| *** jamesmcarthur has joined #openstack-keystone | 01:39 | |
| *** gyee has quit IRC | 01:41 | |
| *** ileixe has quit IRC | 01:57 | |
| *** ileixe has joined #openstack-keystone | 01:59 | |
| *** ileixe has quit IRC | 02:00 | |
| *** ileixe has joined #openstack-keystone | 02:00 | |
| *** jamesmcarthur has quit IRC | 02:13 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:40 | |
| *** jamesmcarthur has quit IRC | 02:43 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:54 | |
| *** kumar_biplab has joined #openstack-keystone | 03:39 | |
| *** ileixe has quit IRC | 03:46 | |
| *** ileixe has joined #openstack-keystone | 03:50 | |
| *** awalende has joined #openstack-keystone | 03:54 | |
| *** awalende has quit IRC | 03:59 | |
| *** dave-mccowan has quit IRC | 04:02 | |
| *** jamesmcarthur has quit IRC | 04:11 | |
| *** dave-mccowan has joined #openstack-keystone | 04:12 | |
| *** tkajinam has quit IRC | 04:26 | |
| *** tkajinam has joined #openstack-keystone | 04:33 | |
| *** dave-mccowan has quit IRC | 05:05 | |
| *** tkajinam_ has joined #openstack-keystone | 05:08 | |
| *** tkajinam has quit IRC | 05:11 | |
| *** shyamb has joined #openstack-keystone | 05:12 | |
| *** shyamb has quit IRC | 05:17 | |
| *** shyamb has joined #openstack-keystone | 05:30 | |
| *** tkajinam_ has quit IRC | 05:34 | |
| *** tkajinam has joined #openstack-keystone | 05:36 | |
| *** tkajinam has quit IRC | 06:03 | |
| *** tkajinam has joined #openstack-keystone | 06:05 | |
| *** tkajinam has quit IRC | 06:30 | |
| *** tkajinam has joined #openstack-keystone | 06:31 | |
| *** tkajinam has quit IRC | 06:31 | |
| *** Luzi has joined #openstack-keystone | 06:40 | |
| *** shyamb has quit IRC | 06:42 | |
| *** tkajinam has joined #openstack-keystone | 07:01 | |
| *** shyamb has joined #openstack-keystone | 07:04 | |
| *** dklyle has quit IRC | 07:19 | |
| *** dklyle has joined #openstack-keystone | 07:19 | |
| *** shyamb has quit IRC | 07:49 | |
| *** trident has quit IRC | 07:57 | |
| *** tesseract has joined #openstack-keystone | 08:00 | |
| *** trident has joined #openstack-keystone | 08:06 | |
| *** awalende has joined #openstack-keystone | 08:16 | |
| *** ivve has joined #openstack-keystone | 08:19 | |
| *** Blinkiz has joined #openstack-keystone | 08:26 | |
| Blinkiz | Hello. Am having problem getting a token for "role:admin and system_scope:all" when using enforce_scope = True as recommendation in Keystone train release notes. Am using openstacksdk library which uses keystoneauth1. It seems like openstacksdk requires domain part but then the system-scope is ignored. Am having problem understanding where the | 08:34 |
|---|---|---|
| Blinkiz | problem. It would be highly appreciated if someone with knowledge about keystone could comment on https://storyboard.openstack.org/#!/story/2006839 with a pointer where the problem probably are. Am guessing in openstacksdk but am not sure. | 08:34 |
| *** tkajinam has quit IRC | 08:35 | |
| Blinkiz | os_keystone_service | 08:38 |
| Blinkiz | oh, sorry. wrong chat for that "os_keystone_service" text :) | 08:39 |
| *** yan0s has joined #openstack-keystone | 08:40 | |
| *** shyamb has joined #openstack-keystone | 09:05 | |
| *** dancn has joined #openstack-keystone | 09:10 | |
| *** jistr has quit IRC | 09:19 | |
| *** jistr has joined #openstack-keystone | 09:20 | |
| *** jistr has quit IRC | 09:29 | |
| *** jistr has joined #openstack-keystone | 09:36 | |
| *** ileixe has quit IRC | 09:47 | |
| *** ileixe has joined #openstack-keystone | 09:48 | |
| *** shyamb has quit IRC | 09:57 | |
| *** shyamb has joined #openstack-keystone | 10:06 | |
| *** ileixe has quit IRC | 10:16 | |
