| *** zhurong has joined #openstack-meeting-cp | 00:19 | |
| *** david-lyle_ is now known as david-lyle | 00:35 | |
| *** zhurong has quit IRC | 00:40 | |
| *** ameade has quit IRC | 00:57 | |
| *** ameade has joined #openstack-meeting-cp | 00:57 | |
| *** alij has joined #openstack-meeting-cp | 01:39 | |
| *** alij has quit IRC | 01:45 | |
| *** alij has joined #openstack-meeting-cp | 01:45 | |
| *** zhurong has joined #openstack-meeting-cp | 01:51 | |
| *** fredli has joined #openstack-meeting-cp | 02:29 | |
| *** mars has joined #openstack-meeting-cp | 02:35 | |
| *** alij has quit IRC | 02:40 | |
| *** diablo_rojo_phon has quit IRC | 03:08 | |
| *** coolsvap has joined #openstack-meeting-cp | 03:15 | |
| *** mrhillsman has joined #openstack-meeting-cp | 04:42 | |
| *** fredli has quit IRC | 05:15 | |
| *** prateek has joined #openstack-meeting-cp | 05:35 | |
| *** rarcea has joined #openstack-meeting-cp | 06:54 | |
| *** jroll has quit IRC | 08:27 | |
| *** jroll has joined #openstack-meeting-cp | 08:41 | |
| *** gouthamr has joined #openstack-meeting-cp | 08:45 | |
| *** skazi has left #openstack-meeting-cp | 08:57 | |
| *** gouthamr has quit IRC | 09:05 | |
| *** gouthamr has joined #openstack-meeting-cp | 09:15 | |
| *** zhurong has quit IRC | 09:20 | |
| *** zhurong has joined #openstack-meeting-cp | 09:21 | |
| *** zhurong has quit IRC | 10:02 | |
| *** gouthamr has quit IRC | 10:53 | |
| *** gema has left #openstack-meeting-cp | 11:21 | |
| *** gouthamr has joined #openstack-meeting-cp | 11:32 | |
| *** gouthamr has quit IRC | 11:47 | |
| *** gouthamr has joined #openstack-meeting-cp | 11:52 | |
| *** zhurong has joined #openstack-meeting-cp | 12:23 | |
| *** prateek has quit IRC | 12:41 | |
| *** markvoelker has quit IRC | 12:50 | |
| *** gouthamr has quit IRC | 12:52 | |
| *** mars has quit IRC | 12:59 | |
| *** lamt has joined #openstack-meeting-cp | 13:14 | |
| *** zhurong has quit IRC | 13:28 | |
| *** zhurong has joined #openstack-meeting-cp | 13:28 | |
| *** gouthamr has joined #openstack-meeting-cp | 13:30 | |
| *** zhurong has quit IRC | 13:43 | |
| *** zhurong has joined #openstack-meeting-cp | 13:45 | |
| *** markvoelker has joined #openstack-meeting-cp | 13:51 | |
| *** mrhillsman has quit IRC | 13:52 | |
| *** prateek has joined #openstack-meeting-cp | 13:55 | |
| *** markvoelker has quit IRC | 13:56 | |
| *** codebauss has joined #openstack-meeting-cp | 14:02 | |
| *** codebauss is now known as mrhillsman | 14:03 | |
| *** zhurong has quit IRC | 14:21 | |
| *** uxdanielle has joined #openstack-meeting-cp | 15:10 | |
| *** prateek has quit IRC | 15:19 | |
| *** markvoelker has joined #openstack-meeting-cp | 15:52 | |
| *** markvoelker has quit IRC | 15:57 | |
| *** gouthamr has quit IRC | 16:23 | |
| *** uxdanielle has quit IRC | 17:56 | |
| *** rarcea has quit IRC | 17:59 | |
| *** markvoelker has joined #openstack-meeting-cp | 18:07 | |
| *** coolsvap has quit IRC | 18:37 | |
| *** edtubill has joined #openstack-meeting-cp | 18:56 | |
| *** edtubill has quit IRC | 19:03 | |
| *** edtubill has joined #openstack-meeting-cp | 19:55 | |
| *** r1chardj0n3s has joined #openstack-meeting-cp | 19:58 | |
| r1chardj0n3s | stevemar: would you like to chair this morning? | 19:59 |
|---|---|---|
| * lbragstad strolls in | 20:00 | |
| *** tqtran has joined #openstack-meeting-cp | 20:00 | |
| rderose | o/ | 20:01 |
| r1chardj0n3s | I think we're missing a stevemar | 20:01 |
| dstanek | hi | 20:01 |
| r1chardj0n3s | oh well, let's kick off anyway | 20:01 |
| rderose | r1chardj0n3s: I think I heard stevemar is in jury duty this week | 20:02 |
| r1chardj0n3s | my brain ain't firing, just woke up ;-) | 20:02 |
