Tuesday, 2013-01-15

*** bencherian has quit IRC00:00
*** gyee has quit IRC00:00
*** mrodden1 has quit IRC00:01
*** devcamcar has joined #openstack-dev00:02
*** jcmartin has quit IRC00:02
*** ondergetekende has joined #openstack-dev00:02
*** sacharya has quit IRC00:02
*** koolhead17 has quit IRC00:03
*** mlavalle has left #openstack-dev00:03
*** imsplitbit has quit IRC00:04
*** edmund has joined #openstack-dev00:05
*** bknudson has quit IRC00:07
cloudchimpazoung:  will contact you later regarding:  I have been testing with Grizzly now and have found that any glance command is throwing an exception that states "Authorization Failed: Unable to communicate with identity service: ...".  The keystone log shows that auth is failing because there is no pem file in /etc/keystone/ssl/certs/.  Is this a known problem?00:08
*** alexpilotti has quit IRC00:08
*** flaper87 has quit IRC00:09
*** devcamcar has quit IRC00:11
*** cloudchimp has quit IRC00:14
*** mrodden has joined #openstack-dev00:19
*** mrodden1 has joined #openstack-dev00:20
*** mrodden has quit IRC00:23
*** bencherian has joined #openstack-dev00:27
*** rpedde is now known as rpedde_away00:28
*** vkmc has quit IRC00:28
*** hemna is now known as hemnafk00:28
*** epim has quit IRC00:29
*** edmund has quit IRC00:30
ayoungclarkb, you need to set up the pki certs ahead of time with keystone-manage00:36
*** vishy is now known as vishy_zz00:36
clarkbty00:36
*** devcamcar has joined #openstack-dev00:38
*** brucer_afk has joined #openstack-dev00:39
*** brucer_afk has quit IRC00:40
*** brucer_afk has joined #openstack-dev00:41
*** brucer has quit IRC00:41
*** brucer_afk has quit IRC00:42
*** sgran has quit IRC00:43
*** devoid has quit IRC00:44
*** ewindisch has quit IRC00:46
*** kpg2012 has quit IRC00:47
*** devcamcar has quit IRC00:49
*** radez is now known as radez_g0n300:51
*** devoid has joined #openstack-dev00:54
*** melwitt has quit IRC00:56
*** AlanClark has joined #openstack-dev00:56
*** jog0_ has joined #openstack-dev00:58
*** roaet-away is now known as roaet00:59
*** enikanorov_ has joined #openstack-dev00:59
*** EmilienM has left #openstack-dev01:01
*** aamir has joined #openstack-dev01:01
*** b3nt_pin has joined #openstack-dev01:01
*** pmyers_ has joined #openstack-dev01:02
openstackgerritA change was merged to openstack/nova: Revert "Populate service list with availability zone"  https://review.openstack.org/1967001:02
openstackgerritA change was merged to openstack/python-keystoneclient: Warning message is not logged for valid token-less request.  https://review.openstack.org/1934901:02
openstackgerritA change was merged to openstack/nova: Revert "Use testr setuptools commands."  https://review.openstack.org/1966901:03
openstackgerritA change was merged to openstack/nova: Fix typos in docstring  https://review.openstack.org/1966101:03
openstackgerritA change was merged to openstack/keystone: Autoload schema before creating FK's (bug 1098174)  https://review.openstack.org/1966701:03
uvirtbotLaunchpad bug 1098174 in keystone "MySQL db_sync issue" [Medium,In progress] https://launchpad.net/bugs/109817401:03
openstackgerritA change was merged to openstack/quantum: Adds support for deploying Quantum on Windows  https://review.openstack.org/1905901:03
*** sacharya has joined #openstack-dev01:03
*** enikanorov has quit IRC01:04
*** beagles has quit IRC01:04
*** jog0 has quit IRC01:04
*** rkukura has quit IRC01:04
*** yuanz has quit IRC01:04
*** syst3mw0rm has quit IRC01:04
*** ogelbukh has quit IRC01:04
*** pmyers has quit IRC01:04
*** dansmith has quit IRC01:04
*** Ruetobas has quit IRC01:04
*** jog0_ is now known as jog001:04
*** kpg2012 has joined #openstack-dev01:04
*** rkukura has joined #openstack-dev01:04
*** yuanz has joined #openstack-dev01:04
*** ogelbukh has joined #openstack-dev01:04
*** sgran has joined #openstack-dev01:05
*** rkukura has quit IRC01:06
*** yuanz has quit IRC01:06
*** ogelbukh has quit IRC01:06
*** alunduil has joined #openstack-dev01:06
*** otherwiseguy has quit IRC01:06
*** rkukura has joined #openstack-dev01:07
*** yuanz has joined #openstack-dev01:07
*** ogelbukh has joined #openstack-dev01:07
*** Ruetobas has joined #openstack-dev01:08
*** lloydde has quit IRC01:14
*** sthaha has joined #openstack-dev01:15
*** devoid has quit IRC01:15
*** devcamcar has joined #openstack-dev01:16
*** brucer has joined #openstack-dev01:16
*** novas0x2a|laptop has quit IRC01:24
*** wu_wenxiang has quit IRC01:25
*** devcamcar has quit IRC01:25
*** wu_wenxiang has joined #openstack-dev01:26
*** kpg2012 has quit IRC01:33
*** novas0x2a|laptop has joined #openstack-dev01:33
*** kpg2012 has joined #openstack-dev01:34
*** jimfehlig has quit IRC01:34
*** colinmcnamara has quit IRC01:37
*** juice has quit IRC01:37
*** dprince has joined #openstack-dev01:38
*** yaguang has joined #openstack-dev01:38
*** zeriouz has quit IRC01:38
*** lloydde has joined #openstack-dev01:39
*** kaganos has quit IRC01:39
*** ctracey` is now known as ctracey01:39
*** danwent has quit IRC01:40
*** b1rkh0ff has quit IRC01:45
*** Mandell has quit IRC01:45
*** olaph has joined #openstack-dev01:47
*** esp1 has left #openstack-dev01:48
*** bswartz has joined #openstack-dev01:49
*** mawagon1 has quit IRC01:49
*** dprince_ has joined #openstack-dev01:49
*** nati_ueno has quit IRC01:49
*** kpg2012 has quit IRC01:49
*** dprince_ has quit IRC01:50
*** dprince_ has joined #openstack-dev01:50
*** dprince has quit IRC01:51
*** devcamcar has joined #openstack-dev01:52
*** genggjh has joined #openstack-dev01:56
*** b1rkh0ff has joined #openstack-dev01:56
*** Thor has joined #openstack-dev01:58
*** crandquist has joined #openstack-dev01:58
*** jimfehlig has joined #openstack-dev01:59
*** gugl has quit IRC01:59
*** kobier has quit IRC02:01
*** devcamcar has quit IRC02:02
*** lloydde has quit IRC02:03
*** AlanClark has quit IRC02:04
*** AlanClark has joined #openstack-dev02:04
*** mawagon1 has joined #openstack-dev02:06
*** novas0x2a|laptop has quit IRC02:07
*** olaph has quit IRC02:08
*** trevor has joined #openstack-dev02:11
*** juice has joined #openstack-dev02:12
*** TonyNIU has joined #openstack-dev02:12
*** trevor is now known as Guest6377702:12
*** Guest63777 has quit IRC02:16
*** shang_ has quit IRC02:17
*** shang has joined #openstack-dev02:18
openstackgerritA change was merged to openstack/nova: Clean up compute API image_create  https://review.openstack.org/1959502:19
*** cloudchimp has joined #openstack-dev02:23
*** cloudchimp has joined #openstack-dev02:25
*** salv-orlando has quit IRC02:26
*** devcamcar has joined #openstack-dev02:30
*** cloudchimp has quit IRC02:31
openstackgerritA change was merged to openstack/nova: Cells: Reduce the create_image call depth for cells  https://review.openstack.org/1523302:32
openstackgerritA change was merged to openstack/nova: Cleanup reboot_instance tests  https://review.openstack.org/1949802:33
*** cloudchimp has joined #openstack-dev02:33
openstackgerritA change was merged to openstack/keystone: add database string field length check  https://review.openstack.org/1928802:33
openstackgerritA change was merged to openstack/python-quantumclient: Migrate from unittest to testtools  https://review.openstack.org/1915802:33
*** thingee is now known as thingee_zz02:34
openstackgerritA change was merged to openstack/quantum: Optimize if/else logic in quantum.api.v2.base.prepare_request_body()  https://review.openstack.org/1880702:36
*** pixelbeat has quit IRC02:37
*** ewindisch has joined #openstack-dev02:39
*** devcamcar has quit IRC02:40
*** adjohn has quit IRC02:43
*** wenjianhn has joined #openstack-dev02:49
*** jimfehlig has quit IRC02:56
*** melwitt has joined #openstack-dev02:58
openstackgerritA change was merged to openstack/quantum: ensure all enums in loadbalancer models have names  https://review.openstack.org/1966203:00
*** dims has joined #openstack-dev03:01
*** shang has quit IRC03:05
*** devcamcar has joined #openstack-dev03:06
*** dprince_ has quit IRC03:06
*** galthaus has quit IRC03:07
*** bencherian has quit IRC03:09
*** colinmcnamara has joined #openstack-dev03:10
*** colinmcnamara1 has joined #openstack-dev03:11
*** colinmcnamara has quit IRC03:11
*** zhuadl has joined #openstack-dev03:15
*** devcamcar has quit IRC03:16
*** jimfehlig has joined #openstack-dev03:19
*** vishy_zz is now known as vishy03:22
*** shang has joined #openstack-dev03:22
*** networkstatic has joined #openstack-dev03:23
*** wu_wenxiang has quit IRC03:24
*** nunosantos has quit IRC03:25
*** melwitt has quit IRC03:26
*** hillyu has joined #openstack-dev03:27
*** stevemar has joined #openstack-dev03:28
ayoungcloudchimp, sorry, just saw the note03:28
*** olaph has joined #openstack-dev03:28
cloudchimpayoung:  no problem.  I was just wondering if you saw the problem I had with glance and keystone today?03:29
ayoungcloudchimp, thought I responded...you need to set up PKI using keystone-manage03:30
ayoung ./bin/keystone-manage pki_setup03:30
ayoungmake sure it is done as the user that you will run Keystone as, not as root.03:30
*** mawagon1 has quit IRC03:30
ayoungah, I responded to clarkb .03:31
cloudchimpThanks.  I'll use that to setup that up.03:31
*** vishy is now known as vishy_zz03:31
*** jergerber has quit IRC03:39
*** devcamcar has joined #openstack-dev03:44
*** brucer has quit IRC03:45
cloudchimpayoung:  thanks for the help.  I'm unblocked there and can move forward with more integration testing.03:45
*** brucer has joined #openstack-dev03:47
*** vishy_zz is now known as vishy03:48
*** cloudchimp has quit IRC03:49
*** adjohn has joined #openstack-dev03:50
*** galthaus has joined #openstack-dev03:52
*** galthaus has quit IRC03:53
*** devcamcar has quit IRC03:54
*** esp has joined #openstack-dev03:58
*** esp has quit IRC03:58
*** benner has quit IRC04:00
*** benner has joined #openstack-dev04:01
*** shang has quit IRC04:01
*** martine_ has quit IRC04:06
*** zeriouz has joined #openstack-dev04:10
*** shang has joined #openstack-dev04:13
*** AlanClark has quit IRC04:14
openstackgerritA change was merged to openstack/nova: Define a hypervisor driver method for getting MAC addresses.  https://review.openstack.org/1944704:14
