Friday, 2013-03-15

*** reed has quit IRC00:00
ayounggyee, in the future, don't name patches "Fixes Bug X" but instead describe what the patch actually does.  THink of the bug title as the "elevator pitch" for the patch.00:01
*** tomoe_ has joined #openstack-dev00:01
*** jaybuff1 has quit IRC00:04
*** jaybuff has joined #openstack-dev00:08
*** jaybuff has left #openstack-dev00:12
*** pabelanger has joined #openstack-dev00:15
*** sthaha has joined #openstack-dev00:16
*** garyTh has quit IRC00:18
*** Yada has quit IRC00:18
*** mrodden has joined #openstack-dev00:18
*** otherwiseguy has joined #openstack-dev00:19
*** jasdeepH has joined #openstack-dev00:23
*** jog0 has quit IRC00:23
*** lloydde has quit IRC00:27
*** esp has joined #openstack-dev00:27
*** dsanders has quit IRC00:27
*** winston-d has joined #openstack-dev00:28
*** kagan has quit IRC00:30
*** vkmc has joined #openstack-dev00:30
*** soody has joined #openstack-dev00:33
*** openstackjenkins has quit IRC00:33
*** soody has joined #openstack-dev00:33
*** openstackjenkins has joined #openstack-dev00:33
*** darjeeling has quit IRC00:39
*** bdpayne has quit IRC00:43
*** kaushikc has quit IRC00:43
*** kaushikc has joined #openstack-dev00:43
*** kaushikc has quit IRC00:45
*** gyee has quit IRC00:46
*** alexpilotti has quit IRC00:47
*** jbresnah has quit IRC00:48
*** nati_ueno has quit IRC00:50
*** vkmc has quit IRC00:50
openstackgerritA change was merged to openstack/ceilometer: Update openstack.common  https://review.openstack.org/2444000:51
*** otherwiseguy has quit IRC00:53
*** fire__ has joined #openstack-dev00:56
*** fire has quit IRC00:56
*** halfss has joined #openstack-dev01:00
*** esp has left #openstack-dev01:02
*** vkmc has joined #openstack-dev01:04
*** yidclare has quit IRC01:05
*** vkmc has quit IRC01:05
*** jhesketh__ is now known as jhesketh01:09
openstackgerritA change was merged to openstack/quantum: Imported Translations from Transifex  https://review.openstack.org/2449201:09
openstackgerritA change was merged to openstack/quantum: Do not disable propagate on root logger  https://review.openstack.org/2439501:11
*** stevebaker has quit IRC01:12
*** davetucker has joined #openstack-dev01:12
*** stevebaker has joined #openstack-dev01:16
*** adalbas has joined #openstack-dev01:16
*** jbresnah has joined #openstack-dev01:17
*** kbringard has quit IRC01:20
*** ladquin has quit IRC01:21
*** edmund has quit IRC01:26
*** jergerber has joined #openstack-dev01:29
*** sacharya has joined #openstack-dev01:30
*** alobbs has quit IRC01:30
*** alobbs has joined #openstack-dev01:31
*** bswartz has joined #openstack-dev01:32
*** darjeeling has joined #openstack-dev01:32
*** darjeeling has quit IRC01:33
*** sacharya1 has joined #openstack-dev01:33
*** darjeeling has joined #openstack-dev01:33
*** sacharya has quit IRC01:35
*** lloydde has joined #openstack-dev01:37
*** markmcclain has joined #openstack-dev01:38
*** capnkooc has quit IRC01:39
*** terry7 has quit IRC01:40
*** epim has quit IRC01:40
*** lloydde has quit IRC01:42
*** Tross has quit IRC01:44
*** zhidong has joined #openstack-dev01:45
*** morganfainberg has quit IRC01:48
*** Tross has joined #openstack-dev01:50
*** kbringard has joined #openstack-dev01:50
*** ijw has quit IRC01:51
*** nunosantos has quit IRC01:52
*** jamielennox has quit IRC01:54
openstackgerritA change was merged to openstack/keystone: No parent exception to wrap  https://review.openstack.org/2370101:55
*** jamielennox has joined #openstack-dev01:55
*** kbringard has quit IRC01:59
*** zb has joined #openstack-dev01:59
*** brx_ has joined #openstack-dev02:00
*** stevemar has quit IRC02:00
*** zaneb has quit IRC02:02
*** jergerber has quit IRC02:03
*** danwent has joined #openstack-dev02:07
*** aeperezt has quit IRC02:07
*** jcmartin has quit IRC02:08
openstackgerritA change was merged to openstack/nova: Add quotas for fixed ips.  https://review.openstack.org/2445102:10
*** aeperezt has joined #openstack-dev02:12
*** Kharec has quit IRC02:12
*** dkehn_ has joined #openstack-dev02:13
*** marun has quit IRC02:13
*** dkehn has quit IRC02:15
*** jamielennox has quit IRC02:18
*** jamielennox has joined #openstack-dev02:19
*** sacharya1 has quit IRC02:22
*** pixelbeat has quit IRC02:28
*** torandu has quit IRC02:34
*** kaushikc has joined #openstack-dev02:35
*** anniec has quit IRC02:35
*** novas0x2a|laptop has quit IRC02:37
*** danwent has quit IRC02:38
*** jamielennox has quit IRC02:38
*** torandu has joined #openstack-dev02:38
*** jamielennox has joined #openstack-dev02:39
*** Hg_ has quit IRC02:39
*** hemna has quit IRC02:39
*** dims has quit IRC02:40
*** harlowja has joined #openstack-dev02:43
*** jcmartin has joined #openstack-dev02:48
*** kbringard has joined #openstack-dev02:55
*** Tross has quit IRC02:56
*** timello has joined #openstack-dev02:56
*** kbringard has quit IRC03:00
openstackgerritA change was merged to openstack/keystone: Remove duplicate password/token opts.  https://review.openstack.org/2427703:08
*** Tross has joined #openstack-dev03:14
*** Ryan_Lane has quit IRC03:16
*** adjohn has quit IRC03:18
*** jamielennox has quit IRC03:20
*** jamielennox has joined #openstack-dev03:20
*** anniec has joined #openstack-dev03:25
*** anniec_ has joined #openstack-dev03:26
*** stevemar has joined #openstack-dev03:27
*** anniec has quit IRC03:30
*** anniec_ is now known as anniec03:30
*** jamielennox has quit IRC03:38
*** jamielennox has joined #openstack-dev03:39
*** davetucker has quit IRC03:40
*** yaguang has joined #openstack-dev03:40
*** rohara has joined #openstack-dev03:41
*** fubada has quit IRC03:42
*** imsplitbit has quit IRC03:43
*** Kharec has joined #openstack-dev03:44
*** manas has joined #openstack-dev03:44
*** adalbas has quit IRC03:46
*** fubada has joined #openstack-dev03:47
*** soody has quit IRC03:47
*** zhidong has quit IRC03:48
*** kaushikc1 has joined #openstack-dev03:50
*** kaushikc has quit IRC03:50
*** soody has joined #openstack-dev03:53
*** Mandell has quit IRC03:53
*** martine has quit IRC03:54
*** kaushikc1 has quit IRC03:55
*** kaushikc has joined #openstack-dev03:55
openstackgerritA change was merged to openstack/cinder: Compression/tier capabilities for Storwize/SVC.  https://review.openstack.org/2432103:55
*** kbringard has joined #openstack-dev03:55
*** jamielennox has quit IRC03:57
*** jamielennox has joined #openstack-dev03:58
*** kbringard has quit IRC04:00
*** brx_ has quit IRC04:01
*** SergeyLukjanov has joined #openstack-dev04:03
*** wu_wenxiang has joined #openstack-dev04:05
*** bobbytang has joined #openstack-dev04:06
*** torandu has quit IRC04:07
openstackgerritA change was merged to openstack/python-keystoneclient: Retry http_request and json_request failure.  https://review.openstack.org/2372804:07
*** fire__ has quit IRC04:08
*** torandu has joined #openstack-dev04:09
*** epim has joined #openstack-dev04:10
*** Tross has quit IRC04:15
*** jamielennox has quit IRC04:15
*** jamielennox has joined #openstack-dev04:16
*** aditirav has joined #openstack-dev04:16
*** yaguang has quit IRC04:17
*** sthaha has quit IRC04:17
*** mlavalle has left #openstack-dev04:22
*** amerine has quit IRC04:24
*** koolhead17 has joined #openstack-dev04:25
*** esp has joined #openstack-dev04:31
*** esp has left #openstack-dev04:31
*** jamielennox has quit IRC04:37
*** jamielennox has joined #openstack-dev04:37
*** Tross has joined #openstack-dev04:42
*** jcmartin has quit IRC04:44
*** stevemar has quit IRC04:48
openstackgerritA change was merged to openstack/python-keystoneclient: update v3 domains - remove public/private namespace  https://review.openstack.org/2346504:49
*** lloydde has joined #openstack-dev04:50
openstackgerritA change was merged to openstack/cinder: Switch to final 1.1.0 oslo.config release  https://review.openstack.org/2420804:51
*** navid_ has joined #openstack-dev04:54
*** lloydde has quit IRC04:55
*** Ritz-Laptop has quit IRC04:55
*** ritzcarltn has joined #openstack-dev04:55
*** jamielennox has quit IRC04:55
*** jamielennox has joined #openstack-dev04:56
*** lloydde has joined #openstack-dev04:57
*** aditirav_ has joined #openstack-dev04:57
*** pabelanger has quit IRC04:58
*** aditirav has quit IRC04:59
*** aditirav_ is now known as aditirav04:59
openstackgerritA change was merged to openstack/python-keystoneclient: Doc info and other readability improvements  https://review.openstack.org/2437805:00
*** aditirav has quit IRC05:01
*** aditirav has joined #openstack-dev05:02
*** NobodyCam has quit IRC05:02
*** cmagina has quit IRC05:02
*** Ryan_Lane has joined #openstack-dev05:03
*** cmagina has joined #openstack-dev05:04
*** NobodyCam has joined #openstack-dev05:04
*** amerine has joined #openstack-dev05:05
*** Mandell has joined #openstack-dev05:08
*** optyx has quit IRC05:13
*** yaguang has joined #openstack-dev05:15
*** jamielennox has quit IRC05:20
*** jamielennox has joined #openstack-dev05:20
*** kaushikc has quit IRC05:22
*** aeperezt has quit IRC05:23
*** melwitt has quit IRC05:28
*** boris-42 has quit IRC05:29
*** jamielennox has quit IRC05:38
*** jamielennox has joined #openstack-dev05:39
*** dkehn__ has joined #openstack-dev05:39
*** dkehn_ has quit IRC05:42
*** topol has quit IRC05:42
*** andrewbogott is now known as andrewbogott_afk05:43
*** soody has quit IRC05:49
*** kbrierly has quit IRC05:51
*** timello has quit IRC05:54
*** jamielennox has quit IRC05:57
*** jamielennox has joined #openstack-dev05:58
*** adjohn has joined #openstack-dev06:01
*** Ritz has joined #openstack-dev06:01
*** markmcclain has quit IRC06:04
*** koolhead17 has quit IRC06:05
*** amerine has quit IRC06:05
*** SergeyLukjanov has quit IRC06:06
*** sride has joined #openstack-dev06:09
srideI wanted to know which table has the hosts in a cell.?06:10
*** jamielennox has quit IRC06:16
*** jamielennox has joined #openstack-dev06:17
*** amerine has joined #openstack-dev06:17
srideHow do i have multiple hosts in a devstack setup?06:20
srideAnyone..?06:21
*** glikson has joined #openstack-dev06:26
*** mrunge has joined #openstack-dev06:28
*** rushiagr has joined #openstack-dev06:29
*** torandu has quit IRC06:33
*** Ritz is now known as Ritz|away06:35
*** jamielennox has quit IRC06:35
*** jamielennox has joined #openstack-dev06:35
*** aditirav_ has joined #openstack-dev06:38
*** aditirav_ has quit IRC06:38
*** aditirav has quit IRC06:38
*** aditirav has joined #openstack-dev06:38
*** dev_sa has joined #openstack-dev06:40
*** zodiak has quit IRC06:41
*** aditirav_ has joined #openstack-dev06:42
*** bing_bu has joined #openstack-dev06:43
*** lloydde has quit IRC06:44
*** navid_ has quit IRC06:44
*** aditirav has quit IRC06:45
*** aditirav_ is now known as aditirav06:45
*** sride_ has joined #openstack-dev06:48
*** davidha has quit IRC06:48
*** navid_ has joined #openstack-dev06:48
*** aditirav has quit IRC06:49
*** aditirav has joined #openstack-dev06:50
*** sride has quit IRC06:50
*** sride_ is now known as sride06:50
*** glikson has quit IRC06:53
*** jamielennox has quit IRC06:53
*** jamielennox has joined #openstack-dev06:54
*** zodiak has joined #openstack-dev06:55
*** kbringard has joined #openstack-dev06:56
*** kbringard has quit IRC07:01
*** varto has joined #openstack-dev07:01
*** cdub has quit IRC07:08
*** cdub has joined #openstack-dev07:08
*** anniec has quit IRC07:10
*** epim has quit IRC07:11
*** jamielennox has quit IRC07:12
*** jamielennox has joined #openstack-dev07:13
*** halfss has joined #openstack-dev07:16
halfsshi, is there anyway to register a new user into keystone without admin?07:17
