| *** trown|outtypewww is now known as trown | 00:03 | |
| *** dims_ has joined #openstack-keystone | 00:03 | |
| *** dims has quit IRC | 00:04 | |
| stevemar | anteaya: oh jeez, can't believe i forgot the tag | 00:05 |
|---|---|---|
| * stevemar facepalms | 00:05 | |
| *** mylu has quit IRC | 00:05 | |
| stevemar | serves me right for rushing it before i headed out | 00:05 |
| *** arunkant has quit IRC | 00:07 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone-specs: Shadow users (continuation for newton) https://review.openstack.org/296123 | 00:11 |
| *** roxanaghe has quit IRC | 00:14 | |
| *** daemontool has quit IRC | 00:15 | |
| *** jorge_munoz has joined #openstack-keystone | 00:17 | |
| stevemar | dolphm: thank you for the spec | 00:18 |
| *** mylu has joined #openstack-keystone | 00:20 | |
| morgan | stevemar: heh. | 00:21 |
| *** jorge_munoz has quit IRC | 00:23 | |
| *** mylu has quit IRC | 00:25 | |
| *** aginwala has quit IRC | 00:28 | |
| *** shoutm_ has joined #openstack-keystone | 00:29 | |
| *** shoutm has quit IRC | 00:32 | |
| *** aginwala has joined #openstack-keystone | 00:32 | |
| *** spandhe has quit IRC | 00:32 | |
| *** shoutm_ has quit IRC | 00:34 | |
| *** shoutm has joined #openstack-keystone | 00:40 | |
| *** krotscheck has joined #openstack-keystone | 00:42 | |
| *** sdake has quit IRC | 00:50 | |
| *** sdake has joined #openstack-keystone | 00:51 | |
| *** lhcheng has quit IRC | 01:04 | |
| *** mylu has joined #openstack-keystone | 01:06 | |
| *** browne has quit IRC | 01:14 | |
| *** aginwala has quit IRC | 01:16 | |
| *** fawadkhaliq has quit IRC | 01:18 | |
| *** fawadkhaliq has joined #openstack-keystone | 01:18 | |
| *** aginwala has joined #openstack-keystone | 01:19 | |
| *** fawadkhaliq has quit IRC | 01:19 | |
| *** fawadkhaliq has joined #openstack-keystone | 01:20 | |
| *** EinstCrazy has joined #openstack-keystone | 01:21 | |
| *** shaleh has quit IRC | 01:22 | |
| *** mylu has quit IRC | 01:23 | |
| *** ayoung has joined #openstack-keystone | 01:32 | |
| *** ChanServ sets mode: +v ayoung | 01:32 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Cleaning up identity.core https://review.openstack.org/296140 | 01:33 |
| *** mylu has joined #openstack-keystone | 01:33 | |
| *** dims_ has quit IRC | 01:40 | |
| *** csoukup has joined #openstack-keystone | 01:42 | |
| *** jasonsb has joined #openstack-keystone | 01:46 | |
| *** csoukup has quit IRC | 01:46 | |
| *** mylu has quit IRC | 01:54 | |
| *** jasonsb has quit IRC | 01:54 | |
| *** mylu has joined #openstack-keystone | 01:57 | |
| *** mylu has quit IRC | 01:58 | |
| *** mylu has joined #openstack-keystone | 02:00 | |
| *** fawadkhaliq has quit IRC | 02:01 | |
| *** fawadkhaliq has joined #openstack-keystone | 02:02 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Cleaning up identity.core https://review.openstack.org/296140 | 02:03 |
| *** henrynash has joined #openstack-keystone | 02:03 | |
| *** ChanServ sets mode: +v henrynash | 02:03 | |
| *** shoutm has quit IRC | 02:05 | |
| *** shoutm_ has joined #openstack-keystone | 02:05 | |
| *** henrynash has quit IRC | 02:08 | |
| *** fawadkhaliq has quit IRC | 02:10 | |
| *** fawadkhaliq has joined #openstack-keystone | 02:10 | |
| *** jbell8 has joined #openstack-keystone | 02:11 | |
| *** mylu has quit IRC | 02:15 | |
| *** mylu has joined #openstack-keystone | 02:17 | |
| *** timcline has joined #openstack-keystone | 02:23 | |
| *** timcline_ has joined #openstack-keystone | 02:24 | |
| *** timcline has quit IRC | 02:25 | |
| *** Ephur has quit IRC | 02:26 | |
| *** woodster_ has quit IRC | 02:27 | |
| *** henrynash has joined #openstack-keystone | 02:28 | |
| *** ChanServ sets mode: +v henrynash | 02:28 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Cleaning up identity.core https://review.openstack.org/296140 | 02:28 |
| *** lhcheng has joined #openstack-keystone | 02:29 | |
| *** ChanServ sets mode: +v lhcheng | 02:29 | |
| *** knikolla has quit IRC | 02:34 | |
| *** shoutm has joined #openstack-keystone | 02:38 | |
| *** mylu has quit IRC | 02:38 | |
| *** mylu has joined #openstack-keystone | 02:39 | |
| *** shoutm_ has quit IRC | 02:39 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Cleaning up identity.core https://review.openstack.org/296140 | 02:47 |
| *** dan_nguyen has quit IRC | 02:50 | |
| *** fawadkhaliq has quit IRC | 02:51 | |
| *** aginwala has quit IRC | 02:51 | |
| *** fawadkhaliq has joined #openstack-keystone | 02:52 | |
| *** markvoelker has quit IRC | 02:59 | |
| *** henrynash has quit IRC | 03:00 | |
| *** fawadkhaliq has quit IRC | 03:01 | |
| *** fawadkhaliq has joined #openstack-keystone | 03:01 | |
| *** fawadkhaliq has quit IRC | 03:01 | |
| *** spandhe has joined #openstack-keystone | 03:01 | |
| *** fawadkhaliq has joined #openstack-keystone | 03:02 | |
| *** timcline_ has quit IRC | 03:04 | |
| *** timcline has joined #openstack-keystone | 03:05 | |
| *** timcline has quit IRC | 03:09 | |
| *** GB21 has joined #openstack-keystone | 03:12 | |
| *** mylu has quit IRC | 03:17 | |
| *** spandhe has quit IRC | 03:18 | |
| *** mylu has joined #openstack-keystone | 03:22 | |
| *** links has joined #openstack-keystone | 03:28 | |
| *** aginwala has joined #openstack-keystone | 03:29 | |
| *** aginwala has quit IRC | 03:33 | |
| *** timcline has joined #openstack-keystone | 03:35 | |
| *** timcline has quit IRC | 03:40 | |
| *** lhcheng has quit IRC | 03:42 | |
| *** GB21 has quit IRC | 03:44 | |
| *** richm has quit IRC | 03:45 | |
| *** shoutm has quit IRC | 03:47 | |
| *** shoutm has joined #openstack-keystone | 03:47 | |
| *** markvoelker has joined #openstack-keystone | 03:59 | |
| *** markvoelker has quit IRC | 04:04 | |
| *** shoutm has quit IRC | 04:06 | |
| *** shoutm has joined #openstack-keystone | 04:12 | |
| *** fawadkhaliq has quit IRC | 04:17 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:17 | |
| *** lhcheng_ has joined #openstack-keystone | 04:21 | |
| *** jasonsb has joined #openstack-keystone | 04:22 | |
| *** dave-mccowan has quit IRC | 04:24 | |
| *** mylu has quit IRC | 04:32 | |
| *** fawadkhaliq has quit IRC | 04:35 | |
| *** timcline has joined #openstack-keystone | 04:36 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:36 | |
| *** mylu has joined #openstack-keystone | 04:36 | |
| *** mylu has quit IRC | 04:38 | |
| *** lhcheng has joined #openstack-keystone | 04:39 | |
| *** ChanServ sets mode: +v lhcheng | 04:39 | |
| *** lhcheng_ has quit IRC | 04:39 | |
| *** nehap has joined #openstack-keystone | 04:40 | |
| *** timcline has quit IRC | 04:40 | |
| *** fawadkhaliq has quit IRC | 04:40 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:41 | |
| *** aginwala has joined #openstack-keystone | 04:41 | |
| *** fawadkhaliq has quit IRC | 04:41 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:42 | |
| *** fawadkhaliq has quit IRC | 04:42 | |
| *** aginwala has quit IRC | 04:43 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:43 | |
| *** fawadkhaliq has quit IRC | 04:46 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:46 | |
| *** nehap has quit IRC | 04:47 | |
| *** fawadkhaliq has quit IRC | 04:47 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:48 | |
| *** fawadkhaliq has quit IRC | 04:48 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:49 | |
| *** aginwala has joined #openstack-keystone | 04:49 | |
| *** mylu has joined #openstack-keystone | 04:50 | |
| *** furface has quit IRC | 04:53 | |
| *** GB21 has joined #openstack-keystone | 04:58 | |
| *** nehap has joined #openstack-keystone | 05:03 | |
| *** GB21 has quit IRC | 05:07 | |
| *** GB21 has joined #openstack-keystone | 05:07 | |
| *** gangaec has joined #openstack-keystone | 05:12 | |
| *** gangaec has left #openstack-keystone | 05:13 | |
| *** gangaec has joined #openstack-keystone | 05:14 | |
| *** mylu has quit IRC | 05:17 | |
| *** shoutm_ has joined #openstack-keystone | 05:22 | |
| *** shoutm has quit IRC | 05:25 | |
| *** nehap has quit IRC | 05:31 | |
| *** jbell8 has quit IRC | 05:34 | |
| *** timcline has joined #openstack-keystone | 05:37 | |
| *** lhcheng has quit IRC | 05:39 | |
| *** timcline has quit IRC | 05:41 | |
| *** roxanaghe has joined #openstack-keystone | 05:43 | |
| *** shoutm has joined #openstack-keystone | 05:43 | |
| *** shoutm_ has quit IRC | 05:45 | |
| *** furface has joined #openstack-keystone | 05:48 | |
| *** roxanaghe has quit IRC | 05:50 | |
| *** naresht has joined #openstack-keystone | 05:52 | |
| *** timcline has joined #openstack-keystone | 05:55 | |
| *** timcline has quit IRC | 05:59 | |
| *** markvoelker has joined #openstack-keystone | 06:00 | |
| *** fawadkhaliq has quit IRC | 06:03 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:04 | |
| *** markvoelker has quit IRC | 06:04 | |
| *** jasonsb has quit IRC | 06:06 | |
| *** henrynash has joined #openstack-keystone | 06:09 | |
| *** ChanServ sets mode: +v henrynash | 06:09 | |
| *** roxanaghe has joined #openstack-keystone | 06:11 | |
| *** roxanaghe has quit IRC | 06:15 | |
| *** fawadkhaliq has quit IRC | 06:20 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:21 | |
| *** fawadkhaliq has quit IRC | 06:25 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:25 | |
| *** fawadkhaliq has quit IRC | 06:26 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:26 | |
