Thursday, 2019-05-16

*** gyee has quit IRC00:36
*** xek has quit IRC00:37
*** awalende has joined #openstack-keystone00:57
*** NM has joined #openstack-keystone00:57
*** NM has quit IRC00:59
*** d34dh0r53 has joined #openstack-keystone01:01
*** awalende has quit IRC01:02
*** lbragstad has quit IRC01:42
*** lbragstad has joined #openstack-keystone01:51
*** whoami-rajat has joined #openstack-keystone02:06
*** dklyle has joined #openstack-keystone02:14
*** lbragstad has quit IRC02:40
*** lbragstad has joined #openstack-keystone02:43
joshualyle#thanks cmurphy for your help with debugging ldap setup today02:47
openstackstatusjoshualyle: Added your thanks to Thanks page (https://wiki.openstack.org/wiki/Thanks)02:47
*** joshualyle has quit IRC03:06
openstackgerritzhangboye proposed openstack/keystone master: Cap sphinx for py2 to match global requirements  https://review.opendev.org/65942903:41
*** vishakha has joined #openstack-keystone04:09
openstackgerritVishakha Agarwal proposed openstack/keystone master: WIP: Remove [signing] config  https://review.opendev.org/65943404:41
*** _d34dh0r53_ has joined #openstack-keystone04:55
*** lbragstad has quit IRC04:59
*** _d34dh0r53_ has quit IRC05:08
*** shyamb has joined #openstack-keystone05:08
*** cloudkiller has joined #openstack-keystone05:11
*** _d34dh0r53_ has joined #openstack-keystone05:11
*** shyamb has quit IRC05:35
*** shyamb has joined #openstack-keystone05:41
*** shyam89 has joined #openstack-keystone06:07
*** shyamb has quit IRC06:07
*** shyam89 has quit IRC06:29
*** shyamb has joined #openstack-keystone06:40
*** xek has joined #openstack-keystone06:54
openstackgerritVishakha Agarwal proposed openstack/keystone master: WIP: Remove [signing] config  https://review.opendev.org/65943406:54
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove [signing] config  https://review.opendev.org/65943406:56
*** rcernin has quit IRC07:01
*** starborn has joined #openstack-keystone07:03
*** openstackgerrit has quit IRC07:03
*** tesseract has joined #openstack-keystone07:05
*** jaosorior has quit IRC07:06
*** pcaruana has joined #openstack-keystone07:13
*** xek has quit IRC07:21
*** awalende has joined #openstack-keystone07:49
*** tesseract has quit IRC07:52
*** tesseract has joined #openstack-keystone07:52
*** shyamb has quit IRC08:01
*** awalende_ has joined #openstack-keystone08:15
*** awalend__ has joined #openstack-keystone08:18
*** awalende has quit IRC08:19
*** awalende_ has quit IRC08:20
*** awalende has joined #openstack-keystone08:21
*** awalend__ has quit IRC08:24
*** starborn has quit IRC08:29
*** tkajinam has quit IRC08:32
*** starborn has joined #openstack-keystone08:33
*** openstackgerrit has joined #openstack-keystone08:39
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove [signing] config  https://review.opendev.org/65943408:39
*** shyamb has joined #openstack-keystone08:55
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove [token]/ infer_roles  https://review.opendev.org/65950008:56
*** rabel has quit IRC09:03
*** starborn has quit IRC09:08
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove [token]/ infer_roles  https://review.opendev.org/65950009:13
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove [token]/ infer_roles  https://review.opendev.org/65950009:15