*** jasdeepH has quit IRC07:19
*** doude has joined #openstack-dev07:19
*** SergeyLukjanov has joined #openstack-dev07:20
*** alexxu has joined #openstack-dev07:22
*** tomoe_ has quit IRC07:26
*** tomoe_ has joined #openstack-dev07:26
*** tomoe_ has quit IRC07:27
*** tomoe_ has joined #openstack-dev07:28
*** jamielennox has quit IRC07:32
*** jamielennox has joined #openstack-dev07:33
*** xga has joined #openstack-dev07:33
*** afazekas has joined #openstack-dev07:34
*** Ryan_Lane has quit IRC07:35
*** Ritz|away is now known as Ritz07:36
*** Ryan_Lane has joined #openstack-dev07:43
*** alexryabkov has left #openstack-dev07:44
*** alexryabkov has joined #openstack-dev07:45
*** mindpixel has joined #openstack-dev07:47
*** jamielennox has quit IRC07:50
*** jamielennox has joined #openstack-dev07:51
*** lloydde has joined #openstack-dev07:54
*** rafaduran has joined #openstack-dev07:56
*** eglynn has joined #openstack-dev07:56
*** kagan has joined #openstack-dev07:56
*** lloydde has quit IRC07:59
*** adjohn has quit IRC07:59
*** adjohn has joined #openstack-dev08:00
*** Ryan_Lane has quit IRC08:01
*** jprovazn has joined #openstack-dev08:03
*** boden has joined #openstack-dev08:08
*** jamielennox has quit IRC08:09
*** amerine has quit IRC08:10
*** jamielennox has joined #openstack-dev08:10
*** koolhead17 has joined #openstack-dev08:10
*** flaper87 has joined #openstack-dev08:10
*** koert has joined #openstack-dev08:10
*** jgallard has joined #openstack-dev08:16
*** adjohn has quit IRC08:19
*** giulivo has joined #openstack-dev08:21
*** reidrac has joined #openstack-dev08:22
*** bing_bu has quit IRC08:24
*** jamielennox has quit IRC08:28
*** jamielennox has joined #openstack-dev08:29
*** jamielennox has quit IRC08:29
*** adjohn has joined #openstack-dev08:31
*** adjohn has joined #openstack-dev08:32
*** adjohn has quit IRC08:32
*** adjohn has joined #openstack-dev08:33
*** adjohn has quit IRC08:34
*** kagan has quit IRC08:34
*** jgallard has quit IRC08:35
*** adjohn has joined #openstack-dev08:36
*** adjohn has quit IRC08:36
*** db has joined #openstack-dev08:36
*** dblundell has quit IRC08:36
*** db is now known as Guest2019408:37
*** sride has quit IRC08:37
*** adjohn has joined #openstack-dev08:42
*** adjohn has quit IRC08:42
*** tomoe_ has quit IRC08:42
*** adjohn has joined #openstack-dev08:43
*** adjohn has quit IRC08:43
*** adjohn has joined #openstack-dev08:44
*** darjeeling has quit IRC08:45
*** sulo_ has joined #openstack-dev08:46
*** adjohn has joined #openstack-dev08:46
*** adjohn has joined #openstack-dev08:48
*** adjohn has quit IRC08:48
*** adjohn has joined #openstack-dev08:51
*** adjohn has quit IRC08:51
*** adjohn has joined #openstack-dev08:54
*** adjohn has joined #openstack-dev08:55
*** adjohn has quit IRC08:55
*** winston-d has quit IRC08:55
*** adjohn has joined #openstack-dev08:55
*** adjohn has quit IRC08:55
*** corXi has joined #openstack-dev08:56
*** adjohn has joined #openstack-dev08:57
*** adjohn has quit IRC08:57
*** yaguang has quit IRC08:58
*** adjohn has joined #openstack-dev09:00
*** adjohn has quit IRC09:00
*** adjohn has joined #openstack-dev09:00
*** adjohn_ has joined #openstack-dev09:01
*** adjohn has quit IRC09:01
*** adjohn_ has quit IRC09:01
*** adjohn has joined #openstack-dev09:02
*** adjohn has quit IRC09:02
*** adjohn has joined #openstack-dev09:03
*** adjohn has quit IRC09:03
*** xga has quit IRC09:03
*** xga_ has joined #openstack-dev09:03
*** yaguang has joined #openstack-dev09:05
*** adjohn has joined #openstack-dev09:06
*** adjohn has quit IRC09:07
*** pixelbeat has joined #openstack-dev09:09
*** jpich has joined #openstack-dev09:12
*** adjohn has joined #openstack-dev09:12
*** adjohn has quit IRC09:12
*** adjohn has joined #openstack-dev09:14
*** adjohn has quit IRC09:15
*** pnavarro has joined #openstack-dev09:15
*** gongysh has joined #openstack-dev09:16
*** sride has joined #openstack-dev09:16
*** adjohn has joined #openstack-dev09:16
*** adjohn has quit IRC09:17
*** adjohn has joined #openstack-dev09:19
*** adjohn has quit IRC09:19
*** adjohn has joined #openstack-dev09:19
*** adjohn has quit IRC09:19
*** bourke has quit IRC09:20
*** adjohn has joined #openstack-dev09:20
*** bogdando has quit IRC09:21
*** bogdando has joined #openstack-dev09:21
*** tomh__ has quit IRC09:21
*** tomh has joined #openstack-dev09:21
*** bourke has joined #openstack-dev09:22
*** adjohn has joined #openstack-dev09:22
*** adjohn has quit IRC09:22
*** Thor has quit IRC09:22
*** Thor^^ has joined #openstack-dev09:23
*** sride_ has joined #openstack-dev09:23
*** sride has quit IRC09:23
*** sride_ is now known as sride09:23
*** yaguang has quit IRC09:23
*** adjohn has joined #openstack-dev09:28
*** adjohn has quit IRC09:28
*** tryggvil has joined #openstack-dev09:28
*** zoresvit has joined #openstack-dev09:29
*** adjohn has joined #openstack-dev09:29
*** adjohn has quit IRC09:30
*** adjohn has joined #openstack-dev09:31
*** adjohn has quit IRC09:31
*** trapni has joined #openstack-dev09:32
*** trapni has joined #openstack-dev09:32
*** m4xmr has joined #openstack-dev09:34
*** adjohn has joined #openstack-dev09:35
*** adjohn has quit IRC09:35
*** zoresvit has quit IRC09:36
*** adjohn has joined #openstack-dev09:37
*** adjohn has quit IRC09:37
*** markmc has joined #openstack-dev09:37
*** fire has joined #openstack-dev09:38
*** sride has quit IRC09:40
*** m4xmr has left #openstack-dev09:40
*** adjohn has joined #openstack-dev09:41
*** adjohn has quit IRC09:41
*** romcheg has joined #openstack-dev09:41
*** romcheg has left #openstack-dev09:41
*** romcheg1 has joined #openstack-dev09:43
*** adjohn has joined #openstack-dev09:43
*** adjohn has quit IRC09:43
*** romcheg1 has left #openstack-dev09:44
*** adjohn has joined #openstack-dev09:44
*** aditirav has quit IRC09:44
*** adjohn has quit IRC09:44
*** aditirav has joined #openstack-dev09:44
*** adjohn has joined #openstack-dev09:44
*** adjohn has quit IRC09:45
*** adjohn has joined #openstack-dev09:48
*** adjohn has quit IRC09:48
*** olaph has quit IRC09:48
*** adjohn has joined #openstack-dev09:48
*** olaph has joined #openstack-dev09:50
*** adjohn has joined #openstack-dev09:51
*** adjohn has quit IRC09:51
*** zoresvit has joined #openstack-dev09:51
*** johnthetubaguy has joined #openstack-dev09:51
*** adjohn has joined #openstack-dev09:53
*** adjohn has quit IRC09:53
*** adjohn has joined #openstack-dev09:54
*** adjohn has quit IRC09:54
*** adjohn has joined #openstack-dev09:55
*** adjohn has quit IRC09:55
*** adjohn has joined #openstack-dev09:56
*** adjohn has quit IRC09:56
*** jgallard has joined #openstack-dev09:56
*** kbringard has joined #openstack-dev09:57
*** adjohn has joined #openstack-dev09:59
*** adjohn has quit IRC09:59
*** kbringard has quit IRC10:02
*** fesp has joined #openstack-dev10:02
*** adjohn has joined #openstack-dev10:02
*** flaper87 has quit IRC10:03
*** adjohn has quit IRC10:03
*** adjohn has joined #openstack-dev10:03
*** adjohn has quit IRC10:03
*** alexxu has quit IRC10:03
*** zoresvit has quit IRC10:05
*** adjohn has joined #openstack-dev10:06
*** adjohn has quit IRC10:06
*** adjohn has joined #openstack-dev10:06
*** adjohn has quit IRC10:06
*** adjohn has joined #openstack-dev10:07
*** adjohn has quit IRC10:07
*** danpb has joined #openstack-dev10:09
*** Yada has joined #openstack-dev10:10
*** derekh has joined #openstack-dev10:10
*** adjohn has joined #openstack-dev10:11
*** adjohn has quit IRC10:11
*** aloga has quit IRC10:11
*** aloga has joined #openstack-dev10:11
* trapni waves10:12
*** iartarisi has joined #openstack-dev10:12
*** flaper87 has joined #openstack-dev10:12
*** flaper87 has quit IRC10:13
*** flaper87 has joined #openstack-dev10:13
*** fesp has quit IRC10:14
*** adjohn has joined #openstack-dev10:14
*** adjohn has quit IRC10:14
*** adjohn has joined #openstack-dev10:16
*** adjohn has quit IRC10:16
*** adjohn has joined #openstack-dev10:17
*** adjohn has quit IRC10:18
*** adjohn has joined #openstack-dev10:19
*** adjohn has quit IRC10:19
*** manas has quit IRC10:20
*** zoresvit has joined #openstack-dev10:22
*** sride has joined #openstack-dev10:24
*** Yada has quit IRC10:25
trapniafter now having upgraded from Essex to Folsom (w/o Quantum) I wanted to upgrade the dashboard aswell, however, that one says in apache's error log: "Unable to communicate with identity service: [Errno 111] Connection refused."  while trying to log in to the dashboard , and I wonder where I was actually trying to connect to. any ideas ?10:25
*** darraghb has joined #openstack-dev10:25
*** psedlak has joined #openstack-dev10:26
*** adjohn has joined #openstack-dev10:26
*** adjohn has quit IRC10:26
*** adjohn has joined #openstack-dev10:27
*** adjohn has quit IRC10:27
*** donaldh has joined #openstack-dev10:28
trapnion the dashboard VM a `nova list` as well as `keystone user-list` etc works just fine, so it's more a kind of dashboard thingy that's not respecting my wish to talk to my keystone then - it seems10:28
*** gray-- has joined #openstack-dev10:31
jpichtrapni: There should be an OPENSTACK_KEYSTONE_URL in your local_settings, maybe double check it is pointing to the right place?10:32
*** topol has joined #openstack-dev10:33
trapnijpich, hey, yeah, it's OPENSTACK_KEYSTONE_URL = "http://10.10.30.3:5000/v2.0" and a curl test to that URL works just fine10:33
*** adjohn has joined #openstack-dev10:34
*** adjohn has quit IRC10:34
*** pcm_ has joined #openstack-dev10:35
*** adjohn has joined #openstack-dev10:35
*** pcm_ has joined #openstack-dev10:36
*** adjohn has quit IRC10:36
jpichtrapni: I see. I'm not familiar with Essex so I'm not sure what changed in the dashboard between versions. Is the django-openstack-auth plugin installed?10:36
*** zoresvit has quit IRC10:36
trapniwell it's folsom already10:37
trapnibut this version doesn't work (anymore) :)10:37
*** halfss has quit IRC10:37
trapnihm, yeah, let me check10:37
*** adjohn has joined #openstack-dev10:37
trapnioha, no, it's not10:37
*** adjohn has quit IRC10:37
trapniinteresting10:37
*** xga_ has quit IRC10:37
*** xga__ has joined #openstack-dev10:37
*** halfss has joined #openstack-dev10:38
trapnibut installing python-django-openstack-auth and python-django-openstack in addition didn't help yet10:38
jpichtrapni: Even after restarting apache? :/10:39
*** fesp has joined #openstack-dev10:39
jpichtrapni: I guess setting logging levels to debug would show you where the authentication requests are going, if you don't think they're going to the right place10:39
trapniyep10:39
* trapni tries :)10:39
*** adjohn has joined #openstack-dev10:39
jpichtrapni: If this is a production server, don't set "DEBUG=True" but adjust the LOGGING variable instead10:40
*** adjohn has quit IRC10:40
*** adjohn has joined #openstack-dev10:40
*** flaper87 has quit IRC10:40
trapniyes, it's production. ...10:40
trapnihttps://gist.github.com/trapni/5168930 this is the full log output on the attempt to log into the dashboard10:42
trapnibtw10:42
jpichThanks10:42
jpichtrapni: So it seems like it CAN talk to Keystone but there's some other issue -> ValueError: No JSON object could be decoded10:43
trapnihm, no matter in what way I (intuititively) change the logging vars in local_settings.py (+restart of apache) - it doesn't change anything in the apache's error.log output10:43
*** asalkeld has quit IRC10:43
trapnijpich, well yes, but at the bottom it says that the initial error is "errno 111 - connection refused"10:44
trapnibut still, this might be misleading, possibly10:44
*** HenryG has joined #openstack-dev10:44
*** flaper87 has joined #openstack-dev10:44
jpichPossibly10:44
*** fesp has quit IRC10:44
*** manas has joined #openstack-dev10:45
*** Hg_ has joined #openstack-dev10:45
*** adjohn has joined #openstack-dev10:46
*** adjohn has quit IRC10:46
*** flaper87 has quit IRC10:46
*** flaper87 has joined #openstack-dev10:46
jpichtrapni: Are the keystone endpoints in the keystone catalogue correct?10:47
*** asalkeld has joined #openstack-dev10:48
jpichtrapni: I think you're right on the connection refused, found a couple people with the same problem (NoValueError) and it was due to not talking to keystone on the right endpoint10:48
trapnium, since everything else is working fine I suppose so10:49
*** HenryG has quit IRC10:49
*** adjohn has joined #openstack-dev10:49
*** adjohn has quit IRC10:49
trapnialso, while a `keystone user-list` actually is sniffable via `ngrep -i eth0 port 5000` -> trying to sniff the keystone traffic from the dashboard results into nothing.10:49
trapniso my guess is, that it somehow doesn't respect my settings10:50
trapnipossibly not even loading the config file maybe (?)10:50
trapnijust a wild guess10:50
trapnihaha10:50
trapniI MAY be right..... let's see10:50
*** zoresvit has joined #openstack-dev10:51
*** adjohn has joined #openstack-dev10:51
*** adjohn has quit IRC10:51
*** adjohn has joined #openstack-dev10:51
*** adjohn has quit IRC10:51
*** adjohn has joined #openstack-dev10:52
*** adjohn has quit IRC10:53
*** adjohn has joined #openstack-dev10:53
trapnijpich, i have been right. the local_settings.py has been only readable by root, however, there is another stone in the way10:53
*** adjohn has quit IRC10:53
*** fesp has joined #openstack-dev10:53
trapnihttps://gist.github.com/trapni/5168997 - there you see at the bottom line the error message: "RuntimeError: maximum recursion depth exceeded while calling a Python object"10:54
trapniinteresting10:54
*** flaper87 has quit IRC10:54
jpichtrapni: I suppose a new exception message is usually progress, though hm that's certainly an interesting one10:55
jpichtrapni: Wonder if it's related to the previous logging level changes?10:55
jpichThat'd still be weird though10:55
trapniI hoped that, but I reverted them already10:56
trapniI hope I did it fully10:56
*** jgallard has quit IRC10:57
*** jgallard has joined #openstack-dev10:57
*** zoresvit has quit IRC10:58
*** gray-- has quit IRC11:01
*** fesp has quit IRC11:02
*** flaper87 has joined #openstack-dev11:02
*** bobbytang has left #openstack-dev11:03
*** adjohn has joined #openstack-dev11:04
*** adjohn has quit IRC11:04
trapniok, it's not related to the local_settings.py's changes I did, because I now used the .example file and just changed the openstack_host varable11:04
