| *** jamesmcarthur has quit IRC | 00:14 | |
| *** gyee has quit IRC | 00:22 | |
| *** markvoelker has joined #openstack-keystone | 00:25 | |
| *** Ben78 has quit IRC | 00:27 | |
| *** markvoelker has quit IRC | 00:29 | |
| *** dave-mccowan has quit IRC | 00:47 | |
| *** dave-mccowan has joined #openstack-keystone | 00:53 | |
| *** jamesmcarthur has joined #openstack-keystone | 00:58 | |
| *** markvoelker has joined #openstack-keystone | 01:00 | |
| *** jmlowe has quit IRC | 01:09 | |
| *** jamesmcarthur has quit IRC | 01:10 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:10 | |
| *** jamesmcarthur has quit IRC | 01:15 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:49 | |
| *** jamesmcarthur has quit IRC | 01:58 | |
| lbragstad | cmurphy do we plan on porting the rest of https://github.com/openstack/keystone/tree/master/keystone/tests/unit/protection/v3 over to keystone/tests/protection? | 02:27 |
|---|---|---|
| *** jamesmcarthur has joined #openstack-keystone | 02:28 | |
| lbragstad | cmurphy i noticed all our tests under keystone/tests/unit/protection aren't being run in unit tests | 02:31 |
| lbragstad | but it i think that's because https://review.opendev.org/#/c/680788/ removed __init__.py files from those paths | 02:31 |
| lbragstad | (i should have looked for that in the review) | 02:32 |
| lbragstad | but i think that's why those remaining tests in that location aren't being run | 02:32 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add __init__.py files to protection tests https://review.opendev.org/683019 | 02:36 |
| lbragstad | ^ that should fix it | 02:36 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Port remaining protection tests to keystone/tests/protection https://review.opendev.org/683024 | 02:43 |
| lbragstad | but... ^ that should fix it, too | 02:43 |
| lbragstad | i'd be in favor of just porting the rest over | 02:43 |
| *** markvoelker has quit IRC | 02:47 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add default roles and scope checking to project tags https://review.opendev.org/682503 | 02:50 |
| cmurphy | lbragstad: https://review.opendev.org/682931 | 02:51 |
| lbragstad | oh - sweet! | 02:51 |
| *** jmlowe has joined #openstack-keystone | 02:58 | |
| *** jmlowe has quit IRC | 03:05 | |
| openstackgerrit | Merged openstack/keystone master: token: consistently decode binary types https://review.opendev.org/665617 | 03:21 |
| *** jamesmcarthur has quit IRC | 03:38 | |
| *** jamesmcarthur has joined #openstack-keystone | 03:40 | |
| *** jamesmcarthur has quit IRC | 03:44 | |
| *** jamesmcarthur has joined #openstack-keystone | 04:09 | |
| *** jdwidari has quit IRC | 04:10 | |
| *** jamesmcarthur has quit IRC | 04:16 | |
| *** pcaruana has joined #openstack-keystone | 04:42 | |
| *** Luzi has joined #openstack-keystone | 04:50 | |
| *** jamesmcarthur has joined #openstack-keystone | 04:51 | |
| *** jamesmcarthur has quit IRC | 04:56 | |
| *** rcernin_ has joined #openstack-keystone | 04:56 | |
| *** rcernin has quit IRC | 04:59 | |
| *** jamesmcarthur has joined #openstack-keystone | 05:17 | |
| *** jamesmcarthur has quit IRC | 05:22 | |
| *** markvoelker has joined #openstack-keystone | 06:27 | |
| *** markvoelker has quit IRC | 06:31 | |
| *** jaosorior has joined #openstack-keystone | 06:43 | |
| *** rcernin_ has quit IRC | 06:48 | |
| *** takamatsu has quit IRC | 06:50 | |
| *** xek has joined #openstack-keystone | 07:05 | |
| *** awalende has joined #openstack-keystone | 07:08 | |
| *** jamesmcarthur has joined #openstack-keystone | 07:18 | |
| *** jamesmcarthur has quit IRC | 07:23 | |
| *** tesseract has joined #openstack-keystone | 07:26 | |
