Monday, 2013-03-18

*** jasdeepH has quit IRC00:09
openstackgerritA change was merged to openstack/horizon: rm invalid args when updating quotas with nova api  https://review.openstack.org/2457000:12
*** martine has joined #openstack-dev00:14
*** pabelanger has quit IRC00:14
*** gongysh has joined #openstack-dev00:15
*** martine has quit IRC00:15
*** martine has joined #openstack-dev00:15
*** martine has quit IRC00:16
*** stevemar has quit IRC00:16
*** jhesketh has joined #openstack-dev00:17
*** ctracey has quit IRC00:22
*** kpavel has quit IRC00:23
*** trapni has quit IRC00:23
*** adjohn has quit IRC00:25
*** yuanz has quit IRC00:25
*** tomoe_ has quit IRC00:27
*** pabelanger has joined #openstack-dev00:34
*** adalbas has joined #openstack-dev00:40
*** kpavel has joined #openstack-dev00:43
*** Gordonz has joined #openstack-dev00:44
*** adalbas has quit IRC00:46
*** HenryG has quit IRC00:48
*** gongysh has quit IRC00:50
*** pabelanger has quit IRC00:55
*** pabelanger has joined #openstack-dev00:57
*** sthaha has joined #openstack-dev01:09
*** Gordonz has quit IRC01:10
*** colinmcnamara has joined #openstack-dev01:13
*** soody has joined #openstack-dev01:18
openstackgerritA change was merged to openstack/ceilometer: add keystone configuration instructions to manual install docs  https://review.openstack.org/2446801:20
*** yidclare has joined #openstack-dev01:21
*** pabelanger has quit IRC01:22
*** soody has quit IRC01:22
*** yidclare has quit IRC01:25
*** markwash has joined #openstack-dev01:26
*** adjohn has joined #openstack-dev01:35
*** ek6 has joined #openstack-dev01:39
*** adjohn has quit IRC01:40
*** markwash has quit IRC01:41
*** colinmcnamara has quit IRC01:43
*** techlife has quit IRC01:43
*** pabelanger has joined #openstack-dev01:46
*** markwash has joined #openstack-dev01:46
*** Tross has quit IRC01:46
*** networkstatic has joined #openstack-dev01:48
*** colinmcnamara has joined #openstack-dev01:48
*** techlife has joined #openstack-dev01:49
*** stevemar has joined #openstack-dev01:49
*** shang has joined #openstack-dev01:51
*** alexxu has joined #openstack-dev01:52
*** ek6 has quit IRC01:56
*** techlife has quit IRC01:57
*** yaguang has joined #openstack-dev01:58
*** xchu has joined #openstack-dev02:02
*** techlife has joined #openstack-dev02:03
*** matiu_ has joined #openstack-dev02:04
*** matiu has quit IRC02:08
*** colinmcnamara has quit IRC02:11
*** markwash has quit IRC02:15
*** diogogmt has joined #openstack-dev02:17
*** amerine has joined #openstack-dev02:19
*** wu_wenxiang has joined #openstack-dev02:21
*** Mandell has quit IRC02:26
*** winston-d has joined #openstack-dev02:26
*** dims has quit IRC02:28
*** alexpilotti has quit IRC02:28
*** tomoe_ has joined #openstack-dev02:29
*** vkmc has quit IRC02:30
ausxxh_i build horizon from source, but what's the password to login?02:34
*** koolhead17 has quit IRC02:35
ausxxh_do I need build keystone etc to login?02:35
*** markwash has joined #openstack-dev02:38
*** jasdeepH has joined #openstack-dev02:39
*** jcmartin has joined #openstack-dev02:43
*** stevemar has quit IRC02:45
*** fire has joined #openstack-dev02:46
*** ritzcarltn has joined #openstack-dev02:53
*** Ritz-Laptop has quit IRC02:53
*** mestery has quit IRC02:54
*** SergeyLukjanov has joined #openstack-dev03:03
*** racedo` has joined #openstack-dev03:05
*** racedo has quit IRC03:06
*** jasdeepH has quit IRC03:10
*** jamielennox has joined #openstack-dev03:17
*** adjohn has joined #openstack-dev03:24
*** sirushti has joined #openstack-dev03:32
*** yuanz has joined #openstack-dev03:33
*** Tross has joined #openstack-dev03:38
*** jamielennox has quit IRC03:48
*** jamielennox has joined #openstack-dev03:49
*** colinmcnamara has joined #openstack-dev04:01
*** colinmcnamara has quit IRC04:03
*** colinmcnamara has joined #openstack-dev04:03
*** Mandell has joined #openstack-dev04:04
*** colinmcnamara has quit IRC04:04
*** boris-42 has joined #openstack-dev04:06
*** markwash has quit IRC04:10
*** markwash has joined #openstack-dev04:13
*** aditirav has joined #openstack-dev04:14
*** wu_wenxiang has quit IRC04:14
*** markwash has quit IRC04:15
*** SergeyLukjanov has quit IRC04:18
*** jcmartin has quit IRC04:19
*** aditirav has quit IRC04:19
*** aditirav has joined #openstack-dev04:20
*** darjeeling has joined #openstack-dev04:26
*** matiu_ is now known as matiu04:27
*** Qten has quit IRC04:28
*** crandquist has joined #openstack-dev04:30
*** aeperezt has quit IRC04:43
*** adjohn has quit IRC04:45
*** matiu has quit IRC04:48
*** jamielennox has quit IRC04:54
*** jamielennox has joined #openstack-dev04:54
*** matiu has joined #openstack-dev05:04
*** matiu has joined #openstack-dev05:04
*** pabelanger has quit IRC05:08
*** navid_ has joined #openstack-dev05:10
*** hattwick has quit IRC05:13
openstackgerritA change was merged to openstack/cinder: Fix typo in persona valid values  https://review.openstack.org/2456105:14
openstackgerritA change was merged to openstack/cinder: Use self.configuration to support the multi-backend case  https://review.openstack.org/2453405:14
*** garyk has quit IRC05:15
*** koolhead17 has joined #openstack-dev05:16
*** diogogmt has quit IRC05:23
*** llu has quit IRC05:33
*** llu has joined #openstack-dev05:33
*** shang has quit IRC05:34
*** jamielennox has quit IRC05:36
*** jamielennox has joined #openstack-dev05:37
*** almaisan-away is now known as al-maisan05:37
*** ankush has joined #openstack-dev05:41
*** SergeyLukjanov has joined #openstack-dev05:47
*** jamielennox has quit IRC05:48
*** ankush has left #openstack-dev05:48
*** jamielennox has joined #openstack-dev05:49
*** flaper87 has joined #openstack-dev05:50
*** garyk has joined #openstack-dev05:50
*** nati_ueno has joined #openstack-dev05:52
*** adjohn has joined #openstack-dev05:55
*** flaper87 has quit IRC05:56
*** adjohn has quit IRC06:00
*** SergeyLukjanov has quit IRC06:01
*** SergeyLukjanov has joined #openstack-dev06:04
*** boris-42 has quit IRC06:05
*** jamielennox has quit IRC06:08
*** jamielennox has joined #openstack-dev06:09
*** sride has joined #openstack-dev06:09
*** devananda has quit IRC06:09
*** devananda has joined #openstack-dev06:10
*** koolhead17 has quit IRC06:13
*** koolhead17 has joined #openstack-dev06:14
*** afazekas has joined #openstack-dev06:19
*** kpavel has quit IRC06:23
*** rushiagr has joined #openstack-dev06:23
openstackgerritA change was merged to openstack/quantum: Imported Translations from Transifex  https://review.openstack.org/2461906:24
*** yuanz has quit IRC06:24
*** yuanz has joined #openstack-dev06:25
openstackgerritA change was merged to openstack/quantum: Adds delete-orphan to database deletion.  https://review.openstack.org/2450106:30
*** markwash has joined #openstack-dev06:31
*** jamielennox has quit IRC06:31
*** jamielennox has joined #openstack-dev06:32
*** crandquist has quit IRC06:32
*** baba has joined #openstack-dev06:34
*** fire has quit IRC06:34
*** mrunge has joined #openstack-dev06:37
*** SergeyLukjanov has quit IRC06:38
*** spn has joined #openstack-dev06:39
*** srini_g has joined #openstack-dev06:39
*** spn has quit IRC06:41
*** spn has joined #openstack-dev06:43
*** jbresnah has quit IRC07:14
*** psedlak has quit IRC07:14
*** jasdeepH has joined #openstack-dev07:16
*** k4n0 has joined #openstack-dev07:16
*** jbresnah has joined #openstack-dev07:17
*** boris-42 has joined #openstack-dev07:18
*** nati_ueno has quit IRC07:19
*** noslzzp has joined #openstack-dev07:19
*** nati_ueno has joined #openstack-dev07:22
*** yaguang has quit IRC07:22
*** SergeyLukjanov has joined #openstack-dev07:27
*** psedlak has joined #openstack-dev07:34
*** rmohan has quit IRC07:35
*** rmohan has joined #openstack-dev07:35
srideHi07:40
*** jamielennox has quit IRC07:41
*** jamielennox has joined #openstack-dev07:42
srideI wanted to know where the migration logs are logged07:42
*** yolanda has joined #openstack-dev07:43
*** networkstatic has quit IRC07:43
*** doude has joined #openstack-dev07:46
*** dosaboy has joined #openstack-dev07:52
*** jgallard has joined #openstack-dev07:56
*** jamielennox has quit IRC08:00
*** aditirav has quit IRC08:00
*** jamielennox has joined #openstack-dev08:01
*** jprovazn has joined #openstack-dev08:01
*** giulivo has joined #openstack-dev08:01
*** aditirav has joined #openstack-dev08:01
*** reidrac has joined #openstack-dev08:03
*** matiu has quit IRC08:05
*** jasdeepH has quit IRC08:07
*** boden has joined #openstack-dev08:08
*** zhiteng_ has quit IRC08:15
*** yaguang has joined #openstack-dev08:17
*** jamielennox has quit IRC08:19
*** fbo has joined #openstack-dev08:22
*** zoresvit has joined #openstack-dev08:25
*** dosaboy has quit IRC08:25
*** mindpixel has joined #openstack-dev08:25
*** dosaboy has joined #openstack-dev08:25
*** xga has joined #openstack-dev08:28
*** aloga has joined #openstack-dev08:29
*** fbo has quit IRC08:29
*** fbo has joined #openstack-dev08:31
*** jbresnah has quit IRC08:32
*** yaguang has left #openstack-dev08:33
*** sirushti has quit IRC08:34
*** henrynash has joined #openstack-dev08:36
*** matiu has joined #openstack-dev08:39
*** matiu has quit IRC08:39
*** matiu has joined #openstack-dev08:39
*** jamielennox has joined #openstack-dev08:41
*** racedo` is now known as racedo08:43
*** boris-42 has quit IRC08:44
*** sirushti has joined #openstack-dev08:47
*** maroh has joined #openstack-dev08:50
*** gongysh has joined #openstack-dev08:55
*** winston-d has quit IRC08:55
*** kpavel has joined #openstack-dev08:56
*** zoresvit has quit IRC08:56
*** sulo_ has joined #openstack-dev08:57
*** nati_ueno has quit IRC08:57
*** Yada has joined #openstack-dev08:57
*** jamielennox has quit IRC08:58
*** cc_osdeploy has joined #openstack-dev08:59
*** llu has quit IRC09:00
*** jgallard has quit IRC09:00
*** jgallard has joined #openstack-dev09:01
*** trapni has joined #openstack-dev09:02
*** iartarisi has joined #openstack-dev09:05
cc_osdeployhey everyone! is there some kind of inconsistency in the options that glance takes through the command line between essex and folsom release?09:05