*** dims has joined #openstack-dev11:09
*** demondust has joined #openstack-dev11:10
*** flaper87 has quit IRC11:10
*** adjohn has joined #openstack-dev11:11
*** adjohn has quit IRC11:11
*** flaper87 has joined #openstack-dev11:12
*** adjohn has joined #openstack-dev11:14
*** adjohn has quit IRC11:14
*** adjohn has joined #openstack-dev11:15
*** adjohn has quit IRC11:15
*** zoresvit has joined #openstack-dev11:15
*** adjohn has joined #openstack-dev11:16
*** adjohn has quit IRC11:17
*** vkmc has joined #openstack-dev11:17
*** donaldh has quit IRC11:22
*** dims has quit IRC11:22
*** adjohn has joined #openstack-dev11:23
*** adjohn has quit IRC11:24
*** adjohn has joined #openstack-dev11:24
*** adjohn has quit IRC11:24
*** alexryabkov has left #openstack-dev11:24
*** adjohn has joined #openstack-dev11:28
*** adjohn has quit IRC11:29
*** romcheg has joined #openstack-dev11:29
*** romcheg has left #openstack-dev11:29
*** adjohn has joined #openstack-dev11:29
*** adjohn has quit IRC11:29
*** adjohn has joined #openstack-dev11:30
*** adjohn has quit IRC11:30
*** ijw has joined #openstack-dev11:31
*** romcheg1 has joined #openstack-dev11:34
*** adjohn has joined #openstack-dev11:35
*** adjohn has quit IRC11:35
*** zoresvit has quit IRC11:36
*** zoresvit has joined #openstack-dev11:36
*** romcheg has joined #openstack-dev11:37
*** adjohn has joined #openstack-dev11:37
*** adjohn has quit IRC11:37
*** ijw has quit IRC11:38
*** ijw has joined #openstack-dev11:38
*** dims has joined #openstack-dev11:39
*** darjeeling has joined #openstack-dev11:39
*** romcheg2 has joined #openstack-dev11:39
*** BalleS_ has joined #openstack-dev11:40
*** romcheg has quit IRC11:41
*** aditirav has quit IRC11:42
*** romcheg1 has quit IRC11:42
*** susanne-balle has quit IRC11:43
*** aditirav has joined #openstack-dev11:44
*** alobbs has quit IRC11:44
*** adjohn has joined #openstack-dev11:45
*** adjohn has quit IRC11:45
*** alobbs has joined #openstack-dev11:46
*** adjohn has joined #openstack-dev11:47
*** adjohn has quit IRC11:48
*** mindpixel has quit IRC11:49
*** adjohn has joined #openstack-dev11:50
*** adjohn has quit IRC11:50
*** kpavel has quit IRC11:51
*** adjohn has joined #openstack-dev11:55
*** kpavel has joined #openstack-dev11:55
*** SergeyLukjanov has quit IRC11:57
*** adjohn has joined #openstack-dev11:58
*** adjohn has quit IRC11:58
*** adjohn has joined #openstack-dev11:58
*** adjohn has quit IRC11:59
*** adjohn has joined #openstack-dev12:00
*** adjohn has quit IRC12:01
*** adjohn has joined #openstack-dev12:03
*** adjohn has quit IRC12:03
*** adjohn has joined #openstack-dev12:04
*** adjohn has quit IRC12:04
*** adjohn has joined #openstack-dev12:05
*** adjohn has quit IRC12:05
*** SergeyLukjanov has joined #openstack-dev12:05
*** yamahata_ has joined #openstack-dev12:07
*** jprovazn has quit IRC12:09
*** adjohn has joined #openstack-dev12:11
*** adjohn has quit IRC12:11
*** jhesketh has quit IRC12:11
*** Qten has joined #openstack-dev12:12
*** adjohn has joined #openstack-dev12:15
*** adjohn has quit IRC12:15
*** demondust has quit IRC12:18
*** adjohn has joined #openstack-dev12:19
*** adjohn has quit IRC12:19
*** rnirmal has joined #openstack-dev12:19
*** adjohn has joined #openstack-dev12:20
*** adjohn has quit IRC12:20
*** adjohn has joined #openstack-dev12:21
*** adjohn has quit IRC12:21
*** vkmc has quit IRC12:21
*** adjohn has joined #openstack-dev12:22
*** vkmc has joined #openstack-dev12:22
*** adjohn has quit IRC12:22
*** matiu has quit IRC12:23
*** m4xmr has joined #openstack-dev12:25
*** adjohn has joined #openstack-dev12:27
*** adjohn has quit IRC12:27
*** adjohn has joined #openstack-dev12:30
*** adjohn has quit IRC12:30
*** adjohn has joined #openstack-dev12:32
*** johnthetubaguy has quit IRC12:32
*** adjohn has quit IRC12:32
*** anteaya has joined #openstack-dev12:35
*** pfreund has joined #openstack-dev12:36
*** adjohn has joined #openstack-dev12:36
*** adjohn has quit IRC12:36
*** adjohn has joined #openstack-dev12:36
jamespagejpich, thanks for pointing me in the right direction for those horizon issues12:36
*** adjohn has quit IRC12:37
*** adjohn has joined #openstack-dev12:37
*** adjohn has quit IRC12:37
*** optyx1 has joined #openstack-dev12:37
*** optyx1 has quit IRC12:38
*** bswartz has quit IRC12:38
*** adjohn has joined #openstack-dev12:39
*** adjohn has quit IRC12:39
*** devoid has joined #openstack-dev12:41
*** READ10 has joined #openstack-dev12:41
*** adjohn has joined #openstack-dev12:41
*** adjohn has quit IRC12:41
*** adjohn has joined #openstack-dev12:42
*** romcheg2 has left #openstack-dev12:42
*** adjohn has quit IRC12:42
*** BalleS__ has joined #openstack-dev12:43
*** rkukura has joined #openstack-dev12:44
*** adjohn has joined #openstack-dev12:44
*** adjohn has quit IRC12:44
*** baba has joined #openstack-dev12:45
*** adjohn has joined #openstack-dev12:45
*** adjohn has quit IRC12:46
*** fire has quit IRC12:46
*** olaph has quit IRC12:46
*** BalleS_ has quit IRC12:47
*** olaph has joined #openstack-dev12:47
*** adjohn has joined #openstack-dev12:49
*** adjohn has quit IRC12:49
*** dprince has joined #openstack-dev12:50
*** adjohn has joined #openstack-dev12:50
*** adjohn has quit IRC12:51
*** adjohn has joined #openstack-dev12:51
*** adjohn has quit IRC12:51
*** BalleS__ has quit IRC12:51
*** pfreund has quit IRC12:54
*** adjohn has joined #openstack-dev12:55
*** adjohn has quit IRC12:55
*** adjohn has joined #openstack-dev12:56
*** soody has joined #openstack-dev12:56
*** adjohn has quit IRC12:56
*** jgallard has quit IRC12:57
*** sride has quit IRC12:57
*** jgallard has joined #openstack-dev12:57
*** adjohn has joined #openstack-dev12:57
*** adjohn has quit IRC12:58
*** adjohn has joined #openstack-dev13:01
*** adjohn has quit IRC13:01
*** adjohn has joined #openstack-dev13:02
*** adjohn has quit IRC13:02
*** adjohn has joined #openstack-dev13:03
*** adjohn has quit IRC13:03
*** radez_g0n3 is now known as radez13:04
*** xga has joined #openstack-dev13:04
*** adjohn has joined #openstack-dev13:05
*** adjohn has quit IRC13:05
*** flaper87 has quit IRC13:05
*** flaper87 has joined #openstack-dev13:06
*** xga__ has quit IRC13:06
*** rkukura has quit IRC13:07
*** ladquin has joined #openstack-dev13:09
*** darjeeling has quit IRC13:10
*** martine has joined #openstack-dev13:10
*** timello has joined #openstack-dev13:10
*** aeperezt has joined #openstack-dev13:10
*** adjohn has joined #openstack-dev13:11
*** adjohn has quit IRC13:11
*** adjohn has joined #openstack-dev13:12
*** adjohn has quit IRC13:12
*** adjohn has joined #openstack-dev13:12
*** ladquin is now known as noisylaura13:12
*** adjohn has quit IRC13:12
*** aloga has quit IRC13:13
*** adjohn has joined #openstack-dev13:13
*** aditirav has quit IRC13:14
*** adjohn has quit IRC13:14
*** jgallard has quit IRC13:15
*** jgallard has joined #openstack-dev13:15
*** adjohn has joined #openstack-dev13:17
*** adjohn_ has joined #openstack-dev13:17
*** adjohn has quit IRC13:17
*** adjohn_ has quit IRC13:17
*** adjohn has joined #openstack-dev13:21
*** adjohn has quit IRC13:21
*** joesavak has joined #openstack-dev13:22
*** dkehn__ is now known as dkehn13:22
*** bknudson has joined #openstack-dev13:23
*** adjohn has joined #openstack-dev13:24
*** adjohn has quit IRC13:24
*** adjohn has joined #openstack-dev13:27
*** adjohn has quit IRC13:27
jpichjamespage: Glad that helped!13:29
*** wu_wenxiang has quit IRC13:29
jamespagejpich, very much so13:29
*** adjohn has joined #openstack-dev13:30
*** adjohn has quit IRC13:30
blamarmordred / jeblair: http://logs.openstack.org/24460/4/check/gate-nova-python26/18830/console.html.gz known bug or am I doing something crazy wrong for jenkins to not find tox?13:30
jpichjamespage: *catching up on Launchpad emails* Thanks for working on a fix!13:31
jamespagejpich, should land in raring shortly at which point i'll stick it in the trunk testing ppa and prepare for cloud-archive as well13:32
*** topol has quit IRC13:32
openstackgerritA change was merged to openstack/cinder: Fix _migrate_up in test_migrations  https://review.openstack.org/2427513:33
openstackgerritA change was merged to openstack/cinder: Bump version for Grizzly RC1 cut  https://review.openstack.org/2450613:33
*** adjohn has joined #openstack-dev13:33
*** adjohn has quit IRC13:34
*** adjohn has joined #openstack-dev13:34
*** adjohn has quit IRC13:34
jpichjamespage: That's great to hear, thanks13:34
*** adjohn has joined #openstack-dev13:35
*** adjohn has quit IRC13:35
*** dims has quit IRC13:36
*** giulivo has quit IRC13:36
*** adjohn has joined #openstack-dev13:43
*** adjohn has quit IRC13:43
*** imsplitbit has joined #openstack-dev13:45
*** adjohn has joined #openstack-dev13:46
*** adjohn has quit IRC13:46
*** kbringard has joined #openstack-dev13:47
*** kbringard has quit IRC13:48
*** giulivo has joined #openstack-dev13:49
*** dprince has quit IRC13:50
*** jruzicka has joined #openstack-dev13:51
*** adjohn has joined #openstack-dev13:52
*** adjohn has quit IRC13:52
*** rkukura has joined #openstack-dev13:52
*** adjohn has joined #openstack-dev13:55
*** adjohn has quit IRC13:55
*** jimfehlig has joined #openstack-dev13:56
*** adjohn has joined #openstack-dev13:56
*** adjohn has quit IRC13:56
*** yamahata_ has quit IRC14:01
*** adjohn has joined #openstack-dev14:01
*** adjohn has quit IRC14:01
*** adjohn has joined #openstack-dev14:02
*** adjohn has quit IRC14:02
*** kbringard has joined #openstack-dev14:02
*** adjohn has joined #openstack-dev14:02
*** adjohn has quit IRC14:02
*** andrewbogott_afk is now known as andrewbogott14:02
*** adjohn has joined #openstack-dev14:04
*** adjohn has quit IRC14:04
*** dprince has joined #openstack-dev14:05
*** adjohn has joined #openstack-dev14:06
*** adjohn has quit IRC14:06
*** cloudchimp has joined #openstack-dev14:06
*** adjohn has joined #openstack-dev14:07
*** adjohn has quit IRC14:07
*** trapni has quit IRC14:08
*** adjohn has joined #openstack-dev14:08
*** adjohn has quit IRC14:09
*** eharney has joined #openstack-dev14:09
*** topol has joined #openstack-dev14:10
davidkranzBTW I submitted http://summit.openstack.org/cfp/details/124 to Process 'Tempest as "gate" for the OpenStack trademark'14:12
*** adjohn has joined #openstack-dev14:12
davidkranzMonty is enthusiastic and has lots of ideas about this.14:12
*** adjohn has quit IRC14:13
*** stevemar has joined #openstack-dev14:13
davidkranzsdague:    ^^^14:14
sdaguedavidkranz: cool :)14:14
*** dprince has quit IRC14:15
openstackgerritA change was merged to openstack/quantum: Registers root_helper option for test_iptables_firewall  https://review.openstack.org/2352714:17
*** mindpixel has joined #openstack-dev14:18
*** adjohn has joined #openstack-dev14:18
*** adjohn has quit IRC14:18
*** adjohn has joined #openstack-dev14:19
*** soody has quit IRC14:19
*** adjohn has quit IRC14:19
*** adjohn has joined #openstack-dev14:21
*** adjohn has quit IRC14:21
*** otherwiseguy has joined #openstack-dev14:21
*** adjohn has joined #openstack-dev14:22
*** adjohn has quit IRC14:22
openstackgerritA change was merged to openstack/nova: Fixes Hyper-V live migration with attached volumes  https://review.openstack.org/2421014:24
*** adjohn has joined #openstack-dev14:25
*** adjohn has quit IRC14:25
openstackgerritA change was merged to openstack/nova: Imported Translations from Transifex  https://review.openstack.org/2413014:25
openstackgerritA change was merged to openstack/quantum: Set fake rpc backend impl for TestLinuxBridgeAgent  https://review.openstack.org/2414814:25
*** adjohn has joined #openstack-dev14:25
*** adjohn has quit IRC14:25
*** terryh has joined #openstack-dev14:26
*** adjohn has joined #openstack-dev14:29
*** adjohn has quit IRC14:29
*** woodspa has joined #openstack-dev14:30
*** adjohn has joined #openstack-dev14:30
*** adjohn has joined #openstack-dev14:31
openstackgerritA change was merged to openstack/horizon: Pass-in the initial value when performing a POST on Workflow Action. This fixes the call to self.changed_data, it allows django forms to be able to compare initial value with current value.  https://review.openstack.org/2419714:31
*** adjohn has joined #openstack-dev14:32
*** adjohn has quit IRC14:32
*** david-lyle has joined #openstack-dev14:32
openstackgerritA change was merged to openstack/tempest: Make skip_tracker bug keyword detection more robust.  https://review.openstack.org/2437114:35
*** soody has joined #openstack-dev14:36
*** adjohn has joined #openstack-dev14:36
*** adjohn has quit IRC14:36
*** susanne-balle has joined #openstack-dev14:36
*** adjohn has joined #openstack-dev14:37
*** adjohn has quit IRC14:37
*** varto has quit IRC14:38
openstackgerritA change was merged to openstack/tempest: Expand CLI test  https://review.openstack.org/2333114:38
openstackgerritA change was merged to openstack-dev/devstack: Add RUN_EXERCISES to exercise.sh.  https://review.openstack.org/2384614:38
openstackgerritA change was merged to openstack-dev/devstack: Extract HOST_IP default process to a function  https://review.openstack.org/2447014:38
openstackgerritA change was merged to openstack-dev/devstack: Deprecate use of fixed_range flag in nova conf  https://review.openstack.org/2428714:38
*** darjeeling has joined #openstack-dev14:39
*** adjohn has joined #openstack-dev14:41
*** adjohn has quit IRC14:41
openstackgerritA change was merged to openstack-dev/devstack: Enable swift by default.  https://review.openstack.org/2368914:41
