| *** arosen has left #openstack-keystone | 00:07 | |
| marekd | jamielennox: o/ | 00:10 |
|---|---|---|
| jamielennox | marekd: hey - 2 minutes | 00:13 |
| jamielennox | marekd: hey | 00:20 |
| marekd | jamielennox: hey, shot you an email earlier, as it was easy to gather everything togerther. Looks like the SAML ECP wrapper class is not that easy to implement. | 00:21 |
| *** henrynash has joined #openstack-keystone | 00:22 | |
| marekd | jamielennox: what you do is two step process - load the plugin class, harvest the options, expose to the oslo.config and only then create the plugin instance, right? | 00:22 |
| jamielennox | yea, i had popped it up but had a few internal things to deal with first | 00:22 |
| marekd | jamielennox: no problem. | 00:22 |
| jamielennox | marekd: do you have a running keystone SAML instance with some test creds that i can test things against? | 00:23 |
| jamielennox | there's a bit of a setup hurdle for this stuff | 00:23 |
| marekd | jamielennox: there is, i agree. I think i could make you one machine (i don't have anything configured which would be available to anyone). | 00:23 |
| marekd | jamielennox: but, it's here more about plugin loading... | 00:24 |
| *** henrynash has quit IRC | 00:24 | |
| jamielennox | yea, that's ok, was just thinking if i had a go at modifying it | 00:24 |
| marekd | unless you are happy with the plugins as-is (which i am sure you are not, as I clearily was not implementing them the 'old way') | 00:24 |
| marekd | jamielennox: is there any way for OptParser to simply get everything that was not already parsed and pass it as a one string to a plugin? | 00:26 |
| marekd | then wrapping plugin would simply resolve what underlying plugins are gonna be used load them , get the options, and do the parsing of that remaining part? | 00:27 |
| jamielennox | marekd: maybe, the problem is most everything that is not consumed by optparser should be going to the cli app | 00:27 |
| marekd | jamielennox: shit.. | 00:27 |
| jamielennox | what do you need to pass that is freeform? | 00:27 |
| marekd | jamielennox: what do you mean freeform? | 00:28 |
| jamielennox | well is it just that it is hard to specify ahead of time what the options are, or do you need to actually be able to parse the whole CLI string | 00:28 |
| jamielennox | damn this plugin is complex | 00:29 |
| marekd | jamielennox: whose? yours or mine? | 00:29 |
| jamielennox | saml2 | 00:29 |
| jamielennox | unscoped | 00:29 |
| marekd | welcome to my world. | 00:29 |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Add tests without optional create endpoint params https://review.openstack.org/103229 | 00:31 |
| marekd | jamielennox: and that's not all. | 00:32 |
| jamielennox | marekd: line 378 do you mean POST to keystone? or you make two requests to the external idp? | 00:32 |
| marekd | jamielennox: imagine, you will need different plugins for getting unscoped token depending whether it's shibboleth idp or MS | 00:32 |
| jamielennox | heh, well, it's very flexible | 00:33 |
| marekd | jamielennox: line 378: POST to Keystone (Service Provider) | 00:34 |
| jamielennox | ok, that's what i thought the workflow was just trying not to mix up my identity providers and service providers | 00:34 |
| marekd | but it says SP | 00:34 |
| *** packet has quit IRC | 00:36 | |
| jamielennox | yep, ok | 00:37 |
| jamielennox | so we're saying that _send_idp_saml2_authn_request might be different per auth method | 00:38 |
| marekd | jamielennox: nope. I am going to finally get something working with ADFS (as a standalone python code), but as far as i know the workflow is different...e.g. you initially ask IdP for assertion and only then pass it to SP (no initial call to the SP) | 00:40 |
| marekd | so i'd say we need another whole plugin for getting unscoped token. | 00:40 |
| jamielennox | marekd: i don't see anything specific to saml2 in the scoping unscoped token review, this is something that we probably need to tackle as a general keystoneclient problem | 00:40 |
| jamielennox | marekd: but ADFS would then be a completely different federation plugin though right? not a variation on SAML2? | 00:41 |
| jamielennox | (no idea what ADFS is) | 00:41 |
| jamielennox | ugh, just seeing the acronym i never want to touch that | 00:41 |
| marekd | (Microsoft implementation of SAML IdPs) | 00:42 |
| *** jaosorior has quit IRC | 00:42 | |
| jamielennox | so is it SAML? | 00:42 |
| jamielennox | because my thought at the moment is that we define a SamlBasePlugin or something which does the common keystone parts and then you can abstract with ECP and basic auth and kerberos etc | 00:43 |
| jamielennox | pretty sure i mixed terms there ECP is not another mechanism | 00:43 |
| marekd | ADFS is saml but implementation may differ.... | 00:44 |
| marekd | jamielennox: ok, we define SamlBasePlugin | 00:44 |
| marekd | jamielennox: which needs to load underlying plugins. | 00:44 |
| marekd | jamielennox: right? | 00:44 |
| jamielennox | hmmm, ok | 00:45 |
| marekd | jamielennox: one of them would be: am i going to use Shibbolet implementation or ADFS? | 00:45 |
| jamielennox | well it depends how close ADFS is to SAML i guess | 00:45 |
| jamielennox | or to Shibbolet | 00:45 |
| marekd | jamielennox: the second: user must specify how i am going to authN with the IdP. is is user/pass, maybe some certificate (so i need a path) | 00:45 |
| jamielennox | marekd: you know you're going to end up with a plugin plugin system right ? | 00:46 |
| jamielennox | for now we ignore the unscoped -> scoped issue | 00:47 |
| marekd | jamielennox: i think that the good idea, we can hardcode few things for now and say that keystoneclient is limited to this idp auth plugin at the moment | 00:47 |
| marekd | but i thought we could make it pluggable from the beginning. | 00:47 |
| marekd | we can simply split auth plugins saying: ADFS and SAML2 are 'top level' plugins. | 00:47 |
| marekd | and we can hardcode basicauth http authN wit IdP, because AFAIK this is the most popular. | 00:48 |
| marekd | but is it a desired solution? | 00:48 |
| marekd | well... | 00:48 |
| jamielennox | so there are two types of plugins i can see | 00:48 |
| jamielennox | the ADFS/SAML and then how you actually auth to them | 00:49 |
| marekd | ADFS/SAML as a top level plugins (along with Password, Token etc)? | 00:49 |
| marekd | because we may want to squeeze those two into some kind of wrapper and try to reuse as much as possible (scoping will always be the same) | 00:50 |
| marekd | (what is different is a way the unscoped token is obtained - different messages, even different workflow) | 00:50 |