*** rabel has joined #openstack-keystone09:16
*** starborn has joined #openstack-keystone09:37
*** yuxin_ has quit IRC10:08
*** shyamb has quit IRC10:10
*** awalende_ has joined #openstack-keystone10:11
*** jaosorior has joined #openstack-keystone10:12
*** awalende has quit IRC10:12
*** shyamb has joined #openstack-keystone10:21
*** pcaruana has quit IRC10:27
*** xek has joined #openstack-keystone10:27
*** yuxin_ has joined #openstack-keystone10:28
*** shyamb has quit IRC10:40
*** shyamb has joined #openstack-keystone10:41
*** shyamb has quit IRC10:55
*** shyamb has joined #openstack-keystone11:11
openstackgerritVishakha Agarwal proposed openstack/keystone master: Remove [token]/ infer_roles  https://review.opendev.org/65950011:25
*** yan0s has joined #openstack-keystone11:25
*** pcaruana has joined #openstack-keystone11:37
*** shyamb has quit IRC11:43
*** shyam89 has joined #openstack-keystone11:43
*** rabel has left #openstack-keystone12:00
*** lajoskatona has joined #openstack-keystone12:11
*** joshualyle has joined #openstack-keystone12:24
*** awalende has joined #openstack-keystone12:27
*** awalende_ has quit IRC12:29
*** shyam89 has quit IRC12:35
*** shyamb has joined #openstack-keystone12:35
*** raildo has joined #openstack-keystone12:37
*** shyamb has quit IRC12:42
*** shyamb has joined #openstack-keystone12:47
*** shyamb has quit IRC12:51
*** shyamb has joined #openstack-keystone12:57
*** mchlumsky has joined #openstack-keystone12:59
*** mchlumsky has quit IRC13:06
*** mchlumsky has joined #openstack-keystone13:08
*** lbragstad has joined #openstack-keystone13:09
*** itlinux has quit IRC13:10
*** xek_ has joined #openstack-keystone13:28
*** xek has quit IRC13:30
*** lajoskatona has quit IRC13:33
*** shyamb has quit IRC13:38
*** vishakha has quit IRC13:49
*** pcaruana has quit IRC13:56
*** johnthetubaguy has joined #openstack-keystone14:09
*** cloudkiller is now known as blah2314:27
*** blah23 is now known as cloudnull|afk14:27
*** itlinux has joined #openstack-keystone14:27
*** itlinux has quit IRC14:31
*** cloudnull|afk is now known as cloudnull14:31
*** NM has joined #openstack-keystone14:31
*** starborn has quit IRC14:31
*** d34dh0r53 has quit IRC14:36
*** d34dh0r53 has joined #openstack-keystone14:37
*** pcaruana has joined #openstack-keystone14:37
*** d34dh0r53 is now known as Guest2890414:41
*** NM has quit IRC15:06
*** awalende has quit IRC15:11
*** awalende has joined #openstack-keystone15:12
*** awalende_ has joined #openstack-keystone15:15
*** awalende has quit IRC15:16
*** awalende_ has quit IRC15:20
openstackgerritPavlo Shchelokovskyy proposed openstack/keystone master: Use ignore_change_password_on_first_use for admin  https://review.opendev.org/65960015:29
*** _d34dh0r53_ is now known as d34dh0r5315:38
*** pcaruana has quit IRC15:47
*** dims has quit IRC16:05
*** tesseract has quit IRC16:05
*** yan0s has quit IRC16:07
openstackgerritGage Hugo proposed openstack/keystonemiddleware master: Blacklist bandit 1.6.0  https://review.opendev.org/65961016:08
*** awalende has joined #openstack-keystone16:09
*** awalende has quit IRC16:13
*** NM has joined #openstack-keystone16:40
*** jmlowe has quit IRC16:41
*** jmlowe has joined #openstack-keystone17:02
*** joshualyle has quit IRC17:03
*** dims has joined #openstack-keystone17:03
*** lbragstad has quit IRC17:05
*** dims has quit IRC17:12
*** lbragstad has joined #openstack-keystone17:13
*** NM has quit IRC17:13
*** dims has joined #openstack-keystone17:13
*** NM has joined #openstack-keystone17:28
*** xek__ has joined #openstack-keystone17:30
*** xek_ has quit IRC17:32
*** dklyle has quit IRC17:34
-openstackstatus- NOTICE: Gerrit is being restarted to add gitweb links back to Gerrit. Sorry for the noise.17:36
*** pcaruana has joined #openstack-keystone17:39
*** joshualyle has joined #openstack-keystone18:13
*** joshualyle has quit IRC18:15
*** eandersson has joined #openstack-keystone18:16
eanderssonSeen an odd issue with ec2 credentials. We can create / delete ec2 tokens, but listing tokens leads to a decryption error.18:17
