*** rajpatel has joined #osic | 00:00 | |
*** karthikp_ has joined #osic | 00:07 | |
*** ccneill has quit IRC | 00:11 | |
*** karthikp_ has quit IRC | 00:23 | |
*** ravikama_ has joined #osic | 00:37 | |
*** rajpatel has quit IRC | 00:45 | |
*** rajpatel has joined #osic | 01:12 | |
*** rajpatel has quit IRC | 01:17 | |
*** rajpatel has joined #osic | 01:22 | |
*** spotz_zzz is now known as spotz | 01:29 | |
*** muralia_ has quit IRC | 01:29 | |
*** muralia has joined #osic | 01:29 | |
*** rajpatel1 has joined #osic | 01:30 | |
*** rajpatel has quit IRC | 01:30 | |
*** rloo has quit IRC | 01:35 | |
*** rajpatel has joined #osic | 01:46 | |
*** rajpatel1 has quit IRC | 01:46 | |
*** rajpatel has quit IRC | 01:50 | |
*** nadeem has joined #osic | 01:55 | |
*** rm_work has quit IRC | 02:16 | |
*** ravikama_ has quit IRC | 02:33 | |
*** nadeem has quit IRC | 02:39 | |
*** sgundur1 has left #osic | 02:54 | |
*** rajpatel has joined #osic | 02:54 | |
*** rm_work has joined #osic | 02:56 | |
*** rm_work has quit IRC | 03:07 | |
*** rm_work has joined #osic | 03:11 | |
*** valw has joined #osic | 03:41 | |
*** JRobinson__ is now known as JRobinson__afk | 03:49 | |
*** valw has quit IRC | 03:51 | |
*** woodster_ has quit IRC | 04:08 | |
*** unrahul has quit IRC | 04:12 | |
*** rajpatel has quit IRC | 04:27 | |
*** JRobinson__afk is now known as JRobinson__ | 04:29 | |
*** GB21 has joined #osic | 04:53 | |
*** nadeem has joined #osic | 04:54 | |
*** GB21 has quit IRC | 05:12 | |
*** GB21 has joined #osic | 05:31 | |
*** vinaypotluri has quit IRC | 06:10 | |
*** nadeem has quit IRC | 06:11 | |
*** revon has quit IRC | 08:19 | |
*** JRobinson__ has quit IRC | 09:11 | |
*** sfinucan has joined #osic | 09:19 | |
*** GB21 has quit IRC | 10:45 | |
*** GB21 has joined #osic | 10:52 | |
*** spotz is now known as spotz_zzz | 11:57 | |
*** peristeri has joined #osic | 12:05 | |
*** peristeri has quit IRC | 12:21 | |
*** GB21 has quit IRC | 12:23 | |
*** ankur-gupta-f has left #osic | 12:47 | |
*** rloo has joined #osic | 13:00 | |
*** sfinucan has quit IRC | 13:09 | |
*** inc0 has joined #osic | 13:13 | |
*** KLevenstein has joined #osic | 13:46 | |
*** muralia has quit IRC | 13:52 | |
*** muralia has joined #osic | 13:52 | |
*** ametts has joined #osic | 13:53 | |
*** KrishR has joined #osic | 13:55 | |
*** muralia has quit IRC | 13:57 | |
*** rderose has joined #osic | 13:59 | |
*** spotz_zzz is now known as spotz | 13:59 | |
*** KLevenstein has quit IRC | 14:02 | |
*** rloo has quit IRC | 14:03 | |
*** rloo has joined #osic | 14:03 | |
*** Mudpuppy has joined #osic | 14:04 | |
*** KLevenstein has joined #osic | 14:04 | |
*** Mudpuppy has quit IRC | 14:04 | |
*** Mudpuppy has joined #osic | 14:05 | |
*** asingh has joined #osic | 14:07 | |
mrhillsman | morning | 14:11 |
---|---|---|
dasm | hello | 14:11 |
spotz | morning | 14:11 |
*** homerp_ has joined #osic | 14:16 | |
*** homerp__ has joined #osic | 14:18 | |
*** homerp_ has quit IRC | 14:20 | |
castulo | gm | 14:21 |
*** asingh has quit IRC | 14:22 | |
*** cath6184 has joined #osic | 14:23 | |
*** cath6184 is now known as cathR | 14:23 | |
ankur-gupta-f1 | sleepy morning all!!!! | 14:24 |
hockeynut | not any more - iced tea! | 14:25 |
*** muralia has joined #osic | 14:27 | |
*** rajpatel has joined #osic | 14:27 | |
*** sgundur1 has joined #osic | 14:28 | |
*** valw has joined #osic | 14:28 | |
ankur-gupta-f1 | i went off coffee for 5 days. i now realize my mistake and have corrected my behavior | 14:28 |
*** valw has quit IRC | 14:28 | |
*** valw has joined #osic | 14:29 | |
*** woodster_ has joined #osic | 14:30 | |
mmotiani | Good Morning! | 14:30 |
*** asingh has joined #osic | 14:38 | |
*** raddaoui has joined #osic | 14:39 | |
*** valw has quit IRC | 14:40 | |
*** vinaypotluri has joined #osic | 14:44 | |
*** ravikama_ has joined #osic | 14:46 | |
*** ankur-gupta-f1 has quit IRC | 14:46 | |
*** ankur-gupta-f1 has joined #osic | 14:49 | |
*** karthikp_ has joined #osic | 14:49 | |
*** valw has joined #osic | 14:49 | |
diltram | morning | 14:50 |
