| *** zns has quit IRC | 00:00 | |
| *** sandywalsh has quit IRC | 00:02 | |
| *** pixelbeat has quit IRC | 00:03 | |
| *** dolphm has joined #openstack-dev | 00:07 | |
| *** dtroyer has quit IRC | 00:11 | |
| *** ayoung has joined #openstack-dev | 00:15 | |
| *** sandywalsh has joined #openstack-dev | 00:18 | |
| *** littleidea has joined #openstack-dev | 00:18 | |
| *** gyee has quit IRC | 00:18 | |
| *** PaulMachTech has joined #openstack-dev | 00:22 | |
| *** sleepsonthefloo has quit IRC | 00:22 | |
| *** andrewbogott is now known as andrewbogott[gon | 00:30 | |
| *** dwalleck_nova has quit IRC | 00:30 | |
| *** dwalleck_nova has joined #openstack-dev | 00:31 | |
| blamar_ | bcwaldon: review? https://review.openstack.org/3941 | 00:33 |
|---|---|---|
| *** jdg has quit IRC | 00:36 | |
| *** PotHix has quit IRC | 00:37 | |
| *** lloydde has quit IRC | 00:44 | |
| *** zzed has quit IRC | 00:46 | |
| *** sandywalsh has quit IRC | 00:48 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Remove unnecessary use of LoopingCall in nova/virt/xenapi/vm_utils.py https://review.openstack.org/3938 | 00:50 |
| *** mikeyp_away has joined #openstack-dev | 00:53 | |
| *** PaulMachTech has quit IRC | 00:56 | |
| *** vincentricci has joined #openstack-dev | 00:58 | |
| *** adjohn has quit IRC | 00:58 | |
| *** adjohn has joined #openstack-dev | 00:59 | |
| *** deshantm has joined #openstack-dev | 00:59 | |
| *** jakedahn has quit IRC | 01:00 | |
| *** sandywalsh has joined #openstack-dev | 01:00 | |
| *** stuntmachine has quit IRC | 01:00 | |
| *** mikeyp_away is now known as mikeyp | 01:02 | |
| *** kbringard1 has quit IRC | 01:03 | |
| *** ayoung has quit IRC | 01:03 | |
| *** ncode has quit IRC | 01:05 | |
| *** dolphm has quit IRC | 01:10 | |
| *** dolphm has joined #openstack-dev | 01:11 | |
| *** dolphm has quit IRC | 01:13 | |
| *** sleepsonthefloo has joined #openstack-dev | 01:18 | |
| *** ayoung has joined #openstack-dev | 01:27 | |
| *** dtroyer has joined #openstack-dev | 01:29 | |
| *** kbringard has joined #openstack-dev | 01:30 | |
| *** jakedahn has joined #openstack-dev | 01:31 | |
| mikal | jeblair: you around? | 01:33 |
| jeblair | mikal: yep | 01:34 |
| mikal | PM ok? | 01:34 |
| jeblair | yep | 01:35 |
| mikal | Huh. I think I just got lagged to death | 01:36 |
| *** mikal has quit IRC | 01:37 | |
| *** ncode has joined #openstack-dev | 01:37 | |
| *** mikal has joined #openstack-dev | 01:38 | |
| *** bsza has quit IRC | 01:40 | |
| *** mszilagyi has quit IRC | 01:46 | |
| *** dolphm has joined #openstack-dev | 01:48 | |
| *** dwalleck_nova has quit IRC | 01:48 | |
| *** mgius has quit IRC | 01:49 | |
| *** deshantm_ has joined #openstack-dev | 01:56 | |
| *** littleidea has quit IRC | 01:58 | |
| *** littleidea has joined #openstack-dev | 01:59 | |
| *** deshantm has quit IRC | 02:00 | |
| *** deshantm_ is now known as deshantm | 02:00 | |
| *** mattstep has quit IRC | 02:03 | |
| *** mattstep has joined #openstack-dev | 02:04 | |
| *** Yak-n-Yeti has joined #openstack-dev | 02:11 | |
| *** ohnoimdead has quit IRC | 02:14 | |
| *** kbringard has quit IRC | 02:16 | |
| *** _adjohn has joined #openstack-dev | 02:30 | |
| *** _adjohn has quit IRC | 02:31 | |
| *** adjohn has quit IRC | 02:33 | |
| *** ayoung has quit IRC | 02:33 | |
| *** adjohn has joined #openstack-dev | 02:34 | |
| *** bengrue has quit IRC | 02:36 | |
| *** ayoung has joined #openstack-dev | 02:39 | |
| *** novas0x2a|laptop has quit IRC | 02:42 | |
| *** ayoung has quit IRC | 02:46 | |
| *** mnewby has joined #openstack-dev | 02:55 | |
| *** vincentricci has left #openstack-dev | 03:04 | |
| *** nati2 has quit IRC | 03:06 | |
| *** HugoKuo_ has joined #openstack-dev | 03:07 | |
| *** andrewbogott[gon is now known as andrewbogott | 03:10 | |
| *** hugokuo has quit IRC | 03:11 | |
| *** danwent has quit IRC | 03:15 | |
| *** dayou has quit IRC | 03:18 | |
| *** dayou has joined #openstack-dev | 03:20 | |
| *** jdurgin has quit IRC | 03:27 | |
| *** martine has joined #openstack-dev | 03:36 | |
| *** dwalleck_nova has joined #openstack-dev | 03:36 | |
| *** Gordonz has joined #openstack-dev | 03:37 | |
| *** maplebed has quit IRC | 03:43 | |
| *** aa has quit IRC | 03:54 | |
| *** littleidea has quit IRC | 03:55 | |
| *** littleidea has joined #openstack-dev | 03:56 | |
| *** aa has joined #openstack-dev | 03:58 | |
| *** lloydde has joined #openstack-dev | 03:59 | |
| *** dwalleck_nova has quit IRC | 03:59 | |
| *** shevek_ has quit IRC | 04:08 | |
| *** dolphm has quit IRC | 04:13 | |
| *** nati2 has joined #openstack-dev | 04:14 | |
| *** redbo has quit IRC | 04:14 | |
| *** nati2 has quit IRC | 04:15 | |
| *** zns has joined #openstack-dev | 04:18 | |
| *** nati2 has joined #openstack-dev | 04:18 | |
| *** jakedahn has quit IRC | 04:23 | |
| mtaylor | jaypipes: around? | 04:24 |
| *** spiffxp has quit IRC | 04:32 | |
| *** littleidea has quit IRC | 04:37 | |
| *** littleidea has joined #openstack-dev | 04:38 | |
| *** redbo has joined #openstack-dev | 04:44 | |
| *** ChanServ sets mode: +v redbo | 04:44 | |
| *** zns has quit IRC | 04:48 | |
| *** mdomsch_ has joined #openstack-dev | 04:53 | |
| openstackgerrit | Verification of a change to openstack/glance failed: Make Glance work with SQLAlchemy 0.7 https://review.openstack.org/3814 | 04:58 |
| ewindisch | jeblair or mtaylor around? | 05:07 |
| ewindisch | Seems gerrit doesn't know that I signed the contributor agreement. Even signing it again didn't help... | 05:08 |
| *** martine has quit IRC | 05:13 | |
| *** redbo has quit IRC | 05:13 | |
| *** jakedahn has joined #openstack-dev | 05:15 | |
| ewindisch | can someone approve my request for https://launchpad.net/~openstack-cla ? | 05:16 |
| *** redbo has joined #openstack-dev | 05:17 | |
| *** ChanServ sets mode: +v redbo | 05:17 | |
| *** Yak-n-Yeti has quit IRC | 05:17 | |
| *** nati2 has quit IRC | 05:19 | |
| *** zaitcev has quit IRC | 05:26 | |
| *** mnewby has quit IRC | 05:28 | |
| *** nati2 has joined #openstack-dev | 05:33 | |
| *** andrewbogott is now known as andrewbogott[gon | 05:45 | |
| *** Gordonz has quit IRC | 05:47 | |
| openstackgerrit | Verification of a change to openstack/glance failed: Make Glance work with SQLAlchemy 0.7 https://review.openstack.org/3814 | 05:47 |
| *** Mandell has quit IRC | 06:16 | |
| *** deshantm has quit IRC | 06:17 | |
| mtaylor | ewindisch: looking | 06:24 |
| mtaylor | ewindisch: you seem to be in the team ... still having problem? | 06:25 |
| *** lloydde has quit IRC | 06:28 | |
| *** bepernoot has joined #openstack-dev | 06:34 | |
| *** bepernoot has joined #openstack-dev | 06:35 | |
| *** nati2 has quit IRC | 06:42 | |
| *** nati2 has joined #openstack-dev | 06:43 | |
| *** benner has quit IRC | 06:47 | |
