| *** hoonetorg has quit IRC | 00:35 | |
| *** hoonetorg has joined #openstack-keystone | 00:37 | |
| *** hoonetorg has quit IRC | 00:40 | |
| *** hoonetorg has joined #openstack-keystone | 00:41 | |
| *** prashkre has joined #openstack-keystone | 01:21 | |
| *** prashkre has quit IRC | 01:44 | |
| *** prashkre has joined #openstack-keystone | 01:45 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 01:49 | |
| *** Dinesh_Bhor has quit IRC | 01:55 | |
| *** prashkre has quit IRC | 01:59 | |
| *** prashkre has joined #openstack-keystone | 01:59 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 02:04 | |
| *** prashkre has quit IRC | 02:22 | |
| *** prashkre has joined #openstack-keystone | 02:22 | |
| *** prashkre has quit IRC | 02:39 | |
| *** Dinesh_Bhor has quit IRC | 03:42 | |
| *** dklyle has quit IRC | 03:45 | |
| *** david-lyle has joined #openstack-keystone | 03:45 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 04:01 | |
| *** prashkre has joined #openstack-keystone | 04:54 | |
| *** links has joined #openstack-keystone | 05:56 | |
| *** sapd1 has joined #openstack-keystone | 06:11 | |
| *** Dinesh_Bhor has quit IRC | 06:25 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 06:28 | |
| *** spsurya has joined #openstack-keystone | 06:39 | |
| *** sapd1 has quit IRC | 06:39 | |
| *** sapd1 has joined #openstack-keystone | 07:04 | |
| *** pcaruana has joined #openstack-keystone | 07:20 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix py36 CI https://review.openstack.org/618954 | 07:23 |
|---|---|---|
| *** pcaruana has quit IRC | 07:34 | |
| *** pcaruana has joined #openstack-keystone | 07:40 | |
| *** artem_vasilyev has joined #openstack-keystone | 07:42 | |
| *** prashkre has quit IRC | 07:50 | |
| openstackgerrit | Merged openstack/keystone master: Add scope documentation for service developers https://review.openstack.org/554727 | 07:57 |
| *** prashkre has joined #openstack-keystone | 08:37 | |
| *** sapd1 has quit IRC | 08:37 | |
| *** sapd1 has joined #openstack-keystone | 08:37 | |
| *** amoralej|off is now known as amoralej | 08:40 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix py36 CI https://review.openstack.org/618954 | 08:54 |
| *** lbragstad has joined #openstack-keystone | 08:54 | |
| *** ChanServ sets mode: +o lbragstad | 08:54 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Document user options https://review.openstack.org/618823 | 09:00 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update api-ref to include user options https://review.openstack.org/603319 | 09:00 |
| *** sapd1 has quit IRC | 09:22 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix py36 CI https://review.openstack.org/618954 | 09:25 |
| *** links has quit IRC | 09:26 | |
| *** sapd1 has joined #openstack-keystone | 09:49 | |
| *** sapd1 has quit IRC | 09:54 | |
| *** shrasool has joined #openstack-keystone | 10:02 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix py36 CI https://review.openstack.org/618954 | 10:22 |
| *** sapd1 has joined #openstack-keystone | 10:26 | |
| *** sapd1 has quit IRC | 10:31 | |
| wxy-xiyuan | lbragstad: Sorry that I can not attend today's weekly meeting since our community is in power outage. For the patch https://review.openstack.org/618954, feel free to take it over if need. Thanks. | 10:48 |
| lbragstad | wxy-xiyuan sounds good - thanks for the heads up! | 10:49 |
| *** Dinesh_Bhor has quit IRC | 10:56 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 10:58 | |
| *** Dinesh_Bhor has quit IRC | 10:59 | |
| *** shrasool has quit IRC | 11:07 | |
| *** shrasool has joined #openstack-keystone | 11:08 | |
| knikolla | just missed my flight :( | 11:24 |
| *** xek_ has joined #openstack-keystone | 11:24 | |
| *** xek__ has quit IRC | 11:27 | |
| *** prashkre has quit IRC | 11:32 | |