| *** fawadkhaliq has quit IRC | 06:27 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:28 | |
| *** fawadkhaliq has quit IRC | 06:28 | |
| *** fawadkhaliq has joined #openstack-keystone | 06:29 | |
| *** lhcheng has joined #openstack-keystone | 06:29 | |
| *** ChanServ sets mode: +v lhcheng | 06:29 | |
| *** sdake_ has joined #openstack-keystone | 06:35 | |
| *** sdake has quit IRC | 06:36 | |
| *** henrynash has quit IRC | 06:42 | |
| *** sdake_ has quit IRC | 06:44 | |
| *** sdake has joined #openstack-keystone | 06:44 | |
| *** wanghua has joined #openstack-keystone | 06:51 | |
| *** timcline has joined #openstack-keystone | 06:55 | |
| *** pnavarro has quit IRC | 06:56 | |
| *** e0ne has joined #openstack-keystone | 06:58 | |
| *** timcline has quit IRC | 07:00 | |
| *** markvoelker has joined #openstack-keystone | 07:01 | |
| *** markvoelker has quit IRC | 07:07 | |
| *** rk4n has joined #openstack-keystone | 07:15 | |
| *** rk4n has quit IRC | 07:16 | |
| *** henrynash has joined #openstack-keystone | 07:19 | |
| *** ChanServ sets mode: +v henrynash | 07:19 | |
| *** bjornar has quit IRC | 07:20 | |
| *** GB21 has quit IRC | 07:23 | |
| *** sdake has quit IRC | 07:23 | |
| *** GB21 has joined #openstack-keystone | 07:25 | |
| *** e0ne has quit IRC | 07:28 | |
| *** aginwala has quit IRC | 07:29 | |
| *** roxanaghe has joined #openstack-keystone | 07:32 | |
| *** roxanaghe has quit IRC | 07:36 | |
| *** shoutm_ has joined #openstack-keystone | 07:37 | |
| *** shoutm has quit IRC | 07:39 | |
| *** lhcheng has quit IRC | 07:39 | |
| *** tesseract has joined #openstack-keystone | 07:41 | |
| *** spandhe has joined #openstack-keystone | 07:41 | |
| *** tesseract is now known as Guest60842 | 07:41 | |
| *** shoutm_ has quit IRC | 07:41 | |
| *** shoutm has joined #openstack-keystone | 07:42 | |
| *** GB21 has quit IRC | 07:49 | |
| *** rk4n has joined #openstack-keystone | 07:51 | |
| *** lhcheng has joined #openstack-keystone | 07:51 | |
| *** ChanServ sets mode: +v lhcheng | 07:51 | |
| *** timcline has joined #openstack-keystone | 07:56 | |
| *** timcline has quit IRC | 08:01 | |
| *** jaosorior has joined #openstack-keystone | 08:06 | |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value to server side https://review.openstack.org/296246 | 08:11 |
| *** EinstCra_ has joined #openstack-keystone | 08:13 | |
| *** spandhe has quit IRC | 08:16 | |
| *** EinstCrazy has quit IRC | 08:16 | |
| *** bjornar has joined #openstack-keystone | 08:30 | |
| *** shoutm_ has joined #openstack-keystone | 08:32 | |
| *** xek has quit IRC | 08:32 | |
| *** roxanaghe has joined #openstack-keystone | 08:33 | |
| *** xek has joined #openstack-keystone | 08:33 | |
| *** shoutm_ has quit IRC | 08:33 | |
| *** shoutm has quit IRC | 08:35 | |
| *** roxanaghe has quit IRC | 08:37 | |
| *** lhcheng has quit IRC | 08:39 | |
| *** permalac has joined #openstack-keystone | 08:43 | |
| *** jed56 has joined #openstack-keystone | 08:44 | |
| *** GB21 has joined #openstack-keystone | 08:54 | |
| *** timcline has joined #openstack-keystone | 08:57 | |
| *** henrynash has quit IRC | 09:00 | |
| *** links has quit IRC | 09:01 | |
| *** timcline has quit IRC | 09:02 | |
| *** e0ne has joined #openstack-keystone | 09:03 | |
| *** markvoelker has joined #openstack-keystone | 09:03 | |
| *** openstackgerrit has quit IRC | 09:03 | |
| *** openstackgerrit has joined #openstack-keystone | 09:03 | |
| *** doug-fish has quit IRC | 09:04 | |
| *** henrynash has joined #openstack-keystone | 09:05 | |
| *** ChanServ sets mode: +v henrynash | 09:05 | |
| *** markvoelker has quit IRC | 09:08 | |
| *** browne has joined #openstack-keystone | 09:11 | |
| *** nisha has joined #openstack-keystone | 09:17 | |
| *** links has joined #openstack-keystone | 09:18 | |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties https://review.openstack.org/296246 | 09:30 |
| *** roxanaghe has joined #openstack-keystone | 09:34 | |
| *** browne has quit IRC | 09:34 | |
| *** daemontool has joined #openstack-keystone | 09:35 | |
| *** daemontool_ has joined #openstack-keystone | 09:36 | |
| *** daemontool_ has quit IRC | 09:36 | |
| *** roxanaghe has quit IRC | 09:38 | |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties https://review.openstack.org/296246 | 09:48 |
| *** timcline has joined #openstack-keystone | 09:58 | |
| *** dims has joined #openstack-keystone | 10:00 | |
| *** timcline has quit IRC | 10:02 | |
| *** wanghua has quit IRC | 10:04 | |
| *** GB21 has quit IRC | 10:05 | |
| *** links has quit IRC | 10:05 | |
| *** LZ has quit IRC | 10:09 | |
| *** EinstCra_ has quit IRC | 10:10 | |
| *** nisha has quit IRC | 10:14 | |
| *** nisha has joined #openstack-keystone | 10:15 | |
| *** links has joined #openstack-keystone | 10:21 | |
| *** GB21 has joined #openstack-keystone | 10:22 | |
| *** shoutm has joined #openstack-keystone | 10:25 | |
| *** lhcheng has joined #openstack-keystone | 10:28 | |
| *** ChanServ sets mode: +v lhcheng | 10:28 | |
| *** ankur has quit IRC | 10:31 | |
| *** lhcheng has quit IRC | 10:33 | |
| *** nehap has joined #openstack-keystone | 10:34 | |
| *** jaosorior has quit IRC | 10:34 | |
| *** nehap has quit IRC | 10:35 | |
| *** e0ne has quit IRC | 10:35 | |
| *** jaosorior has joined #openstack-keystone | 10:36 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Fix table row counting SQL for MySQL and Postgresql https://review.openstack.org/296017 | 10:37 |
| *** mvk has joined #openstack-keystone | 10:39 | |
| *** nisha_ has joined #openstack-keystone | 10:40 | |
| *** nisha has quit IRC | 10:42 | |
| *** henrynash has quit IRC | 10:44 | |
| *** e0ne has joined #openstack-keystone | 10:45 | |
| *** henrynash has joined #openstack-keystone | 10:48 | |
| *** ChanServ sets mode: +v henrynash | 10:48 | |
| *** timcline has joined #openstack-keystone | 10:58 | |
| *** timcline has quit IRC | 11:03 | |
| *** markvoelker has joined #openstack-keystone | 11:04 | |
| *** dims_ has joined #openstack-keystone | 11:05 | |
| *** dims has quit IRC | 11:06 | |
| *** nisha_ has quit IRC | 11:08 | |
| *** markvoelker has quit IRC | 11:08 | |
| *** GB21 has quit IRC | 11:15 | |
| *** henrynash has quit IRC | 11:16 | |
| *** roxanaghe has joined #openstack-keystone | 11:22 | |
| *** doug-fish has joined #openstack-keystone | 11:22 | |
| *** roxanaghe has quit IRC | 11:26 | |
| afazekas | ayoung, can you have look on this https://review.openstack.org/#/c/295862/ is it the intended config ? | 11:28 |
| patchbot | afazekas: patch 295862 - openstack-dev/devstack - Configure the admin as admin | 11:28 |
| *** henrynash has joined #openstack-keystone | 11:31 | |
| *** david-lyle_ has joined #openstack-keystone | 11:58 | |
| *** timcline has joined #openstack-keystone | 11:59 | |
| *** david-lyle has quit IRC | 12:00 | |
| *** timcline has quit IRC | 12:03 | |
| *** markvoelker has joined #openstack-keystone | 12:20 | |
| *** GB21 has joined #openstack-keystone | 12:21 | |
| *** edmondsw has joined #openstack-keystone | 12:28 | |
| *** raildo-afk is now known as raildo | 12:30 | |
| *** pauloewerton has joined #openstack-keystone | 12:39 | |
| *** EinstCrazy has joined #openstack-keystone | 12:42 | |
| *** dave-mccowan has joined #openstack-keystone | 12:52 | |
| *** ninag has joined #openstack-keystone | 12:53 | |
| *** timcline has joined #openstack-keystone | 13:00 | |
| *** links has quit IRC | 13:01 | |
| *** Ephur has joined #openstack-keystone | 13:04 | |
| *** timcline has quit IRC | 13:04 | |
| *** david-lyle_ is now known as david-lyle | 13:06 | |
| *** jsavak has joined #openstack-keystone | 13:07 | |
| *** roxanaghe has joined #openstack-keystone | 13:10 | |
| *** rodrigods has quit IRC | 13:11 | |
| *** rodrigods has joined #openstack-keystone | 13:11 | |
| *** roxanaghe has quit IRC | 13:14 | |
| *** richm has joined #openstack-keystone | 13:18 | |
| *** GB21 has quit IRC | 13:27 | |
| *** jaugustine has joined #openstack-keystone | 13:28 | |
| *** trown is now known as trown|afk | 13:28 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Correct test_implied_roles_fk_on_delete_cascade https://review.openstack.org/296018 | 13:29 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Correct test_migrate_data_to_local_user_and_password_tables https://review.openstack.org/296041 | 13:29 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Opportunistic testing with different DBs https://review.openstack.org/295837 | 13:29 |
| *** rcrit_ has left #openstack-keystone | 13:30 | |
| *** GB21 has joined #openstack-keystone | 13:33 | |
| *** daemontool_ has joined #openstack-keystone | 13:33 | |
| *** daemontool has quit IRC | 13:33 | |
| *** ninag has quit IRC | 13:35 | |
| *** ninag has joined #openstack-keystone | 13:36 | |
| *** ninag has quit IRC | 13:37 | |
| *** ninag has joined #openstack-keystone | 13:37 | |
| *** knikolla has joined #openstack-keystone | 13:39 | |
| *** timcline has joined #openstack-keystone | 13:44 | |
| *** henrynash has joined #openstack-keystone | 13:45 | |
| *** ChanServ sets mode: +v henrynash | 13:45 | |
| *** mvk_ has joined #openstack-keystone | 13:45 | |
| anteaya | stevemar: you will get the world, hope they come up with good suggestions :) | 13:47 |
| *** thiagolib has joined #openstack-keystone | 13:48 | |
| *** mkrcmari__ has joined #openstack-keystone | 13:48 | |
