Tuesday, 2012-07-24

« Monday, 2012-07-23 Index Wednesday, 2012-07-25 »
*** ncode has joined #openstack-dev00:02
*** ncode has joined #openstack-dev00:02
*** salgado-afk has quit IRC00:04
*** novas0x2a|laptop has quit IRC00:06
*** s0mik has quit IRC00:07
*** jkff has joined #openstack-dev00:08
*** issackel_ has quit IRC00:08
jkffHi. Can someone explain me the relationship between openstack-common and other projects (e.g. nova) - does code just get copied from openstack-common when changes occur?00:09
jkffI'd like to do some changes on the RPC layer and I'm not sure where I should introduce them - in nova, in openstack-common, or in both00:09
*** danwent has quit IRC00:09
jkffWell, I suppose I should introduce them to openstack-common anyway. The better question is: how to they then get applied to e.g. nova? should I do it myself or shall it be done automatically or by someone?00:10
*** jtran has quit IRC00:13
*** rods_ has quit IRC00:16
*** steveb_ has quit IRC00:19
*** jkff has quit IRC00:21
bhuvan_mtaylor: can you please review/approve https://review.openstack.org/10091 when you find time?00:22
*** mnewby has quit IRC00:22
*** nati_uen_ has quit IRC00:26
*** steveb_ has joined #openstack-dev00:27
*** nati_ueno has joined #openstack-dev00:27
dabojog0: thanks - I'll give it a try later.00:31
*** nati_ueno has quit IRC00:31
*** halfss has joined #openstack-dev00:41
*** nati_ueno has joined #openstack-dev00:59
*** ncode has quit IRC01:00
*** anderstj has joined #openstack-dev01:01
*** anderstj has quit IRC01:03
*** jdurgin has quit IRC01:03
*** mnaser has joined #openstack-dev01:04
*** galstrom has joined #openstack-dev01:09
Ryan_Laneis anyone actually using the ldap backend for keystone in essex, or am I correct in the assumption that it's basically 100% broken?01:11
*** halfss has quit IRC01:15
jaypipesRyan_Lane: no, I think ayoung-afk was...01:37
jaypipesRyan_Lane: look through the list of contributors to the ldap driver....01:37
jaypipesRyan_Lane: should be some contacts in there for ya.01:37
Ryan_Lanethere's tons of broken stuff in here01:38
Ryan_Lanethe fact that keystone is hard to use to begin with probably isn't helping01:39
*** roge has quit IRC01:45
*** shang has joined #openstack-dev01:59
*** dachary has joined #openstack-dev02:01
*** Aaton is now known as Aaton_off02:02
*** Ryan_Lane has quit IRC02:04
*** sniperd_ has joined #openstack-dev02:04
*** nati_uen_ has joined #openstack-dev02:06
*** Gordonz_ has joined #openstack-dev02:06
*** mattstep has quit IRC02:06
*** mattstep has joined #openstack-dev02:06
*** Mandell_ has joined #openstack-dev02:06
*** Mandell has quit IRC02:06
*** nati_ueno has quit IRC02:07
*** JStoker has quit IRC02:07
*** sniperd has quit IRC02:07
*** devcamcar has quit IRC02:07
*** utlemming has quit IRC02:07
*** hattwick has quit IRC02:07
*** devcamca- has joined #openstack-dev02:07
*** steveb_ has quit IRC02:07
*** asalkeld has quit IRC02:07
*** dmarkey has quit IRC02:07
*** chenxu has quit IRC02:07
*** chenxu has joined #openstack-dev02:07
*** asalkeld has joined #openstack-dev02:07
*** dmarkey_ has joined #openstack-dev02:07
*** cdub has quit IRC02:08
*** cdub has joined #openstack-dev02:08
*** steveb_ has joined #openstack-dev02:08
*** Gordonz has quit IRC02:08
*** hattwick has joined #openstack-dev02:09
*** anniec has quit IRC02:12
*** trapni has quit IRC02:15
*** rkukura has quit IRC02:16
*** trapni has joined #openstack-dev02:16
*** salv-orlando has left #openstack-dev02:17
*** mnewby has joined #openstack-dev02:19
*** JStoker has joined #openstack-dev02:23
jgriffithjaypipes: ping02:30
*** anderstj has joined #openstack-dev02:34
*** amotoki has joined #openstack-dev02:38
*** zhuadl has quit IRC02:39
*** samkottler has quit IRC02:41
*** roge has joined #openstack-dev02:46
*** matwood has joined #openstack-dev02:48
*** edygarcia has quit IRC02:56
*** shang has quit IRC03:00
*** shang has joined #openstack-dev03:00
*** rkukura has joined #openstack-dev03:04
*** jgriffith has quit IRC03:07
*** Dr_Who has joined #openstack-dev03:08
*** Dr_Who has quit IRC03:08
*** Dr_Who has joined #openstack-dev03:08
*** sacharya has quit IRC03:14
*** steveb_ has quit IRC03:15
*** blamar has quit IRC03:17
*** danwent has joined #openstack-dev03:17
*** blamar has joined #openstack-dev03:27
*** Aaton_off is now known as Aaton03:27
*** anderstj has quit IRC03:30
*** matwood has quit IRC03:35
*** bencherian has quit IRC03:37
*** anderstj has joined #openstack-dev03:38
*** zhuadl has joined #openstack-dev03:44
*** jgriffith has joined #openstack-dev03:55
*** bencherian has joined #openstack-dev03:56
*** zhuadl has quit IRC03:56
*** anderstj has quit IRC03:56
*** roge has quit IRC04:07
*** anderstj has joined #openstack-dev04:08
*** matwood has joined #openstack-dev04:20
*** smoser has quit IRC04:22
*** nati_uen_ has quit IRC04:27
*** roge has joined #openstack-dev04:39
*** mue_ has quit IRC04:40
*** pmyers has quit IRC04:41
*** pmyers has joined #openstack-dev04:41
*** galstrom has quit IRC04:46
*** anniec has joined #openstack-dev04:49
*** Mandell_ has quit IRC04:51
*** zaitcev has quit IRC04:53
*** matwood_ has joined #openstack-dev04:55
*** matwood has quit IRC04:55
*** matwood_ is now known as matwood04:55
*** zhuadl has joined #openstack-dev04:58
*** Dr_Who has quit IRC05:00
jgriffithvishy: This fixes the tempest failures to change devstack to default to cinder https://review.openstack.org/#/c/10200/05:01
*** anniec has quit IRC05:03
*** garyk has quit IRC05:13
*** anderstj has quit IRC05:14
*** blamar has quit IRC05:21
*** asakhnov has joined #openstack-dev05:23
*** mnaser has quit IRC05:25
*** garyk has joined #openstack-dev05:49
*** koolhead11 has joined #openstack-dev05:59
*** hattwick has quit IRC06:00
*** littleidea has quit IRC06:02
*** dachary has quit IRC06:07
*** dachary1 has joined #openstack-dev06:07
*** eglynn has joined #openstack-dev06:08
amotokizhuadl: hi, i have returned the desk.06:16
*** GheRivero has joined #openstack-dev06:16
*** mindpixel has joined #openstack-dev06:18
*** asakhnov has quit IRC06:18
*** issackel_ has joined #openstack-dev06:19
*** dachary1 has quit IRC06:25
*** amotoki has quit IRC06:26
*** jgriffith has quit IRC06:26
*** amotoki has joined #openstack-dev06:26
zhuadlhi06:36
amotokihi06:37
zhuadlI just read your email.06:37
zhuadlI'm going to work on the user panel for CRD of network/subnet/port.06:38
amotokii user "userpanel" as normal user GUI. Is that right?06:38
amotokis/i user/i use/06:38
zhuadlyes06:39
amotokii have no enough time during daytime today to work Horizon.06:39
zhuadlis network functionality opened to normal user?06:39
amotokiThat is my question.06:40
zhuadlor just admin user?06:40
zhuadlhmm..06:40
zhuadldon't know how the API will response06:41
zhuadlit must have this concern06:41
zhuadlit should not be enforced by GUI.06:42
amotokiIn the API point of view, it is acceptable that a normal user can create a network and a subnet.06:42
*** mattstep has quit IRC06:42
zhuadlhmm.., then it need a good discussion about the scope of permission.06:44
amotokiBut Horizon is a user portal, it may be troublesome that a normal user can create a subnet as he wants.06:44
zhuadlat this time we can leave it opened.06:44
zhuadlagree06:45
*** asakhnov has joined #openstack-dev06:45
amotokiI think there are two point of view: API and GUI (Portal).06:45
zhuadlyes.06:45
amotokiI agreed. we should raise this question to dev ML for more broader discussion.06:45
zhuadlagree06:46
