| morganfainberg | hmm. | 00:13 |
|---|---|---|
| morganfainberg | i think i need to generate a few million tokens in a keystone instance | 00:14 |
| morganfainberg | anyone have an abusive *cough* script handy to do it? | 00:14 |
| *** shakamunyi has quit IRC | 00:15 | |
| *** nellysmitt has joined #openstack-keystone | 00:17 | |
| *** thedodd has quit IRC | 00:21 | |
| *** nellysmitt has quit IRC | 00:21 | |
| *** dims_ has joined #openstack-keystone | 00:30 | |
| *** henrynash has quit IRC | 00:38 | |
| *** david-lyle is now known as david-lyle_afk | 00:51 | |
| *** jbonjean has joined #openstack-keystone | 00:58 | |
| jbonjean | Hi ! Could anybody explain to me why keystone generates a new token when asked, even if there is already one valid in the database? | 01:04 |
| morganfainberg | jbonjean, a few reasons: 1) maybe you this token is being generated for a different task | 01:06 |
| morganfainberg | jbonjean, 2) if the token is used for varying tasks and is revoked after one of the tasks, the second or third tasks could fail | 01:06 |
| morganfainberg | jbonjean, 3) because it is less expensive to issue a token than search (potentially) millions of rows for a token that matches all the criteria (in the case of SQL), or every-single-token for a user (memcached) etc | 01:07 |
| jbonjean | morganfainberg: ok, but in which case do you revoke only one token of a specific user? | 01:09 |
| morganfainberg | jbonjean, you can revoke *all* tokens for a user, or an individual token, or all tokens associalted to a project, etc | 01:10 |
| morganfainberg | jbonjean, change the password on the user, tokens are revoked | 01:10 |
| morganfainberg | jbonjean, issue a DELETE for a specific token, that token is revoked | 01:10 |
| morganfainberg | jbonjean, there are a lot of cases we do token revocation. and horizon does explicit token revokes in many cases too | 01:10 |
| *** marcoemorais has quit IRC | 01:12 | |
| *** marcoemorais has joined #openstack-keystone | 01:13 | |
| *** chrisshattuck has quit IRC | 01:15 | |
| gabriel-bezerra | dstanek: you should add the MetadataProvider entry in your shibboleth2.xml. See http://www.lsd.ufcg.edu.br/~gabrielb/shibboleth2.xml | 01:15 |
| jbonjean | morganfainberg: hum ok, makes senses | 01:20 |
| jbonjean | morganfainberg: so no easy solution for the database that keeps growing :) | 01:21 |
| morganfainberg | jbonjean, i'm actually working on that right now. | 01:21 |
| jbonjean | jbonjean: except flushing from time to time | 01:21 |
| morganfainberg | jbonjean, you can use keystone-manage token-flush | 01:21 |
| morganfainberg | but i'm working on a better implementation | 01:21 |
| jbonjean | morganfainberg: that's good to know, because for me memcached is not exactly a good replacement | 01:22 |
| *** gyee has quit IRC | 01:23 | |
| jbonjean | morganfainberg: thank you for all that useful information! | 01:24 |
| morganfainberg | of course | 01:24 |
| morganfainberg | you can also use redis (with a modern enough keystone) with a minor tweak to the kvs/memcached backends [sorry for it not being easier yet] | 01:25 |
| jbonjean | icehouse is modern enough ? | 01:26 |
| *** marcoemorais has quit IRC | 01:28 | |
| *** marcoemorais has joined #openstack-keystone | 01:28 | |
| jbonjean | morganfainberg: would it be possible with icehouse? | 01:29 |
| morganfainberg | jbonjean, i'm going to make a case to backport it. | 01:31 |
| morganfainberg | jbonjean, but no guarantees the stable team will be amenable to that | 01:31 |
| * morganfainberg realizes it's time to do some more stable reviews. | 01:31 | |
| jbonjean | morganfainberg: ok thanks | 01:32 |
| *** henrynash has joined #openstack-keystone | 01:37 | |
| *** ChanServ sets mode: +v henrynash | 01:37 | |
| *** shakamunyi has joined #openstack-keystone | 01:39 | |
| *** dims_ has quit IRC | 01:43 | |
| *** zzzeek has quit IRC | 01:43 | |