| *** gordc has joined #openstack-keystone | 13:49 | |
| *** timcline has quit IRC | 13:49 | |
| *** GB21 has quit IRC | 13:49 | |
| *** mvk has quit IRC | 13:50 | |
| *** timcline has joined #openstack-keystone | 13:50 | |
| *** pushkaru has joined #openstack-keystone | 13:50 | |
| *** trown|afk is now known as trown | 13:51 | |
| *** mvk_ has quit IRC | 13:52 | |
| *** mvk_ has joined #openstack-keystone | 13:55 | |
| *** mvk has joined #openstack-keystone | 13:57 | |
| *** csoukup has joined #openstack-keystone | 13:57 | |
| *** mkrcmari__ has quit IRC | 13:58 | |
| *** BigWillie has joined #openstack-keystone | 13:59 | |
| *** mvk_ has quit IRC | 13:59 | |
| *** mvk has quit IRC | 14:01 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:01 | |
| *** dims has joined #openstack-keystone | 14:04 | |
| *** dims_ has quit IRC | 14:04 | |
| *** openstack has joined #openstack-keystone | 14:21 | |
| ayoung | afazekas, awesome. +1 from me. | 14:22 |
| *** real56 has quit IRC | 14:23 | |
| *** real56 has joined #openstack-keystone | 14:23 | |
| anteaya | stevemar: :) | 14:24 |
| *** ametts has joined #openstack-keystone | 14:24 | |
| ayoung | stevemar, can you reinforce? https://review.openstack.org/#/c/295862/2 | 14:26 |
| patchbot | ayoung: patch 295862 - openstack-dev/devstack - Configure the admin as admin | 14:26 |
| *** sdake has joined #openstack-keystone | 14:27 | |
| stevemar | ayoung: just did | 14:30 |
| ayoung | stevemar, I was looking ast Stackalytics or whatever it is called.. you are like Atlas here, holding up the world on your shoulders. Well done.... | 14:31 |
| ayoung | http://stackalytics.com/ #4 overall. | 14:31 |
| ayoung | -2|-1|+1|+2|A|x (+ ratio) == 4|31|9|143|71 for me.... | 14:33 |
| ayoung | damn I am too nice. | 14:33 |
| stevemar | ayoung: it's been an interesting release to say the least | 14:34 |
| stevemar | ayoung: i felt like i had to up my review game | 14:34 |
| ayoung | stevemar, the PTL job is lots of responsibility, minimum authority. You are kicking at, and hard. | 14:34 |
| knikolla | gamification of reviews | 14:35 |
| ayoung | knikolla, oh, we have that, too. Though, I have not had to submit a review under a new change ID to avoid a -2 since termie left the project | 14:35 |
| *** slberger has joined #openstack-keystone | 14:35 | |
| stevemar | ayoung: yeah, that played a major factor. i had the idea in my head that if i took on a bulk of the work then that would free everyone else up | 14:36 |
| ayoung | stevemar, we need to work to delegate that better. As Isee it, core should be doing the majority of the reviews, and PTL should be reviewing core...if that makes sense | 14:36 |
| * ayoung thinking like an Army OFfcier again | 14:37 | |
| ayoung | But you don't have the authority to force me to do reviews....so we would have to resort to public shaming and the lash. | 14:37 |
| *** shoutm has quit IRC | 14:37 | |
| samueldmq | bknudson: dstanek: I am trying to figure out how would it be to use fixtures in those ksclient tests | 14:39 |
| stevemar | ayoung: hehe, or pleading :P | 14:39 |
| stevemar | but i agree, a most delegating would help. i need to stop acting like an MMO tank | 14:40 |
| bknudson | samueldmq: you would have a fixture to represent a user. | 14:43 |
| *** henrynash has quit IRC | 14:43 | |
| *** timcline has quit IRC | 14:44 | |
| *** henrynash has joined #openstack-keystone | 14:44 | |
| *** timcline has joined #openstack-keystone | 14:44 | |
| samueldmq | bknudson: what is a fixtures for ? | 14:45 |
| samueldmq | bknudson: from the examples I saw, I could create a UserFixture and define setUp within it | 14:45 |
| bknudson | samueldmq: it encapsulates the setup and cleanup of a resource | 14:45 |
| bknudson | samueldmq: yes, that's what it would do. | 14:45 |
| samueldmq | bknudson: then create what Ineed and call addCleanUp as well | 14:46 |
| samueldmq | bknudson: if I need a user in my tests; I'd create it there (calling the client, etc) as I am doing right now, but within the class itself | 14:46 |
| bknudson | right | 14:46 |
| samueldmq | bknudson: nice, will post an update soon | 14:47 |
| samueldmq | thx | 14:47 |
| *** david-lyle_ is now known as david-lyle | 14:47 | |
| bknudson | there shouldn't be a need to call new_user_ref() since the fixture can hold the ref | 14:47 |
| bknudson | the dict | 14:47 |
| *** sdake_ has joined #openstack-keystone | 14:48 | |
| samueldmq | bknudson: ok | 14:48 |
| *** ninag has quit IRC | 14:48 | |
| *** sdake has quit IRC | 14:49 | |
| samueldmq | bknudson: so using fixtures those new_*_ref are unlikely to be needed at all | 14:49 |
| *** timcline has quit IRC | 14:49 | |
| samueldmq | I'd only need that to complex cases where the fixtures aren't enough | 14:49 |
| bknudson | for functional tests, probably won't need them | 14:49 |
| samueldmq | cool | 14:50 |
| *** zzzeek has quit IRC | 14:50 | |
| *** ninag has joined #openstack-keystone | 14:51 | |
| *** ninag has quit IRC | 14:51 | |
| *** ninag has joined #openstack-keystone | 14:51 | |
| *** SDub has joined #openstack-keystone | 14:51 | |
| SDub | Hi, I am in the middle of upgrading our production instance of OS from icehouse to juno, and we've encountered an error we didn't anticipate. When syncing the keystone database, we're having multiple failures, but from version 52 to 53 is when it starts. Could someone advise me on what to do? | 14:52 |
| *** sdake has joined #openstack-keystone | 14:53 | |
| *** sdake_ has quit IRC | 14:53 | |
| *** ninag has quit IRC | 14:55 | |
| bknudson | ayoung: another good reason to have our tempest plugin outside of keystone is that then if you want to run it you don't have to install all of keystone and its dependencies. | 14:55 |
| ayoung | bknudson, ++ | 14:55 |
| ayoung | I like that | 14:55 |
| *** roxanaghe has joined #openstack-keystone | 14:56 | |
| *** jsavak has quit IRC | 14:56 | |
| bknudson | I'm still fine with it either way, but there's a few good arguments for a new lib | 14:56 |
| bknudson | the new lib would be branchless just like tempest and unlike keystone | 14:56 |
| *** bjornar has quit IRC | 14:57 | |
| stevemar | bknudson: we could work on it in keystone proper right now and we can easily create a new repo when we have something substantial | 14:58 |
| bknudson | yes, no need to worry about getting it right to begin with since it's easy to change | 14:58 |
| stevemar | yeppers | 14:59 |
| *** trown|meeting is now known as trown | 15:00 | |
| *** roxanaghe has quit IRC | 15:00 | |
| *** ninag has joined #openstack-keystone | 15:00 | |
| *** diazjf has joined #openstack-keystone | 15:01 | |
| *** rderose has joined #openstack-keystone | 15:02 | |
| *** zzzeek has joined #openstack-keystone | 15:02 | |
| *** EinstCrazy has quit IRC | 15:03 | |
| *** gordc has quit IRC | 15:03 | |
| *** jsavak has joined #openstack-keystone | 15:03 | |
| *** jorge_munoz has joined #openstack-keystone | 15:04 | |
| *** SDub__ has joined #openstack-keystone | 15:07 | |
| *** SDub has quit IRC | 15:07 | |
| *** openstackstatus has joined #openstack-keystone | 15:12 | |
| *** ChanServ sets mode: +v openstackstatus | 15:12 | |
| *** alextricity_h has joined #openstack-keystone | 15:12 | |
| *** jbell8 has joined #openstack-keystone | 15:15 | |
| *** timcline has joined #openstack-keystone | 15:15 | |
| *** knikolla_ has joined #openstack-keystone | 15:15 | |
| *** jbell8 has quit IRC | 15:19 | |
| *** timcline has quit IRC | 15:19 | |
| *** jbell8 has joined #openstack-keystone | 15:19 | |
| openstackgerrit | Dina Belova proposed openstack/keystone: Add DB operations tracing https://review.openstack.org/294535 | 15:20 |
| *** gddub has joined #openstack-keystone | 15:20 | |
| *** browne has joined #openstack-keystone | 15:22 | |
| *** nehap has joined #openstack-keystone | 15:23 | |
| *** nehap has left #openstack-keystone | 15:23 | |
| harlowja_at_home | ayoung, i added the insecure messaging stuff to https://etherpad.openstack.org/p/newton-cross-project-sessions if u are interested | 15:25 |
| *** knikolla_ has quit IRC | 15:25 | |
| harlowja_at_home | i think it needs to be talked about in the wider forum | 15:25 |
| *** agrebennikov has joined #openstack-keystone | 15:25 | |
| ayoung | harlowja_at_home, fan.tas.tic! | 15:25 |
| harlowja_at_home | :-P | 15:25 |
| harlowja_at_home | thx, i didn't want to fill in a abstract, lol | 15:26 |
| harlowja_at_home | not yet at least ;) | 15:26 |
| *** jaosorior has quit IRC | 15:27 | |
| harlowja_at_home | messaging, u so scary, lol | 15:28 |
| *** jsavak has quit IRC | 15:28 | |
| *** gyee has joined #openstack-keystone | 15:29 | |
| *** ChanServ sets mode: +v gyee | 15:29 | |
| ayoung | harlowja_at_home, how do you like that? | 15:29 |
| harlowja_at_home | seems good to me, lol | 15:29 |
| *** jsavak has joined #openstack-keystone | 15:29 | |
| harlowja_at_home | btw, ayoung how much u climb still? | 15:30 |
| harlowja_at_home | i'm pretty active (mostly indoors still, as not everyone i know goes outdoors, ha) | 15:30 |
| * harlowja_at_home saw http://adam.younglogic.com/climbing/ :-P | 15:31 | |
| ayoung | harlowja_at_home, I joined a new Gym in December, and have been unable to go regularly enough to get strong enough to pas the lead test | 15:32 |
| harlowja_at_home | :( | 15:32 |
| harlowja_at_home | awwww | 15:32 |
