Saturday, 2011-09-24

*** obino has joined #openstack00:01
*** dysinger has joined #openstack00:09
*** kbringard has quit IRC00:09
dysingeranyone else seen this ? https://gist.github.com/1238749 (openstack-release)00:14
*** vladimir3p has quit IRC00:19
*** mgius has quit IRC00:26
*** nerens has quit IRC00:28
*** stanchan has joined #openstack00:28
*** huslage has joined #openstack00:29
*** po has quit IRC00:32
*** Razique has joined #openstack00:35
Raziquehey00:35
*** bdwarr6 has joined #openstack00:35
*** troytoman is now known as troytoman-away00:36
Raziqueannegentle: here ? :)00:36
*** Razique has left #openstack00:37
*** obino has quit IRC00:38
*** osier has quit IRC00:41
*** po has joined #openstack00:41
*** nerdstein has quit IRC00:45
*** PeteDaGuru has left #openstack00:53
*** woleium has quit IRC00:53
*** bsza has joined #openstack00:53
*** bsza has quit IRC00:54
*** mgius has joined #openstack01:03
*** jdurgin has quit IRC01:04
*** stewart has quit IRC01:05
*** krow has joined #openstack01:06
*** danwent has quit IRC01:09
*** wwkeyboard has joined #openstack01:16
*** mgius has quit IRC01:17
*** mgius has joined #openstack01:19
*** dwcramer has joined #openstack01:22
*** mgius has quit IRC01:23
*** clayg_ is now known as clayg01:38
*** nerdstein has joined #openstack01:40
*** stanchan has quit IRC01:45
*** woleium has joined #openstack01:48
*** osier has joined #openstack01:58
*** nyeates has quit IRC01:59
tjoydysinger: looks like a dependency problem, install httplib2 (or whatever package provides it) and file a bug02:03
*** Ryan_Lane has quit IRC02:04
*** neogenix has joined #openstack02:04
tjoyer, didn't see you in -dev02:05
*** rods has quit IRC02:05
*** obino has joined #openstack02:10
*** emid has joined #openstack02:14
*** nerdstein has quit IRC02:16
*** wwkeyboard has quit IRC02:17
*** maplebed has quit IRC02:18
*** bdwarr61 has joined #openstack02:32
*** bdwarr6 has quit IRC02:32
*** bdwarr61 has left #openstack02:33
*** huslage has quit IRC02:34
*** ergalassi has quit IRC02:35
*** adjohn has quit IRC02:38
*** nyeates has joined #openstack02:39
*** rustam has quit IRC02:43
*** livemoon has joined #openstack02:44
uvirtbotNew bug: #857956 in glance "apt pkg for glance in openstack-release 2011.3 has dependency problem" [Undecided,New] https://launchpad.net/bugs/85795602:46
*** hadrian has quit IRC02:49
*** dysinger has quit IRC03:04
*** jj0hns0n_ has joined #openstack03:04
*** gohko_na_ has joined #openstack03:05
*** bhall_ has joined #openstack03:05
*** thickski_ has joined #openstack03:06
*** tryggvil_ has joined #openstack03:06
*** pothos_ has joined #openstack03:06
*** obino has quit IRC03:07
*** po has quit IRC03:07
*** hbetts has quit IRC03:07
*** pothos has quit IRC03:07
*** jj0hns0n has quit IRC03:07
*** MarkAtwood has quit IRC03:07
*** clayg has quit IRC03:07
*** vernhart has quit IRC03:07
*** martines has quit IRC03:07
*** spikebike has quit IRC03:07
*** nci has quit IRC03:07
*** ohadlevy has quit IRC03:07
*** cw has quit IRC03:07
*** gohko_nao has quit IRC03:07
*** tryggvil has quit IRC03:07
*** negronjl has quit IRC03:07
*** rdj has quit IRC03:07
*** snowboarder04 has quit IRC03:07
*** winston-d has quit IRC03:07
*** lool has quit IRC03:07
*** blahee has quit IRC03:07
*** DuncanT has quit IRC03:07
*** mahmoh has quit IRC03:07
*** Jbain has quit IRC03:07
*** bodepd has quit IRC03:07
*** cdbs has quit IRC03:07
*** bhall has quit IRC03:07
*** JStoker has quit IRC03:07
*** cweidenkeller has quit