| *** imacdonn has quit IRC | 01:03 | |
| *** imacdonn has joined #openstack-keystone | 01:03 | |
| *** dave-mccowan has quit IRC | 01:50 | |
| *** gyee has quit IRC | 01:59 | |
| *** mhen has quit IRC | 02:21 | |
| *** mhen has joined #openstack-keystone | 02:22 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 02:28 |
|---|---|---|
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Deprecate the templated catalog https://review.openstack.org/482714 | 02:30 |
| openstackgerrit | Leehom Li proposed openstack/keystonemiddleware master: Make sure audit middleware use own context https://review.openstack.org/626226 | 02:49 |
| openstackgerrit | Merged openstack/keystoneauth master: Use template for lower-constraints https://review.openstack.org/626691 | 03:14 |
| *** lbragstad has quit IRC | 03:52 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 04:06 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Deprecate the templated catalog https://review.openstack.org/482714 | 04:06 |
| *** shyamb has joined #openstack-keystone | 04:44 | |
| *** shyamb has quit IRC | 05:40 | |
| *** jackivanov has joined #openstack-keystone | 05:50 | |
| *** shyamb has joined #openstack-keystone | 06:16 | |
| *** shyamb has quit IRC | 06:43 | |
| *** shyamb has joined #openstack-keystone | 06:43 | |
| *** shyamb has quit IRC | 06:59 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Add openstack_groups to assertion https://review.openstack.org/588211 | 07:15 |
| *** rcernin has quit IRC | 07:16 | |
| *** pcaruana has joined #openstack-keystone | 08:19 | |
| *** dmellado has quit IRC | 08:44 | |
| *** dmellado has joined #openstack-keystone | 08:46 | |
| *** shyamb has joined #openstack-keystone | 09:07 | |
| *** shyamb has quit IRC | 09:19 | |
| *** shyamb has joined #openstack-keystone | 09:32 | |
| *** gmann is now known as gmann_pto | 09:43 | |
| *** shyamb has quit IRC | 09:53 | |
| *** shyamb has joined #openstack-keystone | 09:54 | |
| *** yan0s has joined #openstack-keystone | 09:55 | |
| *** amoralej is now known as amoralej|afk | 10:31 | |
| *** shyamb has quit IRC | 10:47 | |
| *** annp has quit IRC | 10:52 | |
| *** shyamb has joined #openstack-keystone | 11:13 | |
| *** shyamb has quit IRC | 11:23 | |
| *** shyamb has joined #openstack-keystone | 11:23 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Add openstack_groups to assertion https://review.openstack.org/588211 | 11:32 |
| pas-ha | Hi all, how can I list my own role assignments from API/openstackclient? The openstackclient seems to support this (--auth-user --auth-project toggles) but with default policies it seems only to work for admin user, for regular user I get 403. | 11:32 |
| *** ileixe has joined #openstack-keystone | 11:41 | |
| *** jonher has quit IRC | 11:46 | |
| *** shyamb has quit IRC | 12:00 | |
| *** raildo has joined #openstack-keystone | 12:02 | |
| *** jonher has joined #openstack-keystone | 12:07 | |
| *** amoralej|afk is now known as amoralej | 12:12 | |
| *** shyamb has joined #openstack-keystone | 12:15 | |
| *** ileixe has quit IRC | 12:46 | |
| *** nehaalhat_ has quit IRC | 12:49 | |
| *** tobias-urdin has joined #openstack-keystone | 12:50 | |
| tobias-urdin | is there any security issue with leaving old fernet keys in the keys dir if max_active_keys is for example 3? or does keystone ignore all old keys if somebody tries to auth | 12:55 |
| tobias-urdin | yeah, seems like it loads all keys | 12:59 |
| *** shyamb has quit IRC | 13:05 | |
| *** amoralej is now known as amoralej|lunch | 13:42 | |
| *** lbragstad has joined #openstack-keystone | 13:58 | |
| *** ChanServ sets mode: +o lbragstad | 13:58 | |
| yan0s | Hi in the keystone shibboleth integration I'm missing the part where I get the Service Provider metadata and put it to the IDP | 13:59 |
| yan0s | I'm using this link: https://docs.openstack.org/keystone/latest/admin/federation/federated_identity.html | 14:00 |
| *** imus has joined #openstack-keystone | 14:11 | |