*** mkollaro has joined #openstack-dev09:07
*** egallen has joined #openstack-dev09:08
*** zoresvit has joined #openstack-dev09:11
*** alexxu has quit IRC09:11
*** xga has quit IRC09:12
*** johnthetubaguy has joined #openstack-dev09:13
*** zoresvit has quit IRC09:15
*** olaph has quit IRC09:17
*** olaph has joined #openstack-dev09:18
*** llu has joined #openstack-dev09:19
*** koolhead17 has quit IRC09:20
openstackgerritA change was merged to openstack/cinder: Fixes dettach volumes in Windows cinder plugin  https://review.openstack.org/2416509:22
*** xga has joined #openstack-dev09:25
*** yaguang has joined #openstack-dev09:31
*** alunduil has quit IRC09:31
*** thouveng has joined #openstack-dev09:32
*** zoresvit has joined #openstack-dev09:33
*** davidha has joined #openstack-dev09:34
*** jbr_ has quit IRC09:34
*** tomoe_ has quit IRC09:34
*** tomoe_ has joined #openstack-dev09:35
*** hattwick has joined #openstack-dev09:35
*** trapni has quit IRC09:36
*** tomoe_ has quit IRC09:39
*** adjohn has joined #openstack-dev09:43
*** koolhead17 has joined #openstack-dev09:43
*** corXi has joined #openstack-dev09:43
*** darjeeling has quit IRC09:48
*** adjohn has quit IRC09:53
*** morganfainberg has quit IRC10:02
*** morganfainberg1 has joined #openstack-dev10:02
sridecould anyone help me understand how the messages cast to the queues are read.?10:02
*** yaguang has quit IRC10:03
*** trapni has joined #openstack-dev10:04
*** andreaf has joined #openstack-dev10:05
koolhead17sride: http://www.laurentluce.com/posts/openstack-nova-internals-of-instance-launching/10:08
koolhead17see if it helps10:08
*** noslzzp has quit IRC10:08
koolhead17sride: just gives you the idea how it works but it will not be same in current architecture10:09
srideokay thanks koolhead1710:10
koolhead17sride: :)10:10
sridei also wanted to know where is the code that is actually reading from the rabbitmq10:10
sridekoolhead17: ^10:11
koolhead17sride: github.com/openstack/nova10:11
*** dosaboy has quit IRC10:11
*** noslzzp has joined #openstack-dev10:12
*** kpavel has quit IRC10:13
sridehmm okay10:13
*** kpavel has joined #openstack-dev10:14
*** giulivo has quit IRC10:14
*** xchu has quit IRC10:15
*** danpb has joined #openstack-dev10:16
*** adjohn has joined #openstack-dev10:19
*** kpavel has quit IRC10:20
*** trapni has quit IRC10:27
*** adjohn has quit IRC10:29
thouvengservice10:33
thouvengoops wrong input sorry.10:33
*** giulivo has joined #openstack-dev10:37
*** rushiagr has quit IRC10:41
*** koert has joined #openstack-dev10:45
*** cc_osdeploy has quit IRC10:47
*** adjohn has joined #openstack-dev10:55
*** jgallard has quit IRC10:57
*** jgallard has joined #openstack-dev10:57
*** b3nt_pin has quit IRC10:58
*** darjeeling has joined #openstack-dev10:59
*** adjohn has quit IRC11:00
*** rkukura has quit IRC11:01
*** mkollaro has quit IRC11:01
*** avishay has joined #openstack-dev11:08
*** giulivo has quit IRC11:14
*** dims has joined #openstack-dev11:15
*** giulivo has joined #openstack-dev11:18
*** rashmipt has joined #openstack-dev11:19
*** colinmcnamara has joined #openstack-dev11:21
*** colinmcnamara has quit IRC11:23
*** davidha has quit IRC11:24
*** egallen has quit IRC11:25
*** al-maisan is now known as almaisan-away11:26
*** adjohn has joined #openstack-dev11:26
*** tomoe_ has joined #openstack-dev11:29
*** adjohn has quit IRC11:30
*** colinmcnamara has joined #openstack-dev11:34
*** zoresvit1 has joined #openstack-dev11:36
*** pcm_ has joined #openstack-dev11:38
*** zoresvit has quit IRC11:38
*** noslzzp has quit IRC11:38
*** rnirmal has joined #openstack-dev11:40
*** vkmc has joined #openstack-dev11:41
*** termie has quit IRC11:41
*** romcheg1 has joined #openstack-dev11:45
*** romcheg1 has left #openstack-dev11:45
*** xga has quit IRC11:51
*** adalbas has joined #openstack-dev11:51
*** beagles has quit IRC11:51
*** yamahata_ has joined #openstack-dev11:51
*** KeithT has joined #openstack-dev11:54
*** rushi1234 has joined #openstack-dev11:56
*** adjohn has joined #openstack-dev11:56
*** Guest12144 has joined #openstack-dev11:57
*** mkollaro has joined #openstack-dev11:57
*** Guest12144 has quit IRC11:58
*** ndipanov has joined #openstack-dev11:58
*** rods` has joined #openstack-dev11:58
*** KeithT has quit IRC11:59
*** avishay has quit IRC11:59
*** mjfork has joined #openstack-dev12:00
*** adjohn has quit IRC12:01
*** KeithT has joined #openstack-dev12:02
*** rushi1234 has quit IRC12:02
*** optyx has quit IRC12:03
*** rafaduran has joined #openstack-dev12:03
*** rashmipt has quit IRC12:04
*** zoresvit1 has quit IRC12:04
*** noslzzp has joined #openstack-dev12:05
*** KeithT has quit IRC12:07
*** rnirmal has quit IRC12:07
*** colinmcnamara has quit IRC12:09
*** dolphm has joined #openstack-dev12:13
*** kpavel has joined #openstack-dev12:14
*** zoresvit has joined #openstack-dev12:20
*** rashmipt has joined #openstack-dev12:20
*** alunduil has joined #openstack-dev12:21
*** matiu has quit IRC12:22
*** joesavak has joined #openstack-dev12:22
*** alunduil has quit IRC12:22
openstackgerritA change was merged to openstack/nova: Reset migrating task state for more Exceptions  https://review.openstack.org/2454512:25
openstackgerritA change was merged to openstack/python-quantumclient: Add a missing command line option: --insecure  https://review.openstack.org/2418412:26
*** adjohn has joined #openstack-dev12:27
*** fbo has quit IRC12:28
*** psedlak_ has joined #openstack-dev12:29
*** anteaya has joined #openstack-dev12:30
*** fbo has joined #openstack-dev12:30
*** darjeeling has quit IRC12:31
*** adjohn has quit IRC12:32
*** psedlak has quit IRC12:32
*** rashmipt has quit IRC12:33
*** joesavak has quit IRC12:34
*** darjeeling has joined #openstack-dev12:37
*** matiu has joined #openstack-dev12:39
*** matiu has quit IRC12:39
*** matiu has joined #openstack-dev12:39
*** ladquin has joined #openstack-dev12:40
*** mjfork has quit IRC12:45
*** optyx has joined #openstack-dev12:48
*** xga has joined #openstack-dev12:50
*** romcheg1 has joined #openstack-dev12:51
*** mohits has joined #openstack-dev12:52
*** romcheg1 has left #openstack-dev12:52
*** iartaris` has joined #openstack-dev12:53
sthahaI was trying install the the python virtualenv and dependencies for running tempest using the tempest/tools/install_virt_env.py on Fedora and it fails here: https://github.com/openstack/tempest/blob/master/tools/install_venv_common.py#L216 since the repo doesn't contain the patch file. Am I missing something or did the author fail to include the file?12:55
*** HenryG has joined #openstack-dev12:56
*** iartarisi has quit IRC12:57
*** rashmipt has joined #openstack-dev12:57
*** woodspa has joined #openstack-dev12:57
*** ndipanov has quit IRC12:57
*** arbrandes has joined #openstack-dev12:58
*** iartaris` has quit IRC12:58
*** adjohn has joined #openstack-dev12:58
*** alunduil has joined #openstack-dev12:59
*** santanel has joined #openstack-dev12:59
*** sride has quit IRC13:00
*** adjohn has quit IRC13:02
*** ndipanov has joined #openstack-dev13:03
*** dprince has joined #openstack-dev13:04
*** HenryG has quit IRC13:04
*** Hg_ has joined #openstack-dev13:04
*** Hg_ has quit IRC13:04
*** sdake_ has quit IRC13:05
*** aditirav_ has joined #openstack-dev13:06
*** aditirav_ has quit IRC13:06
*** jruzicka has joined #openstack-dev13:08
*** aditirav has quit IRC13:09
*** crandquist has joined #openstack-dev13:09
*** rods` has quit IRC13:12
*** rods has joined #openstack-dev13:13
*** kobier has joined #openstack-dev13:15
*** ijw has quit IRC13:17
*** garyk has quit IRC13:17
*** crandquist has quit IRC13:18
dolphmhenrynash: ayoung: https://review.openstack.org/#/c/24636/13:23
ayoungdolphm, thought we dealt with links in XML already....13:24
dolphmayoung: yeah, that introduced a new, sort of subtle bug13:24
ayoung?13:24
dolphmayoung: see the referenced bug; collection-style links were being applied to individual objects (like next & previous)13:24
ayounglooking.13:25
henrynashlooking, too13:25
ayoung        # show complete diffs on failure13:25
ayoung194        self.maxDiff = None13:25
ayoungdolphm, ^^?13:25
dolphmhenrynash: ayoung: gyee's patch merged right before this one did https://review.openstack.org/#/c/24473/ <-- and that one failed because it had additional coverage for gyee's patch which suddenly started failing13:25
*** ijw has joined #openstack-dev13:25
*** kpavel has quit IRC13:26
dolphmayoung: that's just a nice to have; when unittest.assertEqual() fails, it was showing truncated diffs, after about 100 characters which were sort of useless13:26
*** kpavel_ has joined #openstack-dev13:26
ayoungdolphm, so once this one is is, we need to rebase 2447313:26
*** kpavel_ is now known as kpavel13:26
dolphmayoung: that's already done13:26
ayoungdolphm, we spew so much on failure....13:26
*** eharney has joined #openstack-dev13:26
*** eharney has quit IRC13:26
*** eharney has joined #openstack-dev13:26
*** darjeeling has quit IRC13:27
dolphmayoung: the failure message was like "Lorem ipsum [truncated]" does not equal "Lorem ipsum [truncated]"13:27
*** rnirmal has joined #openstack-dev13:27
*** kobier has quit IRC13:27
*** kpavel_ has joined #openstack-dev13:27
*** bswartz has quit IRC13:27
*** joesavak has joined #openstack-dev13:27
ayoungah,  yeah, that is useful .13:28
dolphmayoung: it's not more logs :)13:28
ayoung"Windows" and "Cannonical"  are two places where the software industry has camped on very useful terms.13:28
*** bknudson has joined #openstack-dev13:28
dolphmlol13:28
*** mjfork has joined #openstack-dev13:29
*** adjohn has joined #openstack-dev13:29
*** mrunge has quit IRC13:31
ayoungdolphm, so we are swtiching the form of the serilaization based on the name of the element, right?13:31
dolphmayoung: pretty much13:31
*** kpavel has quit IRC13:31
*** kpavel_ is now known as kpavel13:31
ayoungProbably the right hting to do here, but I wonder if that means we are actually doing the wrong thing at the JSON level?13:31
ayoungShouldn't the JSON format be how we want it to look alread?13:32
dolphmhenrynash: were you working on this? https://bugs.launchpad.net/keystone/+bug/115651613:32
uvirtbotLaunchpad bug 1156516 in keystone "User in disabled domain can still authenticate via v2.0 api" [Critical,New]13:32
*** rkukura has joined #openstack-dev13:32
*** adjohn has quit IRC13:33
*** mjfork has quit IRC13:33
dolphmayoung: the JSON is fine, do you mean the JSON->XML?13:33
ayoungdolphm, nope13:33
*** kpavel has quit IRC13:33
ayoungwe are changing the format when going from JSON to XML,13:34