| *** ghe_ has quit IRC | 06:47 | |
| *** jeblair has quit IRC | 06:47 | |
| *** s1rp_ has quit IRC | 06:47 | |
| *** comstud has quit IRC | 06:47 | |
| *** byeager has quit IRC | 06:47 | |
| *** uvirtbot has quit IRC | 06:47 | |
| *** smoser has quit IRC | 06:48 | |
| *** smoser has joined #openstack-dev | 06:50 | |
| *** benner has joined #openstack-dev | 06:51 | |
| *** ghe_ has joined #openstack-dev | 06:51 | |
| *** jeblair has joined #openstack-dev | 06:51 | |
| *** s1rp_ has joined #openstack-dev | 06:51 | |
| *** comstud has joined #openstack-dev | 06:51 | |
| *** byeager has joined #openstack-dev | 06:51 | |
| *** uvirtbot has joined #openstack-dev | 06:51 | |
| *** markmc has joined #openstack-dev | 06:56 | |
| *** bepernoot has quit IRC | 06:56 | |
| *** hashar has joined #openstack-dev | 06:58 | |
| *** nati2 has quit IRC | 07:07 | |
| *** hashar has quit IRC | 07:09 | |
| *** jakedahn has quit IRC | 07:13 | |
| *** jakedahn has joined #openstack-dev | 07:14 | |
| *** jakedahn_ has joined #openstack-dev | 07:15 | |
| *** jakedahn has quit IRC | 07:18 | |
| *** jakedahn_ is now known as jakedahn | 07:18 | |
| *** nati2 has joined #openstack-dev | 07:19 | |
| openstackgerrit | Verification of a change to openstack/glance failed: Make Glance work with SQLAlchemy 0.7 https://review.openstack.org/3814 | 07:26 |
| *** bepernoot has joined #openstack-dev | 07:57 | |
| *** armaan has joined #openstack-dev | 08:00 | |
| *** nati2 has quit IRC | 08:01 | |
| *** littleidea has quit IRC | 08:02 | |
| *** bepernoo1 has joined #openstack-dev | 08:06 | |
| ttx | blamar_: I think that's alright. It's in now. | 08:06 |
| ttx | notmyname: ok, cutting this morning. | 08:07 |
| *** reidrac has joined #openstack-dev | 08:08 | |
| *** bepernoot has quit IRC | 08:09 | |
| *** hashar has joined #openstack-dev | 08:19 | |
| *** hashar has joined #openstack-dev | 08:19 | |
| *** hashar has quit IRC | 08:24 | |
| *** sandywalsh has quit IRC | 08:24 | |
| *** Mandell has joined #openstack-dev | 08:24 | |
| *** j05h1 has joined #openstack-dev | 08:25 | |
| *** shevek_ has joined #openstack-dev | 08:26 | |
| *** Remco_ has joined #openstack-dev | 08:40 | |
| *** hashar has joined #openstack-dev | 08:52 | |
| *** darraghb has joined #openstack-dev | 08:58 | |
| *** oneiroi has joined #openstack-dev | 09:03 | |
| *** sandywalsh has joined #openstack-dev | 09:05 | |
| *** derekh has joined #openstack-dev | 09:09 | |
| *** maploin has joined #openstack-dev | 09:20 | |
| *** maploin has quit IRC | 09:20 | |
| *** maploin has joined #openstack-dev | 09:20 | |
| *** ncode has quit IRC | 09:24 | |
| *** derekh has quit IRC | 09:25 | |
| *** pixelbeat has joined #openstack-dev | 09:29 | |
| openstackgerrit | Verification of a change to openstack/glance failed: Make Glance work with SQLAlchemy 0.7 https://review.openstack.org/3814 | 09:35 |
| LinuxJedi | oh yay, glance-tarball is broken... | 09:38 |
| * LinuxJedi goes has some breakfast before touching that... | 09:38 | |
| *** derekh has joined #openstack-dev | 09:42 | |
| *** oneiroi has quit IRC | 10:07 | |
| *** ches has quit IRC | 10:15 | |
| *** ches has joined #openstack-dev | 10:15 | |
| *** jakedahn has quit IRC | 10:19 | |
| *** apevec has joined #openstack-dev | 10:20 | |
| *** markmc has quit IRC | 10:41 | |
| *** dayou has quit IRC | 10:44 | |
| *** kyriakos has left #openstack-dev | 11:04 | |
| *** armaan has left #openstack-dev | 11:12 | |
| *** kyriakos has joined #openstack-dev | 11:20 | |
| *** rkukura has quit IRC | 12:00 | |
| *** bsza has joined #openstack-dev | 12:21 | |
| *** corXi has joined #openstack-dev | 12:27 | |
| *** crobinso has joined #openstack-dev | 12:27 | |
| *** andrewsmedina has quit IRC | 12:29 | |
| *** zigo has joined #openstack-dev | 12:35 | |
| *** zigo has quit IRC | 12:44 | |
| *** zigo has joined #openstack-dev | 12:45 | |
| *** markvoelker has joined #openstack-dev | 12:46 | |
| *** oneiroi has joined #openstack-dev | 12:48 | |
| *** andrewsmedina has joined #openstack-dev | 12:50 | |
| *** zigo-_- has joined #openstack-dev | 12:57 | |
| *** zigo has quit IRC | 12:57 | |
| *** lts has joined #openstack-dev | 13:04 | |
| *** Ryan_Lane has joined #openstack-dev | 13:05 | |
| *** markmc has joined #openstack-dev | 13:07 | |
| *** markmc_ has joined #openstack-dev | 13:16 | |
| *** markmc has quit IRC | 13:18 | |
| *** markmc_ is now known as markmc | 13:19 | |
| sandywalsh | Any Ozone here? | 13:25 |
| wwkeyboard | just O two | 13:26 |
| sandywalsh | :) | 13:26 |
| *** kyriakos has quit IRC | 13:27 | |
| notmyname | ttx: thanks | 13:28 |
| *** Remco_ has quit IRC | 13:28 | |
| *** hashar has quit IRC | 13:34 | |
| *** hashar has joined #openstack-dev | 13:34 | |
| *** maploin has quit IRC | 13:34 | |
| *** maploin has joined #openstack-dev | 13:34 | |
| *** maploin has quit IRC | 13:35 | |
| *** maploin has joined #openstack-dev | 13:35 | |
| *** martine has joined #openstack-dev | 13:39 | |
| ewindisch | mtaylor: 0x44 took care of it for me, thanks. | 13:43 |
| zul | good morning | 13:44 |
| annegentle | is there any way to search through git branches for a text string? | 13:49 |
| annegentle | as in, I know I changed this text in a branch, but I can't find the branch | 13:50 |
| markmc | annegentle, there is, one second | 13:50 |
| annegentle | markmc: ty, whew | 13:50 |
| markmc | annegentle, something like this maybe? | 13:53 |
| markmc | for branch in $(git branch | cut -c 3-); do git log -p $branch | grep foo >/dev/null && echo $branch; done | 13:53 |
| markmc | if you knew the commit that it came after | 13:53 |
| markmc | you could do | 13:53 |
| markmc | for branch in $(git branch | cut -c 3-); do git log -p $base_commit..$branch | grep foo >/dev/null && echo $branch; done | 13:53 |
| annegentle | ooo fancy. Thanks Mark. | 13:54 |
| markmc | annegentle, and if you've lost the commit completely, e.g. if you've deleted the branch, all is not lost | 13:54 |
| annegentle | wow really | 13:54 |
| markmc | annegentle, search for fsck in http://git.savannah.gnu.org/cgit/coreutils.git/plain/HACKING | 13:54 |
| markmc | annegentle, yes, once you've committed something, the commit is basically never deleted from your repo | 13:55 |
| annegentle | oh wow, very cool | 13:55 |
| markmc | annegentle, it's just a question of finding it again :) | 13:55 |
| annegentle | heh. | 13:55 |
| corXi | jeblair, mtaylor: could any of you look at my launchpad CLA request (it's pending approval) - You're the only two administrators in "openstack administrators" on LP so I guess you're the only guys who can approve? | 14:03 |
| *** sandywalsh has quit IRC | 14:07 | |
| LinuxJedi | corXi: the core teams are also administrators | 14:14 |
| corXi | LinuxJedi: thanks, ttx helped me out! | 14:15 |