| *** shyamb has quit IRC | 10:37 | |
| *** shyamb has joined #openstack-keystone | 10:58 | |
| *** jamesmcarthur has joined #openstack-keystone | 11:09 | |
| *** jamesmcarthur has quit IRC | 11:10 | |
| *** kumar_biplab has quit IRC | 11:10 | |
| *** shyamb has quit IRC | 12:04 | |
| *** raildo has joined #openstack-keystone | 12:06 | |
| *** shyamb has joined #openstack-keystone | 12:15 | |
| *** shyamb has quit IRC | 12:22 | |
| *** shyamb has joined #openstack-keystone | 12:33 | |
| *** bengates has joined #openstack-keystone | 12:51 | |
| *** rcernin has quit IRC | 12:54 | |
| bengates | Hello, when trying to use openid authentication with keystone the GET /auth/OS-FEDERATION/identity_providers/myidp/protocols/openid/websso request is returning a redirect to the same location rather than GET /v3/auth/OS-FEDERATION/websso/mapped. | 12:54 |
| bengates | Would anyone be able to suggest a reason for that? | 12:55 |
| *** dave-mccowan has joined #openstack-keystone | 12:55 | |
| *** dave-mccowan has quit IRC | 13:00 | |
| *** shyamb has quit IRC | 13:03 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:16 | |
| openstackgerrit | Sean McGinnis proposed openstack/keystonemiddleware master: Fix DeprecationWarning: invalid escape sequence issues https://review.opendev.org/694067 | 13:17 |
| *** jamesmcarthur has quit IRC | 13:32 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:33 | |
| *** jamesmcarthur has quit IRC | 13:35 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:53 | |
| lbragstad | Blinkiz you need to adjust your parameters here | 14:04 |
| lbragstad | https://storyboard.openstack.org/#!/story/2006839#comment-147268 | 14:04 |
| lbragstad | Blinkiz http://paste.openstack.org/show/786040/ should do the trick | 14:05 |
| lbragstad | the reason why you're seeing the second error message about a missing domain parameter is because you're using a username in your request. | 14:05 |
| lbragstad | usernames are namespaced to domains in keystone, while user IDs are globally unique, so if you pass keystone a request with a username it will expect to find a domain so that it knows exactly which user you're referencing | 14:06 |
| lbragstad | for example, you can have two domains, one called Foo and one called Bar, each domain can have a user named 'alice'. | 14:06 |
| lbragstad | if alice@Foo authenticates with her user name (e.g., 'alice'), she'll need to supply the domain she is a part of. | 14:07 |
| lbragstad | Blinkiz i left a comment on the story - https://storyboard.openstack.org/#!/story/2006839#comment-147290 | 14:20 |
| lbragstad | cmurphy thanks for the write up | 14:37 |
| *** Luzi has quit IRC | 14:52 | |
| *** tesseract has quit IRC | 14:52 | |
| *** tesseract has joined #openstack-keystone | 14:55 | |
| *** dancn has quit IRC | 14:55 | |
| *** dancn has joined #openstack-keystone | 15:00 | |
| *** bengates has quit IRC | 15:05 | |
| *** efried has quit IRC | 15:06 | |
| *** jamesmcarthur has quit IRC | 15:31 | |
| *** awalende has quit IRC | 15:33 | |
| *** awalende has joined #openstack-keystone | 15:33 | |
| lbragstad | cmurphy i'm curious if you have thoughts on backporting the fix for https://review.opendev.org/#/c/655166/ to stable/queens | 15:37 |
| *** awalende has quit IRC | 15:38 | |
| lbragstad | we refactored a whole bunch of the token provider code in rocky, so it's going to conflict, but i have a patch up that is functionally equivalent to what's been proposed and merged to master, train, stein, and rocky. | 15:38 |
| lbragstad | https://review.opendev.org/#/c/694096/1 | 15:38 |
| *** dancn has quit IRC | 15:51 | |