| *** xek has quit IRC | 07:38 | |
| *** xek has joined #openstack-keystone | 07:40 | |
| *** takamatsu has joined #openstack-keystone | 07:44 | |
| *** ivve has joined #openstack-keystone | 07:45 | |
| *** jaosorior has quit IRC | 07:51 | |
| *** tkajinam has quit IRC | 08:19 | |
| *** markvoelker has joined #openstack-keystone | 08:28 | |
| *** zzzeek has quit IRC | 08:30 | |
| *** zzzeek has joined #openstack-keystone | 08:31 | |
| *** markvoelker has quit IRC | 08:33 | |
| *** takamatsu_ has joined #openstack-keystone | 08:46 | |
| *** takamatsu has quit IRC | 08:46 | |
| *** takamatsu_ has quit IRC | 09:19 | |
| *** takamatsu has joined #openstack-keystone | 09:36 | |
| *** jawad_axd has joined #openstack-keystone | 09:44 | |
| *** takamatsu has quit IRC | 10:00 | |
| *** takamatsu has joined #openstack-keystone | 10:06 | |
| *** rcernin_ has joined #openstack-keystone | 10:15 | |
| *** markvoelker has joined #openstack-keystone | 10:29 | |
| *** markvoelker has quit IRC | 10:34 | |
| *** trident has quit IRC | 10:35 | |
| *** rcernin_ has quit IRC | 10:36 | |
| yoctozepto | hey keystoners - may you please consider handling my patch https://review.opendev.org/674782 (it's been cr+2, v+1 for more than month already) - would love to see it backported to stein and rocky too | 10:42 |
| *** trident has joined #openstack-keystone | 10:48 | |
| *** pcaruana has quit IRC | 10:54 | |
| *** takamatsu has quit IRC | 11:00 | |
| *** takamatsu has joined #openstack-keystone | 11:06 | |
| *** jdwidari has joined #openstack-keystone | 11:12 | |
| *** jmlowe has joined #openstack-keystone | 11:14 | |
| *** pcaruana has joined #openstack-keystone | 11:17 | |
| *** takamatsu has quit IRC | 11:22 | |
| *** takamatsu has joined #openstack-keystone | 11:28 | |
| *** markvoelker has joined #openstack-keystone | 12:13 | |
| *** jamesmcarthur has joined #openstack-keystone | 12:18 | |
| *** takamatsu has quit IRC | 12:21 | |
| *** takamatsu has joined #openstack-keystone | 12:27 | |
| *** lbragstad has quit IRC | 12:29 | |
| *** lbragstad has joined #openstack-keystone | 12:30 | |
| *** jamesmcarthur has quit IRC | 12:30 | |
| *** jamesmcarthur has joined #openstack-keystone | 12:30 | |
| *** jamesmcarthur has quit IRC | 12:36 | |
| *** takamatsu has quit IRC | 12:38 | |
| *** jmlowe has quit IRC | 12:39 | |
| *** markvoelker has quit IRC | 12:46 | |
| f0o | using Stein I cant start Keystone, I got `use_stderr = true` but the WSGI dies with `OSError: Illegal seek` in `/usr/lib64/python3.6/logging/__init__.py` called by `/usr/lib/python3.6/site-packages/oslo_log/log.py` - ideas? | 12:55 |
| *** zzzeek has quit IRC | 12:56 | |
| f0o | Actually I also get a different error which is `oslo_config.cfg.ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option` | 12:57 |
| f0o | googling that shows a bunch of old launchpad results so I think this must be a generic issue - The same config/setup works fine with Rocky | 12:57 |
| *** jmlowe has joined #openstack-keystone | 12:58 | |
| *** zzzeek has joined #openstack-keystone | 12:58 | |
| *** takamatsu has joined #openstack-keystone | 13:16 | |
| *** jaosorior has joined #openstack-keystone | 13:18 | |
| *** awalende has quit IRC | 13:18 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Implement scope type checking for Project Endpoints https://review.opendev.org/683153 | 13:20 |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Implement scope type checking for Project Endpoints https://review.opendev.org/683153 | 13:22 |
| *** pcaruana has quit IRC | 13:28 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:36 | |