| *** deshantm has joined #openstack-dev | 14:16 | |
| *** stuntmachine has joined #openstack-dev | 14:20 | |
| *** sandywalsh has joined #openstack-dev | 14:20 | |
| *** openstackjenkins has quit IRC | 14:21 | |
| *** openstackjenkins has joined #openstack-dev | 14:23 | |
| *** ayoung has joined #openstack-dev | 14:25 | |
| *** dolphm has joined #openstack-dev | 14:26 | |
| *** stuntmachine has quit IRC | 14:29 | |
| *** comstud_ has joined #openstack-dev | 14:30 | |
| *** uvirtbot has quit IRC | 14:30 | |
| *** ghe_ has quit IRC | 14:30 | |
| *** comstud has quit IRC | 14:30 | |
| *** ghe_ has joined #openstack-dev | 14:30 | |
| *** uvirtbot has joined #openstack-dev | 14:31 | |
| *** littleidea has joined #openstack-dev | 14:35 | |
| *** zigo-_- has quit IRC | 14:36 | |
| *** stuntmachine has joined #openstack-dev | 14:36 | |
| *** mattray has joined #openstack-dev | 14:37 | |
| *** littleidea has quit IRC | 14:38 | |
| *** dprince has quit IRC | 14:38 | |
| *** dovetaildan has joined #openstack-dev | 14:38 | |
| *** littleidea has joined #openstack-dev | 14:39 | |
| *** mdomsch_ has quit IRC | 14:40 | |
| *** mdomsch has quit IRC | 14:40 | |
| *** Vek has quit IRC | 14:41 | |
| *** mdomsch has joined #openstack-dev | 14:41 | |
| *** mdomsch_ has joined #openstack-dev | 14:43 | |
| *** dolphm has quit IRC | 14:43 | |
| *** mattray has quit IRC | 14:44 | |
| *** PotHix has joined #openstack-dev | 14:45 | |
| *** mikeyp has left #openstack-dev | 14:45 | |
| *** mattray has joined #openstack-dev | 14:46 | |
| *** zigo has joined #openstack-dev | 14:47 | |
| *** AlanClark has joined #openstack-dev | 14:50 | |
| *** littleidea has quit IRC | 15:02 | |
| *** hub_cap has joined #openstack-dev | 15:03 | |
| *** zns has joined #openstack-dev | 15:04 | |
| *** deshantm_ has joined #openstack-dev | 15:09 | |
| *** zigo has quit IRC | 15:12 | |
| *** rkukura has joined #openstack-dev | 15:13 | |
| *** deshantm has quit IRC | 15:13 | |
| *** deshantm_ is now known as deshantm | 15:16 | |
| *** danwent has joined #openstack-dev | 15:21 | |
| *** andrewbogott[gon is now known as andrewbogott | 15:33 | |
| *** andrewbogott has joined #openstack-dev | 15:33 | |
| *** lloydde has joined #openstack-dev | 15:33 | |
| *** lloydde has quit IRC | 15:33 | |
| *** lloydde has joined #openstack-dev | 15:34 | |
| *** dtroyer has quit IRC | 15:42 | |
| *** andrewbogott has quit IRC | 15:44 | |
| *** andrewbogott has joined #openstack-dev | 15:44 | |
| *** lloydde has quit IRC | 15:45 | |
| corXi | can anyone give me some pointers as to why ssh review.openstack.org -P 29418 gives me a "public key denied" (it used to work before with my key, haven't changed anything, and it is still working for github itself).. Could this have something to do with the CLA? | 15:50 |
| *** sleepsonthefloo has quit IRC | 15:51 | |
| *** cp16net has joined #openstack-dev | 15:53 | |
| Daviey | Anyone from HP here? | 15:53 |
| *** lloydde has joined #openstack-dev | 15:54 | |
| *** andrewbogott has quit IRC | 15:54 | |
| *** andrewbogott has joined #openstack-dev | 15:54 | |
| *** dolphm has joined #openstack-dev | 15:55 | |
| *** dtroyer has joined #openstack-dev | 15:55 | |
| *** rnirmal has joined #openstack-dev | 15:57 | |
| *** zzed has joined #openstack-dev | 15:58 | |
| *** Yak-n-Yeti has joined #openstack-dev | 16:03 | |
| *** zigo has joined #openstack-dev | 16:07 | |
| *** markwash has quit IRC | 16:10 | |
| *** reidrac has quit IRC | 16:12 | |
| *** utlemming has quit IRC | 16:12 | |
| *** lloydde has quit IRC | 16:15 | |
| *** utlemming has joined #openstack-dev | 16:15 | |
| mjfork | danwent: question on the QuantumManger + Horizon integration work | 16:15 |
| danwent | mjfork: yeah | 16:16 |
| mjfork | the selection of a network in the create server flow only applies when QuantumManager is present | 16:18 |
| mjfork | danwent: well, selection of one or more networks that is | 16:18 |
| *** lloydde has joined #openstack-dev | 16:19 | |
| danwent | mjfork: it may also be supported by other network managers, but I'm not sure if anyone tests it. Right thing to do would probably be to only show it as an option for Quantum Manager | 16:20 |
| danwent | mjfork: selecting a network certainly doesn't make sense in some modes, like VLANManager, so best to limit it to QuantumManager | 16:21 |
| mjfork | danwent: that was my thinking | 16:21 |
| mjfork | danwent: can you select a network more than 1 time? | 16:21 |
| *** blamar_ has quit IRC | 16:22 | |
| *** lloydde has quit IRC | 16:26 | |
| *** dprince has joined #openstack-dev | 16:27 | |
| *** zigo has quit IRC | 16:28 | |
| jeblair | corXi: https://review.openstack.org/#settings,ssh-keys | 16:29 |
| mjfork | Any horizon developers available? | 16:29 |
| corXi | jeblair: just solved it.... needed full username ... | 16:29 |
| jeblair | corXi: ah, ok. :) | 16:29 |
| *** bepernoo1 has quit IRC | 16:30 | |
| danwent | mjfork: sorry, was away for a sec | 16:32 |
| *** oneiroi has quit IRC | 16:34 | |
| danwent | mjfork: yes, you can select multiple (one tricky thing is that if you have multiple vNICs on a VM, you have to make sure the VM image is configured to bring up DHCP on each of those interfaces automatically. the other option is just to access the VM and run dhcp manually on the other interfaces) | 16:34 |
| *** blamar_ has joined #openstack-dev | 16:35 | |
| *** armaan has joined #openstack-dev | 16:35 | |
| *** dspano has joined #openstack-dev | 16:38 | |
| *** Vek has joined #openstack-dev | 16:38 | |
| mjfork | danwent: but can you select teh same network multiple times | 16:39 |
| mjfork | could i select "web tier" for nic1, "db tier" for nic2, and "db tier" for nic3? | 16:39 |
| danwent | mjfork: technically, yes. Quantum would hook it up correctly. | 16:40 |
| danwent | mjfork: from a usability perspective though, such a use case is probably more likely to be a mistake | 16:40 |
| *** maplebed has joined #openstack-dev | 16:40 | |
| danwent | mjfork: than an intentional config. Certainly the standard IP injection/DHCP mechanism would result in a confusing routing table on the VM by default. | 16:41 |
| mjfork | danwent: ok, so by default that should not available | 16:41 |
| danwent | mjfork: I agree | 16:41 |
| *** spiffxp has joined #openstack-dev | 16:41 | |
| mjfork | danwent: ok, can you point me to someone on the Horizon team to figure out what control to use? | 16:42 |
| openstackgerrit | Verification of a change to openstack/nova failed: Use named logger when available https://review.openstack.org/3867 | 16:42 |
| danwent | mjfork: tres (see thread on email list) is probably the best point of contact. | 16:42 |
| *** hashar has quit IRC | 16:43 | |
| mjfork | danwent: ok, i sent the email, do you know if he sits on IRC? | 16:43 |