| *** dancn has joined #openstack-keystone | 15:57 | |
| cmurphy | lbragstad: my only hesitation with backporting that so far is the "risk of regression" consideration in the stable policy, just because of how much disagreement there was over that patch in the beginning | 16:01 |
| cmurphy | lbragstad: the other thing is that queens just went EM so there won't be another release, if that matters to you | 16:02 |
| *** dancn has quit IRC | 16:02 | |
| lbragstad | true - i was looking at that status on releases.openstack.org | 16:02 |
| lbragstad | the page hadn't been updated yet it looks like | 16:03 |
| lbragstad | for EM - i think we would just pull the branch in and release it anyway | 16:12 |
| *** gyee has joined #openstack-keystone | 16:18 | |
| *** ivve has quit IRC | 16:26 | |
| *** jaosorior has joined #openstack-keystone | 16:51 | |
| *** yan0s has quit IRC | 16:53 | |
| *** jaosorior has quit IRC | 17:12 | |
| cmurphy | vishakha: gagehugo bnemec lbragstad knikolla gyee rm_work I just had a massive brain wipeout and scheduled travel for next week during the PTG, it's not set in stone yet but how many of you could make it if we rescheduled to tomorrow (thursday) or monday? | 17:19 |
| lbragstad | i have a few meetings tomorrow afternoon (CST) | 17:20 |
| lbragstad | i have one meeting at 9 AM CST on monday though | 17:20 |
| vishakha | cmurphy: I am available for both tomorrow as well as Monday | 17:20 |
| knikolla | i have a meeting 11am-noon EST tomorrow but free otherwise. | 17:21 |
| bnemec | Thursday I should be able to do. Monday will likely overlap the Oslo meeting at 9 central time (1500 UTC). | 17:24 |
| gyee | cmurphy, tomorrow anytime after 1700 UTC works for me | 17:28 |
| cmurphy | okay i think it's too hard to reschedule a 3 hour slot, will keep it the same and i'll see if i can move my travel to the afternoon | 17:33 |
| rm_work | Hmm ok yeah I would have to talk with the guy who's working on the spec we wanted to discuss, and I don't know that he was done with it yet either :( | 17:37 |
| rm_work | If you can't reschedule though, I'll reach out to him and see if he's close to ready | 17:38 |
| cmurphy | rm_work: from the straw poll i think it's too hard to reschedule the ptg and i'll change my travel instead, if he's not ready to discuss it on tuesday we could have an ad-hoc meeting at a later time | 17:39 |
| rm_work | I think he should be ready Tuesday, just tomorrow would have been hard :D | 17:41 |
| cmurphy | understandable | 17:42 |
| cmurphy | i was going to read the rfc and haven't done that yet either >.> | 17:43 |
| gyee | link to the RFC? | 17:47 |
| gyee | ah, 7644, got it | 17:47 |
| *** tesseract has quit IRC | 18:35 | |
| gagehugo | cmurphy: I am free from 1600 to 1900 UTC tomorrow, Monday will depend on time | 18:36 |
| *** raildo has quit IRC | 18:55 | |
| *** jamesmcarthur has joined #openstack-keystone | 19:00 | |
| *** jamesmcarthur has quit IRC | 19:10 | |
| *** jamesmcarthur has joined #openstack-keystone | 19:50 | |
| *** jamesmcarthur has quit IRC | 19:51 | |
| *** jamesmcarthur has joined #openstack-keystone | 19:52 | |
| *** jamesmcarthur has quit IRC | 19:53 | |
| *** dklyle has quit IRC | 20:20 | |
| *** dklyle has joined #openstack-keystone | 20:23 | |
| *** jaosorior has joined #openstack-keystone | 20:26 | |
| *** gshippey has quit IRC | 21:33 | |
| *** rcernin has joined #openstack-keystone | 22:32 | |
| *** jaosorior has quit IRC | 22:55 | |
| *** tkajinam has joined #openstack-keystone | 23:06 | |
| *** awalende has joined #openstack-keystone | 23:25 | |
| *** awalende has quit IRC | 23:29 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!