*** adjohn has joined #openstack-dev14:41
*** adjohn has joined #openstack-dev14:42
*** adjohn has quit IRC14:42
*** markwash has quit IRC14:43
*** adjohn has joined #openstack-dev14:43
*** adjohn has quit IRC14:43
*** adjohn has joined #openstack-dev14:43
*** adjohn has quit IRC14:43
*** soody has quit IRC14:44
*** adjohn has joined #openstack-dev14:45
*** adjohn has quit IRC14:45
*** markwash has joined #openstack-dev14:46
*** markwash has quit IRC14:46
*** zoresvit has quit IRC14:48
*** zoresvit1 has joined #openstack-dev14:48
*** ProfFalken has quit IRC14:48
*** garyTh has joined #openstack-dev14:49
*** adjohn has joined #openstack-dev14:49
*** adjohn has quit IRC14:49
*** adjohn has joined #openstack-dev14:50
*** adjohn has quit IRC14:50
*** martine has quit IRC14:50
*** sirushti has joined #openstack-dev14:50
*** martine has joined #openstack-dev14:51
*** adjohn has joined #openstack-dev14:55
*** adjohn has quit IRC14:55
*** edmund has joined #openstack-dev14:55
*** monst_ has joined #openstack-dev14:55
*** adjohn has joined #openstack-dev14:55
*** cp16net is now known as cp16net|away14:55
*** cp16net|away is now known as cp16net14:56
*** adjohn has quit IRC14:56
*** colinmcnamara has joined #openstack-dev14:56
*** adjohn has joined #openstack-dev14:56
*** adjohn has quit IRC14:56
*** adjohn has joined #openstack-dev14:57
*** davetucker has joined #openstack-dev14:57
*** adjohn has quit IRC14:57
*** adjohn has joined #openstack-dev14:57
*** adjohn has quit IRC14:57
*** jsavak has joined #openstack-dev14:58
*** dims has joined #openstack-dev14:58
*** garyTh has quit IRC15:00
*** joesavak has quit IRC15:00
*** jbr_ has joined #openstack-dev15:00
*** adjohn has joined #openstack-dev15:02
*** adjohn has quit IRC15:02
*** adjohn has joined #openstack-dev15:03
*** adjohn has quit IRC15:03
crazedanyone here use vagrant at all for devstack?15:03
*** adjohn has joined #openstack-dev15:04
*** adjohn has quit IRC15:05
*** datsun180b has joined #openstack-dev15:07
*** adjohn has joined #openstack-dev15:08
*** adjohn has quit IRC15:08
*** adjohn has joined #openstack-dev15:10
*** adjohn has quit IRC15:10
guitarzandtroyer: ping15:12
*** xga has quit IRC15:12
*** anniec has joined #openstack-dev15:13
*** adjohn has joined #openstack-dev15:14
mordredblamar: yeah, that was my fault. it has been subsequently fixed15:15
blamarmordred: roger, thanks!15:15
ttxjgriffith: your RC1 is now up. Delayed by zuul getting lazy in the morning15:16
jgriffithttx: saw it :)15:16
jgriffithttx: thank you much!15:17
*** adjohn has joined #openstack-dev15:20
*** adjohn has quit IRC15:20
*** adjohn has joined #openstack-dev15:21
*** adjohn has quit IRC15:21
dtroyerguitarzan: dtroyer is alive15:21
*** koolhead17 has quit IRC15:23
openstackgerritA change was merged to openstack/nova: Fix exception message in Networks API extension  https://review.openstack.org/2424015:23
openstackgerritA change was merged to openstack/nova: Add missing API doc for networks-post-req.  https://review.openstack.org/2446915:23
*** adjohn has joined #openstack-dev15:24
*** adjohn has quit IRC15:24
*** sacharya has joined #openstack-dev15:25
guitarzandtroyer: I was going to ask about a cinderclient bug, I see it's been fixed in novaclient, so I probably don't need to ask anymore15:25
jgriffithDuncanT1: ping15:26
dtroyerok15:26
*** jasdeepH has joined #openstack-dev15:26
*** alunduil has joined #openstack-dev15:26
*** adjohn has joined #openstack-dev15:26
*** adjohn has quit IRC15:26
*** lloydde has joined #openstack-dev15:26
openstackgerritA change was merged to openstack/tempest: Change server create to use tracked create_server  https://review.openstack.org/2407715:26
*** Mandell has quit IRC15:27
openstackgerritA change was merged to openstack/nova: Fixes instance task_state being left as migrating  https://review.openstack.org/2401815:28
*** adjohn has joined #openstack-dev15:30
*** zoresvit1 has quit IRC15:30
*** alexisT has joined #openstack-dev15:31
*** alobbs has quit IRC15:33
*** adjohn has quit IRC15:34
*** imsplitbit has quit IRC15:35
*** kaushikc has joined #openstack-dev15:35
*** alobbs has joined #openstack-dev15:36
*** adjohn has joined #openstack-dev15:37
*** soody has joined #openstack-dev15:38
*** gyee has joined #openstack-dev15:38
*** amerine has joined #openstack-dev15:38
*** gyee has quit IRC15:39
*** pabelanger has joined #openstack-dev15:39
*** dprince has joined #openstack-dev15:40
*** soody has quit IRC15:42
*** gongysh has quit IRC15:42
*** gyee has joined #openstack-dev15:42
*** zoresvit has joined #openstack-dev15:45
*** bdpayne has joined #openstack-dev15:46
*** pixelbeat has quit IRC15:49
*** wu_wenxiang has joined #openstack-dev15:50
*** dev_sa has quit IRC15:51
*** jcmartin has joined #openstack-dev15:52
*** bl has joined #openstack-dev15:52
*** bl is now known as Guest2656115:53
openstackgerritA change was merged to openstack/python-openstackclient: Add optional arguments to volume list command  https://review.openstack.org/2411315:56
*** sirushti has quit IRC15:56
*** pnavarro has quit IRC15:56
*** esp1 has joined #openstack-dev15:59
*** ewindisch has joined #openstack-dev15:59
*** thatsdone has joined #openstack-dev16:00
*** monst__ has joined #openstack-dev16:00
crazedtopol: ayoung, live ldap tests pass in devstack using the ldifs there, i'll update my commit message and push it up16:02
*** cp16net is now known as cp16net|away16:02
*** cp16net|away is now known as cp16net16:03
*** monst_ has quit IRC16:03
openstackgerritA change was merged to openstack/python-openstackclient: Add snapshot support for v1 volume  https://review.openstack.org/2351016:03
*** aabes_ has joined #openstack-dev16:06
*** koolhead17 has joined #openstack-dev16:06
*** aabes_ has left #openstack-dev16:06
*** devoid has quit IRC16:06
*** trapni has joined #openstack-dev16:07
*** trapni has joined #openstack-dev16:07
jamespagegaryk, around? struggling to figure out whether the quantum scheduler stuff that landed should support built-in HA or not...16:10
garykjamespage: yes. i'm round16:11
garykjamespage: are you referring to the group scheduling?16:11
*** alexpilotti has joined #openstack-dev16:11
jamespagegaryk, scheduling for l3 routers and dhcps services on quantum gateway nodes16:12
garykgaryk: ok, understood. a very primitive scheduler has been implemented16:12
jamespagegaryk, yeah - I see stuff being spread in some chance-y way across nodes16:13
garykjamespage: that is, for dhcp it enables one to indicate which network can be treated by specific dhcp agents16:13
*** thatsdone has quit IRC16:13
garykfor the l3 agents it allows routers to be assigned to specific agents.16:13
garykte part that supports the HA did not land and hopefully we will be able to address this at the beginning of the H cycle16:13
jamespagegaryk, does it automatically re-assign routers to different agents if the agents go down?16:13
jamespagegaryk, gah - OK16:13
garykjamespage: sadly not at the moment.16:14
jamespagegaryk, I had implemented a HA approach for l3/dhcp agents based on active/passive across gateway nodes16:14
jamespagegaryk, that breaks with the scheduler introduction16:14
jamespagegaryk, is it possible to turn off the scheduler and revert of previous behaviour?16:15
*** stevemar has quit IRC16:15
jamespageof/to16:15
garykyes, i think that you can disable it. let me take a look.16:15
jamespagegaryk, ta16:15
*** rzito has joined #openstack-dev16:15
*** xga has joined #openstack-dev16:15
garykjamespage: which plugin are you using?16:16
*** rzito has quit IRC16:16
*** hemnafk is now known as hemna16:16
jamespagegaryk, ovs16:16
*** imsplitbit has joined #openstack-dev16:16
garykjamespage: please look in quantum.conf there are flags - network_auto_schedule and router_auto_schedule. i think (need to double check) that if these are false then it will be the old support16:17
jamespagegaryk, thanks - I'll take a look and do some testing16:17
garykok. pleaselet me know how it goes16:18
*** navid_ has quit IRC16:18
*** alop has joined #openstack-dev16:18
*** henrynash has joined #openstack-dev16:18
*** stevemar has joined #openstack-dev16:19
*** alunduil has quit IRC16:21
*** alunduil has joined #openstack-dev16:21
*** monst__ has quit IRC16:21
*** monst_ has joined #openstack-dev16:22
*** anniec has quit IRC16:22
*** trapni has quit IRC16:22
*** reidrac has quit IRC16:22
*** corXi has quit IRC16:24
*** salgado is now known as salgado-lunch16:25
*** pnavarro has joined #openstack-dev16:27
*** Guest26561 has quit IRC16:29
*** bl_ has joined #openstack-dev16:30
*** nati_ueno has joined #openstack-dev16:30
topolcrazed, I was trying patch 6 and running into issues in test_authenticate with one dictionary having enabled = True and the other not having it. How did you get around that16:30
*** bl_ has quit IRC16:30
*** sirushti has joined #openstack-dev16:30
*** maroh has quit IRC16:30
*** terry7 has joined #openstack-dev16:31
topolcrazed, you should also update the conf file and send that up as well. Yes folks will have to update their own password but they will like having all the other values set properly16:32
ayoungcrazed, very glad to hear it.  I wonder what the next step is to getting them to run as part of the gate?16:32
*** ewindisch has quit IRC16:33
wu_wenxiangHello, Could any nova core developer help to review & approve https://review.openstack.org/#/c/24508/?16:35
gordcdoes anyone know how to jump into debugger when running tox?16:36
wu_wenxiangAlso, Thanks nova core developer help to review https://review.openstack.org/#/c/24505/16:37
crazedtopol: i updated the conf file for sure, it's in patch 716:38
crazedayoung: does the gate install an ldap server?16:38
topolcrazed, I will pull patch 7 down and try that16:39
ayoungcrazed, not yet.  That is why we got devtack wired up with it.16:39
ayoungcrazed, but that is the plan16:39
*** kbrierly has joined #openstack-dev16:39
crazedayoung: what needs to change to get that to happen? i don't know anything about the openstack jenkins cluster yet16:40
openstackgerritA change was merged to openstack/keystone: Fixes bug 1151747: broken XML translation for resource collections  https://review.openstack.org/2429016:41
uvirtbotLaunchpad bug 1151747 in keystone "List endpoints through XML interface using keystone v3 is not successful" [Medium,In progress] https://launchpad.net/bugs/115174716:41
*** dontalton has joined #openstack-dev16:43
*** dprince has quit IRC16:46
topolcrazed, patch 7 works GREAT.   I have only one small change.  In the conf file can you set user to be the following:16:47
topoluser = dc=Manager,dc=openstack,dc=org16:47
*** soody has joined #openstack-dev16:47
topolcrazed, that way you stuff will run with devstack install of openldap by only having to change the password16:48
openstackgerritA change was merged to openstack/python-novaclient: Set up debug level on root logger.  https://review.openstack.org/2432916:48
*** eglynn has quit IRC16:48
*** jgallard has quit IRC16:50
*** SergeyLukjanov has quit IRC16:51
crazedtopol: hm on my devstack ubuntu installed it with admin16:51
crazedbut yeah i can make it manager16:51
*** aabes has joined #openstack-dev16:52
*** Mandell has joined #openstack-dev16:53
*** anniec has joined #openstack-dev16:54
topolcrazed, see http://fpaste.org/nCLW/  this is from the file we use in devstack to configure the user.  Did you set the values in devstack localrc to install and configure ldap or was it installed some other way?16:56
*** russellb is now known as rustlebee16:57
*** dansmith is now known as SteelyDan16:57
*** salgado-lunch is now known as salgado16:58
crazedtopol: after running the stack.sh, i installed slapd manually, then added the openstack.ldif file which is probably why i wound up with cn=admin16:58
*** romcheg has joined #openstack-dev16:58
*** romcheg has joined #openstack-dev16:59
topolcrazed, yes. that solves the mystery. If you let devstack install openldap for you will get the dc=Manager16:59
crazedtopol: does stack.sh do that or how does devstack install openldap?17:03
*** mindpixel has quit IRC17:06
topolcrazed, in your localrc add ldap to ENABLED_SERVICES and set the following values:17:06
topolKEYSTONE_IDENTITY_BACKEND=ldap17:06
topolKEYSTONE_CLEAR_LDAP=yes17:06
*** manas has quit IRC17:07
*** markwash has joined #openstack-dev17:08
*** eglynn has joined #openstack-dev17:10
*** xga has quit IRC17:10
topolcrazed, ayoung, please check out http://fpaste.org/vgWY/  The initial subtrees are slightly different between devstack and crazed's code.  Shouldnt we have these match exactly?17:10
*** rafaduran has quit IRC17:10
ayoungtopol, well, he needs groups, so there is that.17:11
*** bdpayne has quit IRC17:11
*** roampune has joined #openstack-dev17:12
ayoungtopol, and the differences on Projects are suspect.17:12
*** bdpayne has joined #openstack-dev17:12
ayoungcrazed, do you know if the changes on Project are required for yours to run, or are they vestiges of trial and error?17:12
*** pnavarro has quit IRC17:13
topolayoung, I'd like them to match exactly.  That way I'll sleep better knowing devstack is matching exactly what the test suite does. i17:13
topolayoung, yes that one scared me17:13
ayoungtopol, agreed.  Question is which needs to change for Projects17:13
*** otherwiseguy has quit IRC17:14
*** dims has quit IRC17:14
*** NobodyCam has quit IRC17:14
*** adjohn has quit IRC17:15
*** yidclare has joined #openstack-dev17:16
*** xga has joined #openstack-dev17:17
*** roampune has quit IRC17:17
*** noslzzp has quit IRC17:18
*** aabes has left #openstack-dev17:19
*** roampune has joined #openstack-dev17:19
*** koolhead17 has quit IRC17:20
*** noslzzp has joined #openstack-dev17:21
*** m4xmr has quit IRC17:22
crazedayoung: topol, i can make those match, it's just that i didn't use ldapadd against the openstack.ldif file, instead created the tree using the python library17:22
crazedwhen running the test, what's assumed to be the location of the ldif file included in devstack?17:23
*** kagan has joined #openstack-dev17:23
crazedseems that could change depending where someone's running it from17:23
ayoungcrazed, its in docs/ldap17:23
ayoungcrazed, yeah, this is just something to keep in sync manually17:23
crazedokay17:23
*** pinky has quit IRC17:23
ayoungtopol, can you get the groups thing synced up as well?17:24
