*** threestrands has joined #openstack-keystone | 00:10 | |
*** gyee has quit IRC | 00:28 | |
*** kplant has quit IRC | 01:05 | |
*** Ben78 has joined #openstack-keystone | 01:32 | |
*** Ben78 has quit IRC | 01:58 | |
*** threestrands has quit IRC | 03:30 | |
*** threestrands has joined #openstack-keystone | 03:30 | |
*** threestrands has quit IRC | 03:31 | |
*** jaosorior has quit IRC | 04:05 | |
*** jmlowe has joined #openstack-keystone | 04:14 | |
*** jmlowe has quit IRC | 04:19 | |
*** jmlowe has joined #openstack-keystone | 04:25 | |
*** jmlowe has quit IRC | 04:30 | |
*** gary_perkins has quit IRC | 04:32 | |
*** gary_perkins has joined #openstack-keystone | 04:33 | |
*** whoami-rajat has joined #openstack-keystone | 04:40 | |
*** jaosorior has joined #openstack-keystone | 05:04 | |
*** raildo has quit IRC | 05:11 | |
*** raildo has joined #openstack-keystone | 05:12 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: [WIP] Add openstack_groups to assertion https://review.opendev.org/588211 | 05:15 |
---|---|---|
*** cloudnull has quit IRC | 05:25 | |
*** d34dh0r53 has quit IRC | 05:25 | |
*** jamesmcarthur_ has quit IRC | 05:28 | |
*** vishalmanchanda has joined #openstack-keystone | 05:53 | |
*** cloudnull has joined #openstack-keystone | 06:17 | |
*** d34dh0r53 has joined #openstack-keystone | 06:17 | |
openstackgerrit | Merged openstack/keystone master: Deprecate [federation] federated_domain_name https://review.opendev.org/651614 | 06:30 |
*** dancn has joined #openstack-keystone | 06:53 | |
*** jaosorior has quit IRC | 07:01 | |
*** rcernin has quit IRC | 07:02 | |
*** tesseract has joined #openstack-keystone | 07:11 | |
*** xek has joined #openstack-keystone | 07:20 | |
*** dancn has quit IRC | 07:41 | |
*** dancn has joined #openstack-keystone | 07:47 | |
*** ivve has joined #openstack-keystone | 07:49 | |
*** jaosorior has joined #openstack-keystone | 08:45 | |
*** ivve has quit IRC | 08:48 | |
*** johnthetubaguy has quit IRC | 08:51 | |
*** tkajinam has quit IRC | 09:03 | |
*** ivve has joined #openstack-keystone | 09:17 | |
*** stingrayza has quit IRC | 09:22 | |
*** stingrayza has joined #openstack-keystone | 09:23 | |
*** tssurya has joined #openstack-keystone | 09:52 | |
*** dansmith has quit IRC | 09:52 | |
*** ianw has quit IRC | 09:55 | |
*** dansmith has joined #openstack-keystone | 09:58 | |
*** ianw has joined #openstack-keystone | 09:59 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Followup for remove signing[config]. https://review.opendev.org/673476 | 10:47 |
*** kplant has joined #openstack-keystone | 11:09 | |
*** brtknr has quit IRC | 11:19 | |
*** jamesmcarthur has joined #openstack-keystone | 11:50 | |
*** jamesmcarthur has quit IRC | 12:03 | |
*** jaosorior has quit IRC | 12:07 | |
*** jamesmcarthur has joined #openstack-keystone | 12:44 | |
*** jamesmcarthur has quit IRC | 12:51 | |
*** jaosorior has joined #openstack-keystone | 12:54 | |
*** jamesmcarthur has joined #openstack-keystone | 13:01 | |
*** jamesmcarthur has quit IRC | 13:02 | |
*** jamesmcarthur has joined #openstack-keystone | 13:03 | |
openstackgerrit | Merged openstack/keystoneauth master: Allow requesting fixed retry delay instead of exponential https://review.opendev.org/672930 | 13:33 |