| ayoung | harlowja_at_home, dad/husband stuff. | 15:32 |
| harlowja_at_home | ya, fair nuff | 15:32 |
| ayoung | Wife was recovering from Surgery through most of the winter...she's better now. I was in on Sunday, planning to go today | 15:32 |
| ayoung | But youngest son is home with a cold... | 15:33 |
| ayoung | harlowja_at_home, I can actually work from there | 15:33 |
| ayoung | http://brooklynboulders.com/somerville/ | 15:33 |
| harlowja_at_home | nice nice, prettier webpage than what planet granite has, lol | 15:34 |
| breton | stevemar: yeah, please don't get burned out with reviews :) | 15:34 |
| *** timcline has joined #openstack-keystone | 15:35 | |
| harlowja_at_home | ayoung, maybe find a gym in austin, i know another guy that would go, beats some of those parties IMHO, ha | 15:35 |
| ayoung | harlowja_at_home, already discussed that with jaosoriar | 15:36 |
| harlowja_at_home | lol | 15:36 |
| harlowja_at_home | ok, that makes 4 (if the other guy will go) | 15:36 |
| ayoung | harlowja_at_home, I'm thinkgin either Austin Rock Gym or North Austin Rock gym. My Gut says "North" | 15:37 |
| ayoung | usually the newer the gym, the better the features | 15:37 |
| harlowja_at_home | ah, ya, if its newer, then def | 15:38 |
| ayoung | and if they added "North" it was the second gym | 15:38 |
| ayoung | http://www.austinrockgym.com/ | 15:38 |
| ayoung | Ah...no | 15:38 |
| ayoung | North is bouldering only | 15:38 |
| harlowja_at_home | ya, i'd be fine with that, although bouldering and me == meh, lol | 15:38 |
| ayoung | http://www.austinrockgym.com/south-austin-rock-gym-sarg/ | 15:38 |
| harlowja_at_home | ya, seems like south for sport climbing | 15:39 |
| *** timcline has quit IRC | 15:40 | |
| ayoung | harlowja_at_home, lets shoot for Monday night. | 15:40 |
| ayoung | that way, if we like it, we can hit it again later in the week | 15:40 |
| harlowja_at_home | seems fine with me | 15:40 |
| harlowja_at_home | i think | 15:40 |
| harlowja_at_home | gotta double check my other plans, ha | 15:41 |
| ayoung | Oooh, THursday is opoen til Midnight | 15:41 |
| *** jsavak has quit IRC | 15:41 | |
| harlowja_at_home | depends how long u guys can last, lol | 15:41 |
| harlowja_at_home | i've been doing 12b recently (top rope) and like 12a (lead),, sooo thats where i'm at | 15:42 |
| ayoung | stevemar, so...merging Policy blobs. I want to make this a command line tool, like the policy checker. | 15:42 |
| ayoung | harlowja_at_home, much stronger than I am. | 15:42 |
| ayoung | That was my high water mark 10+ years ago | 15:42 |
| harlowja_at_home | u might be 10 years older than me :-P | 15:42 |
| ayoung | But I'll belay you. Let's see if we can rent lead ropes. | 15:42 |
| harlowja_at_home | def | 15:42 |
| ayoung | harlowja_at_home, 45 this summer.... | 15:43 |
| harlowja_at_home | ya, so 10 ;) | 15:43 |
| harlowja_at_home | 11 | 15:43 |
| *** jsavak has joined #openstack-keystone | 15:43 | |
| harlowja_at_home | close enough | 15:43 |
| *** jaosorior has joined #openstack-keystone | 15:44 | |
| ayoung | harlowja_at_home, it ain't the years. Its the children. | 15:45 |
| harlowja_at_home | ah | 15:45 |
| harlowja_at_home | ya ya | 15:45 |
| harlowja_at_home | and gym time spent :-P | 15:45 |
| *** bjornar has joined #openstack-keystone | 15:49 | |
| *** timcline has joined #openstack-keystone | 15:49 | |
| *** woodster_ has joined #openstack-keystone | 15:49 | |
| *** timcline has quit IRC | 15:52 | |
| *** timcline has joined #openstack-keystone | 15:52 | |
| *** fawadkhaliq has quit IRC | 15:54 | |
| *** jbell8 has quit IRC | 15:54 | |
| *** jbell8 has joined #openstack-keystone | 15:54 | |
| *** roxanaghe has joined #openstack-keystone | 15:56 | |
| *** jsavak has quit IRC | 15:57 | |
| *** jsavak has joined #openstack-keystone | 15:58 | |
| *** bjornar has quit IRC | 15:58 | |
| *** mvk has joined #openstack-keystone | 15:59 | |
| *** roxanaghe has quit IRC | 16:02 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Fix table row counting SQL for MySQL and Postgresql https://review.openstack.org/296017 | 16:03 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Fix test_add_int_pkey_to_revocation_event_table for MySQL https://review.openstack.org/296016 | 16:03 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Correct test_implied_roles_fk_on_delete_cascade https://review.openstack.org/296018 | 16:03 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Switch migration tests to oslo.db DbTestCase https://review.openstack.org/294246 | 16:03 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Correct test_migrate_data_to_local_user_and_password_tables https://review.openstack.org/296041 | 16:03 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Opportunistic testing with different DBs https://review.openstack.org/295837 | 16:03 |
| bknudson | opportunistic testing should be ready to go | 16:04 |
| *** diazjf has quit IRC | 16:04 | |
| stevemar | bknudson: nice | 16:04 |
| stevemar | +2 the whole chain! | 16:04 |
| * stevemar actually goes to review it | 16:04 | |
| stevemar | bknudson: you changed up the order | 16:06 |
| *** links has joined #openstack-keystone | 16:06 | |
| stevemar | Switch migration tests to oslo.db DbTestCase was first | 16:06 |
| bknudson | yes, there were a couple of easy fixes that didn't depend on the switch to DbTestCase. | 16:06 |
| bknudson | I could have moved the other fixes, too. | 16:06 |
| stevemar | bknudson: gotcha | 16:07 |
| bknudson | but then I'd have to revert some changes and then reapply them in the switch | 16:07 |
| *** dan_nguyen has joined #openstack-keystone | 16:08 | |
| stevemar | bknudson: ah we had to change keystone/common/sql/core.py eh | 16:08 |
| stevemar | i don't like it when we have to change code to account for tests | 16:08 |
| bknudson | stevemar: it's tricky because with sqlite in-memory testing you need to use the same engine for all ops (otherwise you get an empty db) | 16:09 |
| stevemar | yeah, this change seems inevitable | 16:09 |
| stevemar | unavoidable* | 16:09 |
| stevemar | we are also losing db2 testing :( | 16:09 |
| stevemar | not that it was ever really tested | 16:09 |
| stevemar | but now we're losing the ability to test it at all? | 16:10 |
| bknudson | another option is to change sql.core to use the oslo.db global transaction in both test and non-test situation. I didn't try it. | 16:10 |
| bknudson | I believe you can still test with db2 you just have to set an env var. | 16:10 |
| bknudson | I didn't try testing with db2. | 16:10 |
| stevemar | bknudson: it's not tested anyway | 16:12 |
| bknudson | y, somehow we couldn't convince our team to get their ci working. | 16:13 |
| bknudson | we don't have much pull around here | 16:14 |
| stevemar | bknudson: i've never had pull anywhere | 16:15 |
| *** rderose has quit IRC | 16:18 | |
| *** real56 has quit IRC | 16:18 | |
| *** real56 has joined #openstack-keystone | 16:19 | |
| *** trown is now known as trown|lunch | 16:19 | |
| *** thiagolib has quit IRC | 16:19 | |
| *** Guest60842 has quit IRC | 16:21 | |
| *** rderose has joined #openstack-keystone | 16:21 | |
| *** real56 has quit IRC | 16:24 | |
| *** real56 has joined #openstack-keystone | 16:25 | |
| *** alextricity_h has quit IRC | 16:27 | |
| dstanek | samueldmq: did you get it figured out? | 16:27 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 16:29 | |
| *** jasonsb has joined #openstack-keystone | 16:30 | |
| *** tqtran has joined #openstack-keystone | 16:30 | |
| *** fawadkhaliq has joined #openstack-keystone | 16:31 | |
| *** gordc has joined #openstack-keystone | 16:32 | |
| *** david-lyle has quit IRC | 16:33 | |
| *** david-lyle has joined #openstack-keystone | 16:33 | |
| *** spzala has quit IRC | 16:33 | |
| *** lhcheng has joined #openstack-keystone | 16:35 | |
| *** ChanServ sets mode: +v lhcheng | 16:35 | |
| *** fawadkhaliq has quit IRC | 16:35 | |
| *** fawadkhaliq has joined #openstack-keystone | 16:36 | |
| *** gangaec has quit IRC | 16:37 | |
| *** jasonsb has quit IRC | 16:38 | |
| *** browne has quit IRC | 16:38 | |
| *** jasonsb has joined #openstack-keystone | 16:39 | |
| *** naresht has quit IRC | 16:39 | |
| *** spzala has joined #openstack-keystone | 16:39 | |
| *** real56 has quit IRC | 16:40 | |
| *** real56 has joined #openstack-keystone | 16:41 | |
| *** fundcor has joined #openstack-keystone | 16:42 | |
| *** gddub has quit IRC | 16:43 | |
| *** aginwala has joined #openstack-keystone | 16:44 | |
| *** spzala has quit IRC | 16:44 | |
| *** spzala has joined #openstack-keystone | 16:45 | |
| *** spzala_ has joined #openstack-keystone | 16:48 | |
| *** aginwala has quit IRC | 16:49 | |
| *** links has quit IRC | 16:49 | |
| *** spzala has quit IRC | 16:50 | |
| *** spzala_ has quit IRC | 16:53 | |
| *** spzala has joined #openstack-keystone | 16:54 | |
| *** spzala_ has joined #openstack-keystone | 16:56 | |
| *** spzala has quit IRC | 16:58 | |
| *** spzala_ has quit IRC | 17:00 | |
| *** maxabidi has joined #openstack-keystone | 17:02 | |
| *** spzala has joined #openstack-keystone | 17:02 | |
| *** roxanaghe has joined #openstack-keystone | 17:02 | |
| *** arunkant has joined #openstack-keystone | 17:03 | |
| *** spzala_ has joined #openstack-keystone | 17:04 | |
| *** dims_ has quit IRC | 17:05 | |
| *** spzala has quit IRC | 17:06 | |