| lbragstad | out of germany?! | 11:41 |
| *** prashkre has joined #openstack-keystone | 11:53 | |
| *** raildo has joined #openstack-keystone | 12:04 | |
| *** prashkre has quit IRC | 12:06 | |
| *** xek_ is now known as xek | 12:06 | |
| *** amoralej is now known as amoralej|lunch | 12:08 | |
| *** shrasool has quit IRC | 12:25 | |
| *** prashkre has joined #openstack-keystone | 12:30 | |
| *** prashkre_ has joined #openstack-keystone | 12:35 | |
| *** prashkre has quit IRC | 12:37 | |
| *** prashkre_ has quit IRC | 12:47 | |
| *** prashkre has joined #openstack-keystone | 12:50 | |
| *** prashkre has quit IRC | 12:57 | |
| *** prashkre_ has joined #openstack-keystone | 12:57 | |
| *** vishakha has quit IRC | 13:07 | |
| *** jrist has quit IRC | 13:11 | |
| *** jrist has joined #openstack-keystone | 13:13 | |
| knikolla | lbragstad: yes. deutsche bahn messed up. the express train to the airport had a 1hr delay due to a disabled train blocking the way. | 13:16 |
| lbragstad | bummer - when do you think you'll be able to make it out? | 13:16 |
| knikolla | i booked a different flight which departs in 5hrs and makes it to boston tomorrow afternoon | 13:17 |
| *** prashkre_ has quit IRC | 13:17 | |
| knikolla | this expense report will be... tricky... to say the least. | 13:18 |
| lbragstad | well - hopefully you'll make it home before heavy holiday travel starts | 13:18 |
| *** frickler has joined #openstack-keystone | 13:24 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update api-ref to include user options https://review.openstack.org/603319 | 13:25 |
| *** erus has joined #openstack-keystone | 13:26 | |
| erus | Hello everyone :) | 13:26 |
| knikolla | hello :) | 13:27 |
| lbragstad | so - PSA | 13:27 |
| lbragstad | the python 3.6 gate is broken in keystone | 13:28 |
| lbragstad | wxy-xiyuan has a patch to get it straightened out https://review.openstack.org/#/c/618954/ | 13:28 |
| lbragstad | if anyone has some time to look, i'll see if i can get it passing lower-constraints | 13:29 |
| lbragstad | but any code changes are going to fail until that's fixed (if you've been wondering why rechecks aren't working) | 13:30 |
| *** amoralej|lunch is now known as amoralej | 13:32 | |
| frickler | the federation functional jobs are failing on Bionic because some packages aren't installable. I already pinged jamespage from Canonical about it, maybe someone from keystone interested in this topic can help https://bugs.launchpad.net/keystone/+bug/1802901 | 13:38 |
| openstack | Launchpad bug 1802901 in OpenStack Identity (keystone) "Federation functional job failing on Bionic" [Undecided,New] | 13:38 |
| lbragstad | interesting - i wonder what's referencing libxmltooling7 | 13:41 |
| * lbragstad bets on pysaml | 13:41 | |
| lbragstad | oh - it's the mod-shib plugin | 13:42 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Use pycodestyle in place of pep8 https://review.openstack.org/618954 | 13:44 |
| artem_vasilyev | Hi, review would be appreciated: https://review.openstack.org/#/c/618095/ And is it possible to backport this feature to Queens, or only bugs are backported? | 13:59 |
| *** erus has quit IRC | 13:59 | |
| lbragstad | since that's a borderline feature - i doubt we'll be able to backport it to queens | 14:00 |
| artem_vasilyev | thanks for the clarification | 14:01 |
| *** ign0tus has joined #openstack-keystone | 14:02 | |
| *** erus has joined #openstack-keystone | 14:12 | |
| *** shrasool has joined #openstack-keystone | 14:17 | |
| *** ign0tus has quit IRC | 14:51 | |
| *** artem_vasilyev has quit IRC | 14:54 | |
| *** prashkre has joined #openstack-keystone | 15:08 | |
| *** edmondsw has joined #openstack-keystone | 15:14 | |
| *** prashkre has quit IRC | 15:33 | |
| *** dave-mccowan has joined #openstack-keystone | 15:41 | |