| danwent | mjfork: I do not know. | 16:43 |
| danwent | devcamcar may know | 16:44 |
| danwent | you could also ask devcamcar directly, as he is horizon PTL | 16:44 |
| mjfork | i think he was cc:ed on the mail, maybe i will e-mail direct | 16:45 |
| *** j05h1 has left #openstack-dev | 16:46 | |
| *** maploin has quit IRC | 16:48 | |
| *** vladimir3p has joined #openstack-dev | 16:53 | |
| *** lloydde has joined #openstack-dev | 16:55 | |
| vladimir3p | Hi All, Any idea what is the status of SSL support for API endpoints? It seems like there was one proposal submitted, but it was abandoned due to inactivity | 16:55 |
| *** littleidea has joined #openstack-dev | 16:59 | |
| *** sleepsonthefloo has joined #openstack-dev | 17:03 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Fix confirm_resize policy handling https://review.openstack.org/3886 | 17:04 |
| *** rods has joined #openstack-dev | 17:05 | |
| *** andrewsmedina has quit IRC | 17:08 | |
| *** hub-cap has joined #openstack-dev | 17:10 | |
| *** cloudfly has joined #openstack-dev | 17:11 | |
| *** hub_cap has quit IRC | 17:14 | |
| *** hub-cap is now known as hub_cap | 17:14 | |
| *** mattray has quit IRC | 17:17 | |
| *** armaan has left #openstack-dev | 17:18 | |
| *** nati2 has joined #openstack-dev | 17:19 | |
| *** littleidea has quit IRC | 17:19 | |
| *** ncode has joined #openstack-dev | 17:20 | |
| *** ncode has joined #openstack-dev | 17:20 | |
| *** littleidea has joined #openstack-dev | 17:20 | |
| *** hub_cap has quit IRC | 17:27 | |
| *** hub_cap has joined #openstack-dev | 17:27 | |
| openstackgerrit | Verification of a change to openstack/python-melangeclient failed: Fix namespace declaration https://review.openstack.org/3968 | 17:28 |
| jkoelker | mtaylor: ^ around? Jenkins isn't finding the command `nosetests` | 17:30 |
| openstackgerrit | Verification of a change to openstack/python-melangeclient failed: Fix namespace declaration https://review.openstack.org/3968 | 17:31 |
| *** dolphm has quit IRC | 17:32 | |
| *** dolphm has joined #openstack-dev | 17:34 | |
| *** cmagina has quit IRC | 17:38 | |
| *** cmagina has joined #openstack-dev | 17:39 | |
| mtaylor | jkoelker: looking | 17:41 |
| mtaylor | jkoelker: blast. one sec. | 17:41 |
| jkoelker | rock on, thanks | 17:41 |
| *** bepernoot has joined #openstack-dev | 17:43 | |
| mtaylor | markmc: hey! re: your openstack-common comments - those chunks of code were lifted from what the projects are doing right now... do we want to change their behavior at the same time we change their location? | 17:43 |
| mtaylor | markmc: (specifically related to the vcsversion thing) | 17:43 |
| mtaylor | jkoelker: k. fixed the cache job, re-ran it and then retriggered those jobs | 17:44 |
| jkoelker | excelletn, thanks | 17:44 |
| markmc | mtaylor, think we want to clean code up in openstack-common, yeah | 17:45 |
| markmc | mtaylor, but I guess reducing copies of code is good | 17:45 |
| markmc | mtaylor, then we can do cleanups in incubation | 17:45 |
| markmc | mtaylor, that's why I waved most through | 17:45 |
| markmc | mtaylor, but noted some cleanups for later | 17:45 |
| *** corXi has left #openstack-dev | 17:46 | |
| *** bepernoot has quit IRC | 17:48 | |
| mtaylor | markmc: ok. cool. I totally agree with all of your comments - just wanted to make sure we were on the same page scope-wise | 17:50 |
| mtaylor | jkoelker: you should be set | 17:51 |
| markmc | mtaylor, cool | 17:51 |
| *** pixelbeat has quit IRC | 17:53 | |
| *** markmc has quit IRC | 17:54 | |
| *** jdurgin has joined #openstack-dev | 17:54 | |
| *** ohnoimdead has joined #openstack-dev | 17:59 | |
| *** hub_cap has quit IRC | 17:59 | |
| *** mtaylor has quit IRC | 17:59 | |
| *** mtaylor has joined #openstack-dev | 17:59 | |
| *** ChanServ sets mode: +v mtaylor | 17:59 | |
| *** hub_cap has joined #openstack-dev | 18:00 | |
| *** mdomsch_ has quit IRC | 18:01 | |
| *** Ryan_Lane has quit IRC | 18:01 | |
| *** derekh has quit IRC | 18:03 | |
| vladimir3p | Hi All! Any idea what is the status of SSL support for API endpoints? It seems like there was one proposal submitted, but it was abandoned due to inactivity | 18:03 |
| *** Ryan_Lane has joined #openstack-dev | 18:03 | |
| *** bepernoot has joined #openstack-dev | 18:04 | |
| *** jdg_ has joined #openstack-dev | 18:05 | |
| *** spiffxp has quit IRC | 18:05 | |
| *** gyee has joined #openstack-dev | 18:09 | |
| *** ncode has quit IRC | 18:13 | |
| *** bepernoot has quit IRC | 18:14 | |
| gyee | termie, is keystone-all the correct way to startup keystone from the redux branch? | 18:20 |
| gyee | ./bin/keystone-all | 18:21 |
| gyee | Traceback (most recent call last): | 18:21 |
| gyee | File "./bin/keystone-all", line 25, in <module> | 18:21 |
| gyee | CONF = config.CONF | 18:21 |
| gyee | AttributeError: 'module' object has no attribute 'CONF' | 18:21 |
| gyee | seems like pythonpath is not being correctly set | 18:21 |
| *** shevek_ has quit IRC | 18:22 | |
| *** mszilagyi has joined #openstack-dev | 18:23 | |
| *** j05h has joined #openstack-dev | 18:28 | |
| *** darraghb has quit IRC | 18:30 | |
| *** andrewsmedina has joined #openstack-dev | 18:33 | |
| *** spiffxp has joined #openstack-dev | 18:34 | |
| *** vincentricci has joined #openstack-dev | 18:34 | |
| *** hashar has joined #openstack-dev | 18:41 | |
| _cerberus_ | bcwaldon: ping | 18:42 |
| openstackgerrit | Verification of a change to openstack/nova failed: Add requirements freezing. https://review.openstack.org/3872 | 18:43 |
| *** mikeyp has joined #openstack-dev | 18:45 | |
| _cerberus_ | bcwaldon: well, whenever you appear https://review.openstack.org/#change,3829 can you clarify for Rick in that patch? It seems alright to me but I'm not totally following the caveat you mentioned | 18:45 |
| openstackgerrit | Verification of a change to openstack/nova failed: Backslash continuations (misc.) https://review.openstack.org/3652 | 18:53 |
| *** pixelbeat has joined #openstack-dev | 18:56 | |
| *** sleepsonthefloo has quit IRC | 19:01 | |
| *** sleepsonthefloo has joined #openstack-dev | 19:01 | |
| *** zaitcev has joined #openstack-dev | 19:01 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Fixing a unicode related metadata bug. https://review.openstack.org/3952 | 19:02 |
| *** Mandell has quit IRC | 19:10 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Backslash continuations (nova.virt) https://review.openstack.org/3744 | 19:12 |
| *** dolphm has quit IRC | 19:14 | |
| *** zns has quit IRC | 19:15 | |
| termie | gyee: yeah | 19:16 |
| gyee | termie, yeah I work around it for now | 19:17 |
| termie | gyee: i was answering question about keysotne-all | 19:17 |
| termie | gyee: did you have another question | 19:17 |