amotokii don't know the detail of the discussion on Folsom Summit. it might have been discussed.06:46
amotokiI can write a mail to ML (perhaps) tonight.06:47
zhuadlI remember there's one page for the summary for this on summit06:47
zhuadlok, thanks06:47
*** mattstep has joined #openstack-dev06:47
*** issackel_ has quit IRC06:48
zhuadlhttp://etherpad.openstack.org/FolsomHorizonQuantumIntegration06:49
amotokiMy plan tonight is that i will check Gabriel's comments on gerrit.06:49
*** roge has quit IRC06:50
zhuadlokay06:51
amotokii will be appreciated we will push the latest code to gerrit and set WIP if you have updates to share.06:51
amotokiOoops, strange english!!06:52
amotokii wil appreciate you .....06:52
zhuadlok06:53
zhuadlno problem:-)06:53
*** mnewby has quit IRC06:54
*** mattstep has quit IRC06:57
*** matwood has quit IRC07:02
*** Mandell has joined #openstack-dev07:05
*** markmcclain has quit IRC07:07
*** reidrac has joined #openstack-dev07:10
*** matwood has joined #openstack-dev07:23
*** danwent has quit IRC07:28
*** Aaton is now known as Aaton_off07:32
*** koolhead11 has quit IRC07:42
*** danwent has joined #openstack-dev07:48
*** danwent has quit IRC07:49
*** markmc has joined #openstack-dev07:59
zykes-jaypipes: Wonder what happens with Nicira nmnow :/08:00
*** derekh has joined #openstack-dev08:01
*** danpb has joined #openstack-dev08:01
*** darraghb has joined #openstack-dev08:05
*** sulochan has joined #openstack-dev08:06
*** bencherian has quit IRC08:08
*** matwood has quit IRC08:18
*** amotoki has quit IRC08:21
Madkisshi folks08:23
Madkisswhat will I have to do to make someone review https://review.openstack.org/#/c/9269/ ?08:23
*** pixelbeat has joined #openstack-dev08:23
*** koolhead17 has joined #openstack-dev08:28
*** jakedahn is now known as jakedahn_zz08:32
*** erikzaadi has joined #openstack-dev08:34
*** steveb_ has joined #openstack-dev08:36
*** andrea_ has joined #openstack-dev08:39
*** hattwick has joined #openstack-dev08:43
*** koolhead11 has joined #openstack-dev08:44
*** apevec has joined #openstack-dev08:46
*** Mandell has quit IRC08:46
*** dansmith has quit IRC08:48
*** dansmith has joined #openstack-dev08:49
*** koolhead11 has quit IRC09:04
GheRiveromorning people09:05
*** steveb_ has quit IRC09:07
*** maploin has joined #openstack-dev09:08
*** maploin has quit IRC09:08
*** maploin has joined #openstack-dev09:08
*** Vek has quit IRC09:09
*** erikzaadi has quit IRC09:12
*** dachary has joined #openstack-dev09:12
*** almaisan-away is now known as al-maisan09:15
*** thovden has joined #openstack-dev09:41
*** rods_ has joined #openstack-dev09:44
*** thovden has quit IRC09:52
*** nunosantos has joined #openstack-dev09:54
*** nunosantos has quit IRC09:54
*** RoboticCheese has quit IRC10:06
*** RoboticCheese has joined #openstack-dev10:16
*** rkukura has quit IRC10:19
*** rkukura has joined #openstack-dev10:20
mikalMadkiss: the list of keystone core developers is on launchpad, you could ping a few of them privately perhaps?10:21
mikalMadkiss: you're going to need to fix the jenkins failures first though10:21
*** thovden has joined #openstack-dev10:22
*** sileht has quit IRC10:25
*** m4xmr has joined #openstack-dev10:25
*** zhuadl has quit IRC10:34
*** sileht has joined #openstack-dev10:38
*** erikzaadi has joined #openstack-dev10:41
*** mindpixel has quit IRC10:47
*** thovden has quit IRC10:51
Madkissmikal: Nothing I can fix, really, I fear.10:56
Madkissthe jenkins build system is simply broken10:56
koolhead17Madkiss: w00t?10:58
*** RoboticCheese has quit IRC11:00
Madkisskoolhead17: waddayamean, w00t?11:00
koolhead17<Madkiss> the jenkins build system is simply broken11:01
*** RoboticCheese1 has joined #openstack-dev11:03
Madkisskoolhead17: at least I think so, yes. setup.py supports a --root parameter, which, if added, would make this failure go away.11:04
koolhead17Madkiss: you think so cannot be correct :)11:05
Madkiss?11:05
koolhead17[16:25] <Madkiss> the jenkins build system is simply broken11:06
Madkisskoolhead17: stop posting what I posted. Speak in whole sentences, please. make your point.11:06
koolhead17Madkiss: i meant i dont see jenkins build system broken11:07
MadkissAnd why so?11:08
koolhead17that way notthing could have passed so far :D11:08
MadkissErr. I didn't say "It's completely broken", I just said that I think it's broken with regards to a scenario like mine.11:08
koolhead17aah cool then :P11:09
koolhead17sorry 4 confusion :D11:09
*** Vek has joined #openstack-dev11:10
Madkissdata_files=[('/usr/lib/ocf/resource.d/openstack', ['ocf/keystone'])], <= that's the line causing trouble. I used data_files in accordance with http://docs.python.org/distutils/setupscript.html11:10
Madkissand the python documentation for setup.py clearly states that the first argument must be the full path to the actual target11:10
Madkissin fact, jenkins would need to call setup.py with the --root parameter to make sure that the installation process doesn't try to "make install" into / of the build system (Which is doomed to fail when the user doing it has no uid=0 permissions)11:11
Madkissmikal: whom would I contact for this?11:11
*** drewlander has joined #openstack-dev11:13
*** salv-orlando has joined #openstack-dev11:14
*** salv-orlando has quit IRC11:15
*** RoboticCheese has joined #openstack-dev11:22
*** markmcclain has joined #openstack-dev11:24
*** apevec has quit IRC11:25
*** zhuadl has joined #openstack-dev11:26
*** thovden has joined #openstack-dev11:27
mikalmikal: I'd ask the people in #openstack-infra -- they maintain jenkins11:28
mikalDoh11:28
mikalMadkiss: I'd ask the people in #openstack-infra -- they maintain jenkins11:28
mikalAnyways, I have to wander off now. Good luck.11:28
Madkissthanks11:29
*** halfss has joined #openstack-dev11:35
*** thovden has quit IRC11:45
*** _val_ has joined #openstack-dev11:45
*** chrisfer has joined #openstack-dev11:51
*** avishay has joined #openstack-dev11:59
markmceglynn, double check my comment in https://review.openstack.org/#/c/10124/ if you wouldn't mind12:01
* eglynn looking .,..12:01
eglynnmarkmc: yep, spot on ... there the second patch with a piece-meal approach12:02
markmceglynn, yeah :)12:03
* markmc wonders what to do with the bugs12:03
markmctarget it them for essex12:03
markmcmark them as a dup of the one your patch was for ?12:03
eglynnmarkmc: yep, dup them all together would be the best approach I think12:03
*** salgado has joined #openstack-dev12:04
markmcok, I'll target for essex12:04
markmcclose the main line as fixed12:04
markmcthen mark as dups of yours12:04
*** galstrom has joined #openstack-dev12:05
eglynnmarkmc: cool, thanks!12:07
*** ayoung-afk is now known as ayoung12:09
*** samkottler has joined #openstack-dev12:12
*** anniec has joined #openstack-dev12:14
*** galstrom has quit IRC12:20
*** dprince has joined #openstack-dev12:29
*** dprince has quit IRC12:30
*** dprince has joined #openstack-dev12:30
garykmarkmc: ping12:32
markmcgaryk, yep?12:32
garykmarkmc: vi common config i would like to read more than one config file.12:33
garykmarkmc: is using project and prog a valid options?12:33
markmcgaryk, can you set the same config options in these config files ?12:33
markmcgaryk, or are they different sets of options?12:33
garykmarkmc: they should be different values12:34
markmcgaryk, hmm, maybe an example would help me? which config files, example values?12:34
garykmakrmc: background - originally in quantum we had a no of files. quantum.conf and linuxbridge.ini.12:35