| *** prashkre has joined #openstack-keystone | 15:43 | |
| kmalloc | lbragstad: yeah that isn't something i'd backport | 15:49 |
| * lbragstad refills coffee before the meeting | 15:49 | |
| kmalloc | hm. | 15:50 |
| *** itlinux has quit IRC | 15:57 | |
| *** shrasool has quit IRC | 15:57 | |
| *** prashkre has quit IRC | 16:04 | |
| *** prashkre has joined #openstack-keystone | 16:04 | |
| *** prashkre has quit IRC | 16:12 | |
| *** prashkre has joined #openstack-keystone | 16:12 | |
| *** shrasool has joined #openstack-keystone | 16:13 | |
| *** shrasool has quit IRC | 16:28 | |
| *** ayoung has joined #openstack-keystone | 16:38 | |
| *** itlinux has joined #openstack-keystone | 16:43 | |
| *** prashkre has quit IRC | 16:50 | |
| *** prashkre_ has joined #openstack-keystone | 16:50 | |
| tobias-urdin | anybody here that could help me out, not sure if i found a bug in keystoneclient or horizon is doing it wrong | 16:54 |
| tobias-urdin | when changing password this is called https://github.com/openstack/python-keystoneclient/blob/3.17.0/keystoneclient/v3/users.py#L224 | 16:54 |
| tobias-urdin | but results in "POST /v3/users/None/password HTTP/1.1" 401 114 "-" "python-keystoneclient" | 16:54 |
| tobias-urdin | which is obviously wrong, this is where horizon calls it https://github.com/openstack/horizon/blob/14.0.0/openstack_dashboard/api/keystone.py#L573 | 16:54 |
| tobias-urdin | i logged the "client.user_id" value and it was the correct user id | 16:55 |
| tobias-urdin | i suspect it maybe should be client.client.user_id which also is kind of weird | 16:55 |
| ayoung | tobias-urdin, looks like that "client" is really wrapped here https://github.com/openstack/horizon/blob/14.0.0/openstack_dashboard/api/keystone.py#L137 | 16:57 |
| ayoung | tobias-urdin, feels like a bug in Horizon, but client should also not do the None thing | 16:58 |
| tobias-urdin | ah thx, i'll dig some more | 16:58 |
| kmalloc | ayoung: ++ | 16:59 |
| ayoung | tobias-urdin, it might be pulled out of the cache, but if not, it is created here: https://github.com/openstack/horizon/blob/14.0.0/openstack_dashboard/api/keystone.py#L199 | 16:59 |
| ayoung | tobias-urdin, if you hack it to be client.client.user_id does it work? | 17:01 |
| ayoung | kmalloc, is that at all safe? Seems like a race condition waiting to happen? Pulling the client out of cache? I guess there is one per user-session? | 17:02 |
| kmalloc | hmm | 17:02 |
| tobias-urdin | client.client.user_id raised exception with "Unknown Attribute: client" | 17:02 |
| kmalloc | it should be one per user-session | 17:02 |
| ayoung | we should not be updating it post creation whatever | 17:02 |
| kmalloc | if it is anything else, i'd worry. | 17:03 |
| ayoung | tobias-urdin, OK, and you said you logged it an it was the right value? Seems like maybe setting it on the client is a hack, not the right approach. | 17:03 |
| kmalloc | i am just not 100% sure on the django-isms. | 17:03 |
| tobias-urdin | i logged client.user_id which is set by that request.user.id and that was the correct user id | 17:04 |
| *** amoralej is now known as amoralej|off | 17:04 | |
| ayoung | still, that is old code | 17:05 |
| ayoung | e027878791 openstack_dashboard/api/keystone.py (Zhenguo Niu 2013-12-04 16:03:56 +0800 569) client.user_id = request.user.id | 17:05 |
| ayoung | interesting...that was not the original code. THe update of the user_id happened only for V2, but was moved to support V3 | 17:06 |
| *** shrasool has joined #openstack-keystone | 17:07 | |
| ayoung | tobias-urdin, try commenting out that explicit set. It might be messing with the client | 17:07 |
| ayoung | and, we should not be setting the user_id on the client post creation. | 17:07 |
| tobias-urdin | "POST /v3/users/None/password HTTP/1.1" 401 114 "-" "python-keystoneclient" | 17:10 |