*** renato_r has joined #osic | 14:51 | |
*** valw has quit IRC | 14:53 | |
*** cathR has left #osic | 14:53 | |
dstanek | dolphm: i update the keystone meeting for today to include the saml2 topic https://etherpad.openstack.org/p/keystone-weekly-meeting | 14:53 |
*** valw has joined #osic | 14:54 | |
*** renato_r_ has joined #osic | 14:54 | |
*** renato_r has quit IRC | 14:57 | |
*** valw has quit IRC | 15:07 | |
*** inc0 has quit IRC | 15:09 | |
*** inc0 has joined #osic | 15:09 | |
*** valw has joined #osic | 15:17 | |
*** sgundur1 has left #osic | 15:18 | |
*** sgundur1 has joined #osic | 15:18 | |
*** cloudtrainme has joined #osic | 15:22 | |
*** di has joined #osic | 15:25 | |
*** dwalleck has joined #osic | 15:27 | |
*** cathR has joined #osic | 15:33 | |
*** rajpatel has quit IRC | 15:33 | |
*** dwalleck has quit IRC | 15:34 | |
*** unrahul has joined #osic | 15:45 | |
*** GB21 has joined #osic | 15:45 | |
*** rajpatel has joined #osic | 15:51 | |
*** ccneill has joined #osic | 16:00 | |
*** GB21 has quit IRC | 16:01 | |
*** inc0 has quit IRC | 16:06 | |
*** inc0 has joined #osic | 16:06 | |
*** kebray has joined #osic | 16:06 | |
*** cathR has left #osic | 16:06 | |
*** adrian_otto has joined #osic | 16:07 | |
dolphm | unrahul: what's up? | 16:09 |
unrahul | dolphm: I was looking up the api design for different projects and it seems to me that there is no one way or one set of components that projects have used to write their APIs, is there an openstack reference design on how to write one..? | 16:11 |
unrahul | dolphm: Some have wrote their own wsgi servers and used eventlet, while some others have used wsme and pecan and a bunch of other stuff.. | 16:12 |
dolphm | unrahul: you're right! historically, there hasn't been any one approach, but there's a working group working on defining exactly that for new APIs | 16:12 |
dolphm | unrahul: https://wiki.openstack.org/wiki/API_Working_Group | 16:12 |
dolphm | unrahul: https://specs.openstack.org/openstack/api-wg/ | 16:12 |
unrahul | dolphm: oh... thanks Dolph.. I am with the security team and we are looking into diff projects to emulate and create a vulnerable API.. Do you have any suggestions on which may we use..? | 16:13 |
dolphm | unrahul: the working group dictates neither the implementation (pecan vs flask, for example), nor the approach to the application server (uwsgi vs eventlet), and focuses entirely on the interface that we're presenting to end users | 16:14 |
unrahul | dolphm: ha.. so as long as we stick to the interface and internally use which ever service we are comfortable with.. it should be fine.. ? | 16:15 |
dolphm | unrahul: cookiecutter will you get you a vanilla openstack service up and running in no time https://github.com/openstack-dev/cookiecutter | 16:15 |
dolphm | unrahul: the implementation details are definitely up to you, but there are "preferences" for technology choices and things across the community where you should not deviate (or you should be prepared to make a thoughtful defense of your choice)-- but it all depends on your project's audience | 16:17 |
*** asettle has quit IRC | 16:19 | |
dolphm | unrahul: if you don't care about the service itself, and just need something to wrap security around, the Echo service is great tool for that https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/echo/service.py | 16:20 |
*** valw has quit IRC | 16:20 | |
dolphm | unrahul: you can run / deploy it however you want, run keystonemiddleware.auth_token in front of it for authentication, and run whatever other middleware with it you'd like | 16:21 |
dolphm | unrahul: and it's only purpose is to echo back the security context of successful requests | 16:21 |
dolphm | unrahul: which is super useful for testing | 16:21 |
dolphm | unrahul: or demos | 16:22 |