*** pinky has joined #openstack-dev17:25
topolayoung, yes17:25
topolcrazed, I agree with ayoung that we should just sync it manually and you can continue to use your python library to create the initial subtrees17:25
crazedsounds good, we don't need the groups stuff anymore correct?17:26
topolayoung crazed should just need to add small section to do Groups like shown in http://fpaste.org/vgWY/17:26
topolcrazed, Groups is being coded as we speak so having it ready to go by your code will be great17:26
crazedah! okay17:27
crazedthat's where i was missing the disconnect17:27
*** xga has quit IRC17:27
crazedthe ou=tenants part of projects i can change easily as well17:27
topolcrazed, you did a great job. It will be really helpful to have a full liveldap test suite avail!!!17:27
crazedyeah for sure, the fake ldap stuff doesn't work too well since ldap is a complex beast17:28
*** Ryan_Lane has joined #openstack-dev17:28
*** eglynn has quit IRC17:28
topolcrazed, I agree! +1000. In fact I shun the fakeldap code :-)17:29
*** joesavak has joined #openstack-dev17:29
ayoungfakeldap is a mock object, not intended to be a real DS.17:30
ayoungand, ahem, htank you for *fixing* the live LDAP....17:30
*** SergeyLukjanov has joined #openstack-dev17:30
bknudsonwould be nice if there was an easy to embed lightweight in-memory LDAP server.17:31
ayoungBut it does go to show that the people that have been working on LDAP haven't been using it.  Which is kindof scary in its own right17:31
bknudsonwww.opends.org17:31
*** jsavak has quit IRC17:32
*** zoresvit has quit IRC17:32
ayounghttp://www.fefe.de/tinyldap/17:32
*** alop has quit IRC17:33
henrynashayoung: quick one for you…do you know where the CredentialNotFound exception is defined?  We reference it in the sql backend, but I can't see where we define it?17:33
ayounghenrynash, almost certainly in keystone/exceptions.py17:33
bknudsonhenrynash: my eclipse shows it as not defined.17:33
ayounghrm  maybe an omission?17:34
henrynashayoung: nope, that's where I thought it shuold17:34
henrynashshould be17:34
ayounghenrynash, where is it referenced?17:34
henrynashayoung: sql backend for identity17:34
ayoungsqlbackend for identity?17:34
henrynashayoung: I was trying to test for it in the domain deletion test code I am writing17:34
ayounghenrynash, not in my tree it isn't17:35
openstackgerritA change was merged to openstack/keystone: xml_body returns backtrace on XMLSyntaxError  https://review.openstack.org/2444117:35
henrynashayoung: looks like we missed it…I'll add it in my patch17:35
ayounglets see when that line was defined...17:35
openstackgerritA change was merged to openstack/nova: Fix OS-DCF:diskconfig XML handling  https://review.openstack.org/2388917:35
openstackgerritA change was merged to openstack/python-novaclient: Remove unused import  https://review.openstack.org/2450817:35
*** epim has joined #openstack-dev17:36
ayoung399cb4cc17:36
*** davetucker has quit IRC17:36
ayounghenrynash, that makes me suspect that the code is not covered by unit tests17:38
ayounglets confirm....17:38
bknudsonHere's a python one: http://pythonhosted.org/dataflake.fakeldap/17:39
henrynashayoung: we do positive testing in test_v3_identity, but no negative testing17:39
ayoungbknudson, any idea if it is any good?17:40
*** rushiagr has left #openstack-dev17:40
bknudsonayoung: I haven't used any of them.17:40
ayoungbknudson, me neither, just wondering if there was any feedback on the python one.  Seems like an improvement over ours17:43
bknudsonayoung: and it should be easy to pull in.17:43
*** ththandle has joined #openstack-dev17:43
*** otherwiseguy has joined #openstack-dev17:43
openstackgerritA change was merged to openstack/glance: Document the os options config for swift store  https://review.openstack.org/2449817:44
*** diogogmt has joined #openstack-dev17:48
*** ff has joined #openstack-dev17:48
*** noslzzp has quit IRC17:48
*** flaper87 has quit IRC17:49
*** torandu has joined #openstack-dev17:49
*** roampune has quit IRC17:50
*** roampune has joined #openstack-dev17:50
*** psedlak has quit IRC17:53
*** morganfainberg has joined #openstack-dev17:53
*** m4xmr has joined #openstack-dev17:53
*** monst_ has quit IRC17:55
sdaguechmouel: so with the latest round of swift enablement patches, I'm again running into ports picked by swift turn out to conflict with X ports17:56
sdagueand as such, it fails to come up17:56
sdagueyeh, if you have x forwarding enabled in ssh, you'll likely clobber the port17:58
*** monst_ has joined #openstack-dev17:58
*** koert has quit IRC17:59
topolayoung, fyi, how we were testing the live ldap was running the individual ldap tests.  We weren't running the full suite.  I agree that was not a good practice... :-)17:59
*** Mathnerd314_ is now known as Mathnerd31417:59
ayoungtopol, and now we can.  very happy for crazed 's support there!18:00
topolayoung, me too!18:00
*** monst_ has quit IRC18:02
*** bswartz has joined #openstack-dev18:02
*** gyee has quit IRC18:04
crazedi'll have those last couple changes pushed up in a sec here, just wanted to finish up tests for my dereferencing support18:04
*** sulo_ has quit IRC18:05
*** sulrich_ has joined #openstack-dev18:05
*** bdpayne has quit IRC18:08
*** alunduil has quit IRC18:09
*** Mandell has quit IRC18:09
*** fesp has joined #openstack-dev18:09
*** ff has quit IRC18:10
*** adjohn has joined #openstack-dev18:11
*** derekh has quit IRC18:11
*** bdpayne has joined #openstack-dev18:12
*** cp16net is now known as cp16net|away18:13
*** iartarisi has quit IRC18:13
*** rushiagr has joined #openstack-dev18:14
*** afazekas has quit IRC18:14
*** devoid has joined #openstack-dev18:14
sdaguedtroyer: you about?18:14
*** sulrich_ has quit IRC18:15
*** fesp has quit IRC18:15
sdagueI'm still tripping over the swift bits because of port conflits - https://review.openstack.org/#/c/24546/18:15
*** sulrich_ has joined #openstack-dev18:15
dtroyersdague: here18:15
sdaguedtroyer: did you try to run with the swift enabled by default?18:15
dtroyerI didn't see that, but I have X forwarding off18:15
*** fesp has joined #openstack-dev18:15
sdagueyeh, I don't :)18:16
sdagueand I don't expect everyone that has devstack does18:16
dtroyerright…18:16
*** edmund has quit IRC18:16
sdaguebut this brings up an issue of not having well known ports for openstack18:17
dtroyerthat's a fun one.  like a lot of other things that could benefit from some coordination.  you know, like a central group that we could talk to that keeps a list of such things.18:18
dtroyer</snark>18:18
*** darraghb has quit IRC18:19
*** burris has quit IRC18:19
sdague:)18:20
*** torandu has quit IRC18:20
sdagueyeh, agreed18:20
crazedayoung: topol, https://review.openstack.org/24237 patch 9 should be ready for review18:20
*** arosen has quit IRC18:20
ayoungcrazed, OK, so I should be able to run devstack with the LDAP setup for keystone and get the right db.  How are you setting up the DB?18:21
sdaguedtroyer: yeh, that's probably a good topic for summit discussion18:21
sdagueor at least an email thread18:21
*** Mandell has joined #openstack-dev18:21
*** alunduil has joined #openstack-dev18:22
dtroyerlike the common requirements?  It would just be more of the same.18:22
*** melwitt has joined #openstack-dev18:23
*** jpich has quit IRC18:23
*** dolphm has joined #openstack-dev18:24
*** dsanders has joined #openstack-dev18:24
*** comstud is now known as bearhands18:25
*** rushiagr has quit IRC18:26
sdaguedtroyer: like which common requirements?18:26
topolcrazed, in a mtg right now what will review/run it in about 30 mins.  THANKS18:26
*** rushiagr has joined #openstack-dev18:26
topolerr will review in 30 mins18:26
crazedayoung: i'm using the defaults of devstack unless you're asking about something else?18:27
dtroyersdague: the attempt to maintain a list of common python dependencies to coordinate changing releases18:27
sdaguedtroyer: yeh, well :)18:27
sdaguethat one is getting closer18:27
dtroyerbut there will be some who do their best to ignore it18:28
sdagueyeh, well.18:28
*** dprince has joined #openstack-dev18:29
ayoungcrazed, nope.  Lets see what happens...18:30
dolphmayoung: this is just for a couple new tests- https://review.openstack.org/#/c/24473/18:30
dolphmayoung: just wanted to make sure we shipped with test coverage for that behavior18:31
dolphmhenrynash: ^18:31
*** esp1 has quit IRC18:31
ayoungdolphm, so on my patch...why do you insist on making me rewrite everyone elses interface into the token API just so I can index user_id?  Actually, I agree with you, I'm just whining.18:33
ayoungBUt the reason I submitted it that way is other things assume it is user { id:'asdas'}  and I need user_id.18:33
*** flaper87 has joined #openstack-dev18:33
sdaguedtroyer: I might add some cinder bits to the clean script. Something makes iscsi become sad over time on an ubuntu install18:33
sdaguewhen you do a lot of devstack updates18:34
henrynashdolphm: yep, good to have that, a number of people ask about this18:34
sdagueI assume burning the iscsi stuff to the ground might help18:34
ayoungAnd right now I lack the motivation to go through and rewrite every where that does the user {id} thing18:34
*** lmatter has joined #openstack-dev18:35
*** rushiagr has quit IRC18:35
*** fesp has quit IRC18:35
dtroyersdague: please do, that was one area I know is incomplete.  and that's the point of clean, to get rid of as much as possible.  except maybe quantum.18:35
*** wu_wenxiang has quit IRC18:35
*** rushiagr has joined #openstack-dev18:37
dolphmayoung: it seems broken :(18:38
sdaguedtroyer: have you seen that same sort of behavior, where volumes tests just stop working after some time?18:38
sdagueor are you not running tempest much18:38
dolphmayoung: i really like the patch, i just don't like that part :P18:39
dtroyersdague: I'm not running tempest much at all.  But just in exercises, volume tests are usually the second to fail, after euca, and then succeed when run separately.18:40
ayoungdolphm, so...I can either change everywhere that calls token create, and that reads tokens and assumes it is getting user {id}  or I can pop user_id off of each and every token coming out of each of the backends.18:40
*** bknudson has left #openstack-dev18:40
*** bknudson has joined #openstack-dev18:40
*** rnirmal has quit IRC18:40
ayoungdolphm, seems to me duplicating the user {id} and user_id is the least noisome approach/18:40
ayoungBut next would be18:40
ayoungto drop user {id}18:41
*** davetucker has joined #openstack-dev18:42
dolphmayoung: i think the best solution to provide user_id and expect it in the response - everywhere18:42
*** cp16net|away is now known as cp16net18:42
ayoungdolphm, that is what I had origianlly.18:43
ayoungso it is ok to revert to that?18:43
dolphmayoung: link first?18:45
*** colinmcnamara has quit IRC18:45
*** ththandle has left #openstack-dev18:49
ayoungdolphm, back two patches, I think....https://review.openstack.org/#/c/24010/7/tests/test_backend.py18:49
openstackgerritA change was merged to openstack/python-openstackclient: Add role v3 support to identity in openstack client  https://review.openstack.org/2424718:50
ayoungdolphm, I think that adding it in if it is missing is OK in this case, though18:50
dolphmayoung: my only problem with that is that you're providing user twice, and then expecting it twice in the response?18:50
ayoungwe require user {id}18:50
*** melwitt has quit IRC18:50
ayoungand if user_id is provided, we should just ensure it matches18:51
dolphmayoung: if you removed "'user': {'id': 'testuserid'}" from that test, i think it'd be good18:51
ayoungand provide it twice in the response.18:51
ayoungdolphm, I can do that...18:51
*** edmund has joined #openstack-dev18:51
ayoungthat was my "next" option above18:51
*** sulo_ has joined #openstack-dev18:51
ayoungdropping the user {id} from the create call...and everywhere18:51
ayoungbut that might be painful.18:52
dolphmayoung: so it should look like this, with no other changes to the test, correct? http://paste.openstack.org/raw/33765/18:52
*** melwitt has joined #openstack-dev18:52
*** metral has quit IRC18:52
dolphmayoung: i know it'll be painful, but the result will be really clean18:52
dolphmayoung: this is when i owe you another beer at the summit :)18:53
*** ndipanov has quit IRC18:53
ayoungdolphm, I think that is good.  It does not reflect what you see in the token data, just in the record to/from the backend.18:53
ayoungI'll do that.18:53
dolphmayoung: correct18:53
ayoungdolphm, but...it will length the time to get in this patch, and make a bunch of changes that are not related to this...can I do that in a separate patch?18:54
dolphmayoung: side goal -- bring the v2 and v3 auth controllers back together so we're not duplicating logic between them -- i think this will be a significant step in that direction18:54
ayoungbravo18:54
ayoungOK, my proposal18:55
dolphmayoung: i'm cool with a separate patch, but i'd like to hold off on merging this one we have both in review?18:55
ayoungI'd rather get this in unless there are other issues with it.18:55
*** nati_ueno has quit IRC18:55
ayoungI don't like leaving the Critical unsolved18:55
ayoungeven if we make the new one a release blocker18:55
ayoungIt will be an API consistency issue, not a security issue18:56
*** vkmc has quit IRC18:56
*** nati_ueno has joined #openstack-dev18:56
*** radez is now known as radez_g0n318:56
*** kaushikc has quit IRC18:57
dtroyer++consistency        [just wanting to encourage that sort of thinking…]18:57