| r1chardj0n3s | ah ok rderose | 20:02 |
| r1chardj0n3s | #startmeeting keystone_horizon | 20:02 |
| openstack | Meeting started Thu Nov 17 20:02:11 2016 UTC and is due to finish in 60 minutes. The chair is r1chardj0n3s. Information about MeetBot at http://wiki.debian.org/MeetBot. | 20:02 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 20:02 |
| *** openstack changes topic to " (Meeting topic: keystone_horizon)" | 20:02 | |
| openstack | The meeting name has been set to 'keystone_horizon' | 20:02 |
| r1chardj0n3s | #link https://etherpad.openstack.org/p/ocata-keystone-horizon Meeting agenda/minutes/work items | 20:02 |
| david-lyle | o/ | 20:02 |
| dolphm | \o | 20:02 |
| edtubill | o/ | 20:02 |
| tqtran | [=_=]/ | 20:03 |
| rderose | o/ | 20:03 |
| r1chardj0n3s | So, unless anyone has a better idea, I'll work through the etherpad and see if there's any updates | 20:04 |
| r1chardj0n3s | #topic sort projects by name please! | 20:04 |
| *** openstack changes topic to "sort projects by name please! (Meeting topic: keystone_horizon)" | 20:04 | |
| r1chardj0n3s | I don't think there's been any movement on this one - is anyone aware of relevant work? | 20:04 |
| r1chardj0n3s | I'm gonna take that as a no :-) | 20:05 |
| r1chardj0n3s | #topic Proper Domain-admin support | 20:05 |
| *** openstack changes topic to "Proper Domain-admin support (Meeting topic: keystone_horizon)" | 20:05 | |
| r1chardj0n3s | Looks like there's a patch for this now | 20:06 |
| r1chardj0n3s | #link https://review.openstack.org/#/c/399157/ | 20:06 |
| rderose | started this effort, first part is to require a domain_id when registering an idp | 20:06 |
| dstanek | r1chardj0n3s: i think that's something different | 20:06 |
| rderose | then federated users will be mapped to real domains | 20:06 |
| rderose | my part "removed hardcoded federated domain" | 20:07 |
| r1chardj0n3s | dstanek: I think there's a number of issues, but the federated users not being mapped to a real domain was one of them | 20:07 |
| r1chardj0n3s | rderose: so this is the death of the ephemeral "Federated" domain? | 20:07 |
| rderose | yes | 20:08 |
| r1chardj0n3s | \o/ | 20:08 |
| dstanek | r1chardj0n3s: can you not have a federated user be in a domain admin group at all right now? | 20:08 |
| david-lyle | question on requiring domain id | 20:08 |
| r1chardj0n3s | dstanek: no, at the moment federated users can't have domains at all | 20:08 |
| david-lyle | is that just generated? | 20:08 |
| david-lyle | does a name have to be specified? | 20:09 |
| rderose | david-lyle: no, admins will be required to create the idp domain before registering the idp | 20:09 |
| david-lyle | and just pick one ? | 20:09 |
| david-lyle | hopefully the correct one? | 20:09 |
| david-lyle | :) | 20:09 |
| david-lyle | trying to track future horizon work | 20:10 |
| david-lyle | you can setup federation in Horizon | 20:10 |
| rderose | david-lyle: yeah, they have to associate the domain_id with the idp; could pick the wrong one | 20:10 |
| dstanek | david-lyle: ideally it'll be easy because domain admins will only have access to one domain | 20:10 |
| rderose | the idp does have a description | 20:10 |
| david-lyle | so this would change the workflow | 20:10 |
| david-lyle | not a blocking issue, but we should capture the follow-on work | 20:10 |
| * david-lyle goes to capture | 20:11 | |
| r1chardj0n3s | thanks david-lyle | 20:11 |
| dstanek | r1chardj0n3s: i need to get the federation CLI stuff working so i can test that out | 20:11 |
| rderose | david-lyle: the docs do say create a domain as part of configuring federation | 20:11 |
| r1chardj0n3s | david-lyle: in the etherpad, ya? | 20:11 |
