20:00:06 <robcresswell> #startmeeting keystone_horizon
20:00:07 <openstack> Meeting started Thu Mar  9 20:00:06 2017 UTC and is due to finish in 60 minutes.  The chair is robcresswell. Information about MeetBot at http://wiki.debian.org/MeetBot.
20:00:08 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
20:00:11 <openstack> The meeting name has been set to 'keystone_horizon'
20:00:19 <robcresswell> o/
20:00:31 <dstanek> ehlo
20:00:35 <lbragstad> o/
20:00:51 * lbragstad is on another call - will be multi-tasking :-/
20:01:04 <cmurphy> o/
20:01:07 <david-lyle> o/
20:01:22 <robcresswell> No problem, I think it'll be a quick one today, still havent had much time to get things moving
20:01:25 <robcresswell> #link https://etherpad.openstack.org/p/keystone-horizon
20:02:08 <rderose> o/
20:02:21 <robcresswell> Most of this is waiting on Horizon, though I might be pestering keystone for some expertise too. Spent a bunch of time last week properly wrapping my head around scopy-ness
20:02:43 <robcresswell> I was hoping someone could offer some insight on https://review.openstack.org/#/c/339487/
20:03:33 <robcresswell> cmurphy noted that the issue couldnt be easily reproduced, so I was wondering if it was fixed by some of the domain handling patches that went in fairly recently, or if this is a sepatate issue
20:03:45 <robcresswell> separate*
20:04:47 <david-lyle> I haven't tried to repro yet
20:05:06 <david-lyle> not sure if it's related or not
20:05:49 <robcresswell> Yeah, a lot of Horizons policy handling was written by a madman before my time :p
20:05:57 <david-lyle> but if domain context was being messed up, it's highly likely to have effected these tasks
20:05:57 <rdopiera> o/
20:06:31 <robcresswell> Yeah, that was my thinking, and I expect rdopiera's patches may have fixed it, or at least affected it
20:07:48 <robcresswell> The second question I had was regarding PCI-DSS 8.2.6 - there's a comment on the keystone side saying "We still need a way to express that the 401 was the result of an expired password"
20:08:25 <robcresswell> rderose: ^^ do you know if that was resolved on the keystone side, before we start trying to use it on the Horizon side?
20:08:29 <rdopiera> I'm not sure, but I don't think it touched any related code
20:08:33 <rderose> robcresswell: not yet
20:08:50 <robcresswell> rderose: Any relevant patches I could link to?
20:08:55 <rderose> robcresswell: yeah, we still need to do this, so that you know auth was success, but password is expired
20:09:00 <knikolla> o/ sorry i'm late.
20:09:10 <rderose> robcresswell: not yet, but I'll try to get something up soon
20:09:46 <robcresswell> rderose: Sure no rush, it's mainly us holding things up as it is; just wanted to be able to track status accurately
20:09:53 <robcresswell> I've made a note to wait for keystone to do that bit
20:10:06 <rderose> robcresswell: cool
20:10:16 <rderose> robcresswell: the other PCI stuff is ready to go
20:10:51 <robcresswell> Awesome. I've been trying to get a couple of our easier blueprints reviewed the past week, so havent really written much code myself.
20:11:04 <robcresswell> Should start getting some time to move things soon
20:11:26 <robcresswell> So those are both of things I wanted to bring up
20:11:41 <robcresswell> Any other topics for discussion?
20:12:26 <lbragstad> I don't think i have anything
20:12:47 <david-lyle> I've been off in the weeds
20:12:59 <robcresswell> haha
20:13:20 <robcresswell> No problem, we can call it early and give everyone their time back
20:13:30 <lbragstad> woo - thanks robcresswell
20:13:34 <david-lyle> will try to target some time on finishing is_admin_project support
20:13:43 <robcresswell> If anyone has any concerns or discussion points please feel free to add to the etherpad
20:14:08 <robcresswell> Things like specs that we could weigh in on, I know lbragstad has pinged me about a couple
20:14:25 <robcresswell> Thanks everyone!
20:14:36 <robcresswell> #endmeeting