jroll | unrahul: don't use wsme, is my only advice | 16:23 |
jroll | it is as good as dead | 16:23 |
dolphm | lol +1 | 16:23 |
jroll | (and also terrible, too much magic) | 16:23 |
* jroll likes flask personally but hasn't done an openstack project with it | 16:23 | |
unrahul | dolphm: thats interesting .. thanks for the working group links.. that really helps.. I am gonna look into that and the cookiecutter and see if there is something we can *emulate* | 16:25 |
*** valw has joined #osic | 16:25 | |
unrahul | jroll: dolphm :D... thats what i thought.. a lot of magic going on.. | 16:26 |
unrahul | jroll: dolphm our current vulnerable api uses bottle.. but.. its a bit too simple to be realistic.. | 16:26 |
dolphm | unrahul: just out of curiosity, what types of vulnerabilities are you interested in demonstrating? | 16:27 |
unrahul | dolphm: https://github.com/mattvaldes/vulnerable-api this is current API we are using now to baseline the tool we are developing. | 16:30 |
unrahul | dolphm: it basically has sql injection, xss, ldap, integer overflow, cors header vulnerability.. etc.. the usual. | 16:30 |
unrahul | dolphm: we wanted a realistic api to baseline before we test our tool Syntribos on real openstack projects. hence.. looking into real world OS APIs | 16:31 |
*** nadeem has joined #osic | 16:33 | |
unrahul | dolphm: anyway, thanks dolphm and jroll for you the urls and your thoughts on the same. | 16:36 |
dolphm | unrahul: cool, sounds valuable! | 16:38 |
*** mdong has joined #osic | 16:39 | |
unrahul | thanks dolphm , eventually the idea is that it would help other projects as well.. a reference on how not to design and API :D | 16:40 |
*** cathR_ has joined #osic | 16:44 | |
*** cloudtrainme has quit IRC | 16:45 | |
*** valw has quit IRC | 16:48 | |
*** rajpatel has quit IRC | 16:52 | |
*** valw has joined #osic | 16:52 | |
*** rajpatel has joined #osic | 16:56 | |
*** KrishR has quit IRC | 16:59 | |
*** kebray has quit IRC | 17:07 | |
*** valw has quit IRC | 17:11 | |
unrahul | guys, gerrit switched to open id ? | 17:15 |
unrahul | when did that happen..? | 17:15 |
*** cathR_ has left #osic | 17:17 | |
unrahul | I am not able to sign in to review.openstack.org.. anyone else have the issue.? | 17:18 |
ccneill | unrahul: uh oh, looks like it's down >_< | 17:19 |
ccneill | I'm getting a "Provider is not supported, or was incorrectly entered." error | 17:19 |
*** valw has joined #osic | 17:20 | |
unrahul | ccneill: yup | 17:23 |
unrahul | Ccneill I don't think that change was supposed to be pushed..or something screwd up from infra side | 17:24 |
ccneill | ¯\_(ツ)_/¯ | 17:25 |
ccneill | not sure what's going on | 17:25 |
*** valw has quit IRC | 17:26 | |
*** valw has joined #osic | 17:28 | |
*** rajpatel has quit IRC | 17:29 | |
*** cloudtrainme has joined #osic | 17:32 | |
*** rajpatel has joined #osic | 17:34 | |
*** rajpatel has quit IRC | 17:37 | |
*** rajpatel has joined #osic | 17:38 | |
*** asettle has joined #osic | 17:49 | |
*** asettle has joined #osic | 17:49 | |
*** cloudtrainme has quit IRC | 17:53 | |
*** valw has quit IRC | 17:56 | |
*** valw has joined #osic | 17:57 | |
dstanek | dolphm: so close, but failing at the last step | 17:59 |
dolphm | dstanek: =) | 17:59 |
dstanek | dolphm: http://162.242.221.169/ - i just need to tell horizon about the authn data | 18:00 |
dstanek | basically finish the websso loop | 18:00 |