openstackgerritA change was merged to openstack/nova: Break out a helper function for working with bare metal nodes.  https://review.openstack.org/1967904:15
*** zhuadl has quit IRC04:15
*** vishy is now known as vishy_zz04:18
*** AlanClark has joined #openstack-dev04:20
*** devcamcar has joined #openstack-dev04:22
*** adjohn has quit IRC04:30
*** devcamcar has quit IRC04:32
*** yuanz has quit IRC04:36
*** mawagon1 has joined #openstack-dev04:37
*** openpercept has joined #openstack-dev04:37
*** olaph has quit IRC04:39
*** zhuadl has joined #openstack-dev04:39
*** kobier has joined #openstack-dev04:41
*** kobier has quit IRC04:43
*** aeperezt has quit IRC04:44
*** kobier has joined #openstack-dev04:44
*** crandquist has quit IRC04:45
*** danwent has joined #openstack-dev04:53
*** yuanz has joined #openstack-dev04:55
*** yuanz has quit IRC04:56
*** yuanz has joined #openstack-dev04:56
*** devcamcar has joined #openstack-dev04:58
*** adjohn has joined #openstack-dev04:59
*** vishy_zz is now known as vishy05:02
*** adjohn has quit IRC05:02
*** wenjianhn has quit IRC05:02
*** melwitt has joined #openstack-dev05:03
*** uvg has joined #openstack-dev05:05
uvgReviews required for: https://review.openstack.org/#/c/17592/ and https://review.openstack.org/#/c/19376/ ..Thank you05:05
*** devcamcar has quit IRC05:08
*** jimfehlig has quit IRC05:12
*** kpg2012 has joined #openstack-dev05:14
*** bigmeow has quit IRC05:14
*** avishay has joined #openstack-dev05:15
openstackgerritA change was merged to openstack/nova: Export the MAC addresses of nodes for bare-metal.  https://review.openstack.org/1968205:15
*** bigmeow has joined #openstack-dev05:15
*** wenjianhn has joined #openstack-dev05:19
*** adjohn has joined #openstack-dev05:20
*** adjohn has quit IRC05:20
*** uvg has quit IRC05:21
*** brucer has quit IRC05:22
*** melwitt1 has joined #openstack-dev05:23
*** ewindisch has quit IRC05:23
*** rohitk has joined #openstack-dev05:24
*** kobier has quit IRC05:25
*** melwitt has quit IRC05:25
*** AlanClark has quit IRC05:29
*** sacharya has quit IRC05:30
*** devcamcar has joined #openstack-dev05:36
*** brucer has joined #openstack-dev05:39
*** hattwick has quit IRC05:40
*** garyk has quit IRC05:41
*** olaph has joined #openstack-dev05:43
*** adjohn has joined #openstack-dev05:45
*** devcamcar has quit IRC05:45
*** mawagon1 has quit IRC05:46
*** hattwick has joined #openstack-dev05:48
*** devananda has quit IRC05:53
*** devananda has joined #openstack-dev05:55
*** darjeeling has quit IRC06:06
*** ctracey has quit IRC06:08
*** sthaha has quit IRC06:12
*** devcamcar has joined #openstack-dev06:12
*** navid has joined #openstack-dev06:13
*** sam_wan has joined #openstack-dev06:20
*** colinmcnamara1 has quit IRC06:22
*** koolhead17 has joined #openstack-dev06:22
*** crandquist has joined #openstack-dev06:22
*** crandquist has quit IRC06:23
*** devcamcar has quit IRC06:23
*** flepied has quit IRC06:32
*** vishy is now known as vishy_zz06:34
*** stevemar has quit IRC06:43
*** mnaser has quit IRC06:46
*** mnaser has joined #openstack-dev06:48
*** devcamcar has joined #openstack-dev06:49
*** melwitt1 has quit IRC06:53
*** hattwick has quit IRC06:54
*** afazekas has joined #openstack-dev06:57
*** devcamcar has quit IRC06:59
*** crandquist has joined #openstack-dev06:59
*** garyk has joined #openstack-dev07:00
*** gargya has joined #openstack-dev07:00
*** hattwick has joined #openstack-dev07:00
*** zaneb has joined #openstack-dev07:01
openstackgerritA change was merged to openstack/cinder: Upgrade WebOb to 1.2.3  https://review.openstack.org/1888807:02
*** dims has quit IRC07:04
*** hillyu has quit IRC07:06
*** mrunge has joined #openstack-dev07:09
*** gargya has quit IRC07:09
*** mrunge has quit IRC07:10
*** crandquist has quit IRC07:14
*** Mandell has joined #openstack-dev07:14
*** danwent has quit IRC07:14
*** hattwick has quit IRC07:15
*** crandquist has joined #openstack-dev07:15
*** hillyu has joined #openstack-dev07:18
*** dims has joined #openstack-dev07:18
*** yolanda has joined #openstack-dev07:18
*** andreaf has quit IRC07:20
*** flepied has joined #openstack-dev07:20
*** andreaf has joined #openstack-dev07:21
*** flaper87 has joined #openstack-dev07:21
*** crandquist has quit IRC07:21
*** hattwick has joined #openstack-dev07:21
*** yolanda has quit IRC07:22
*** zeriouz has quit IRC07:25
*** devcamcar has joined #openstack-dev07:27
*** hattwick has quit IRC07:28
*** mrunge has joined #openstack-dev07:29
*** koolhead17 has quit IRC07:35
*** hillyu has quit IRC07:36
*** zeriouz has joined #openstack-dev07:37
*** devcamcar has quit IRC07:37
*** dims has quit IRC07:37
*** yolanda has joined #openstack-dev07:39
*** thingee_zz has quit IRC07:39
*** zodiak has quit IRC07:39
*** EmilienM_ has joined #openstack-dev07:39
*** crandquist has joined #openstack-dev07:45
openstackgerritA change was merged to openstack/oslo-incubator: call() to accept serialize and force_envelope  https://review.openstack.org/1940407:46
*** gargya has joined #openstack-dev07:48
*** dims has joined #openstack-dev07:48
*** adjohn has quit IRC07:50
*** fc__ has joined #openstack-dev07:50
*** avishay has quit IRC07:50
*** EmilienM_ has left #openstack-dev07:51
*** EmilienM has joined #openstack-dev07:52
*** zodiak has joined #openstack-dev07:53
openstackgerritA change was merged to openstack/oslo-incubator: reusable ZmqProxy service initialization  https://review.openstack.org/1945007:53
*** alexxu has joined #openstack-dev07:54
*** rafaduran has joined #openstack-dev07:54
*** pixelbeat has joined #openstack-dev07:56
*** hillyu has joined #openstack-dev07:57
*** zodiak has quit IRC07:59
*** egallen has joined #openstack-dev08:00
*** kpg2012 has quit IRC08:01
*** darjeeling has joined #openstack-dev08:02
*** alexpilotti has joined #openstack-dev08:02
*** devcamcar has joined #openstack-dev08:03
*** dims has quit IRC08:03
*** mmagr has joined #openstack-dev08:06
*** hillyu has quit IRC08:09
*** trapni has joined #openstack-dev08:10
*** ondergetekende has joined #openstack-dev08:11
*** reidrac has joined #openstack-dev08:13
*** devcamcar has quit IRC08:13
garykalexxu: ping08:14
*** afazekas is now known as _afazekas08:14
alexxugaryk, Hi08:15
garykalexxu: hi, how are you? following your comments - can you please look at https://review.openstack.org/#/c/19570/ (the ovs will be updated in a similar fasion).08:15
garykalexxu: thanks08:15
*** christophk has joined #openstack-dev08:15
*** dims has joined #openstack-dev08:16
alexxugaryk, ok, let me spend some time on that.08:16
garykalexxu: thanks. i am on line if you want to discuss things.08:16
openstackgerritA change was merged to openstack/oslo-incubator: Implement importutils.try_import.  https://review.openstack.org/1964608:17
alexxugaryk, by the way, cloud you please have a look Maru's comment at 'https://review.openstack.org/#/c/19271/', I'm not sure the answer :) Thanks!08:17
alexxugaryk, s/cloud/could/08:17
garykalexxu: sure. i'll take a look08:17
*** ondergetekende has quit IRC08:18
alexxugaryk, thanks08:18
*** zaneb has quit IRC08:20
*** zaneb has joined #openstack-dev08:20
*** hillyu has joined #openstack-dev08:20
*** egallen has quit IRC08:21
*** egallen has joined #openstack-dev08:21
*** nmagnezi has joined #openstack-dev08:22
*** darjeeling has quit IRC08:25
*** dims has quit IRC08:26
*** henrynash has joined #openstack-dev08:28
*** ondergetekende has joined #openstack-dev08:29
*** gael has joined #openstack-dev08:29
*** sam_wan has quit IRC08:31
*** gargya has quit IRC08:33
*** openpercept has quit IRC08:35
*** henrynash has quit IRC08:38
*** openpercept has joined #openstack-dev08:38
*** gargya has joined #openstack-dev08:39
*** dims has joined #openstack-dev08:40
*** devcamcar has joined #openstack-dev08:40
*** openpercept has quit IRC08:45
*** jpich has joined #openstack-dev08:49
*** devcamcar has quit IRC08:51
flaper87horizon guys? https://review.openstack.org/#/c/19672/08:51
*** kpavel has quit IRC08:51
*** zaneb has quit IRC08:52
*** jpich has quit IRC08:52
*** zaneb has joined #openstack-dev08:53
*** jpich has joined #openstack-dev08:54
*** gargya has quit IRC09:01
*** k4n0 has joined #openstack-dev09:01
*** andrewbogott is now known as andrewbogott_afk09:01
k4n0for the nova repo, run_tests.sh is failing09:01
k4n0for latest master09:01
*** avishay has joined #openstack-dev09:04
*** mrunge has quit IRC09:05
*** TerryH has joined #openstack-dev09:05
*** kpavel has joined #openstack-dev09:09
*** derekh has joined #openstack-dev09:12
*** derekh has quit IRC09:12
*** derekh has joined #openstack-dev09:12
*** darjeeling has joined #openstack-dev09:17
*** devcamcar has joined #openstack-dev09:18
*** yaguang has quit IRC09:18
*** mrunge has joined #openstack-dev09:22
openstackgerritA change was merged to openstack/oslo-incubator: Add missing parameter to impl_fake notify function.  https://review.openstack.org/1963309:23
openstackgerritA change was merged to openstack/python-quantumclient: Make "quantum help" to show a list of subcommands.  https://review.openstack.org/1929909:23
*** Guest8586 has quit IRC09:24
*** networkstatic has quit IRC09:24
*** jamest has joined #openstack-dev09:26
*** thingee_zz has joined #openstack-dev09:27
*** devcamcar has quit IRC09:28
*** darraghb has joined #openstack-dev09:30
*** alexxu has quit IRC09:31
*** zhuadl_ has joined #openstack-dev09:33
*** zhuadl has quit IRC09:36
*** zhuadl_ is now known as zhuadl09:36
*** Mandell has quit IRC09:38
*** henrynash has joined #openstack-dev09:41
*** hattwick has joined #openstack-dev09:41
*** afazekas has joined #openstack-dev09:44
*** henrynash has quit IRC09:44
*** gatuus has joined #openstack-dev09:46
*** dave_mcn has joined #openstack-dev09:49
*** TerryH has quit IRC09:50
*** openpercept has joined #openstack-dev09:51
*** yolanda has quit IRC09:53
*** devcamcar has joined #openstack-dev09:54
*** openpercept has quit IRC10:05
*** openpercept has joined #openstack-dev10:05
*** devcamcar has quit IRC10:05
*** egallen has quit IRC10:07
*** yjiang5_away is now known as yjiang510:07
*** salv-orlando has joined #openstack-dev10:07
openstackgerritA change was merged to openstack/horizon: Horizon escapes special characters in openrc.sh  https://review.openstack.org/1967210:07