IRC03:07
*** ivoks has quit IRC03:07
*** asksol has quit IRC03:07
*** ahale has quit IRC03:07
*** aimka has quit IRC03:07
*** kpepple has quit IRC03:07
*** thickskin has quit IRC03:07
*** mu574n9 has quit IRC03:07
*** ianweller has quit IRC03:07
*** termie has quit IRC03:07
*** loceur has quit IRC03:07
*** RichiH has quit IRC03:07
*** jj0hns0n_ is now known as jj0hns0n03:07
*** tryggvil_ is now known as tryggvil03:07
*** kpepple has joined #openstack03:07
*** duffman has quit IRC03:07
*** pothos_ is now known as pothos03:08
*** asksol has joined #openstack03:08
*** ahale has joined #openstack03:09
*** cw has joined #openstack03:09
*** cdbs has joined #openstack03:09
*** spikebike has joined #openstack03:09
*** RichiH has joined #openstack03:09
*** bodepd has joined #openstack03:09
*** Jbain has joined #openstack03:09
*** ivoks has joined #openstack03:09
*** ivoks has joined #openstack03:09
*** mu574n9 has joined #openstack03:09
*** loceur has joined #openstack03:09
*** termie has joined #openstack03:09
*** termie has joined #openstack03:09
*** cweidenkeller has joined #openstack03:10
*** DuncanT1 has joined #openstack03:10
*** primeministerp has quit IRC03:10
*** mu574n9 is now known as Guest8114703:10
*** aimka has joined #openstack03:10
*** ohadlevy has joined #openstack03:11
*** ianweller has joined #openstack03:12
*** ianweller is now known as Guest439403:12
*** MarkAtwood has joined #openstack03:12
*** JStoker has joined #openstack03:13
*** v0id has joined #openstack03:14
*** vernhart has joined #openstack03:14
*** lool has joined #openstack03:14
*** negronjl has joined #openstack03:16
*** rdj has joined #openstack03:18
*** livemoon has quit IRC03:19
*** blahee has joined #openstack03:19
*** livemoon has joined #openstack03:19
*** hbetts has joined #openstack03:20
*** po has joined #openstack03:20
*** martines has joined #openstack03:20
*** nci has joined #openstack03:20
*** clayg has joined #openstack03:21
*** emid has quit IRC03:21
*** Guest4394 is now known as ianweller03:22
*** ianweller has joined #openstack03:22
*** primeministerp has joined #openstack03:22
*** mahmoh has joined #openstack03:22
*** livemoon has quit IRC03:22
*** obino has joined #openstack03:23
*** duffman has joined #openstack03:28
*** woleium has quit IRC03:42
*** dwcramer has quit IRC03:47
*** adjohn has joined #openstack03:51
*** adjohn has quit IRC04:04
*** rsampaio has joined #openstack04:17
*** danwent has joined #openstack04:18
*** ChrisAM has quit IRC04:19
*** martine_ has quit IRC04:21
*** stanchan has joined #openstack04:22
*** ChrisAM1 has joined #openstack04:23
*** neogenix has quit IRC04:23
*** nyeates has quit IRC04:27
*** stanchan has quit IRC04:30
*** ChrisAM1 has quit IRC04:35
*** koolhead17 has quit IRC04:36
*** danwent has quit IRC04:36
*** ChrisAM1 has joined #openstack04:41
*** ChrisAM1 is now known as ChrisAM04:41
*** danwent has joined #openstack04:45
*** danwent has quit IRC04:49
*** jaypipes has quit IRC05:02
*** kbringard has joined #openstack05:04
*** kbringard has quit IRC05:04
*** bonzay is now known as zz_bonzay05:08
*** g2_ has quit IRC05:14
*** osier has quit IRC05:27
*** stanchan has joined #openstack05:32
*** koolhead17 has joined #openstack05:32
*** Ryan_Lane has joined #openstack05:33
*** bdwarr6 has joined #openstack05:36
*** bdwarr6 has left #openstack05:36
*** jdag has left #openstack05:38
*** llang629 has joined #openstack05:56
*** axisys has quit IRC06:09
*** axisys has joined #openstack06:10
*** axisys