| *** dims has joined #openstack-keystone | 17:06 | |
| *** diazjf has joined #openstack-keystone | 17:07 | |
| *** diazjf has quit IRC | 17:07 | |
| *** spzala_ has quit IRC | 17:08 | |
| *** spzala_ has joined #openstack-keystone | 17:09 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Fix keystone-manage config file path https://review.openstack.org/296110 | 17:09 |
| *** jasonsb has quit IRC | 17:09 | |
| *** real56 has quit IRC | 17:11 | |
| *** real56 has joined #openstack-keystone | 17:12 | |
| *** bjornar has joined #openstack-keystone | 17:12 | |
| *** spzala_ has quit IRC | 17:13 | |
| *** spzala has joined #openstack-keystone | 17:14 | |
| *** spzala has quit IRC | 17:19 | |
| *** spzala has joined #openstack-keystone | 17:20 | |
| *** mylu has joined #openstack-keystone | 17:22 | |
| *** real56 has quit IRC | 17:24 | |
| samueldmq | dstanek: yep, thanks | 17:24 |
| samueldmq | :) | 17:24 |
| *** real56 has joined #openstack-keystone | 17:24 | |
| *** spzala has quit IRC | 17:25 | |
| *** aginwala has joined #openstack-keystone | 17:26 | |
| *** roxanagh_ has joined #openstack-keystone | 17:27 | |
| morgan | stevemar: https://review.openstack.org/#/c/295641/2 should be a quick +2/+A now. crinkle has it all happy passing the gate | 17:28 |
| patchbot | morgan: patch 295641 - keystone - Implement HEAD method for all v3 GET actions | 17:28 |
| *** spzala has joined #openstack-keystone | 17:28 | |
| *** rcernin has quit IRC | 17:29 | |
| *** browne has joined #openstack-keystone | 17:31 | |
| *** roxanagh_ has quit IRC | 17:31 | |
| *** real56 has quit IRC | 17:33 | |
| *** spzala has quit IRC | 17:33 | |
| *** real56 has joined #openstack-keystone | 17:34 | |
| *** spzala has joined #openstack-keystone | 17:34 | |
| *** real56 has quit IRC | 17:35 | |
| *** fawadkhaliq has quit IRC | 17:36 | |
| *** trown|lunch is now known as trown | 17:36 | |
| *** real56 has joined #openstack-keystone | 17:36 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:37 | |
| *** spzala has quit IRC | 17:39 | |
| *** pushkaru has quit IRC | 17:39 | |
| *** pushkaru has joined #openstack-keystone | 17:39 | |
| *** fawadkhaliq has quit IRC | 17:39 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:39 | |
| *** henrynash has joined #openstack-keystone | 17:39 | |
| *** ChanServ sets mode: +v henrynash | 17:39 | |
| *** henrynash has quit IRC | 17:40 | |
| *** fawadkhaliq has quit IRC | 17:41 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:41 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Correct test to support changing N release name https://review.openstack.org/291207 | 17:45 |
| *** fawadkhaliq has quit IRC | 17:47 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:47 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Drop EPHEMERAL user type https://review.openstack.org/296639 | 17:48 |
| *** real56 has quit IRC | 17:48 | |
| *** spzala_ has joined #openstack-keystone | 17:48 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Drop EPHEMERAL user type https://review.openstack.org/296639 | 17:49 |
| *** real56 has joined #openstack-keystone | 17:49 | |
| *** real56 has quit IRC | 17:52 | |
| *** spzala_ has quit IRC | 17:52 | |
| *** ninag has quit IRC | 17:54 | |
| *** spzala has joined #openstack-keystone | 17:54 | |
| *** spandhe has joined #openstack-keystone | 17:58 | |
| *** spzala has quit IRC | 17:58 | |
| *** pumarani__ has joined #openstack-keystone | 18:00 | |
| *** tellesnobrega is now known as tellesnobrega_af | 18:01 | |
| *** jsavak has quit IRC | 18:02 | |
| *** tellesnobrega_af is now known as tellesnobrega | 18:02 | |
| *** jsavak has joined #openstack-keystone | 18:02 | |
| *** pushkaru has quit IRC | 18:03 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:06 | |
| *** spzala has joined #openstack-keystone | 18:06 | |
| edmondsw | stevemar Why does "openstack user list --long" have a column for project? user's aren't project-specific... | 18:07 |
| stevemar | edmondsw: hang over from v2 probably | 18:12 |
| edmondsw | stevemar, how would that have made sense in v2? | 18:12 |
| stevemar | edmondsw: users had default projects | 18:13 |
| *** jaosorior has quit IRC | 18:13 | |
| edmondsw | ah, true | 18:13 |
| edmondsw | do we not allow default projects for users in v3? | 18:13 |
| breton | there is no such thing as default project in v3 | 18:14 |
| stevemar | ^ | 18:14 |
| edmondsw | good to know | 18:14 |
| breton | there are roles assigned | 18:14 |
| edmondsw | why not? | 18:14 |
| breton | to user for a project | 18:14 |
| *** krotscheck has quit IRC | 18:14 | |
| *** krotscheck has joined #openstack-keystone | 18:15 | |
| breton | because it didn't let us do proper access control | 18:15 |
| edmondsw | sure, but a default project could still be useful for horizon, to log you into your default project | 18:15 |
| stevemar | breton: thanks for cleaning up https://review.openstack.org/#/c/291207/ | 18:15 |
| patchbot | stevemar: patch 291207 - keystone - Correct test to support changing N release name | 18:15 |
| edmondsw | assuming you have a role on that project, of course... not taking away from role assignments | 18:15 |
| *** iurygregory has quit IRC | 18:15 | |
| *** ericksonsantos has quit IRC | 18:16 | |
| *** clenimar has quit IRC | 18:16 | |
| stevemar | edmondsw: horizon will log you into whatever project it finds first, you can use the list to switch | 18:16 |
| edmondsw | yeah... which is kinda odd... would be nicer to log you into the one you've set as your default | 18:16 |
| *** pauloe has quit IRC | 18:16 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Drop EPHEMERAL user type https://review.openstack.org/296639 | 18:17 |
| stevemar | morgan: donezo | 18:17 |
| stevemar | morgan: want to kick this chain through: https://review.openstack.org/#/c/296016/ | 18:20 |
| patchbot | stevemar: patch 296016 - keystone - Fix test_add_int_pkey_to_revocation_event_table fo... | 18:20 |
| *** mvk_ has joined #openstack-keystone | 18:22 | |
| stevemar | morgan: and... https://review.openstack.org/#/c/291207/ | 18:23 |
| patchbot | stevemar: patch 291207 - keystone - Correct test to support changing N release name | 18:23 |
| *** jsavak has quit IRC | 18:24 | |
| morgan | looking | 18:24 |
| morgan | was on a call for another company | 18:24 |
| morgan | (re: employment) | 18:24 |
| *** jsavak has joined #openstack-keystone | 18:24 | |
| *** pauloe has joined #openstack-keystone | 18:25 | |
| *** mvk has quit IRC | 18:25 | |
| *** ericksonsantos has joined #openstack-keystone | 18:26 | |
| *** krotscheck has quit IRC | 18:26 | |
| *** raildo is now known as raildo-afk | 18:26 | |
| *** raildo-afk is now known as raildo | 18:26 | |
| *** krotscheck has joined #openstack-keystone | 18:26 | |
| *** iurygregory has joined #openstack-keystone | 18:27 | |
| *** clenimar has joined #openstack-keystone | 18:28 | |
| *** jsavak has quit IRC | 18:28 | |
| *** aginwala has quit IRC | 18:30 | |
| morgan | done and done | 18:31 |
| morgan | re patches | 18:31 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/python-keystoneclient: Add users functional tests https://review.openstack.org/289306 | 18:32 |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: WIP - ldap3 Identity Driver https://review.openstack.org/296090 | 18:32 |
| samueldmq | bknudson: dstanek: using fixture ^ the tests themselves are much simpler | 18:32 |
| samueldmq | maybe I need to move UserFixture somewhere else ? | 18:32 |
| samueldmq | also the delete test isn't working because it deletes the entity and passes its checks; but fails in the cleanup because the entity was already deleted | 18:33 |
| samueldmq | I'd like to see your thoughts/suggestions | 18:33 |
| samueldmq | :) | 18:34 |
| *** jsavak has joined #openstack-keystone | 18:36 | |
| *** maxabidi has quit IRC | 18:36 | |
| *** aginwala has joined #openstack-keystone | 18:37 | |
| *** krotscheck has quit IRC | 18:38 | |
| *** krotscheck has joined #openstack-keystone | 18:39 | |
| *** permalac has quit IRC | 18:39 | |
| *** diazjf has joined #openstack-keystone | 18:39 | |
| *** henrynash has joined #openstack-keystone | 18:41 | |
| *** ChanServ sets mode: +v henrynash | 18:41 | |
| *** sdake_ has joined #openstack-keystone | 18:41 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Drop EPHEMERAL user type https://review.openstack.org/296639 | 18:43 |
| *** sdake has quit IRC | 18:44 | |
| ayoung | harlowja_at_home, Having really strict key management for SSH access into your OpenStack deployment, but not locking down the Queue is like this https://youtu.be/eU2Or5rCN_Y | 18:46 |
| *** sdake has joined #openstack-keystone | 18:47 | |
| ayoung | stevemar, do oslo-policy specs go in keystone-specs? | 18:47 |
| *** aginwala has quit IRC | 18:47 | |
| *** sdake_ has quit IRC | 18:49 | |
| breton | ayoung: yes afaik | 18:50 |
| *** clenimar has quit IRC | 18:51 | |
| breton | bknudson pushed that | 18:51 |
| *** openstack has joined #openstack-keystone | 19:07 | |
| *** openstackstatus has joined #openstack-keystone | 19:08 | |
| *** ChanServ sets mode: +v openstackstatus | 19:08 | |
| *** lhcheng_ has joined #openstack-keystone | 19:08 | |
| *** openstack has joined #openstack-keystone | 19:20 | |
| *** rderose has quit IRC | 19:21 | |
| *** rm_work has joined #openstack-keystone | 19:21 | |
| *** sigmavirus24 has quit IRC | 19:21 | |