| jamielennox | i think maybe you want to look at a base class for there common features | 00:51 |
| jamielennox | rather than make them the same plugin | 00:51 |
| *** thedodd has joined #openstack-keystone | 00:51 | |
| jamielennox | probably a lot of those features are common to federation in general but worry about that later | 00:51 |
| marekd | i was thinking make a wrapper that aggregates saml/adfs plugin. | 00:52 |
| jamielennox | is there a way to tell the difference automatically? | 00:52 |
| marekd | i'd always be a blind guessing i think... | 00:52 |
| jamielennox | so the principal i've been working on was to build out really base level plugins and then look at providing wrappers later | 00:53 |
| jamielennox | for example there is the v2password and the v3password | 00:53 |
| marekd | yeah, read the code. | 00:53 |
| jamielennox | and then do https://review.openstack.org/#/c/81147/ or something to abstract it | 00:53 |
| jamielennox | (that's a lot out of date) | 00:53 |
| jamielennox | So if you want to write a Shibbolet plugin and an ADFS plugin so that people who really know what they want can use it that's good | 00:54 |
| jamielennox | and then just have a wrapper plugin around them which selects whichever is appropriate | 00:54 |
| jamielennox | you don't have to expose them at the command line if you don't want | 00:54 |
| *** thedodd has quit IRC | 00:56 | |
| jamielennox | but if there's no way for you to query the server and know the difference between SAML and ADFS then you really have no choice but to have the user tell you which to use | 00:56 |
| marekd | rather option 2. | 00:56 |
| marekd | we can blindly try both. | 00:57 |
| marekd | which is not very optimal. | 00:57 |
| *** sacharya has joined #openstack-keystone | 00:57 | |
| marekd | jamielennox: initially i was also thinking about class for IdP-authN | 00:57 |
| marekd | i want user to tell me how he wants to authenticate. | 00:57 |
| marekd | and depending on the plugin he may wants to specify different params. | 00:58 |
| marekd | *but* | 00:58 |
| marekd | i will know what options once I a)load top level plugin b) figure out what idpauthplugin user wants c) get the class.get_options() | 00:58 |
| *** sacharya has quit IRC | 00:58 | |
| *** sacharya has joined #openstack-keystone | 00:59 | |
| marekd | jamielennox: but i am more and more leaning towards hardcoding one IdP-authN method for now (HTTP Basic Auth). | 00:59 |
| jamielennox | a safe bet is just to define one class a SamlBasicAuth or something which can return you the string you need and make your SAML plugin take that for auth | 01:00 |
| jamielennox | you don't need to define more than one for now and you don't need to worry about fancy ways of loading it | 01:00 |
| jamielennox | but at least the interface is good for adding more later | 01:01 |
| marekd | interface is kinda already there. ok, i am gonna rebuild the patches so they fit the new way plugins are handled. | 01:02 |
| jamielennox | marekd: one of the other things i feel is great about plugins is that if it really all goes wrong then you can take what you learnt and write a new plugin without being left with a bunch of crap in the main part of your code | 01:02 |
| marekd | jamielennox: sure. | 01:02 |
| jamielennox | so maybe just do it simply and write a better one later when we have more Idps to accomodate | 01:03 |
| *** mberlin1 has joined #openstack-keystone | 01:06 | |
| *** mberlin has quit IRC | 01:07 | |
| marekd | jamielennox: maybe you are right. | 01:16 |
| jamielennox | marekd: simple and scrap it? i was hoping there would be some way of planning this out | 01:19 |
| marekd | jamielennox: what do you mean? | 01:20 |
| jamielennox | oh - just wondering what i was right on | 01:20 |
| marekd | jamielennox: you probably were, as we can wait next 4 releases trying to figure something perfect and neat. | 01:22 |
| marekd | instead of have something done and plan something perfect and neat.... | 01:22 |
| jamielennox | yea | 01:22 |
| jamielennox | i'd still start really specific | 01:22 |
| jamielennox | make one for Shibbolet and then when you make one for ADFS figure out what is common then | 01:23 |
| jamielennox | and then write the wrapper as a higher level rather than starting there | 01:23 |
| marekd | that may work. | 01:23 |
| marekd | so let's focus on shibboleth only now. | 01:23 |
| jamielennox | is mod_mellon the same? | 01:24 |
| marekd | it doesn't matter. | 01:24 |
| marekd | it's all about the IdP, not SP - mod_shib, mod_mellon is SP. | 01:24 |
| jamielennox | ok, i was just wondering about naming it shibboleth - i thought that might imply something on keystone as wel | 01:25 |
| *** amcrn has quit IRC | 01:25 | |
| marekd | mod_mellons does what mod_shib does. | 01:25 |
| marekd | mod_mellon* | 01:25 |
| marekd | anyway. | 01:25 |
| marekd | the saml plugin is split into two atm. | 01:25 |
| marekd | one class gets unscoped token, the latter one scopes it basing on the unscpoed token. | 01:26 |
| marekd | do you think this will live without some kind of a wrapper? | 01:26 |
| marekd | ah, maybe it will.... | 01:27 |
| marekd | ScopeTokenPlugin as a top level class which simply contains the UnscopedTokenPlugin object inside... | 01:27 |
| jamielennox | so we need a general mechanism to scope an unscoped token - regardless of SAML | 01:29 |
| jamielennox | I don't really know how to handle that, but it's pressing | 01:29 |
| jamielennox | any ideas? | 01:29 |
| jamielennox | i mean you can do it now using the auth.v3.Token plugin | 01:30 |
| marekd | jamielennox: not really as I need to call /v3/OS-FEDERATION/{projects,domains} if the user doesn't specify the project or domain prior to authN | 01:31 |
| marekd | that's why i wrote my plugin for that. | 01:31 |
| jamielennox | what does that give you? the list of available projects/domains for that token? | 01:32 |
| marekd | yes. | 01:32 |
| marekd | based on *groups* | 01:32 |
| marekd | because the user doesn't exist in the Keystone's backend. | 01:32 |
| jamielennox | ok, so you can still do v3.auth.Token(auth_url='http://keystone:5000/v3', token=unscoped.get_token(), project_id=project_id) | 01:32 |
| *** marcoemorais has quit IRC | 01:33 | |
| jamielennox | and just fetch the project_id or domain_id from that URL rather than for the standard one | 01:33 |
| marekd | but i'd need to do this before I call auth.Token(...) | 01:33 |
| jamielennox | yes | 01:34 |
| marekd | jamielennox: ok. | 01:34 |