crazedayoung: i'm going to get a f16 vm up to see what's going on with the live tests there, i have a feeling it's the imported object schemas that are different13:34
ayoungwhich means we are not saying what we want in JSON13:34
ayoungcrazed, trye F1713:34
*** iartaris` has joined #openstack-dev13:34
ayoungI know it worked with that, as that was where I last tested liveldap13:34
*** mestery has joined #openstack-dev13:34
ayoungAnd 16 might be too far back13:35
ayoungfor the tests to actually run13:35
crazedinteresting, okay13:35
crazedcentos 6 works13:35
crazedbtw13:35
crazedso it's weird f16 wouldn't13:35
ayoungBut if it is easy for you to run both, that would provie more detail, too13:35
ayounggood point13:35
dolphmayoung: i know what you mean, but it's really hard to find a middle ground between what looks "right" in JSON and what looks "right" in XML13:36
crazedi already have an f17 vm to play with, so i'll go with that then13:36
dolphmayoung: good XML is bad JSON and good JSON is bad XML13:36
ayoungdolphm, what does it look like in JSON?13:36
ayounglinks, that is.13:36
dolphmayoung: see the bottom two tests in test_serializer13:36
*** NobodyCam has joined #openstack-dev13:36
dolphmayoung: we translate back and forth between the json and xml in those examples flawlessly now13:37
*** jimfehlig has joined #openstack-dev13:37
*** joesavak has quit IRC13:37
ayoungdolphm, that is a step forward, for certain.  But why is is "bad" JSON in the XML format?13:37
*** fbo has quit IRC13:39
*** fbo has joined #openstack-dev13:40
*** psedlak__ has joined #openstack-dev13:42
dolphmayoung: semantic difference between both formats -- <elements> are essentially lists of things in xml, each with attributes, whereas json treats attributes as first-class and lists as a value13:42
ayoungRight.  OK,  I think that is a valid reason.13:42
*** matiu has quit IRC13:43
*** mestery has quit IRC13:43
*** woodspa has quit IRC13:45
*** psedlak_ has quit IRC13:46
dolphmhenrynash: had you started https://bugs.launchpad.net/keystone/+bug/1156516 ?13:46
uvirtbotLaunchpad bug 1156516 in keystone "User in disabled domain can still authenticate via v2.0 api (dup-of: 1130236)" [Critical,New]13:47
uvirtbotLaunchpad bug 1130236 in keystone "Domains are not validated on authentication" [High,Triaged]13:47
*** susanne-balle has joined #openstack-dev13:48
*** rashmipt has quit IRC13:48
*** jprovazn has quit IRC13:50
*** READ10 has joined #openstack-dev13:54
*** shang has joined #openstack-dev13:56
*** Gordonz has joined #openstack-dev13:56
*** koolhead17 has quit IRC13:57
*** rcj has joined #openstack-dev13:57
*** terryh has joined #openstack-dev13:57
*** annegentle has joined #openstack-dev13:58
*** Gordonz has quit IRC13:58
*** gongysh has quit IRC13:58
*** Gordonz has joined #openstack-dev13:58
henrynashdolphm: no, just found it last night13:59
henrynashdolphm: ah, sorry, looks like it was a dupe13:59
*** adjohn has joined #openstack-dev13:59
dolphmhenrynash: i had briefly started on it during g3, but it looked to be more test framework changes than anything else14:00
*** sulrich_ has joined #openstack-dev14:00
*** cloudchimp has joined #openstack-dev14:00
henrynashdolphm: yes, saw that, but I think there is a gal bug (as well as needing more test framework)….found it testing the domain deletion fix14:01
*** bswartz has joined #openstack-dev14:01
henrynash(....think there is a real bug…)14:01
ayounghenrynash, ha https://bugs.launchpad.net/keystone/+bug/1156516  You foind that based on my comment on the domain bug.  You were going to answer "But the domain is disabled..." and then you decdied to check on it.  RIght?  Cuz that was the logic running through my head Friday night.14:02
dolphmhenrynash: agree14:02
uvirtbotLaunchpad bug 1156516 in keystone "User in disabled domain can still authenticate via v2.0 api (dup-of: 1130236)" [Critical,New]14:02
uvirtbotLaunchpad bug 1130236 in keystone "Domains are not validated on authentication" [High,Triaged]14:02
ayoungAnd I was wondering if I would find that this morning.14:02
*** kbringard has joined #openstack-dev14:02
henrynashayoung: yep, exactly…..14:03
dolphmif one of ya'll wants to tackle it, it's definitely high/critical and i haven't had time ... the enable/disable check for domains is broken/skipped during auth and a lot of tests don't create a domain, so they'll all start failing14:03
*** jhesketh has quit IRC14:03
henrynashdolphm: I'll take it as I am doing the domain stuff..14:04
*** adjohn has quit IRC14:04
dolphmhenrynash: this is where i started https://review.openstack.org/#/c/22327/14:04
ayoungdolphm, so from an impl perspective, it is just get_domain at the start of the function, right?14:04
dolphmhenrynash: you're welcome to steal those changes if they'll still apply14:04
ayoungIts the fact that all the tests are going to break that is the issue?14:04
*** BalleS_ has joined #openstack-dev14:05
dolphmayoung: the bug fix is here https://review.openstack.org/#/c/22327/4/keystone/token/controllers.py14:05
ayoungah, see you changes14:05
ayoungchaged it14:05
*** alunduil has quit IRC14:05
* ayoung can't type, going to stop trying14:05
henrynashdolphm: I think, the actual fix for this issue is to simply check the domain of the user, remember in the backend a domain is ALWAYS present (even for v2)14:06
*** shang has quit IRC14:07
*** stevemar has joined #openstack-dev14:07
dolphmhenrynash: that's what that change does14:08
henrynashdolphm: Ok, I'll check into it....thanks14:08
*** mrunge has joined #openstack-dev14:12
*** boris-42 has joined #openstack-dev14:14
*** alunduil has joined #openstack-dev14:16
*** HenryG has joined #openstack-dev14:16
*** gordc has joined #openstack-dev14:18
*** shang has joined #openstack-dev14:20
*** Guest14700 has joined #openstack-dev14:21
Guest14700i need a lil help on openstack swift config14:22
*** imsplitbit has joined #openstack-dev14:25
Guest14700http://paste.ubuntu.com/5625322/14:25
Guest14700anyone14:25
*** pixelbeat has joined #openstack-dev14:27
marohdoes anyone use multi-dhcp-agent with quantum scheduler?14:27
marohwith devstack, q-dhcp fails with "[quantum] [Errno 13] Permission denied: '/var/lib/quantum'"14:29
*** otherwiseguy has joined #openstack-dev14:30
*** adjohn has joined #openstack-dev14:30
*** woodspa has joined #openstack-dev14:32
*** mohits has quit IRC14:32
*** BalleS_ has quit IRC14:32
*** martine has joined #openstack-dev14:32
*** mohits has joined #openstack-dev14:33
*** mohits has quit IRC14:33
*** mohits has joined #openstack-dev14:33
*** BalleS_ has joined #openstack-dev14:33
*** baba has quit IRC14:34
*** megha has joined #openstack-dev14:34
*** adjohn has quit IRC14:34
*** Mathnerd314 has quit IRC14:35
*** ijw has quit IRC14:36
*** monst has joined #openstack-dev14:36
*** ijw has joined #openstack-dev14:37
*** esp2 has joined #openstack-dev14:37
*** Mathnerd314 has joined #openstack-dev14:38
*** monst has quit IRC14:38
*** monst_ has joined #openstack-dev14:38
*** markwash has quit IRC14:43
crazedayoung: i found the problem, default openldap install on fedora is super lightweight14:43
crazedayoung: you need to import the schemas for cosine and inetorgperson14:43
crazedayoung: ex: ldapadd  -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/cosine.ldif && ldapadd  -Y EXTERNAL -H ldapi:/// -f /etc/openldap/schema/inetorgperson.ldif14:44
crazedonce you do that, the tests run14:44
ayoungcrazed, is there an argument why that is?14:44
crazedayoung: lightweight databases, ubuntu just imports a bunch by default, but i don't know maybe there's a very specific reason14:45
ayoungcrazed, not for me it didn't14:45
ayounglet see if I got both14:45
ayoungah, OK, it works14:46
ayoungsudo didn't like the &&, maybe'14:46
crazedah yeah probably14:46
crazedi ran it as root14:46
*** esheffield has joined #openstack-dev14:46
ayoungcrazed, so not sure it that is sufficient14:47
*** noslzzp has quit IRC14:47
ayoungcrazed, now the first test I had ran...14:47
ayoung_ldap_livetest:LiveLDAPIdentity.test_configurable_allowed_user_actions14:47
ayoungbut not all of them...lets see what fails14:47
crazedokay14:47
crazedyeah i only ran a couple, not all14:47
*** danpb has quit IRC14:47
ayoungah, might be the skips...14:47
crazedtest_add_role_grant_to_user_and_project_404 (_ldap_livetest.LiveLDAPIdentity) ... SKIP: Blocked by bug 110128714:48
uvirtbotLaunchpad bug 1101287 in keystone "Keystone LDAP does not support v3 Role Grants" [Undecided,Incomplete] https://launchpad.net/bugs/110128714:48
ayounglooking ....14:48
crazedwhoops14:48
ayoungtest_create_duplicate_project_id_fails (_ldap_livetest.LiveLDAPIdentity) ... ERROR14:49
ayoungtest_create_duplicate_project_name_fails (_ldap_livetest.LiveLDAPIdentity) ... ERROR14:49
ayoungtest_create_project_doesnt_modify_passed_in_dict14:49
*** mrodden has quit IRC14:49
*** danpb has joined #openstack-dev14:49
ayoungcrazed, do me a favor.  Look at those three tests.  If the real problem is just Schema imports, lets document, otherwise we'll open bugs for them.  Either way, we should be able to commit the live ldap tests14:49
ayoungcrazed, alos, can you open up a devstack bug on the schema import?14:50
*** k4n0 has left #openstack-dev14:51
crazedayoung: yeah i can do those things14:51
ayoungrock on14:51
*** andrewbogott_afk is now known as andrewbogott14:52
crazedayoung: everything passed for me after a full run, also rechecked the three you pasted and they seem to pass as well14:53
*** john5223 has joined #openstack-dev14:53
ayoungcrazed, interesting.  Did you happen to update other schema?  Was this F18?14:55
crazedayoung: no other schema, and it's f1714:56
ayoungtest_update_project_long_name_fails test_update_project_invalid_name_fails test_update_project_blank_name_fails and also failed for me14:56
crazedayoung: what's the failure trace look like?14:56
ayounghttp://fpaste.org/B3Fr/14:56
ayoungcrazed, it is all project stuff14:57
ayoungwhich feels like a schema missing beyond those above14:57
crazedayoung: description is blank14:57
crazedhm14:57
crazedif you specify description it can't be blank if i remember correctly14:57
ayoungcrazed, that may be, in which case it should fail for you, too.14:58
*** zoresvit has quit IRC15:00
*** datsun180b has joined #openstack-dev15:01
*** navid_ has quit IRC15:01
*** adjohn has joined #openstack-dev15:01
crazedayoung: mine gets description set to 'description'15:01