garykmakrmc: we now want to support rpc configurations and have them defined in quantum.conf, but still continue to work with the linuxbridge.ini file12:35
markmcgaryk, is there any reason to disallow users from setting linuxbridge.ini options in quantum.conf ?12:36
garykmarkmc: no, there is not. it would be best that we use one files but the community feels that each plugin should have their own12:37
markmcgaryk, ok, it sounds like you want a single ConfigOpts instance12:37
markmcgaryk, and it have it parse this stack of files : [/etc/quantum.conf, /etc/quantum/quantum.conf, /etc/quantum/linuxbridge.ini]12:38
markmcgaryk, (or similar)12:38
markmcgaryk, and values set in later files take precedence over values in earlier files12:38
markmchah12:38
garykmarkmc: thanks. problem is that we need to use the global config structure12:39
* markmc suspects that you only want to parse linuxbridge.ini if e.g. plugin=linuxbridge is set in quantum.conf :)12:39
garykmakrmc: something to that effect12:39
garykmarkmc: this time it is is the other way around. the agent also need to parse the quantum.conf file12:40
markmcgaryk, ok, this is the agent, not the server12:40
garykmakrmc: i was thinking that if the quantum conf file had a list of the additional configuration files to parse. would this work?12:40
markmcgaryk, it knows it needs linuxbridge.ini without parsing any config file12:40
markmcgaryk, does the server parse linuxbridge.ini ?12:41
garykmarkmc: yes, but that is only when the plugin is loaded. i was thinking something else. first i'll answer your question and then explain12:41
garykmarkmc: yes, the server parses this too.12:42
markmcgaryk, ok, conceptual issue12:42
markmcgaryk, you can set any config value in [/etc/quantum.conf, /etc/quantum/quantum.conf, /etc/quantum/linuxbridge.ini]12:42
garykmarkmc: i was think that if possible in the quantum.conf file we could add in a list of files to also be parsed. The quantum.conf file will be pared and whilst parsing it will also load the additonal files.12:42
markmcgaryk, "plugin" is a config value12:42
markmcgaryk, it's clearly not valid to set "plugin" in /etc/quantum/linuxbridge.ini12:43
markmcgaryk, well, it's not valid in the sense in having e.g. "plugin=ovs" in /etc/quantum/linuxbridge.ini means the ovs plugin is used12:44
garykmarkmc: maybe i am not explaining myself well. please look at http://fpaste.org/sV7D/. would it possible to add this type of support into cfg12:44
*** apevec has joined #openstack-dev12:45
garykmakrmc: what i am trying to say is that the quantum.conf file will also contain the additional files to be read. This means that one just needs to call cfg.CONF() and all will be done at once12:45
markmcgaryk, it's not currently possible and I don't think it's really what you want12:46
*** littleidea has joined #openstack-dev12:46
markmcgaryk, you're making the user change two config options to change plugin12:46
*** flaviamissi has joined #openstack-dev12:46
*** sacharya has joined #openstack-dev12:46
garykmarkmc: yes, i know that it is not possible. i am not sure it is 2 changes. this can and may be defined in a generic way.12:47
garykmarkmc: another option is to define the plugin in the external file. this means that there will only be one change per plugin.12:48
markmcgaryk, with your suggestion, if the user wants the linuxbridge plugin, it must configure plugin=linuxbridge and config_files=linuxbridge.ini12:48
markmcgaryk, bear with me a second ...12:48
markmcgaryk, this makes sense to me as a starting point: http://paste.openstack.org/raw/19569/12:48
*** littleidea has quit IRC12:49
markmcgaryk, and users/distributors could choose to this instead: http://paste.openstack.org/raw/19570/12:50
markmcgaryk, i.e. separate config options of different plugins using sections12:50
markmcgaryk, and effectively choose a section using the plugin option12:50
garykmarkmc: does http://paste.openstack.org/show/19571/ make sense12:51
*** littleidea has joined #openstack-dev12:51
markmcgaryk, it makes sense, but it implies using multiple ConfigOpts instances12:51
*** littleidea has left #openstack-dev12:51
markmcgaryk, and I don't like that it prevents users from just configuring everything in quantum.conf if they wish12:51
*** GheRivero has quit IRC12:52
garykmakrmc: i agree with you 100%. the problem is that the community does not agree with me on this one. Why would loading more than one file have more than one instance?12:52
*** mattstep has joined #openstack-dev12:53
apevecgaryk, why do you need plugin=linuxbridge in main conf at all? I.e. why not just load all plugins present in plugins.d ?12:54
garykmarkmc: at the moment quantum only supports one plugin12:55
markmcgaryk, who's this community you speak of? you and me too :)12:56
*** rkukura has quit IRC12:56
markmcgaryk, the plugin_ini option implies to me multiple ConfigOpts instances12:56
markmcgaryk, otherwise you e.g. read quantum.conf, see the plugin_ini value, read that and then that changes values from your first read?12:58
markmcgaryk, what if the plugin_ini file also specifies plugin_ini12:58
garykmakrmc: :) then i guess that the chicken is coming before the chicken12:58
* markmc wanders off for lunch12:58
*** mattstep has quit IRC12:58
garykmarkms: hope that i have not spoilt your appetite12:59
*** thovden has joined #openstack-dev12:59
*** sacharya has quit IRC13:00
*** nunosantos has joined #openstack-dev13:02
*** roge has joined #openstack-dev13:02
*** avishay has quit IRC13:04
davidkranzjaypipes: Ping13:04
jaypipesdavidkranz: pong!13:06
davidkranzI have an alternative patch to submit for the password change but I presume the gating environment needs to set change_password_available to false. How does that happen?13:06
jaypipesdavidkranz: git clone git://github.com/openstack-ci/devstack-gate13:07
jaypipesdavidkranz: doh, sorry...13:07
jaypipesdavidkranz: git clone git://github.com/openstack-dev/devstack13:07
jaypipesdavidkranz: the tools/configure_tempest.sh script in there...13:08
davidkranzjaypipes: Is this something I can do or is some sequencing required?13:08
jaypipesdavidkranz: no, you can do it.13:08
davidkranzjaypipes: Any ordering required on the tempest change and this one?13:08
*** lorin1 has joined #openstack-dev13:08
davidkranzjaypipes: I guess I need to do the devstack change first...13:08
jaypipesdavidkranz: yep13:09
davidkranzjaypipes: Thanks. On it.13:09
*** m4xmr has left #openstack-dev13:10
*** edygarcia has joined #openstack-dev13:11
*** jaypipes has quit IRC13:12
*** rpedde_away is now known as rpedde13:13
*** markmcclain has quit IRC13:16
*** thovden has quit IRC13:18
*** wiliam has joined #openstack-dev13:23
*** seats has quit IRC13:26
*** seats has joined #openstack-dev13:26
garykmarkmc: fyi i am taking the liberty of moving everything for the linux bridge to the single configuration file.13:32
*** zaneb has quit IRC13:33
markmcgaryk, ok; I've replied on list to your mail13:33
*** sacharya has joined #openstack-dev13:34
garykmarkmc: thanks!13:35
*** Dr_Who has joined #openstack-dev13:38
*** Dr_Who has joined #openstack-dev13:38
*** jaypipes has joined #openstack-dev13:42
jaypipesdavidkranz: so... you want to write up that proposal to the PPB on API compat changes?13:51
*** primeministerp has joined #openstack-dev13:52
davidkranzjaypipes: I am OK with that. I just don't want to be tilting at windmills if there is a lot of opposition. The way of handling "management" issues like this in OpenStack are not really clear to me.13:53