| david-lyle | yes | 20:11 |
| r1chardj0n3s | ok, moving on (but waiting for david-lyle to stop typing as the next bit's his ;-) | 20:12 |
| r1chardj0n3s | #topic Roles | 20:12 |
| *** openstack changes topic to "Roles (Meeting topic: keystone_horizon)" | 20:12 | |
| david-lyle | I did not sign up for splitting the quota step out | 20:13 |
| david-lyle | so that's still a todo waiting for an owner | 20:13 |
| david-lyle | I did add some comments on the _member_ situation | 20:13 |
| r1chardj0n3s | I think that should be moved to be a separate item in the etherpad | 20:14 |
| lbragstad | looks like david-lyle did the investigation | 20:14 |
| david-lyle | the choice is, do we want a default role? or force the user to select | 20:14 |
| david-lyle | of the two workflows one is easier to change to no defaults | 20:15 |
| david-lyle | the other is a bit of a hardcoded JS mess | 20:15 |
| david-lyle | the latter being update members on project | 20:15 |
| david-lyle | Theoretically all that lovely JS is going to be replace with even lovelier JS soon | 20:16 |
| *** chrisplo has joined #openstack-meeting-cp | 20:17 | |
| david-lyle | but I've been holding my breath for quite some time now and have gone through many shades of blue toward green now | 20:17 |
| r1chardj0n3s | david-lyle: yes, we have https://blueprints.launchpad.net/horizon/+spec/angularize-identity-projects | 20:17 |
| r1chardj0n3s | but I think we need to fix the current interface also | 20:17 |
| david-lyle | I'm glad you volunteered r1chardj0n3s | 20:18 |
| david-lyle | :) | 20:18 |
| r1chardj0n3s | wait what | 20:18 |
| r1chardj0n3s | If nothing else it would be good to capture the two broken interfaces in bugs please | 20:18 |
| r1chardj0n3s | Then hopefully someone will pick it up | 20:19 |
| r1chardj0n3s | #topic Roles and Quotas | 20:20 |
| *** openstack changes topic to "Roles and Quotas (Meeting topic: keystone_horizon)" | 20:20 | |
| r1chardj0n3s | there's no names at all against this one :-( | 20:20 |
| david-lyle | separating shouldn't be overly difficult TBH | 20:21 |
| r1chardj0n3s | the colour of the Action line looks like lbragstad so I guess that's ownership, right? ;-) | 20:21 |
| david-lyle | just moving a step to a new form | 20:21 |
| lbragstad | hah - not anymore! | 20:21 |
| *** robcresswell has joined #openstack-meeting-cp | 20:21 | |
| r1chardj0n3s | david-lyle: agreed | 20:21 |
| r1chardj0n3s | #topic K2K support | 20:22 |
| *** openstack changes topic to "K2K support (Meeting topic: keystone_horizon)" | 20:22 | |
| r1chardj0n3s | edtubill: update? | 20:22 |
| edtubill | hey, I think the items need to be reviewed still | 20:22 |
| * david-lyle has failed to review | 20:22 | |
| edtubill | but I've started to look into the blueprint option and writing code to see what changes we need for it. | 20:23 |
| dstanek | these on my list of things i need to look at | 20:23 |
| david-lyle | which is the bp option? | 20:23 |
| david-lyle | new dropdown? | 20:23 |
| edtubill | the new drop down and 'lazy' k2k sign on | 20:23 |
| edtubill | yup | 20:23 |
| david-lyle | and why not reuse regions? | 20:24 |
| david-lyle | nevermind, I'll push it back up to the top of my review list | 20:24 |
| edtubill | ok | 20:24 |
| edtubill | I don't like reusing regions because I think you would have to sign into all the providers | 20:25 |
| edtubill | upon inital log in. | 20:25 |
| david-lyle | you would only make the request to the endpoint you selected from regions | 20:25 |
| edtubill | and keep large session space for all the tokens and | 20:26 |
| david-lyle | but it requires a hardcoded list | 20:26 |
