Monday, 2014-11-10

*** viswanathsomanch has quit IRC00:16
*** Viswanath has joined #storyboard00:18
*** Viswanath_ has quit IRC00:19
*** Viswanath has quit IRC00:23
*** viswanathsomanch has joined #storyboard01:36
*** viswanathsomanch has quit IRC01:37
*** viswanathsomanch has joined #storyboard01:37
*** viswanathsomanch has quit IRC01:38
*** viswanathsomanch has joined #storyboard01:38
*** r1chardj0n3s is now known as r1chardj0n3s_afk01:49
*** viswanathsomanch has quit IRC02:40
*** viswanathsomanch has joined #storyboard04:07
*** cody-somerville has quit IRC04:22
*** k4n0 has joined #storyboard04:44
*** cody-somerville has joined #storyboard05:11
*** cody-somerville has quit IRC05:11
*** cody-somerville has joined #storyboard05:11
*** viswanathsomanch has quit IRC06:32
*** timrc is now known as timrc-afk07:21
*** miqui_ has joined #storyboard07:25
*** miqui has quit IRC07:54
*** miqui_ has quit IRC07:55
*** jtomasek has joined #storyboard08:30
*** jcoufal has joined #storyboard08:30
*** MaxV has joined #storyboard09:00
*** MaxV has quit IRC09:29
*** yolanda has joined #storyboard09:31
*** jcoufal has quit IRC09:45
*** MaxV has joined #storyboard09:54
*** jcoufal has joined #storyboard11:35
*** alexismonville has joined #storyboard12:41
*** jtomasek has quit IRC12:44
*** jtomasek has joined #storyboard12:52
*** alexismonville has quit IRC12:56
*** mattfarina has joined #storyboard13:59
*** openstackgerrit has joined #storyboard14:05
*** miqui has joined #storyboard14:20
*** jcoufal has quit IRC14:55
ttxkrotscheck: skipping meeting today ?15:00
ttxI'll count that as yes15:14
*** k4n0 has quit IRC15:14
*** Viswanath has joined #storyboard15:47
*** alexismonville has joined #storyboard15:48
*** Viswanath has quit IRC15:50
*** timrc-afk is now known as timrc15:51
krotscheckttx: … I think I have failed at time zone changes.15:54
krotscheckAlso at jetlag15:54
* krotscheck was under the impression that we moved the meeting back an hour.15:54
krotscheckWait.15:55
krotscheckNo, I’m not wrong! It’s 1600 UTC, right?15:55
krotscheckhttps://wiki.openstack.org/wiki/Meetings#StoryBoard_Meeting15:55
*** Viswanath has joined #storyboard15:57
krotscheckStoryBoard meeting in #openstack-meeting-316:00
*** Viswanath has quit IRC16:01
ttxArh, meeting ical not updated16:07
*** Viswanath has joined #storyboard16:08
krotscheckDon’t worry about it, I have three entries for the storyboard meeting on my calendar now :/16:09
ttxfixed the 2 in mine :)16:09
*** alexismonville has quit IRC16:11
*** Viswanath has quit IRC16:14
*** alexismonville has joined #storyboard16:43
*** Viswanath has joined #storyboard17:29
*** Viswanath has quit IRC17:34
*** Viswanath has joined #storyboard17:47
*** Viswanath has quit IRC17:59
*** Viswanath has joined #storyboard18:02
*** Viswanath has quit IRC18:07
*** MaxV has quit IRC18:07
*** Viswanath has joined #storyboard18:15
*** Viswanath has quit IRC18:19
*** alexismonville has quit IRC18:23
*** alexismonville has joined #storyboard18:24
*** Viswanath has joined #storyboard18:42
*** Viswanath has quit IRC18:44
*** Viswanath has joined #storyboard18:48
*** alexismonville has quit IRC18:49
*** alexismonville has joined #storyboard18:49
*** Viswanath has quit IRC18:54
openstackgerritMichael Krotscheck proposed a change to openstack-infra/storyboard: Fixed launchpad import bugs.  https://review.openstack.org/13354218:58
krotscheckOk, so ^^ is the first but in the import script.18:58
krotscheckThe second bug will need more work because Launchpad can have duplicate users.18:59
krotscheckArgh. Should we allow multiple openid’s per user?19:12
*** Viswanath has joined #storyboard19:12
krotscheckThe issue is that we may have multiple Launchpad openids per user. I can create a user prompt to ask the importer whether to merge users, but our data model will drop/lose one of the openid’s.19:13
krotscheckAnd without having that user available while we’re doing the import we can’t really resolve which one is the correct one, so we may accidentally create a zombie user.19:14
krotscheckThe alternative is to create a multiple-openid-per-user case.19:14
*** Viswanath has quit IRC19:17
*** MaxV has joined #storyboard19:18
*** alexismonville has quit IRC19:22
*** MaxV has quit IRC19:22
*** Viswanath has joined #storyboard19:27
persiaAt one point LP tried to have single-ID-per-user, but many users expressed a desire to have multiple IDs on a per-purpose basis (e.g. work/home or work1/work2)19:30