| jamielennox | v3.auth.Token() is purely get a token based off an existing token, it doesn't know what domain_ids are available or what project_ids are available to the user | 01:34 |
| marekd | jamielennox: exactly. | 01:34 |
| marekd | jamielennox: it assumes the token is somewhere in the environment or somewhere else, right? | 01:35 |
| jamielennox | it's provided via __init__ | 01:35 |
| marekd | jamielennox: is auth.Token a AuthMethod or AuthConstructor? | 01:35 |
| jamielennox | There's both i think | 01:36 |
| jamielennox | TokenMethod and Token | 01:36 |
| *** praneshp has quit IRC | 01:36 | |
| marekd | because i am thinking how to squeeze it into one user's call. | 01:36 |
| marekd | supposely user specifies --os-auth-plugin=saml2 --project-id='bla' | 01:37 |
| marekd | and i want him to get the scoped token as an effect | 01:37 |
| jamielennox | i don't think that you want the method, you aren't going to want to combine it with another auth mechanism | 01:37 |
| jamielennox | yep - you will need a wrapper plugin that does the fetch unsocped then if project_id: scope with v3.Token | 01:38 |
| marekd | jamielennox: ok, i wanted to make sure i am not missing something obviously clear and we are on the same page. | 01:39 |
| marekd | ok, i will try that then. | 01:39 |
| marekd | jamielennox: thanks | 01:39 |
| jamielennox | marekd: looking forward to see how it turns out | 01:40 |
| jamielennox | you're pushing this further than i was ever thinking about | 01:40 |
| marekd | jamielennox: there is simply a need for that and that's all. I hadn't predict that either. | 01:40 |
| *** praneshp has joined #openstack-keystone | 01:41 | |
| *** praneshp has quit IRC | 01:42 | |
| *** praneshp has joined #openstack-keystone | 01:44 | |
| *** richm has left #openstack-keystone | 01:49 | |
| *** praneshp has quit IRC | 01:51 | |
| *** browne has quit IRC | 01:55 | |
| *** praneshp has joined #openstack-keystone | 02:06 | |
| *** zhiyan_ is now known as zhiyan | 02:07 | |
| *** shufflebot has quit IRC | 02:12 | |
| *** shufflebot has joined #openstack-keystone | 02:13 | |
| *** praneshp has quit IRC | 02:22 | |
| *** richm has joined #openstack-keystone | 02:33 | |
| *** richm has left #openstack-keystone | 02:34 | |
| *** vhoward has joined #openstack-keystone | 02:47 | |
| *** diegows has quit IRC | 02:53 | |
| *** hrybacki has joined #openstack-keystone | 02:57 | |
| openstackgerrit | ling-yun proposed a change to openstack/keystone-specs: Add log translation hints for keystone https://review.openstack.org/105954 | 03:01 |
| *** henrynash has joined #openstack-keystone | 03:04 | |
| *** henrynash has quit IRC | 03:09 | |
| openstackgerrit | ling-yun proposed a change to openstack/keystone-specs: Add log translation hints for keystone https://review.openstack.org/105954 | 03:21 |
| *** dims_ has quit IRC | 03:22 | |
| *** dims_ has joined #openstack-keystone | 03:23 | |
| *** vhoward has left #openstack-keystone | 03:24 | |
| *** hrybacki has quit IRC | 03:24 | |
| openstackgerrit | ling-yun proposed a change to openstack/keystone-specs: Add log translation hints for keystone https://review.openstack.org/105954 | 03:25 |
| *** browne has joined #openstack-keystone | 03:39 | |
| openstackgerrit | Marek Denis proposed a change to openstack/keystone: Add _BaseFederationExtension class https://review.openstack.org/104577 | 03:47 |
| openstackgerrit | Marek Denis proposed a change to openstack/keystone: Implement Service Providers API for OS-FEDERATION https://review.openstack.org/104623 | 03:47 |
| openstackgerrit | Marek Denis proposed a change to openstack/keystone: Implement Service Providers API for OS-FEDERATION https://review.openstack.org/104623 | 03:53 |
| *** browne has quit IRC | 03:54 | |
| *** dims_ has quit IRC | 03:57 | |
| *** chandankumar has joined #openstack-keystone | 04:34 | |
| *** chandankumar has quit IRC | 04:44 | |
| *** dims_ has joined #openstack-keystone | 04:53 | |
| *** ajayaa has joined #openstack-keystone | 04:56 | |
| *** dims_ has quit IRC | 05:02 | |
| *** sacharya has quit IRC | 05:05 | |
| *** ukalifon1 has joined #openstack-keystone | 05:24 | |
| *** chandankumar has joined #openstack-keystone | 05:24 | |
| *** dstanek_zzz is now known as dstanek | 05:31 | |
| *** k4n0 has joined #openstack-keystone | 05:35 | |
| *** praneshp has joined #openstack-keystone | 05:36 | |
| *** bobt has joined #openstack-keystone | 05:52 | |
| *** marcoemorais has joined #openstack-keystone | 05:52 | |
| *** marcoemorais1 has joined #openstack-keystone | 05:53 | |
| *** marcoemorais has quit IRC | 05:56 | |
| *** marcoemorais1 has quit IRC | 05:57 | |
| openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/keystone: Imported Translations from Transifex https://review.openstack.org/103380 | 06:00 |
| *** tomoiaga has joined #openstack-keystone | 06:16 | |
| *** harlowja is now known as harlowja_away | 06:47 | |
| *** tomoiaga has quit IRC | 06:51 | |
| *** tomoiaga has joined #openstack-keystone | 06:58 | |
| *** dstanek is now known as dstanek_zzz | 07:02 | |
| *** daneyon has joined #openstack-keystone | 07:02 | |
| *** daneyon has quit IRC | 07:13 | |
| *** stevemar has joined #openstack-keystone | 07:13 | |
| *** BAKfr has joined #openstack-keystone | 07:20 | |
| *** praneshp_ has joined #openstack-keystone | 07:31 | |
| *** tkelsey has joined #openstack-keystone | 07:32 | |
| *** bobt has quit IRC | 07:33 | |
| *** praneshp has quit IRC | 07:34 | |
| *** praneshp_ is now known as praneshp | 07:34 | |
| *** xianghui has joined #openstack-keystone | 07:45 | |
| *** praneshp has quit IRC | 07:47 | |
| *** bvandenh has quit IRC | 07:51 | |
| tomoiaga | I wonder if there is a way without changing the code, to generate a token (as admin) for another user. Right now I am scoping a token to a tenant to have it contained, not sure if that's the best approach | 07:52 |
| *** dstanek_zzz is now known as dstanek | 07:53 | |
| *** dstanek is now known as dstanek_zzz | 08:03 | |
| *** stevemar has quit IRC | 08:11 | |
| *** ajayaa has quit IRC | 08:21 | |
| *** ajayaa has joined #openstack-keystone | 08:34 | |
| *** bvandenh has joined #openstack-keystone | 09:01 | |
| *** zhiyan is now known as zhiyan_ | 09:04 | |
| d0ugal | Should keystone endpoints include the version or not? i.e. /v1/? | 09:04 |
| *** zigo has quit IRC | 09:05 | |
| d0ugal | Trying to decide the best practice here - should the client figure out the version or should it be provided by the endpoint? | 09:05 |
| *** zigo has joined #openstack-keystone | 09:07 | |
| *** junhongl has joined #openstack-keystone | 09:13 | |