| *** jamesmcarthur has quit IRC | 13:36 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:36 | |
| f0o | Nevermind. after deleting /var/log/keystone/keystone.log it all works again - who knows what that was about | 13:43 |
| *** jawad_axd has quit IRC | 13:51 | |
| *** jawad_axd has joined #openstack-keystone | 13:53 | |
| *** Luzi has quit IRC | 13:53 | |
| *** pcaruana has joined #openstack-keystone | 13:54 | |
| *** efried_pto is now known as efried | 13:56 | |
| *** jawad_axd has quit IRC | 13:57 | |
| *** tesseract has quit IRC | 14:00 | |
| vishakha | f0o: | 14:07 |
| vishakha | you can report a bug with all the steps you performed and also share the logs there, which might help to look for the issue | 14:08 |
| *** ivve has quit IRC | 14:09 | |
| *** ayoung has quit IRC | 14:09 | |
| vishakha | https://bugs.launchpad.net/keystone/+filebug | 14:09 |
| *** raildo has joined #openstack-keystone | 14:13 | |
| *** takamatsu has quit IRC | 14:16 | |
| *** pcaruana has quit IRC | 14:33 | |
| *** jawad_axd has joined #openstack-keystone | 14:40 | |
| *** jawad_axd has quit IRC | 14:44 | |
| *** gyee has joined #openstack-keystone | 14:56 | |
| *** efried is now known as efried_pto | 14:57 | |
| *** jawad_axd has joined #openstack-keystone | 15:42 | |
| *** jawad_axd has quit IRC | 15:47 | |
| *** openstackgerrit has quit IRC | 16:06 | |
| *** takamatsu has joined #openstack-keystone | 16:06 | |
| *** jamesmcarthur has quit IRC | 16:12 | |
| *** markvoelker has joined #openstack-keystone | 16:15 | |
| *** Ben78 has joined #openstack-keystone | 16:20 | |
| *** jamesmcarthur has joined #openstack-keystone | 16:21 | |
| *** itlinux has joined #openstack-keystone | 16:35 | |
| *** jamesmcarthur has quit IRC | 16:42 | |
| *** jamesmcarthur has joined #openstack-keystone | 16:43 | |
| *** jdwidari has quit IRC | 16:51 | |
| *** jmlowe has quit IRC | 16:59 | |
| *** pcaruana has joined #openstack-keystone | 17:01 | |
| *** markvoelker has quit IRC | 17:01 | |
| *** jmlowe has joined #openstack-keystone | 17:02 | |
| *** markvoelker has joined #openstack-keystone | 17:04 | |
| *** mahajan-abhishek has joined #openstack-keystone | 17:08 | |
| mahajan-abhishek | Hello, I am new to Openstack contribution, I have pushed changed on keystone bug #1835303, i am getting Failure in grenade-py3 Zuul check | 17:13 |
| openstack | bug 1835303 in OpenStack Identity (keystone) ""Unauthorized" error message needs more hints" [Low,In progress] https://launchpad.net/bugs/1835303 - Assigned to Abhishek Mahajan (mahajan-abhishek) | 17:13 |
| *** pcaruana has quit IRC | 17:14 | |
| mahajan-abhishek | I need help regarding the Failure in grenade-py3, it seems i need to change some where else also. Can someone suggest where in which documentation req update ? | 17:16 |
| *** gmann_afk is now known as gmann | 17:21 | |
| f0o | What's the right policy string to allow a user to issue identity:update_user to themselves, such as adding credentials or mfa rules? | 17:23 |
| f0o | would a basic rule admin_or_owner suffice or does that have larger side-effects? | 17:23 |
| *** pcaruana has joined #openstack-keystone | 17:25 | |
| kmalloc | f0o: keep in mind that allowing a user to update themselves via the update_user API, they can bypass all PCI-DSS enforcement of password details such as lifetime/complexity | 17:32 |
| kmalloc | f0o: admin_or_owner is probably sufficient without too much weirdness | 17:33 |
| cmurphy | yoctozepto: i will try to take a look, our ldap code makes me cringe >.> | 17:33 |
| f0o | that's fine for the time being | 17:33 |
| f0o | thanks kmalloc :) | 17:33 |