*** olaph has quit IRC10:10
*** Leander_ has joined #openstack-dev10:11
*** Leander_ has left #openstack-dev10:11
*** christophk has quit IRC10:13
*** yolanda has joined #openstack-dev10:14
*** egallen has joined #openstack-dev10:15
*** maurosr has quit IRC10:16
*** gatuus has quit IRC10:17
*** avishay has quit IRC10:22
*** avishay has joined #openstack-dev10:23
*** kpavel has quit IRC10:24
*** reed has joined #openstack-dev10:27
*** zhuadl has quit IRC10:29
*** devcamcar has joined #openstack-dev10:32
rohitkk4n0: are you seeing test_libvirt.py failures?10:38
*** devcamcar has quit IRC10:42
*** zodiak has joined #openstack-dev10:43
*** christophk has joined #openstack-dev10:47
*** TonyNIU has quit IRC10:54
*** maurosr has joined #openstack-dev11:00
*** devcamcar has joined #openstack-dev11:13
*** hillyu has left #openstack-dev11:13
sgrananyone know about custom block and interface attributes for an image?  eg, for booting an appliance VM image that expects sda to be / ?11:15
*** devcamcar has quit IRC11:19
*** odyssey4me has joined #openstack-dev11:20
*** darjeeling has quit IRC11:29
*** salgado has joined #openstack-dev11:31
*** salgado has joined #openstack-dev11:31
*** dims has quit IRC11:40
*** rkukura has quit IRC11:40
*** christophk has quit IRC11:41
*** yjiang5 is now known as yjiang5_away11:42
*** vkmc has joined #openstack-dev11:46
*** devcamcar has joined #openstack-dev11:47
*** almaisan-away is now known as al-maisan11:48
*** trapni has quit IRC11:48
*** devcamcar has quit IRC11:56
*** gerry2 has joined #openstack-dev12:00
gerry2join room #openstack12:01
*** trapni has joined #openstack-dev12:01
*** openpercept has quit IRC12:06
k4n0@rohitk , its all good now, some python packages were missing from my env12:07
*** christophk has joined #openstack-dev12:09
*** henrynash has joined #openstack-dev12:12
*** cdub_ has quit IRC12:16
*** UnnamedUser1942 has joined #openstack-dev12:17
*** UnnamedUser1942 is now known as UnnamedUser482712:18
*** UnnamedUser4827 is now known as UnnamedUser543612:19
*** UnnamedUser5436 is now known as UnnamedUser239112:19
*** Ader has joined #openstack-dev12:19
*** UnnamedUser2391 is now known as name1231212:19
*** name12312 is now known as UnnamedUser460412:19
*** gerry2 is now known as aaa12:20
*** aaa is now known as tm-gerry12:20
*** UnnamedUser4604 has quit IRC12:22
*** EmilienM has left #openstack-dev12:22
*** devcamcar has joined #openstack-dev12:23
*** sandywalsh has quit IRC12:23
*** darjeeling has joined #openstack-dev12:24
*** zeriouz_ has joined #openstack-dev12:25
*** egallen has quit IRC12:31
*** Thor has quit IRC12:31
*** devcamcar has quit IRC12:33
*** Thor has joined #openstack-dev12:35
*** sandywalsh has joined #openstack-dev12:36
*** darjeeli_ has joined #openstack-dev12:38
*** gongysh has quit IRC12:40
*** darjeel__ has joined #openstack-dev12:40
*** darjeeling has quit IRC12:41
*** dims has joined #openstack-dev12:43
*** darjeeli_ has quit IRC12:44
*** christophk has quit IRC12:44
*** markmc has joined #openstack-dev12:46
*** darjeel__ has quit IRC12:50
*** alexpilotti has quit IRC12:54
*** alexpilotti has joined #openstack-dev12:55
*** alexpilotti has quit IRC12:55
*** gargya has joined #openstack-dev12:55
*** kpavel has joined #openstack-dev12:58
*** devcamcar has joined #openstack-dev13:00
*** ayoung has quit IRC13:06
*** zhuadl_ has joined #openstack-dev13:07
*** zhuadl__ has joined #openstack-dev13:09
tm-gerry Hi guys, do you happen to know about any documentation or example on how to build an ec2-like web api request to Openstack? couldnt find much on the documentation :-/ any help would be much appreciated!13:09
*** EmilienM has joined #openstack-dev13:09
*** devcamcar has quit IRC13:10
*** zhuadl has joined #openstack-dev13:11
*** zhuadl_ has quit IRC13:12
*** martine_ has joined #openstack-dev13:12
*** odyssey4me has quit IRC13:13
*** zhuadl_ has joined #openstack-dev13:13
*** zhuadl__ has quit IRC13:14
*** arbrandes has joined #openstack-dev13:14
*** salgado has quit IRC13:15
*** mmagr has quit IRC13:16
*** zhuadl has quit IRC13:16
*** danpb has joined #openstack-dev13:16
*** martine_ has quit IRC13:17
*** martine has joined #openstack-dev13:17
*** zhuadl_ has quit IRC13:18
*** alunduil has quit IRC13:20
*** jaypipes has joined #openstack-dev13:22
*** zhuadl_ has joined #openstack-dev13:25
*** sthaha has joined #openstack-dev13:25
*** egallen has joined #openstack-dev13:25
*** sthaha has quit IRC13:25
*** egallen_ has joined #openstack-dev13:25
*** eharney has joined #openstack-dev13:25
*** eharney has quit IRC13:25
*** eharney has joined #openstack-dev13:25
*** zhuadl__ has joined #openstack-dev13:26
*** zhuadl__ is now known as zhuadl13:26
*** sthaha has joined #openstack-dev13:26
*** eglynn_ is now known as hungry-eglynn13:26
*** christophk has joined #openstack-dev13:26
*** galthaus has joined #openstack-dev13:27
*** galthaus has quit IRC13:27
*** zhuadl__ has joined #openstack-dev13:27
*** mpdehaan has joined #openstack-dev13:28
*** spn_ has quit IRC13:28
*** spn has joined #openstack-dev13:29
*** egallen has quit IRC13:29
*** egallen_ is now known as egallen13:29
*** zhuadl_ has quit IRC13:29
*** salgado has joined #openstack-dev13:29
*** zhuadl has quit IRC13:30
*** TerryH has joined #openstack-dev13:31
*** zhuadl__ has quit IRC13:32
*** mmagr has joined #openstack-dev13:34
*** trevor has joined #openstack-dev13:36
*** trevor is now known as Guest7356113:36
*** devcamcar has joined #openstack-dev13:38
*** Guest73561 is now known as tmishler13:38
*** wenjianhn has left #openstack-dev13:40
*** zhuadl has joined #openstack-dev13:40
zulwhere am i suppose to get the extra modules from?13:43
*** zhuadl_ has joined #openstack-dev13:44
*** mmagr has quit IRC13:44
henrynashdolphm/ayoung: around?13:45
*** devcamcar has quit IRC13:47
*** zhuadl has quit IRC13:48
*** darjeeling has joined #openstack-dev13:48
*** mpdehaan has quit IRC13:49
markmczul, which extra modules? python-extras ?13:49
*** mpdehaan has joined #openstack-dev13:49
zulmarkmc:  nm found it13:49
markmczul, fyi https://review.openstack.org/1964613:49
*** zhuadl has joined #openstack-dev13:50
*** zhuadl_ has quit IRC13:50
*** olaph has joined #openstack-dev13:55
*** zhuadl_ has joined #openstack-dev13:55
*** mmagr has joined #openstack-dev13:57
*** zhuadl has quit IRC13:57
*** EmilienM has quit IRC13:59
*** anteaya has joined #openstack-dev13:59
*** zhuadl has joined #openstack-dev14:00
*** AlanClark has joined #openstack-dev14:01
*** mpdehaan_ has joined #openstack-dev14:01
*** zhuadl_ has quit IRC14:01
*** mpdehaan has quit IRC14:02
*** dprince has joined #openstack-dev14:02
*** zhuadl_ has joined #openstack-dev14:03
*** zhuadl has quit IRC14:05
*** sthaha has quit IRC14:07
*** zhuadl has joined #openstack-dev14:07
*** al-maisan is now known as almaisan-away14:07
*** jergerber has joined #openstack-dev14:08
*** zhuadl_ has quit IRC14:08
*** zhuadl has quit IRC14:12
*** hungry-eglynn is now known as eglynn14:12
*** k4n0 has left #openstack-dev14:12
*** zhuadl has joined #openstack-dev14:14
*** devcamcar has joined #openstack-dev14:14
*** sandywalsh has quit IRC14:14
*** sandywalsh has joined #openstack-dev14:16
*** bknudson has joined #openstack-dev14:17
*** EmilienM has joined #openstack-dev14:17
*** trapni has quit IRC14:19
*** zhuadl has quit IRC14:20
*** bknudson has quit IRC14:22
*** zhuadl has joined #openstack-dev14:22
*** devcamcar has quit IRC14:25
*** primeministerp has joined #openstack-dev14:25
*** woodspa has joined #openstack-dev14:26
*** imsplitbit has joined #openstack-dev14:26
*** alexxu has joined #openstack-dev14:26
*** zhuadl has quit IRC14:27
*** zhuadl has joined #openstack-dev14:27
*** woodspa has quit IRC14:28
*** woodspa has joined #openstack-dev14:29
*** arbrandes has quit IRC14:30
*** ayoung has joined #openstack-dev14:32
*** zhuadl has quit IRC14:32
*** bknudson has joined #openstack-dev14:33
*** alexxu has quit IRC14:34
*** galthaus has joined #openstack-dev14:35
*** galthaus has quit IRC14:35
*** galthaus has joined #openstack-dev14:35
*** rkukura has joined #openstack-dev14:35
*** primeministerp has quit IRC14:35
*** bencherian has joined #openstack-dev14:41
*** k3rn has joined #openstack-dev14:42
k3rnhi!14:42
*** AlanClark has quit IRC14:45
*** vkmc has quit IRC14:46
k3rnhow could I disable ebtable rules for a specific instance/image?14:46
*** vkmc has joined #openstack-dev14:46
*** roaet is now known as roaet-away14:48
*** devcamcar has joined #openstack-dev14:51
*** mtreinish has joined #openstack-dev14:51
*** edmund has joined #openstack-dev14:54
*** ewindisch has joined #openstack-dev14:56
*** radez_g0n3 is now known as radez14:56
*** TerryH has quit IRC14:56
*** bencherian has quit IRC14:57
*** alexpilotti has joined #openstack-dev14:59
*** danpb has quit IRC15:00
*** jimfehlig has joined #openstack-dev15:00
*** zhuadl has joined #openstack-dev15:01
*** cloudchimp has joined #openstack-dev15:01
*** devcamcar has quit IRC15:02
*** christophk has quit IRC15:03
*** dprince has quit IRC15:04
*** christophk has joined #openstack-dev15:06
*** zhuadl has quit IRC15:06
mjforkjog0: I updated my patch: https://review.openstack.org/#/c/19668/ (and fixed a misspelling: https://review.openstack.org/#/c/19697/)15:06