| tomoiaga | d0ugal: You can check the keystoneclient discovery class to see how it operates as an example. You can specify the version to some clients (not sure if all clients support that) but the version needs to be the same as the endpoint. If you set version 3 for keystone and the url is for version 2, chances are things will fail to work properly | 09:19 |
| tomoiaga | d0ugal: as an example, I am using the full url (including /v3) for the endpoint and also specify the version for the client. I could use the discovery class to see what versions I have available and decide what to do next (keystoneclient should already use the discovery class, nova doesn't have one as far as I know, it just tries versions based on url and falls back to v1 if it doesn't work) | 09:21 |
| tomoiaga | by nova I mean novaclient | 09:21 |
| d0ugal | tomoiaga: I see | 09:22 |
| d0ugal | So it seems to vary somewhat | 09:22 |
| d0ugal | I'll take a look at a few clients, starting with keystone :) | 09:22 |
| d0ugal | Thanks! | 09:22 |
| tomoiaga | d0ugal: usually if the examples provided in the docs include the version, you should include it too. I can work without versions in urls and just set the version in the client but doing this will require some code checking to make sure everything is ok. | 09:23 |
| d0ugal | tomoiaga: Makes sense. | 09:24 |
| d0ugal | tomoiaga: The issue I ran into is that Barbican doesn't include the version in the devstack setup, but the barbican client expects it to be included | 09:24 |
| d0ugal | So I was wondering if this should be fixed in the devstack integration or the barbican client :) | 09:24 |
| tomoiaga | d0ugal: if it's expected then most likely it should be fixed :) | 09:25 |
| *** zhiyan_ is now known as zhiyan | 09:27 | |
| *** kwss has joined #openstack-keystone | 09:47 | |
| *** afazekas has joined #openstack-keystone | 09:51 | |
| *** dstanek_zzz is now known as dstanek | 09:52 | |
| ajayaa | dolphm, jaimelennox, dstanek, When I am running "tox -v -edebug keystoneclient.tests.test_auth_token_middleware" it shows output "Ran 0 tests in 0.001s" | 09:55 |
| ajayaa | Strangely this happens when I insert a debug point in code. | 09:56 |
| ajayaa | When I remove that it outputs "Ran 191 tests in 1.534s" | 09:57 |
| *** dstanek is now known as dstanek_zzz | 10:02 | |
| *** xianghui has quit IRC | 10:07 | |
| *** henrynash has joined #openstack-keystone | 10:08 | |
| *** junhongl has quit IRC | 10:24 | |
| *** ajayaa has quit IRC | 10:36 | |
| *** andreaf has joined #openstack-keystone | 10:42 | |
| openstackgerrit | Ajaya Agrawal proposed a change to openstack/keystonemiddleware: Correct return code https://review.openstack.org/106010 | 10:43 |
| *** ajayaa has joined #openstack-keystone | 10:53 | |
| *** x1b2j has joined #openstack-keystone | 10:53 | |
| *** dstanek_zzz is now known as dstanek | 11:00 | |
| *** henrynash has quit IRC | 11:01 | |
| openstackgerrit | Kristy Siu proposed a change to openstack/keystone-specs: Adding support for Virtual Organisation Management https://review.openstack.org/105769 | 11:15 |
| *** k4n0 has quit IRC | 11:26 | |
| ajayaa | jamielennox, ping! | 11:41 |
| * jamielennox was trying to sneak through | 11:41 | |
| jamielennox | ajayaa: what's up | 11:42 |
| ajayaa | jamielennox, as part of https://blueprints.launchpad.net/python-keystoneclient/+spec/keystoneclient-auth-token I believe we need to make middleware use keystone client only. | 11:43 |
| ajayaa | Is there some functionality which needs to be moved to keystone client? | 11:43 |
| jamielennox | there are pieces that are slowly moving but there is more | 11:44 |
| jamielennox | umm' | 11:44 |
| jamielennox | revocation is already being moved | 11:44 |
| jamielennox | i think fetching certificates and parsing the CMS tokens needs to be part of client | 11:45 |
| ajayaa | okay. I was looking if I could help somewhere. :) | 11:45 |
| jamielennox | ajayaa: always apreciated - you know we are moving all this to keystonemiddleware now so propose any changes over there | 11:46 |
| jamielennox | there's at least one review about using the session and the auth plugins that is fairly vital to the using client process | 11:46 |
| ajayaa | I am aware of that. I submitted one patch to keystonemiddleware. | 11:47 |
| *** openstackgerrit has quit IRC | 11:47 | |
| jamielennox | ok, jut checking as that's fairly new | 11:48 |
| jamielennox | alright, i'm out - night | 11:50 |
| *** jamielennox is now known as jamielennox|away | 11:50 | |
| samuelmz | dolphm, ping | 11:54 |
| samuelmz | dolphm, I'm working on the hierarchical projects implementation. Once we have a new attribute on projects called parent_project_id, I'm having trouble when mapping this new attribute to ldap | 11:57 |
| *** afazekas has quit IRC | 12:04 | |
| *** dstanek is now known as dstanek_zzz | 12:10 | |
| *** daneyon has joined #openstack-keystone | 12:17 | |
| *** daneyon has quit IRC | 12:18 | |
| *** daneyon has joined #openstack-keystone | 12:19 | |
| *** afazekas has joined #openstack-keystone | 12:19 | |
| *** dims has joined #openstack-keystone | 12:25 | |
| *** _elmiko is now known as elmiko | 12:26 | |
| *** tkelsey has quit IRC | 12:31 | |
| *** xianghui has joined #openstack-keystone | 12:32 | |
| *** dhellmann is now known as dhellmann_ | 12:38 | |
| *** afazekas has quit IRC | 12:44 | |
| *** daneyon has quit IRC | 12:48 | |
| *** miqui_ is now known as miqui | 12:56 | |
| *** afazekas has joined #openstack-keystone | 12:57 | |
| *** dstanek_zzz is now known as dstanek | 13:04 | |
| *** radez_g0n3 is now known as radez | 13:06 | |
| *** afazekas has quit IRC | 13:08 | |
| *** ajayaa has quit IRC | 13:10 | |
| *** hrybacki has joined #openstack-keystone | 13:23 | |
| *** kwss has quit IRC | 13:24 | |
| *** hrybacki_ has joined #openstack-keystone | 13:24 | |
| *** __afazekas is now known as afazekas | 13:27 | |
| *** hrybacki has quit IRC | 13:28 | |
| *** hrybacki_ has quit IRC | 13:44 | |
| *** dstanek is now known as dstanek_zzz | 13:52 | |
| *** zhiyan is now known as zhiyan_ | 13:56 | |
| *** vhoward has joined #openstack-keystone | 13:56 | |
| *** joesavak has joined #openstack-keystone | 14:00 | |
| *** lbragstad_ has joined #openstack-keystone | 14:03 | |
| *** lbragstad_ is now known as lbragstad | 14:03 | |
| *** dstanek_zzz is now known as dstanek | 14:08 | |
| *** topol has joined #openstack-keystone | 14:09 | |
| *** jaosorior has joined #openstack-keystone | 14:09 | |
| *** topol has quit IRC | 14:10 | |
| *** stevemar has joined #openstack-keystone | 14:15 | |
| *** hrybacki has joined #openstack-keystone | 14:15 | |