crazedhm15:01
ayoungcrazed, let see if we have the same patch15:01
ayoung42e52dd7f26895a1105d870a6b09b1071220b75215:02
ayoungparent is15:02
ayoung  Merge "Remove duplicate password/token opts."15:02
crazedayoung: yeah i need to pull in your patch set, but my parent is the same, hold on15:03
crazedforgot you updated things15:03
crazedayoung: there we go, same problem now15:04
*** darjeeling has joined #openstack-dev15:05
*** adjohn has quit IRC15:06
*** xga has quit IRC15:06
*** nati_ueno has joined #openstack-dev15:07
openstackgerritA change was merged to openstack/quantum: Synchronize QuantumManager.get_instance() method  https://review.openstack.org/2457715:09
*** yidclare has joined #openstack-dev15:10
*** Mandell has quit IRC15:11
*** tomoe_ has quit IRC15:11
*** tomoe_ has joined #openstack-dev15:12
*** optyx has quit IRC15:13
*** devoid has joined #openstack-dev15:13
*** BalleS_ has quit IRC15:14
*** garyk has joined #openstack-dev15:14
*** tryggvil has quit IRC15:14
*** BalleS__ has joined #openstack-dev15:14
*** BalleS__ has quit IRC15:15
*** kbrierly has quit IRC15:15
*** nati_ueno has quit IRC15:15
*** mestery has joined #openstack-dev15:16
*** mestery has joined #openstack-dev15:17
*** sacharya has joined #openstack-dev15:18
*** zoresvit has joined #openstack-dev15:18
*** markmcclain has joined #openstack-dev15:20
*** kmartin has joined #openstack-dev15:20
*** koolhead17 has joined #openstack-dev15:20
marohgaryk, hi15:22
garykmaroh: hi, whats up?15:24
marohgrayk : hi i'm fine thanks and you?15:24
*** cp16net is now known as cp16net|away15:24
garykgaryk: all is well. marathon on friday cancelled :(15:26
*** radez_g0n3 is now known as radez15:27
marohgaryk : oh sorry for you! what's the reason?15:27
garykmaroh: heat wave15:28
*** cp16net|away is now known as cp16net15:28
marohoh! lucky you, we just ended with snow!15:30
marohgaryk : i'm still trying to use multi-agent feature with devstack and quantum-scheduler15:30
*** yidclare has quit IRC15:30
*** adjohn has joined #openstack-dev15:32
marohgaryk : but dhcp-agent fails on an independent node with :  "[quantum] [Errno 13] Permission denied: '/var/lib/quantum'"15:32
*** boris-42 has quit IRC15:32
*** olaph has quit IRC15:32
marohgaryk : have you edited a wiki page for the quantum-scheduler feature?15:33
garykmaroh: in the quantum.conf file there is the state_path. you can change this to a directory that siis writable. in general the packages should take care of this15:34
*** olaph has joined #openstack-dev15:34
*** adjohn has quit IRC15:36
garykmaroh: hope that that helps (i am running out of battery and will be offline for a while)15:36
*** tsnider__ has joined #openstack-dev15:36
*** sthaha has quit IRC15:36
marohgaryk : great, it works thanks!!15:36
garykcool. have a good one15:37
*** kbrierly has joined #openstack-dev15:38
*** marun has joined #openstack-dev15:39
*** zaitcev has joined #openstack-dev15:40
*** noslzzp has joined #openstack-dev15:41
*** trapni has joined #openstack-dev15:41
*** trapni has joined #openstack-dev15:41
*** boden has quit IRC15:42
*** lloydde has joined #openstack-dev15:42
*** gyee has joined #openstack-dev15:43
*** mkollaro has quit IRC15:44
*** sdake_ has joined #openstack-dev15:45
*** martine has quit IRC15:46
*** martine has joined #openstack-dev15:46
*** saschpe has quit IRC15:46
*** markmcclain has quit IRC15:47
*** rnirmal_ has joined #openstack-dev15:48
*** rnirmal has quit IRC15:49
*** rnirmal_ is now known as rnirmal15:49
*** koert has quit IRC15:51
*** garyk has quit IRC15:52
openstackgerritA change was merged to openstack/nova: Fix issues with cells and resize  https://review.openstack.org/2438515:53
*** markmcclain has joined #openstack-dev15:54
jaypipesdolphm: ping15:55
dolphmjaypipes: pong15:55
*** jasdeepH has joined #openstack-dev15:56
jaypipesdolphm: hi :) question for ya15:56
*** lloydde_ has joined #openstack-dev15:56
ayoungcrazed, the thing is, I am not sure with the patches previous to mine that we were actually exercising the live ldap for the setups, which is why some of them might have passed by accident.15:56
ayoungcrazed, Can Null description bereplaced with "" for LDAP and still work15:56
*** alunduil has quit IRC15:57
jaypipesdolphm: we have the memcache backend enabled for tokens and sql backend for identity, but I'm finding that POST /tokens still makes SQL requests to identity information. Is there some memcache settings we can set in Keystone to cache the identity information?15:57
*** adjohn has joined #openstack-dev15:57
*** zoresvit has quit IRC15:58
*** lloydde has quit IRC15:58
dolphmjaypipes: no; POST /tokens still needs to authenticate with the identity driver prior to issuing a token15:59
jaypipesdolphm: :(15:59
dolphmjaypipes: even in grizzly, where you can write your own authn driver, we still have to work with identity driver afterwords -- even if your driver doesn't16:00
jaypipesdolphm: I don't understand you...16:00
*** xga has joined #openstack-dev16:00
dolphmjaypipes: i'm just saying pluggable authentication doesn't get around the issue -- POST /tokens is primarily a call to the identity driver16:01
*** mestery has quit IRC16:01
*** mkollaro has joined #openstack-dev16:01
jaypipesdolphm: OK, so here's our situation: we have a SQL database cluster in a datacenter on the east coast, master-master replication. We have another OpenStack deployment on the west coast and want to use a single authentication identity database, so we pointed our west coast keystone service sql_connection to a tunnelled connection to our east coast DC's identity SQL database cluster. Unfortunately, the latency is horren16:05
jaypipesdous: around 75ms per TCP roundtrip, and just doing a *single* POST /tokens from west to east coast is taking >2.5 seconds, which is clearly unacceptable.16:05
*** mindpixel has quit IRC16:05
*** jcmartin has joined #openstack-dev16:05
jaypipesdolphm: so we are trying to figure out how to use memcache and other backends like templated for catalog, but it seems everything ends up calling the identity sql driver at some point, which slows everything to a crawl.16:05
*** tsnider__ has quit IRC16:06
dolphmjaypipes: can't do a slave sql server on the east coast?16:06
dolphm /cluster16:06
*** ndipanov has quit IRC16:07
jaypipesdolphm: sure, but unfortunately that means doing writeset rsyncs over a WAN, which would slow the entire database cluster down...16:07
*** reidrac has quit IRC16:07
crazedayoung: yea replacing it with '' works16:07
dolphmjaypipes: hmm... what about proxying keystone requests from the east coast back to the keystone server on the west coast?16:09
jaypipesdolphm: ?16:09
jaypipesdolphm: I don't understand16:09
*** lloydde_ has quit IRC16:09
dolphmjaypipes: i.e. don't actually deploy keystone on the east coast, or do but proxy certain requests directly back to the west coast (like POST /tokens)16:09
jaypipesdolphm: I still don't understand what that would accomplish...16:10
dolphmjaypipes: then it's only one round trip from east to west16:10
jaypipesdolphm: east coast deployment zone needs a keystone endpoint and database, too..16:10
*** zoresvit has joined #openstack-dev16:11
jaypipesdolphm: yeah, it looks like the only solution to this is going to be doing read-only slave replication rfom east coast to west coast and just deal with replication lag :(16:11
dolphmjaypipes: you're deploying two regions, correct? or two distinct clouds?16:12
jaypipesdolphm: Multiple AZs in same region, all over the US.16:13
*** mjfork has joined #openstack-dev16:13
*** boden has joined #openstack-dev16:13
dolphmjaypipes: how are you exposing multiple identity endpoints to users?16:14
jaypipesdolphm: using templated backend...16:14
dolphmjaypipes: i mean what does that look like in the catalog?16:14
jaypipesdolphm: hitting each AZ's identity endpoint just returns the catalog for the AZ.16:14
jaypipesdolphm: since Keystone doesn't have any mechanism of filtering endpoints or services by AZ..16:15
jaypipeswe had to do it that way.16:15
jaypipesdolphm: thus the reason for http://summit.openstack.org/cfp/edit/11416:15
dolphmjaypipes: that sounds a lot like how 'region' is used16:16
jaypipesdolphm: a region is merely a collection of AZs.16:16
*** alop has joined #openstack-dev16:17
jaypipesdolphm: unless you are HP cloud, in which case a region is a collection of AZs within a "geography" -- a super-collection of regions that HP made up.16:17
zykes-markmcclain: yo, is Ryan at work or ?16:17
*** alop has quit IRC16:18
markmcclainzykes-: I think he's out today16:18
zykes-awww, dhellmann then ?16:18
markmcclainsame too16:18
jaypipesdolphm: are you saying that Keystone assumes each region is handled by a separate Keystone database/datastore? :(16:18
dolphmjaypipes: definitely not16:18
jaypipesdolphm: OK, so I guess I'm not following you...16:18
crazedayoung: would you rather delete the description attribute or set it to like "_empty_"16:18
*** yidclare has joined #openstack-dev16:19
*** alop has joined #openstack-dev16:19
*** jasdeepH has quit IRC16:19
*** bdpayne has quit IRC16:19
markmcclainzykes-: pecan changes?16:19
jaypipesdolphm: our problems would be mitigated if there was just some caching in the identity_api :(16:19
*** rushiagr has joined #openstack-dev16:20
*** ndipanov has joined #openstack-dev16:20
jaypipesdolphm: so instead of a POST /tokens making multiple calls to the SQL identity backend just to get roles and stuff like that for a user, it would be in memcache after the first lookup.16:20
zykes-markmcclain: yes. Wondering what I'm doing wrong at https://github.com/dreamhost/pecan/issues/20216:20
*** burris has quit IRC16:20
*** terryw has joined #openstack-dev16:20
*** avishay has joined #openstack-dev16:20
*** burris has joined #openstack-dev16:21
*** otherwiseguy has quit IRC16:22
dolphmjaypipes: as long as you can still horizontally scale while maintaining the ability to quickly revoke tokens, disable users, etc, and have those actions take effect16:23
jaypipesdolphm: do revoke token and disable user send out a notification message on standard OpenStack mesage queues? ;)16:24
jaypipesdolphm: if not, getting a notification of those events is going to be tricky ;)16:24