| *** dimsum__ has joined #openstack-keystone | 01:43 | |
| morganfainberg | jbonjean, oh for redis? yes icehouse *should* be modern enough | 01:43 |
| *** shakamunyi has quit IRC | 01:44 | |
| *** dimsum__ has quit IRC | 01:48 | |
| *** dimsum__ has joined #openstack-keystone | 01:48 | |
| morganfainberg | henrynash, nice counter argument to my points / concerns | 01:49 |
| morganfainberg | henrynash, on the split | 01:49 |
| morganfainberg | henrynash, i'm going to leave it stand there like that and let others comment - i don't see my position changing atm. but i'd like other inputs (as stated earlier) | 01:50 |
| morganfainberg | henrynash thanks for taking the time on that | 01:50 |
| *** marcoemorais has quit IRC | 01:51 | |
| *** marcoemorais has joined #openstack-keystone | 01:51 | |
| henrynash | morganfainberg: no problem…yes…I just think it is a different viewpoint we have… | 01:58 |
| morganfainberg | henrynash, thats why i didn't want to block the review and leave it open for other comments | 01:58 |
| henrynash | morganfainberg: btw, I think https://review.openstack.org/#/c/138552/14 is probably ready to go | 01:59 |
| morganfainberg | henrynash, i'm fine with it going in depending on the way the consensus goes within the core team. | 01:59 |
| morganfainberg | henrynash, looking at things now actually | 01:59 |
| morganfainberg | henrynash, i think that one is on my "to do next" list | 01:59 |
| morganfainberg | lbragstad, i just -1'd an XML thing - with an upgrade-path concern | 01:59 |
| morganfainberg | lbragstad, but otherwise it was good. | 02:00 |
| morganfainberg | yep that was next | 02:00 |
| morganfainberg | actually... | 02:00 |
| morganfainberg | why wasn't that one +A already? | 02:00 |
| morganfainberg | oh | 02:00 |
| morganfainberg | haha | 02:00 |
| morganfainberg | cause i had a comment on testing | 02:00 |
| henrynash | i think on the skiptests…which truned out to be not needed anyway | 02:01 |
| morganfainberg | henrynash, +A | 02:02 |
| morganfainberg | right that's why i'm pushing people to get rid of those | 02:02 |
| morganfainberg | i hate having them around. | 02:02 |
| henrynash | morganfainberg: cool…I’ve held of from doing another rebase of the split patch until that one was done (since the rebase is a real bugger) | 02:02 |
| morganfainberg | henrynash, absolutely | 02:02 |
| morganfainberg | henrynash, and i don't blame ya | 02:03 |
| henrynash | (that’s a technical description, of course) | 02:03 |
| morganfainberg | yep | 02:03 |
| morganfainberg | so the FK name one i'm disappointed the test isn't in that patchset | 02:03 |
| morganfainberg | but i understand why. | 02:04 |
| henrynash | morganfainberg: so it’s pretty hard to do the test, I think…since you can’t do it with sqlite | 02:04 |
| morganfainberg | yeah | 02:04 |
| morganfainberg | i know | 02:04 |
| morganfainberg | thats why i'm not srprised it isn't there | 02:04 |
| morganfainberg | SQLite kinda sucks | 02:04 |
| henrynash | yep | 02:04 |
| morganfainberg | and i want it to die | 02:04 |
| morganfainberg | die a horrible nasty death | 02:05 |
| henrynash | agreed….I’d hate to count the times we’ve slipped in sql errors becasue the testing is done on sqlite only | 02:05 |
| morganfainberg | henrynash, we'll get there soon | 02:05 |
| morganfainberg | dstanek is working hard on that stuff | 02:05 |
| henrynash | yep, saw that | 02:05 |
| morganfainberg | henrynash, also if you missed my email to the ML, any open patches that are lingering for 60 days and have a negative score | 02:05 |
| morganfainberg | i'm going to reap out of gerrit | 02:06 |
| henrynash | yep, saw that | 02:06 |
| henrynash | (too) | 02:06 |
| morganfainberg | henrynash, cool. ayoung was worried about his being abandoned i think none of his fit the category :P | 02:06 |
| morganfainberg | henrynash, when i looked at them. | 02:06 |