*** arosen has joined #openstack-dev18:57
ayoungdtryoer consistency now has 1 point of karma18:57
*** alop has joined #openstack-dev18:57
*** kaushikc has joined #openstack-dev18:57
arosennati_ueno: ping18:59
dolphmayoung: does the latest patch address existing tokens in the table?19:00
arosengaryk: ping19:00
nati_uenoarosen: pong19:00
dolphmayoung: i don't see a table.truncate() or whatever the sqlalchemy call would be19:00
ayoungdolphm, nope.  But earlier patches drop all tokens.  I can add that in.19:00
ayoungwill do19:01
dolphmayoung: *ducks* would it be impossible to write a data migration?19:01
dolphmayoung: (to preserve existing tokens)19:01
arosennati_ueno: It looks like after the SubnetRoute change went in if you add a SubnetRoute to a network the dhcp agent doesn't pick up that change unless you restart it.19:01
ayoungdolphm, It would not make sense to19:02
nati_uenoarosen: It is bug19:02
arosenis it known?19:02
ayoungdolphm, tokens are ephemeral.19:02
dolphmayoung: i also view the token table as an audit record19:02
nati_uenoarosen: IMO, summit may report the bug19:02
ayoungAnd I would rather not keep them around.  Upgrade or downgrade.19:02
arosenI'm looking into fixing it but i figured i'd ping you if you knew what it was off hand.19:02
arosenthanks let me check it out.19:02
ayoungdolphm, yeah, but then dump it before migrating19:02
*** markwash has quit IRC19:03
* ayoung needs to write that rpc to drump expired tokens at some point19:03
dolphmayoung: include a one-line comment as to why we're opting to delete tokens inside the migration19:03
ayoungwill do19:03
dolphmayoung: thanks!19:03
ayoungdolphm, so, implementation details aside, do you like the HTML approach?19:04
nati_uenoarosen: I forwarded the mail from Sumit. Thank you for your working on it19:04
ayoungI'd like it to be a collaborative effort19:04
arosenthx19:04
ayoungand this is just the first shot across the bow.19:04
dolphmayoung: one more thing -- file a bug for the new work, tag it as "grizzly-rc-potential" and i'll +2/approve the current review19:04
*** nunosantos has joined #openstack-dev19:05
*** rushiagr has left #openstack-dev19:05
ayoungdolphm, will do19:05
*** novas0x2a|laptop has joined #openstack-dev19:05
dolphmayoung: just barely skimmed the html patch (mostly saw that it was a new feature and stopped), so i can't comment too much19:05
openstackgerritA change was merged to openstack/python-openstackclient: Removed unused imports.  https://review.openstack.org/2453819:06
ayoungdolphm, try applying it and looking at it in a running instance19:07
ayoungI need a publicly accessable demo machine to show stuff like this in the future.  I wonder where I can get one.19:07
dolphmayoung: redhat doesn't have a public cloud? ;)19:08
*** alunduil has quit IRC19:08
*** boris-42 has joined #openstack-dev19:09
*** nati_ueno has quit IRC19:10
*** Nachi has joined #openstack-dev19:10
*** alunduil has joined #openstack-dev19:12
ayounghttps://bugs.launchpad.net/keystone/+bug/1155750   and updated https://review.openstack.org/#/c/24010/19:12
uvirtbotLaunchpad bug 1155750 in keystone "remove duplication of user id specified in token create" [Undecided,New]19:13
ayoungdolphm, no, we rent space from other providers.  We have openshift, but that wouldn't let me run a Keystone instance.  NOt sure I could even do it with trystack, but that is a possibility19:14
*** danpb has quit IRC19:15
*** jruzicka has quit IRC19:17
dolphmayoung: pep819:18
ayoungdolphm, which means I should run the whole body of tests...I'm trying to do too much too quickly.  Thanks19:19
dolphmayoung: what did you change from 9? i was fine with that one + the new bug19:19
ayoungdolphm, truncated the table19:19
ayoungplus comments19:19
dolphmayoung: ah19:20
ayoungdolphm, at the same time, I was trying to test the liveldap test fix from crazed and get a FreeIPA install working.  I need to try to multitask less.19:20
*** kaushikc has quit IRC19:21
*** jruzicka has joined #openstack-dev19:22
*** kaushikc has joined #openstack-dev19:23
henrynashayoung: do you think we need to delete tokens and trusts when we delete a user?19:24
ayounghenrynash, no19:24
henrynashayoung: rationale?19:25
ayounghenrynash, invalidating tokens already happens19:25
ayoungtrusts are useless19:25
ayoungleaving the trusts is harmless, and probably a decent audit item19:25
henrynashayoung: what causes the tokens to be revoked on a user delete?19:26
ayoungoooh....let me make sure that assumption is correct.19:26
openstackgerritA change was merged to openstack/nova: Drop gzip flag from tar command for OVF archives  https://review.openstack.org/2432019:26
ayounghenrynash, ok, we need to delete tokens for the user19:26
henrynashayoung: agreed19:26
openstackgerritA change was merged to openstack-dev/devstack: Add clean.sh  https://review.openstack.org/2436019:26
openstackgerritA change was merged to openstack-dev/devstack: Fix Swift config dir variable name  https://review.openstack.org/2435819:26
openstackgerritA change was merged to openstack/quantum: Pin SQLAlchemy to 0.7.x  https://review.openstack.org/2425019:27
henrynashayoung: what about credentials?19:27
ayounghenrynash, ask dolphm19:27
henrynashayoung: :-)19:27
*** yolanda_ has quit IRC19:27
ayounghenrynash, what do you think?  will get credentials fail?  Does it do a get_user first?19:27
dolphmhenrynash: https://review.openstack.org/#/c/24010/ <-- small change to the migration sicne you +2'd19:27
dolphmhenrynash: delete credentials; it's something the user "owns"19:28
henrynashayoung: I'm actually thinking about DB clean up…and deleting a domain (which for referential integrity needs to delta anything that has FKs to users or projects owned by the domain)19:28
dolphmhenrynash: and +1 for not deleting tokens and trusts (but definitely revoke them!)19:29
dolphmhenrynash: or disable (?) in the case of trusts -- can't remember what terminology we were using there19:29
ayoungdolphm, delete is the API, which marks them as deleted in the backend19:29
ayoungso deleting them is safe19:29
dolphmhenrynash: ^19:29
dolphmhenrynash: soft delete ftw19:30
henrynashdolphm: yes, I didn't mean we physically remove them, just make them as deleted via the delete_token api19:30
ayoungbut a trust checks if the user is active before creating a token, so it really shouldn't matter.  BUt better safe than sorry19:30
*** beagles` has joined #openstack-dev19:30
henrynashdolphm: what about credentials…should we delete relevant ones when we delete a user or a project?19:30
dolphmhenrynash: i think it's revoke_user_tokens in the driver?19:30
dolphmhenrynash: yes19:31
henrynashdolphm: Ok, I thought so19:31
* ayoung would give one of his remaining molar to have all this in one SQL database and to use real foreign keys for this19:31
ayoungtopol, doe this look right to you?19:35
ayoung ldapsearch -x -D "dc=Manager,dc=openstack,dc=org" -H ldap://localhost  -w test  -b ou=Roles,dc=openstack,dc=org"19:35
dolphmayoung: i would *love* *love* *love* to have a unified sql driver for deployments that only want to use sql19:35
ayoungah, extra quote19:35
dolphmayoung: i have no idea how we'd manage two sets of migrations and stuff though19:35
dolphmayoung: (or some unified high performance driver)19:35
ayoungdolphm, I would love to get rid of all the backends but SQL.  Especially LDAP.  Who ever wrote that was smoking crack.19:36
bknudsonayoung: but it's been fixed up now, right? with all the changes going in19:36
dolphmbknudson: it's a LOT better in grizzly, yes19:37
bknudsonayoung: now it looks up users and dereferences.19:37
ayoungbknudson, band-aid on a sucking chest wound, I tell you!19:37
ayoungbknudson, thing is, no one really wants it19:37
*** Yada has joined #openstack-dev19:37
bknudsonayoung: dolphm: I mentioned it in a review ... this is putting lipstick on a pig19:37
crazedi want it!19:37
ayoungWhat people really want is a SQL database that acts as a local cache to a subset of LDAP data19:37
dolphmayoung: without an alternative, there's a lot of demand for it19:37
crazedthat's true though, i don't need all of the service users and whatnot in ldap19:38
ayoungbknudson, I know, and I spent so much on that dman sow19:38
dolphmayoung: we're almost there with pluggable auth19:38
bknudsonayoung: dolphm: it's confusing to users because we say we support ldap ... but it's really not the ldap they want.19:38
ayoungdolphm, nope19:38
topolayoung, here is what I use: ldapsearch -x -w arvind -H ldap://localhost -D dc=Manager,dc=openstack,dc=org -x -b dc=openstack,dc=org19:38
ayoungdolphm, we need to be able to pull in users into the local sql store19:38
ayoungthen use central LDAP just for checking passwords19:38
dolphmayoung: theoretically an auth plugin is totally capable of doing that19:38
topolcrazed reviewing your stuff as we speak19:38
dolphmayoung: we give plugins access to the identity_api so they can create & look up users19:39
ayoungdolphm, yep...that should be done early in Havana19:39
topoldolphm, we will need a pluggable token creation to complete the puzzle.  Pluggable authentication is great but we need pluggable authorization to complement it19:39
*** Nachi has quit IRC19:40
ayoungtopol, you mean an alternative to the bearer tokens?19:40
topolIm drinking the gyee Kool Aid19:40
ayoungtopol, ok, so here are the range of options19:40
ayoung119:40
ayoungstick a public key in the existing tokens19:40
ayoung219:40
ayounguse the PKE authorization certs and do everything with X50919:40
ayoung319:40
ayounguse kerberos including the Kerberos authorization info in the service ticket extensions19:41
ayoung419:41
ayoungsome crappy web SSO mechanism that is broken by design19:41
ayoungSomeone probably would say SAML19:41
crazedoauth219:41
ayoungcrazed, I covered that in #419:42
crazedyep haha19:42
ayoungcrazed, I'm not doing anything that doesn't include real crypto.  I've spent enough money on this pig's cosmetics as it is19:42
dolphmtopol: +119:43
ayoungPersonally, I am tempted to jsut gut through what it would take to get kerberos working to an eventlet server19:43
*** brich has joined #openstack-dev19:43
ayoungthen we just have to figure out how to hand out TGTs over HTTP19:43
*** nati_ueno has joined #openstack-dev19:43
ayoungwell, service tickets too19:43
ayoungbascially proxy port 88 over 44319:44
* ayoung goes back tor trying to simplebind to SLAPD19:44
brichayoung: service tickets have zero context, so the ap_req is what most folks end up using for picking up "who is this" information19:45
topolayoung, dolphm, the concept is if a customer already has identity stuff or groups or roles defined how can we enable that to be releveraged and keystone is in the middle but we reduce a lot of rework by the customer if the proper plugin can be created in keystone19:47
ayoungbrich, nah, there is another standard, there already is19:47
ayoungbrich, I can look it up, I never remember the name19:48
ayoungKerberos Authentication Group Membership Extensions   or something like that19:48
topol(topol went to the gyee Kool Aid Happy Hour..)19:48
topolCustomers dont want to manage stuff twice, once in their identity mgr and also in keystone if it can be avoided19:51
dolphmtopol: did i miss happy hour? :(19:52
topolBut we can discuss more in Portland19:52
*** otherwiseguy has quit IRC19:52
*** beagles` has quit IRC19:52
crazedyeah where you guys located?19:53
topolIm sure we will do lots of Happy Hours in Portland???19:53
*** beagles` has joined #openstack-dev19:53
crazedin nyc myself19:53
topolcrazed, I am in RTP (Raleigh) NC19:53
crazedcool19:54
crazedcoworker lives there currently19:54
zykes-happy hours ? :p19:54
zykes-i'll join :D19:55
zykes-ayoung: you didn't answer the other day btw :)19:55
zykes-is openid connect a cool thing ? ;)O19:55
*** dims has joined #openstack-dev19:59
brichayoung: the Kerberos Authentication Group Memberships Extension is how MSFT encodes their group info into the PAC portion of the credential, which is encrypted in the service's session key, so it's a little difficult for most folks to get to.  I hacked into it about 10 years ago, and it's gnarly to get in, and platform-specific once you do19:59
ayoungzykes-, nothing about any of the web specific IdM protocols are the least bit cool in my book.  But I am a bitter old man.  Well, not that old.  But bitter.20:00
ayoungbrich, nah, there is something in MIT kerberos we can use...when I am less busy I will look it up20:00
ayoungbut it is bascially a cleaned up PAC IIRC correctly20:00
ayoungits not MSFT specific20:01
zykes-ayoung: so what's better to use then ? ;p20:01
*** mrunge has quit IRC20:01
ayoungzykes-, probably Kerberos or X509 as I stated above.  Or just adding a public key to a token would make more sense really20:01
ayoungzykes-, Ideally, we would have one document that20:01
zykes-ayoung: I like http though...20:02
ayoungA can be used to secure the connection against evesdropping, B) authenticate the user and C) provide data used for authorization decisions20:02
ayoungzykes-, what about AMQP?  We need to secure that, too20:02
ayoungzykes-, and https works well with both kerberos and X50920:02
* zykes- smells a but20:03
*** beagles` has quit IRC20:03
ayounghence the Web Specific "protocols" are not the right way to go20:03
zykes-ah20:03