has quit IRC06:14
*** axisys has joined #openstack06:15
*** rsampaio has quit IRC06:27
*** krow has quit IRC06:51
*** v0id has quit IRC07:03
*** atkisc has joined #openstack07:11
*** hbetts has quit IRC07:33
*** primeministerp has quit IRC07:55
*** primeministerp has joined #openstack07:56
*** dendrobates is now known as dendro-afk08:05
*** koolhead17 has quit IRC08:12
*** tjikkun has joined #openstack08:18
*** nerens has joined #openstack08:19
*** TheOsprey has joined #openstack08:19
*** nyeates has joined #openstack08:25
*** snowboarder04 has joined #openstack08:25
*** Ryan_Lane has quit IRC08:31
*** nyeates has quit IRC08:34
*** Ashutto has joined #openstack08:38
AshuttoHello08:38
Ashuttoi started with openstack few days ago. i managed to have two nodes as described in the wiki docs, but i can't lunch instances. it keeps hanging at the "networking" process. i can't find a clue in the logs...is anybody willing to help me? :)08:40
*** ziyadb has joined #openstack08:41
*** jedi4ever has joined #openstack08:44
*** koolhead17 has joined #openstack08:47
koolhead17hi all08:52
*** hingo has quit IRC08:56
Ashuttoi started with openstack few days ago. i managed to have two nodes as described in the wiki docs, but i can't lunch instances. it keeps hanging at the "networking" process. i can't find a clue in the logs...is anybody willing to help me? :) [my setup is on various virtualbox images containing the openstack framework]09:02
*** hingo has joined #openstack09:02
vishyAshutto: if you do rabbitmqctl list_queues, are all of your queues empty?09:22
*** jj0hns0n has quit IRC09:28
*** jj0hns0n has joined #openstack09:28
tjoyoh09:30
tjoynova-compute doesn't depend on vlan09:31
tjoyat least it didn't in d409:31
tjoyi should be careful09:31
vishytjoy: it should though09:36
vishyif you're running in vlan mode anyway09:37
atkischi ,everybody, diablo 4 release dashboard run ?09:37
vishyatkisc: dashboard doesn't work atm09:37
tjoyvishy: i had to install the vlan package for myself on d409:37
vishycorrect09:37
tjoywell ok09:37
vishyit is fixed in current packages as a dependency09:37
*** PiotrSikora has quit IRC09:39
*** PiotrSikora has joined #openstack09:41
*** jedi4ever has quit IRC09:45
*** rustam has joined #openstack10:07
*** rustam has quit IRC10:11
valeriyhello everybody10:16
valeriydid anybody tried to configure RBAC roles?10:17
koolhead17hi vishy valeriy10:17
valeriysure?10:17
vishyvaleriy: are you using the ec2 api?10:18
valeriyyes10:19
*** Razique has joined #openstack10:19
valeriytogether with nova api10:19
vishyvaleriy: in that case you need to edit them in nova/api/ec2/__init__.py10:19
*** ziyadb has quit IRC10:19
vishyRBAC doesn't do anything with nova api10:19
RaziqueHi all10:20
valeriynova-manage? role add?10:20
valeriyanyway, what can i do with __init__.py?10:21
*** TheOsprey has quit IRC10:21
valeriyclass Authoriser, __init__?10:24
*** rustam has joined #openstack10:31
valeriythat's a little fragment from Nova concept: "Nova provides roles based access control (RBAC) for access to api commands....Roles define which api_commands a user can perform. "10:31
vishyvaleriy: yes it is only in the ec2 api10:32
*** dirkx_ has joined #openstack10:33
valeriyok. let's assume that it is correct, i mean "only in the ec2 api". does it mean, that a user with a limited role must not see foreign instances through "euca-describe-instances"?10:34
valeriyor RBAC is only for filtering allowed API commands, but not for filtering command results?10:35