| edtubill | hmm | 20:26 |
| david-lyle | there is actually a matching region dropdown once you're logged in that can be enabled to | 20:26 |
| david-lyle | but it sends you back to the log in page | 20:26 |
| edtubill | Yeah I think I saw that code, I wasn't sure what that did. There seems to be two region dropdowns in the code. | 20:27 |
| david-lyle | yes, yes there are, you're welcome | 20:27 |
| david-lyle | :P | 20:27 |
| edtubill | :) | 20:27 |
| r1chardj0n3s | ok moving on? | 20:28 |
| david-lyle | the hidden one is for different endpoints, not regions in the traditional sense | 20:28 |
| david-lyle | well the keystone sense | 20:28 |
| david-lyle | sure | 20:28 |
| edtubill | ok | 20:28 |
| r1chardj0n3s | #topic Password about to expire info | 20:28 |
| *** openstack changes topic to "Password about to expire info (Meeting topic: keystone_horizon)" | 20:28 | |
| r1chardj0n3s | we have two patches for this, which I've added to our priority review list | 20:29 |
| r1chardj0n3s | I think that's probably all to say on this one | 20:29 |
| r1chardj0n3s | I'm going to skip to the new biggie at the end | 20:29 |
| rderose | we also need to handle password strength requirements | 20:29 |
| r1chardj0n3s | rderose: ok, that sounds like a separate issue we need to note then | 20:30 |
| rderose | cool | 20:30 |
| r1chardj0n3s | #topic #topic Retire django-openstack-auth-kerberos in favor of django_openstack_auth[kerberos]? | 20:30 |
| *** openstack changes topic to "#topic Retire django-openstack-auth-kerberos in favor of django_openstack_auth[kerberos]? (Meeting topic: keystone_horizon)" | 20:30 | |
| r1chardj0n3s | topic topic | 20:30 |
| r1chardj0n3s | https://bugs.launchpad.net/django-openstack-auth/+bug/1584432 | 20:30 |
| openstack | Launchpad bug 1584432 in django-openstack-auth-kerberos "deprecate doa-kerberos by using setuptools optional dependencies" [Undecided,In progress] - Assigned to Steve Martinelli (stevemar) | 20:30 |
| david-lyle | rderose: https://github.com/openstack/horizon/blob/master/doc/source/topics/settings.rst#password_validator | 20:31 |
| david-lyle | rules are optional | 20:31 |
| david-lyle | r1chardj0n3s: we're just going to retire the repo | 20:31 |
| david-lyle | read the line I added at the end | 20:31 |
| r1chardj0n3s | that sounds like a solid plan! | 20:31 |
| rderose | david-lyle: looks like we have some duplication in keystone's config | 20:31 |
| david-lyle | they're addressing the problem at different points | 20:32 |
| david-lyle | but it would be nice to have a shared source, but openstack | 20:33 |
| rderose | david-lyle: http://docs.openstack.org/developer/keystone/security_compliance.html | 20:33 |
| rderose | password strength requirements | 20:33 |
| david-lyle | sure, can we get that via API of an end user? | 20:34 |
| david-lyle | s/of/by/ | 20:34 |
| rderose | david-lyle: no, but the strength description is returned if the user fails password strength | 20:35 |
| rderose | during auth | 20:35 |
| david-lyle | for a UI that's a roundtrip to the server, where we can do it live on the page | 20:35 |
| dstanek | rderose: during auth or user create? | 20:36 |
| rderose | dstanke: right, sorry not during auth | 20:36 |
| rderose | but anytime your are creating a password | 20:36 |
| rderose | *dstanek | 20:36 |
| dstanek | david-lyle: having it discoverable makes total sense to me | 20:36 |
| david-lyle | discoverable is the answer to most of Horizon's duplicate settings problems, so I'm all for discoverability | 20:38 |
| r1chardj0n3s | +1 | 20:38 |
| r1chardj0n3s | please add a new thing to the etherpad: keystone to make it all discoverable :-) | 20:38 |