ayounghttps with crypto needs X509 anyway20:03
ayoungbut X509 client certs don't provide a place to put auth data20:03
zykes-you going for x509 ?20:03
ayoungand since we would want short time outs20:03
*** beagles` has joined #openstack-dev20:03
ayoungwe would need to do20:03
ayoungX509 identity certs, plus an OCSP staple, plus an authorization cert20:04
zykes-ayoung: for our use case for a simple "identity" solution it sounds way overkill :p20:04
*** kagan has quit IRC20:04
ayoungzykes-, no, it is not.20:04
ayoungour use case is anything but simple20:04
ayounganyone who says otherwise is selling something20:04
zykes-ayoung: I meant "my" use case sorry (billingstack)20:05
ayoungcloud is going to support all of the servers running all of the applications that matter.  Getting IdM right is kindof important20:05
ayoungzykes-, only if you are the only person that is going to use it20:05
brichayoung: so x509v3 extensions?  most folks think vanilla certs are challenging enough20:05
ayoungbrich, I'm torn20:06
*** sulo_ has quit IRC20:06
ayoungthing is, if we just do server side certs, we just need to solve the rest of the problems ourselves20:06
ayoungthe server can be convinced that we are who we say we are,20:06
* zykes- wonder what AWS uses there20:06
ayoungso client certs are not essential20:07
ayoungbut server side certs are, which means we basically have to tie in with a CA anyway20:07
ayoungso we are already dealing in certs20:07
ayoungbut right now, PKI tokens are still bearer tokens, which are bad20:07
zykes-ayoung: is certs the "only" way to go ?20:07
zykes-or the best way20:07
ayoungzykes-, I'm not sure if it is the best way, and it is not the only way20:07
zykes-what "ways" do you think to use ? ;)20:08
ayoungzykes-, I am starting to think that a public key in our bearer tokens, and then signing the requests with the corresponding private key is as good as we are going to et20:08
ayoungKerberos is also an option, but it has some pretty tough problems to solve before it can be consumed by openstack20:08
zykes-ayoung: how does other projects do this then ?20:09
zykes-surely there are others ? :p20:09
ayoungnamely gssapi/kerberos calls from the Eventlet web server, implmenting the negotiate call etc20:09
ayoungas well as figuring out how to get kerberos tickets over open ports across firewalls in a secure manner20:09
ayoungzykes-, they mess it up, for the most part20:09
zykes-:p20:09
zykes-is "x509" a "ok" way to do stuff ?20:10
ayoungopenid, oauth, even SAML assume away all the hard parts20:10
ayoungzykes-, for https, X509 is baseline20:10
ayoungthe Us DoD does all X509 everywhere.  That is what the military smart cards are20:10
brichayoung: agree.  OAuth2 presumes https to start20:10
davidkranzadam_g: ping20:11
adam_gdavidkranz, hey20:11
davidkranzI am starting to bash on the grizzly packages but failing to install using my folsom method20:11
davidkranzadam_g: I get ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option20:12
zykes-ayoung: how though do you use x509 when logging into a website?20:12
davidkranzadam_g: Is there some place I can find grizzly changes that have to be made to scripts?20:12
*** pnavarro has joined #openstack-dev20:12
adam_gdavidkranz, from what package?20:12
*** markmc has quit IRC20:12
davidkranzadam_g: I'm using the grizzly trunk testing ppa20:13
openstackgerritA change was merged to openstack/nova: Fix: improve API error responses from os-hosts extension  https://review.openstack.org/2418120:13
topolcrazed, just finished the review.  Just found a few minor things to change.  ayoung, probably at the point where you should look now and we can hopefully close this one out20:13
ayoungtopol, what do I need to do to trigger devstack using ldap for keystone?  I thought it was just adding hte ldap service20:13
adam_gdavidkranz, there ideally shouldn't be much, there are others doing the same as you (using their folsom deploy scripts /w grizzly) and we've been squashing what they find, but i'm sure you'll find new things. :)20:13
ayoung ENABLED_SERVICES=key,mysql,qpid,ldap20:13
davidkranzadam_g: From https://launchpad.net/~openstack-ubuntu-testing/+archive/grizzly-trunk-testing20:13
adam_gdavidkranz, i mean, what package/command/binary is throwing that error you've pasted20:13
openstackgerritA change was merged to openstack/nova: Make conductor's quota methods pass project_id properly  https://review.openstack.org/2447220:13
davidkranzadam_g: Both nova-api and glance20:14
*** gasbakid has joined #openstack-dev20:14
openstackgerritA change was merged to openstack/nova: Make os-services API extensions consistent.  https://review.openstack.org/2361620:14
davidkranzadam_g: But I didn't install nova-conductor either20:14
openstackgerritA change was merged to openstack-dev/devstack: Use default swift pipeline and add extras.  https://review.openstack.org/2334720:14
davidkranzadam_g: How am I supposed to know what new things are needed or what changed?20:14
*** gasbakid has quit IRC20:14
davidkranzadam_g: Maybe it is just too early but I wanted to test before the release.20:14
davidkranzadam_g: Do you have some ci script or something I can look at?20:15
topolayoung pretty much.  and then add two other variables in localrc20:15
topolKEYSTONE_IDENTITY_BACKEND=ldap20:15
topolKEYSTONE_CLEAR_LDAP=yes20:15
topolKEYSTONE_CLEAR_LDAP is optional but recommended to clean the slate20:15
crazedtopol: hm why do we use dc for an admin user?20:15
adam_gdavidkranz, nova-api and glance-{registry, api} fail to start with that exception? sorry, theres so much stuff its difficult to figure out whats broken by a single error message and no context20:16
*** boden has quit IRC20:16
davidkranzadam_g: I know. I wasn't really asking you to figure it out. More to tell me where I can find an existing deploy script for non-devstack grizzly that works.20:17
davidkranzadam_g: It doesn't matter what technology the script,recipe, whatever uses.20:17
topolcrazed, when we were working on it that is what we chose. Maybe we saw in an example somewhere. I don't a good reason. ayoung do recall a good reason for that choice.  crazed is a horrendously bad choice?20:17
crazedwell dc is domain component as far as ldap schemas are concerned20:18
adam_gdavidkranz, sure, here is what we've currently been using to deploy + test grizzly: https://code.launchpad.net/~openstack-charmers20:18
openstackgerritA change was merged to openstack-dev/devstack: turn off swift by default  https://review.openstack.org/2454620:18
*** branen has joined #openstack-dev20:18
ayounghenrynash, care to do the honors https://review.openstack.org/#/c/24010/20:19
ayoungtopol, no, it is fine. It just isn't working on my machine20:19
*** burris has joined #openstack-dev20:19
ayoungI have that, ran devstack, and in my keystone conf file have the defaul for identity, not LDAP20:19
davidkranzadam_g: Thanks! I can't seem to access that page now but hopefuly it will appaer.20:19
adam_gdavidkranz, also, are you upgrading from existing folsom systems or starting with 100% newly provisioned systems for grizzly? theres a chance some dependency is not being upgrade to its required minimum wrt that ArgsAlreadyParsed exception20:20
topolayoung do you just want devstack to start keystone and ldap?  Sometimes I use ENABLED_SERVICES=key,ldap,mysql20:21
*** optyx1 has joined #openstack-dev20:21
davidkranzadam_g: Newly provisioned. One step at a time :)20:21
adam_gdavidkranz, TBH, AFAICS if you're not planning on taking advantage of new features and only want to roll out exactly like folsom, not much has changed with the exception of nova-volume -> cinder, nova-conductor20:21
ayoungtopol, qpid is in there just to shut up a warning message20:21
topolayoung how did you declare the enabled services. I think I have found some of the older ways were not reliable20:21
ayoungah...I missed your other comments.  OK20:21
ayounglet me try that.20:21
ayoung ENABLED_SERVICES=key,mysql,qpid,ldap20:22
davidkranzadam_g: It's more a matter of wanting to get back to some stress and other kinds of testing and wanting to use the latest.20:22
topolayoung that should work and be a quick up and running20:22
adam_gdavidkranz, at least thats true of what topology i was focusing on during Folsom (nova-compute+kvm, mult_host nova-network, cinder+ceph, glance+ceph)20:22
davidkranzadam_g: That's basically what I am using (minus ceph). I'll give it a try and see how it goes.20:23
*** vipul is now known as vipul|away20:24
crazedtopol: patch set 10 is up with your requested changes20:24
adam_gdavidkranz, if you hit more errors please file complete bugs somewhere and let me know, im happy to take a closer look20:24
davidkranzadam_g: k, will do.20:24
topolso crazed, if you feel strongly about it needing to be cn=admin we can open up a bug and I can fix it sometime soon. At this point I know you want to get your deref patch done so if dc= is ok for now I promise to fix it soon20:24
crazedtopol: sure, dc is fine really, just a dumb ldapism20:25
*** pnavarro has quit IRC20:27
topolcrazed, so I remember when I added a sunroom on to my house and two windows next to each other were not at the same height. Once was about a half inch higher than the other. And the guy bldg the sunroom (who I later fired) asked me, Are you gonna lose sleep over those windows not being even?  I told him YES. So I was about to ask you if you would lose sleep over the dc choice :-)20:28
topolif you said yes Ill go change.20:28
ayoungtopol, ok, still get invalid credential20:28
topolwhen running from devstack?20:28
crazedhaha meh i won't lose sleep over it20:29
*** morganfainberg has quit IRC20:29
*** morganfainberg has joined #openstack-dev20:29
topolayoung, you doing a clean install from devstack?20:29
ayoungtopol, I think my LDAP install is hosed,  I've tried even uninstall the RPMs and reinstalling20:30
dolphmhenrynash: ayoung: i'm about to log for the day, so here's my last plead for rc-blocking reviews for you :)20:30
dolphmhenrynash: https://review.openstack.org/#/c/24010/ and https://review.openstack.org/#/c/24398/20:30
dolphmayoung: https://review.openstack.org/#/c/24473/ and https://review.openstack.org/#/c/24398/20:30
ayoungdolphm, I'll play shepherd20:30
dolphmwould invite heckj and gyee as well, but they're not on :P20:30
ayoungdolphm, do you consider henrynash 's last +2 to still stand?  Is it OK if I merge mine in ?20:30
dolphmayoung: i'd like to him ack the token_table.delete() at least -- not sure he was involved in that discussion?20:31
*** optyx1 has left #openstack-dev20:31
ayoungdolphm, how about 2 +1s from community members instead?20:31
dolphmayoung: i'd say that depends on the complexity of the change and the mix of reviewers involved20:32
ayoungdolphm, import nose.exc ?20:33
ayoungis that a debugging artifact?20:33
dolphmayoung: was already imported; just organizing imports20:33
dolphmayoung: it's for raising SkipTests20:33
dolphmraise nose.exc.SkipTest('some traceable explanation')20:34
ayoungdolphm, I see that, but is it even used?20:34
ayoungah, outside of this patch, I assssume20:34
ayoungok20:34
ayoungdolphm, what is the rationale for that ordering?20:35
ayoungis nose somehow different from uuid or json?20:35
*** timello has quit IRC20:35
dolphmayoung: groups- python standard library first, external packages second (pip deps, usually), internal keystone imports, and then in certain cases, local imports (import default_fixtures)20:35
dolphmayoung: it's sort of based on python's search pattern for imports20:36
ayoungcool20:36
ayoungso you just have to know which s whivh.20:36
dolphmayoung: yeah, maintaining the grouping helps you learn / recognize what's what IMO20:37
dolphmayoung: and i find it's a big red flag for a refactor if too many modules are importing the same external deps, for example20:37
ayoungand when in doubt, look in tools/pip-requires and the test one20:37
*** sirushti has quit IRC20:38
dolphmayoung: i.e. you shouldn't more than a handful of modules importing sqlalchemy, or you're doing something wrong :P20:38
dolphmayoung: yep, also search python.org for the package (first group), or pypi (second group)20:38
ayoungI'll buy that20:38
ayoungdolphm, so I don;t understand the justification for the tests20:39
ayoungif it doesn't solve the bug, shouldn't they fail?20:39
ayoungah...ok, so it is fixed, and the test confirms it.. looks good.20:40
*** salgado is now known as salgado-brb20:41
*** aeperezt has quit IRC20:42
ayoungdolphm, with the other change in https://review.openstack.org/#/c/24473/  for the XML thing, does that mean we can run all unit tests for both JSON and XML now?20:42
*** bcrochet has joined #openstack-dev20:43
openstackgerritA change was merged to openstack/nova: Fix db archiving bug with foreign key constraints.  https://review.openstack.org/2445820:44
davidkranzadam_g: The problem was that auth_token moved to keystoneclient. There was still something there in keystone that didn't work.20:45
*** lmatter has left #openstack-dev20:46
*** baba has quit IRC20:46
*** megha has joined #openstack-dev20:46
adam_gdavidkranz, hmm. what waas the solution?20:46
davidkranzadam_g: Change the  keystone.middleware.auth_token to  keystoneclient.middleware.auth_token20:48
*** kagan has joined #openstack-dev20:48
davidkranzThat really needs to be release noted and should really be removed from keystone.20:48
davidkranzdolphm:   ^^^20:48