| *** openstackstatus has joined #openstack-keystone | 19:23 | |
| *** ChanServ sets mode: +v openstackstatus | 19:23 | |
| *** raquellira is now known as raquel | 19:23 | |
| *** zhiyan_ is now known as zhiyan | 19:23 | |
| *** serverascode_ is now known as serverascode | 19:23 | |
| *** raquel has left #openstack-keystone | 19:23 | |
| *** sigmavirus24 has joined #openstack-keystone | 19:24 | |
| *** DuncanT_ is now known as DuncanT | 19:24 | |
| fundcor | Hello! I am trying to run an existing uWSGI-connected keystone app under Gunicorn. What should I do? | 19:24 |
| dstanek | fundcor: have you created a gunicorn config? | 19:25 |
| *** Guest69253 is now known as zeus` | 19:25 | |
| *** mylu has quit IRC | 19:27 | |
| *** aginwala has joined #openstack-keystone | 19:32 | |
| *** jsavak has quit IRC | 19:33 | |
| *** zeus` is now known as zeus | 19:33 | |
| *** zeus has quit IRC | 19:34 | |
| *** zeus has joined #openstack-keystone | 19:34 | |
| *** jsavak has joined #openstack-keystone | 19:34 | |
| *** mylu has joined #openstack-keystone | 19:37 | |
| dstanek | in an Apache setup is there really no way to specify explicitly where the keystone.conf is located? | 19:38 |
| fundcor | dstanek, Yes, I have created gunicorn config and a paste configuration, maybe someone could an advise how to get my system running? | 19:39 |
| morgan | dstanek: we need to support that option via ENV Var | 19:40 |
| *** spzala has quit IRC | 19:40 | |
| morgan | dstanek: (mod_wsgi has limitations) | 19:40 |
| morgan | dstanek: in uwsgi it's totally doable :) | 19:40 |
| dstanek | fundcor: what happens when you run the gunicorn process? | 19:41 |
| dstanek | morgan: that bytes | 19:41 |
| dstanek | morgan: maybe i can grab cfg.CONF and make it parse another config file for me | 19:41 |
| morgan | dstanek: or just look in environ['keystone_config'] | 19:42 |
| morgan | dstanek: and set that ENV in apache conf | 19:42 |
| *** aginwala has quit IRC | 19:42 | |
| dstanek | morgan: then i'd be making changes to keystone and/or the wsgi stuf | 19:42 |
| dstanek | stub | 19:42 |
| morgan | dstanek: it's something we should move to anyway since eventlet is in it's last throws. | 19:42 |
| morgan | dstanek: nah, in apache_config | 19:42 |
| morgan | dstanek: you can setENV in the apache vhost | 19:43 |
| dstanek | morgan: but keystone doesn't read that does it? | 19:43 |
| morgan | if you can read from the env *or* cli like we do for other things. | 19:43 |
| *** simondodsley has joined #openstack-keystone | 19:43 | |
| *** dims_ has joined #openstack-keystone | 19:43 | |
| morgan | dstanek: no, we'd need to make conf aware of the env | 19:43 |
| *** aginwala has joined #openstack-keystone | 19:44 | |
| *** spzala has joined #openstack-keystone | 19:44 | |
| *** dims has quit IRC | 19:45 | |
| *** sheel has quit IRC | 19:47 | |
| fundcor | dstnek, I suppose that I have wrong configuration files or command line arguments and I can`t find any manual | 19:47 |
| dstanek | fundcor: can you put your config and command line args on paste.openstack.org? | 19:49 |
| *** spzala has quit IRC | 19:49 | |
| *** ninag has joined #openstack-keystone | 19:50 | |
| *** jorge_munoz has joined #openstack-keystone | 19:52 | |
| *** dims_ has quit IRC | 19:53 | |
| *** dims has joined #openstack-keystone | 19:56 | |
| fundcor | dstanek, http://paste.openstack.org/show/491633/ | 19:57 |
| *** roxanaghe has joined #openstack-keystone | 19:59 | |
| fundcor | dstanek, ver.2 http://paste.openstack.org/show/491634/ | 20:01 |
| *** roxanaghe_ has joined #openstack-keystone | 20:01 | |
| dstanek | fundcor: what is the error that you are getting? | 20:03 |
| *** roxanaghe has quit IRC | 20:03 | |
| fundcor | dstanek, Workers can not start: http://paste.openstack.org/show/491635/ | 20:08 |
| ayoung | morgan, harlowja_at_home OK so, yes, you can enforce on message sender | 20:08 |
| morgan | ayoung: cool | 20:09 |
| ayoung | https://www.rabbitmq.com/validated-user-id.html is the Java version, I converted to Python and confirmed: | 20:09 |
| morgan | ayoung: hm. | 20:09 |
| morgan | ok this is the inverse of what i think we need. | 20:09 |
| morgan | but it'd also work | 20:09 |
| ayoung | morgan, so the sender needs to explicitly send it. THen the broker checks that it matches the Rabbit user | 20:09 |
| morgan | i think we want to check on the receiving end | 20:10 |
| morgan | vs the sending end "this message, according to the broker, was sent by X" | 20:10 |
| ayoung | morgan, taht is it. | 20:11 |
| ayoung | one sec | 20:11 |
| dstanek | fundcor: is there anything in the keystone log? | 20:11 |
| morgan | this, if i am reading right prevents publishing of the message unless the user is who they say they are | 20:11 |
| morgan | it's inverted, more work to use, but could also work | 20:11 |
| ayoung | morgan, you can then check on the other side...let me confirm the filter works and I'll paste | 20:11 |
| morgan | cool | 20:11 |
| *** rk4n has quit IRC | 20:11 | |
| ayoung | pika.exceptions.ChannelClosed: (406, "PRECONDITION_FAILED - user_id property set to 'rabbit_userid' but authenticated user was 'a5f56bdb395f53864a80b95f45dc395e94c546c7'") | 20:12 |
| morgan | right | 20:12 |
| ayoung | that is what happens when you try to send an invalid user-id | 20:12 |
| ayoung | on the receiver side: | 20:12 |
| ayoung | [x] Sent 'Hello World!' | 20:12 |
| ayoung | [x] Received 'Hello World!' | 20:12 |
| ayoung | Message user_id is a5f56bdb395f53864a80b95f45dc395e94c546c7 | 20:12 |
| morgan | perfect | 20:13 |
| morgan | the receiving side is the important part | 20:13 |
| ayoung | morgan, http://paste.openstack.org/show/491636/ | 20:13 |
| ayoung | http://paste.openstack.org/show/491637/ | 20:13 |
| morgan | if the sending side was the only enforceable part... suuuure, it'd be doable | 20:13 |
| morgan | but, most important is the receiving side. | 20:13 |
| *** BigWillie has quit IRC | 20:13 | |
| morgan | for ease of implementation | 20:14 |
| ayoung | so a user chas the option to either send it or hide it, but not fake it | 20:14 |
| morgan | yup | 20:14 |
| morgan | and we should move towards verified user_id | 20:14 |
| morgan | that solves the authenticated messages issue | 20:14 |
| *** jsavak has quit IRC | 20:14 | |
| ayoung | Yep. | 20:15 |
| morgan | at least to the same level of assurances that a crytographically signed message would be | 20:15 |
| ayoung | Blog post! | 20:15 |
| fundcor | dstanek, I think it is missing or empty | 20:15 |
| harlowja_at_home | ayoung, neat | 20:15 |
| *** jsavak has joined #openstack-keystone | 20:15 | |
| morgan | ayoung: *and* spec proposal for oslo.messaging! | 20:15 |
| harlowja_at_home | blog post + 1 | 20:15 |
| harlowja_at_home | and that to | 20:15 |
| harlowja_at_home | lol | 20:15 |
| harlowja_at_home | bb | 20:15 |
| morgan | ayoung: once oslo.messaging supports sending/user_validation then the change in nova should be easy-ish | 20:16 |
| *** rk4n has joined #openstack-keystone | 20:16 | |
| morgan | ayoung: and queue segmentation shouldn't be needed [a nice addon down the line for performance reasons, but not for pure security reasons] | 20:16 |
| ayoung | morgan, yeah. THis is kinda basic | 20:16 |
| ayoung | morgan, right now, you can split the control(rpc) vhost from notifications | 20:17 |
| morgan | ayoung: still need to ensure the authentication is sane, but i mean, thats just "secure your queue" and firewall off access | 20:17 |
| ayoung | that is a start | 20:17 |
| *** e0ne has joined #openstack-keystone | 20:17 | |
| ayoung | next, we give everyone a name | 20:17 |
| ayoung | instead of using guest for all, | 20:17 |
| ayoung | nova-api-3 , nova-conductor-1 and so on | 20:18 |
| morgan | and i'd push towards the name bit as the default deployment story, the split queue being a "strongly recommended" | 20:18 |
| morgan | eh, even if all nova-api nodes shared a single user, thats ok as long as nova-api is separate from conductor, is separate from compute | 20:18 |
| *** rk4n has quit IRC | 20:18 | |
| ayoung | then you can do message level validation: Hey, I got this from node-1, but it is telling me to power down? | 20:18 |
| *** henrynash has joined #openstack-keystone | 20:19 | |
| *** ChanServ sets mode: +v henrynash | 20:19 | |
| *** openstack has joined #openstack-keystone | 20:31 | |
| stevemar | i don't remember recommending uwsgi over mod_wsgi | 20:31 |
| bknudson | stevemar: I wouldn't recomment uwsgi over mod_wsgi at this point | 20:32 |
| bknudson | if we can get mod_proxy_uwsgi in the gate and running I'd recommend that | 20:32 |
| morgan | bknudson: ++ | 20:32 |
| *** roxanaghe has joined #openstack-keystone | 20:33 | |
| morgan | bknudson: the correct steps, 1) uwsgi working, 2) gating on mod_proxy_uwsgi, 3) ???, 4) profit | 20:33 |
| morgan | stevemar: i recommend uwsgi over eventlet! anyday | 20:33 |
| morgan | :P | 20:33 |
| bknudson | we've got a uwsgi job running now and it's been stable, I think. | 20:34 |
| bknudson | I was disappointed when it didn't work well to begin with though... doesn't seem to handle persistent connections for some reason | 20:34 |
| bknudson | not sure why they're saying it's complex to deploy with uwsgi. | 20:35 |
| dstanek | bknudson: because it's different | 20:35 |
| bknudson | especially compared to mod_wsgi. | 20:36 |