*** danpb has joined #openstack-dev15:09
*** rpedde_away is now known as rpedde15:10
*** rkukura has quit IRC15:10
*** jcru has joined #openstack-dev15:11
*** EmilienM has quit IRC15:11
*** navid has quit IRC15:11
*** dprince has joined #openstack-dev15:13
*** roaet-away is now known as roaet15:14
*** maploin has joined #openstack-dev15:14
*** maploin has quit IRC15:14
*** maploin has joined #openstack-dev15:14
*** salgado is now known as salgado-lunch15:15
*** winston-d has joined #openstack-dev15:17
*** adepti has quit IRC15:17
*** markmcclain has joined #openstack-dev15:18
*** adepti37 has joined #openstack-dev15:18
*** sacharya has joined #openstack-dev15:19
maploinwhy doesn't swift use any of the openstack-common modules?15:21
*** rkukura has joined #openstack-dev15:23
*** cp16net|away is now known as cp16net15:26
*** bencherian has joined #openstack-dev15:26
*** devcamcar has joined #openstack-dev15:29
*** AnilV4 has quit IRC15:30
*** annegentle_itsme has joined #openstack-dev15:31
*** zyluo has joined #openstack-dev15:31
*** egallen has quit IRC15:31
*** stevemar has joined #openstack-dev15:32
*** sacharya has quit IRC15:32
*** aeperezt has joined #openstack-dev15:33
*** mpdehaan_ has quit IRC15:35
*** mikal has quit IRC15:36
*** CrackerJackMack has quit IRC15:36
*** mikal has joined #openstack-dev15:37
*** mpdehaan has joined #openstack-dev15:38
*** devcamcar has quit IRC15:38
*** AnilV4 has joined #openstack-dev15:38
*** mindpixel has joined #openstack-dev15:40
*** CrackerJackMack has joined #openstack-dev15:42
*** kbringard has joined #openstack-dev15:44
*** jcru is now known as jcru|away15:45
*** pabelanger has joined #openstack-dev15:47
*** zeriouz_ has quit IRC15:49
*** jcru|away is now known as jcru15:51
*** nunosantos has joined #openstack-dev15:52
*** gargya_ has joined #openstack-dev15:53
*** gargya has quit IRC15:55
*** boden has joined #openstack-dev15:56
*** datsun180b has joined #openstack-dev15:56
*** otherwiseguy has joined #openstack-dev15:57
*** gargya_ has quit IRC15:59
davidkranzayoung: Can you point me at the currently most authoritative document that describes the plan for keystone domains and related topics?15:59
ayoungdavidkranz, sure, although some of it is happening as we speak...lets start with15:59
*** halj has joined #openstack-dev16:00
*** amotoki has quit IRC16:00
ayoungdavidkranz, https://blueprints.launchpad.net/keystone/+spec/domain-scoping16:00
ayounghttps://blueprints.launchpad.net/keystone/+spec/domain-name-spaces16:00
zyluomarkmcclain, I responded to you comments16:00
ayounghttps://review.openstack.org/#/c/18770/16:00
ayounghttps://review.openstack.org/#/c/18805/16:00
zyluomarkmcclain, could you take a look at https://review.openstack.org/#/c/18568/ also? Thanks16:01
*** srini_g_ has joined #openstack-dev16:01
*** spn has quit IRC16:01
*** srini_g has quit IRC16:01
ayoungdavidkranz, the driver behind that is the newly Knighted Sir henrynash.16:01
*** reidrac has quit IRC16:01
davidkranzayoung: OK, thanks :)16:01
*** spn has joined #openstack-dev16:01
markmcclainzyluo: I'll take a look16:02
*** utlemming has joined #openstack-dev16:02
henrynashdavidkranz: Hi….just on a call right now, should be free in 30 mins of so if you have questions16:03
davidkranzhenrynash: Ok. I need to do some reading first. I am interested both as a keystone user and thinking about when the right time to start adding some domani and/or v3 stuff to the tempest identity tests.16:04
henrynashdavidkranz: ok, cool16:05
*** devcamcar has joined #openstack-dev16:06
*** TerryH has joined #openstack-dev16:06
*** mnewby has quit IRC16:06
*** spn has quit IRC16:07
*** spn has joined #openstack-dev16:07
*** vkmc has quit IRC16:07
*** sacharya has joined #openstack-dev16:09
*** devoid has joined #openstack-dev16:10
*** salgado-lunch is now known as salgado16:14
*** devcamcar has quit IRC16:15
*** flaper87 has quit IRC16:15
*** dprince has quit IRC16:16
*** maploin has quit IRC16:17
*** markwash has quit IRC16:18
*** Tross has quit IRC16:20
*** hemna has joined #openstack-dev16:20
*** eharney has quit IRC16:21
*** hemna_ has quit IRC16:23
*** avishay has quit IRC16:24
*** trapni has joined #openstack-dev16:26
*** danwent has joined #openstack-dev16:26
*** dprince has joined #openstack-dev16:27
*** cdub_ has joined #openstack-dev16:28
*** adjohn has joined #openstack-dev16:28
*** dolphm has joined #openstack-dev16:29
*** dolphm has quit IRC16:29
*** dolphm has joined #openstack-dev16:29
*** dolphm has quit IRC16:30
*** dolphm has joined #openstack-dev16:30
*** otherwiseguy has quit IRC16:33
*** networkstatic has joined #openstack-dev16:34
eglynnbcwaldon: got a sec for super dumb glance question?16:34
*** christophk has quit IRC16:35
eglynnbcwaldon: say we have an OVF manifest referencing multiple disks, e.g. a couple .vmdk files16:35
eglynnbcwaldon: is the recommended approach to tar up the .ovf and .vmdk files into a single .ova?16:35
eglynnbcwaldon: or is the only way to merge the .vmdk files and register only that with glance?16:36
*** networkstatic has quit IRC16:36
*** hemna_ has joined #openstack-dev16:37
*** markmc has quit IRC16:39
*** vishy_zz is now known as vishy16:41
*** devcamcar has joined #openstack-dev16:43
zyluosalv-orlando, leave comment to the patch if any. I'll look at them tomorrow16:45
*** zyluo has quit IRC16:45
salv-orlandozyluo: sure16:45
*** tmishler has quit IRC16:45
*** kpavel has quit IRC16:47
*** afazekas has quit IRC16:47
*** kpavel has joined #openstack-dev16:48
*** koolhead17 has joined #openstack-dev16:49
openstackgerritA change was merged to openstack/cinder: Enhance wsgi to listen on ipv6 address  https://review.openstack.org/1939916:50
*** colinmcnamara has joined #openstack-dev16:51
*** joesavak has joined #openstack-dev16:51
*** devcamcar has quit IRC16:52
*** Tross has joined #openstack-dev16:52
*** srini_g has joined #openstack-dev16:53
openstackgerritA change was merged to openstack/cinder: Support for SSL in wsgi.Server  https://review.openstack.org/1956016:53
*** yidclare has quit IRC16:54
*** john5223 has joined #openstack-dev16:55
*** Gordonz_ has joined #openstack-dev16:55
*** mindpixel has quit IRC16:55
*** vishy is now known as vishy_zz16:56
*** esp1 has joined #openstack-dev16:56
*** thingee_zz is now known as thingee16:57
*** gary has joined #openstack-dev16:58
*** halj has quit IRC16:58
openstackgerritA change was merged to openstack/cinder: Update SolidFire Volume driver  https://review.openstack.org/1879016:58
*** gary has quit IRC16:58
*** yidclare has joined #openstack-dev16:59
*** APMelton12 has left #openstack-dev16:59
*** Gordonz has quit IRC16:59
*** Gordonz_ has quit IRC17:01
*** david-lyle has quit IRC17:01
*** Gordonz has joined #openstack-dev17:02
*** mindpixel has joined #openstack-dev17:02
*** mindpixel has quit IRC17:04
*** srini_g_ has quit IRC17:05
*** eharney has joined #openstack-dev17:06
*** gugl has joined #openstack-dev17:06
*** openstackgerrit has quit IRC17:07
*** openstackgerrit has joined #openstack-dev17:08
jaypipesayoung: morning. Any reason why this might be happening? http://paste.openstack.org/show/29472/17:10
*** ijw has joined #openstack-dev17:10
jaypipesayoung: it is (as you can see) in a PKI environment, issuing calls to the Admin Keystone API endpoint...17:10
jaypipesayoung: how is the primary key for the token determined?17:11
*** christophk has joined #openstack-dev17:11
*** jcmartin has joined #openstack-dev17:11
ayoungjaypipes, In meeting17:12
ayoungjaypipes, I'll greab you shortly, OK?17:12
jaypipesayoung: no probs. thx!17:12
*** mdomsch has joined #openstack-dev17:12
*** gyee has joined #openstack-dev17:12
*** nijaba_ is now known as nijaba17:13
*** nijaba has joined #openstack-dev17:13
k3rnhi17:14
k3rnIs it possible to disable the ebtables rules for a specific instance/image?17:15
*** boden has quit IRC17:16
*** rohitk has quit IRC17:16
*** mmagr has quit IRC17:17
*** otherwiseguy has joined #openstack-dev17:18
*** cp16net is now known as cp16net|away17:22
*** devcamcar has joined #openstack-dev17:22
*** Mandell has joined #openstack-dev17:25
*** boden has joined #openstack-dev17:26
*** rafaduran has quit IRC17:27
*** yidclare has quit IRC17:27
*** kaganos has joined #openstack-dev17:28
*** devcamcar has quit IRC17:29
*** genggjh has quit IRC17:30
*** yidclare has joined #openstack-dev17:31
*** epim has joined #openstack-dev17:32
ayoungdavidkranz, are there specific tests for Keystone in Tempest, or is it assumed that it gets tested by the other components?17:32
*** egallen has joined #openstack-dev17:34
*** nmagnezi has quit IRC17:36
jaypipesayoung: yes, there are many....17:37
jaypipesayoung: it tests the full API with a SQL backend for identity, tokens, service_catalog.17:37
jaypipesayoung: tempest/tests/identity/17:37
jaypipesayoung: https://github.com/openstack/tempest/tree/master/tempest/tests/identity/admin17:38
ayoungjaypipes, if we wanted to run those against the LDAP back end, I assume we would need LDAP setup from devstack first, right?17:39
jaypipesayoung: yes.17:40
jaypipesayoung: I'm looking into whether this is a Folsom thing..17:43
*** mrodden1 has quit IRC17:43
*** devoid has quit IRC17:44
ayoungjaypipes, It should be agnostic of the distribution.  The LDAP schema for a Grizzly setup should work for Folsom17:44
ayoungThere might be subtrees (example is what we are doing for Groups right now) that won't be used in Folsom17:45
jaypipesayoung: https://github.com/openstack/keystone/blob/stable/folsom/keystone/service.py#L44517:46
jaypipesayoung: ^^ that block of code does not seem to be working correctly... since the call to create_token throws an IntegrityError, but line 449 never seems to be run...17:47
*** TerryH has quit IRC17:47
jaypipesayoung: see http://paste.openstack.org/show/29472/17:47
ayoungjaypipes, ok,  my meeting is over, you have my full attention for 13 minutes17:47
*** dolphm has quit IRC17:47
jaypipeslol17:47
ayoungjaypipes, my guess is that the blank value is going into a field that is unquie foreign key17:48
*** winston-d has quit IRC17:48
ayounghence the SQL error17:48