| termie | gyee: (or statement) | 19:18 |
| gyee | no statement :) | 19:18 |
| jeblair | we've found a bug in jenkins that is causing periodic jobs (like the devstack vm launch job) not to run | 19:18 |
| termie | ayoung: ah, i see, yeah we should probably make the tests check whether they should check that if we want to make those tests useful for all backends | 19:18 |
| jeblair | we're filing a bug with jenkins about it, and we'll work on either fixing it or working around it locally | 19:18 |
| termie | ayoung: i don't know spinnningcog's question, i only really keep track of people who say my name | 19:19 |
| *** JStoker has quit IRC | 19:19 | |
| ayoung | termie, what is Metadata used for? | 19:19 |
| termie | ayoung: it has references to which roles the user has, mostly | 19:19 |
| termie | ayoung: user-tenant has | 19:19 |
| ayoung | termie, why isn't that covered by the tenant and roles APIs then? | 19:20 |
| termie | ayoung: the calls to metadata should probably be replaced in the code, they are too lowlevel | 19:21 |
| ayoung | termie, so the LDAP backend probably should not implement Metadata then? | 19:21 |
| termie | ayoung: the system originally did not have roles as a separate table (people only use the role names and hardcode them) | 19:21 |
| * ayoung likes less work | 19:21 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Backslash continuations (nova.db) https://review.openstack.org/3783 | 19:21 |
| *** mnewby has joined #openstack-dev | 19:22 | |
| termie | ayoung: yeah, though, again, if you implement it as "get_roles_for_user_and_tenant" | 19:22 |
| ayoung | termie, sounds good | 19:22 |
| termie | ayoung: and then just have get_metadata return the results in the proper format, you can hack it in until we remove it | 19:22 |
| *** JStoker has joined #openstack-dev | 19:24 | |
| ayoung | termie, OK. so first thing is to add a unit test for "get_roles_for_user_and_tenant" | 19:24 |
| *** shevek_ has joined #openstack-dev | 19:27 | |
| *** zns has joined #openstack-dev | 19:27 | |
| *** zns1 has joined #openstack-dev | 19:28 | |
| *** openstackjenkins has quit IRC | 19:29 | |
| *** openstackjenkins has joined #openstack-dev | 19:30 | |
| *** zns has quit IRC | 19:32 | |
| *** bepernoot has joined #openstack-dev | 19:33 | |
| *** bepernoot has quit IRC | 19:38 | |
| *** andrewbogott is now known as andrewbogott[gon | 19:40 | |
| *** bepernoot has joined #openstack-dev | 19:42 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Ensures that hostId's are unique https://review.openstack.org/3936 | 19:46 |
| *** j05h has left #openstack-dev | 19:46 | |
| *** mattstep has quit IRC | 19:52 | |
| *** mattstep has joined #openstack-dev | 19:53 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Handle --flagfile by converting to .ini style https://review.openstack.org/3730 | 19:56 |
| *** bepernoot has joined #openstack-dev | 20:00 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Backslash continuations (nova.db) https://review.openstack.org/3783 | 20:02 |
| openstackgerrit | Verification of a change to openstack/nova failed: Backslash continuations (misc.) https://review.openstack.org/3652 | 20:03 |
| openstackgerrit | Verification of a change to openstack/nova failed: Backslash continuations (nova.virt) https://review.openstack.org/3744 | 20:04 |
| *** bepernoot has quit IRC | 20:05 | |
| *** davidkranz has joined #openstack-dev | 20:06 | |
| Vek | Is someone looking into the devstack "out of nodes" problem? | 20:08 |
| *** rnirmal has quit IRC | 20:08 | |
| Vek | ^^ mtaylor, jeblair | 20:08 |
| uvirtbot | Vek: Error: "^" is not a valid command. | 20:08 |
| mtaylor | Vek: yes | 20:09 |
| Vek | mtaylor: 'k. | 20:09 |
| * Vek fwaps uvirtbot with an endless stream of ^ | 20:09 | |
| mtaylor | Vek: we've fixed the first problem (actually a bug in jenkins, that we have patched, gotten submitted upstream and released already :) | 20:09 |
| mtaylor | Vek: and now there is a new an exciting problem | 20:09 |
| davidkranz | I was running tempest/devstack in a nova VM and after some time of normal use it just lost it's eth0 address and network connectivity. | 20:09 |
| Vek | Cool. | 20:09 |
| Vek | and "sounds about right" :) | 20:09 |
| davidkranz | Everything seemed fine on the compute node and rebooting the vm fixed the problem. Has any one seen this? | 20:10 |
| Vek | anyway, my point was that I've seen several reviews come back with a devstack failure on the "no nodes" problem, and retriggering doesn't (of course) pass them. | 20:10 |
| mtaylor | Vek: yup. we're on it | 20:10 |
| mtaylor | Vek: and are working as well to make sure that we can stop these from happening in the first place | 20:11 |
| Vek | 'k. I'll leave you to your regularly scheduled firefighting, then. | 20:11 |
| mtaylor | Vek: turns out - sometimes cloud providers can't return VMs! :) | 20:11 |
| Vek | kewl :) | 20:11 |
| vladimir3p | Hey huys, I will ask again :-) Any idea what is the status of SSL support for API endpoints? It seems like there was one proposal submitted, but it was abandoned due to inactivity | 20:16 |
| vladimir3p | *guys :-) | 20:16 |
| Vek | mtaylor: heh :) | 20:19 |
| *** dolphm has joined #openstack-dev | 20:20 | |
| openstackgerrit | Verification of a change to openstack/nova failed: Handle --flagfile by converting to .ini style https://review.openstack.org/3730 | 20:20 |
| *** Remco_ has joined #openstack-dev | 20:21 | |
| *** Remco_ has quit IRC | 20:22 | |
| *** mattray has joined #openstack-dev | 20:23 | |
| *** dspano has quit IRC | 20:23 | |
| *** pixelbeat has quit IRC | 20:30 | |
| *** Ryan_Lane has quit IRC | 20:32 | |
| *** hashar has quit IRC | 20:34 | |
| *** dspano has joined #openstack-dev | 20:36 | |
| *** Gordonz has joined #openstack-dev | 20:38 | |
| openstackgerrit | Verification of a change to openstack/python-novaclient failed: Properly handle KeyErrors. https://review.openstack.org/3979 | 20:40 |
| openstackgerrit | Verification of a change to openstack/python-novaclient failed: Properly handle KeyErrors. https://review.openstack.org/3979 | 20:41 |
| *** jperkin has quit IRC | 20:42 | |
| openstackgerrit | Verification of a change to openstack/python-novaclient failed: Properly handle KeyErrors. https://review.openstack.org/3979 | 20:42 |
| jk0 | mtaylor: https://jenkins.openstack.org/job/gate-integration-tests-devstack-vm/1273/console :( | 20:43 |
| jk0 | no moar nodes | 20:43 |
| *** jperkin has joined #openstack-dev | 20:45 | |
| *** tryggvil_ has joined #openstack-dev | 20:45 | |
| *** davidkranz has quit IRC | 20:48 | |
| *** Vince_ has joined #openstack-dev | 20:49 | |
| *** vincentricci has quit IRC | 20:51 | |
| *** LinuxJedi has quit IRC | 20:56 | |
| *** rkukura has quit IRC | 21:01 | |