| *** e0ne has quit IRC | 20:37 | |
| fundcor | Does anyone know how to run a Keystone under gunicorn? | 20:37 |
| morgan | fundcor: probably similar to uwsgi, but it hasn't had much engineering work done to make it work | 20:37 |
| bknudson | fundcor: I can't imagine it's much different than uwsgi, but I didn't run it. | 20:37 |
| dstanek | fundcor: i had it working a while ago, but at the time i had to make code changes | 20:38 |
| dstanek | fundcor: let me try your config.... | 20:38 |
| *** jsavak has quit IRC | 20:39 | |
| *** jsavak has joined #openstack-keystone | 20:39 | |
| openstackgerrit | Merged openstack/keystone: Implement HEAD method for all v3 GET actions https://review.openstack.org/295641 | 20:40 |
| openstackgerrit | Merged openstack/keystone: Fix test_add_int_pkey_to_revocation_event_table for MySQL https://review.openstack.org/296016 | 20:41 |
| dstanek | fundcor: here is a little hint... gunicorn --paste ks.ini#public_service | 20:44 |
| dstanek | you are not specifying the app from paste correctly | 20:44 |
| *** mylu_ has quit IRC | 20:44 | |
| bknudson | why use paste? keystone already does that | 20:45 |
| openstackgerrit | Merged openstack/keystone: Correct test to support changing N release name https://review.openstack.org/291207 | 20:45 |
| dstanek | fundcor: http://docs.gunicorn.org/en/latest/settings.html#paste | 20:46 |
| dstanek | bknudson: what do you mean? paste builds the wsgi app and gunicorn runs it | 20:46 |
| *** mylu has joined #openstack-keystone | 20:46 | |
| bknudson | we already ship a wsgi app | 20:46 |
| dstanek | bknudson: that includes all of the middleware already configured? | 20:46 |
| bknudson | it reads the normal keystone paste.ini | 20:47 |
| *** BigWillie has quit IRC | 20:48 | |
| dstanek | bknudson: i didn't even think of that. 'gunicorn keystone.server.wsgi:initialize_admin_application' works too | 20:48 |
| *** bknudson has left #openstack-keystone | 20:50 | |
| *** bknudson has joined #openstack-keystone | 20:50 | |
| *** ChanServ sets mode: +v bknudson | 20:50 | |
| bknudson | dstanek: we've also got the /usr/local/bin/keystone-wsgi-admin -- not sure how to point gunicorn to it | 20:50 |
| dstanek | bknudson: normall with unicorn you specify the python module, but there may be a way to specify a command line script | 20:51 |
| *** fawadkhaliq has quit IRC | 20:53 | |
| bknudson | all that keystone-wsgi-admin does is keystone.server.wsgi:initialize_admin_application anyways. | 20:53 |
| *** fawadkhaliq has joined #openstack-keystone | 20:53 | |
| dstanek | bknudson: exactly. i stole the path from our setup.cfg | 20:53 |
| * ayoung proposed a new oslo-policy spec https://review.openstack.org/296785 but those don't show up here | 20:55 | |
| *** aginwala has quit IRC | 20:56 | |
| dims | ayoung : have you seen knikolla 's osc patch? https://review.openstack.org/#/c/296582/ think you'll like it | 20:57 |
| patchbot | dims: patch 296582 - python-openstackclient - WIP - Calls to K2K Federated Service Providers | 20:57 |
| *** diazjf has quit IRC | 20:58 | |
| *** david-lyle has quit IRC | 20:59 | |
| fundcor | Thanks to all | 21:00 |
| *** aginwala has joined #openstack-keystone | 21:01 | |
| *** diazjf has joined #openstack-keystone | 21:01 | |
| *** aginwala has quit IRC | 21:01 | |
| ayoung | dims, K2K is really not my thing. | 21:02 |
| ayoung | dims, but the idea is sound. | 21:02 |
| dims | ayoung : i see. i was just reading http://adam.younglogic.com/2015/03/key-fed-lookup-redux/ | 21:03 |
| dims | so assumed :) | 21:03 |
| ayoung | dims, K2K is not Federation | 21:03 |
| *** aginwala has joined #openstack-keystone | 21:03 | |
| ayoung | dims, K2K is for linking Keystones togeterh | 21:03 |
| ayoung | but the rest of federation is about external Identity providers | 21:03 |
| ayoung | I don't like that the two names are confusing to people | 21:03 |
| ayoung | K2K uses SAML, but that is pretty much the only overlap | 21:04 |
| dims | ayoung : interesting, pray enlighten the difference | 21:04 |
| *** fawadkhaliq has quit IRC | 21:04 | |
| *** fawadk has joined #openstack-keystone | 21:04 | |
| ayoung | dims, start with the assumption that Keystone should not be an identity provider... | 21:05 |
| *** david-lyle has joined #openstack-keystone | 21:05 | |
| ayoung | dims, as nkinder wrote so well: https://blog-nkinder.rhcloud.com/?p=130 | 21:05 |
| ayoung | So, "federating" between Keystone servers is not a pattern I tend to favor. It makes more sense for a provider like RAX that already has a huge user base in Keystone, and needs to make them work together | 21:06 |
| *** spzala has joined #openstack-keystone | 21:06 | |
| *** timcline has quit IRC | 21:07 | |
| ayoung | dims, the MOC folks are using the concept to drive their Hardward federation, too, which is kinda cool. | 21:07 |
| *** timcline has joined #openstack-keystone | 21:07 | |
| ayoung | But, I am more focused on the authorization side of Keystone, and letting the external tools do authorization | 21:07 |
| *** spzala has quit IRC | 21:08 | |
| breton | > external tools do authorization | 21:08 |
| *** spzala has joined #openstack-keystone | 21:08 | |
| breton | what tools for example? | 21:08 |
| * dims reading the nkinder blog post | 21:08 | |
| *** diazjf has quit IRC | 21:09 | |
| dims | breton : guessing FreeIPA :) | 21:09 |
| *** mylu has quit IRC | 21:09 | |
| *** timcline has quit IRC | 21:11 | |
| *** jbell8_ has joined #openstack-keystone | 21:11 | |
| stevemar | bknudson: haha, http://lists.openstack.org/pipermail/openstack-docs/2016-March/008371.html | 21:12 |
| *** jbell8 has quit IRC | 21:12 | |
| bknudson | stevemar: that merged in N, not M. | 21:12 |
| *** mylu has joined #openstack-keystone | 21:12 | |
| breton | looks in M to me | 21:13 |
| bknudson | oh, oops, that wasn't meant to merge until N. | 21:15 |
| breton | https://review.openstack.org/#/c/293114/ | 21:15 |
| patchbot | breton: patch 293114 - keystone - Document running in uwsgi proxied by apache (MERGED) | 21:15 |
| bknudson | I thought we already had a stable branch at that point | 21:15 |
| *** mylu has quit IRC | 21:15 | |
| bknudson | still, it's not a difficult configuration. And it's easy to set up since you can deal with apache and keystone separately | 21:16 |
| *** trown is now known as trown|outtypewww | 21:17 | |
| *** david-lyle has quit IRC | 21:21 | |
| *** tmcpeak has joined #openstack-keystone | 21:21 | |
| *** tmcpeak has left #openstack-keystone | 21:21 | |
| bknudson | also in production mode it would be easier since no need to listen on :5000 and :35357, just listen on subpath. | 21:21 |
| *** edmondsw has quit IRC | 21:22 | |
| *** edmondsw has joined #openstack-keystone | 21:22 | |
| *** edmondsw has quit IRC | 21:22 | |
| *** david-lyle has joined #openstack-keystone | 21:23 | |
| dstanek | fundcor: did you get it working? | 21:24 |
| *** diazjf has joined #openstack-keystone | 21:24 | |
| *** rcrit_ has joined #openstack-keystone | 21:24 | |
| *** sdake has quit IRC | 21:27 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Concrete role assignments for federated users https://review.openstack.org/284943 | 21:28 |
| *** ninag has quit IRC | 21:31 | |
| ayoung | dims, harlowja_at_home morgan http://adam.younglogic.com/2016/03/id-sender-rabbitmq/ | 21:32 |
| *** daemontool_ has quit IRC | 21:34 | |
| *** timcline has joined #openstack-keystone | 21:37 | |
| *** daemontool_ has joined #openstack-keystone | 21:38 | |
| *** timcline_ has joined #openstack-keystone | 21:38 | |
| *** browne has quit IRC | 21:41 | |
| *** timcline has quit IRC | 21:41 | |
| *** jbell8_ has quit IRC | 21:42 | |
| *** pnavarro has quit IRC | 21:43 | |
| *** jbell8 has joined #openstack-keystone | 21:43 | |
| openstackgerrit | Tom Cocozzello proposed openstack/keystone: Run federation tests under Python 3 https://review.openstack.org/294797 | 21:44 |
| *** roxanagh_ has joined #openstack-keystone | 21:45 | |
| *** jbell8 has quit IRC | 21:45 | |
| *** jbell8 has joined #openstack-keystone | 21:45 | |
| openstackgerrit | Tom Cocozzello proposed openstack/keystone: Run federation tests under Python 3 https://review.openstack.org/294797 | 21:47 |
| *** roxanagh_ has quit IRC | 21:49 | |
| knikolla | ayoung, in identity, what keys does group_ref need to have in it? | 21:52 |
| harlowja_at_home | ayoung, neat | 21:54 |
| harlowja_at_home | now we just need to start using this stuff better in openstack | 21:54 |
| harlowja_at_home | especially around RPC :-/ | 21:55 |
| *** doug-fish has quit IRC | 21:55 | |
| *** sdake has joined #openstack-keystone | 21:55 | |
| *** browne has joined #openstack-keystone | 21:57 | |
| *** SDub__ has quit IRC | 21:58 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:59 | |
| *** diazjf has quit IRC | 22:01 | |
| *** slberger has left #openstack-keystone | 22:02 | |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: WIP - ldap3 Identity Driver https://review.openstack.org/296090 | 22:03 |
| *** diazjf has joined #openstack-keystone | 22:04 | |
| *** knikolla has quit IRC | 22:04 | |
| *** spzala has quit IRC | 22:07 | |
| *** spzala has joined #openstack-keystone | 22:08 | |
| *** mylu has joined #openstack-keystone | 22:09 | |
| *** diazjf has quit IRC | 22:11 | |
| *** spzala has quit IRC | 22:12 | |
| *** pumarani__ has quit IRC | 22:14 | |