crazedayoung: uploaded patch 15, i defaulted an empty description to '_empty_' for now16:24
ayoungcrazed, hmmm16:25
*** kaushikc has joined #openstack-dev16:25
*** sulrich_ has left #openstack-dev16:25
*** sulrich_ has quit IRC16:25
ayoungcrazed, if no description is set,  we should make it ""16:25
ayoungbut I suspect you mean16:25
ayoungwhat happens if there is one set, but it is not in the next update?16:25
crazedyeah that's something to be concerned about also16:26
*** topol has joined #openstack-dev16:26
*** lloydde has joined #openstack-dev16:26
crazedbut this is in the create_project method16:26
crazednot the update one16:26
*** jasdeepH has joined #openstack-dev16:26
*** alunduil has joined #openstack-dev16:27
*** terry7 has joined #openstack-dev16:27
zykes-clues on where I can go with that markmcclain ?16:29
*** thouveng has quit IRC16:29
*** amerine has quit IRC16:30
ayoungcrazed, so lest just default it to blank16:30
openstackgerritA change was merged to openstack-infra/devstack-gate: Add grenade.  https://review.openstack.org/2321016:30
*** amerine has joined #openstack-dev16:30
ayoungIf the value must be provided, just make sure it is not something that will mess up any visual display16:30
ayoungso '_empty_' is probably going to mess up Horizon.16:30
*** pabelanger has joined #openstack-dev16:31
ayoungWhat does the sql backend do...lets see16:31
markmcclainzykes- nothing immediately apparent.. I'm in a meeting so I'll have to look at it more later16:31
crazedayoung: sure i uploaded a new one with a blank description16:32
*** SergeyLukjanov has quit IRC16:32
ayoungcrazed, my guess is that this is a disconnect between SQL allowing the column to be Null.16:32
ayoungAnd LDAP requiring it16:33
crazedyeah definitely, i mean description is optional in general16:33
ayoungAh...not even a field in SQL16:33
crazedbut if you set it, it has to contain something16:33
dolphmjaypipes: auth_token pulls a list of revoked tokens (ayoung can comment on the details); we've talked about using the queue for disable / delete events in the context of https://bugs.launchpad.net/keystone/+bug/96783216:33
uvirtbotLaunchpad bug 967832 in keystone "Instances are still running when a tenant are deleted" [High,Confirmed]16:33
dolphmjaypipes: i'd like to have a solution to that ^ in havana :)16:34
*** cdub has joined #openstack-dev16:35
dolphmhenrynash: +2'd https://review.openstack.org/#/c/24575/16:36
crazedayoung: re https://review.openstack.org/24139 i only tested using openldap, other ds might have a slightly different ldif for creating aliased objects, though there is an RFC draft for it (http://tools.ietf.org/html/draft-byrne-ldap-alias-00)16:37
ayoungdolphm, shouldn't that one now depend on the other patch?  The one that ensures disabled domains....16:37
ayoungcrazed, We are sticking to the RFC schemas16:37
dolphmayoung: ideally, yes... there's a comment inline about that, and henry is (i think) tackling the other patch as well16:37
ayoungcrazed, I'm not generally opposed to the idea16:38
ayoungcrazed, just add the testing you did to the review report for posterity16:38
dolphmayoung: vote? https://review.openstack.org/#/c/24636/16:38
dolphm(i assume you reviewed it and got side tracked by our discussion :P)16:39
ayoungdolphm, heh, sidetracked?  I am four trinas over by now16:39
ayoungtains16:39
ayoungtrains16:39
ayoungnah, I like trinas16:39
dolphm+1 for trinas16:39
crazedayoung: cool, will do, yeah the test contains the possibly openldap specific ldif, but dereferncing is supported by all ds servers16:40
*** jbr_ has joined #openstack-dev16:41
ayoungdolphm, I like the XML patch.  will +216:41
dolphmayoung: thanks16:42
ayoungdolphm, So links are one thing that need to be special handled.  I kindof saw that with the HTML Proof-of-Concept16:42
dolphmgyee: would especially appreciate your eyes on https://review.openstack.org/#/c/24636/16:42
gyeedolphm, looking16:43
dolphmgyee: basically moved a bit of your links handling code around, and probably fixed an issue with the assertSerializeDeserialize that you ran into as well16:43
dolphm... and fixed ... you probably ran into ...16:44
*** cdub has quit IRC16:44
ayoungdolphm, here's the question I'd like us to ponder:  what is the JSON and XML equivalent to an HTML form, and how would exposing them fit into our URL scheme16:44
gyeedolphm, so links will always have "next" and "previous"?16:44
zigoIs there anyone that can help me fixing the console auth after applying the fix for CVE-2013-1838?16:44
uvirtbotzigo: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1838)16:44
dolphmgyee: only on collections16:45
dolphmgyee: albeit they may be null of course, null terminator style16:45
*** andreaf has quit IRC16:46
zigovishy: Are you around?16:46
dolphmgyee: check out the new test, if you haven't already16:46
zigoIn what timezone is vish?16:46
jkoelkerpacific i belieb16:47
dolphmzigo: utc-816:47
zigoThanks. That's what thought too.16:47
* zigo is gmt+816:48
*** boris-42 has joined #openstack-dev16:48
*** egallen has joined #openstack-dev16:49
gyeedolphm, good stuff16:50
zigoWho else, appart from ttx and vish, is on the security team?16:50
dolphmzigo: https://launchpad.net/~openstack-vuln-mgmt/+members#active16:51
*** bdpayne has joined #openstack-dev16:51
zigodolphm: Thanks! :)16:51
ayoungcrazed, anyway, I'm in support of https://review.openstack.org/#/c/24139/16:52
ayoungdouble check to see if it needs a rebase.16:52
roharaany advice for debugging quantum unit tests?16:52
*** terryw has quit IRC16:52
*** roampune has joined #openstack-dev16:52
*** jbresnah has joined #openstack-dev16:53
ayoungcrazed, any idea on the live test one?  Is it a legit bug, or just more missed schema stuff?16:53
*** ijw has quit IRC16:53
* ayoung has been too dsitracted to look yet16:53
crazedayoung: about the description piece? that was a legit bug16:53
ayoungcrazed, ah, that was it?16:54
crazedayoung: i updated create_project for the ldap backend to check for None or '' set for tenant['description']16:54
crazedayoung: if it is that, set description to '""'16:54
crazedwe could just delete description or set it to something like _empty_16:54
*** epim has joined #openstack-dev16:55
ayoungcrazed, ok will lok.  into a meeting16:57
*** nati_ueno has joined #openstack-dev16:57
dolphmgyee: thanks, btw16:57
crazedayoung: sounds good16:57
*** markwash has joined #openstack-dev17:00
*** jcmartin has quit IRC17:02
*** jcmartin has joined #openstack-dev17:03
*** ijw has joined #openstack-dev17:04
*** alunduil has quit IRC17:04
*** ijw has quit IRC17:04
*** ijw has joined #openstack-dev17:05
topolayoung, is the liveldap now working on fedora?17:05
*** Mandell has joined #openstack-dev17:06
*** yolanda has quit IRC17:08
*** yolanda has joined #openstack-dev17:09
*** reed has joined #openstack-dev17:09
*** annegentle has quit IRC17:10
*** optyx has joined #openstack-dev17:11
*** david-lyle has joined #openstack-dev17:13
*** jog0 has joined #openstack-dev17:13
*** Ryan_Lane has quit IRC17:14
*** cp16net is now known as cp16net|away17:14
*** bknudson has quit IRC17:14
*** aeperezt has joined #openstack-dev17:14
zykes-markwash: still meeting ?17:15
*** morganfainberg1 has quit IRC17:15
*** Guest14700 is now known as ratedz17:15
crazedtopol: yeah, fedora install of slapd initializes the database with no real schemas imported17:15
crazedtopol: https://bugs.launchpad.net/devstack/+bug/115665117:16
uvirtbotLaunchpad bug 1156651 in devstack "ldap database for keystone needs cosine and inetorgperson schemas imported" [Undecided,New]17:16
*** fbo has quit IRC17:17
topolcrazed, Thanks. that has me written all over it.  I'll take 115665117:17
topolcrazed, can you give me more background on your dereferencing stuff?17:18
crazedtopol: sure what background you need?17:18
*** doude has left #openstack-dev17:19
topolcrazed so when do you need the dereferencing  functionality. whats the use case?17:19
*** doude has joined #openstack-dev17:20
crazedtopol: i explain a use case here: https://bugs.launchpad.net/keystone/+bug/1153786 but basically short version is you can set up an alias to your posixaccount user tree inside your openstack user tree and limit the control the admin user for openstack has over your entire tree17:21
uvirtbotLaunchpad bug 1153786 in keystone "ldap dereferencing is broken in the ldap backend" [Undecided,In progress]17:21
*** corXi has quit IRC17:22
*** bknudson has joined #openstack-dev17:22
topolcrazed, very cool.  THANKS!  I will review it!17:22
*** ratedz has quit IRC17:26
openstackgerritA change was merged to openstack/keystone: Fix XML handling of member links (bug 1156594)  https://review.openstack.org/2463617:31
uvirtbotLaunchpad bug 1156594 in keystone "deserializing xml results in bad links" [Medium,In progress] https://launchpad.net/bugs/115659417:31
*** mohits has quit IRC17:31
*** Mandell_ has joined #openstack-dev17:33
jgriffithjkoelker: ping17:34
*** cdub has joined #openstack-dev17:34
topolcrazed, code looks good. I asked spzala to review as well17:35
openstackgerritA change was merged to openstack/keystone: Test default_project_id scoping (bug 1023502)  https://review.openstack.org/2447317:35
uvirtbotLaunchpad bug 1023502 in keystone "Horizon does not use the default tenant" [High,In progress] https://launchpad.net/bugs/102350217:35
*** Mandell has quit IRC17:36
*** avishay is now known as avishay_zzz17:36
jkoelkerjgriffith: howdy17:38
jgriffithjkoelker: hey there, was wondering if you could help with an OSLO question?17:38
*** xga has quit IRC17:39
jgriffithjkoelker: I'm interested in doing a sync of pip-requires using the update script17:39
*** xga has joined #openstack-dev17:39
jgriffithjkoelker: but didn't know if everybody was on board with *commonizing* this yet or not17:39
jkoelkercommonizing the pip-configs?17:40
jkoelkerjgriffith: i thought that was in the works, but sadly i've lost track of it17:41
jkoelkeri'm +1 on it17:41
jgriffithjkoelker: :)17:41
jgriffithjkoelker: I think we'll give it a go and see how tests react17:41
*** terryw has joined #openstack-dev17:41
jgriffithjkoelker: I'm a big fan of the idea to eliminate the conflict issues we've seen :)17:42
jgriffithjkoelker: but I don't want to introduce new conflicts by sucking these in either :)17:42