*** KLevenstein has quit IRC | 18:01 | |
*** KLevenstein has joined #osic | 18:02 | |
*** ccneill has quit IRC | 18:05 | |
*** KrishR has joined #osic | 18:07 | |
*** jorge_munoz has joined #osic | 18:09 | |
*** ccneill has joined #osic | 18:16 | |
*** ametts has quit IRC | 18:27 | |
*** mdong has quit IRC | 18:36 | |
*** ametts has joined #osic | 18:40 | |
*** cathR has joined #osic | 18:45 | |
*** asingh has quit IRC | 18:57 | |
*** mhayden has quit IRC | 19:00 | |
*** rajpatel has quit IRC | 19:00 | |
*** mhayden has joined #osic | 19:00 | |
*** rajpatel has joined #osic | 19:01 | |
*** valw has quit IRC | 19:08 | |
*** valw has joined #osic | 19:12 | |
*** raddaoui has quit IRC | 19:17 | |
*** valw_ has joined #osic | 19:25 | |
*** valw has quit IRC | 19:26 | |
*** raddaoui has joined #osic | 19:28 | |
*** adrian_otto has quit IRC | 19:34 | |
*** adrian_otto has joined #osic | 19:35 | |
*** adrian_otto has quit IRC | 19:40 | |
*** asettle has quit IRC | 19:42 | |
*** valw_ has quit IRC | 19:49 | |
*** valw has joined #osic | 19:53 | |
*** asettle has joined #osic | 19:59 | |
*** cathR has left #osic | 20:09 | |
*** jimbaker has quit IRC | 20:32 | |
ankur-gupta-f1 | Reminder Game Night at 5:00 at Book Store!!!! | 20:33 |
*** asettle has quit IRC | 20:36 | |
*** Guest43585 is now known as scotticus | 20:37 | |
*** valw has quit IRC | 20:40 | |
*** homerp__ has quit IRC | 20:51 | |
*** cathR has joined #osic | 20:53 | |
*** jimbaker has joined #osic | 20:57 | |
*** homerp_ has joined #osic | 20:57 | |
*** homerp_ has left #osic | 20:58 | |
*** asettle has joined #osic | 20:59 | |
*** Mudpuppy has quit IRC | 21:00 | |
*** JRobinson__ has joined #osic | 21:02 | |
*** spotz is now known as spotz_zzz | 21:03 | |
*** scotticus has left #osic | 21:08 | |
*** irtermite has joined #osic | 21:12 | |
*** rderose has quit IRC | 21:17 | |
*** irtermite has quit IRC | 21:29 | |
sigmavirus24 | unrahul: you should be able to log in now | 21:35 |
sigmavirus24 | It was that login.ubuntu.com was down | 21:35 |
sigmavirus24 | aka ubuntu one | 21:35 |
unrahul | sigmavirus24: yup.. am able to | 21:35 |
unrahul | sigmavirus24: any clue what happened ? | 21:36 |
sigmavirus24 | unrahul: login.ubuntu.com was unresponsive for whatever reason. It was completely unreachable for several hours | 21:38 |
unrahul | sigmavirus24: ha.. curious how it got redirected to open id page. | 21:38 |
unrahul | sigmavirus24: anyway, now everything is back to normal. so. | 21:39 |
sigmavirus24 | unrahul: I think that's probably an "invisiable" redirect (one you don't tend to see because when working it would redirect to login.ubuntu.com) | 21:39 |
sigmavirus24 | Not that "invisible" redirects are really a thing, but you get my meaning I hope | 21:39 |
unrahul | sigmavirus24: hmm.. yeah make sense. | 21:39 |
unrahul | yeah.. background sort of. | 21:40 |
*** inc0 has quit IRC | 21:45 | |
*** rajpatel has quit IRC | 21:45 | |
*** rajpatel has joined #osic | 21:48 | |
*** rajpatel has quit IRC | 21:53 | |
*** irtermite has joined #osic | 21:53 | |
*** ankur-gupta-f1 has left #osic | 21:55 | |
*** muralia has quit IRC | 21:56 | |
*** cloudtrainme has joined #osic | 21:56 | |
*** spotz_zzz is now known as spotz | 21:58 | |
*** KLevenstein has quit IRC | 21:58 | |
*** nadeem has quit IRC | 22:00 | |
*** rderose has joined #osic | 22:01 | |
*** karthikp_ has quit IRC | 22:01 | |
*** asettle has quit IRC | 22:03 | |
*** rderose has quit IRC | 22:08 | |
*** rderose has joined #osic | 22:10 | |
*** irtermit_ has joined #osic | 22:16 | |
*** irtermit_ has quit IRC | 22:16 | |
*** irtermite has quit IRC | 22:20 | |
*** rderose has quit IRC | 22:24 | |
*** cathR has quit IRC | 22:26 | |
*** JRobinson__ is now known as JRobinson__afk | 22:26 | |
*** ametts has quit IRC | 22:30 | |
*** JRobinson__afk is now known as JRobinson__ | 22:42 | |
*** cloudtrainme has quit IRC | 22:43 | |
*** cloudtrainme has joined #osic | 22:43 | |
*** di has quit IRC | 22:53 | |
*** KrishR has quit IRC | 23:17 | |
*** spotz is now known as spotz_zzz | 23:17 | |
*** nadeem has joined #osic | 23:27 | |
*** stajkowski has joined #osic | 23:31 | |
stajkowski | johnthetubaguy: hey, olso work is complete, i keep pining doug, no response, advanced and required are ready to go | 23:31 |
stajkowski | johnthetubaguy: i'm assuming required options isn't going to go forward | 23:32 |
*** renato_r_ has quit IRC | 23:51 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!