| *** topol has joined #openstack-keystone | 14:25 | |
| *** kwss has joined #openstack-keystone | 14:25 | |
| *** sacharya has joined #openstack-keystone | 14:26 | |
| *** bknudson has joined #openstack-keystone | 14:29 | |
| *** sacharya has quit IRC | 14:32 | |
| *** dstanek is now known as dstanek_zzz | 14:34 | |
| *** morganfainberg_Z is now known as morganfainberg | 14:36 | |
| morganfainberg | samuelmz, we're at the Keystone hackathon today. we'll be a bit hit and miss here today | 14:37 |
| dolphm | samuelmz: eek. that's a good question! bknudson^? | 14:43 |
| *** ukalifon1 has quit IRC | 14:43 | |
| dolphm | samuelmz: bknudson: or maybe the answer is that we just don't want to support ldap assignment + hierarchical multitenancy :) | 14:44 |
| bknudson | we hardly support ldap assignment as is | 14:44 |
| morganfainberg | bknudson, ++ | 14:44 |
| morganfainberg | samuelmz, Ldap assignment is _very_ limited compared to the sql assignment backend | 14:45 |
| bknudson | If the question is do we really need to support ldap for hierarchical multitenancy, I would say let's not do it. | 14:45 |
| dolphm | ++ | 14:46 |
| *** thedodd has joined #openstack-keystone | 14:57 | |
| *** Farhan has joined #openstack-keystone | 15:02 | |
| *** dstanek_zzz is now known as dstanek | 15:08 | |
| *** dstanek is now known as dstanek_zzz | 15:09 | |
| *** david-lyle has joined #openstack-keystone | 15:11 | |
| *** sacharya has joined #openstack-keystone | 15:13 | |
| dolphm | is the gate 100% failing? | 15:16 |
| *** richm has joined #openstack-keystone | 15:17 | |
| *** morganfainberg is now known as morganfainberg_Z | 15:19 | |
| *** morganfainberg_Z is now known as morganfainberg | 15:20 | |
| morganfainberg | dolphm, it looks like it | 15:23 |
| *** lbragstad has quit IRC | 15:30 | |
| *** radez is now known as radez_g0n3 | 15:31 | |
| *** chandankumar has quit IRC | 15:31 | |
| *** openstackgerrit has joined #openstack-keystone | 15:32 | |
| *** radez_g0n3 is now known as radez | 15:34 | |
| stevemar | dolphm, morganfainberg seems lie it | 15:41 |
| *** thedodd has quit IRC | 15:54 | |
| *** thedodd has joined #openstack-keystone | 15:56 | |
| *** bknudson1 has joined #openstack-keystone | 15:59 | |
| *** bknudson has quit IRC | 16:00 | |
| *** kwss has quit IRC | 16:00 | |
| *** dstanek_zzz is now known as dstanek | 16:04 | |
| *** david-lyle has quit IRC | 16:06 | |
| *** bknudson1 has quit IRC | 16:06 | |
| *** tomoiaga has quit IRC | 16:06 | |
| *** david-lyle has joined #openstack-keystone | 16:07 | |
| *** Farhan has quit IRC | 16:09 | |
| samuelmz | dolphm, morganfainberg, bknudson, I was adding a parent_project_id mapping as we have for project's description ... but the problem is that, with the current implementation, if we create a project with parent_project_id being None, it wont be stored in ldap, neither retrieved from it.. | 16:12 |
| samuelmz | you're saying ldap support is quite complex and we should not (or dont need to implement) hierarchical projects support on it, right? | 16:13 |
| *** lbragstad_ has joined #openstack-keystone | 16:16 | |
| *** lbragstad_ is now known as lbragstad | 16:16 | |
| *** bknudson has joined #openstack-keystone | 16:21 | |
| openstackgerrit | Marek Denis proposed a change to openstack/keystone: WebSSO patch https://review.openstack.org/106096 | 16:22 |
| *** bobt has joined #openstack-keystone | 16:22 | |
| openstackgerrit | Marek Denis proposed a change to openstack/keystone: Keystone part of a PoC for Horizon/Keystone WebSSO https://review.openstack.org/106096 | 16:23 |
| stevemar | marekd, websso patches eh? | 16:23 |
| marekd | stevemar: you wanted me to publish those hacks so ppl can take a look....:( | 16:24 |
| marekd | stevemar: this patch's gonna die either way | 16:25 |
| stevemar | marekd, me? | 16:25 |
| stevemar | marekd, dying patches are cool | 16:25 |
| marekd | stevemar: everybody.... | 16:25 |
| marekd | yesterday | 16:25 |
| *** marcoemorais has joined #openstack-keystone | 16:26 | |
| *** bobt has quit IRC | 16:30 | |
| *** radez is now known as radez_g0n3 | 16:30 | |
| *** radez_g0n3 is now known as radez | 16:31 | |
| *** xianghui has quit IRC | 16:39 | |
| *** BAKfr has quit IRC | 16:40 | |
| *** thedodd has quit IRC | 16:44 | |
| *** tkelsey has joined #openstack-keystone | 16:44 | |
| stevemar | marekd, http://status.openstack.org/elastic-recheck/ | 16:45 |
| marekd | stevemar: THANK YOU SIR! | 16:45 |
| *** chandankumar has joined #openstack-keystone | 16:45 | |
| *** fpatwa has joined #openstack-keystone | 16:47 | |
| *** andreaf has quit IRC | 16:52 | |
| *** thedodd has joined #openstack-keystone | 16:58 | |
| *** lbragstad has quit IRC | 17:09 | |
| *** daneyon has joined #openstack-keystone | 17:10 | |
| *** sacharya has quit IRC | 17:11 | |
| *** topol has quit IRC | 17:13 | |
| *** harlowja_away is now known as harlowja | 17:13 | |
| *** bknudson has quit IRC | 17:17 | |
| *** dstanek is now known as dstanek_zzz | 17:19 | |
| *** richm has quit IRC | 17:21 | |
| *** praneshp has joined #openstack-keystone | 17:26 | |
| *** daneyon has quit IRC | 17:27 | |
| *** dhellmann_ is now known as dhellmann | 17:27 | |
| *** daneyon has joined #openstack-keystone | 17:27 | |
| *** harlowja has quit IRC | 17:30 | |
| *** harlowja has joined #openstack-keystone | 17:30 | |
| *** gyee has joined #openstack-keystone | 17:34 | |
| *** richm has joined #openstack-keystone | 17:36 | |
| *** dstanek_zzz is now known as dstanek | 17:40 | |
| *** richm has quit IRC | 17:40 | |
| *** joesavak has quit IRC | 17:41 | |
| *** sacharya has joined #openstack-keystone | 17:44 | |
| *** amerine has joined #openstack-keystone | 17:48 | |
| *** joesavak has joined #openstack-keystone | 17:53 | |
| *** hrybacki has quit IRC | 17:53 | |
| *** richm has joined #openstack-keystone | 17:55 | |
| *** dstanek is now known as dstanek_zzz | 17:55 | |
| *** hrybacki has joined #openstack-keystone | 17:56 | |
| *** dstanek_zzz is now known as dstanek | 17:57 | |
| *** shufflebot has quit IRC | 18:01 | |
| *** shufflebot has joined #openstack-keystone | 18:01 | |
| marekd | dolphm: https://review.openstack.org/106096 websso in Keystone | 18:11 |
| morganfainberg | marekd, nice | 18:13 |
| marekd | morganfainberg: uploading django part. please keep in mind this is more for you to take a look. | 18:13 |
| morganfainberg | marekd, absolutely | 18:13 |
| morganfainberg | marekd, it's good to see the code! | 18:13 |
| marekd | morganfainberg: so no -2 :D (/cc ayoung). I will abandon it eventualy, just didn't want to show it on github directly. | 18:14 |