jkoelkerjgriffith: awesome, yea this the https://github.com/openstack/requirements stuff correct?17:43
jgriffithjkoelker: correct17:45
jkoelkerjgriffith: cools, yea lets give it a shot, see what it does ;)17:45
jgriffithjkoelker: I'll make another quick pass to verify nothing is missing, but I think we've pushed/merged everything to oslo17:45
jgriffithjkoelker: cool cool... I'll let ya know if it blows up :)17:46
jgriffithjkoelker: thanks!17:46
jkoelkerjgriffith: rock on17:46
*** psedlak__ has quit IRC17:48
*** psedlak__ has joined #openstack-dev17:49
*** Mathnerd314 has quit IRC17:50
*** Mathnerd314 has joined #openstack-dev17:51
*** psedlak__ has quit IRC17:53
*** dsanders has joined #openstack-dev17:54
*** afazekas has quit IRC17:56
*** adjohn has quit IRC17:57
*** danpb has quit IRC17:57
*** jcmartin has quit IRC17:57
*** markwash has quit IRC17:58
*** markwash has joined #openstack-dev17:58
*** geekinutah has joined #openstack-dev17:58
*** doude has quit IRC17:58
geekinutahanyone in here aware of plans/blueprints on network bandwidth throttling?17:59
*** ctracey|away has joined #openstack-dev18:02
*** zoresvit has quit IRC18:02
*** ctracey|away is now known as ctracey18:02
*** ritzcarltn has quit IRC18:02
*** dontalton has joined #openstack-dev18:02
topolso crazed in your use case I see how you create an alias so whenever someone accesses ou=posix_accounts,ou=users,ou=openstack,dc=example,dc=net that will get them the value found in ou=People,dc=example,dc=net.  I understand that. But what do you end up using for user_tree_dn ?  Do you use  ou=posix_accounts,ou=users,ou=openstack,dc=example,dc=net for this value?18:02
*** Mandell_ has quit IRC18:02
sdaguegeekinutah: I know some fine grained controls were added for libvirt at the end of grizzly18:02
*** arosen has joined #openstack-dev18:03
*** anniec has joined #openstack-dev18:03
geekinutahsdague: orly, you don't happen to remember any keywords in the review or bp that I could search on?18:03
*** jcmartin has joined #openstack-dev18:03
*** Ryan_Lane has joined #openstack-dev18:05
sdaguegeekinutah: https://blueprints.launchpad.net/nova/+spec/quota-instance-resource18:06
*** ndipanov has quit IRC18:09
*** Mandell has joined #openstack-dev18:10
*** ausxxh_ has quit IRC18:10
*** melwitt has joined #openstack-dev18:10
*** jgallard has quit IRC18:11
*** ausxxh has joined #openstack-dev18:14
*** dolphm has quit IRC18:14
openstackgerritA change was merged to openstack/quantum: Allow tests in TestDhcpAgentEventHandler run independently  https://review.openstack.org/2465218:15
geekinutahbeauty, thx sdague18:15
*** Tross has left #openstack-dev18:16
*** iartaris` has quit IRC18:16
*** mkollaro has quit IRC18:17
*** rcj has quit IRC18:19
*** spzala has joined #openstack-dev18:20
*** Tross has joined #openstack-dev18:20
*** rushiagr has quit IRC18:22
*** arbrandes has quit IRC18:22
*** garyk has joined #openstack-dev18:23
*** zul has quit IRC18:23
*** zul has joined #openstack-dev18:24
*** rushiagr has joined #openstack-dev18:24
*** Ryan_Lane has quit IRC18:24
openstackgerritA change was merged to openstack/swift: Fix crash in swift-ring-builder's list_parts command.  https://review.openstack.org/2449918:25
*** beagles has joined #openstack-dev18:30
*** reed has quit IRC18:30
*** Ryan_Lane has joined #openstack-dev18:31
ayoungcrazed, does it have to be '""'?18:31
ayoungI'd much prefer18:32
ayoung  if 'description' in data and data['description'] in ['', None]:18:32
ayoung            data['description'] = ''18:32
*** mrodden has joined #openstack-dev18:32
*** rushiagr has quit IRC18:33
*** sacharya has quit IRC18:34
openstackgerritA change was merged to openstack/tempest: Fix rate limit handling and logging  https://review.openstack.org/2401318:34
*** gasbakid has joined #openstack-dev18:36
*** sacharya has joined #openstack-dev18:36
zaitcevDoes anyone know if any work is being done on running Keystone at sqlalchemy 0.8?18:36
ayoungzaitcev, hasn't crossed my desk yet18:37
ayoungzaitcev, are there known issues?18:37
zaitcevayoung: I can file bugs if you want. But it crashes right away on start. Don't you have a Rawhide VM somewhere?18:38
*** morganfainberg has joined #openstack-dev18:39
ayoungzaitcev, not yet I don't18:39
ayoungzaitcev, ticket what you find and we'll take it from there18:39
zaitcevTicket in Launchpad?18:39
*** mkollaro has joined #openstack-dev18:39
*** xga has quit IRC18:40
*** roampune has quit IRC18:40
*** roampune has joined #openstack-dev18:41
*** gasbakid has quit IRC18:41
*** otherwiseguy has joined #openstack-dev18:41
*** SergeyLukjanov has joined #openstack-dev18:43
*** dolphm has joined #openstack-dev18:45
*** jcmartin has quit IRC18:46
*** devoid has quit IRC18:46
*** devoid has joined #openstack-dev18:46
sdaguejgriffith: you about?18:46
*** rushiagr has joined #openstack-dev18:48
*** sulo_ has quit IRC18:50
*** vipul is now known as vipul|away18:50
*** Yada has quit IRC18:51
*** novas0x2a|laptop has joined #openstack-dev18:52
*** vipul|away is now known as vipul18:52
*** nunosantos has joined #openstack-dev18:52
*** dolphm has quit IRC18:53
*** jergerber has joined #openstack-dev18:54
ayounghenrynash, crazed topol https://review.openstack.org/#/c/24237/  I do a Pop of the description field if it is blank.18:54
ayoungzaitcev, yes, please , ticket in launchpad18:54
topolayoung,  K, I will pull it down and try it on my machine today18:56
*** chrisfer has joined #openstack-dev18:56
crazedtopol: i wound up using ou=users,ou=openstack,dc=example,dc=net, you do need to set query_scope=sub in the config18:57
*** egallen has quit IRC18:58
*** Hg_ has joined #openstack-dev18:58
crazedayoung: that's what i wanted to do originally, but i think i failed to get the idea across haha, but yeah i like that way better. no reason to add a description attribute to an ldap object if none is necessary18:58
ayoungcrazed, sounds good, and the tests pass.  I think that is the right approach.  Nice work.18:59
*** SergeyLukjanov has quit IRC18:59
ayounggyee, I'd like to get https://review.openstack.org/#/c/24237/  in, so that we have a baseline for other LDAP patches in the future.19:00
ayoungtake a look when you get the chance, please19:00
gyeeayoung, looking19:00
*** doude has joined #openstack-dev19:00
*** SergeyLukjanov has joined #openstack-dev19:01
*** beraldo has joined #openstack-dev19:01
*** HenryG has quit IRC19:01
*** cp16net|away is now known as cp16net19:02
*** nati_ueno has quit IRC19:03
crazedwhen you reply to an inline comment, how do you actually send it? seems to just say "draft"19:04
gyeeayoung, we are assuming slapd is running on localhost?19:04
ayounggyee, so these tests are not run in a standard unit test run19:05
pleia2crazed: you go back to the main screen for the review and click "Review" - that will "commit" all your comments19:05
ayounggyee, they have to be explicitly run, and the assumption is that someone used devstack to set it up19:05
ayoungit being openldap19:05
pleia2(once you fill in another optional comment and submit it)19:05
ayounggyee, to test:19:05
crazedpleia2: thanks, that worked19:05
ayoung./run_tests.sh _ldap_livetest 2>&1 | grep ^test19:05
ayoungyou want the grep, as each skip spews all the debug log info.19:05
crazedyou can add a --nologcapture19:05
crazedif you don't want the debug log19:06
*** jimfehlig has quit IRC19:06
gyeeayoung, are we going to doc the tribal knowledge?19:06
*** hemnafk is now known as hemna19:07
*** vipul is now known as vipul|away19:09
*** harlowja has left #openstack-dev19:10
*** matiu has joined #openstack-dev19:12
*** matiu has quit IRC19:12
*** matiu has joined #openstack-dev19:12
enikanorovmarkmcclain: hi19:12
ayounggyee, sure.  Where do you suggest?19:13
*** vipul|away is now known as vipul19:13
ayoungin Hacking?19:13
gyeeayoung, sure, like have a few sentence about how to setup a live LDAP for testing?19:13
*** johnthetubaguy has quit IRC19:17
*** geekinutah has quit IRC19:17
*** jcmartin has joined #openstack-dev19:18
*** spzala has quit IRC19:18
*** spzala has joined #openstack-dev19:19
*** jruzicka has quit IRC19:20
*** jimfehlig has joined #openstack-dev19:20
topolcrazed, so where did you use the ou=posix_accounts,  piece?19:20
*** annegentle has joined #openstack-dev19:20
openstackgerritA change was merged to openstack/swift: Instruction for multi node setup misses /var/run/swift creation  https://review.openstack.org/2464119:20
*** davidha has joined #openstack-dev19:21
openstackgerritA change was merged to openstack/keystone: Ensure delete domain removes all owned entities  https://review.openstack.org/2457519:22
*** gasbakid has joined #openstack-dev19:22
crazedtopol: since user_tree_dn = ou=users,ou=openstack,dc=example,dc=net and query_scope = sub, the search will go down each tree it finds under ou=users,ou=openstack,etc. since ou=posix_accounts is an alias object, it returns a reference, it's up to the client to then follow that reference, which the patch exposes as a setting19:22
crazedtopol: once the ldap client can follow the reference it just finds regular inetOrgPerson or whatever object class you have configured to search for19:23
ayounggyee,  something like this?  https://review.openstack.org/2466519:23
crazedi was just lucky someone else added query scoping19:23
*** cp16net is now known as cp16net|away19:24
*** stevemar2 has joined #openstack-dev19:24
gyeeayoung, yes19:24
*** stevemar has quit IRC19:24
topolcrazed, Makes sense! Thanks19:25
*** doude has left #openstack-dev19:26
*** gasbakid has quit IRC19:26
*** Ryan_Lane has quit IRC19:27
*** marun has quit IRC19:29
*** Ryan_Lane has joined #openstack-dev19:30
*** gasbakid has joined #openstack-dev19:31
*** READ10 has quit IRC19:32
*** cp16net|away is now known as cp16net19:33
*** agentle_ has joined #openstack-dev19:33
crazedayoung: so we want to rename identity_api to controller? self.controller = identity.Manager() or what, was a bit confused about the names since i don't know the history19:34
ayoungcrazed, yeah, man is a bad name, as the manager is just the thing that makes the controller.19:34
*** marun has joined #openstack-dev19:34
ayoungcrazed, one of my Havana clean up items (in my head at least) is to get rid of the managers19:35
ayoungTHere is a better way to do that kind of stuff19:35
ayoungso _man is _controller for consistency19:35