| r1chardj0n3s | (let's just add that password strength info, yes) | 20:39 |
| rderose | have it under PCI | 20:39 |
| r1chardj0n3s | #topic Support for browsing LDAP users | 20:40 |
| *** openstack changes topic to "Support for browsing LDAP users (Meeting topic: keystone_horizon)" | 20:40 | |
| r1chardj0n3s | Any updates here? | 20:41 |
| r1chardj0n3s | looks like some patches to fix https://bugs.launchpad.net/keystone/+bug/1582585 went in, fixing the speed issue at least | 20:42 |
| openstack | Launchpad bug 1582585 in OpenStack Identity (keystone) "the speed of query user from ldap server is very slow" [Wishlist,Fix released] - Assigned to Andrew Liu (andrew-lhj) | 20:42 |
| r1chardj0n3s | so I think the search-instead angle just needs more investigation | 20:43 |
| r1chardj0n3s | *crickets* :-) | 20:44 |
| rderose | so it will speed things up, but how does horizon handle pagination? | 20:44 |
| rderose | because will still return all records, unless filtered | 20:45 |
| r1chardj0n3s | rderose: we paginate using service APIs where possible, and we paginate large lists on the client if necessary | 20:45 |
| rderose | but it's probably not happening with the user list | 20:46 |
| r1chardj0n3s | no server side pagination | 20:46 |
| rderose | action item for keystone? | 20:46 |
| r1chardj0n3s | as I understand it, you can't paginate for LDAP | 20:47 |
| breton | no updates from my side, sorry | 20:47 |
| r1chardj0n3s | so we need to implement filtering (filter-first) in our UIs | 20:47 |
| * stevemar lurks in late | 20:47 | |
| dstanek | r1chardj0n3s: that's correct on pagination | 20:47 |
| rderose | dstanek: is that true | 20:47 |
| rderose | :) | 20:47 |
| stevemar | on the LDAP topic? | 20:48 |
| r1chardj0n3s | yep | 20:48 |
| dstanek | there's no way to query is and say 'start at record XYZ' | 20:48 |
| stevemar | for pagination you need to setup keystone to use an LDAP admin account: https://github.com/openstack/keystone/blob/master/etc/keystone.conf.sample#L1071-L1077 | 20:49 |
| stevemar | which for most enterprises, will tell you to buzz off :) | 20:49 |
| robcresswell | the filter_first stuff is implemented in half a dozen views already. I'd imagine someone could copy paste the existing implementations | 20:49 |
| *** kbyrne has quit IRC | 20:49 | |
| r1chardj0n3s | robcresswell: the UI just gets a bit tricky though | 20:49 |
| stevemar | robcresswell: whats an example of the filter_first stuff? | 20:50 |
| robcresswell | r1chardj0n3s: How so? | 20:50 |
| david-lyle | error codes and notices to the user | 20:50 |
| david-lyle | re: overflow | 20:50 |
| r1chardj0n3s | robcresswell: adding users to projects, IIRC, the UI is ... unique | 20:50 |
| robcresswell | Ah | 20:50 |
| robcresswell | I was thinking of the overall views. | 20:50 |
| robcresswell | index views etc. | 20:50 |
| r1chardj0n3s | yeah, those are easy | 20:51 |
| david-lyle | those would still need work | 20:51 |
| robcresswell | Right | 20:51 |
| robcresswell | They still aren't done though | 20:51 |
| *** kbyrne has joined #openstack-meeting-cp | 20:52 | |
| r1chardj0n3s | OK, moving on | 20:52 |
| r1chardj0n3s | #topic v3 policy is not parseable using oslo.policy | 20:52 |
| *** openstack changes topic to "v3 policy is not parseable using oslo.policy (Meeting topic: keystone_horizon)" | 20:52 | |
| stevemar | this one is long and convoluted | 20:52 |
| r1chardj0n3s | \o/ | 20:52 |
| r1chardj0n3s | ok, just quickly, PCI? | 20:54 |
| r1chardj0n3s | rderose, this is you? | 20:55 |
| stevemar | probably better to cover that one | 20:55 |
| stevemar | i need to read up on the policy bug | 20:55 |
| r1chardj0n3s | ack | 20:55 |