| *** andreaf has joined #openstack-keystone | 18:17 | |
| marekd | morganfainberg: dolphm dstanek: websso in django: https://review.openstack.org/#/c/106131/ | 18:18 |
| *** tkelsey has quit IRC | 18:19 | |
| marekd | dstanek: another one, with already one +2 earned: https://review.openstack.org/#/c/83829/ | 18:24 |
| *** vhoward has left #openstack-keystone | 18:25 | |
| *** andreaf has quit IRC | 18:31 | |
| *** marcoemorais has quit IRC | 18:32 | |
| *** marcoemorais has joined #openstack-keystone | 18:33 | |
| *** bknudson has joined #openstack-keystone | 18:33 | |
| *** marcoemorais has quit IRC | 18:33 | |
| *** marcoemorais has joined #openstack-keystone | 18:33 | |
| *** marcoemorais has quit IRC | 18:34 | |
| *** marcoemorais has joined #openstack-keystone | 18:34 | |
| *** bknudson has quit IRC | 18:37 | |
| *** lbragstad_ has joined #openstack-keystone | 18:37 | |
| *** gabriel-bezerra has quit IRC | 18:41 | |
| *** topol has joined #openstack-keystone | 18:49 | |
| *** marcoemorais has quit IRC | 18:51 | |
| marekd | joesavak: are you happy with multiple public keys tied to an IdP? | 18:53 |
| *** gabriel-bezerra has joined #openstack-keystone | 18:53 | |
| joesavak | marekd2 - sure - but just 2 should be enough from an implementor standpoint to enable them to rotate keys | 18:54 |
| *** bknudson has joined #openstack-keystone | 18:56 | |
| stevemar | joesavak, marekd you are 1 person apart | 18:56 |
| stevemar | some jerk is in between | 18:56 |
| joesavak | stevemar - move! | 18:56 |
| joesavak | ;) | 18:56 |
| stevemar | marekd, how is https://review.openstack.org/#/c/83829/ not in yet :( | 18:57 |
| marekd | dstanek: (kitten eyes) https://review.openstack.org/#/c/83829/ ? :-) | 18:58 |
| stevemar | marekd, ref: http://imgur.com/LOeGj?tags | 18:58 |
| marekd | stevemar: ++ | 18:58 |
| *** marcoemorais has joined #openstack-keystone | 18:59 | |
| *** arosen has joined #openstack-keystone | 19:04 | |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Avoid loading a ref to delete the ref https://review.openstack.org/106140 | 19:13 |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Avoid loading a ref from SQL to delete the ref https://review.openstack.org/106140 | 19:15 |
| *** lbragstad_ is now known as lbragstad | 19:16 | |
| *** lbragstad has quit IRC | 19:18 | |
| *** lbragstad has joined #openstack-keystone | 19:18 | |
| *** chandankumar has quit IRC | 19:25 | |
| *** thedodd has quit IRC | 19:29 | |
| *** thedodd has joined #openstack-keystone | 19:32 | |
| *** zhiyan_ is now known as zhiyan | 19:52 | |
| *** daneyon has quit IRC | 19:55 | |
| *** marcoemorais has quit IRC | 20:03 | |
| *** bknudson has quit IRC | 20:04 | |
| *** bknudson has joined #openstack-keystone | 20:06 | |
| *** marcoemorais has joined #openstack-keystone | 20:09 | |
| *** sacharya has quit IRC | 20:15 | |
| *** diegows has joined #openstack-keystone | 20:16 | |
| *** bknudson has quit IRC | 20:17 | |
| openstackgerrit | A change was merged to openstack/keystone: Correct the region table to be InnoDB and UTF8 https://review.openstack.org/102964 | 20:19 |
| openstackgerrit | A change was merged to openstack/keystone: Make OS-FEDERATION core.Driver methods abstract https://review.openstack.org/104851 | 20:19 |
| *** bobt has joined #openstack-keystone | 20:22 | |
| *** bknudson has joined #openstack-keystone | 20:26 | |
| openstackgerrit | A change was merged to openstack/keystone: HEAD responses should return same status as GET https://review.openstack.org/104026 | 20:27 |
| *** bknudson has quit IRC | 20:30 | |
| *** fpatwa has quit IRC | 20:45 | |
| *** bknudson has joined #openstack-keystone | 20:47 | |
| *** dims has quit IRC | 20:49 | |
| *** dims has joined #openstack-keystone | 20:50 | |
| *** sacharya has joined #openstack-keystone | 20:54 | |
| *** andreaf has joined #openstack-keystone | 20:54 | |
| *** harlowja is now known as harlowja_away | 21:01 | |
| *** harlowja_away is now known as harlowja | 21:08 | |
| openstackgerrit | henry-nash proposed a change to openstack/keystone: multi-backend support for identity https://review.openstack.org/74214 | 21:08 |
| *** Chicago has joined #openstack-keystone | 21:11 | |
| *** radez is now known as radez_g0n3 | 21:13 | |
| *** zhiyan is now known as zhiyan_ | 21:26 | |
| *** fpatwa has joined #openstack-keystone | 21:27 | |
| *** marcoemorais has quit IRC | 21:32 | |
| *** marcoemorais has joined #openstack-keystone | 21:32 | |
| *** marcoemorais has quit IRC | 21:33 | |
| *** marcoemorais has joined #openstack-keystone | 21:33 | |
| *** marcoemorais has quit IRC | 21:34 | |
| *** marcoemorais has joined #openstack-keystone | 21:34 | |
| openstackgerrit | Harry Rybacki proposed a change to openstack/keystone: Update setup docs with Fedora 20 dependencies https://review.openstack.org/106176 | 21:36 |
| *** jamielennox|away is now known as jamielennox | 21:36 | |
| hrybacki | jamielennox: https://review.openstack.org/#/c/105031/ :) | 21:37 |
| *** dims_ has joined #openstack-keystone | 21:41 | |
| *** dims has quit IRC | 21:43 | |
| morganfainberg | sooooo https://review.openstack.org/#/c/100747/ | 21:46 |
| morganfainberg | gating! | 21:46 |
| hrybacki | morganfainberg++ | 21:46 |
| *** marcoemorais has quit IRC | 21:47 | |
| hrybacki | morganfainberg: so this means that middleware will actually be part of the CI tests? | 21:47 |
| morganfainberg | no this means apache deployed keystone is the default | 21:47 |
| hrybacki | oh whoops, wrong devstack patch | 21:47 |
| morganfainberg | for devstack and gate | 21:47 |
| morganfainberg | :) | 21:47 |
| *** david-lyle has quit IRC | 21:49 | |
| *** marcoemorais has joined #openstack-keystone | 21:54 | |
| *** marcoemorais has quit IRC | 21:55 | |
| *** marcoemorais1 has joined #openstack-keystone | 21:55 | |
| boris-42 | morganfainberg nice | 21:57 |
| *** marcoemorais1 has quit IRC | 22:04 | |
| *** marcoemorais has joined #openstack-keystone | 22:04 | |
| *** ayoung has joined #openstack-keystone | 22:04 | |
| *** fpatwa has quit IRC | 22:04 | |
| *** ayoung has quit IRC | 22:04 | |
| *** marcoemorais has quit IRC | 22:12 | |
| *** lbragstad has quit IRC | 22:12 | |
| *** lbragstad has joined #openstack-keystone | 22:13 | |
| *** med_ has joined #openstack-keystone | 22:14 | |
| *** marcoemorais has joined #openstack-keystone | 22:15 | |
| *** kwss has joined #openstack-keystone | 22:16 | |
| *** marcoemorais has quit IRC | 22:17 | |
| *** marcoemorais has joined #openstack-keystone | 22:18 | |
| marekd | joesavak: added you as a reviewer for "Implement Service Providers API for OS-FEDERATION" code. (needs to be extended with attributes we really need) | 22:22 |
