the requested action: identity:create_application_credential.", "code": 403, "title": "Forbidden"}}` | 17:44 |
| mnaser | so maybe that could be a misleading error | 17:44 |
| kmalloc | well, that is a correct error if the user isn't allowed to do something | 17:45 |
| *** aojea_ has joined #openstack-keystone | 17:45 | |
| kmalloc | hm, let me see if i can do this against vexxhost... i should be able to right? | 17:45 |
| kmalloc | (basic account) | 17:45 |
| mnaser | kmalloc: yep | 17:46 |
| kmalloc | cool | 17:46 |
| kmalloc | give me a moment | 17:46 |
| kmalloc | getting my creds from the password manager so i can snag a token (etc) | 17:46 |
| mnaser | AAAAH | 17:47 |
| mnaser | i think our uuid users have confused my customer. | 17:47 |
| mnaser | they made a request to: https://auth.vexxhost.net/v3/users/xxxxxxxx-xxxx-xxxx-xxxx-blah/application_credentials | 17:48 |
| mnaser | but i guess they should be hitting their real actual user id | 17:48 |
| mnaser | and im guessing keystone is like: no! | 17:48 |
| *** mvkr has quit IRC | 17:50 | |
| *** aojea_ has quit IRC | 17:50 | |
| *** aojea_ has joined #openstack-keystone | 17:50 | |
| kmalloc | ahh | 17:51 |
| kmalloc | yeah | 17:51 |
| kmalloc | that is probably it | 17:51 |
| *** felipemonteiro has quit IRC | 17:52 | |
| *** zzzeek_ has joined #openstack-keystone | 17:59 | |
| cmurphy | mnaser: o/ | 18:02 |
| mnaser | cmurphy: buffer but i think it might have been a brainfart + someone doing something wrong | 18:03 |
| mnaser | :P | 18:03 |
| cmurphy | i think that rule is slightly misleading because i'm not totally sure we even allow admins to create credentials for regular users | 18:03 |
| cmurphy | but owner should defintiely be able to create their own | 18:03 |
| kmalloc | mnaser: ... | 18:09 |
| kmalloc | https://www.irccloud.com/pastebin/BcOVqpPp/ | 18:09 |
| kmalloc | mnaser: can confirm it works just fine against vexxhost ^ | 18:09 |
| kmalloc | mnaser: but i had to introspect the token to get user-id. | 18:10 |
| kmalloc | mnaser: it wasn't straightforward, because the user-names look uuid/guid | 18:10 |
| kmalloc | cmurphy: it looks like code wise we don't prevent admins from creating app_creds for other folks. | 18:11 |
| kmalloc | cmurphy: but i didn't dig THAT deep. | 18:11 |
| kmalloc | i might be totally wrong | 18:11 |
| cmurphy | ¯\_(ツ)_/¯ | 18:13 |
| kmalloc | cmurphy: fwiw, barring my total inability to type, it was trivial to create the app cred from curl :) GJ! | 18:13 |
| cmurphy | lol | 18:13 |
| kmalloc | i think it's probably one of our cleanest interfaces | 18:13 |
| cmurphy | eh i hate that we stuck it in /users | 18:13 |
| kmalloc | yes | 18:14 |
| kmalloc | once we have the next round of cleanup/work done | 18:14 |
| kmalloc | i really want to discuss splitting auth to /auth and catalog to /catalog and really consider v4 for crud operations where we shuffle things and then update SDK to use v4 when it is available | 18:14 |
| kmalloc | (also drop the cruft from v3 we don't encourage people from using) | 18:15 |
| kmalloc | as part of the broker/idp proxy bits where we need to make some clear decisions about $stuff$ | 18:16 |
| cmurphy | hmmm /auth and /catalog separate would mean the sdk has to make two calls to keystone before it can even talk to a service | 18:16 |
| kmalloc | no, you still emit catalog with the auth pass | 18:18 |
| kmalloc | but allow for an explicit "get me my catalog" | 18:18 |
| kmalloc | without needing to validate the token (also useful for unscoped tokens) | 18:18 |
| kmalloc | or even for unauth'd catalog data | 18:18 |
| kmalloc | at the very least, split auth to /auth | 18:19 |
| cmurphy | oh okay | 18:19 |
| kmalloc | and /v3/auth would proxy to /auth behind the scenes in the v3 way so nothing breaks | 18:19 |
| kmalloc | the idea is we can iterate on auth things wihtout touching crud things and vice-versa | 18:19 |
| kmalloc | the pain of v2->v3 was that auth changed | 18:19 |
| kmalloc | a lot | 18:19 |
| kmalloc | i never want to repeat that. | 18:19 |
| cmurphy | the pain of v2->v3 was no one ever properly explained user_domain and project_domain ;) | 18:20 |
| kmalloc | v4 in my mind doesn't implement auth explicitly, auth is a separate concern housed under /v3/auth and /auth (respectively, where /auth gets new features etc) | 18:20 |
| kmalloc | LOL | 18:20 |
| kmalloc | sure. | 18:20 |
| kmalloc | also domains suck | 18:20 |
| kmalloc | but that is something aside | 18:20 |