davidkranzjaypipes: Is the procedure for making such a proposal described somewhere?13:53
jaypipesdavidkranz: I think just draft something up on etherpad, we'll work on it together and then make a wiki page for it to propose at next week's PPB meeting....13:55
davidkranzjaypipes: OK, sounds good.13:55
jaypipesdavidkranz: and I think this is definitely important enough -- way more than tilting at windmills :)13:55
davidkranzjaypipes: :)13:55
*** thovden has joined #openstack-dev13:57
*** zhuadl has quit IRC13:58
*** utlemming has joined #openstack-dev14:01
*** smoser has joined #openstack-dev14:05
*** e1mer has quit IRC14:10
*** GheRivero has joined #openstack-dev14:11
jaypipesdavidkranz, eglynn: so... that change password patch (both devstack and tempest) will need to wait until we figure out why these tests are reliably failing: https://jenkins.openstack.org/job/gate-tempest-devstack-vm/4536/testReport/?14:14
eglynnjaypipes: OK, so those failures look unrelated (to the password change), or?14:16
jaypipeseglynn: yeah, totally unrelated.14:16
eglynncool14:16
jaypipeseglynn: something changed in nova and that has broken one of the tests.14:17
eglynnjaypipes: gotcha14:17
*** edygarcia has quit IRC14:20
*** dtroyer is now known as dtroyer_zzz14:24
*** asakhnov has quit IRC14:25
*** anderstj has joined #openstack-dev14:28
*** matwood has joined #openstack-dev14:32
*** al-maisan is now known as almaisan-away14:33
*** Dr_Who has quit IRC14:36
*** mnewby has joined #openstack-dev14:36
*** Dr_Who has joined #openstack-dev14:36
*** markmcclain has joined #openstack-dev14:37
*** bencherian has joined #openstack-dev14:37
*** markmcclain has left #openstack-dev14:38
*** samkottler has quit IRC14:39
*** ayoung has quit IRC14:40
*** ewindisch_ has joined #openstack-dev14:47
*** PotHix has joined #openstack-dev14:48
*** ewindisch has quit IRC14:49
*** ewindisch_ is now known as ewindisch14:49
*** edygarcia has joined #openstack-dev14:51
*** blamar has joined #openstack-dev14:55
*** blamar has quit IRC14:57
*** koolhead17 has quit IRC14:58
*** blamar has joined #openstack-dev14:58
GheRiverohi people14:59
primeministerpvishy: ping15:01
*** rkukura has joined #openstack-dev15:02
*** datsun180b has joined #openstack-dev15:02
*** reidrac has quit IRC15:03
*** erikzaadi has quit IRC15:04
*** nunosantos has quit IRC15:04
*** reed has quit IRC15:05
*** thovden has quit IRC15:09
dansmithCould a core type person look at/approve this? https://review.openstack.org/#/c/9932/15:11
dansmithit's already ack'd for review15:11
dansmithmarkmc maybe?15:11
*** openstackgerrit has quit IRC15:12
*** Aaton_off has quit IRC15:12
*** letterj has quit IRC15:12
*** rnirmal has joined #openstack-dev15:12
*** Aaton_off has joined #openstack-dev15:12
*** dabo has quit IRC15:12
*** dabo has joined #openstack-dev15:13
*** Aaton_off is now known as Aaton15:13
*** letterj has joined #openstack-dev15:13
*** aryan has quit IRC15:13
*** openstackgerrit has joined #openstack-dev15:13
*** aryan has joined #openstack-dev15:13
*** sstent has quit IRC15:14
*** thovden has joined #openstack-dev15:14
*** sstent has joined #openstack-dev15:14
*** armaan has joined #openstack-dev15:15
*** armaan has left #openstack-dev15:15
*** thovden has quit IRC15:16
*** zaneb has joined #openstack-dev15:16
*** cp16net is now known as cp16net|away15:18
*** anderstj has quit IRC15:19
*** heckj has joined #openstack-dev15:22
*** ywu has joined #openstack-dev15:23
*** thingee has joined #openstack-dev15:25
*** yapeng has joined #openstack-dev15:26
*** mattstep has joined #openstack-dev15:27
*** markmcclain has joined #openstack-dev15:28
*** clarkb has joined #openstack-dev15:28
*** zul has quit IRC15:28
vishymtaylor, jeblair: either of you awake yet?15:28
mtaylorvishy: always15:29
vishymtaylor: can you jump in #openstack-hyper-v15:29
*** halfss has quit IRC15:31
*** salv-orlando has joined #openstack-dev15:31
*** pquerna has quit IRC15:34
*** pquerna has joined #openstack-dev15:34
*** darraghb has quit IRC15:38
*** markmcclain has quit IRC15:40
*** ewindisch has quit IRC15:40
*** ewindisch_ has joined #openstack-dev15:40
*** mnewby has quit IRC15:43
*** zul has joined #openstack-dev15:43
*** anniec has quit IRC15:44
*** armaan has joined #openstack-dev15:47
*** armaan has left #openstack-dev15:47
*** jgriffith has joined #openstack-dev15:47
*** jtran has joined #openstack-dev15:48
jgriffitheglynn: Thanks for the tips on that review15:48
*** gyee has joined #openstack-dev15:51
*** thingee has quit IRC15:52
*** nunosantos has joined #openstack-dev15:53
*** gyee has quit IRC15:54
*** johnpur has joined #openstack-dev15:55
*** ChanServ sets mode: +v johnpur15:55
*** ewindisch_ has quit IRC15:55
*** ewindisch has joined #openstack-dev15:55
*** salgado is now known as salgado-lunch15:59
*** danwent has joined #openstack-dev16:01
*** thovden has joined #openstack-dev16:03
*** AlanClark has joined #openstack-dev16:04
*** davidkranz has quit IRC16:04
*** davidkranz has joined #openstack-dev16:05
*** ewindisch_ has joined #openstack-dev16:07
*** ewindisch has quit IRC16:07
*** ewindisch_ is now known as ewindisch16:07
*** armaan has joined #openstack-dev16:17
vishyjgriffith: how are we looking for the gate?16:19
jgriffithvishy: As soon as this silly tempest change goes through I believe it "should" work16:20
jgriffithvishy: Eveything else is in line queued up16:20
jgriffithvishy: I made the modifications you and bcwaldon recommended and resubmitted, hopefully I can be done with it now16:21
s34njaypipes: ping16:25
*** matiu_ has joined #openstack-dev16:26
*** littleidea has joined #openstack-dev16:28
*** spiffxp has joined #openstack-dev16:30
jtrancan someone delete a draft review for me?   it was created before my openid account merge fix was in place so i no longer have the ability to do it .   https://review.openstack.org/997716:31
s34nblamar: ping16:31
*** edygarcia has quit IRC16:31
blamars34n: whats up?16:31
*** markmc has quit IRC16:31
s34nblamar: Are you the person with the recent commit on the sql backend for keystone?16:31
*** armaan has left #openstack-dev16:31
*** edygarcia has joined #openstack-dev16:32
*** markmc has joined #openstack-dev16:32
*** maploin has quit IRC16:32
blamars34n: it's been months, minimum, since I've committed anything to keystone AFAIK16:32
s34nblamar: you're right. it was 5 months ago16:33
*** bencherian has quit IRC16:33
blamars34n: issues? how can I help?16:33
s34nblamar: I'm just looking for someone familiar with the identity authentication stuff, and you're the most recent committer I can find16:34
s34nalthough it looks like termie is here, too16:34
blamars34n: I can attempt to help with a specific question/concern if you have one :)16:35
*** jog0 has quit IRC16:35
s34nblamar: I'm trying to see where authentication checks to see if a user is enabled before authenticating16:35
jaypipess34n: pong16:35
*** jog0 has joined #openstack-dev16:35
s34njaypipes: thx. I'm trying to understand the keystone authentication code. (See my comment to blamar)16:37
jaypipess34n: one sec, getting link.16:38
*** s0mik has joined #openstack-dev16:38
*** drewlander has quit IRC16:42
*** reed has joined #openstack-dev16:44
*** milner has quit IRC16:45
Vekcan I get eyes on https://review.openstack.org/#/c/9997/ please?  I've got one +2, but I need a second, and no one seems to be looking.16:48
