*** jamesmcarthur has joined #openstack-keystone | 00:16 | |
*** spatel has joined #openstack-keystone | 00:28 | |
*** jamesmcarthur has quit IRC | 00:29 | |
*** spatel has quit IRC | 00:30 | |
*** jamesmcarthur has joined #openstack-keystone | 00:40 | |
*** jamesmcarthur has quit IRC | 00:45 | |
*** jamesmcarthur has joined #openstack-keystone | 00:46 | |
*** zzzeek has quit IRC | 00:49 | |
*** zzzeek has joined #openstack-keystone | 00:50 | |
*** jamesmcarthur has quit IRC | 01:10 | |
*** jamesmcarthur has joined #openstack-keystone | 01:20 | |
*** jamesmcarthur has quit IRC | 01:28 | |
*** jamesmcarthur has joined #openstack-keystone | 01:45 | |
*** jamesmcarthur has quit IRC | 01:53 | |
*** jamesmcarthur has joined #openstack-keystone | 01:53 | |
openstackgerrit | Qi Zhang proposed openstack/oslo.policy master: Fix grammar issues https://review.opendev.org/760049 | 02:01 |
---|---|---|
openstackgerrit | Qi Zhang proposed openstack/oslo.policy master: Fix grammar issues https://review.opendev.org/760049 | 02:08 |
*** jamesmcarthur has quit IRC | 02:18 | |
*** rcernin has quit IRC | 02:41 | |
*** rcernin has joined #openstack-keystone | 02:42 | |
*** jamesmcarthur has joined #openstack-keystone | 03:23 | |
*** jamesmcarthur has quit IRC | 03:28 | |
*** jamesmcarthur has joined #openstack-keystone | 03:51 | |
*** jamesmcarthur has quit IRC | 04:02 | |
*** jamesmcarthur has joined #openstack-keystone | 04:03 | |
*** jamesmcarthur has quit IRC | 04:06 | |
*** rcernin has quit IRC | 04:21 | |
*** zzzeek has quit IRC | 04:26 | |
*** zzzeek has joined #openstack-keystone | 04:28 | |
*** rcernin has joined #openstack-keystone | 04:30 | |
*** rcernin has quit IRC | 04:34 | |
*** rcernin has joined #openstack-keystone | 04:42 | |
*** rcernin has quit IRC | 04:53 | |
*** benj_ has quit IRC | 05:04 | |
*** benj_ has joined #openstack-keystone | 05:07 | |
*** evrardjp has quit IRC | 05:33 | |
*** evrardjp has joined #openstack-keystone | 05:33 | |
*** rcernin has joined #openstack-keystone | 05:36 | |
*** rcernin has quit IRC | 05:40 | |
*** rcernin has joined #openstack-keystone | 05:48 | |
*** rcernin has quit IRC | 05:57 | |
*** vishalmanchanda has joined #openstack-keystone | 06:22 | |
*** pots has quit IRC | 06:22 | |
*** pots has joined #openstack-keystone | 06:23 | |
*** hemna has quit IRC | 06:23 | |
*** hemna has joined #openstack-keystone | 06:24 | |
*** abdysn has joined #openstack-keystone | 06:28 | |
*** npbhosale has joined #openstack-keystone | 07:02 | |
npbhosale | Hello ... looking for some help with respect to connecting to LDAP server with Keystone | 07:03 |
npbhosale | I am hitting this issue: https://bugzilla.redhat.com/show_bug.cgi?id=1883340 | 07:04 |
openstack | bugzilla.redhat.com bug 1883340 in openstack-keystone "Unable to disable LDAP paging using Active Directory" [High,Assigned] - Assigned to lbragsta | 07:04 |
npbhosale | where I get an error from keystone like: keystone.exception.LDAPSizeLimitExceeded: Number of User/Group entities returned by LDAP exceeded size limit. Contact your LDAP administrator. | 07:04 |
npbhosale | is there any workaround for this? | 07:04 |
npbhosale | I tried patching the keystone config as: | 07:06 |
npbhosale | $ curl -kv -X PATCH http://<keystone-server-ip>:5000/v3/domains/b0f06840dbf94291993ae4a251382554/config -H "X-Auth-Token: $TOKEN" -H "Content-Type: application/json" -d'{"config": {"identity": {"driver": "ldap"}, "ldap": {"page_size": 1000}}}' | 07:06 |
npbhosale | but not sure if that is the right way ... | 07:06 |
npbhosale | should 'page_size' be set as an integer or a string? | 07:08 |