| tobias-urdin | no luck | 17:10 |
| tobias-urdin | here is the trace: http://paste.openstack.org/show/735822/ | 17:12 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Use pycodestyle in place of pep8 https://review.openstack.org/618954 | 17:16 |
| lbragstad | ^ that should get the py36 gate passing | 17:16 |
| *** shrasool has quit IRC | 17:20 | |
| tobias-urdin | ayoung: kmalloc thanks for helping out, got words from the #openstack-horizon channel that it was fixed in https://review.openstack.org/#/q/Idb296d1b10fa02a0b4852e96fe8cb2bdd70380e0 | 17:20 |
| tobias-urdin | it just isn't released yet... :| sorry for wasting some time | 17:21 |
| ayoung | tobias-urdin, no problem. And that is the wrong place to put the fix IMNSHO | 17:21 |
| ayoung | it should be back on the client creation code...lets see why it wasn't | 17:22 |
| ayoung | client.users.client.session.auth.user_id = request.user.id | 17:22 |
| tobias-urdin | seems like they were aware it was a bad solutions though | 17:23 |
| ayoung | client.users.client.session.auth.user_id = request.user.id | 17:24 |
| ayoung | um | 17:24 |
| ayoung | keystone_session = session.Session(auth=token_auth, | 17:24 |
| ayoung | original_ip=remote_addr, | 17:24 |
| ayoung | verify=verify) | 17:24 |
| ayoung | conn = client_version['client'].Client(session=keystone_session, | 17:24 |
| ayoung | debug=settings.DEBUG) | 17:24 |
| ayoung | auth should have the user_id in it, as it is token_auth | 17:24 |
| ayoung | they are doing token_auth... | 17:27 |
| *** tobias-urdin is now known as tobias-urdin_afk | 17:27 | |
| ayoung | kmalloc, ^^ they are using token-endpoint from KSA. the comment there says "This is really only useful for testing and in certain CLI cases where you | 17:30 |
| ayoung | have a known endpoint and admin token that you want to use." | 17:30 |
| ayoung | but we are not using an admin_token to change password, we are using the users token, which is why they are setting the user_id | 17:30 |
| *** sapd1 has joined #openstack-keystone | 17:31 | |
| ayoung | should they be using a different auth plugin, like v3/token instead? | 17:31 |
| ayoung | or...calling get_auth_ref off that? | 17:32 |
| ayoung | tobias-urdin_afk, I know you want to be done with this, but I would ask that, since you have a cluster set up, could you try one more thing: | 17:33 |
| ayoung | in the keystoneclient function, instead of token_auth = token_endpoint.Token(endpoint=endpoint, | 17:34 |
| ayoung | token=token_id) | 17:34 |
| ayoung | do | 17:34 |
| ayoung | token=token_id).auth_ref | 17:34 |
| ayoung | meh forget it | 17:34 |
| ayoung | it should do that implicitly, I think | 17:34 |
| *** sapd1 has quit IRC | 17:35 | |
| ayoung | oh...and that gives "None" anyway | 17:35 |
| *** prashkre_ has quit IRC | 17:35 | |
| *** lbragstad has quit IRC | 17:38 | |
| *** lbragstad has joined #openstack-keystone | 17:41 | |
| *** ChanServ sets mode: +o lbragstad | 17:41 | |
| lbragstad | i have a few oslo reviews if people are interested | 17:46 |
| lbragstad | https://review.openstack.org/#/c/613635/ | 17:46 |
| lbragstad | and https://review.openstack.org/#/c/611443/ | 17:47 |
| lbragstad | which should help us get back on track with the policy changes | 17:47 |
| kmalloc | ayoung: probably | 17:48 |
| ayoung | kmalloc, we need a jamielennox clone | 17:49 |
| kmalloc | except even with jamielennox a lot of this didn't happen | 17:49 |
| ayoung | lbragstad, um I think that needs to be project_domain_id | 17:49 |
| ayoung | lbragstad, correction | 17:50 |
| ayoung | I think that needs to be mutually exclusive with project_domain_id as well as project_name | 17:50 |
| lbragstad | domain_id is for domain scoped tokens | 17:50 |
| ayoung | lbragstad, right | 17:50 |