eandersson> CredentialEncryptionError: Credential could not be decrypted. Please contact the administrator18:18
eanderssonAnyone got a clue on where to start when troubleshooting that? :D18:19
*** joshualyle has joined #openstack-keystone18:22
*** trident has quit IRC18:51
*** trident has joined #openstack-keystone18:52
*** jmlowe has quit IRC19:29
kmalloceandersson: that is... that is a weird one.19:31
kmallocsounds like some record is still lingering in the DB.19:31
kmalloceandersson: i recommend opening a bug on it and duplication steps. Check if it's the at-rest-encryption grabbing something bogus.19:31
kmalloceandersson: https://opendev.org/openstack/keystone/src/branch/master/keystone/credential/core.py#L44 something related to that19:32
*** xek__ has quit IRC19:32
*** xek__ has joined #openstack-keystone19:32
kmalloceandersson: https://opendev.org/openstack/keystone/src/branch/master/keystone/credential/providers/fernet/core.py#L10919:36
kmalloceandersson: did you setup a decryption fernet repo for the credentials"?19:36
kmalloceandersson: i would also check the DB after deletion to see if some record is lingering.19:37
gagehugoyeah, if there's stale encrypted records in the DB you can't list them, but creating/deleting new ones will work19:39
*** jmlowe has joined #openstack-keystone19:44
*** NM has quit IRC19:50
*** pcaruana has quit IRC19:52
*** joshualyle has quit IRC20:01
*** whoami-rajat has quit IRC20:05
*** NM has joined #openstack-keystone20:32
*** dave-mccowan has joined #openstack-keystone20:38
eanderssonkmalloc, looks like the fernet key rotation started failing20:46
eanderssonfor credentials20:46
eanderssonthe migrator portion of it to be exact20:46
eanderssonand not sure how to get back into a good "state"20:47
*** mchlumsky has quit IRC20:47
*** raildo has quit IRC20:48
*** trident has quit IRC20:59
*** trident has joined #openstack-keystone21:00
*** NM has quit IRC21:26
*** joshualyle has joined #openstack-keystone21:32
*** xek has joined #openstack-keystone21:33
*** xek__ has quit IRC21:35
*** joshualyle has quit IRC21:36
openstackgerritMerged openstack/keystone master: Revert "Blacklist bandit 1.6.0"  https://review.opendev.org/65916421:38
*** xek_ has joined #openstack-keystone21:47
*** xek has quit IRC21:47
*** xek has joined #openstack-keystone21:56
*** xek_ has quit IRC21:56
*** xek has quit IRC21:58
*** xek has joined #openstack-keystone21:59
eanderssonkmalloc, we basically use this https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone-credential-rotate.sh.j2#L2421:59
eanderssonNot sure how we got into a scenario where credential_migrate was failing :'(21:59
*** joshualyle has joined #openstack-keystone22:23
*** joshualyle has quit IRC22:27
kmallochah22:53
kmallocwell that explains the issue22:53
kmallocsorry that happened to you :(22:53
*** tkajinam has joined #openstack-keystone22:55
*** xek has quit IRC23:03
*** rcernin has joined #openstack-keystone23:04
*** efried has joined #openstack-keystone23:05
efriedlbragstad: Would you please +1 (or not) this patch? https://review.opendev.org/#/c/624185/ It lgtm, but I'm not very familiar with the context (so to speak) so I'd prefer to proxy your vote to approve.23:06
efriedlbragstad: ...noting that (I think) johnthetubaguy is fixing up some of the concerns via series starting at https://review.opendev.org/#/c/657696/23:07
efriedtia23:07
*** dklyle has joined #openstack-keystone23:21
*** dklyle has quit IRC23:35
*** aning_ has joined #openstack-keystone23:57

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!