crazedokay19:35
crazedsounds like a simple sed19:35
*** annegentle has quit IRC19:36
*** agentle_ is now known as annegentle19:36
*** adjohn has joined #openstack-dev19:37
*** READ10 has joined #openstack-dev19:37
*** nati_ueno has joined #openstack-dev19:37
crazedayoung: user_ref = self.identity_controller.get_user(user['id']) is the kind of stuff you want everywhere right? just wantn to make sure before i commt this19:39
*** danwent has joined #openstack-dev19:39
openstackgerritA change was merged to openstack/nova: Remove dead code.  https://review.openstack.org/2466019:39
openstackgerritA change was merged to openstack/python-keystoneclient: Cache tokens using memorycache from oslo.  https://review.openstack.org/2330919:40
*** alop has quit IRC19:42
*** harlowja has joined #openstack-dev19:44
*** harlowja has left #openstack-dev19:44
ayoungcrazed that is correct.  It is calling on a controller object after all19:44
*** beagles is now known as beagles|music_le19:45
ayoungjaypipes, can end users make calls directly to Nova Compute, or is that absolutely hidden behind Nova API?19:45
*** beagles|music_le is now known as beagles|l8r19:45
jaypipesayoung: nova API == Nova Compute... or are you referring to whether a user can somehow send a message to the nova-compute daemon and initiate some action?19:46
*** dosaboy has joined #openstack-dev19:49
ayoungjaypipes, so, see this is what messes up newbies19:51
ayoungNova API != Nova Compute, at least not in the docuemntation19:51
ayoungwhen we are talking about deploymnet19:51
ayoungwhat is the name of the server that runs on the hypervisor machine?19:52
jaypipesayoung: nova-compute on Ubuntu systems.19:52
jaypipesif server == daemon19:52
ayoungHence my usage of that term minus the hyphen19:52
jaypipesayoung: I still don't know what you are asking.19:52
ayoungWe probably should distinguish between the Nova API Faced and the Nova compute nodes19:53
ayoungjaypipes, can I talk directly to a nova-compute server19:53
jaypipesayoung: no19:53
jaypipesayoung: not unless "I" == "nova-api or nova-scheduler daemons"19:53
ayoungjaypipes, even for orchestration, load balancing, failover, high availability type stuff?19:53
jaypipesayoung: correct.19:54
*** terryw has quit IRC19:54
*** otherwiseguy has quit IRC19:54
ayoungjaypipes, so if we have some sort of multi-site aware daemon, and it is doing unspeakable things with Open stack it will just be orchesatrating between Nova API servers...whatever the proper name is for that19:54
jaypipesayoung: the interface to nova-compute and nova-network daemons is via the message queue. and the API and scheduler daemons send messages to the nova-compute and nova-network worker daemons. there is no other interface by which to interact with those services, AFAIK19:55
ayoungjaypipes, but an end user could attempt to link up two sites by having Q-to-Q integration, no?19:55
jaypipesayoung: AFAIK, yes.19:55
jaypipesayoung: uhm, not sure about the Q-to-Q integration.19:56
*** ijw1 has joined #openstack-dev19:56
*** ijw1 has quit IRC19:56
jaypipesayoung: haven't tried that :)19:56
*** ijw1 has joined #openstack-dev19:56
jaypipesayoung: multi-site operations would most likely be API-driven.19:56
crazedayoung: damn, causes a bunch of line to long errors with pep8, i'll have to look at committing that a bit later19:56
*** avishay_zzz has quit IRC19:56
ayoungcrazed, post it an I will clean it up.  I have experience with that\19:56
*** ijw has quit IRC19:57
ayoungjaypipes, trying to suss out the true requirements on Securing a cross site deployment19:57
jaypipesayoung: much easier to secure without getting into cross-site MQ, at least IMHO :)19:58
ayoungjaypipes, it is always easier up front to ignore the difficult things.  But not always overall19:58
*** dolphm has joined #openstack-dev19:59
ayoungI just want to confirm that securing MQ is different than securing the HTTPS services19:59
jaypipesyes it is.19:59
zykes-markmcclain: di you get a chance too look ?19:59
ayoungI'm not 100% convinced that is the case19:59
ayoungbut I might be asking you to prove a negative, which, as we know, is unpossible19:59
jaypipesayoung: we wouldn't think of allowing MQ traffic outside of the internal ops network....20:00
jaypipesayoung: which does not travel cross-site20:00
*** rnirmal_ has joined #openstack-dev20:01
ayoungWell, if Open Stack has reinforced one thing, it is that different people deploy in different ways.20:01
ayoungI'm wondering if that is true for Internal cloud20:01
*** adalbas has quit IRC20:02
ayoungjaypipes, I'm trying to validate the assumption that only "trusted" nodes have access to the Message Queues.20:02
*** rnirmal has quit IRC20:02
*** rnirmal_ is now known as rnirmal20:02
jaypipesayoung: depends what you mean by "trusted" I suppose...20:03
jaypipesayoung: if you mean "communication from nodes on a physically separate network interface", I would say that is up to the deployer to ensure... not something that OpenStack services or packages should be doing20:04
ayoungjaypipes, well, assuming that they are not hacked, I mean services where you don't have to worry about one end user reading/writing messages on queues that they shouldn't be20:04
*** avishay_zzz has joined #openstack-dev20:05
*** jimfehlig has quit IRC20:05
*** rafaduran has quit IRC20:05
jaypipesayoung: that is up to the deployer to handle IMHO. End users should never even be allowed anywhere near a dom0 or bare-metal host, and I don't see how ensuring that is the case is the job of anyone other than the deployer?20:06
ayoungjaypipes, at one extreme, you make the assumption that anyone can read any traffic on any queue, and you encrypt the messages themselves.  If you don't care about evesdropping, you can get away with just signing the messages20:06
*** nati_ueno has quit IRC20:06
jaypipesayoung: and on the other extreme?20:06
ayoungIf messages go cross site, while each side might be trusted, the sites might not trust each other20:06
ayoungjaypipes, what we have now...crunchy on the outside with a chewy center20:07
ayoungall nodes are trusted to read and write on all queus20:07
jaypipesayoung: haven't thought about it much :) there's no way I'm going to be doing cross-site MQ traffic, like I said ;)20:07
ayoungand we just assume they will behave20:07
*** lloydde has quit IRC20:07
ayoungjaypipes, if we were going to do cross site, I assume it would be with deliberate integration points.  There are ways to limit the vulnerability, and still use message brokers20:08
*** alop has joined #openstack-dev20:08
ayoungjaypipes, I am trying to figure out how to improve our current Token system, and whether we need a separate mechanism for AMQP than we use for HTTPS traffic.20:09
*** lloydde has joined #openstack-dev20:09
ayoungAnd, if we do, how does that affect internal node-to-node HTTPS traffic20:09
jaypipesayoung: we don't use node-to-node HTTPS traffic... node-to-node traffic is on a separate physical network from any users20:10
ayoungjaypipes, right, internal versus external, WRT to the Auth URL in Keystone for example.20:11
*** stackNode has joined #openstack-dev20:11
jgriffithsdague: what's up?20:12
*** rnirmal has quit IRC20:13
*** imsplitbit has quit IRC20:13
*** annegentle has quit IRC20:14
*** rkukura has quit IRC20:15
openstackgerritA change was merged to openstack/quantum: Improve test coverage for quantum wsgi module  https://review.openstack.org/2069220:15
openstackgerritA change was merged to openstack/swift: swift-ring-builder blows up when not supported command requested.  https://review.openstack.org/2454920:15
*** pcm_ has quit IRC20:16
*** cp16net is now known as cp16net|away20:16
*** mestery has joined #openstack-dev20:16
openstackgerritA change was merged to openstack/horizon: Adds docs for settings/configuration.  https://review.openstack.org/2461720:18
*** rnirmal has joined #openstack-dev20:18
*** boden has quit IRC20:18
*** zb has joined #openstack-dev20:19
*** jimfehlig has joined #openstack-dev20:19
openstackgerritA change was merged to openstack/horizon: Reduce duplicate definitions about quota sets  https://review.openstack.org/2464020:20
*** Hg_ has quit IRC20:22
*** zbitter has quit IRC20:23
*** mkollaro has quit IRC20:24
*** spzala has quit IRC20:25
*** nati_ueno has joined #openstack-dev20:26
*** romcheg1 has joined #openstack-dev20:28
*** adjohn has quit IRC20:34
crazedayoung: turns out to be a bit more complicated, some methods in test_backend.py use self.identity_api, might need to fix this across the board20:37
ayoungcrazed, OK, tell you what, file a ticket for that and we'll take this patch as is.  No need to scope creep it further20:37
ayounggyee, ^^ OK with you?20:37
*** cp16net|away is now known as cp16net20:38
*** lloydde has quit IRC20:38
*** alop has quit IRC20:38
*** adjohn has joined #openstack-dev20:38
*** vipul is now known as vipul|away20:38
*** SergeyLukjanov has quit IRC20:39
*** jaybuff has joined #openstack-dev20:39
*** alop has joined #openstack-dev20:39
*** pfreund has joined #openstack-dev20:40
topolayoung, patch 17 works great on my machine!20:40
*** diogogmt has joined #openstack-dev20:40
*** dprince has quit IRC20:42
*** gongysh has joined #openstack-dev20:43
gyeeayoung, you mean the naming issue?20:43
*** vipul|away is now known as vipul20:45
*** sacharya has quit IRC20:46
*** lcheng has joined #openstack-dev20:47
*** sacharya has joined #openstack-dev20:47
crazedyeah the naming issue20:48
gyeecrazed, sure works for me20:49
*** lloydde has joined #openstack-dev20:49
*** romcheg1 has quit IRC20:50
topolayoung, re bug 1156651.  On Fedora can I always assume that inetorgperson.ldif will be in /etc/openldap/schema  after  I install OpenLDAP or do I need to be smarter???20:50
uvirtbotLaunchpad bug 1156651 in devstack "ldap database for keystone needs cosine and inetorgperson schemas imported" [Undecided,New] https://launchpad.net/bugs/115665120:50
*** romcheg1 has joined #openstack-dev20:51
*** romcheg1 has left #openstack-dev20:51
*** terryw has joined #openstack-dev20:51
ayoungtopol, not anymore you can't20:51
*** otherwiseguy has joined #openstack-dev20:51
dolphmhenrynash: was https://review.openstack.org/#/c/22327/ helpful at all?20:51
ayoungcrazed, did you file that one yet?20:51
crazedayoung: doing it now20:52