*** dirkx_ has quit IRC10:37
*** wwkeyboard has joined #openstack10:41
*** ziyadb has joined #openstack10:55
*** Razique has left #openstack10:59
*** nerens has quit IRC11:04
*** msivanes has joined #openstack11:04
*** jedi4ever has joined #openstack11:05
*** openpercept has joined #openstack11:06
*** tzn has joined #openstack11:14
*** ziyadb has quit IRC11:22
*** ziyadb has joined #openstack11:24
*** MarcMorata has joined #openstack11:43
*** TheOsprey has joined #openstack11:44
*** msivanes1 has joined #openstack11:49
*** msivanes has quit IRC11:53
*** wwkeyboard has quit IRC11:56
*** OutBackDingo has quit IRC12:02
*** OutBackDingo has joined #openstack12:05
*** wwkeyboard has joined #openstack12:07
*** snowboarder04 has quit IRC12:08
*** wwkeyboard has quit IRC12:11
*** hggdh has quit IRC12:13
*** bsza has joined #openstack12:22
*** AhmedSoliman has joined #openstack12:35
*** tzn has quit IRC12:46
*** ksteward1 has joined #openstack12:47
*** ksteward has quit IRC12:50
*** katkee has joined #openstack12:51
*** AhmedSoliman has quit IRC12:52
*** jedi4ever has quit IRC12:52
*** snowboarder04 has joined #openstack13:00
*** katkee has quit IRC13:05
*** dwcramer has joined #openstack13:17
*** ziyadb has quit IRC13:17
*** snowboarder04 has quit IRC13:20
*** dwcramer has quit IRC13:35
*** hggdh has joined #openstack13:43
*** openpercept has quit IRC13:44
*** bdwarr6 has joined #openstack13:50
*** rods has joined #openstack13:52
*** openpercept has joined #openstack13:52
*** ziyadb has joined #openstack13:53
*** AhmedSoliman has joined #openstack13:57
*** ziyadb has quit IRC13:58
*** ziyadb has joined #openstack13:59
*** AhmedSoliman has quit IRC13:59
*** danwent has joined #openstack14:03
*** bdwarr6 has left #openstack14:06
*** Binbin has joined #openstack14:12
*** AhmedSoliman has joined #openstack14:15
*** atkisc has left #openstack14:29
*** hggdh has quit IRC14:29
*** danwent has quit IRC14:30
*** Ryan_Lane has joined #openstack14:31
*** Ashutto has quit IRC14:34
*** AhmedSoliman has quit IRC14:36
*** Binbin has quit IRC14:46
*** Binbin has joined #openstack14:47
*** bdwarr6 has joined #openstack14:58
*** tzn has joined #openstack14:59
*** Ryan_Lane has quit IRC15:02
*** rustam has quit IRC15:04
*** TheOsprey has quit IRC15:06
*** tzn has quit IRC15:07
*** rsampaio has joined #openstack15:12
*** Binbin has quit IRC15:17
*** rustam has joined #openstack15:41
*** openpercept has quit IRC15:43
*** bsza has quit IRC15:44
*** hggdh has joined #openstack15:48
*** vernhart has quit IRC15:52
*** mfer has joined #openstack15:54
*** openpercept has joined #openstack16:00
*** bsza has joined #openstack16:05
*** mfer has quit IRC16:10
*** koolhead17 has quit IRC16:11
*** marrusl has joined #openstack16:19
*** ncode has quit IRC16:29
*** rsampaio has quit IRC16:34
*** rsampaio has joined #openstack16:36
*** Eyk^off is now known as Eyk16:42
*** koolhead17 has joined #openstack16:59
*** bdwarr6 has quit IRC17:01
*** bdwarr6 has joined #openstack17:03
*** wwkeyboard has joined #openstack17:05
*** rsampaio has quit IRC17:07
*** rsampaio has joined #openstack17:08
*** wwkeyboard has quit IRC17:12
*** hbetts has joined #openstack17:13
*** martine_ has joined #openstack17:13
*** msivanes1 has quit IRC17:16
*** gohko_na_ has quit IRC17:18
*** gohko_nao has joined #openstack17:19
*** Ryan_Lane has joined #openstack17:22
*** openpercept has quit IRC17:24
*** Ashutto has joined #openstack17:25
*** bdwarr6 has quit IRC17:26
*** bdwarr6 has