| cmurphy | mahajan-abhishek: the grenade error is probably unrelated, you can add a comment starting with "recheck" and it will run the tests over | 17:34 |
| kmalloc | yoctozepto: i'll also look at it (stable-core) but... as cmurphy said...ldap code...is not fun | 17:34 |
| yoctozepto | cmurphy, kmalloc: thanks, folks! it might explain why it just lays there untouched :D | 17:35 |
| cmurphy | yeah sorry about that :( | 17:36 |
| kmalloc | yoctozepto: mostly no one except gyee these days has a lot of active LDAP knowledge... i try and pretend i didn't do a ton of ldap-in-python-and-or-c++ in the past | 17:36 |
| yoctozepto | no problem, Colleen ;-) | 17:37 |
| *** jawad_axd has joined #openstack-keystone | 17:37 | |
| yoctozepto | kmalloc: I see, well, I should probably look at integrating with ldap in federation style then | 17:39 |
| yoctozepto | sounds more futureproof | 17:39 |
| kmalloc | our ldap code hasn't had a lot of love =/ | 17:39 |
| cmurphy | it hasn't but it has also mostly just worked for a long time | 17:39 |
| yoctozepto | except for his issue, it actually works pretty decent | 17:40 |
| yoctozepto | this* | 17:40 |
| yoctozepto | I experienced a lot of bad ldap integrations, believe me | 17:40 |
| *** mahajan-abhishek has quit IRC | 17:46 | |
| kmalloc | the code is horrid and could use fixing/updating | 17:47 |
| kmalloc | it has mostly worked | 17:47 |
| kmalloc | which... is saying something | 17:47 |
| *** pcaruana has quit IRC | 17:55 | |
| *** efried_pto has quit IRC | 18:01 | |
| *** openstackgerrit has joined #openstack-keystone | 18:10 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Consolidate policy deprecation warnings https://review.opendev.org/682798 | 18:10 |
| *** jawad_axd has quit IRC | 18:21 | |
| *** jamesmcarthur has quit IRC | 18:21 | |
| *** jamesmcarthur has joined #openstack-keystone | 18:22 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Federation mapping debug should show direct_maps values https://review.opendev.org/678700 | 18:28 |
| *** trident has quit IRC | 18:45 | |
| *** mvkr has quit IRC | 18:48 | |
| *** trident has joined #openstack-keystone | 18:55 | |
| *** trident has quit IRC | 19:01 | |
| *** trident has joined #openstack-keystone | 19:10 | |
| *** jmlowe has quit IRC | 19:45 | |
| *** pcaruana has joined #openstack-keystone | 19:51 | |
| *** jamesmcarthur has quit IRC | 20:01 | |
| *** jamesmcarthur has joined #openstack-keystone | 20:04 | |
| *** jamesmcarthur has quit IRC | 20:20 | |
| *** jamesmcarthur has joined #openstack-keystone | 20:21 | |
| *** jamesmcarthur has quit IRC | 20:22 | |
| *** pcaruana has quit IRC | 20:31 | |
| gyee | kmalloc, cmurphy, yoctozepto, what's the issue with LDAP? Sorry my IRC was on mute. | 20:37 |
| kmalloc | Cough cough ldap. | 20:38 |
| gyee | LOL | 20:38 |
| *** markvoelker has quit IRC | 21:20 | |
| *** benj_ has quit IRC | 21:31 | |
| *** benj has joined #openstack-keystone | 21:31 | |
| *** benj is now known as Guest29634 | 21:32 | |
| *** lbragstad has quit IRC | 21:37 | |
| *** lbragstad has joined #openstack-keystone | 21:37 | |
| *** markvoelker has joined #openstack-keystone | 21:48 | |
| *** xek has quit IRC | 21:51 | |
| *** raildo has quit IRC | 22:01 | |
| *** markvoelker has quit IRC | 22:32 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Implement scope type checking for Project Endpoints https://review.opendev.org/683153 | 22:39 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Readjust job timeouts https://review.opendev.org/683251 | 22:42 |
| *** tkajinam has joined #openstack-keystone | 23:02 | |
| *** rcernin has joined #openstack-keystone | 23:25 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!