*** markmcclain has joined #openstack-dev16:49
*** armaan has joined #openstack-dev16:50
*** dachary has quit IRC16:51
*** armaan has left #openstack-dev16:51
*** johngarbutt has left #openstack-dev16:51
*** GheRivero has quit IRC16:54
*** thingee has joined #openstack-dev16:54
*** jakedahn_zz is now known as jakedahn16:55
*** s0mik has quit IRC16:55
*** sulochan has quit IRC16:55
*** s0mik has joined #openstack-dev16:57
*** danwent has quit IRC16:57
*** ewindisch has quit IRC17:00
*** thovden has quit IRC17:00
*** nunosantos has quit IRC17:00
*** mattstep has quit IRC17:00
*** jaypipes has quit IRC17:00
*** lorin1 has quit IRC17:00
*** hattwick has quit IRC17:00
*** derekh has quit IRC17:00
*** maoy has quit IRC17:00
*** matiu has quit IRC17:00
*** cmagina has quit IRC17:00
*** s34n has quit IRC17:00
*** jeblair has quit IRC17:00
*** rods has quit IRC17:00
*** jerdfelt has quit IRC17:00
*** cloudfly has quit IRC17:00
*** anniec has joined #openstack-dev17:00
*** anniec_ has joined #openstack-dev17:01
*** epim_ has joined #openstack-dev17:01
*** bencherian has joined #openstack-dev17:02
*** ewindisch has joined #openstack-dev17:02
*** thovden has joined #openstack-dev17:02
*** nunosantos has joined #openstack-dev17:02
*** jaypipes has joined #openstack-dev17:02
*** lorin1 has joined #openstack-dev17:02
*** hattwick has joined #openstack-dev17:02
*** derekh has joined #openstack-dev17:02
*** s34n has joined #openstack-dev17:02
*** maoy has joined #openstack-dev17:02
*** matiu has joined #openstack-dev17:02
*** jeblair has joined #openstack-dev17:02
*** jerdfelt has joined #openstack-dev17:02
*** cloudfly has joined #openstack-dev17:02
*** epim has quit IRC17:02
*** epim_ is now known as epim17:02
*** mattstep has joined #openstack-dev17:03
*** cmagina has joined #openstack-dev17:03
*** derekh has quit IRC17:03
*** samkottler has joined #openstack-dev17:03
*** armaan has joined #openstack-dev17:04
*** nunosantos has quit IRC17:04
*** armaan has left #openstack-dev17:04
*** ron-slc has joined #openstack-dev17:04
*** anniec has quit IRC17:05
*** anniec_ is now known as anniec17:05
*** ChanServ sets mode: +v letterj17:05
Vekcan I get eyes on https://review.openstack.org/#/c/9997/ please?  I've got one +2, but I need a second, and no one seems to be looking.17:07
*** mnewby has joined #openstack-dev17:07
*** rods has joined #openstack-dev17:07
jaypipess34n: I believe you have me stumped. Looks like a bug to me...17:08
jaypipess34n: I can't see anywhere in the sql identity driver's authenticate() method where enabled is filtered on... :(17:08
*** samkottler has quit IRC17:09
jaypipessmoser: pingy17:10
smoserhey.17:10
jaypipessmoser: so I saw you responded to matt's metadata email... but not mine. felt left out :)17:10
smoserwell, i mentioned you.17:10
s34njaypipes: that's what I thought17:11
smoseri acutally had one composed t oyou. and then just ditched it. i was confused that you thought an instance-id could be known be created prior to instance creattion17:11
*** Vek has quit IRC17:11
smosers/be created//17:11
*** Mandell has joined #openstack-dev17:11
s34njaypipes: pam, either17:11
jaypipessmoser: it is with openStack... just not the EC2 instance-id17:11
*** jdurgin has joined #openstack-dev17:12
s34njaypipes: or ldap17:12
jaypipess34n: please do file a bug! :)17:12
jaypipess34n: easy enough test to add ..17:12
s34njaypipes: I don't have an account for filing bugs17:12
jaypipess34n: also easy enough to do ;)17:13
*** Vek has joined #openstack-dev17:15
s34nnot so much. Launchpad doesn't let me register17:15
jaypipeswha?17:15
*** milner has joined #openstack-dev17:15
s34nsomething about an invalid openid transaction17:15
*** apevec has quit IRC17:15
s34nhmm.. a cookies thing, I guess17:16
smoserjaypipes, that doesn't make any sense.17:18
smoseryou can't know a unique id for something before that something exists17:18
smoserbut did you have other comments on that thread?17:18
*** ayoung has joined #openstack-dev17:18
ayoungheckj, mind removing your curse from https://review.openstack.org/#/c/9780/17:21
jaypipessmoser: we generate a server UUID before we create it.17:21
smoserbefore the client requests it?17:22
smoserwhy would anyone want such a thing.17:22
jaypipessmoser: we do this in the POST /servers command, then return it to the client so they can query the status of the server during launch sequence17:22
smoseryeah, ec2 does that too. thats fine and good.17:22
jaypipessmoser: then why on earth would the instance need to conect to the ec2 metadata server in order for it to get that inforamtion?17:22
smoserthe thing that matt was talking about, is that the user can't pass the instance id (i-abcdefg) in as user-data because they don't know it. when they request the instance be lauched (and provide the user-data)17:23
smoserhe used it as an example of information that you couldn't possibly put in user-data because you dont know it.17:23
jaypipessmoser: and what I'm saying is that *nova* DOES know it, and should inject it in.17:24
smoserNO!17:24
smoser"user" data17:24
smosermeta-data, yes. it can put it in there.17:24
jaypipessmoser: oh, I know that.. I was referring to config-drive, not user data17:24
smoserand it definitely can even put that into config-drive.17:24
smoserit has it at config-drive creation time.17:24
jaypipesright, that was the solution I wrote in my email.17:24
smoseryeah, i think you missed what he was asking.17:25
jaypipesI guess I did...17:25
jaypipesstill not sure.17:25
smoser:)17:25
smoserhe was just saying he wanted to have nova add a new token (keystone server) of information into that.17:25
*** Ryan_Lane has joined #openstack-dev17:26
smoser(config drive or metadata service, doesn't really  matter)17:26
smoserthe thing is that that really should be considered an API17:26
smoserand we shou'dlnt just be changing/adding to it it willy-nilly.17:26
smoserthat make sense?17:26
smoser(and i relaly hope to make it such that config-drive is just a read-only rendering of metadata service.... that seems to make most sense to me)17:26
jaypipessmoser: agreed on last point... I think we're talking past each other, though.17:28
smoserwell your solutoin does work for the instance id17:28
smoserand that is something that should be in config drive.17:28
jaypipessmoser: because I think that's precisely what I proposed in my email :)17:28
smoserthen i violently agree with you17:29
jaypipesand I savagely concur.17:29
jaypipes:)17:29
*** anderstj has joined #openstack-dev17:30
smoserthank you, jaypipes17:30
smoserso you want to help with that ?17:30
smoser...17:30
smoseri need some help, and i'd really like to have it in folsom17:31
jaypipessmoser: absolutely.17:31
dansmithjaypipes: savagely? was there a giraffe tendon involved?17:31
jaypipesdansmith: no, it was a femur from a gazelle.17:31
*** garyk has quit IRC17:31
jaypipesdansmith: with which smoser beat me over the head17:32
dansmithrussellb: is the plan to convert the action functions to taking whole instances first, and then rip out the things like _instance_update() as a second phase?17:32
russellbdansmith:17:32
dansmithjaypipes: hmm, now I have to go look and see if Gazelles even *have* femurs17:32
russellbdansmith: yes17:32
dansmithrussellb: oh, I guess the latter is really no-db-compute, and these changes are no-db-messaging, huh?17:32
russellbjust removing the "receive a UUID, look up instance from db" is enough for a first pass17:33
jaypipessmoser: is there either a bug or blueprint for this new approach?17:33
russellbdansmith: yeah17:33
jaypipessmoser: if not, I can work with matt on creating one.17:33
russellbdansmith: though really no-db-messaging is just a subset of no-db-compute17:33