*** brtknr has joined #openstack-keystone | 14:10 | |
*** wxy-xiyuan has quit IRC | 14:10 | |
*** dklyle has quit IRC | 14:52 | |
*** ondrejduchon has joined #openstack-keystone | 14:53 | |
ondrejduchon | Hello, I have a question about auditing in keystonemiddleware. More specifically file keystonemiddleware/audit/_notifier.py, line 40. Why there is 'self._notifier.info(..' instead of 'self._notifier.audit(..'. Thank you for the reply | 14:53 |
*** dklyle has joined #openstack-keystone | 14:53 | |
*** takamatsu has joined #openstack-keystone | 14:54 | |
*** Ben78 has joined #openstack-keystone | 15:04 | |
cmurphy | ondrejduchon: https://specs.openstack.org/openstack/openstack-specs/specs/log-guidelines.html#proposed-changes-from-status-quo | 15:09 |
cmurphy | anyone have topics to bring up in today's meeting? https://etherpad.openstack.org/p/keystone-weekly-meeting | 15:21 |
*** dancn has quit IRC | 15:29 | |
*** whoami-rajat has quit IRC | 15:39 | |
knikolla | Will be 5 mins late to meeting | 15:44 |
*** tssurya has quit IRC | 15:46 | |
*** ondrejduchon has quit IRC | 15:51 | |
*** gyee has joined #openstack-keystone | 15:52 | |
*** whoami-rajat has joined #openstack-keystone | 16:07 | |
*** viks___ has quit IRC | 16:25 | |
*** trident has quit IRC | 16:32 | |
*** trident has joined #openstack-keystone | 16:37 | |
gagehugo | gonna grab lunch and then I'll be on for office hours after a while | 16:37 |
cmurphy | office hours now in https://meet.jit.si/keystone-office-hours | 16:38 |
cmurphy | https://etherpad.openstack.org/p/keystone-office-hours-topics | 16:38 |
cmurphy | kmalloc: knikolla able to make it ^ ? | 16:44 |
kmalloc | oh. uh. | 16:45 |
kmalloc | sure. but i can't do video, construction, my web cam keeps falling over and the last time it broke my monitor (cracked it) | 16:45 |
*** jmlowe has joined #openstack-keystone | 16:46 | |
cmurphy | should we do irc instead? | 16:46 |
knikolla | i can't do video either today | 16:48 |
knikolla | i can make it to office hours though | 16:48 |
cmurphy | knikolla: can you join the call without video? | 16:48 |
knikolla | sure | 16:49 |
kmalloc | knikolla: my web cam is broken an my monitor is too (construction caused the webcam to fall and slam into the screen breaking both) | 16:50 |
kmalloc | knikolla: so you're in good company ;) | 16:50 |
cmurphy | knikolla: we're still in jitsi fyi | 16:53 |
cmurphy | https://bugs.launchpad.net/keystone/+bug/1834304 | 16:53 |
openstack | Launchpad bug 1834304 in OpenStack Identity (keystone) "[RFE][keystone][idm/ldap backend]: is it possible to use nested group to authorize users ?" [Undecided,Incomplete] | 16:53 |
knikolla | kmalloc: i have nothing that dramatic, lol. mostly my apartment is a mess and I'm multiplexing work and chores. | 16:54 |
gyee | I thought we support memberOf attribute already, this is AD I presume? | 16:57 |
cmurphy | gyee: want to join the call https://meet.jit.si/keystone-office-hours | 16:57 |
cmurphy | it's IDM which i think is a RH thing | 16:57 |
*** jamesmcarthur has quit IRC | 17:00 | |
cmurphy | https://bugs.launchpad.net/keystone/+bug/1836568 | 17:02 |
openstack | Launchpad bug 1836568 in OpenStack Identity (keystone) "Logis filled with uneccesery policy derecation warning" [Undecided,New] | 17:02 |
*** markvoelker has quit IRC | 17:03 | |
cmurphy | https://bugs.launchpad.net/keystone/+bug/1837010 | 17:15 |
openstack | Launchpad bug 1837010 in OpenStack Identity (keystone) "[RFE] event callback dynamic loading" [Undecided,New] | 17:15 |
*** jmlowe has quit IRC | 17:18 | |
cmurphy | https://bugs.launchpad.net/keystone/+bug/1837061 | 17:19 |
