| *** itisha has quit IRC | 00:59 | |
| *** tovin07 has quit IRC | 01:08 | |
| *** bastafidli has joined #openstack-meeting-cp | 01:10 | |
| *** zhurong has joined #openstack-meeting-cp | 01:31 | |
| *** mars has joined #openstack-meeting-cp | 01:45 | |
| *** mars has left #openstack-meeting-cp | 01:46 | |
| *** sdague has quit IRC | 02:12 | |
| *** lamt has joined #openstack-meeting-cp | 02:29 | |
| *** sheeprine has quit IRC | 03:11 | |
| *** sheeprine has joined #openstack-meeting-cp | 03:15 | |
| *** diablo_rojo has joined #openstack-meeting-cp | 03:24 | |
| *** diablo_rojo has quit IRC | 03:29 | |
| *** Rockyg has quit IRC | 03:31 | |
| *** edtubill has joined #openstack-meeting-cp | 03:34 | |
| *** bastafidli has quit IRC | 03:45 | |
| *** harlowja has joined #openstack-meeting-cp | 04:37 | |
| *** prateek has joined #openstack-meeting-cp | 05:19 | |
| *** harlowja has quit IRC | 05:46 | |
| *** moshele has joined #openstack-meeting-cp | 05:55 | |
| *** tovin07 has joined #openstack-meeting-cp | 05:59 | |
| *** moshele has quit IRC | 06:10 | |
| *** gouthamr has joined #openstack-meeting-cp | 06:16 | |
| *** coolsvap has joined #openstack-meeting-cp | 07:10 | |
| *** moshele has joined #openstack-meeting-cp | 07:11 | |
| *** edtubill has quit IRC | 07:27 | |
| *** gouthamr_ has joined #openstack-meeting-cp | 07:27 | |
| *** gouthamr has quit IRC | 07:29 | |
| *** gouthamr_ has quit IRC | 08:08 | |
| *** moshele has left #openstack-meeting-cp | 08:14 | |
| *** rarcea has joined #openstack-meeting-cp | 08:23 | |
| *** gouthamr has joined #openstack-meeting-cp | 08:33 | |
| *** zhurong has quit IRC | 09:06 | |
| *** zhurong has joined #openstack-meeting-cp | 09:09 | |
| *** gouthamr has quit IRC | 09:11 | |
| *** zhurong has quit IRC | 09:33 | |
| *** zhurong has joined #openstack-meeting-cp | 09:35 | |
| *** hogepodge has quit IRC | 09:45 | |
| *** hogepodge has joined #openstack-meeting-cp | 09:46 | |
| *** zhurong has quit IRC | 09:50 | |
| *** zhurong has joined #openstack-meeting-cp | 09:55 | |
| *** zhurong has quit IRC | 10:01 | |
| *** gouthamr has joined #openstack-meeting-cp | 10:14 | |
| *** gouthamr_ has joined #openstack-meeting-cp | 10:23 | |
| *** gouthamr has quit IRC | 10:25 | |
| *** gouthamr has joined #openstack-meeting-cp | 10:27 | |
| *** gouthamr_ has quit IRC | 10:30 | |
| *** hogepodge has quit IRC | 11:01 | |
| *** hogepodge has joined #openstack-meeting-cp | 11:21 | |
| *** lamt has quit IRC | 11:24 | |
| *** hogepodge has quit IRC | 11:26 | |
| *** edtubill has joined #openstack-meeting-cp | 11:33 | |
| *** hogepodge has joined #openstack-meeting-cp | 11:38 | |
| *** prateek has quit IRC | 11:42 | |
| *** hogepodge has quit IRC | 11:48 | |
| *** gouthamr has quit IRC | 11:55 | |
| *** hogepodge has joined #openstack-meeting-cp | 12:00 | |
| *** edtubill has quit IRC | 12:11 | |
| *** skazi has joined #openstack-meeting-cp | 12:14 | |
| *** edtubill has joined #openstack-meeting-cp | 12:15 | |
| *** edtubill has quit IRC | 12:21 | |
| *** sdague has joined #openstack-meeting-cp | 12:26 | |
| *** itisha has joined #openstack-meeting-cp | 13:17 | |
| *** prateek has joined #openstack-meeting-cp | 13:31 | |
| *** coolsvap has quit IRC | 13:57 | |
| *** bastafidli has joined #openstack-meeting-cp | 14:02 | |
| *** gouthamr has joined #openstack-meeting-cp | 14:21 | |
| *** lamt has joined #openstack-meeting-cp | 15:01 | |
| *** bastafidli has quit IRC | 15:03 | |