joined #openstack17:27
*** msivanes has joined #openstack17:28
*** msivanes has left #openstack17:29
*** Eyk is now known as Eyk^off17:31
*** tzn has joined #openstack17:34
*** medberry is now known as med_out17:36
*** sh1ny has joined #openstack17:45
*** wwkeyboard has joined #openstack17:50
*** hbetts has quit IRC17:52
*** wwkeyboard has quit IRC18:00
*** |^JaMeS^| has joined #openstack18:02
*** bsza3 has joined #openstack18:05
*** hbetts has joined #openstack18:05
*** bsza has quit IRC18:08
*** bsza3 has quit IRC18:09
*** Ryan_Lane has quit IRC18:12
*** bsza has joined #openstack18:19
*** bdwarr6 has left #openstack18:19
*** llang629 has left #openstack18:22
*** Ryan_Lane has joined #openstack18:25
*** kbringard has joined #openstack18:50
*** kbringard has quit IRC18:50
*** tzn has quit IRC19:25
*** amdtech has quit IRC19:41
*** tzn has joined #openstack19:42
*** nerdstein has joined #openstack19:50
*** zul has quit IRC19:50
*** zul has joined #openstack19:51
*** Ryan_Lane has quit IRC19:57
*** rustam has quit IRC20:00
*** snowboarder04 has joined #openstack20:00
*** MarkAtwood has quit IRC20:03
*** OutBackDingo has quit IRC20:12
*** OutBackDingo has joined #openstack20:17
*** nerdstein has quit IRC20:32
*** mtrob has quit IRC20:33
*** stewart has joined #openstack20:37
*** lool has quit IRC20:50
*** lool has joined #openstack20:50
*** bdwarr6 has joined #openstack20:58
*** hggdh has quit IRC20:59
*** bdwarr6 has left #openstack20:59
*** shentonfreude has quit IRC21:00
*** kim0 has quit IRC21:00
*** bdwarr61 has joined #openstack21:06
*** |^JaMeS^| has quit IRC21:14
*** Ruetobas has quit IRC21:20
*** Ruetobas has joined #openstack21:24
*** MarkAtwood has joined #openstack21:25
*** bdwarr61 has quit IRC21:25
*** stewart has quit IRC21:26
*** chomping has quit IRC21:28
*** bdwarr6 has joined #openstack21:29
*** bdwarr6 has left #openstack21:29
*** stewart has joined #openstack21:29
*** _0xack13_ has joined #openstack21:48
*** bsza has quit IRC21:48
*** hggdh has joined #openstack21:49
DavieyDid anyone else notice that upgrading from pre -use_deprecated_auth to post, they lost existing keypairs?21:50
*** ziyadb has quit IRC21:51
*** bdwarr6 has joined #openstack21:52
*** _0xack13_ has left #openstack21:56
vishyDaviey: yup that is true21:56
vishya21:56
vishyDaviey: I was hoping to try and fix it but I didn't have time21:57
*** bdwarr6 has left #openstack21:57
Davieyvishy: How complicated do you think it would be?22:01
vishyDaviey: i'm not sure why it is happening yet22:02
vishythe key should be associated with the user22:02
Davieyvishy: We have a semi-production cloud running, and i want to advise our ops people how best to proceed.22:02
vishyso if you are giving the same user you should get the same key22:02
vishyi assume with no-auth you are somehow getting a different user_id22:03
DavieyUses know there is no promise of reliability, so might just be easier to 'screw it'.22:03
DavieyUsers*22:03
Davieyvishy: ah, if it is the same key, that is not a big deal22:03
*** Ashutto has quit IRC22:05
DavieyHmm22:05
Davieyvishy: wouldn't that have broken novarc?22:06
Davieymaybe i should have dumped the db to inspect.22:07
DavieyI imagine there must be dupes in the database now i've re- euca-add-keypai $oldname22:08
vishyDaviey: can you check in the db and see what user_id the keys are associated with?22:08
vishyDaviey: I wonder if in old_auth they are somehow associated with access_key?22:08
Davieyack22:09
vishyoh! this is ec2 isn't it22:09