*** alexpilotti has quit IRC17:49
ayoungI saw that before.17:49
*** jpich has quit IRC17:49
*** nati_ueno has joined #openstack-dev17:49
*** dolphm has joined #openstack-dev17:49
ayoungtest_role_create_blank_name  should be moved into our unit tests, probably17:49
ayoungIt is also possible that the '' is messing up some Python string substitution in building the query17:50
ayoungBut a blank role name should not be allowed.  We can catch that in the controller level17:51
*** hub_cap has joined #openstack-dev17:52
jaypipesayoung:  what is weird is if I run nosetests -svx tempest/tests/identity/admin/ multiple times, the ERROR occurs in different tests... it's almost like there is some caching or delayed deletion of the token that doesn't seem to be working.17:53
*** nati_ueno has quit IRC17:53
jaypipesayoung:  the blank role IS caught... it's the POST /tokens call for the user making the call to POST /roles to authenticate that is the problem.17:53
*** nati_ueno has joined #openstack-dev17:54
*** devcamcar has joined #openstack-dev17:56
jaypipesayoung: and all I see in the keystone log is this: http://paste.openstack.org/show/29475/17:56
*** dims has quit IRC17:57
jaypipesayoung: got it!17:57
*** topol has joined #openstack-dev17:57
*** gael has quit IRC17:57
*** imsplitbit has quit IRC17:57
jaypipesayoung: see https://github.com/openstack/keystone/blob/stable/folsom/keystone/service.py#L44517:58
jaypipesayoung: note that line 452 re-raises the original IntegrityError...17:58
ayoungjaypipes, is there a bug for this?  If not, open one and assign to me.  I'll look at it later today17:59
ayoungIt would be worthwhile to see what Tempest tests should become Keystone unit tests17:59
openstackgerritA change was merged to openstack/quantum: Adding multi switch support to the Cisco Nexus plugin  https://review.openstack.org/1850817:59
jaypipesayoung: so what is happening is that the token is in the table when line 438 runs, which raise IntegrityError from MySQL and causes the line 445 block to run, and then the token is deleted from the table before the call to get_token occurs on line 449, which raises NotFound, but then we re-raise the original IntegrityError :)17:59
openstackgerritA change was merged to openstack/nova: Correct misspelling of fake_service_get_all  https://review.openstack.org/1969717:59
*** spzala has joined #openstack-dev18:00
ayoungjaypipes, cool.  That should be easy enough to address18:00
jaypipesayoung: perhaps a loopback to create_token if the NotFound occurs...18:01
jaypipesayoung: I will file a bug.18:01
*** mrodden has joined #openstack-dev18:03
*** colinmcnamara has quit IRC18:04
openstackgerritA change was merged to openstack/oslo-incubator: Don't include versioninfo in manifest.  https://review.openstack.org/1961418:04
*** salgado has quit IRC18:05
openstackgerritA change was merged to openstack/oslo-incubator: Fix zmq socket.close() with eventlet 0.9.17  https://review.openstack.org/1958018:05
*** devcamcar has quit IRC18:06
*** lloydde has joined #openstack-dev18:07
*** egallen_ has joined #openstack-dev18:08
*** alop has joined #openstack-dev18:09
*** dims has joined #openstack-dev18:09
*** egallen has quit IRC18:10
*** egallen_ is now known as egallen18:10
*** markwash has joined #openstack-dev18:10
*** nachi_ has joined #openstack-dev18:12
*** nachi has joined #openstack-dev18:12
*** nachi has quit IRC18:12
*** ctracey|away has joined #openstack-dev18:12
*** ctracey|away is now known as ctracey18:12
*** nachi has joined #openstack-dev18:13
*** cp16net|away is now known as cp16net18:13
*** andrewbogott_afk is now known as andrewbogott18:14
*** nachi has quit IRC18:16
*** jaustinpage|want has joined #openstack-dev18:16
*** jaustinpage|want has quit IRC18:18
*** jaustinpage|want has joined #openstack-dev18:19
*** salgado has joined #openstack-dev18:19
*** salgado has quit IRC18:19
*** salgado has joined #openstack-dev18:19
*** burris has quit IRC18:23
swaT30trying to run the quantum openvswitch plugin from trunk18:23
swaT30getting some "Unable to execute errors"18:23
swaT30http://paste.openstack.org/show/29478/18:24
swaT30any ideas?18:24
*** b1rkh0ff has quit IRC18:25
*** vkmc has joined #openstack-dev18:27
*** jaustinpage|want is now known as jaustinpag18:28
*** Apsu` has left #openstack-dev18:29
*** Nachi has joined #openstack-dev18:31
*** devcamcar has joined #openstack-dev18:33
*** burris has joined #openstack-dev18:34
*** nati_ueno has quit IRC18:34
*** alexpilotti has joined #openstack-dev18:37
*** b1rkh0ff has joined #openstack-dev18:38
*** garyk has quit IRC18:38
*** burris has quit IRC18:40
*** devcamcar has quit IRC18:43
*** Nachi has quit IRC18:44
*** nati_ueno has joined #openstack-dev18:44
*** vishy_zz is now known as vishy18:46
*** eharney has quit IRC18:48
*** mdomsch has quit IRC18:50
*** Ader has quit IRC18:56
*** juice has quit IRC18:56
*** tm-gerry has quit IRC18:57
lifelessit would be lovely if http://pypi.python.org/pypi/python-quantumclient/2.1 had docs on it18:57
*** sulrich has joined #openstack-dev18:58
*** joesavak has quit IRC18:58
*** colinmcnamara has joined #openstack-dev18:59
*** colinmcnamara has quit IRC18:59
*** imsplitbit has joined #openstack-dev19:00
*** bearovercloud has joined #openstack-dev19:02
*** colinmcnamara has joined #openstack-dev19:02
*** brich1 has joined #openstack-dev19:03
henrynashdolph, gyee"19:04
henrynash?19:04
gyeeyeah19:04
henrynashahh, thought I'd lost everyone...19:04
gyeeso are we cool with the current auth plugin proposal?19:04
dolphmwas updating meeting page19:04
gyeehenrynash, it was a long meeting, restroom break first :)19:05
ayounggyee, in your blueprint, please enumerate the factors that would be used to select the authentication mechanism for a given request.  Cool?19:05
jk0n19:05
henrynashgyee: :-)19:05
dolphmgyee: haha +119:05
gyee{"auth"{"auth_mechanism"{<auth payload>19:05
gyee"auth_mechanism" -> plugin19:06
ayounggyee, the user should not specify, nor know anything about the mechanisms used.19:06
ayoungcorrection19:06
gyeeayoung, that's up to the deployment19:06
ayoungthey can specify the mechanism, but not the identity provider19:06
*** yidclare has quit IRC19:06
dolphmgyee: the only problem i see with that implementation is that you're determining which auth plugin to use by process of elimination (ignoring attributes you know aren't plugins because they're part of the spec, like 'projects' and 'domains'), which could leave more than 1 match19:07
gyeefor example, specific admin can force a specific mechanism19:07
ayounggyee, so they can say LDAP, but not identify the LDAP server.19:07
gyeeadmin UI19:07
gyeedolphm, not sure what you mean, auth_mechanism is unique19:08
henrynashayoung: so what about an enterprise being hosted in a domain who wants their own LDAP to do the auth?19:08
ayoungKeystone gets to control the list of identity providers, but probably shouldn't advertise them.  Thus, it ight be athat we say "kerberos is supported" but it won;t be supported for all users.  I say we divide this based on domains19:08
dolphmgyee: {'auth': {'credentials': {**anything that goes here is blindly passed to every auth plugin until one returns successfully**}, 'projects': [{'id': '123abc'}]}19:08
gyeeLDAP server is part of ldap auth plugin config19:08
ayounghenrynash, good example19:08
gyeeuser doesn't care19:08
dolphmgyee: so then you just do... for plugin in auth_plugins: plugin.authenticate(**auth['credentials'])19:09
ayounghenrynash, Keystone would be configured with to LDAP servers.  One for the cloud provider, and one for the enterprise customer19:09
gyeedolphm, no19:09
gyeeplugins['mechanism'].authenticate()19:09
henrynashayoung: +119:09
ayoungthe enterprise customer's user set would be authed against their LDAP server, based on the Enterprises domain19:09
gyeeayoung, domain can be part of the payload19:10
gyeeits up to the LDAP plug in to map domain to a tree or server or whatever19:10
ayounggyee, so domain is the IdP,  and the user can specify the mechanism.  That works fine by me.19:10
ayoungBUt...19:10
ayoungI really only care about the backend part of this19:10
ayoungEventlet is never going to do Kerberos or X509 Client certs19:10
gyeeayoung, the whole point of having plugin is that plugin can determine *how* to authenticate the user base on the information provided in the auth payload19:11
*** devcamcar has joined #openstack-dev19:11
ayounggyee, I understand. I just don't think that it is worth the development effort.   Now, I might make an exception for SAML or Oauth2, provided I took the time to actually read and understand them.19:12
gyeetake a look at apache mod_ldap19:12
gyeeit can do a search on the user dn using LDAP filter19:13
*** yidclare has joined #openstack-dev19:13
gyeedoesn't matter which domain19:13
gyeewith auth plugin, we can effectively wrap any protocal in the payload19:14
*** juice has joined #openstack-dev19:14
openstackgerritA change was merged to openstack/swift: swob refactors needed for sos  https://review.openstack.org/1966319:14
openstackgerritA change was merged to openstack/nova: Renames the new os-networks extension  https://review.openstack.org/1951619:14
ayounggyee, so ldap is a bad example.  It is not a secure auth mechansim (simple bind with a shared password)19:14
openstackgerritA change was merged to openstack/nova: Make sure reboot_instance uses updated instance  https://review.openstack.org/1949919:14
ayoungthe real use cases is for multi-factor19:14
ayoungand for different LDAP servers19:14
openstackgerritA change was merged to openstack/nova: Move network call from compute API to the manager  https://review.openstack.org/1950019:14
Ryan_Laneayoung: it should be secure. ldaps or ldap+start_tls19:14
openstackgerritA change was merged to openstack/nova: Populate service list with availability zone and correct unit test  https://review.openstack.org/1966819:14
Ryan_Laneyou guys are setting off my ping mechanism like crazy in here :D19:14