| *** stvnoyes has joined #openstack-meeting-cp | 15:05 | |
| *** prateek has quit IRC | 15:22 | |
| *** jaugustine has joined #openstack-meeting-cp | 15:34 | |
| *** rarcea has quit IRC | 16:20 | |
| *** knikolla has quit IRC | 16:42 | |
| *** knikolla has joined #openstack-meeting-cp | 16:42 | |
| *** bastafidli has joined #openstack-meeting-cp | 17:03 | |
| *** knikolla has quit IRC | 17:11 | |
| *** knikolla has joined #openstack-meeting-cp | 17:12 | |
| *** bastafidli has quit IRC | 17:15 | |
| *** piet has joined #openstack-meeting-cp | 17:21 | |
| *** jgriffith has quit IRC | 18:10 | |
| *** jgriffith has joined #openstack-meeting-cp | 18:15 | |
| *** harlowja has joined #openstack-meeting-cp | 18:17 | |
| *** jgriffith has quit IRC | 18:19 | |
| *** harlowja_ has joined #openstack-meeting-cp | 18:20 | |
| *** jgriffith has joined #openstack-meeting-cp | 18:20 | |
| *** harlowja has quit IRC | 18:22 | |
| *** bastafidli has joined #openstack-meeting-cp | 19:15 | |
| *** piet has quit IRC | 19:32 | |
| *** r1chardj0n3s has joined #openstack-meeting-cp | 19:53 | |
| *** robcresswell has joined #openstack-meeting-cp | 19:54 | |
| *** ducttape_ has joined #openstack-meeting-cp | 19:56 | |
| r1chardj0n3s | #startmeeting keystone_horizon | 20:00 |
|---|---|---|
| openstack | Meeting started Thu Dec 8 20:00:45 2016 UTC and is due to finish in 60 minutes. The chair is r1chardj0n3s. Information about MeetBot at http://wiki.debian.org/MeetBot. | 20:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 20:00 |
| *** openstack changes topic to " (Meeting topic: keystone_horizon)" | 20:00 | |
| openstack | The meeting name has been set to 'keystone_horizon' | 20:00 |
| r1chardj0n3s | good morning, folks! | 20:00 |
| dolphm | \o/ | 20:00 |
| * lbragstad high-fives r1chardj0n3s | 20:01 | |
| robcresswell | o/ | 20:01 |
| crinkle | o/ | 20:01 |
| david-lyle | o/ | 20:01 |
| r1chardj0n3s | so, what've folks been working on? | 20:01 |
| lbragstad | well - we merged http://specs.openstack.org/openstack/keystone-specs/specs/keystone/ocata/pci-dss-password-requirements-api.html | 20:02 |
| r1chardj0n3s | \o/ | 20:02 |
| r1chardj0n3s | are we any closer to an API for getting that info from Horizon? | 20:02 |
| stevemar | o/ | 20:02 |
| stevemar | oh dolphm is here too, nice | 20:03 |
| lbragstad | r1chardj0n3s getting that information from keystone? or horizon? | 20:03 |
| rderose | o/ | 20:03 |
| dolphm | stevemar: =) | 20:03 |
| r1chardj0n3s | lbragstad: getting the password strength information from keystone into horizon | 20:03 |
| ducttape_ | ideally horizon gets this info from keystone, shows it to user? and i18n would be supported ? | 20:04 |
| lbragstad | r1chardj0n3s yeah - we have a spec detailing and API for it, i plan to start working on it next week | 20:04 |
| r1chardj0n3s | lbragstad: the human-readable version of the regex | 20:04 |
| r1chardj0n3s | lbragstad: oh cool | 20:04 |
| lbragstad | r1chardj0n3s the regex and the description for it will be available via the api | 20:04 |
| r1chardj0n3s | \o/ | 20:04 |
| dolphm | lbragstad: in an error message or in advance? | 20:05 |
| lbragstad | dolphm in an error message when a user tries to update their password, you mean? | 20:05 |
| dolphm | lbragstad: yes | 20:05 |
| stevemar | ducttape_: translation might be hard | 20:06 |
| lbragstad | dolphm i believe we already do that | 20:06 |
| dolphm | lbragstad: how/when is the description exposed | 20:06 |