davidkranzadam_g: Getting tempest going now...20:49
adam_gdavidkranz, that is a change to nova/glance/etc api-paste.conf or keystone.conf?20:49
topolayoung, here was how I would uninstall ldap on ubuntu. Hopefuly rhel has something similar?20:49
topolsudo apt-get remove --purge slapd ldap-utils20:49
topolsudo apt-get clean20:49
davidkranzadam_g: The former.20:50
openstackgerritA change was merged to openstack-dev/grenade: Save compelte conf dir rather than specific files  https://review.openstack.org/2455620:50
Ryan_Lanetopol: apt-get purge20:50
adam_gdavidkranz, novas default apit-paste.ini already specifies paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory20:50
*** esp1 has joined #openstack-dev20:51
topolRyan_lane doesnt the --purge do enough?20:51
Ryan_LaneI've never used —purge :)20:51
*** kpavel has quit IRC20:51
Ryan_Lanethe normal command used is apt-get purge20:51
davidkranzadam_g: Perhaps so, but (at least until now) deploy scripts had to have copies of them.20:51
topolRyan_lane K, thanks!20:52
adam_gdavidkranz, and just confirmed the packages include that update, too.20:52
davidkranzadam_g: I guess I had leftover cruft.20:52
adam_gah20:52
*** kpavel has joined #openstack-dev20:52
*** kagan has quit IRC20:52
*** aeperezt has joined #openstack-dev20:52
davidkranzadam_g: The crowbar and other chef stuff I have seen all have copies of the conf files which of course then need to be updated.20:53
*** david-lyle has quit IRC20:53
*** Tross has quit IRC20:55
*** vipul|away is now known as vipul20:57
*** Tross has joined #openstack-dev20:58
*** SergeyLukjanov has quit IRC20:59
openstackgerritA change was merged to openstack-dev/grenade: Update functions file from DevStack  https://review.openstack.org/2455720:59
*** cp16net is now known as cp16net|away21:00
*** cp16net|away is now known as cp16net21:02
*** beagles` is now known as b3nt_pin21:04
*** b3nt_pin is now known as Guest8960421:05
*** eharney has quit IRC21:05
*** kagan has joined #openstack-dev21:06
ayoungtopol, RPM does not have a comparable concept to purge, which I have always found to be a case for great sadness21:09
openstackgerritA change was merged to openstack/horizon: Remove router actions from Admin panel  https://review.openstack.org/2411421:09
openstackgerritA change was merged to openstack/horizon: Fix device name for example. Fixes bug 1152975  https://review.openstack.org/2443521:10
uvirtbotLaunchpad bug 1152975 in horizon "When attacing volume to instance, incorrect device name is displayed in form for  example" [Undecided,In progress] https://launchpad.net/bugs/115297521:10
*** cloudchimp has quit IRC21:13
*** jergerber has joined #openstack-dev21:13
*** bswartz has quit IRC21:15
*** jaypipes has quit IRC21:17
*** brich has left #openstack-dev21:17
*** jaypipes has joined #openstack-dev21:17
*** stevemar has quit IRC21:20
*** trapni has joined #openstack-dev21:20
*** dprince has quit IRC21:21
*** SteelyDan is now known as dansmith21:21
ayoungtopol, OK, so I basically sterilized the machine and reran devstack.  It failed, but the ldapsearch command now runs:21:21
ayoung ldapsearch -x -w test -H ldap://localhost -D dc=Manager,dc=openstack,dc=org -x -b dc=openstack,dc=org21:21
*** markwash has joined #openstack-dev21:22
ayounghowever, I still get an error running the livetests....21:22
topolwhat comes back fromt he ldapsearch command?21:22
topolno objects?21:23
topolayoung, by livetest you are trying to run _ldap_livetest ?21:24
*** utlemming has quit IRC21:24
ayoungtopol, ldapsearch brings back a lot...21:24
ayoungabout to run in the debugger21:25
*** utlemming has joined #openstack-dev21:25
ayoungtopol, simplebind is failing, something probably wrong with the creds21:25
ayoungthey look right, but lets see21:25
topolk, do you remember what error you got?21:25
topolcheck that cn= wasnt still left in instead of dc=Manager21:25
topoluser = dc=Manager,dc=openstack,dc=org21:26
ayoungurl is  ldap://localhost21:27
ayounguser is21:27
ayoungstr: cn=Manager,dc=openstack,dc=org21:27
topolbingo21:27
ayoungah, that is it21:27
*** gordc has quit IRC21:28
ayoungINVALID_SYNTAX: {'info': 'objectClass: value #1 invalid per syntax', 'desc': 'Invalid syntax'}21:28
*** pabelanger has quit IRC21:28
ayoungFile "/opt/stack/keystone/keystone/identity/backends/ldap/core.py", line 167, in create_user21:28
ayoungharumph21:28
topolyou are using openldap or something else?21:29
ayoungdevstack set up openldap21:29
topolwhich path number from crazed did you pull?21:29
topolin his later patches desc became description21:30
openstackgerritA change was merged to openstack/python-openstackclient: Add functionality for add-role commands  https://review.openstack.org/2435621:31
*** bdpayne has quit IRC21:32
ayoungcrazed, something doesn't look right21:34
ayoungin the live test:21:34
ayoung super(LiveLDAPIdentity, self).setUp()  loads the fixtures21:35
ayoungtopol, ah, maybe I have an old patch,  let me make sure it is up to date.  That would explain a  lot21:35
topolI tried patch 9 it worked great. patch 10 is failing in jenkins and I did a recheck21:37
topoland it failed again21:37
topolagain with no logs, ayoung should I try a recheck again???21:37
*** burris has quit IRC21:38
*** joesavak has quit IRC21:39
ayoungtopol, pep821:40
ayoungtopol, run21:40
ayoung./run_tests -821:40
*** flaper87 has quit IRC21:41
ayoungtopol, last param is not inside [21:41
ayoungso it is one space too far to the right21:41
topolayoung, gotcha. I got so used to the false failures I forgot it could be a valid pep 8 check. snookered again21:41
ayoungI'll fix and repost.  1 sec21:41
*** dolphm has quit IRC21:42
topolayoung k sounds good21:42
*** Yada has quit IRC21:42
*** Tross has quit IRC21:42
*** kaushikc1 has joined #openstack-dev21:42
*** gyee has joined #openstack-dev21:43
ayoungLDAP add: dn=cn=foo,ou=Users,dc=openstack,dc=org, attrs=[('objectClass', ['person', 'inetOrgPerson']), ('sn', ['FOO']), ('userPassword', ['****']), ('mail', ['foo@bar.com']), ('businessCategory', ['default'])]21:43
ayoungtopol, I think that is the failing line21:43
ayoungthe error is INVALID_SYNTAX: {'info': 'objectClass: value #1 invalid per syntax', 'desc': 'Invalid syntax'}21:43
*** kaushikc has quit IRC21:44
topolayoung, is it failing in setup or in one of the actual tests?21:45
ayoungsetup21:45
topolpatch set 10?21:45
ayoungyep21:46
topolayoung, I pull that one down now21:47
ayoungtopol, would not be suprised if it was an ldap version problem, but this seems kindof baseline21:47
*** boris-42 has quit IRC21:48
ayoungtopol,  SUP organizationalPerson21:48
ayoungmaybe the whole chain needs to be in there, not just  ['person', 'inetOrgPerson']21:49
*** eharney has joined #openstack-dev21:49
*** eharney has quit IRC21:49
*** eharney has joined #openstack-dev21:49
topolayoung, I just ran patch 10 and it works fine on mine. I did not have to change cn to dc in patch 10. You did not either correct?21:50
ayoungtopol, no, I didn't change anything in the patch21:51
ayoungbut where does the  ['person', 'inetOrgPerson'] get defined....21:51
*** metral has joined #openstack-dev21:51
*** BalleS_ has joined #openstack-dev21:51
ayoungkeystone/identity/backends/ldap/core.py:305:    DEFAULT_STRUCTURAL_CLASSES = ['person']21:52
topolayoung just curiously what is your slapd -V ?21:53
ayoungtopol, there is something else wrong, too21:54
ayoung@(#) $OpenLDAP: slapd 2.4.33 (Oct 31 2012 12:01:33) $21:54
ayoungwhat is yours ?21:54
*** susanne-balle has quit IRC21:55
topolayoung, @(#) $OpenLDAP: slapd  (Oct 17 2012 19:48:41) $21:55
topolbuildd@komainu:/build/buildd/openldap-2.4.28/debian/build/servers/slapd21:55
*** wu_wenxiang has joined #openstack-dev21:56
*** READ10 has quit IRC21:57
*** kbringard has quit IRC21:58
*** imsplitbit has quit IRC21:59
ayoungtopol, well, my guess is that the problem is in the base LDAP code and not in the live tests.21:59
topolayoung, yeah but I dont understand why you see it and I don't21:59
topolayoung, our ldap versions arent much different22:00
ayoungtopol, no idea....I'm going to make a tweak to this patch though22:01
*** kaushikc1 has quit IRC22:01
topolK, I need to go now but will be on this weekend and monday if you need me to try something22:01
*** datsun180b has quit IRC22:02
topolI feel like dolphm with the nosetest stuff22:02
topolworks on my machine22:02
*** pcm_ has quit IRC22:02
*** vkmc has joined #openstack-dev22:02
ayoungtopol, The setup for these tests is wrong.  I think I can fix, though.22:04
crazedso what did you guys find wrong?22:04
crazedsorry was busy changing bgp routes22:04
topolayoung, K22:04
*** hemna is now known as hemnafk22:04
vishyayoung: this could use a kick now that i fixed the tests https://review.openstack.org/#/c/23309/22:06
crazedayoung: you're missing sn in the ldap add there22:07
crazeder nvm22:07
crazedcn22:07
ayoungcrazed, I think I fixed it22:12
crazedayoung: what was it?22:12
ayoungcrazed, let me make sure and I'll post an updated patch.  Need to pep8, too22:12
*** dolphm has joined #openstack-dev22:12
*** topol has quit IRC22:13
ayoungcrazed, I switched up the setup a bit22:13
*** jbr_ has left #openstack-dev22:13
ayoungthe setup should be completely defined by what is happening in backend_ldap, with the exception of the config files and the definition of the clean database function.22:14
ayoungI'm still getting a couple errors.22:14
ayoungIt is still running, but lets see what we get...22:14
crazedinteresting22:14
crazedi wonder if fedora doesn't import the same ldap schemas?22:14
*** eglynn has joined #openstack-dev22:15
*** eharney has quit IRC22:15
openstackgerritA change was merged to openstack/keystone: extracting user and trust ids into normalized fields  https://review.openstack.org/2401022:16
*** rkukura has quit IRC22:18
openstackgerritA change was merged to openstack/nova: Revert 1154253 causes XenServer image compat issue  https://review.openstack.org/2455822:18
*** rkukura has joined #openstack-dev22:18
openstackgerritA change was merged to openstack/glance: Fix scrubber and other utils to use log.setup().  https://review.openstack.org/2403822:19
ayoungcrazed, nope, false positive there....still needs more work on my part22:19
crazedayoung: ah fun, okay22:20
*** Guest89604 is now known as b3nt_pin22:20
*** esheffield has quit IRC22:20
*** dolphm has quit IRC22:21
ayoungcrazed, ok, posting, but it still fails for me.  I am not sure about the change to keystone/identity/backend/ldap/core.py either22:22
ayoungbut I suspect it should be22:23
ayoungDEFAULT_STRUCTURAL_CLASSES = ['person', 'organizationalPerson']22:23
ayoungbut also that needs to be configurable22:23
*** jimfehlig has quit IRC22:24
ayoungcrazed, in gerrit, you can do a diff from a patch other than base.  So if you set that to the last one you submitted, you will see all the changes that I made22:24
ayounggonna check out now...Family time22:24
*** ayoung is now known as ayoung-afk22:24
crazedayoung-afk: okay sounds good22:25
*** pabelanger has joined #openstack-dev22:26
openstackgerritA change was merged to openstack/keystone: Discard null endpoints (bug 1152632)  https://review.openstack.org/2439822:27
uvirtbotLaunchpad bug 1152632 in keystone "null endpoints are not ignored by v3" [Low,In progress] https://launchpad.net/bugs/115263222:28
*** diogogmt has quit IRC22:30
*** bdpayne has joined #openstack-dev22:30
*** diogogmt has joined #openstack-dev22:31
*** otherwiseguy has joined #openstack-dev22:33
*** esp1 has quit IRC22:34
*** eglynn has quit IRC22:35
*** arosen has quit IRC22:37
*** rkukura has quit IRC22:37
*** esp1 has joined #openstack-dev22:38
*** epim has quit IRC22:39
*** gongysh has joined #openstack-dev22:44
openstackgerritA change was merged to openstack-dev/grenade: Need to get more of the setup stack.sh does for Nova  https://review.openstack.org/2456422:48
*** Ryan_Lane has quit IRC22:48
*** soody has quit IRC22:50
*** salgado-brb is now known as salgado22:51
*** terryh has quit IRC22:51
*** rkukura has joined #openstack-dev22:52
*** jasdeepH has quit IRC22:53
*** topol has joined #openstack-dev22:55
*** Ryan_Lane has joined #openstack-dev22:58
*** jasdeepH has joined #openstack-dev23:01
*** jkordish has quit IRC23:01
*** diogogmt has quit IRC23:01
*** eglynn has joined #openstack-dev23:01
*** cloudchimp has joined #openstack-dev23:02
*** almaisan-away is now known as al-maisan23:03
*** wu_wenxiang has quit IRC23:07
*** esp1 has quit IRC23:16
*** yidclare has quit IRC23:16
*** alop has quit IRC23:17
*** kagan has quit IRC23:18
*** al-maisan is now known as almaisan-away23:21
*** anniec has quit IRC23:22
*** burris has joined #openstack-dev23:24
*** eglynn has quit IRC23:25
*** henrynash has quit IRC23:26
*** jasdeepH has quit IRC23:30
*** branen has quit IRC23:32
*** terryh has joined #openstack-dev23:34
*** burris has quit IRC23:35
*** otherwiseguy has quit IRC23:36
*** gyee has quit IRC23:40
*** roampune has quit IRC23:43
openstackgerritA change was merged to openstack/glance: Fix rabbit_max_retry  https://review.openstack.org/2398023:47
*** anniec has joined #openstack-dev23:47
*** markwash has quit IRC23:48
*** cloudchimp has quit IRC23:49
*** olaph has quit IRC23:50
*** bdpayne has quit IRC23:50
*** Tross has joined #openstack-dev23:52
*** olaph has joined #openstack-dev23:54
*** dontalton has quit IRC23:55
*** topol has quit IRC23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!