openstack | Launchpad bug 1837061 in OpenStack Identity (keystone) "RFE: Application Credential API (CRUD) to 403 if app-cred auth method not enabled" [Wishlist,New] | 17:19 |
cmurphy | https://bugs.launchpad.net/keystone/+bug/1791111 | 17:21 |
openstack | Launchpad bug 1791111 in OpenStack Dashboard (Horizon) "allow change password upon first use as user" [High,Confirmed] - Assigned to Radomir Dopieralski (deshipu) | 17:21 |
*** jamesmcarthur has joined #openstack-keystone | 17:26 | |
*** tesseract has quit IRC | 17:34 | |
gyee | my audio is breaking off | 17:36 |
cmurphy | we just ended | 17:36 |
cmurphy | good meeting y'all :) | 17:36 |
cmurphy | forgot to record it though :( | 17:36 |
gagehugo | ah ok, just got back | 17:50 |
gagehugo | kmalloc: :( at cracked monitor | 17:51 |
*** Ben78 has quit IRC | 18:30 | |
*** jamesmcarthur has quit IRC | 18:35 | |
openstackgerrit | Merged openstack/keystone master: Add new attribute to the federation protocol API https://review.opendev.org/637305 | 18:49 |
*** joshualyle has quit IRC | 18:57 | |
*** Ben78 has joined #openstack-keystone | 19:29 | |
*** kplant has quit IRC | 19:42 | |
*** jmlowe has joined #openstack-keystone | 19:56 | |
*** whoami-rajat has quit IRC | 19:57 | |
cmurphy | gyee: does mod_auth_kerb let you set REMOTE_DOMAIN in some way besides directly in the apache config? | 20:11 |
*** xek has quit IRC | 20:15 | |
kmalloc | gyee: i think that is straight apache config | 20:16 |
kmalloc | cmurphy: ^ even | 20:16 |
cmurphy | so mod_auth_kerb is effectively single-domain just like mod_ssl is? | 20:16 |
kmalloc | yeah that's straight setenv | 20:16 |
kmalloc | yep | 20:16 |
gyee | right | 20:16 |
cmurphy | k | 20:16 |
gyee | but it's hardcoded | 20:17 |
kmalloc | another reason we should drop krb5 | 20:17 |
kmalloc | mod_ssl/tokenless has a specific use case | 20:17 |
gyee | I couldn't agree more | 20:17 |
kmalloc | and even SSL we can encode a LOT more data in the cert if needed | 20:17 |
kmalloc | e.g. domain | 20:17 |
gyee | right, and SSL is used in production anyway, so the extra cost of issuing a client cert is not that much | 20:18 |
*** jmlowe has quit IRC | 20:23 | |
*** jmlowe has joined #openstack-keystone | 20:25 | |
*** joshualyle has joined #openstack-keystone | 20:32 | |
*** vishalmanchanda has quit IRC | 20:32 | |
*** joshualyle has quit IRC | 20:32 | |
*** jmlowe has quit IRC | 20:36 | |
*** jmlowe has joined #openstack-keystone | 20:38 | |
*** joshualyle has joined #openstack-keystone | 20:42 | |
*** jmlowe has quit IRC | 20:56 | |
*** kplant has joined #openstack-keystone | 21:22 | |
*** gyee has quit IRC | 21:23 | |
*** dancn has joined #openstack-keystone | 21:32 | |
*** gyee has joined #openstack-keystone | 21:42 | |
*** joshualyle has quit IRC | 21:48 | |
*** raildo has quit IRC | 22:02 | |
kmalloc | ++ | 22:05 |
*** jamesmcarthur has joined #openstack-keystone | 22:09 | |
*** kplant has quit IRC | 22:15 | |
*** ivve has quit IRC | 22:23 | |
*** jamesmcarthur has quit IRC | 22:39 | |
*** dancn has quit IRC | 22:45 | |
*** tkajinam has joined #openstack-keystone | 22:57 | |
*** dancn has joined #openstack-keystone | 22:57 | |
*** rcernin has joined #openstack-keystone | 23:01 | |
*** Ben78 has quit IRC | 23:29 | |
*** joshualyle has joined #openstack-keystone | 23:30 | |
*** dancn has quit IRC | 23:36 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!