ayoungRyan_Lane, bah.  Humbug19:15
gyeeayoung, or run Keystone over 2-way SSL19:15
openstackgerritA change was merged to openstack/nova: More HostAPI() cleanup for cells.  https://review.openstack.org/1960219:15
ayounggyee, yes19:15
openstackgerritA change was merged to openstack/python-novaclient: Adds tenant network support to the client  https://review.openstack.org/1898619:15
Ryan_Lanedoes keystone still not support ldaps or ldap+start_tls?19:15
openstackgerritA change was merged to openstack/nova: Cells: Commit resize quota reservations immediately  https://review.openstack.org/1523219:15
zykes-anyone giving keystone love for horizon ?19:15
ayoungRyan_Lane, irrelevant19:15
openstackgerritA change was merged to openstack/glance: Use testtools for unittest base class.  https://review.openstack.org/1862419:15
* Ryan_Lane shrugs19:15
ayoungRyan_Lane, with out two way auth19:15
ayoungit is susceptapickle to man in the middle attacks19:16
* ayoung can't spell19:16
openstackgerritA change was merged to openstack/python-novaclient: Move from untitest2 to testtools.  https://review.openstack.org/1862919:16
Ryan_Laneummm19:16
Ryan_Laneit definitely is not19:16
Ryan_Laneit's PKI19:16
ayoungRyan_Lane, that is only between Ketystone and LDAP19:16
gyeehow LDAP plugin deals with LDAP servers is not a concern for Keystone19:16
ayounguser to keystone is over HTTP19:16
ayoungand that needs SSL to secure19:16
ayoungwith either client certs or Kerberos to do 2 way auth19:17
gyeeyou can use biomatric for all I care :)19:17
henrynashdolphm: (side topic) - could you re-approve the domain-scoping api change, it failed to merge and I had to re-base:  https://review.openstack.org/#/c/18770/19:17
ayounggyee, biometric bad.  How do you revoke a retina?19:17
gyeenice19:17
ayounghttp://sgallagh.wordpress.com/2013/01/14/we-are-not-who-we-are/19:17
Ryan_Lanethis is about two-factor auth?19:18
ayoungRyan_Lane, in part, yes19:18
*** mdomsch has joined #openstack-dev19:18
ayoungRyan_Lane, and also about pluggable authentication, which is a related topic19:18
gyeewith the plugin approach, we can support MFA or multi-roundtrip auth19:18
*** devoid has joined #openstack-dev19:18
ayounggyee, we *can*  but I am still not convinced we *should*19:18
ayoungBe that as it may19:19
ayounglets assume we should19:19
gyeeso we're cool with the current proposal then?19:19
ayoungso the request specifies the mechanism19:19
*** lucid has joined #openstack-dev19:19
ayounggyee, in part19:19
gyeewhich part? :)19:19
dolphmhenrynash: going to skim through it again, but yes19:19
ayounggyee, selecting IdP for tghe request19:19
henrynashdolphm: thx19:20
*** jaustinpag has quit IRC19:20
gyeeso lets do this then?19:20
gyeedolphm, henrynash, we're cool with this?19:20
ayounggyee, I want the seelction of the IdP specified by the Domain.  Is that OK?19:20
dolphmgyee: with pluggability, i'd also like to support two plugins providing the same "mechanism" (e.g. two backends both providing password-based auth) ... the user shouldn't have to care which backend they auth against19:21
gyeeayoung, that's auth policy19:21
*** devcamcar has quit IRC19:21
ayounggyee, if the user specifies a combination of mechanism and domain that is not supported by their IdP, they get no-authed19:21
ayounggyee, it needs to be in there.19:21
henrynashayoung: +1 on that, seems to be a sensible mapping19:21
gyeeayoung, then why stop at domain?19:22
gyeewhy not project or individual user?19:22
ayounggyee, because I don't want to create a rules engine19:22
gyeeyou see where I am going with this19:22
ayounggyee, domain is the logical analogue to IdP19:22
*** nati_ueno has quit IRC19:23
gyeemy point is if we are going to do auth policies, lets not do half-monty19:23
ayounggyee, because then you need every use in the local Identity store, and that doesn't map to the requests we are getting from the field19:23
henrynashdolphm: (separate side topic): do we have to provide db table migration across grizzly-1, grizzly-2 boundaries…or just Folsom<->Grizzly ?19:24
ayounggyee, nope.19:24
ayounggyee, chicken and egg again19:24
ayoungLets say a user comes in19:24
dolphmhenrynash: not sure what you mean? they should be continuous19:24
ayoungand that user is not in the MySQL user store19:24
ayoungwhich IdP do you go to?19:24
*** hub_cap has left #openstack-dev19:24
ayoungThe logical answer is "the one specified for the user's domain"19:25
ayoungThe only other choices are "the default one"  and "you don't, auth fails."19:25
dolphmayoung: how do you know what the user's domain is before you've authenticated the user?19:26
*** danpb has quit IRC19:26
henrynashdolphm: e.g. I'm pulling the domain_id out of the extra and make it a full attribute in user entity..can I just modify the  identity-normalization code that we wrote for grizzly-1, or do I need to do another totally separate migration step19:26
gyeehey, I gotta run, lets cont this discussion later19:26
ayounggyee, OK19:27
*** gyee has quit IRC19:27
*** sacharya1 has joined #openstack-dev19:28
swaT30anyone here available to help me out with a quantum issue?19:28
dolphmhenrynash: ah, i see what you mean -- only worry about data at the state of a major release (so, you can modify migration 9)19:28
swaT30running trunk19:28
henrynashdolphm: ok, yep, that was my question19:28
*** ondergetekende has quit IRC19:30
ayounghenrynash, so, lets say that we do a lazy fetch of users from an LDAP server (based on domain)  what would we do about roles?  Default them?  Additional LDAP query?19:30
*** sacharya has quit IRC19:30
ayoungOr would we have to say " user must exist locally before going to remote LDAP?"19:31
*** dansmith has joined #openstack-dev19:31
henrynashayoung: so I think this goes to the question of whether we have the ID in some local keystone store and are just authenticating agains KSAP19:31
henrynashLDAP19:31
*** mikal has quit IRC19:32
ayounghenrynash, yep19:32
henrynashayoung: I haven't actually spent time thinning through how all these combinations might fit together19:33
ayounghenrynash, every time I think about it I come to the same conclusion.  It is an LDAP problem, and the best solution is to set up a local LDAP server and let that server solve it.  But that is really just avoiding the question19:33
henrynashayoung: i.e. if you have users in LDPA, do you also have groups by default19:33
*** mikal has joined #openstack-dev19:33
dolphmif authentication plugins were made independent of the backends, we could start writing a single fast sql driver with cross-backend foreignkeys and whatnot :P19:34
henrynashayoung: (how many random spellings of LDAP can I type?)19:34
ayoungdolphm, one config option should be "lazy load of users from IdP"19:34
dolphmhenrynash: 14 by my count19:35
ayounghenrynash,  4 characters lead to 4! permustations.  But each char could be mistyped by the 4 keys around it.  There is some overlap betwwen keys, as you could mistype both D and A as S.19:35
henrynashayoung: …in such an arrangement, if the user is disabled in LDAP, when would we notice?19:35
ayoungand both L and P as O19:35
*** spzala has quit IRC19:35
ayoungso...lets say roughly 8! ways you can mistype LDAP19:36
dolphm14!19:36
*** alexpilotti has quit IRC19:36
ayoungdolphm, oh, I realize that the A is next to Caps lock19:36
ayoungthat doubles the NUMber of characters upper and lower19:36
ayoung34!19:37
dolphmayoung: i'm not counting case19:38
henrynash…I could be at this some time…..19:38
ayoungdolphm, then 17!19:38
dolphmayoung: i'm trying to enumerate them19:38
ayounghenrynash, if the user is disabled in LDAP, they won;t authenticate19:38
dolphmstuck at: LDAP + LDA + LDP + LAP + DAP + LDPA + LPAD + PDAL + LADP + ADLP + DLAP19:38
dolphm10 wrong + 1 correct?19:39
ayoungdolphm, that is somewhere between 4! and 5!19:39
henrynashayoung: so they authenticate, then the user is disabled, I assume we don't notice until they re-authenicate?  If we update a user i keystone to disable them, I assume we revoke any tokens19:39
dolphmayoung: 4! == 24, 5! == 12019:40
ayounghenrynash, LDAP does not push notifications.  I'd say we push for short term tokens (1 mintue) and stop worrying about revocations19:40
henrynashayoung: just thinking aloud....19:40
dolphmhenrynash: your productive questions are distracting19:40
henrynashdolphm :-)19:40
dolphmhenrynash: but yes to everything you said (i don't know how to solve the problem of remote users being disabled)19:41
ayoungdolphm, I think it would be 4! + 3! + 2!  to account for dropping letters19:41
lifelessdon't drive trucks over them ?19:41
ayoungNo, wait.19:42
*** jkoelker has quit IRC19:42
ayoungIt would be 4 Choose 4 plus 4 choose 3 plus 4 choose 2 plus 4 choose 119:42
*** jkoelker has joined #openstack-dev19:42
dolphmayoung: i've been thinking along those lines19:42
dolphmayoung: is 4 choose 4 the correct spelling?19:42
henrynashdolphm, young: btw, is it ok for me to be adding in things like domains (and of course I have already added groups) into the v2 token auth code?  They are all optional, so won't break anything…but in theory they would only be in a v3 token...19:42
lifelessayoung: 4^4 + 4^3 + 4^2 + 4 ?19:43
ayounghenrynash, what happens if we pass a V3 token to the V2 API19:43
dolphmhenrynash: i'd rather not, but you'd need to modify the v2 spec, and it should either be an extension or require a minor version bump (v2.1) thus requiring awful changes to our impl19:43
*** b3nt_pin is now known as beagles19:43
ayounglifeless, only if we allow duplication of letters19:43
ayoungso LLLL would be valid19:43
ayoungbut people don't tend to typo that way19:44
*** flepied has quit IRC19:44
lifelessayoung: you don't then its 4! + 4!-1! + 4!-2! + 4!-3!19:44
ayounglifeless, yep19:44
ayoung4*4!-(1!+2!+3!)   and since   4! = 24, 3! = 6....19:45
lifelessactually, its not -, its /19:46
ayoung96-(6*2*1)=96-12=8419:46