| joesavak | okie dokie | 22:22 |
| *** bknudson has quit IRC | 22:23 | |
| openstackgerrit | Steve Martinelli proposed a change to openstack/python-keystoneclient: Add CRUD operations for Federated Protocols. https://review.openstack.org/83829 | 22:23 |
| stevemar | dstanek, updated https://review.openstack.org/#/c/83829/ | 22:23 |
| *** oomichi has joined #openstack-keystone | 22:24 | |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Add keystonemiddleware to requirements https://review.openstack.org/106188 | 22:25 |
| *** david-lyle has joined #openstack-keystone | 22:26 | |
| *** marcoemorais has quit IRC | 22:29 | |
| *** andreaf has quit IRC | 22:32 | |
| *** richm has quit IRC | 22:32 | |
| *** rwsu has quit IRC | 22:32 | |
| *** redrobot has quit IRC | 22:32 | |
| *** dstanek has quit IRC | 22:32 | |
| *** therve has quit IRC | 22:32 | |
| *** kwss has quit IRC | 22:32 | |
| *** gabriel-bezerra has quit IRC | 22:32 | |
| *** zigo has quit IRC | 22:32 | |
| *** thedodd has quit IRC | 22:32 | |
| *** gyee has quit IRC | 22:32 | |
| *** mberlin1 has quit IRC | 22:32 | |
| *** bobt has quit IRC | 22:32 | |
| *** uvirtbot has quit IRC | 22:32 | |
| *** dims_ has quit IRC | 22:32 | |
| *** hrybacki has quit IRC | 22:32 | |
| *** afaranha has quit IRC | 22:33 | |
| *** huats has quit IRC | 22:33 | |
| *** Chicago has quit IRC | 22:33 | |
| *** diegows has quit IRC | 22:33 | |
| *** arosen has quit IRC | 22:33 | |
| *** tellesnobrega has quit IRC | 22:33 | |
| *** chmouel has quit IRC | 22:33 | |
| *** ByteSore has quit IRC | 22:33 | |
| *** csd has quit IRC | 22:33 | |
| *** anteaya has quit IRC | 22:33 | |
| *** topol has quit IRC | 22:33 | |
| *** miqui has quit IRC | 22:33 | |
| *** dvorak has quit IRC | 22:33 | |
| *** jamielennox has quit IRC | 22:33 | |
| *** jraim has quit IRC | 22:33 | |
| *** jimbaker has quit IRC | 22:33 | |
| *** mitz_ has quit IRC | 22:33 | |
| *** designated has quit IRC | 22:33 | |
| *** zhiyan_ has quit IRC | 22:33 | |
| *** ciypro|afk has quit IRC | 22:33 | |
| *** sacharya has quit IRC | 22:33 | |
| *** harlowja has quit IRC | 22:33 | |
| *** openstackgerrit has quit IRC | 22:33 | |
| *** mat-lowery has quit IRC | 22:33 | |
| *** samuelmz has quit IRC | 22:33 | |
| *** elmiko has quit IRC | 22:33 | |
| *** mfisch has quit IRC | 22:33 | |
| *** baffle_ has quit IRC | 22:33 | |
| *** ekarlso has quit IRC | 22:33 | |
| *** gmurphy has quit IRC | 22:33 | |
| *** morganfainberg has quit IRC | 22:33 | |
| *** boris-42 has quit IRC | 22:33 | |
| *** david-lyle has quit IRC | 22:33 | |
| *** oomichi has quit IRC | 22:33 | |
| *** lbragstad has quit IRC | 22:33 | |
| *** x1b2j has quit IRC | 22:33 | |
| *** rodrigods has quit IRC | 22:33 | |
| *** dtroyer has quit IRC | 22:33 | |
| *** serverascode has quit IRC | 22:33 | |
| *** Daviey has quit IRC | 22:33 | |
| *** vishy has quit IRC | 22:33 | |
| *** d34dh0r53 has quit IRC | 22:33 | |
| *** esmute has quit IRC | 22:33 | |
| *** tziOm has quit IRC | 22:33 | |
| *** d0ugal has quit IRC | 22:33 | |
| *** jkappert has quit IRC | 22:33 | |
| *** dhellmann has quit IRC | 22:33 | |
| *** med_ has quit IRC | 22:33 | |
| *** praneshp has quit IRC | 22:33 | |
| *** shufflebot has quit IRC | 22:33 | |
| *** amerine has quit IRC | 22:33 | |
| *** fifieldt has quit IRC | 22:33 | |
| *** raildo has quit IRC | 22:33 | |
| *** joesavak has quit IRC | 22:33 | |
| *** stevemar has quit IRC | 22:33 | |
| *** bvandenh has quit IRC | 22:33 | |
| *** arunkant has quit IRC | 22:33 | |
| *** Ephur has quit IRC | 22:33 | |
| *** mgagne has quit IRC | 22:33 | |
| *** tristanC has quit IRC | 22:33 | |
| *** jdennis has quit IRC | 22:33 | |
| *** afazekas has quit IRC | 22:33 | |
| *** radez_g0n3 has quit IRC | 22:33 | |
| *** comstud has quit IRC | 22:33 | |
| *** jaosorior has quit IRC | 22:33 | |
| *** mhu has quit IRC | 22:33 | |
| *** dolphm has quit IRC | 22:33 | |
| *** toddnni has quit IRC | 22:33 | |
| *** ChanServ has quit IRC | 22:33 | |
| *** akscram has quit IRC | 22:33 | |
| *** gpocentek has quit IRC | 22:33 | |
| *** Meeh has quit IRC | 22:33 | |
| *** richm has joined #openstack-keystone | 22:36 | |
| *** andreaf has joined #openstack-keystone | 22:36 | |
| *** rwsu has joined #openstack-keystone | 22:36 | |
| *** therve has joined #openstack-keystone | 22:36 | |
| *** redrobot has joined #openstack-keystone | 22:36 | |
| *** doddstack has joined #openstack-keystone | 22:36 | |
| *** david-lyle has joined #openstack-keystone | 22:36 | |
| *** oomichi has joined #openstack-keystone | 22:36 | |
| *** kwss has joined #openstack-keystone | 22:36 | |
| *** med_ has joined #openstack-keystone | 22:36 | |
| *** lbragstad has joined #openstack-keystone | 22:36 | |
| *** dims_ has joined #openstack-keystone | 22:36 | |
| *** Chicago has joined #openstack-keystone | 22:36 | |
| *** sacharya has joined #openstack-keystone | 22:36 | |
| *** bobt has joined #openstack-keystone | 22:36 | |
| *** diegows has joined #openstack-keystone | 22:36 | |
| *** arosen has joined #openstack-keystone | 22:36 | |
| *** gabriel-bezerra has joined #openstack-keystone | 22:36 | |
| *** topol has joined #openstack-keystone | 22:36 | |
| *** hrybacki has joined #openstack-keystone | 22:36 | |
| *** joesavak has joined #openstack-keystone | 22:36 | |
| *** amerine has joined #openstack-keystone | 22:36 | |
| *** gyee has joined #openstack-keystone | 22:36 | |
| *** harlowja has joined #openstack-keystone | 22:36 | |
| *** praneshp has joined #openstack-keystone | 22:36 | |
| *** openstackgerrit has joined #openstack-keystone | 22:36 | |
| *** stevemar has joined #openstack-keystone | 22:36 | |
| *** jaosorior has joined #openstack-keystone | 22:36 | |
| *** x1b2j has joined #openstack-keystone | 22:36 | |
| *** zigo has joined #openstack-keystone | 22:36 | |
| *** bvandenh has joined #openstack-keystone | 22:36 | |
| *** shufflebot has joined #openstack-keystone | 22:36 | |
| *** mberlin1 has joined #openstack-keystone | 22:36 | |
| *** boris-42 has joined #openstack-keystone | 22:36 | |
| *** miqui has joined #openstack-keystone | 22:36 | |
| *** elmiko has joined #openstack-keystone | 22:36 | |
| *** samuelmz has joined #openstack-keystone | 22:36 | |
| *** raildo has joined #openstack-keystone | 22:36 | |
| *** rodrigods has joined #openstack-keystone | 22:36 | |
| *** csd has joined #openstack-keystone | 22:36 | |
| *** mat-lowery has joined #openstack-keystone | 22:36 | |
| *** dvorak has joined #openstack-keystone | 22:36 | |
| *** uvirtbot has joined #openstack-keystone | 22:36 | |