*** boris-42 has quit IRC20:53
topolayoung do I need to make the schema files part of the devstack install ldap code then so I can always guarantee I can find the schemas to add?20:53
crazedtopol: they're part of openldap, i'd assume they will always be included personally20:53
*** rnirmal has quit IRC20:54
*** alop has quit IRC20:54
*** racedo has quit IRC20:54
*** racedo has joined #openstack-dev20:54
topolcrazed, yeah I either do that or bring the files with me to remove the chance that the fedora install of openldap  decides to put them somewhere else.  Was hoping ayoung can give me insight for whats best on fedora20:55
crazedayoung: https://bugs.launchpad.net/keystone/+bug/115684020:55
uvirtbotLaunchpad bug 1156840 in keystone "tests should use identity_controller rather than identity_api" [Undecided,New]20:55
*** alop has joined #openstack-dev20:56
henrynashdolphm: yes, combining that and some other bits…should have a patch submitted tonight20:56
*** mestery has quit IRC20:56
*** markwash has quit IRC20:57
*** markwash has joined #openstack-dev20:58
*** yidclare has quit IRC20:58
*** vipul is now known as vipul|away20:59
*** vipul|away is now known as vipul20:59
topolayoung, I'll just bring those schema files along and make sure they get added for fedora.  Will get a patch for review soon20:59
crazedcrap.. just did a git clean -dfx on my keystone repo, oh well time to reinstall my venv21:01
*** beraldo has quit IRC21:02
*** yidclare has joined #openstack-dev21:02
*** markwash_ has joined #openstack-dev21:02
*** mlavalle has joined #openstack-dev21:02
*** markwash has quit IRC21:02
*** markwash_ is now known as markwash21:02
*** tomoe_ has quit IRC21:03
*** tomoe_ has joined #openstack-dev21:03
*** pabelanger has quit IRC21:03
*** topol has quit IRC21:03
*** rkukura has joined #openstack-dev21:04
dolphmayoung: henrynash: would like to get this into RC1 :) https://review.openstack.org/#/c/24397/21:04
ayoungdolphm, are we really going to modify 012?21:05
ayoungI assume we have to, don'21:06
ayoungt we?21:06
*** yidclare1 has joined #openstack-dev21:06
*** mestery has joined #openstack-dev21:06
dolphmayoung: well, 012 was functioning as if this bug didn't exist; i fixed it so that it will still attempt that behavior but will fall back on the data in extra21:06
*** yidclare has quit IRC21:06
ayoungdolphm, so the change to 012 is not necessary?21:07
dolphmayoung: well, the issue there was caught by our test coverage in test_sql_upgrade21:07
dolphmayoung: so i can't just undo it and have the patch merge21:07
ayounghmmmm21:07
ayoungI'd rather not change old migrations21:08
ayoungdolphm, what breaks if we remove that change?21:08
dolphmayoung: so, there is another, slightly weirder fix21:08
ayoungI'm all about the weird21:09
dolphmayoung: my new test breaks when it's torn down (we downgrade(0) which hits that migration with a correctly populated table)21:09
dolphmayoung: so, weird solution-- don't include a downgrade in my new migration (21)21:09
dolphmayoung: the effect is that when you downgrade, data is in the position where 012 expects it, and when you upgrade again, 21 won't change anything21:10
*** jaybuff has left #openstack-dev21:10
ayoungdolphm, ah...because if you do include it, you don't know whether a fix was put in by upgrade 22 or if it was just coded correctly and shouldn;'t be downgraded?21:10
dolphmayoung: but then 20->21->20 doesn't leave you in the original state21:10
*** koolhead17 has quit IRC21:10
ayoungwhen did we commit 1221:10
dolphmayoung: during grizzly sometime, why?21:11
dolphmm2 or m3 i'm guessing21:11
*** Ash has joined #openstack-dev21:11
*** bswartz has quit IRC21:12
*** annegentle has joined #openstack-dev21:12
ayoungdolphm, we've already broken people's rolling migrations once....I'd like to avoid doing that again.  I assume that, if you run from, say 20 through 22, you get the right output, even if you ran without the new 012?21:12
dolphmayoung: henrynash: gyee: fyi, i also just pinged -dev list about a couple RC blockers http://lists.openstack.org/pipermail/openstack-dev/2013-March/006706.html21:12
dolphmerr, couple fixes to *an* RC blocker21:12
dolphmayoung: yes, because my change is only down 012's downgrade21:13
ayoungAh....ok ,no objection, then21:13
dolphms/down/to/21:13
ayoungdolphm, approved21:13
dolphmayoung: cool21:16
dolphmayoung: henrynash: gyee: any other potential rc-blockers filed / in review? we're down to 2 bugs before ttx cuts RC1 for us21:16
*** zodiak has quit IRC21:18
*** colinmcnamara has joined #openstack-dev21:20
openstackgerritA change was merged to openstack/quantum: Validate protocol when creating VIP.  https://review.openstack.org/2422421:21
*** alop has quit IRC21:22
*** vipul is now known as vipul|away21:23
*** dolphm has quit IRC21:23
*** stevemar2 has quit IRC21:26
*** ewindisch has joined #openstack-dev21:27
*** john5223 has quit IRC21:30
*** yidclare1 has quit IRC21:30
*** flaper87 has joined #openstack-dev21:32
*** bswartz has joined #openstack-dev21:35
*** alop has joined #openstack-dev21:36
*** mrunge has quit IRC21:42
*** burris has quit IRC21:42
*** ladquin is now known as ladquin_brb21:43
*** burris has joined #openstack-dev21:43
*** rmohan has quit IRC21:48
*** eharney has quit IRC21:49
*** rmohan has joined #openstack-dev21:50
*** mkollaro has joined #openstack-dev21:50
*** kbringard has quit IRC21:56
*** dprince has joined #openstack-dev21:57
*** rushiagr has quit IRC21:58
*** colinmcnamara has quit IRC22:00
*** optyx has quit IRC22:00
*** soody has joined #openstack-dev22:00
openstackgerritA change was merged to openstack/swift: Permit functional tests against Swift with Keystone  https://review.openstack.org/2239922:03
*** vipul|away is now known as vipul22:03
*** cloudchimp has quit IRC22:05
*** Gordonz has quit IRC22:11
*** mkollaro has quit IRC22:11
*** alobbs1 has quit IRC22:13
*** burris has quit IRC22:14
*** burris has joined #openstack-dev22:14
*** dprince has quit IRC22:18
*** vipul is now known as vipul|away22:23
*** ladquin_brb is now known as ladquin22:23
*** vkmc has quit IRC22:25
zykes-markmcclain: you got a few soon ? : )22:25
*** noslzzp has quit IRC22:25
*** vkmc has joined #openstack-dev22:27
*** noslzzp has joined #openstack-dev22:28
*** esp2 has quit IRC22:29
*** annegentle has quit IRC22:31
*** edmund has quit IRC22:33
*** dolphm has joined #openstack-dev22:34
*** security has joined #openstack-dev22:35
*** megha has quit IRC22:35
*** dolphm has quit IRC22:38
*** tomoe_ has quit IRC22:38
gyeedolphm, I am about to file another bug for rc122:38
*** tomoe_ has joined #openstack-dev22:38
markmcclainzykes-: sorry still sitting in a meeting :(22:40
*** tomoe_ has quit IRC22:43
*** HenryG has joined #openstack-dev22:44
zykes-doh22:44
zykes-markmcclain: can you shout when you got some time?22:44
*** gasbakid has quit IRC22:44
*** Hg_ has joined #openstack-dev22:45
markmcclainyeah22:45
*** sacharya has quit IRC22:45
*** woodspa has quit IRC22:45
openstackgerritA change was merged to openstack/nova: Remove unused virt.disk.api methods bind/unbind  https://review.openstack.org/2459022:47
openstackgerritA change was merged to openstack/nova: Fix XenAPI performance issue  https://review.openstack.org/2470422:47
*** HenryG has quit IRC22:48
*** devoid has quit IRC22:49
*** vipul|away is now known as vipul22:54
*** Ritz-Laptop has joined #openstack-dev22:54
*** kaushikc has quit IRC22:56
*** mestery has quit IRC22:56
*** jamielennox has joined #openstack-dev22:57
*** annegentle has joined #openstack-dev23:00
*** romcheg1 has joined #openstack-dev23:00
*** esp1 has joined #openstack-dev23:00
*** yamahata_ has quit IRC23:01
*** mlavalle has left #openstack-dev23:03
*** annegentle has quit IRC23:03
*** romcheg1 has left #openstack-dev23:07
*** davidha has quit IRC23:08
*** esp1 has quit IRC23:08
*** dosaboy has quit IRC23:12
*** datsun180b has quit IRC23:15
*** rods has quit IRC23:17
*** hemna is now known as hemnafk23:17
*** diogogmt has quit IRC23:18
*** gyee has quit IRC23:18
*** pabelanger has joined #openstack-dev23:19
*** mestery has joined #openstack-dev23:19
*** gyee has joined #openstack-dev23:21
*** zzs has joined #openstack-dev23:22
*** david-lyle has quit IRC23:24
*** cloudchimp has joined #openstack-dev23:25
adam_gkeystone guys: any thoughts on this WRT RC1? https://bugs.launchpad.net/keystone/+bug/115678023:25
uvirtbotLaunchpad bug 1156780 in keystone "Folsom to Grizzly migration fails on non-empty sqlite  db." [Undecided,In progress]23:25
*** mohits has joined #openstack-dev23:27
*** mohits has quit IRC23:27
*** mohits has joined #openstack-dev23:27
*** beagles|l8r is now known as beagles23:28
*** markwash has quit IRC23:28
*** mestery has quit IRC23:29
openstackgerritA change was merged to openstack/python-novaclient: Add support for the new fixed_ip quota.  https://review.openstack.org/2455323:29
openstackgerritA change was merged to openstack/swift: Small clarification to swift-recon section of admin guide.  https://review.openstack.org/2461623:29
openstackgerritA change was merged to openstack/glance: Handle Swift 404 in scrubber  https://review.openstack.org/2382723:29
openstackgerritA change was merged to openstack/glance: Don't print sql password in debug messages  https://review.openstack.org/2452123:29
openstackgerritA change was merged to openstack/keystone: Utilize legacy_endpoint_id column (bug 1154918)  https://review.openstack.org/2439723:29
uvirtbotLaunchpad bug 1154918 in keystone "legacy_endpoint_id actually stored in 'extra'" [Low,In progress] https://launchpad.net/bugs/115491823:29
openstackgerritA change was merged to openstack/swift: Give friendly notification in swift-get-nodes  https://review.openstack.org/2395123:29
*** jhesketh has joined #openstack-dev23:31
*** mohits has quit IRC23:32
*** optyx has joined #openstack-dev23:35
*** rods has joined #openstack-dev23:35
*** roampune has quit IRC23:36
*** pfreund has quit IRC23:36
*** flaper87 has quit IRC23:36
*** vkmc has quit IRC23:40
*** digitalsanctum has joined #openstack-dev23:40
*** kpavel has joined #openstack-dev23:42
*** vkmc has joined #openstack-dev23:42
*** pixelbeat has quit IRC23:46
*** davetucker has joined #openstack-dev23:51
*** tomoe_ has joined #openstack-dev23:55

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!