| *** mnewby_ has joined #openstack-dev | 21:03 | |
| *** mnewby has quit IRC | 21:04 | |
| *** mnewby_ is now known as mnewby | 21:04 | |
| *** hub_cap has quit IRC | 21:06 | |
| *** hub_cap has joined #openstack-dev | 21:07 | |
| *** jog0 has joined #openstack-dev | 21:08 | |
| *** dprince has quit IRC | 21:09 | |
| *** dolphm has quit IRC | 21:13 | |
| *** apevec has quit IRC | 21:17 | |
| *** andrewsmedina has quit IRC | 21:21 | |
| *** deshantm has quit IRC | 21:21 | |
| ayoung | termie, trying to debug keystone by using curl. I'm running curl -v -H "Content-Type:application/json" -H "Accept:applicaton/json" -X POST http://0.0.0.0:5000/v2.0/tokens/authenticate | 21:22 |
| *** hub-cap has joined #openstack-dev | 21:23 | |
| ayoung | but it doesn't seem to be matching the what is registered | 21:23 |
| ayoung | 2012-02-09 16:24:02 DEBUG [routes.middleware] Match dict: {'controller': <keystone.service.PublicRouter object at 0x26328d0>, 'path_info': '/tokens/authenticate'} | 21:23 |
| ayoung | 2012-02-09 16:24:02 DEBUG [routes.middleware] No route matched for POST /tokens/authenticate | 21:23 |
| ayoung | what am I missing? | 21:23 |
| *** dolphm has joined #openstack-dev | 21:23 | |
| *** dolphm has quit IRC | 21:23 | |
| *** dolphm has joined #openstack-dev | 21:24 | |
| ayoung | zns1, ^^ | 21:25 |
| *** deshantm has joined #openstack-dev | 21:25 | |
| *** hub_cap has quit IRC | 21:26 | |
| *** hub-cap is now known as hub_cap | 21:26 | |
| openstackgerrit | Verification of a change to openstack/python-novaclient failed: Properly handle KeyErrors. https://review.openstack.org/3979 | 21:27 |
| *** Remco_ has joined #openstack-dev | 21:28 | |
| ayoung | ah... the action is not part of the URL. so authenticate is just /tokens. | 21:29 |
| jk0 | any CI folks around? | 21:31 |
| mtaylor | jk0: yeah - we're working on it | 21:31 |
| jk0 | cool, thanks man | 21:31 |
| zns1 | ayoung: yes. POST /v2.0/tokens and the content is {"auth": … } | 21:31 |
| *** zns1 is now known as zns | 21:31 | |
| mtaylor | jk0: there's a REALLY REALLY weird ssl thing going on | 21:31 |
| *** mattray1 has joined #openstack-dev | 21:31 | |
| ayoung | zns, can't tell you how many times I read the code and still read that wrong.... | 21:31 |
| jk0 | that sounds.... fun :) | 21:31 |
| mtaylor | oh, I can't even tell you | 21:32 |
| *** mattray has quit IRC | 21:33 | |
| *** LinuxJedi has joined #openstack-dev | 21:34 | |
| ayoung | zns, any reason we are raising HTTPForbidden instead of HTTPUnauthorized, or is that just an oversight? | 21:38 |
| *** sleepsonthefloo has quit IRC | 21:38 | |
| *** sleepsonthefloo has joined #openstack-dev | 21:39 | |
| zns | HTTPForbidden might be in response to invalid tenant instead of invalid credentials. Possible? | 21:39 |
| ayoung | zns or if a user account is locked, but giving a different userid and password would make a differnec,e so it probably should be 401 across the board, no? | 21:40 |
| mtaylor | I'd think we should return the same error in both cases | 21:41 |
| mtaylor | otherwise you could use error codes to fish for usernames | 21:41 |
| mtaylor | or whatnot | 21:42 |
| *** Ryan_Lane has joined #openstack-dev | 21:42 | |
| ayoung | http://en.wikipedia.org/wiki/HTTP_403 is for things that the server will never answer, like directory listings that have been disbaled | 21:42 |
| zns | I think providing valid credentials, but an invalid tenant could be a more informative Forbidden. But anyone providing bad credentials should always get the same response (to prevent divulging information). | 21:42 |
| *** sandywalsh has quit IRC | 21:43 | |
| ayoung | zns we can return a message for disabled or invalid tenant if the uid/password is correct | 21:43 |
| *** littleidea has quit IRC | 21:44 | |
| *** littleidea has joined #openstack-dev | 21:44 | |
| zns | I get {"unauthorized": {"message": "Unauthorized", "code": "401"}} passing in invalid credentials... | 21:45 |
| *** jog0_ has joined #openstack-dev | 21:45 | |
| zns | Are you using KSL or Keystone? I got that response in Keystone... | 21:45 |
| ayoung | zns is that current or redux? | 21:45 |
| ayoung | I'm working in redux | 21:45 |
| termie | scrolling back | 21:46 |
| zns | Ah. So probably something we need to port over from master... | 21:46 |
| termie | what are you referring to? | 21:46 |
| ayoung | termie in authenticate, we are return 403, but I think it should be 401 | 21:46 |
| ayoung | for the HTTP status code | 21:46 |
| ayoung | ksl: kerysone/service.py/TokenController.authenticate | 21:47 |
| *** ewindisch_ has joined #openstack-dev | 21:47 | |
| termie | ayoung: are you on latest versions? dolph added some statuscode stuf | 21:47 |
| ayoung | termie, let me check | 21:47 |
| termie | ayoung: (from the redux branch) | 21:47 |
| *** littleidea has quit IRC | 21:47 | |
| termie | mtaylor: i'm getting some git-review bugs | 21:47 |
| termie | mtaylor: git review -d 3942 | 21:48 |
| *** littleidea has joined #openstack-dev | 21:48 | |
| *** ewindisch has quit IRC | 21:48 | |
| *** ewindisch_ is now known as ewindisch | 21:48 | |
| mtaylor | termie: looking | 21:48 |
| termie | mtaylor: complains about ssh args, apparently git_show_parse("gerrit", "Push") is not finding the correct port and returns an int 22 | 21:48 |
| *** jog0 has quit IRC | 21:48 | |
| ayoung | termie, looks like I need to rebase | 21:48 |
| termie | where " ".join() wants a str, and 22 isn't correct anyway | 21:48 |
| termie | or well, not for gerrit | 21:48 |
| mtaylor | termie: can you pastebin me something | 21:48 |
| mtaylor | termie: git remote show -n gerrit | 21:49 |
| *** jog0_ has quit IRC | 21:49 | |
| mtaylor | termie: I think this is the bug I filed for you the other day - something about parsing your gerrit remote is going very poorly | 21:49 |
| termie | mtaylor: http://pastebin.com/ijerLpV1 | 21:50 |
| termie | mtaylor: should have all relevent stuff, the second set of calls to git-review i've added a print to print the ssh_cmds | 21:50 |
| termie | line 461 of git-review | 21:51 |
| mtaylor | yup. | 21:51 |
| termie | i assume the issue is probably in git_show_parse or whatnot, haven't gotten as far as reading through it yet | 21:51 |
| mtaylor | there was a bug in urlparse on osx that we worked around before, I wonder if this is similar or related | 21:51 |
| termie | also gets no hostname or any of that, it seems | 21:53 |
| mtaylor | yeah. total fail in parsing your remote | 21:54 |
| *** mattstep has quit IRC | 21:54 | |
| termie | yeah, seeems so: | 21:54 |
| termie | >>> import urlparse | 21:54 |
| termie | >>> urlparse.urlparse("ssh://termie@review.openstack.org:29418/openstack/keystone.git") | 21:54 |