| lbragstad | project_domain_id is only present for project-scoped tokens | 17:51 |
| ayoung | and it should only be set either/or | 17:51 |
| lbragstad | you can't get a token scoped to both a project and domain | 17:51 |
| lbragstad | so aren't they already mutually exclusive? | 17:51 |
| ayoung | But we set both there....I'm wondering if there is a proble, | 17:51 |
| ayoung | maybe not | 17:51 |
| lbragstad | well - those are populated based on the env | 17:52 |
| *** shrasool has joined #openstack-keystone | 17:52 | |
| ayoung | god I hate domains | 17:52 |
| lbragstad | which should be done by ksm | 17:52 |
| ayoung | and we need this only for Keystone, right? | 17:52 |
| ayoung | right now, no one can enforce policy on domain scoped tokens because it is not in context | 17:52 |
| ayoung | I kinda like that | 17:53 |
| lbragstad | well - it'll set the context.domain_id attribute for anyone that is passing a domain-scoped token to a service using oslo.context | 17:53 |
| ayoung | lbragstad, you are making this change explicitly for Keystone, right? So it can use these from middleware in our policy? | 17:54 |
| kmalloc | ayoung: you uploading the slides for our talk? | 17:54 |
| ayoung | kmalloc, done | 17:54 |
| kmalloc | k thnx | 17:54 |
| kmalloc | :) | 17:54 |
| lbragstad | i'm going to be using it in keystone, yes | 17:54 |
| ayoung | I just linked to google slides | 17:54 |
| ayoung | AH, CRUD... | 17:55 |
| ayoung | NO One can access, and I don't think I can open it up | 17:55 |
| lbragstad | https://review.openstack.org/#/c/611179/9 uses it | 17:56 |
| lbragstad | (that patch is only failing because we need new versions of oslo.context and oslo.policy) | 17:56 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Pass context objects to policy enforcement https://review.openstack.org/605539 | 17:57 |
| ayoung | lbragstad, I get it, And I like what you are doing, and I approve. And I think we are going to pay for this. No good deed goes unpunished. Someone out there will start using domain scoped tokens. But, so be it | 17:57 |
| lbragstad | damned if you do and damned if you don't | 17:58 |
| ayoung | lbragstad, I can only +1 context. But I did | 17:58 |
| lbragstad | appreciate it | 17:58 |
| ayoung | I think moguimar, can +2 | 17:59 |
| ayoung | bug jamielennox tongiht, too, I think | 17:59 |
| *** sapd1 has joined #openstack-keystone | 18:01 | |
| *** sapd1 has quit IRC | 18:06 | |
| *** jrist has quit IRC | 18:22 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system reader role in domains API https://review.openstack.org/605485 | 18:33 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system member role in domains API https://review.openstack.org/605849 | 18:33 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system admin role in domains API https://review.openstack.org/605850 | 18:33 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow domain users to access the GET domain API https://review.openstack.org/605851 | 18:33 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow project users to retrieve domains https://review.openstack.org/605871 | 18:33 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove domain policies from policy.v3cloudsample.json https://review.openstack.org/605876 | 18:33 |
| *** tobias-urdin_afk is now known as tobias-urdin | 18:38 | |
| *** pcaruana has quit IRC | 18:47 | |
| lbragstad | question | 18:50 |
| *** sapd1 has joined #openstack-keystone | 18:50 | |
| lbragstad | if we're removing https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json#L13-L17 | 18:51 |
| lbragstad | s/if// | 18:51 |
| lbragstad | thoughts on requiring a bug for that? | 18:51 |
| lbragstad | i mean, someone *could* be using that for policies | 18:51 |
| *** sapd1 has quit IRC | 18:56 | |
| *** jrist has joined #openstack-keystone | 19:10 | |