smoserwell, i had planned it in 2 stages.17:33
dansmithrussellb: right17:33
russellbdansmith: the no-db-messaging blueprint was created much earlier17:33
smosera.) get to config-drive-v2 (thats the spec name)17:33
smoserb.) then add just another set of data that would appear.17:33
*** markmcclain has quit IRC17:34
*** ron-slc has quit IRC17:37
*** nati_ueno has joined #openstack-dev17:39
jaypipessmoser: works for me.17:41
*** dubsquared has joined #openstack-dev17:48
s34njaypipes: I filed bug 102856317:49
jaypipess34n: coolio. thx!17:49
s34nbut it says that the bug is Private17:49
*** dubsquared has quit IRC17:49
*** dubsquared has joined #openstack-dev17:49
s34njaypipes: is there someone in particular that should be notified of such a bug report?17:51
heckjayoung: curse lifted17:51
eglynnany stable-maint folks out there?17:51
ayoungheckj, thanks17:51
eglynnhttps://review.openstack.org/9534 is in need of a +1 after more than two weeks on the review queue17:51
jaypipess34n: heckj17:52
heckjs34n: please17:52
s34nheckj: I'm brand new to launchpad. let's see if I can make this work.17:53
s34nheckj: what is your launchpad handle for subscribing you?17:53
heckjs34n: the same as my handle here: heckj17:54
s34ndone (I think)17:54
jaypipess34n: heckj is the project lead... he will get notified on all bugs anyway :)17:54
*** jakedahn is now known as jakedahn_zz17:55
s34noh well. Even more email is always a pleasure, right?17:55
heckjs34n: doesn't hurt17:55
s34nNow I need to fork and fix17:55
*** mnewby_ has joined #openstack-dev17:56
*** mnewby_ has quit IRC17:56
*** adjohn has joined #openstack-dev17:56
*** mnewby has quit IRC17:57
*** lorin1 has quit IRC17:58
*** mnewby has joined #openstack-dev18:03
*** lcheng has joined #openstack-dev18:05
s34nheckj: keystone/identity/core.py seems to contain the interface for an identity driver. That gets implemented by the various backends, right?18:06
heckjs34n: right on.18:07
heckjs34n: if you're interested, we're having a keystone meeting right now in #openstack-meeting, you're welcome to pop in.18:07
s34nheckj: thx18:08
*** salgado-lunch is now known as salgado18:10
jtranping mtaylor18:11
*** anderstj has quit IRC18:12
*** danwent has joined #openstack-dev18:14
*** milner has quit IRC18:18
*** sulochan has joined #openstack-dev18:18
*** salgado has quit IRC18:20
*** jakedahn_zz is now known as jakedahn18:24
Ryan_Laneayoung, termie: I'm not having much luck with getting keystone working with an LDAP backend. I'm sure it must work in some state, and I'm just misconfiguring it or something...18:24
ayoungRyan_Lane, in meeting18:25
Ryan_Laneis it possible to get a quick walkthrough and directory information tree example?18:25
*** salgado has joined #openstack-dev18:25
Ryan_Laneayoung: ok18:25
*** matiu_ has quit IRC18:30
*** matiu_ has joined #openstack-dev18:30
*** mnewby_ has joined #openstack-dev18:31
*** mnewby has quit IRC18:33
*** mnewby_ is now known as mnewby18:33
*** mnewby has quit IRC18:34
mtaylorjtran: pong18:36
mtaylorjtran: any luck?!?18:36
*** sulochan_ has joined #openstack-dev18:37
*** sulochan has quit IRC18:37
*** sulochan_ is now known as sulochan18:37
jtranmtaylor, sorry bout that delay, yes muc luck18:41
jtran py26: commands succeeded18:41
jtran  congratulations :)18:41
jtranhttps://review.openstack.org/#/c/10202/18:41
*** danpb has quit IRC18:42
mtaylorjtran: w00t!18:46
mtaylorjtran: you should just squash you stuff on top of my commit18:46
mtaylorcause it's going to have to go in as one commit18:46
mtaylorjtran: you want me to do that? or you?18:46
*** dtroyer_zzz is now known as dtroyer18:47
jtranmtaylor, yes please go ahead :)18:48
*** mdomsch has joined #openstack-dev18:49
*** dspano has joined #openstack-dev18:50
mdomschLinuxJedi, mtaylor: is there a way to see current Corporate CLAs?  http://wiki.openstack.org/HowToUpdateCorporateCLA notes how to update one, but I need to see the current one for my company18:50
mtaylorjtran: https://review.openstack.org/#/c/909318:51
mtaylormdomsch: not that I know of - but remind me to poke someone about that18:52
*** adjohn has joined #openstack-dev18:52
*** m4xmr has joined #openstack-dev18:52
*** jakedahn is now known as jakedahn_zz18:55
*** asakhnov has joined #openstack-dev18:56
termieRyan_Lane: ayoung is generally the ldap guru18:58
* Ryan_Lane nods18:58
Ryan_Laneok. I'll wait for him, then18:58
*** lorin1 has joined #openstack-dev19:01
*** dprince has quit IRC19:02
ayoungRyan_Lane, OK, I'm all yours19:04
Ryan_Lanegreat.19:04
*** aclark_ has joined #openstack-dev19:04
Ryan_Lanelet me show you my config and dit19:04
*** AlanClark has quit IRC19:04
Ryan_Lanehttp://pastebin.com/7J3S27A5 <— dit19:05
Ryan_Lanehttp://pastebin.com/PX136mqk <— config19:05
Ryan_Lanebased on the dit, there should be a service tenant, with novaadmin member, and the novaadmin member should be in the admin, netadmin and sysadmin roles, correct?19:05
*** mnaser has joined #openstack-dev19:06
ayoungRyan_Lane, what object class are you using for user?19:06
Ryan_Laneinetorgperson19:06
Ryan_LaneI can paste that entry too19:06
ayounginetorgperson is fine19:07
Ryan_Lanehttp://pastebin.com/pPmwD1zE19:07
*** aclark_ has quit IRC19:07
Ryan_LaneI needed to make some modifications to the code19:07
Ryan_LaneI don't use SN the way the code assumes19:07
Ryan_Laneso, I've changed that to cn19:07
Ryan_Lanealso, I'm not using OU for tenants, I'm using cn19:07
Ryan_Laneso, I modified that too19:07
ayoungah..ok,  I have a better approach that I have not submitted yet19:08
ayoungwhich is to specify in config file...but continue19:08
Ryan_Lanewell, I'll be using essex, so I'm stuck with this for now :)19:08
*** milner has joined #openstack-dev19:08
Ryan_Laneso, the way I have things set up is fine, right?19:08
*** aclark_ has joined #openstack-dev19:08
ayoungyou will still need a code change.19:08
*** milner has quit IRC19:08
ayoungRyan_Lane, I think so19:09
*** milner has joined #openstack-dev19:09
ayoungou=projects,dc=wikimedia,dc=org  is where you are putting all of your tenants?19:09
ayoungand cn=service,ou=projects,dc=wikimedia,dc=org  is a tenant?19:10
Ryan_Laneyep19:10
ayoungusers go in ou=people,dc=wikimedia,dc=org19:10
Ryan_Laneyep19:10
ayoungyou actualkly don't need both tree_dn and the explicit ones, but that is not a problem19:11
Ryan_Laneah, ok19:11
ayounguser_tree_dn   trumps  DEFAULT+ tree_dn19:11
Ryan_LaneI see19:11
ayoungRyan_Lane, OK,  so what is the problem that you are having?19:11
Ryan_Lanekeystone --os_username='novaadmin' --os_password="<snip>"  --os_auth_url="http://127.0.0.1:5000/v2.0" --os_tenant_name="service" role-get admin19:11
Ryan_LaneCould not find role: admin (HTTP 404)19:11
Ryan_Lane[24/Jul/2012:19:12:06 +0000] SEARCH RES conn=579 op=1 msgID=2 result=32 message="The entry cn=admin,dc=example,dc=com,ou=Roles specified as the search base does not exist in the Directory Server" nentries=0 etime=019:12
ayoung,dc=example,dc=com19:12
*** mnaser has quit IRC19:12
ayounghmm19:12
ayoungjust for grinds,  try specifying a role subtree explicitly19:12
Ryan_Laneyep, I've tried that19:13
Ryan_Lanelet me show you the result19:13
ayoungtree_dn = dc=wikimedia,dc=org  should override example.com19:13
ayoungdo you have a longer stack trace?19:13
Ryan_Laneno stack trace19:13
ayoungOK19:13
Ryan_Laneit's not an error19:13
ayoungright19:14
ayoungare you running devstack?19:14
Ryan_Laneno19:14
Ryan_Lanethis is essex on ubuntu19:14
Ryan_LaneI need this to work in production19:14