| termie | ParseResult(scheme='ssh', netloc='', path='//termie@review.openstack.org:29418/openstack/keystone.git', params='', query='', fragment='') | 21:54 |
| *** justinsb has quit IRC | 21:55 | |
| *** mattstep has joined #openstack-dev | 21:55 | |
| mtaylor | wow. that's exciting | 21:56 |
| termie | yeah, messed with args, not making it much easier | 21:56 |
| mtaylor | if parsed_url.scheme == "ssh" and hostname[:2] == "//": | 21:56 |
| mtaylor | we've actually theorectically got a workaround for the mis-parsing in there | 21:56 |
| mtaylor | line 223 | 21:56 |
| termie | hostname doesn't get anything, path gets everything | 21:57 |
| mtaylor | aha | 21:57 |
| termie | why would it parse the url like that | 21:58 |
| termie | that's just ludicrous | 21:59 |
| termie | LUDACRIS | 21:59 |
| mtaylor | termie: https://review.openstack.org/#change,3982 | 21:59 |
| mtaylor | termie: does that look sane to you? | 21:59 |
| *** rkukura has joined #openstack-dev | 21:59 | |
| termie | not at all, remember the hostname is empty | 22:00 |
| termie | oh | 22:00 |
| termie | i see the second part | 22:00 |
| termie | will test locally | 22:00 |
| *** jog0 has joined #openstack-dev | 22:01 | |
| termie | cool, works | 22:01 |
| mtaylor | awesome | 22:02 |
| *** jog0 has quit IRC | 22:02 | |
| mtaylor | I will merge and release a new version (that's a pretty bad bug) | 22:02 |
| termie | it seems really silly that that could make it into osx python | 22:02 |
| termie | people use urlparse quite regularly | 22:03 |
| openstackgerrit | Verification of a change to openstack/python-novaclient failed: Properly handle KeyErrors. https://review.openstack.org/3979 | 22:03 |
| mtaylor | yeah - it's sort of a standard thing | 22:03 |
| *** littleidea has quit IRC | 22:03 | |
| termie | mtaylor: thanks for the help | 22:04 |
| *** littleidea has joined #openstack-dev | 22:05 | |
| mtaylor | termie: absolutely! thanks for helping me find it. | 22:05 |
| mtaylor | termie: new version released | 22:05 |
| mtaylor | (which will also fix that commit-msg issue you were seeing) | 22:06 |
| ayoung | termie, now that I've rebased (and squashed my patch, BTW) I can say that the return codes are still 403 (HTTPForbidden) instead of 401 HTTP Unauthorized. 401 is the right code. | 22:08 |
| ayoung | http://tools.ietf.org/html/rfc2616#page-66 | 22:08 |
| termie | dolphm: ^^ | 22:08 |
| *** andrewsmedina has joined #openstack-dev | 22:08 | |
| vishy | anyone around who is familiar with iscsi | 22:08 |
| vishy | zul: ^^ ? | 22:09 |
| vishy | adam_g: ^^ | 22:09 |
| *** nati2 has quit IRC | 22:11 | |
| hub_cap | vishy: if u hop into #reddwarf, konetzed is totally familair w/ it | 22:12 |
| hub_cap | as long as u mean the service and not code _in_ nova | 22:12 |
| *** blamar_ has quit IRC | 22:12 | |
| zaitcev | <ayoung> http://en.wikipedia.org/wiki/HTTP_403 is for things that the server will never answer, like directory listings that have been disbaled <==== this is just false, IMHO | 22:14 |
| zaitcev | Although, on second thought, who am I to argue with the mighty WIKIPEDIA | 22:15 |
| zaitcev | Basically some idiot misunderstood "Authorization will not help and the request SHOULD NOT be repeated." | 22:17 |
| zaitcev | 403 means that the password was incorrect | 22:17 |
| zaitcev | 401 means that the password was not presented at all and the browser has a chance to pop the the dialog (using the information from WWW-Authenticate like the realm). | 22:18 |
| *** stuntmachine has quit IRC | 22:18 | |
| *** martine has quit IRC | 22:18 | |
| *** sandywalsh has joined #openstack-dev | 22:18 | |
| zaitcev | Of course, repeating the bad password endlessly will always end with 403, which is why it SHOULD NOT be repeated. | 22:18 |
| jeblair | so the reason why we can't spin up devstack nodes right now is because rackspace changed the name of the service in the API, and libcloud is using the old name. apparently rackspace is rolling that back. in the mean time, we'll hack in a workaround. | 22:22 |
| mtaylor | lesson for those following along at home, don't change api services names | 22:23 |
| *** blamar_ has joined #openstack-dev | 22:30 | |
| ayoung | zaitcev, nope | 22:31 |
| dolphm | ayoung: termie: what's returning 403? | 22:31 |
| ayoung | 403 is for something that the server will never | 22:31 |
| ayoung | be allowed | 22:31 |
| ayoung | and resending the creds makes no difference | 22:31 |
| ayoung | 401 means invalid cresd | 22:31 |
| ayoung | creds | 22:31 |
| dolphm | or no auth provided | 22:32 |
| ayoung | 1 sec I'll post the real link | 22:32 |
| ayoung | http://tools.ietf.org/html/rfc2616#page-66 | 22:32 |
| ayoung | dolphm, Keystone lite authenticate | 22:32 |
| adam_g | vishy: here now | 22:32 |
| ayoung | zaitcev, so both bad password and no password should get 401 | 22:33 |
| dolphm | ayoung: yep, keystone.service.py line ~159 | 22:33 |
| ayoung | dolphm, so you agree should be raise webob.exc.HTTPUnauthorized() | 22:34 |
| dolphm | for bad creds sure | 22:34 |
| dolphm | disabled user is kind of blurry, but i would lean toward 401 there too | 22:34 |
| vishy | adam_g: i think i've got a plan | 22:34 |
| vishy | going to make a libvirt call to give me all attached disks | 22:34 |
| *** hub_cap has quit IRC | 22:36 | |
| jeblair | devstack nodes are available, and i've retriggered (i think) all the jobs that failed. | 22:39 |
| *** mattray1 is now known as mattray | 22:39 | |
| *** mattray has joined #openstack-dev | 22:39 | |
| dolphm | ayoung: proposing a fix | 22:39 |
| ayoung | dolphm, cool | 22:39 |
| dolphm | termie ^ | 22:40 |
| adam_g | vishy: what for? /me lacks context | 22:40 |
| zns | dolphm.ayoung: disabled user is listed in the spec as 403: "Error Response Code(s): unauthorized (401), userDisabled (403), badRequest (400), | 22:40 |
| zns | identityFault (500), serviceUnavailable(503)" | 22:40 |
| vishy | adam_g: making iscsi support multiple luns on the same target | 22:40 |
| zaitcev | ayoung: Here's a scenario: you have a client. If client receives 401 with WWW-Authenticate, it sends the credentials (password). If server replies with 401 to "both bad password and no password" like you said above, client and server loop forever. | 22:40 |
| zaitcev | This is the principal difference between 401 and 403. The 401 requires client to send credentials. It's a turnaround prompt for things like Kerberos for that reason. | 22:41 |
| zaitcev | All the goofy language in RFCs just serves to obscure the reason why we have the two. | 22:41 |
| dolphm | zns: i think user disabled should be 401 because the username is just a portion of the credentials that are being rejected, and new credentials might succeed | 22:41 |
| *** sandywalsh has quit IRC | 22:47 | |