| *** amoralej|off is now known as amoralej | 19:18 | |
| *** jrist has quit IRC | 19:27 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add region protection tests for system readers https://review.openstack.org/619085 | 20:02 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update region support for system member scopes https://review.openstack.org/619086 | 20:02 |
| lbragstad | https://review.openstack.org/#/c/618954/6 is passing | 20:05 |
| *** sapd1 has joined #openstack-keystone | 20:13 | |
| gagehugo | lbragstad: lgtm | 20:17 |
| *** sapd1 has quit IRC | 20:18 | |
| *** jrist has joined #openstack-keystone | 20:23 | |
| lbragstad | thanks gagehugo | 20:25 |
| lbragstad | wrapping it up for today, i might be on later tonight though | 20:25 |
| *** sapd1 has joined #openstack-keystone | 20:34 | |
| *** sapd1 has quit IRC | 20:38 | |
| *** itlinux has quit IRC | 20:39 | |
| kmalloc | lbragstad: we should plan to remove it | 20:45 |
| kmalloc | lbragstad: i don't think we can for now | 20:46 |
| kmalloc | lbragstad: we didn't communicate it was going away/will no longer be maintained | 20:46 |
| *** david-lyle is now known as dklyle | 20:46 | |
| *** raildo has quit IRC | 20:48 | |
| *** AJaeger has joined #openstack-keystone | 20:54 | |
| AJaeger | keystone team, could you import your rocky translations, please? https://review.openstack.org/617231 | 20:54 |
| *** shrasool has quit IRC | 21:00 | |
| kmalloc | AJaeger: done | 21:08 |
| AJaeger | thanks, kmalloc | 21:09 |
| *** AJaeger has left #openstack-keystone | 21:10 | |
| *** itlinux has joined #openstack-keystone | 21:13 | |
| *** dave-mccowan has quit IRC | 21:28 | |
| *** erus has quit IRC | 21:34 | |
| openstackgerrit | Shuayb Popoola proposed openstack/keystone master: --bootstrap-password's default changed from 'none' to 'password' https://review.openstack.org/619101 | 21:34 |
| *** rcernin has joined #openstack-keystone | 21:38 | |
| *** rafaelweingartne has joined #openstack-keystone | 21:55 | |
| rafaelweingartne | Hello folks | 21:55 |
| rafaelweingartne | oes OpenStack (Keystone) have an URL such as "/auth/realms/master/protocol/saml/descriptor"in Keycloak where we can retrieve the metadata of the provider? | 21:55 |
| rafaelweingartne | Does* | 21:56 |
| *** mchlumsky has quit IRC | 22:00 | |
| rafaelweingartne | Does OpenStack (Keystone) have an URL such as "/auth/realms/master/protocol/saml/descriptor"in Keycloak where we can retrieve the metadata of the provider? | 22:05 |
| *** mchlumsky has joined #openstack-keystone | 22:11 | |
| rafaelweingartne | Does OpenStack (Keystone) have an URL such as "/auth/realms/master/protocol/saml/descriptor"in Keycloak where we can retrieve the metadata of the provider? | 22:18 |
| *** erus has joined #openstack-keystone | 22:26 | |
| openstackgerrit | Shuayb Popoola proposed openstack/keystone master: Fix --bootstrap-password's default password error https://review.openstack.org/619101 | 22:32 |
| rafaelweingartne | Does OpenStack (Keystone) have an URL such as "/auth/realms/master/protocol/saml/descriptor"in Keycloak where we can retrieve the metadata of the provider? | 22:38 |
| *** imacdonn has quit IRC | 22:42 | |
| *** imacdonn has joined #openstack-keystone | 22:42 | |
| *** itlinux has quit IRC | 22:44 | |
| openstackgerrit | Merged openstack/keystone master: Use pycodestyle in place of pep8 https://review.openstack.org/618954 | 22:45 |
| jamielennox | ayoung a jamielennox clone is a lot of matter - maybe start with someone smaller? | 23:02 |
| *** mugsie has quit IRC | 23:06 | |
| rafaelweingartne | Does OpenStack (Keystone) have an URL such as "/auth/realms/master/protocol/saml/descriptor"in Keycloak where we can retrieve the metadata of the provider? | 23:16 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!