| rderose | yeah, we sort of covered it | 20:55 |
| rderose | I moved "Password about to expire info" under PCI | 20:56 |
| rderose | PCI stuff is growing | 20:56 |
| r1chardj0n3s | ok | 20:56 |
| rderose | The last one will require users to changed their password if an admin created it for them | 20:57 |
| rderose | Work being done in Ocata | 20:57 |
| stevemar | users should be able to change passwords in horizon i think | 20:57 |
| r1chardj0n3s | ah, cool, I see the comment added about the password strength discoverability | 20:57 |
| stevemar | hmm, we could expose that via an API | 20:58 |
| r1chardj0n3s | yes, please :-) | 20:58 |
| david-lyle | stevemar we currently have duplicate settings | 20:58 |
| david-lyle | at least for that | 20:58 |
| stevemar | link? | 20:58 |
| david-lyle | once line above | 20:58 |
| david-lyle | the not about discoverable | 20:58 |
| david-lyle | *note | 20:58 |
| david-lyle | *one | 20:58 |
| robcresswell | http://docs.openstack.org/developer/horizon/topics/settings.html#password-validator ? | 20:59 |
| stevemar | rgr | 20:59 |
| stevemar | oh | 20:59 |
| stevemar | thats interesting... | 20:59 |
| stevemar | you guys had it before we did :) | 20:59 |
| rderose | :) | 20:59 |
| r1chardj0n3s | :-) | 20:59 |
| r1chardj0n3s | ok folks, we're out of time, thanks again! | 21:00 |
| stevemar | np | 21:00 |
| r1chardj0n3s | #endmeeting | 21:00 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 21:00 | |
| openstack | Meeting ended Thu Nov 17 21:00:05 2016 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 21:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/keystone_horizon/2016/keystone_horizon.2016-11-17-20.02.html | 21:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/keystone_horizon/2016/keystone_horizon.2016-11-17-20.02.txt | 21:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/keystone_horizon/2016/keystone_horizon.2016-11-17-20.02.log.html | 21:00 |
| *** edtubill has quit IRC | 21:00 | |
| *** r1chardj0n3s has left #openstack-meeting-cp | 21:00 | |
| david-lyle | stevemar: only be 3 years | 21:01 |
| david-lyle | *by | 21:01 |
| stevemar | david-lyle: :) | 21:01 |
| * david-lyle gives up on typing today | 21:01 | |
| stevemar | david-lyle: was the decision to retire the doa-kerb repo? | 21:01 |
| david-lyle | yes | 21:01 |
| stevemar | rgr | 21:01 |
| stevemar | any other outcomes? | 21:01 |
| robcresswell | stevemar: ahem. read the logs :p | 21:02 |
| david-lyle | horizon has work to do to get rid of _member_ | 21:02 |
| david-lyle | and k2k bp still needs reviews | 21:02 |
| stevemar | robcresswell: yeah, i could :) | 21:03 |
| stevemar | but david-lyle is right here! | 21:03 |
| *** uxdanielle has joined #openstack-meeting-cp | 21:03 | |
| stevemar | david-lyle: did we decide on what route to go down for k2k, pre or post log in? | 21:03 |
| david-lyle | no | 21:03 |
| robcresswell | stevemar: Ha, very true | 21:03 |
| robcresswell | I think k2k got bumped because nobody has really looked yet | 21:04 |
| david-lyle | I pointed out some constructs already in Horizon that could be reussed, but really I owe some reviews | 21:04 |
| robcresswell | I'd offer to help but I imagine I might be more burden than value. | 21:04 |
| stevemar | david-lyle: robcresswell anything would be good at this point :) | 21:06 |
| david-lyle | I bumped it on my priority list | 21:06 |
| stevemar | \o/ | 21:09 |
| *** rarcea has joined #openstack-meeting-cp | 21:54 | |
| *** rarcea has joined #openstack-meeting-cp | 21:54 | |
| *** rarcea has quit IRC | 22:15 | |
| *** uxdanielle has quit IRC | 23:02 | |
| *** lamt has quit IRC | 23:37 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!