| zns | dolphm: 403 doesn't preclude you from sending in new credentials and succeeding. If you return 401 for a disabled user, you're saying the credentials were invalid. That's not true, the credentials were valid and identity has been established (authenticated), but the account has been disabled and is currently forbidden from accessing the resource… | 22:47 |
| adam_g | vishy: so that each volume maps to a LUN on a specific target, as opposed to an entire target? | 22:48 |
| *** Remco_ has quit IRC | 22:48 | |
| dolphm | zns: 403 Forbidden, "Authorization will not help" | 22:48 |
| dolphm | zns: 401 Unauthorized, "authorization has been refused for those credentials" and "the user SHOULD be presented the entity that was given in the response, since that entity might include relevant diagnostic information" | 22:51 |
| zns | dolphm: Exactly. Given your account is disabled, you will still be rejected even if you re-authenticate. You need to re-enable the account and then you will be allowed back in (with the same credentials). | 22:51 |
| dolphm | zns: the proposal includes an error message stating "your user has been disabled" | 22:51 |
| zns | dolphm: which proposal? | 22:51 |
| dolphm | zns: ayoung: zaitcev: https://review.openstack.org/#change,3985 | 22:52 |
| *** cp16net has quit IRC | 22:52 | |
| ayoung | dolphm, not sure you got all of them....1 sec | 22:53 |
| *** vincentricci has joined #openstack-dev | 22:53 | |
| ayoung | dolphm, http://fpaste.org/cOIJ/ | 22:54 |
| ayoung | I think that what I was finding is if you put in a bad username, you get a stack trace, which is why I stuck that first one in there | 22:54 |
| *** Vince_ has quit IRC | 22:54 | |
| zns | dolphm: the logic behind "the client MAY repeat the request" with a 401 is that the 401 is used to negotiate authentication. It can return a list of WWW-Authenticate headers with a list of different authentication protocols to use. The repeat indicates that you should retry the request with different protocols (not necessarily different credentials). | 22:54 |
| zns | dolphm: however, with a 403, you're saying it doesn't matter what protocol you are using, this account is disabled and will be rejected no matter what the protocol is, Hence, don't bother retrying with Basic, or Digest, etc... | 22:55 |
| *** AlanClark has quit IRC | 22:56 | |
| *** bengrue has joined #openstack-dev | 22:56 | |
| *** ayoung is now known as ayoung-home | 22:58 | |
| *** zzed has quit IRC | 22:58 | |
| zns | dolphm: and with either of those, you are always free to retry with different credentials. | 22:58 |
| *** zaitcev has quit IRC | 22:58 | |
| *** zaitcev_ has joined #openstack-dev | 22:58 | |
| zns | dolphm: makes sense? That's why userDisabled is a 403... | 22:58 |
| dolphm | zns: that's not how i read it :-/ | 22:59 |
| *** dspano has quit IRC | 22:59 | |
| *** zaitcev_ is now known as zaitcev | 23:00 | |
| dolphm | zns: to me, a 403 is a slap on the wrist and the server saying "stop doing that" | 23:00 |
| zaitcev | These vague antropomorphic analogies are harmful due to their vagueness and culture-specific assumptions. | 23:01 |
| *** sandywalsh has joined #openstack-dev | 23:02 | |
| *** Gordonz has quit IRC | 23:03 | |
| dolphm | zns: the other part about 403 that throws me off is that 404 is suggested as an alternative response... another hint that the user should stop trying | 23:03 |
| vishy | adam_g: correct | 23:04 |
| zaitcev | The server intends either to sustain a loop with 401 or break it with 403. The 404 may be a better option actually. | 23:05 |
| *** nati2 has joined #openstack-dev | 23:05 | |
| dolphm | zns: the "disabled" user state is also analogous to "your account was deleted", and if it *was* actually deleted, you'd just be getting a 401 like everyone else | 23:08 |
| *** zaitcev has quit IRC | 23:09 | |
| *** lloydde has quit IRC | 23:09 | |
| *** dovetaildan has quit IRC | 23:09 | |
| *** lts has quit IRC | 23:09 | |
| zns | dolphm: 404 is an alternative if you do not want to reveal to the client that the resource exists. In our case, the client knows the resource exists, so 404 would be clearly incorrect. | 23:09 |
| *** zaitcev has joined #openstack-dev | 23:09 | |
| *** dovetaildan has joined #openstack-dev | 23:09 | |
| *** Yak-n-Yeti has quit IRC | 23:09 | |
| *** lts has joined #openstack-dev | 23:09 | |
| *** lloydde has joined #openstack-dev | 23:09 | |
| dolphm | zns: by the same logic, i would say a 403 is wrong too then | 23:09 |
| zns | dolphm: I disagree that disabled is analogous to deleted. If the account is deleted or does not exist then you have no way of validating the identity of the caller. In that case, the authentication would fail and a 401 should be returned. | 23:10 |
| vishy | adam_g: first pass: still need to fix the tests https://github.com/vishvananda/nova/compare/master...multi-lun | 23:11 |
| zns | dolphm: with the 403, you have actually validated the identity of the client, but you are forbidding access. That's the difference, is that you *know* who the client is and they have provided valid credentials, but you want to let them know that they, in layman's terms, need to go see their administrator… | 23:16 |
| dolphm | zns: what does "disabled" mean if not "soft-deleted"? | 23:17 |
| zns | dolphm: maybe this scenario might help. If you pass in a bad password for a disabled account, you should get a 401. But if you pass in a valid password for that account, you should get a 403. | 23:17 |
| zns | dolphm: disabled != delete or soft delete. Deleted (soft or not) should result in behavior similar to the account not existing. Disabled means you're preventing the use of the account; but I say that hesitantly because there isn't any spec or HTTP standard to refer to (that I am ware of - would love to hear about it if there is). | 23:21 |
| zns | dolphm: my interpretation of disabled is "temporarily prevent use of that account" - until I either re-enable the account or delete it... | 23:23 |
| dolphm | zns: sure, and 401 is temporary, 403 is not ;) | 23:24 |
| *** littleidea has quit IRC | 23:24 | |
| *** nati2 has quit IRC | 23:27 | |
| zns | dolphm: no. The standard for the error codes does not speak to whether the condition is temporary or not. You're confusing "MAY repeat" with COULD or SHOULD retry. | 23:28 |
| *** mgius has joined #openstack-dev | 23:30 | |
| dolphm | zns: i think you're reading it as 401 "Unauthenticated", which is just a precondition for actual authorization (enabledness) | 23:30 |
| *** zns has quit IRC | 23:35 | |
| *** mattray has quit IRC | 23:47 | |
| *** utlemming has quit IRC | 23:52 | |
| *** utlemming has joined #openstack-dev | 23:54 | |
| *** Yak-n-Yeti has joined #openstack-dev | 23:55 | |
| *** lloydde has quit IRC | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!