persiaUnless we understand *why* folk have multiple IDs, it gets confusing.  Was there a mistake, and two accounts merged (at another point LP auto-created about 25,000 accounts for "celebrities" in Open Source), did the accounts diverge?  Were they always separate for different purposes?  What was the motivation to select one over another when configuring gerrit and/or StoryBoard?19:32
persiaMy (naive) suggestion would be to do a straight import, so that each LP OpenID gets a StoryBoard user, and then provide a means for users to request merge (un-zombie).19:32
*** Viswanath has quit IRC19:33
persiaNote that this might be painfully complicated to actually implement, but it should allow for the earliest safe import.19:33
*** Viswanath has joined #storyboard19:51
*** Viswanath has quit IRC19:53
*** alexismonville has joined #storyboard20:01
*** r1chardj0n3s_afk is now known as r1chardj0n3s20:19
*** annegentle has joined #storyboard21:01
*** mattfarina has quit IRC21:17
*** miqui has quit IRC21:26
*** annegentle has quit IRC21:34
*** Viswanath_ has joined #storyboard21:51
*** Viswanath has joined #storyboard21:51
*** Viswanath_ has quit IRC21:53
*** Viswanath has quit IRC21:54
*** Viswanath has joined #storyboard22:25
*** Viswanath has quit IRC22:28
*** alexismonville has quit IRC23:05
openstackgerritMichael Krotscheck proposed a change to openstack-infra/storyboard: Permit name conflicts in users table.  https://review.openstack.org/13357123:21
*** jtomasek has quit IRC23:22
r1chardj0n3sreally? launchpad doesn't enforce uniqueness of username?!?23:23
krotscheckr1chardj0n3s: NOpe23:24
r1chardj0n3sugh, that's messed up23:24
krotscheckWell, it KINDOF makes sense.23:25
r1chardj0n3sand also so dangerous in the context of gerrit where we generally just glance at name/username and no deeper23:25
krotscheckr1chardj0n3s: yep.23:25
krotscheckr1chardj0n3s: I outlined some of my thoughts here -> http://www.krotscheck.net/2014/11/10/storyboard-authentication-and-authorization.html23:25
r1chardj0n3scool, glad you're on it :)23:26
krotscheckSince starbucks internet was down and I had nothing to do but blog23:26
r1chardj0n3s:/23:26
r1chardj0n3sI'm in the middle of actioning some stuff from the Horizon meetup; shall read your blogging and review that change in a bit :)23:27
persiaIn classic texts on the AAA problem, "Authentication" is typically considered entirely distinct from "Authorization", this being from a time when authentication as a role was more common than authentication to an identity token.  Other than that, a wonderful writeup of the underlying problem.23:34
persia(the third A being accounting, as having a record of what happened is an essential part of the security model: supporting deniability does not provide for robust ACLs)23:35
* krotscheck needs to blog more often.23:37
persiaOn IRC nick mapping: it is worth tracking network as well as nick, as many folk have different nicks on different networks.  Currently OpenStack cares mostly about freenode, but there are relevant discussions happening in other forums23:38
persiaFor some IRC networks, nicks can be asserted to belong to an identity by services, sometimes mapped to a password, and sometimes mapped to an X.509 certificate (depending on the services engine in place)23:38
krotscheckpersia: Likely - I don’t think it’ll be a huge issue until we get to writing the storyboard irc bot.23:39
persiaI believe that LibreOffice uses a model like this: granting access to resources based on the user being able to prove access to a given freenode account23:39
* krotscheck makes all kinds of hand wavey yeah it’ll support all the things motions23:39
* persia stops injecting complication23:39
krotscheckLong story short: I have a goal line, which some people might agree with, but which I’ll be working towards, and is now out in the open so people can yell at me.23:40
r1chardj0n3syay! yelling! :)23:43
openstackgerritMichael Krotscheck proposed a change to openstack-infra/storyboard: Permit name conflicts in users table.  https://review.openstack.org/13357123:53

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!