| *** amoralej|lunch is now known as amoralej | 14:24 | |
| *** lbragstad has quit IRC | 14:31 | |
| *** lbragstad has joined #openstack-keystone | 14:33 | |
| *** ChanServ sets mode: +o lbragstad | 14:33 | |
| lbragstad | yan0s are you specifically referencing this? https://docs.openstack.org/keystone/latest/admin/federation/federated_identity.html#configuring-shibboleth2-xml | 14:37 |
| yan0s | lbragstad: Following these instructions when I reach this step: curl -X GET -D - http://10.0.0.5:5000/v3/OS-FEDERATION/identity_providers/myidp/protocols/saml2/auth | 14:47 |
| yan0s | I get the error: "Unknown or Unusable Identity Provider" and "MetadataException: Unable to locate metadata for identity provider" | 14:48 |
| lbragstad | something tells me there might be something you're missing from https://docs.openstack.org/keystone/latest/admin/federation/federated_identity.html#configuring-shibboleth2-xml | 14:54 |
| *** jonher_ has joined #openstack-keystone | 14:55 | |
| *** jonher has quit IRC | 14:59 | |
| *** jonher_ is now known as jonher | 14:59 | |
| yan0s | Sorry it was a networking issue... | 15:08 |
| *** sayalilunkad has quit IRC | 15:13 | |
| lbragstad | dang networks | 15:15 |
| *** idlemind has quit IRC | 15:37 | |
| *** jackivanov has quit IRC | 15:47 | |
| *** jackivanov has joined #openstack-keystone | 15:47 | |
| *** jackivanov has quit IRC | 15:53 | |
| *** bnemec is now known as bnemerryxmas | 16:08 | |
| *** pcaruana has quit IRC | 16:18 | |
| *** imus has quit IRC | 16:20 | |
| *** imus has joined #openstack-keystone | 16:26 | |
| *** jackivanov has joined #openstack-keystone | 16:27 | |
| yan0s | I'm still having the same issue with a new IDP on the same network | 16:27 |
| yan0s | is it a problem that I use http? | 16:27 |
| yan0s | instead of https? | 16:27 |
| *** gyee has joined #openstack-keystone | 16:40 | |
| *** mchlumsky has quit IRC | 16:42 | |
| yan0s | ok fixed my bad | 16:43 |
| *** yan0s has quit IRC | 16:43 | |
| *** jackivanov has quit IRC | 16:56 | |
| *** sapd1__ has joined #openstack-keystone | 17:11 | |
| *** sapd1_ has quit IRC | 17:12 | |
| *** stuartgr has left #openstack-keystone | 17:24 | |
| *** mvkr has quit IRC | 17:38 | |
| cmurphy | thanks for covering the update lbragstad | 18:02 |
| *** amoralej is now known as amoralej|off | 18:05 | |
| lbragstad | cmurphy no problem | 18:05 |
| *** jackivanov has joined #openstack-keystone | 18:09 | |
| *** amoralej|off has quit IRC | 18:15 | |
| *** vishakha has quit IRC | 18:30 | |
| *** jackivanov has quit IRC | 18:41 | |
| *** mchlumsky has joined #openstack-keystone | 18:45 | |
| *** tristanC has quit IRC | 19:17 | |
| *** tristanC has joined #openstack-keystone | 19:17 | |
| *** jackivanov has joined #openstack-keystone | 20:00 | |
| *** edmondsw has quit IRC | 20:10 | |
| *** itlinux has joined #openstack-keystone | 20:22 | |
| *** dave-mccowan has joined #openstack-keystone | 20:26 | |
| *** jackivanov has quit IRC | 20:32 | |
| *** jackivanov has joined #openstack-keystone | 20:48 | |
| *** jackivanov has quit IRC | 20:53 | |
| *** jackivanov has joined #openstack-keystone | 21:01 | |
| *** raildo has quit IRC | 21:12 | |
| *** kencjohnston has quit IRC | 21:29 | |
| *** jackivanov has quit IRC | 21:35 | |
| *** imus has quit IRC | 21:44 | |
| *** mvkr has joined #openstack-keystone | 22:37 | |
| *** lbragstad has quit IRC | 22:50 | |
| *** jackivanov has joined #openstack-keystone | 22:54 | |
| *** aojea has joined #openstack-keystone | 22:56 | |
| *** aojea has quit IRC | 22:56 | |
| -openstackstatus- NOTICE: the gerrit service on review.openstack.org is being restarted to pick up new configuration changes, and will return momentarily | 22:56 | |
| *** jackivanov has quit IRC | 23:26 | |
| *** dave-mccowan has quit IRC | 23:26 | |
| *** dims has quit IRC | 23:33 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Clarify location for HTTPD instructions https://review.openstack.org/613670 | 23:55 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!