*** novas0x2a|laptop has joined #openstack-dev19:46
henrynashyoung, dolpm: so groups are actually ok….since you can't tell from the token whether the role came from group membership or a direct user role19:47
*** david-lyle has joined #openstack-dev19:47
henrynash….but domains will be different19:47
*** devcamcar has joined #openstack-dev19:47
ayounghenrynash, I'm OK with saying V2 cannot consume V3 tokens19:48
ayoungI just want it to be explicit19:48
*** stevebaker has quit IRC19:49
*** flepied has joined #openstack-dev19:49
ayounghenrynash, but it seems like V2 should be able to handle domained-tokens....19:49
dolphmayoung: domain-scoped tokens?19:49
ayoungdolphm, tokens where the user is per domain...19:49
henrynashayoung: I was just thinking that…if it didn't know about domains, it just won't match anything19:49
dolphmayoung: i'm not following19:50
ayoungbascially a keystone deployment with multiple domains19:50
ayounghenrynash, I think that we need V2 to be domain aware19:50
*** darraghb has quit IRC19:50
dolphmayoung: scope v2 to resources owned by the default domain19:50
ayounghenrynash, dolphm I have to head home.  I'll be back on line in about 45 minutes19:51
henrynashayoung: sorry V2 of what?  what a policy engine expect to able to consume?19:51
dolphmayoung: cool19:51
henrynashayoung: ok19:51
*** ayoung has quit IRC19:51
henrynashI'll be back on later too19:51
openstackgerritA change was merged to openstack/python-novaclient: Fix the help text of add-fixed-ip  https://review.openstack.org/1896319:53
openstackgerritA change was merged to openstack/python-novaclient: Add support for instance evacuate.  https://review.openstack.org/1909419:53
openstackgerritA change was merged to openstack/python-novaclient: When logging request include request data  https://review.openstack.org/1939819:53
openstackgerritA change was merged to openstack/python-novaclient: Update hosts API action calls (startup etc.)  https://review.openstack.org/1937319:53
openstackgerritA change was merged to openstack/python-novaclient: Fix a couple of broken shell tests  https://review.openstack.org/1951219:53
openstackgerritA change was merged to openstack/nova: minor improvements to nova/tests/test_metadata.py  https://review.openstack.org/1847619:53
openstackgerritA change was merged to openstack/nova: Cleaning up exception handling  https://review.openstack.org/1968519:53
*** devcamcar has quit IRC19:58
*** otherwiseguy has quit IRC20:00
openstackgerritA change was merged to openstack/nova: Add 'devname' to nova.network.model.VIF class  https://review.openstack.org/1912020:00
*** sacharya1 has quit IRC20:02
*** stevebaker has joined #openstack-dev20:03
*** maurosr has quit IRC20:05
*** sacharya has joined #openstack-dev20:08
*** sacharya has quit IRC20:08
*** sacharya has joined #openstack-dev20:08
*** sacharya has quit IRC20:09
*** sacharya has joined #openstack-dev20:09
*** vipul is now known as vipul|away20:10
*** vipul|away is now known as vipul20:10
*** christophk has quit IRC20:10
*** sacharya1 has joined #openstack-dev20:13
*** sacharya has quit IRC20:15
*** gatuus has joined #openstack-dev20:17
*** gatuus has quit IRC20:20
*** gatuus has joined #openstack-dev20:21
*** christophk has joined #openstack-dev20:21
*** rkukura has quit IRC20:21
*** devcamcar has joined #openstack-dev20:25
*** vipul is now known as vipul|away20:25
*** dprince has quit IRC20:28
gatuuscan't  get cloud-init to work on a new Ubuntu 12.04 server qcow2 image.. I've tryied all night.. and nope.. I can't copy the functionality that the precise-al-ready-cloudinited-image has20:30
*** devoid has quit IRC20:31
*** devoid1 has joined #openstack-dev20:31
*** devcamcar has quit IRC20:34
*** todin has joined #openstack-dev20:36
openstackgerritA change was merged to openstack/oslo-incubator: Rework zmq setup and cleanup  https://review.openstack.org/1960620:37
*** bencherian has quit IRC20:38
todinIs the multi node setup in devstack brocken? the rabbit url on a compute node is wrong, I think the rpc refactor patch is the problem20:39
openstackgerritA change was merged to openstack/oslo-incubator: Allow rpc drivers to always be imported  https://review.openstack.org/1960720:40
openstackgerritA change was merged to openstack/oslo-incubator: Make tox run doctests  https://review.openstack.org/1960820:41
*** pixelbeat has quit IRC20:45
*** esp1 has quit IRC20:48
*** salgado is now known as salgado-afk20:52
*** ayoung has joined #openstack-dev20:53
topolayoung:   I updated https://etherpad.openstack.org/devstack-ldap  but I have some questions for you20:53
ayoungtopol, looking...20:54
ayoungtopol, fire away20:54
topolSo I did a manual install of openldap on ubuntu20:54
ayoungtopol, which version of openldap did it install?20:55
*** gabrielhurley has joined #openstack-dev20:55
topolsome of the commands pull up a simplified user interface in which to enter the admin password , pick a database, and choose some options20:55
ayoungtopol, as I recall, there are two main ways that OpenLDAP sets up for initial config20:56
topolmost of devstack is a pretty silent install. You may have to enter a password (that gets stored in localrc)20:56
topolk, is there a more silent approach20:56
ayoungfor Fedora, I used ldap using a local socket to the admin schema20:56
ayoungI have notes...20:56
*** markwash_ has joined #openstack-dev20:57
*** gatuus has quit IRC20:57
topolI was focusing on the ubuntu appraoch described in http://wiki.openstack.org/OpenLDAP20:57
ayounghttp://fpaste.org/WSKM/20:58
ayoungthat is in an ldif20:58
ayoungI kept it in20:58
ayoung~/etc/manager.ldif20:58
ayoungand to configure I ran:20:58
ayoungsudo ldapmodify -Y EXTERNAL -H ldapi:///  -f ~/etc//manager.ldif20:59
*** salgado-afk has quit IRC20:59
*** christophk has quit IRC21:00
ayoungtopol, so, yeah, I bascially did what that said21:00
topolI saw that same snippet in  http://wiki.openstack.org/OpenLDAP21:00
topolwill that work for ubuntu openldap as well?21:00
ayoungI'd assume we would generate the password the same way the mysql passwords are done and cached in localrc21:00
jgriffitho/21:00
jgriffithbahh21:00
ayoungthen run that through slappasswd21:00
*** melwitt has joined #openstack-dev21:01
ayoungtopol, so LDAP_PASSWORD=freeipa4all  in localrc21:02
ayoungand you would run slappasswd -h {SSHA} -s $LDAP_PASSWORD21:02
openstackgerritA change was merged to openstack/nova: Fix problem with ipv6 link-local address(es)  https://review.openstack.org/1946321:02
openstackgerritA change was merged to openstack/nova: Adds a flag to allow configuring a region  https://review.openstack.org/1804821:03
*** devcamcar has joined #openstack-dev21:03
ayoungthere probably needs to be a temporary manager.ldif.template in devstack/lib/daps21:03
openstackgerritA change was merged to openstack/nova: Correct docstring on sizelimit middleware.  https://review.openstack.org/1965621:03
topolany reason why  http://wiki.openstack.org/OpenLDAP states that for ubuntu setup to do it with the "different approach"21:03
*** egallen has quit IRC21:04
ayoungUbuntu 11.10  topol21:04
openstackgerritA change was merged to openstack/nova: Make resource tracker use conductor for migration updates  https://review.openstack.org/1963521:04
ayoungwas probably before they caught up to the version of OpenLDAP shipped with Fedora 1621:04
openstackgerritA change was merged to openstack/nova: Implements getPasswordData for ec2  https://review.openstack.org/1951421:05
openstackgerritA change was merged to openstack/nova: Expand quota logging  https://review.openstack.org/1943521:05
topolayoung, gotcha. was hoping it was something like that21:05
openstackgerritA change was merged to openstack/nova: Cells: Add some cells support to admin_actions extension  https://review.openstack.org/1523721:05
openstackgerritA change was merged to openstack/quantum: Update latest OSLO.  https://review.openstack.org/1970221:05
openstackgerritA change was merged to openstack/horizon: Don't update count on tables without a summary row  https://review.openstack.org/1960321:05
ayoungtopol, good to know that Fedora and Ubuntu will be done the same way, if only for now21:05
topolayoung,  I will manually try the steps you suggest. do you of an easy way for me to blow my installed LDAP away so I can start over?21:07
ayoungtopol, once you have something somewhat functional, you can post it to git using git review and setting it to draft.  It is  the -D command line option.  Once you do that, there is some way to share the review with me.  I think you add me as a reviewer on gerrit.21:08
ayoungtopol, are you working in a VM?21:08
topolyes21:08
ayoungI would probably checkpoint it the pre-installed state and just reset it to the checkpoint21:09
ayounghowver, you probably want to get it back to the pre-installed state21:09
ayoungI think that with apt you can do a purge21:09
ayoungapt-get --purge remove <package>21:10
ayoungapt-get clean21:10
openstackgerritA change was merged to openstack/nova: Remove unused import.  https://review.openstack.org/1973421:10
ayoungtopol, you also might want to make sure you know where all the files are that OpenLDAP uses.  There are probably config files in /etc and the rest of the data under /var, probably in /var/lib21:10
ayoung/var/lib/ldap/ is owned by openldap-servers on my system21:11
*** devcamcar has quit IRC21:11
ayoungso when you purge, it should not only remove the package, but all of the files in /var/lib/ldap or whereever and /etc/openldap/slapd.d/  or whereever Debian based installs put them21:12
*** brich1 has left #openstack-dev21:12
*** vipul|away is now known as vipul21:13
ayoungtopol, something like dpkg-query -f '${Package} ${Status}\n' -W | grep config-files$ | cut -d" " -f121:13
*** christophk has joined #openstack-dev21:13
ayoungtopol, But my Debian Know-how is a little rusty.21:14