| henrynash | any of mine? | 02:06 |
| morganfainberg | i think it's mostly dstanek | 02:06 |
| morganfainberg | of the core reviewers | 02:07 |
| henrynash | ok | 02:07 |
| morganfainberg | i'll publish a list of any that were to that same topic on the ML when i do it on monday | 02:07 |
| *** erkules_ has joined #openstack-keystone | 02:10 | |
| morganfainberg | henrynash, ugh, i think i need a different "on the go" computer. | 02:11 |
| henrynash | what ya got? | 02:11 |
| morganfainberg | henrynash, the 15" MBP is not as friendly ... just debating if a 13" air or 13" MBP would be better | 02:11 |
| morganfainberg | henrynash, i have a retina 15" mbp | 02:11 |
| henrynash | ah, right same as me… | 02:12 |
| *** erkules has quit IRC | 02:12 | |
| henrynash | I want an air with 16Gb and a nice screen! | 02:12 |
| morganfainberg | yeah right?! | 02:12 |
| morganfainberg | i think the 13" MBP retina is close | 02:12 |
| morganfainberg | it's .5 lbs more | 02:13 |
| morganfainberg | and 0.71mm thick vs. 0.21 to 0.68 (the wedge shape) | 02:13 |
| henrynash | yeah…pretty good | 02:14 |
| henrynash | now that they dropped the DVD….it is close | 02:14 |
| henrynash | ok..I gotta hitthe sack….it’s only 2:15 am here….:-) | 02:15 |
| *** henrynash has quit IRC | 02:15 | |
| morganfainberg | hehe | 02:16 |
| morganfainberg | cheers | 02:16 |
| *** nellysmitt has joined #openstack-keystone | 02:18 | |
| *** marcoemorais has quit IRC | 02:20 | |
| *** nellysmitt has quit IRC | 02:22 | |
| *** kobtea has joined #openstack-keystone | 02:25 | |
| *** kobtea has quit IRC | 02:30 | |
| *** stevemar has quit IRC | 02:58 | |
| *** diegows has quit IRC | 03:02 | |
| *** lhcheng has quit IRC | 03:05 | |
| *** lhcheng has joined #openstack-keystone | 03:05 | |
| *** lhcheng has quit IRC | 03:10 | |
| openstackgerrit | Merged openstack/keystone: Inherited role assignments to projects https://review.openstack.org/138552 | 03:15 |
| *** richm has quit IRC | 03:15 | |
| *** boris-42 has quit IRC | 03:53 | |
| *** dimsum__ has quit IRC | 03:59 | |
| *** dimsum__ has joined #openstack-keystone | 04:00 | |
| *** thedodd has joined #openstack-keystone | 04:00 | |
| *** thedodd has quit IRC | 04:01 | |
| *** ayoung_ has joined #openstack-keystone | 04:03 | |
| *** dimsum__ has quit IRC | 04:04 | |
| *** nellysmitt has joined #openstack-keystone | 04:18 | |
| *** rushiagr is now known as rushiagr_away | 04:22 | |
| *** nellysmitt has quit IRC | 04:23 | |
| *** lhcheng has joined #openstack-keystone | 04:31 | |
| *** harlowja is now known as harlowja_away | 04:34 | |
| *** jimbaker has quit IRC | 05:22 | |
| *** marcoemorais has joined #openstack-keystone | 05:24 | |
| *** marcoemorais1 has joined #openstack-keystone | 05:26 | |
| *** erkules_ is now known as erkules | 05:27 | |
| *** marcoemorais has quit IRC | 05:29 | |
| *** rdo_ has quit IRC | 05:41 | |
| *** rdo has joined #openstack-keystone | 05:43 | |
| *** lhcheng has quit IRC | 06:03 | |
| *** lhcheng has joined #openstack-keystone | 06:04 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/136243 | 06:06 |
| *** nellysmitt has joined #openstack-keystone | 06:19 | |
| *** nellysmitt has quit IRC | 06:23 | |
| *** kobtea has joined #openstack-keystone | 06:28 | |
| *** nellysmitt has joined #openstack-keystone | 06:32 | |
| *** kobtea has quit IRC | 06:33 | |
| *** rushiagr_away is now known as rushiagr | 07:11 | |
| morganfainberg | dolphm: I had the convo with you about headphone on the mbp right? /me tries to remember | 07:20 |
| *** jacer_huawei has quit IRC | 07:28 | |
| *** rushiagr is now known as rushiagr_away | 07:28 | |
| *** nellysmitt has quit IRC | 07:32 | |
| *** jacer_huawei has joined #openstack-keystone | 07:44 | |
| *** rushiagr_away is now known as rushiagr | 07:47 | |
| *** nellysmitt has joined #openstack-keystone | 08:02 | |
| *** dimsum__ has joined #openstack-keystone | 08:03 | |