| *** ametts has quit IRC | 22:14 | |
| *** timcline_ has quit IRC | 22:15 | |
| *** lhcheng_ has joined #openstack-keystone | 22:16 | |
| *** lhcheng_ has quit IRC | 22:19 | |
| *** lhcheng__ has joined #openstack-keystone | 22:19 | |
| *** lhcheng has quit IRC | 22:20 | |
| *** roxanaghe has quit IRC | 22:20 | |
| *** jsavak has quit IRC | 22:27 | |
| *** sdake_ has joined #openstack-keystone | 22:29 | |
| *** sdake has quit IRC | 22:30 | |
| *** pauloe has quit IRC | 22:30 | |
| *** roxanaghe has joined #openstack-keystone | 22:31 | |
| *** daemontool_ has quit IRC | 22:31 | |
| *** rk4n has joined #openstack-keystone | 22:32 | |
| *** pgbridge has joined #openstack-keystone | 22:33 | |
| *** knikolla has joined #openstack-keystone | 22:40 | |
| *** sheel has joined #openstack-keystone | 22:40 | |
| *** tristanC has quit IRC | 22:43 | |
| *** tristanC has joined #openstack-keystone | 22:44 | |
| *** henrynash has quit IRC | 22:44 | |
| *** spzala has joined #openstack-keystone | 22:46 | |
| *** timcline has joined #openstack-keystone | 22:46 | |
| *** csoukup has quit IRC | 22:47 | |
| *** aginwala has quit IRC | 22:49 | |
| *** jbell8 has quit IRC | 22:50 | |
| *** timcline has quit IRC | 22:51 | |
| *** fawadk has quit IRC | 22:53 | |
| ayoung | knikolla, so, usually the group is assigned by twoi entries | 22:53 |
| *** fawadkhaliq has joined #openstack-keystone | 22:53 | |
| ayoung | the user etnry has member-of-groups and the group object also has a collection of members | 22:53 |
| ayoung | knikolla, I think the usual approach is to look from whatever object you have | 22:54 |
| ayoung | most of the Directory servers maintain the two way relationships (I think, I might be lying out my tuchas) so you can read the association from either end. | 22:55 |
| *** fawadkhaliq has quit IRC | 22:55 | |
| knikolla | ayoung, in the latest patchset i did the list_users_in_group | 22:55 |
| *** fawadkhaliq has joined #openstack-keystone | 22:56 | |
| *** aginwala has joined #openstack-keystone | 22:56 | |
| *** browne has quit IRC | 22:56 | |
| knikolla | ayoung, for the other one I wasn't sure as some resource i found said that the memberOf in the user object is not a standard. | 22:56 |
| *** aginwala has quit IRC | 22:58 | |
| knikolla | ayoung, though the question I asked you was for the actual dict that is returned by get_group | 22:58 |
| knikolla | what keys must it have | 22:58 |
| ayoung | knikolla, have you ever had to read code you wrote 4 years ago? | 22:58 |
| ayoung | Now, how about code someone else wrote that you ported? | 22:59 |
| ayoung | I can't remeber from day to day...I'm looking | 22:59 |
| *** sdake_ is now known as sdake | 22:59 | |
| knikolla | ayoung, i know the feel. thanks. | 23:00 |
| *** roxanagh_ has joined #openstack-keystone | 23:00 | |
| ayoung | knikolla, so we starte here? http://git.openstack.org/cgit/openstack/keystone/tree/keystone/identity/backends/ldap.py#n350 | 23:00 |
| ayoung | knikolla, like most things, the only required 'attribute' is the dn | 23:01 |
| ayoung | for the rest, we look for attributes like: | 23:01 |
| morgan | ayoung: then make it python-ldap code and cry | 23:01 |
| ayoung | self.member_attribute, | 23:01 |
| ayoung | morgan, I decided to start drinking scotch instead | 23:02 |
| morgan | heh | 23:02 |
| *** aginwala_ has joined #openstack-keystone | 23:03 | |
| knikolla | morgan, ldap3 has a pretty nice abstraction module | 23:03 |
| ayoung | knikolla, I think that is it: the group needs a name, a dn, an a list of members | 23:03 |
| ayoung | Ugh...did I really write http://git.openstack.org/cgit/openstack/keystone/tree/keystone/identity/backends/ldap.py#n394 | 23:04 |
| morgan | ayoung: maaaaybe | 23:04 |
| *** browne has joined #openstack-keystone | 23:04 | |
| *** jaugustine has quit IRC | 23:04 | |
| ayoung | knikolla, so, that code might not be required. If what I said about 2 way group associations is true, you should be able to get the list of users from group 'members' attribute | 23:04 |
| *** roxanagh_ has quit IRC | 23:05 | |
| morgan | ayoung: the hard part is there are 3 ways to do groups and then the AD way... and referral chasing | 23:05 |
| morgan | ayoung: so, ick :( | 23:05 |
| ayoung | Oh, wait...yeah, that is what it does | 23:05 |
| *** darrenc_ has joined #openstack-keystone | 23:05 | |
| *** aginwala_ has quit IRC | 23:05 | |
| *** darrenc has quit IRC | 23:06 | |
| *** aginwala has joined #openstack-keystone | 23:06 | |
| ayoung | still don;t undertand what a dumb-User_dn is | 23:06 |
| ayoung | if self._is_dumb_member(user_dn): | 23:06 |
| knikolla | ayoung, some edge case probably | 23:06 |
| ayoung | that code is pretty horrible, but it is LDAP that is really horrible | 23:06 |
| *** mylu has quit IRC | 23:06 | |
| morgan | ayoung: it's the difference between a "string" of "users" i think and a real DN | 23:06 |
| morgan | i *think* | 23:06 |
| *** darrenc_ is now known as darrenc | 23:07 | |
| morgan | i think dumb member wont matter in read-only | 23:07 |
| morgan | there is a *lot* of write magic in the current driver | 23:07 |
| ayoung | morgan, well it seems to play in list groups for users | 23:07 |
| *** fawadkhaliq has quit IRC | 23:07 | |
| *** mylu has joined #openstack-keystone | 23:07 | |
| ayoung | morgan, BTW, shadow users. We should record the groups for the shadow users | 23:08 |
| ayoung | not stick them in the fernet token | 23:08 |
| *** fawadkhaliq has joined #openstack-keystone | 23:08 | |
| morgan | which i think dumb member was a write thing that then get piled on for the get | 23:08 |
| *** thiagolib has quit IRC | 23:09 | |
| ayoung | morgan, predates me: http://adam.younglogic.com/2012/02/openstack-keystone-ldap-redux/ looks like I copied that over from Nova | 23:11 |
| ayoung | "use_dumb_member is still honored from the previous incarnation, but has not been tested, nor do I understand the intention of this code." | 23:11 |
| * ayoung cackling | 23:12 | |
| *** BigWillie has joined #openstack-keystone | 23:12 | |
| *** rk4n has quit IRC | 23:13 | |
| *** gordc has quit IRC | 23:14 | |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/config.py#n597 | 23:14 |
| ayoung | morgan, knikolla OK I think I figured it out | 23:14 |
| ayoung | it might be that the group object needs to have at least one member in the list | 23:14 |
| knikolla | ayoung, that explains it. | 23:14 |
| ayoung | if so, add a dumb member | 23:14 |
| knikolla | i'll eventually have to add all these edge cases in some way | 23:15 |
| ayoung | so you can delete everyone and still have a valid group. | 23:15 |
| ayoung | knikolla, make sure the existing LDAP unit tests pass, and yes, you should get them | 23:15 |
| *** BigWillie has quit IRC | 23:16 | |
| knikolla | ayoung, roger. | 23:16 |
| knikolla | ayoung, thanks for the help. | 23:17 |
| ayoung | knikolla, thanks for doing this. please keep notes on the etherpad | 23:21 |
| *** openstack has joined #openstack-keystone | 23:22 | |
| knikolla | ayoung, i think the unit tests from ldap can't be used as is. | 23:22 |
| ayoung | knikolla, probably need some adapting | 23:22 |
| knikolla | they use python-ldap | 23:22 |
| ayoung | but the set of unit tests needs to stay the same | 23:23 |
| ayoung | and what they test | 23:23 |
| *** openstackstatus has joined #openstack-keystone | 23:23 | |
| *** ChanServ sets mode: +v openstackstatus | 23:23 | |
| ayoung | knikolla, rewritint the unit tests first so they use ldap3 would be a good idea. If someone else pops up here and asks to help, I'll point them at that | 23:23 |
| knikolla | ayoung, they use it only for a few driver implementation specific things so it might not even be required. | 23:25 |
| knikolla | ayoung, but this is a good point to add to the etherpad. | 23:26 |
| ayoung | knikolla, ++ | 23:26 |
| *** daemontool_ has joined #openstack-keystone | 23:26 | |
| *** daemontool_ has quit IRC | 23:27 | |
| ayoung | harlowja_at_home, got a response back from the rock gym. Group rate for 8+. need to bring our own lead ropes. | 23:33 |
| *** fawadkhaliq has quit IRC | 23:39 | |
| harlowja_at_home | ayoung, k, hmmm, maybe i'll pack a rope | 23:45 |
| ayoung | harlowja_at_home, we might be able to get away with a 1/2 rope | 23:45 |
| *** harlowja_at_home has quit IRC | 23:45 | |
| ayoung | walls are 30', so a 200' cut in half would reach | 23:46 |
| *** harlowja_at_home has joined #openstack-keystone | 23:46 | |
| ayoung | harlowja_at_home, I had a 1/2 200 for my old gym,but I don't think I can get away with it at my current. However, I plan on packing a full suitcase, so I can toss in a rope. | 23:47 |
| *** aginwala has quit IRC | 23:47 | |
| *** timcline has joined #openstack-keystone | 23:47 | |
| *** fawadkhaliq has joined #openstack-keystone | 23:49 | |
| *** aginwala has joined #openstack-keystone | 23:49 | |
| *** aginwala has quit IRC | 23:50 | |
| *** timcline has quit IRC | 23:51 | |
| *** shoutm has joined #openstack-keystone | 23:56 | |
| *** timcline has joined #openstack-keystone | 23:57 | |
| harlowja_at_home | ayoung, ok let me know | 23:57 |
| harlowja_at_home | i can bring my gym rope | 23:57 |
| harlowja_at_home | 60m i think | 23:57 |
| harlowja_at_home | 9.7mm | 23:58 |
| *** agrebennikov has quit IRC | 23:58 | |
| *** spzala has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!