Ryan_Laneubuntu will likely backport a fix, if there are fixes to be made, though, I'd imagine19:14
ayoungOK.  you can run keystone by hand and put in an explicit breakpoint19:14
ayoungyou have to find that file in your python path19:15
ayoungit is19:15
ayoungkeystone/common/ldap/...19:15
ayoungproabalby core.py19:15
* Ryan_Lane nods19:15
Ryan_Laneso: role_tree_dn = ou=projects,dc=wikimedia,dc=org19:15
Ryan_Lane[24/Jul/2012:19:15:44 +0000] SEARCH RES conn=581 op=1 msgID=2 result=32 message="The search base entry 'cn=admin,ou=projects,dc=wikimedia,dc=org' does not exist" nentries=0 etime=019:15
Ryan_Laneit searches for the role explicitly, rather than finding it under the tenant19:16
ayoungthat looks better. but not right19:16
s34nheckj: so I see where it checks for enable now :)19:16
ayoungs34n, you are welcome19:16
Ryan_Lanewell, it's searching in project because I set that as the role dn19:16
heckjs34n: excellent19:16
Ryan_Lanebut it's not searching under the tenant19:16
s34nbut that is in service.py19:16
Ryan_Laneit's completely ignoring the tenant19:16
ayoungRyan_Lane, put in a role entry under the ROles tree19:17
s34nis that the only path for authenication?19:17
ayoungRyan_Lane, it is probably a bug, but...19:17
*** heckj has quit IRC19:17
Ryan_Laneok. let me try that19:17
ayoungfor every role,  there needs to be a cannonical role under there, in order to match how it is done in SQL19:17
Ryan_Laneah. odd19:18
s34nayoung: it seems that the enable check should be built into the identity api, not done in aaddition to it19:18
Ryan_Laneayoung: so… that did work, but it seems it's now a global role19:19
ayoungs34n, yes,  that references the refactoring otf the authenticate call I want to do19:19
Ryan_Laneit only ever searches that one role, and not the role in the tenant19:20
s34nayoung: it looks like heckj took off. Can I pick your mind?19:20
ayoungRyan_Lane, let me look19:20
ayoungs34n, in a minute...let me help Ryan_Lane first, and them I'd be happy to19:20
s34nthx19:21
ayoungRyan_Lane, any idea what the URL is in Keystone that hits?19:22
ayoungyou should be able to see it in the keystone log19:22
Ryan_Laneit isn't logging anything19:22
Ryan_Laneonly stacktraces19:22
ayoungugh19:22
ayoungrun the client with debugging turned on19:23
Ryan_LaneI have verbose = True, and debug = True in the config19:23
markmcvishy, here's a stable/essex patch worth poking at - https://review.openstack.org/#/c/9534/19:23
ayoungmy guess is19:23
ayoung role-get admin  calls19:23
markmcvishy, we've had a bunch of other essex fixes for individual cases of the problem; this fixes it more generally19:23
ayoungwhich calls19:24
*** m4xmr has quit IRC19:24
ayoungRoleConmtroll in the identity API19:24
Ryan_LaneI'm running the daemon with —debug19:24
Ryan_Laneby hand, so I can see the output19:25
Ryan_Laneit isn't printing the urls19:25
ayoungRyan_Lane, just rexect the CLI you have posted above19:25
ayoungkeystone --os_username='novaadmin' --os_password="<snip>"  --os_auth_url="http://127.0.0.1:5000/v2.0" --os_tenant_name="service" role-get admin19:25
ayoungplus --debug19:25
* ayoung thinks19:25
Ryan_Laneah19:25
ayoung self.identity_api.get_role(context, role_id)  is the next step...19:25
Ryan_Lanebah19:26
Ryan_LaneSERVICE_TOKEN is set19:26
ayoungOK,  Ryan_Lane you have been pre-empted19:26
* Ryan_Lane nods19:26
ayoungs34n, what is your question19:26
Ryan_Lane[24/Jul/2012:19:32:06 +0000] SEARCH RES conn=616 op=1 msgID=2 result=32 message="The search base entry 'cn=novaadmin,ou=people,dc=wikimedia,dc=org' does not exist" nentries=0 etime=019:32
Ryan_Laneugh19:32
Ryan_Lanewhy is it looking for cn=?19:32
Ryan_Lanehttp://pastebin.com/wefaR9C819:33
s34nayoung: I'm trying to understand the various entrypoints into keystone authentication19:33
Ryan_LaneI have this set:  user_id_attribute = uid19:33
*** zaitcev has joined #openstack-dev19:34
ayoungRyan_Lane, probably because that is the id field19:34
*** steveb_ has joined #openstack-dev19:34
Ryan_LaneI have that overriden in the config, though19:34
*** edygarcia has quit IRC19:34
ayoungRyan_Lane, for RoleId?19:34
Ryan_Laneroleid?19:34
ayoungone sec19:34
s34nayoung: how much of a refactor are you looking to do?19:35
*** asakhnov has quit IRC19:35
Ryan_Laneso, before it seems that since my environment had a token set, it was authing at the admin, so it was only searching the role in the role dn19:35
Ryan_Lanenow I'm trying to auth as a non-admin19:35
ayounghttps://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/core.py#L59519:35
*** m4xmr has joined #openstack-dev19:35
ayoungs34n, pull all of the common authenitcate calls into the abstract identity provider19:36
*** adjohn has quit IRC19:36
*** bencherian has quit IRC19:36
ayoungso the enabled check will probably go in there as well...I haven;t looked into that code path yet19:36
s34nayoung: yay. I was just looking at that19:36
s34nayoung: I was about to propose something along that same line19:37
ayoungs34n, yeah, that code is screaming to be cleaned up19:37
*** m4xmr has quit IRC19:37
*** edygarcia_ has joined #openstack-dev19:37
ayoungI was tempted to do it in the PKI patch,  but if PKI gets nixed, I still want to do it19:37
ayoungso it wil lbe a separate patch19:37
ayoungRyan_Lane, can you even make that call without isAdmin?  No idea..19:38
s34nayoung: how can I help?19:38
Ryan_Lanewell, the issue is that it isn't authenticating, for some reason19:38
ayoungs34n, well,  if you want to give it a first hack, I'd be happy to code review,  but I have it 1/2 written in my own repo19:39
Ryan_Lanelet me try to track that down, and I'll bug you some more19:39
ayoungRyan_Lane, OK.  I'll be gone soon, as I am speaking tongiht at a meetup19:39
Ryan_Laneok19:39
ayounghave to get pretty and unsmelly, then get over to Kendell square19:39
*** asakhnov has joined #openstack-dev19:39
Ryan_Laneheh19:39
s34nayoung: is your repo on github or anywhere spyable?19:39
ayoungs34n, I'll push it.  I was working on top of the PKI changes...19:40
ayoungs34n, https://github.com/admiyo/keystone/commit/70f2d3f108cb4916575b111fd9dbee082346827619:43
yapengHello, ayoung, have PKI changes been submitted?19:43
ayoungyapeng, yes19:43
*** asakhnov has quit IRC19:43
ayoungyapeng, https://review.openstack.org/#/c/7754/19:43
yapengGreat, thanks.19:44
*** edygarcia_ has quit IRC19:46
s34nayoung: shouldn't there be separate api calls to authenticate a user and to authenticate a user's role?19:48
ayoungs34n, more of a discussion than I can have now...short answer is that authentication is user, password, tenant, so role is essentila19:49
*** edygarcia has joined #openstack-dev19:51
*** ayoung has quit IRC19:53
Ryan_Lane keystone --os_username='novaadmin' --os_password="<snip>"  --os_auth_url="http://127.0.0.1:5000/v2.0" --os_tenant_name="service" discover19:53
Ryan_LaneNo Keystone-compatible endpoint found19:53
Ryan_Laneauth works, and getting tokens work19:53
Ryan_LaneI have no clue how to test if roles are working properly, though19:53
*** mnewby has joined #openstack-dev19:55
Ryan_Laneauth via nova fails19:58
*** cp16net|away is now known as cp16net20:00
*** vanchester has joined #openstack-dev20:01
vanchesterHi. Does s3curl handle redirecting with 'WWW-Authenticate' header used by keystone?20:03
vanchesterWell, question for Amazon maybe, but did someone used it?)20:04