*** dwalleck has joined #openstack-dev21:18
*** otherwiseguy has joined #openstack-dev21:22
*** jcmartin has quit IRC21:22
*** esp has joined #openstack-dev21:22
*** stevemar has quit IRC21:22
topolayoung, I was able to get my lad cleaned out.  for the initial install would I use the sudo yum install or the sudo apt-get?21:26
*** maurosr has joined #openstack-dev21:26
ayoungtopol, for ubuntu, apt-get21:26
ayoungyum is fedora21:26
*** rkukura has joined #openstack-dev21:27
topolugh.  the sudo apt-get prompts for a password with a funny dialogue box.  Ideally it should have a silent install option and I could pass that command the admin password21:28
*** bearovercloud_ has joined #openstack-dev21:28
*** radez is now known as radez_g0n321:29
*** koolhead17 has quit IRC21:29
*** vkmc has quit IRC21:30
*** jbresnah__ has quit IRC21:31
*** alexpilotti has joined #openstack-dev21:31
*** bearovercloud has quit IRC21:32
*** bearovercloud_ is now known as bearovercloud21:32
dolphmhenrynash: when do you plan on having bandwidth to implement domain name spaces?21:34
topolayoung, looks like there is a silent install option: sudo DEBIAN_FRONTEND=noninteractive21:34
ayoungtopol, lets avoid that for now21:34
*** colinmcnamara has quit IRC21:35
ayoungI'd like to keep Debian and Fedora in sync. UNless that exact command exists on both, we are better off managing it directly21:35
topolK, sowhat would work for both?21:36
topolI dont have a fedora machine to test on21:38
openstackgerritA change was merged to openstack/nova: Cells: Add cells API extension  https://review.openstack.org/1523021:39
*** devcamcar has joined #openstack-dev21:39
openstackgerritA change was merged to openstack/nova: script for configuring a vif in Xen in non-bridged mode  https://review.openstack.org/1571321:39
*** dhellmann is now known as dhellmann-afk21:41
*** CrackerJackMack has quit IRC21:43
henrynashdolphm: ready to start either domain-scoping or namespaces now...21:44
dolphmhenrynash: domain-scoping is blocked by a v3 auth api implementation, right?21:45
*** mikal has quit IRC21:45
henrynashdolphm: yes. really…that's why I was asking about that….21:46
dolphmhenrynash: k, i think a v3 auth implementation is the highest priority item for grizzly-m3, as it's obviously a blocker for doing anything with v3 besides management21:46
*** mikal has joined #openstack-dev21:47
*** jpich has joined #openstack-dev21:47
dolphmhenrynash: i'm also thinking that if we don't do namespaces before grizzly-m3, it might be worth pulling it back out of the spec, calling the result v3.0, and then putting it back in for v3.121:47
henrynashdolphm: I can do some backend prep work for domain-scoping but in the end need to plug in the aug tstuff21:47
dolphmhenrynash: yeah21:47
dolphmhenrynash: i wonder if gyee has anything he can post up for a WIP review21:48
dolphmhenrynash: so we can start working on the client against that21:48
dolphmetc21:48
*** devcamcar has quit IRC21:48
henrynashdolphm: I don;t think name-sapce will take that long, not that much code…so we could do it for m321:48
dolphmhenrynash: alright21:48
*** CrackerJackMack has joined #openstack-dev21:49
henrynashdolphm: so maybe i get that done fast, then as we get the v3 auth stuff up, can then move to the scoping21:49
dolphmhenrynash: technically we don't need client support by the time grizzly-m3 lands21:49
henrynashdolphm: agreed21:50
vishyjgriffith: made one more request on https://review.openstack.org/#/c/19495/21:51
*** martine has quit IRC21:51
*** zbitter has joined #openstack-dev21:53
jgriffithvishy: I'm fine either way on that one, I'll change it21:53
*** sstent has quit IRC21:53
*** sstent has joined #openstack-dev21:54
*** jcmartin has joined #openstack-dev21:54
*** esp has quit IRC21:55
*** esp has joined #openstack-dev21:55
jgriffithvishy: done, and updated cinder.conf.sample21:56
*** cryptographrix has quit IRC21:56
*** zaneb has quit IRC21:56
jgriffithvishy: I'll keep an eye out for the next version that implements mirrored thins, but for now we're hosed21:56
*** cryptographrix has joined #openstack-dev21:57
*** sandywalsh has quit IRC21:57
*** eharney has joined #openstack-dev21:57
*** eharney has quit IRC21:57
*** eharney has joined #openstack-dev21:57
*** cdub_ has quit IRC21:58
dolphmhenrynash: after the spec change, we already have client + server support for https://review.openstack.org/#/c/18706/ ... correct?21:58
*** mdomsch has quit IRC22:00
*** vishy is now known as vishy_zz22:04
*** kpavel has quit IRC22:09
*** devoid1 has quit IRC22:11
*** galthaus_ has joined #openstack-dev22:11
*** boden has quit IRC22:13
*** galthaus has quit IRC22:13
*** galthaus_ has quit IRC22:16
*** devcamcar has joined #openstack-dev22:16
*** Tross has quit IRC22:17
*** nati_ueno has joined #openstack-dev22:17
*** alobbs has quit IRC22:18
*** mawagon1 has joined #openstack-dev22:20
*** gyee has joined #openstack-dev22:20
*** olaph has quit IRC22:21
*** burris has joined #openstack-dev22:22
*** devcamcar has quit IRC22:25
*** vkmc has joined #openstack-dev22:25
*** roaet is now known as roaet-away22:26
topolayoung: fortunately I had a pre ldap install snapshot.  Otherwise cleaning it completely off seemed very difficult22:28
*** devoid has joined #openstack-dev22:29
nati_uenodanwent: Hi Are you around?22:29
nati_uenodanwent: https://review.openstack.org/#/c/19436/7,publish  I mentioned bp in commit message "implements bp quantum-security-groups-iptables-ovs"22:29
*** christophk has quit IRC22:29
danwentnati_ueno: you are right.  seems like for some reason LP did not get updated automatically… either that or i just got confused.  one sec.22:30
*** bencherian has joined #openstack-dev22:30
*** Tross has joined #openstack-dev22:31
danwentnati_ueno: actually, i see it on LP now.  you can ignore my comment, sorry!22:31
nati_uenodanwent: I got it :)22:31
*** sandywalsh has joined #openstack-dev22:32
*** mrunge has quit IRC22:35
*** cdub_ has joined #openstack-dev22:35
*** jcmartin has quit IRC22:35
*** jcmartin has joined #openstack-dev22:36
*** annegentle_itsme has quit IRC22:36
henrynashdolphm: if you mean, do we have client and server support for grant roles on a domain…then yes22:37
dolphmhenrynash: was asking if i could mark the bp as Implemented, which I did22:37
*** gabrielhurley has quit IRC22:37
dolphmhenrynash: i feel comfortable that it's satisfied, but wanted to double check with you22:37
*** anteaya has quit IRC22:37
*** burris has quit IRC22:38
*** jpich has quit IRC22:39
henrynashdolphm: yes, although there is a bug raised to say that although you can set them, they are not yet honored (….and of course we really need the domain scoping for that)22:41
*** nati_ueno has quit IRC22:41
dolphmhenrynash: exactly22:41
*** melwitt has quit IRC22:42
*** melwitt has joined #openstack-dev22:43
*** bearovercloud has quit IRC22:44
*** bearovercloud has joined #openstack-dev22:44
*** mtreinish has quit IRC22:46
*** henrynash has quit IRC22:46
*** dwalleck has quit IRC22:46
*** nati_ueno has joined #openstack-dev22:48
*** Tross has quit IRC22:49
*** sthaha has joined #openstack-dev22:49
*** vishy_zz is now known as vishy22:49
*** dims has quit IRC22:50
*** vkmc has quit IRC22:51
*** tmishler has joined #openstack-dev22:51
*** topol has quit IRC22:52
*** devcamcar has joined #openstack-dev22:53
*** roaet-away is now known as roaet22:54
dolphmvishy: what do you use to produce this? http://lists.openstack.org/pipermail/openstack-dev/2012-November/002648.html22:57
*** sandywalsh has quit IRC22:58
*** john5223 has quit IRC22:58
openstackgerritA change was merged to openstack/ceilometer: Update pep8 to 1.3.3  https://review.openstack.org/1921323:00
*** devcamcar has quit IRC23:01
*** woodspa has quit IRC23:01
*** stevebaker has quit IRC23:02
*** stevebaker has joined #openstack-dev23:03
vishydolphm: http://173.203.107.207/~soren/stats/23:03
dolphmvishy: ah, cool -- thanks23:04
*** vkmc has joined #openstack-dev23:04
*** melwitt has quit IRC23:07
*** melwitt has joined #openstack-dev23:08
*** lloydde has quit IRC23:09
*** nati_ueno has quit IRC23:10
*** melwitt1 has joined #openstack-dev23:13
*** melwitt has quit IRC23:13
guglhi all, where is the best document to follow in order to install openstack grizzly23:14
*** bknudson has quit IRC23:15
*** mpdehaan has quit IRC23:15
*** reed has quit IRC23:17
*** edmund has quit IRC23:17
*** jrodom has joined #openstack-dev23:18
*** vkmc has quit IRC23:20
*** galthaus has joined #openstack-dev23:22
*** mawagon1 has quit IRC23:22
*** olaph has joined #openstack-dev23:22
*** galthaus has quit IRC23:27
*** devcamcar has joined #openstack-dev23:29
*** yidclare has quit IRC23:29
*** kbringard has quit IRC23:32
*** alexpilotti has quit IRC23:32
*** yidclare has joined #openstack-dev23:32
*** riskable has quit IRC23:34
*** riskable has joined #openstack-dev23:34
*** riskable has quit IRC23:35
*** devcamcar has quit IRC23:38
*** guillaume_ has joined #openstack-dev23:39
*** gpernot has quit IRC23:39
*** jcru has quit IRC23:40
*** cdub_ has quit IRC23:41
*** nati_ueno has joined #openstack-dev23:42
*** melwitt1 has quit IRC23:43
*** juice has quit IRC23:44
*** gongysh has joined #openstack-dev23:44
*** pabelanger has quit IRC23:46
*** ewindisch has quit IRC23:47
*** nati_ueno has quit IRC23:48
*** rpedde is now known as rpedde_away23:48
*** topol has joined #openstack-dev23:49
vishyjgriffith: btw, cinderclient doesn't support cinder delete --force23:50
vishyjgriffith: and it probably should23:50
*** melwitt has joined #openstack-dev23:51
jgriffithvishy: I'll add it23:51
* jgriffith wonders how we missed that one23:51
*** jimfehlig has quit IRC23:51
*** henrynash has joined #openstack-dev23:52
*** alunduil has joined #openstack-dev23:53
openstackgerritA change was merged to openstack/python-openstackclient: Move from unittest2 to testtools  https://review.openstack.org/1975123:54
*** alunduil has quit IRC23:54
*** alunduil has joined #openstack-dev23:55
*** mrodden has quit IRC23:57
*** edmund has joined #openstack-dev23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!