| *** dimsum__ has quit IRC | 08:08 | |
| *** lhcheng has quit IRC | 08:16 | |
| *** lhcheng has joined #openstack-keystone | 08:16 | |
| *** lhcheng has quit IRC | 08:20 | |
| *** kobtea has joined #openstack-keystone | 08:30 | |
| *** kobtea has quit IRC | 08:35 | |
| *** zz_avozza is now known as avozza | 09:09 | |
| *** tellesnobrega has quit IRC | 09:24 | |
| *** marcoemorais1 has quit IRC | 09:34 | |
| *** tellesnobrega has joined #openstack-keystone | 09:37 | |
| *** nellysmitt has quit IRC | 10:14 | |
| *** kobtea has joined #openstack-keystone | 10:31 | |
| *** kobtea has quit IRC | 10:36 | |
| *** lhcheng has joined #openstack-keystone | 11:06 | |
| *** lhcheng has quit IRC | 11:10 | |
| *** nellysmitt has joined #openstack-keystone | 11:12 | |
| *** Qlawy has quit IRC | 11:23 | |
| *** Qlawy has joined #openstack-keystone | 11:23 | |
| *** Qlawy has quit IRC | 11:28 | |
| *** Qlawy has joined #openstack-keystone | 11:34 | |
| *** avozza is now known as zz_avozza | 11:46 | |
| *** boris-42 has joined #openstack-keystone | 11:50 | |
| *** dimsum__ has joined #openstack-keystone | 12:06 | |
| *** dimsum__ has quit IRC | 12:10 | |
| *** jimbaker has joined #openstack-keystone | 12:33 | |
| *** jimbaker has quit IRC | 12:33 | |
| *** jimbaker has joined #openstack-keystone | 12:33 | |
| *** zz_avozza is now known as avozza | 12:36 | |
| *** nellysmitt has quit IRC | 12:43 | |
| openstackgerrit | Ajaya Agrawal proposed openstack/keystone: Implemented caching in identity layer. https://review.openstack.org/110575 | 12:58 |
| *** ajayaa has joined #openstack-keystone | 12:59 | |
| *** jasondotstar has joined #openstack-keystone | 13:11 | |
| *** avozza is now known as zz_avozza | 13:35 | |
| rodrigods | ayoung, was afk mostly of the day yesterday. just saw your comment about the target member behavior | 14:02 |
| *** boris-42 has quit IRC | 14:03 | |
| *** mitz- has quit IRC | 14:11 | |
| *** zz_avozza is now known as avozza | 14:26 | |
| *** nellysmitt has joined #openstack-keystone | 14:29 | |
| *** avozza is now known as zz_avozza | 14:36 | |
| *** lhcheng has joined #openstack-keystone | 14:43 | |
| *** lhcheng has quit IRC | 14:48 | |
| *** dimsum__ has joined #openstack-keystone | 15:08 | |
| *** dimsum__ has quit IRC | 15:13 | |
| *** zz_avozza is now known as avozza | 15:27 | |
| *** nellysmitt has quit IRC | 15:38 | |
| *** ChanServ has quit IRC | 15:55 | |
| *** diegows has joined #openstack-keystone | 16:01 | |
| lbragstad | morganfainberg: so you want me to add in the Xml serializer as a stub? | 16:07 |
| lbragstad | morganfainberg: the XmlSerializer and XmlDeserializer? | 16:08 |
| lbragstad | these guys? https://github.com/openstack/keystone/blob/master/keystone/common/serializer.py | 16:09 |
| *** ChanServ has joined #openstack-keystone | 16:24 | |
| *** sendak.freenode.net sets mode: +o ChanServ | 16:24 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Remove XML support https://review.openstack.org/125738 | 16:30 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add positive test case for content types https://review.openstack.org/130591 | 16:30 |
| *** boris-42 has joined #openstack-keystone | 16:42 | |
| *** jasondotstar has quit IRC | 17:01 | |
| *** jasondotstar has joined #openstack-keystone | 17:02 | |
| *** marcoemorais has joined #openstack-keystone | 17:03 | |
| *** marcoemorais has quit IRC | 17:04 | |
| *** dimsum__ has joined #openstack-keystone | 17:17 | |
| *** rm_work is now known as rm_work|away | 17:26 | |
| *** nellysmitt has joined #openstack-keystone | 17:39 | |
| *** nellysmitt has quit IRC | 17:44 | |
| *** fifieldt_ has quit IRC | 17:44 | |
| openstackgerrit | Ajaya Agrawal proposed openstack/keystone: Validation of user parameter https://review.openstack.org/114997 | 17:44 |
| *** fifieldt_ has joined #openstack-keystone | 17:44 | |
| *** shakamunyi has joined #openstack-keystone | 17:51 | |