*** ewindisch_ has joined #openstack-dev20:06
*** ewindisch has quit IRC20:08
*** ewindisch_ is now known as ewindisch20:08
*** littleidea has quit IRC20:08
*** s34n has quit IRC20:10
sdagueanyone on nova core want to give this changeset a look over - https://review.openstack.org/#/c/9932/ it would be good to stop having vms in inconsistent states20:10
*** s34n has joined #openstack-dev20:12
*** jerdfelt_ has joined #openstack-dev20:12
*** jerdfelt has quit IRC20:12
*** anderstj has joined #openstack-dev20:13
*** kbringard has quit IRC20:13
*** kbringard has joined #openstack-dev20:13
*** littleidea has joined #openstack-dev20:13
*** Aaton is now known as Aaton_off20:14
*** Aaton_off is now known as Aaton20:14
*** edygarcia has quit IRC20:14
*** dachary has joined #openstack-dev20:16
jtranmtaylor, so i dunno why the discrepancy between my system and the gate  that failed test passes on my system20:18
jtranInstanceTypeTestCase20:18
jtran    test_get_all_instance_types                                 OK  0.0720:18
*** littleidea has quit IRC20:18
*** littleidea has joined #openstack-dev20:18
mtaylorjtran: :(20:20
jtranany ideas how i can dig deeper into the problem?20:20
*** vanchester has quit IRC20:22
*** nati_ueno has quit IRC20:26
*** rnirmal has quit IRC20:30
*** Mandell_ has joined #openstack-dev20:35
*** jakedahn_zz is now known as jakedahn20:38
*** Mandell has quit IRC20:39
*** gyee has joined #openstack-dev20:40
*** adjohn has joined #openstack-dev20:43
*** vanchester has joined #openstack-dev20:45
jaypipesdavidkranz: if you want to have a named etherpad, simple go to etherpad.openstack.org/<NAME> and click Create Etherpad...20:49
davidkranzjaypipes: OK. Let me know what you think of it when you get a chance.20:49
jaypipesdavidkranz: will do!20:50
*** nati_ueno has joined #openstack-dev20:52
*** nati_ueno has quit IRC20:53
*** bencherian has joined #openstack-dev20:54
*** anderstj has quit IRC20:57
jaypipesdavidkranz: https://review.openstack.org/10249 should get the tempest gate working again...21:01
*** edygarcia has joined #openstack-dev21:01
*** maoy has quit IRC21:02
*** gabrielhurley has joined #openstack-dev21:03
davidkranzjaypipes: Reviewing now..21:04
*** Ruetobas has quit IRC21:06
*** heckj has joined #openstack-dev21:07
s34ntermie: ping21:10
*** jgriffith has quit IRC21:10
*** vanchester has quit IRC21:11
*** Ruetobas has joined #openstack-dev21:11
*** jgriffith has joined #openstack-dev21:12
*** lorin1 has quit IRC21:18
*** johnpostlethwait has joined #openstack-dev21:18
*** salgado is now known as salgado-afk21:20
*** steveb_ has quit IRC21:26
*** rkukura has quit IRC21:28
vishymtaylor: any idea what happened? http://wiki.openstack.org/Contributors21:28
russellbvishy: i was just about to ask that ...21:30
russellbhttp://wiki.openstack.org/Contributors?action=recall&rev=107421:30
mtaylorvishy: nope21:31
clarkbthe history doesn't indicate someone went in and deleted all the content21:31
russellbthere appears to be a rev 1075, but not listed in the history21:32
mtaylorRyan_Lane is helping us make a new wiki...21:32
vishyyes i see 107521:32
vishyis there a way to revert to 1075?21:32
*** thovden has quit IRC21:33
vishymikal: ping21:33
mtayloryeah21:34
mtaylordoing21:34
*** aclark_ has quit IRC21:37
*** nati_ueno has joined #openstack-dev21:38
termiehere you go guys: http://www.missionmission.org/2012/07/24/heres-some-video-of-a-kitten-falling-off-a-couch/21:39
mtaylorvishy: fixed21:41
vishymtaylor: thx21:41
*** heckj has quit IRC21:43
*** anderstj has joined #openstack-dev21:46
cloudflytermie that's the best documentation i've seen all day21:47
*** sacharya has quit IRC21:48
mikalvishy: pong21:48
vishymikal: checking on uuid code21:50
vishymikal: your review expired21:50
mikalvishy: yeah, I noticed that21:50
mikalI was working on some other stuff, but I picked that up again last night21:50
clarkbdoes anyone have a horizon change that I can rerun the check tests on?21:50
mikalSo you should see some more progress again soon21:50
Ryan_Lanemtaylor: thinking of that, what's the new host's IP (or hostname)?21:51
Ryan_LaneI'd like to get started on that soon21:51
*** steveb_ has joined #openstack-dev21:51
vishymikal: ok. I'd like to see those last two in by next week if possible21:51
mikalvishy: start of next week or end of next week?21:52
*** sniperd has joined #openstack-dev21:52
vishywell proposed by the start would be ideal so they can be reviewed and merged by the end21:52
mikalHmmm, ok21:52
mikalThe fixed_ip one is more complicated than I thought it would be, but I'll do my best to get them sent out by early next week21:53
mtaylorRyan_Lane: 198.101.201.10121:53
* Ryan_Lane writes that down21:53
*** sniperd_ has quit IRC21:55
*** ohnoimdead has joined #openstack-dev21:58
*** lcheng has quit IRC22:00
*** ohnoimdead has quit IRC22:01
*** kbringard has quit IRC22:03
*** markmc has quit IRC22:03
*** Mandell_ has quit IRC22:04
*** flaviamissi has quit IRC22:05
*** Mandell has joined #openstack-dev22:06
*** dspano has quit IRC22:13
*** littleidea_ has joined #openstack-dev22:14
*** datsun180b has quit IRC22:15
*** matiu_ has quit IRC22:16
*** littleidea has quit IRC22:18
*** littleidea_ is now known as littleidea22:18
*** anniec has quit IRC22:23
jtranmtaylor, i added notes to https://review.openstack.org/#/c/9093/22:25
*** eglynn has quit IRC22:27
*** dubsquared has quit IRC22:28
*** steveb_ has quit IRC22:29
mikalHow do I checkout a nova release branch? I can't see it documented on the wiki?22:29
mikalPerhaps its self evident to everyone but me22:29
*** gyee has quit IRC22:32
vishymikal: as in stable essex?22:33
vishymikal: or one of the tagged branches?22:34
*** spiffxp has quit IRC22:36
*** dachary has quit IRC22:36
*** anniec has joined #openstack-dev22:36
*** dachary has joined #openstack-dev22:36
mtaylorjtran: ah, fascinating. you're running stack.sh first22:37
mtaylorjtran: jtran I may have to just spin up a couple of nodes and try some installs to see what the difference in software being instlled is22:37
mikalvishy: as in stable essex22:42
vishymikal: depending on your version of it22:42
vishy* git22:42
mikalvishy: someone emailed me asked how something worked, and I wanted to browse the code22:42
vishygit checkout stable/essex22:42
mikalvishy: even though that's not listed in "git branch"?22:43
vishygit checkout -b stable/essex origin/stable/essex22:43
vishyis the long form22:43
*** Mandell has quit IRC22:43
vishyvery recent git will figure it out and do it for you22:43
mikalNice22:43
*** Mandell has joined #openstack-dev22:43
mikalvishy: wow, that is so easy! Thanks.22:44
*** samkottler has joined #openstack-dev22:46
*** samkottler is now known as sparklepony22:47
jtranmtaylor, ok good luck.  lemme know if u need any help22:48
*** sparklepony is now known as samkottler22:48
*** spiffxp has joined #openstack-dev22:55
*** anderstj has quit IRC22:55
*** e1mer has joined #openstack-dev23:02
*** anniec has quit IRC23:03
*** anniec_ has joined #openstack-dev23:03
*** anniec has joined #openstack-dev23:06
*** anniec_ has quit IRC23:07
*** dtroyer is now known as dtroyer_zzz23:11
*** thingee has quit IRC23:14
*** thingee has joined #openstack-dev23:15
*** tr3buchet has quit IRC23:16
*** samkottler has quit IRC23:16
*** letterj has left #openstack-dev23:16
*** PotHix has quit IRC23:19
*** rkukura has joined #openstack-dev23:20
*** dtroyer_zzz is now known as dtroyer23:24
*** jakedahn is now known as jakedahn_zz23:51
*** salv-orlando has quit IRC23:55
*** pixelbeat has quit IRC23:59
« Monday, 2012-07-23 Index Wednesday, 2012-07-25 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!