*** bengates has joined #openstack-keystone | 08:55 | |
*** bengates has quit IRC | 08:55 | |
*** bengates has joined #openstack-keystone | 08:55 | |
*** rcernin has joined #openstack-keystone | 09:23 | |
*** abdysn has quit IRC | 09:24 | |
*** gshippey has joined #openstack-keystone | 09:36 | |
*** rcernin has quit IRC | 09:45 | |
*** sapd1_x has joined #openstack-keystone | 10:00 | |
*** npbhosale has quit IRC | 10:37 | |
*** rcernin has joined #openstack-keystone | 10:41 | |
*** abdysn has joined #openstack-keystone | 10:50 | |
*** Abdallahyas has joined #openstack-keystone | 10:54 | |
*** rcernin has quit IRC | 10:55 | |
*** abdysn has quit IRC | 10:58 | |
*** Abdallahyas has quit IRC | 11:29 | |
*** abdysn has joined #openstack-keystone | 11:29 | |
*** Luzi has joined #openstack-keystone | 12:08 | |
*** raildo has joined #openstack-keystone | 12:14 | |
*** Luzi has quit IRC | 13:20 | |
*** dave-mccowan has quit IRC | 14:00 | |
*** dave-mccowan has joined #openstack-keystone | 14:06 | |
*** jamesmcarthur has joined #openstack-keystone | 14:43 | |
*** vishalmanchanda has quit IRC | 14:46 | |
*** abdysn has quit IRC | 14:58 | |
*** larsks has joined #openstack-keystone | 15:35 | |
*** larsks has left #openstack-keystone | 15:35 | |
*** fanfi_ has joined #openstack-keystone | 16:14 | |
fanfi_ | hello, could somebody help me please. After fresh installation of OpenStack-Ansible, compute node is not able to join to our deployment. In nova-compute log i see following error: Failed to discover available identity versions when contacting http://IP:5000/v3/. Attempting to parse version from URL. And ERROR nova keystoneauth1.exceptions.connection.UnknownConnectionError: Unexpected exception for http://IP:5000/v3/auth/tokens: Failed to parse: htt | 16:16 |
fanfi_ | http://IP:5000/v3/auth/tokens | 16:16 |
fanfi_ | 5000/v3/auth/tokens | 16:17 |
*** jamesmcarthur has quit IRC | 16:17 | |
*** jamesmcarthur has joined #openstack-keystone | 16:36 | |
*** jamesmcarthur has quit IRC | 16:37 | |
*** jamesmcarthur has joined #openstack-keystone | 16:42 | |
*** jamesmcarthur has quit IRC | 17:00 | |
*** jamesmcarthur_ has joined #openstack-keystone | 17:01 | |
*** fanfi_ has quit IRC | 17:16 | |
*** jamesmcarthur_ has quit IRC | 17:28 | |
*** jamesmcarthur has joined #openstack-keystone | 17:28 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Use app cred user ID in policy enforcement https://review.opendev.org/760972 | 17:30 |
*** jamesmcarthur has quit IRC | 17:34 | |
*** bengates has quit IRC | 17:34 | |
*** jamesmcarthur has joined #openstack-keystone | 18:04 | |
*** jamesmcarthur has quit IRC | 18:12 | |
*** jamesmcarthur has joined #openstack-keystone | 18:12 | |
*** jamesmcarthur has quit IRC | 18:20 | |
*** hoonetorg has quit IRC | 20:10 | |
*** hoonetorg has joined #openstack-keystone | 20:23 | |
*** hamalq has joined #openstack-keystone | 20:32 | |
hamalq | hi, if u have multiple keystone servers and serv1,serv2 and any request can go to either and u have memcached enabled for token caching should the memcache in the two servers be connected ad one pool or its ok if every server have its own memecahed | 20:35 |
hamalq | will that cause the token validation tto fail | 20:36 |
hamalq | if every server have its own memcahe | 20:36 |
hamalq | ? | 20:36 |
*** rcernin has joined #openstack-keystone | 20:40 | |
*** rcernin has quit IRC | 20:43 | |
*** rcernin has joined #openstack-keystone | 20:43 | |
*** ayoung has joined #openstack-keystone | 21:08 | |
lbragstad | hamalq token validation will continue to work | 21:30 |
lbragstad | but each memcached instance will need a copy of the token before the performance will be guaranteed | 21:31 |
hamalq | lbragstad: thanks for the clear answer | 21:44 |
*** lbragstad_ has joined #openstack-keystone | 22:05 | |
*** lbragstad has quit IRC | 22:06 | |
*** raildo has quit IRC | 22:26 | |
*** dave-mccowan has quit IRC | 22:52 | |
*** lbragstad_ has quit IRC | 22:57 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!