| kmalloc | cmurphy: realistically if auth hadn't changed dramatically v2->v3 was crud changes. | 18:21 |
| kmalloc | my ultimate goal is auth is a separate concern from crud operations | 18:22 |
| openstackgerrit | Merged openstack/keystone master: Updating doc of unified limit https://review.openstack.org/612226 | 18:26 |
| openstackgerrit | Merged openstack/keystone master: Update third endpoint legacy port for Keystone v3 API https://review.openstack.org/613171 | 18:26 |
| *** bnemec has quit IRC | 18:29 | |
| *** felipemonteiro has joined #openstack-keystone | 18:30 | |
| openstackgerrit | Islam Musleh proposed openstack/keystone master: Update keystone-manage bootstrap port instructions https://review.openstack.org/613163 | 18:32 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Refactor flask domain config resources https://review.openstack.org/613182 | 18:36 |
| *** felipemonteiro has quit IRC | 18:37 | |
| openstackgerrit | Merged openstack/keystone master: Remove useless "clean" file https://review.openstack.org/612954 | 18:39 |
| kmalloc | cmurphy, lbragstad: I'm going to hold on the internal code shuffle on keystone until Stein is more solidified on new stuff | 18:41 |
| kmalloc | e.g. moving things to keystone.subsystem.XXX | 18:42 |
| kmalloc | (managers, backends, etc) | 18:42 |
| cmurphy | o7 | 18:44 |
| lbragstad | wfm | 18:49 |
| *** itlinux has quit IRC | 18:52 | |
| * kmalloc wanders off for a bit | 18:59 | |
| *** itlinux has joined #openstack-keystone | 19:03 | |
| *** imus has joined #openstack-keystone | 19:05 | |
| cmurphy | welcome imus o/ | 19:08 |
| imus | Thanks! | 19:12 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Remove check for disabled v3 https://review.openstack.org/613402 | 19:30 |
| *** lbragstad has quit IRC | 19:43 | |
| *** lbragstad has joined #openstack-keystone | 19:43 | |
| *** ChanServ sets mode: +o lbragstad | 19:43 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Delete administrator federation guide https://review.openstack.org/613408 | 20:00 |
| *** dnguyen has quit IRC | 20:01 | |
| *** irclogbot_1 has joined #openstack-keystone | 20:01 | |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware master: account for services with no endpoints when parsing service catalog https://review.openstack.org/613410 | 20:04 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Delete administrator federation guide https://review.openstack.org/613408 | 20:05 |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware master: Skip the services with no endpoints when parsing service catalog https://review.openstack.org/613410 | 20:05 |
| *** irclogbot_1 has quit IRC | 20:22 | |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware master: Skip the services with no endpoints when parsing service catalog https://review.openstack.org/613410 | 20:27 |
| *** dnguyen has joined #openstack-keystone | 20:31 | |
| *** imacdonn has quit IRC | 20:31 | |
| *** imacdonn has joined #openstack-keystone | 20:32 | |
| *** dnguyen_ has joined #openstack-keystone | 20:34 | |
| *** dnguyen has quit IRC | 20:37 | |
| *** dnguyen_ is now known as dnguyen | 20:37 | |
| *** xek has quit IRC | 20:42 | |
| *** raildo has quit IRC | 20:55 | |
| *** irclogbot_1 has joined #openstack-keystone | 21:15 | |
| *** erus has quit IRC | 21:46 | |
| *** itlinux has quit IRC | 21:52 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Repropose JWT specification for Stein https://review.openstack.org/541903 | 22:02 |
| *** emine__ has quit IRC | 22:24 | |
| mgagne | is there a way to enforce a specific auth method on a per domain basis? | 22:35 |
| *** mvkr has joined #openstack-keystone | 22:35 | |
| *** aojea_ has quit IRC | 22:37 | |
| *** erus has joined #openstack-keystone | 22:45 | |
| kmalloc | mgagne: no. | 23:01 |
| kmalloc | you can set some values in the MFA rules for specific users but that is largely undocumented | 23:01 |
| mgagne | I'm trying to test that feature. But would really like to have it per domain ;) | 23:02 |
| kmalloc | it was a long term goal to consider expanding it to a domain default level | 23:02 |
| kmalloc | but for now we haven't approached that | 23:02 |
| kmalloc | i think enhancements to that system will come after auth receipts | 23:02 |
| mgagne | thanks for the info, I'll see what I can do from there. ;) | 23:04 |
| *** dnguyen has quit IRC | 23:47 | |
| *** gyee has quit IRC | 23:57 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!