vishylet me check the ec2 stack22:09
Davieyyeah22:10
vishyDaviey: are they using old credentials?22:10
Davieyyes22:10
vishyif they use old credentials then their new user_id == acceskey22:10
vishyif they get new credentials they should be fine22:11
vishyjust replace accesskey with user_id22:11
Davieyso the old creds work, just the keypair was lost22:11
vishyDaviey: right old creds were22:11
vishyEC2_ACCESS_KEY = '<uuid access key>:<project_id>'22:11
vishyno auth creds are:22:11
vishyEC2_ACCESS_KEY = '<user_id>:<project_id>'22:12
vishyso it can't find the creds becaue it is using the uuid as the user id22:12
vishyif they change the creds, the keys will still be there22:12
Davieyhmm22:13
Davieyokay, is it infact a bug that it DOES work?22:13
Davieyas in, i have a functional cloud, just by re-adding a keypair with an existing novarc22:13
Davieyshouldn't it have broken with using the legacy uuid access key?22:14
Davieyvishy: confirmed that in the db, the new keypair i just added = user string, rather than uid as it was.22:21
vishyDaviey: so existing keypairs use user.id instead of user_name?22:24
vishyDaviey: because it looks like it should be the same22:26
vishyDaviey: with noauth it will let you be any user that you specify22:26
vishyDaviey: it does no checking22:27
vishyDaviey: so if you pass in an acces_key that is 'really_long_dumb_access_key' instead of a user_id22:27
vishythen your user id for that request will be 'really_long_dumb_access_key'22:27
Davieyah!22:28
vishyvishy: if your keypair was stored with the user_id 'joeblow' you won't get it22:28
vishyso the solution is to give them new creds22:28
*** MarcMorata has quit IRC22:28
vishywith EC2_ACCESS_KEY='userid:projectid'22:28
*** neogenix has joined #openstack22:28
vishythen they will be able to access their old keypairs just fine22:28
Davieyerr, you mean uid:projectid, right?22:31
*** ziyadb has joined #openstack22:31
DavieyI wonder if it's just easier to truncate kaye_pairs and get everyone to re-add keypairs, as key_pairs.user_id isn't used/checked anyway.22:34
*** fysa has quit IRC22:36
*** fysa has joined #openstack22:36
DavieyHmm, that could be a security concern.22:36
DavieyThanks for your help vishy22:38
vishyuid?22:39
vishyi mean user.id22:39
vishywhich is a string22:39
vishyusername22:39
*** rustam has joined #openstack22:41
*** LanceHaig has left #openstack22:43
koolhead17annegentle:22:44
*** andy-hk has quit IRC22:46
*** Xenith has joined #openstack22:51
*** doude has quit IRC22:55
Davieyvishy: hmm, so with "export EC2_ACCESS_KEY="155d0887-b222-4975-8e06-3c2de4a7ebcc:novaproject"" and http://pb.daviey.com/j2Dd/, where the first entry was the original value, and the second is an add-key-pair without touching novarc.22:55
DavieySo in that instance, you are suggesting i use "export EC2_ACCESS_KEY="admin:novaproject" ?22:56
DavieyI can't see how that would fix it.22:56
*** koolhead17 has quit IRC22:58
*** martine_ has quit IRC22:59
*** dirkx_ has joined #openstack23:06
*** dirkx_ has joined #openstack23:08
*** newsbad_com has joined #openstack23:08
*** hggdh has quit IRC23:17
*** hggdh has joined #openstack23:19
*** newsbad_com has quit IRC23:40
*** newsbad_com has joined #openstack23:42
*** p0 has joined #openstack23:46
*** po has quit IRC23:50
*** tzn has quit IRC23:50
*** p0 has quit IRC23:52
*** p0 has joined #openstack23:54
*** dirkx_ has quit IRC23:56
*** bdwarr6 has joined #openstack23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!