| david-lyle | we want it upfront | 20:06 |
| dolphm | lbragstad: (i thought so) so it'll now be done in advance? | 20:06 |
| dolphm | gotcha | 20:06 |
| lbragstad | dolphm yeah | 20:06 |
| dolphm | UX++ | 20:06 |
| lbragstad | dolphm it can be done in advance, but it's up to whoever implements it to use it wherever they want | 20:06 |
| lbragstad | but - the horizon folks had some good reasons for wanting it in advance last week | 20:07 |
| rderose | yeah, I don't know how you would do translation as this is a configurable item. | 20:09 |
| r1chardj0n3s | looking forward to that new API spec. it would be great to be able to get a translated version if possible, but I get that that could be difficult. Is the configuration always created by deployers? | 20:09 |
| rderose | r1chardj0n3s: currently, yes | 20:09 |
| r1chardj0n3s | so they'd know whether they had any i18n requirements I guess, when they're setting password_regex_description | 20:10 |
| rderose | true | 20:10 |
| ducttape_ | localization is probably low weight concern imo. I'd think most deployments are ok with single default lang fwiw | 20:10 |
| ducttape_ | was just curious | 20:10 |
| dolphm | you could always write the message in two different languages in config, but that doesn't scale if you really need to cater to a long list of languages | 20:11 |
| r1chardj0n3s | ok, anyone else have anything they've been working on that needs discussion? | 20:12 |
| *** jamielennox has joined #openstack-meeting-cp | 20:14 | |
| r1chardj0n3s | y'all are quiet :-) stevemar, you got anything? | 20:14 |
| robcresswell | We've scared off keystone | 20:15 |
| * dolphm boo. | 20:15 | |
| * robcresswell jumps | 20:15 | |
| lbragstad | tough crowd lol | 20:15 |
| r1chardj0n3s | well, I'll poke rderose to see how "fixing federation" is going :-) | 20:15 |
| rderose | sure | 20:16 |
| rderose | new patch: https://review.openstack.org/#/c/399684/ | 20:16 |
| rderose | Essentially it require a domain_id when registering an IdP. If not provided, federated users will be put under a default federated domain. | 20:17 |
| rderose | But all users will be under a concrete domain. | 20:17 |
| rderose | More patches coming... :) | 20:18 |
| r1chardj0n3s | ok, there's mention in the etherpad of Horizon impact too | 20:18 |
| r1chardj0n3s | is that selection of domain id when configuring the idp in horizon, or at some other time? | 20:19 |
| rderose | I don't think Horizon supports creating the IdP, right? | 20:20 |
| rderose | or does it? | 20:20 |
| david-lyle | rderose: yes | 20:20 |
| rderose | ah, cool | 20:20 |
| rderose | so that would be a change | 20:20 |
| dolphm | it's just not entirely useful on it's own without dstanek's work | 20:20 |
| david-lyle | so we'll need a new field for domain_id | 20:21 |
| rderose | david-lyle: yes | 20:21 |
| robcresswell | How does keystone version these changes? | 20:21 |
| r1chardj0n3s | robcresswell: are you having another microversion moment? | 20:22 |
| rderose | david-lyle: it is backwards compatible in that, if you don't explicitly set the domain_id, we'll create one | 20:22 |
| robcresswell | Ah phew | 20:22 |
| david-lyle | ok | 20:22 |
| r1chardj0n3s | \o/ | 20:22 |
| robcresswell | r1chardj0n3s: Yes I could feel my blood pressure rising | 20:22 |
| dolphm | robcresswell: we haven't introduced a backwards incompatible API change since pre-diablo :) | 20:22 |
| robcresswell | dolphm: You should teach Nova how to API | 20:23 |