| *** anteaya has joined #openstack-keystone | 22:36 | |
| *** fifieldt has joined #openstack-keystone | 22:36 | |
| *** jamielennox has joined #openstack-keystone | 22:36 | |
| *** afaranha has joined #openstack-keystone | 22:36 | |
| *** tellesnobrega has joined #openstack-keystone | 22:36 | |
| *** arunkant has joined #openstack-keystone | 22:36 | |
| *** dtroyer has joined #openstack-keystone | 22:36 | |
| *** Ephur has joined #openstack-keystone | 22:36 | |
| *** mfisch has joined #openstack-keystone | 22:36 | |
| *** serverascode has joined #openstack-keystone | 22:36 | |
| *** mgagne has joined #openstack-keystone | 22:36 | |
| *** tristanC has joined #openstack-keystone | 22:36 | |
| *** jraim has joined #openstack-keystone | 22:36 | |
| *** baffle_ has joined #openstack-keystone | 22:36 | |
| *** huats has joined #openstack-keystone | 22:36 | |
| *** jdennis has joined #openstack-keystone | 22:36 | |
| *** jimbaker has joined #openstack-keystone | 22:36 | |
| *** mitz_ has joined #openstack-keystone | 22:36 | |
| *** ekarlso has joined #openstack-keystone | 22:36 | |
| *** designated has joined #openstack-keystone | 22:36 | |
| *** gmurphy has joined #openstack-keystone | 22:36 | |
| *** d34dh0r53 has joined #openstack-keystone | 22:36 | |
| *** afazekas has joined #openstack-keystone | 22:36 | |
| *** zhiyan_ has joined #openstack-keystone | 22:36 | |
| *** ciypro|afk has joined #openstack-keystone | 22:36 | |
| *** ByteSore has joined #openstack-keystone | 22:36 | |
| *** chmouel has joined #openstack-keystone | 22:36 | |
| *** Daviey has joined #openstack-keystone | 22:36 | |
| *** radez_g0n3 has joined #openstack-keystone | 22:36 | |
| *** vishy has joined #openstack-keystone | 22:36 | |
| *** mhu has joined #openstack-keystone | 22:36 | |
| *** dolphm has joined #openstack-keystone | 22:36 | |
| *** comstud has joined #openstack-keystone | 22:36 | |
| *** toddnni has joined #openstack-keystone | 22:36 | |
| *** tziOm has joined #openstack-keystone | 22:36 | |
| *** morganfainberg has joined #openstack-keystone | 22:36 | |
| *** esmute has joined #openstack-keystone | 22:36 | |
| *** d0ugal has joined #openstack-keystone | 22:36 | |
| *** jkappert has joined #openstack-keystone | 22:36 | |
| *** dhellmann has joined #openstack-keystone | 22:36 | |
| *** ChanServ has joined #openstack-keystone | 22:36 | |
| *** dickson.freenode.net sets mode: +ooo dolphm morganfainberg ChanServ | 22:36 | |
| *** akscram has joined #openstack-keystone | 22:36 | |
| *** gpocentek has joined #openstack-keystone | 22:36 | |
| *** Meeh has joined #openstack-keystone | 22:36 | |
| *** hrybacki has quit IRC | 22:38 | |
| *** bknudson has joined #openstack-keystone | 22:39 | |
| openstackgerrit | Dolph Mathews proposed a change to openstack/keystone-specs: move audit middleware to keystonemiddleware repo https://review.openstack.org/104584 | 22:43 |
| *** kwss has quit IRC | 22:44 | |
| openstackgerrit | Dolph Mathews proposed a change to openstack/keystone-specs: move audit middleware to keystonemiddleware repo https://review.openstack.org/104584 | 22:46 |
| *** andreaf has quit IRC | 22:46 | |
| *** gabriel-bezerra has quit IRC | 22:48 | |
| morganfainberg | bknudson, http://logs.openstack.org/84/104584/5/check/gate-keystone-specs-docs/5ff25c6/console.html | 22:48 |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone-specs: move audit middleware to keystonemiddleware repo https://review.openstack.org/104584 | 22:50 |
| openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone-specs: move audit middleware to keystonemiddleware repo https://review.openstack.org/104584 | 22:51 |
| openstackgerrit | A change was merged to openstack/keystone-specs: move audit middleware to keystonemiddleware repo https://review.openstack.org/104584 | 22:55 |
| marekd | jamielennox: when a auth plugin exposes oslo.config param like foo-bar, when the plugin object will be insantiated the argument that's going to be passed will be foo_bar (with value specified by a user), right? | 22:55 |
| jamielennox | marekd: yep | 22:55 |
| marekd | jamielennox: works for me! | 22:56 |
| jamielennox | it'll become --os-foo-bar, foo_bar in CONF and returned as foo_bar | 22:56 |
| *** marcoemorais has joined #openstack-keystone | 22:56 | |
| jamielennox | there is a dest or such variable you can set if you want to have a different display/kwargs naem | 22:56 |
| *** marcoemorais has quit IRC | 22:57 | |
| *** marcoemorais has joined #openstack-keystone | 22:57 | |
| marekd | jamielennox: sure | 22:57 |
| *** gabriel-bezerra has joined #openstack-keystone | 23:00 | |
| *** david-lyle has quit IRC | 23:00 | |
| *** marcoemorais has quit IRC | 23:00 | |
| *** marcoemorais has joined #openstack-keystone | 23:01 | |
| *** marcoemorais has quit IRC | 23:01 | |
| *** marcoemorais has joined #openstack-keystone | 23:01 | |
| *** harlowja has quit IRC | 23:05 | |
| *** harlowja has joined #openstack-keystone | 23:05 | |
| openstackgerrit | Dolph Mathews proposed a change to openstack/keystone-specs: Revoke tokens when deleting EC2 credential https://review.openstack.org/103493 | 23:05 |
| *** joesavak has quit IRC | 23:06 | |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Direct move of the revoke model from keystone server https://review.openstack.org/102702 | 23:08 |
| *** bknudson has quit IRC | 23:09 | |
| *** stevemar has quit IRC | 23:11 | |
| *** ChanServ changes topic to "July 9-11 Hackathon notes https://etherpad.openstack.org/p/keystone-juno-hackathon | Now with 100% more gate runs on Apache deployed Keystone" | 23:11 | |
| *** ChanServ changes topic to "July 9-11 Hackathon notes https://etherpad.openstack.org/p/keystone-juno-hackathon | Now with 100% gate and check runs on Apache deployed Keystone" | 23:12 | |
| *** lbragstad has quit IRC | 23:14 | |
| openstackgerrit | ayoung proposed a change to openstack/python-keystoneclient: Revocation event API https://review.openstack.org/81166 | 23:14 |
| *** topol has quit IRC | 23:15 | |
| *** morganfainberg is now known as morganfainberg_Z | 23:22 | |
| *** radez_g0n3 is now known as radez | 23:26 | |
| *** doddstack has quit IRC | 23:42 | |
| *** elmiko is now known as _elmiko | 23:43 | |
| *** richm has quit IRC | 23:43 | |
| openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/keystone: Updated from global requirements https://review.openstack.org/106208 | 23:51 |
| *** radez is now known as radez_g0n3 | 23:51 | |
| openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/106210 | 23:56 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!