| *** avozza is now known as zz_avozza | 17:55 | |
| *** jacer_huawei has quit IRC | 17:59 | |
| *** jacer_huawei has joined #openstack-keystone | 17:59 | |
| *** dimsum__ has quit IRC | 18:04 | |
| *** dimsum__ has joined #openstack-keystone | 18:05 | |
| *** dimsum__ has quit IRC | 18:09 | |
| *** dimsum__ has joined #openstack-keystone | 18:09 | |
| *** lhcheng has joined #openstack-keystone | 18:21 | |
| *** lhcheng has quit IRC | 18:25 | |
| *** zz_avozza is now known as avozza | 18:58 | |
| *** marcoemorais has joined #openstack-keystone | 19:29 | |
| *** marcoemorais1 has joined #openstack-keystone | 19:31 | |
| *** marcoemorais has quit IRC | 19:34 | |
| *** nellysmitt has joined #openstack-keystone | 19:40 | |
| morganfainberg | lbragstad: that was basically my thought. I am worried about breaking people because the paste.ini no longer works. | 19:41 |
| morganfainberg | lbragstad: the xmlbody and uh the other one in paste.ini. | 19:45 |
| *** nellysmitt has quit IRC | 19:45 | |
| morganfainberg | lbragstad: your update looks to cover it. | 19:47 |
| morganfainberg | Or was I reviewing the wrong patch set. Weird. | 19:49 |
| morganfainberg | lbragstad: so, sorry about that I think I missed the actual core.py file fixes for middleware when I did my -1 review. | 19:50 |
| morganfainberg | lbragstad: that looks good I'll score it as soon as Jenkins comes back. | 19:50 |
| *** dimsum__ has quit IRC | 20:09 | |
| *** dimsum__ has joined #openstack-keystone | 20:22 | |
| morganfainberg | lbragstad, the current failure is known by infra and they are working on it. | 20:31 |
| *** nellysmitt has joined #openstack-keystone | 20:33 | |
| *** nellysmitt has quit IRC | 20:43 | |
| *** rushiagr is now known as rushiagr_away | 20:45 | |
| morganfainberg | lbragstad, i added a +2 | 20:48 |
| *** avozza is now known as zz_avozza | 21:04 | |
| *** zz_avozza is now known as avozza | 21:05 | |
| *** marcoemorais1 has quit IRC | 21:21 | |
| *** avozza is now known as zz_avozza | 21:26 | |
| *** lhcheng has joined #openstack-keystone | 21:37 | |
| *** shakamunyi has quit IRC | 21:40 | |
| *** jacer_huawei has quit IRC | 21:48 | |
| *** ajayaa has quit IRC | 21:49 | |
| *** jacer_huawei has joined #openstack-keystone | 21:50 | |
| *** jacer_huawei has quit IRC | 22:00 | |
| *** jacer_huawei has joined #openstack-keystone | 22:03 | |
| *** zz_avozza is now known as avozza | 22:17 | |
| *** avozza is now known as zz_avozza | 22:23 | |
| *** stevemar has joined #openstack-keystone | 22:37 | |
| *** ChanServ sets mode: +v stevemar | 22:37 | |
| *** stevemar has quit IRC | 22:41 | |
| *** nellysmitt has joined #openstack-keystone | 22:44 | |
| *** nellysmitt has quit IRC | 22:49 | |
| *** jamielennox|away is now known as jamielennox | 22:55 | |
| *** lhcheng has quit IRC | 22:57 | |
| *** lhcheng has joined #openstack-keystone | 22:57 | |
| *** lhcheng has quit IRC | 23:01 | |
| *** ChanServ has quit IRC | 23:07 | |
| *** jamielennox is now known as jamielennox|away | 23:08 | |
| *** ChanServ has joined #openstack-keystone | 23:10 | |
| *** sendak.freenode.net sets mode: +o ChanServ | 23:10 | |
| *** stevemar has joined #openstack-keystone | 23:16 | |
| *** ChanServ sets mode: +v stevemar | 23:16 | |
| *** ChanServ has quit IRC | 23:24 | |
| *** zz_avozza is now known as avozza | 23:25 | |
| *** rm_work|away is now known as rm_work | 23:28 | |
| *** ChanServ has joined #openstack-keystone | 23:28 | |
| *** sendak.freenode.net sets mode: +o ChanServ | 23:28 | |
| *** ChanServ has quit IRC | 23:31 | |
| *** ChanServ has joined #openstack-keystone | 23:36 | |
| *** sendak.freenode.net sets mode: +o ChanServ | 23:36 | |
| *** shakamunyi has joined #openstack-keystone | 23:43 | |
| *** EmilienM|pto is now known as EmilienM | 23:43 | |
| *** rm_work is now known as rm_work|away | 23:51 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!