| * robcresswell goes back to being a grumpy hermit | 20:23 | |
| dolphm | lol | 20:23 |
| david-lyle | post PTL-syndrome | 20:23 |
| r1chardj0n3s | dolphm: do you have a reference to the dstanek work you mentioned above? | 20:24 |
| *** gagehugo has joined #openstack-meeting-cp | 20:24 | |
| dolphm | r1chardj0n3s: http://specs.openstack.org/openstack/keystone-specs/specs/keystone/ocata/native-saml.html | 20:25 |
| r1chardj0n3s | thx | 20:25 |
| rderose | dolphm: true, but even without dstanek patch, we can remove the hardcoded 'Federated' domain | 20:26 |
| david-lyle | so no dependency on apache for federation ? | 20:26 |
| rderose | and migrate federated users to a concrete domain | 20:26 |
| dolphm | rderose: right | 20:27 |
| dolphm | rderose: i was just referring to the utility of the current horizon flow for setting up IdP's (you still have to configure shib et al) | 20:27 |
| rderose | dolphm: gotcha | 20:27 |
| lbragstad | david-lyle yep - specifically no dependency on mod_shib or mod_mellon | 20:29 |
| david-lyle | nice | 20:29 |
| r1chardj0n3s | any other issues to discuss? | 20:31 |
| r1chardj0n3s | or, any patches we should look at as a priority? | 20:32 |
| robcresswell | Nothing from me :) | 20:34 |
| robcresswell | Can probably call the meeting early | 20:34 |
| r1chardj0n3s | yep, if there's nothing either team needs from the other, I'll call it | 20:35 |
| r1chardj0n3s | thanks everyone! | 20:35 |
| lbragstad | o/ | 20:35 |
| r1chardj0n3s | #endmeeting | 20:35 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 20:35 | |
| crinkle | o/ | 20:35 |
| openstack | Meeting ended Thu Dec 8 20:35:37 2016 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 20:35 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/keystone_horizon/2016/keystone_horizon.2016-12-08-20.00.html | 20:35 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/keystone_horizon/2016/keystone_horizon.2016-12-08-20.00.txt | 20:35 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/keystone_horizon/2016/keystone_horizon.2016-12-08-20.00.log.html | 20:35 |
| *** ducttape_ has left #openstack-meeting-cp | 20:35 | |
| dolphm | o/ | 20:35 |
| *** r1chardj0n3s has left #openstack-meeting-cp | 20:35 | |
| *** gagehugo has left #openstack-meeting-cp | 20:37 | |
| *** jamielennox has left #openstack-meeting-cp | 20:40 | |
| *** itisha has quit IRC | 20:59 | |
| *** _ducttape_ has joined #openstack-meeting-cp | 21:00 | |
| *** lamt has quit IRC | 21:01 | |
| *** xyang1 has joined #openstack-meeting-cp | 21:02 | |
| *** bastafidli has quit IRC | 21:15 | |
| *** lamt has joined #openstack-meeting-cp | 21:19 | |
| *** _ducttape_ has quit IRC | 21:35 | |
| *** ducttape_ has joined #openstack-meeting-cp | 21:36 | |
| *** lamt has quit IRC | 21:48 | |
| *** lamt has joined #openstack-meeting-cp | 21:49 | |
| *** ducttape_ has quit IRC | 22:09 | |
| *** ducttape_ has joined #openstack-meeting-cp | 22:13 | |
| *** lamt has quit IRC | 22:14 | |
| *** gouthamr has quit IRC | 22:15 | |
| *** ducttape_ has quit IRC | 22:21 | |
| *** jaugustine has quit IRC | 22:51 | |
| *** david-lyle_ has joined #openstack-meeting-cp | 23:05 | |
| *** david-lyle has quit IRC | 23:07 | |
| *** jgriffith is now known as jgriffith_AutoAw | 23:18 | |
| *** xyang1 has quit IRC | 23:19 | |
| *** david-lyle_ is now known as david-lyle | 23:35 | |
| *** jgriffith_AutoAw is now known as jgriffith | 23:44 | |
| *** sdague has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!