| *** dan_nguyen has left #openstack-keystone | 00:02 | |
| *** daemontool has quit IRC | 00:06 | |
| *** mylu has quit IRC | 00:06 | |
| *** mylu has joined #openstack-keystone | 00:09 | |
| *** mylu has quit IRC | 00:16 | |
| *** stingaci has quit IRC | 00:20 | |
| *** fangxu has joined #openstack-keystone | 00:24 | |
| *** spandhe has quit IRC | 00:27 | |
| *** amakarov has quit IRC | 00:27 | |
| *** spandhe has joined #openstack-keystone | 00:33 | |
| *** stingaci has joined #openstack-keystone | 00:48 | |
| *** amakarov has joined #openstack-keystone | 00:52 | |
| *** amakarov has quit IRC | 01:00 | |
| *** edtubill has quit IRC | 01:03 | |
| openstackgerrit | Merged openstack/keystone: Correct RST syntax for a code block https://review.openstack.org/311266 | 01:03 |
|---|---|---|
| *** EinstCrazy has joined #openstack-keystone | 01:04 | |
| *** harlowja has joined #openstack-keystone | 01:07 | |
| *** TxGVNN has joined #openstack-keystone | 01:11 | |
| *** ChanServ sets mode: +o stevemar | 01:13 | |
| *** EinstCra_ has joined #openstack-keystone | 01:16 | |
| *** c_soukup has joined #openstack-keystone | 01:16 | |
| *** EinstCrazy has quit IRC | 01:18 | |
| *** c_soukup has quit IRC | 01:21 | |
| *** EinstCrazy has joined #openstack-keystone | 01:24 | |
| *** EinstCra_ has quit IRC | 01:27 | |
| *** dan_nguyen has joined #openstack-keystone | 01:29 | |
| *** jasonsb has joined #openstack-keystone | 01:39 | |
| *** rbridgeman has quit IRC | 01:41 | |
| *** dan_nguyen has quit IRC | 01:42 | |
| *** ebalduf_ has quit IRC | 01:44 | |
| *** lhcheng has quit IRC | 01:49 | |
| *** stingaci has quit IRC | 01:50 | |
| *** roxanaghe has quit IRC | 01:50 | |
| *** markvoelker has joined #openstack-keystone | 01:52 | |
| *** harlowja has quit IRC | 01:53 | |
| *** ianw has quit IRC | 02:00 | |
| *** ianw has joined #openstack-keystone | 02:07 | |
| *** zqfan has joined #openstack-keystone | 02:12 | |
| *** stingaci has joined #openstack-keystone | 02:16 | |
| *** stingaci has quit IRC | 02:29 | |
| *** TxGVNN has quit IRC | 02:32 | |
| *** markvoelker has quit IRC | 02:36 | |
| *** fedruantine has quit IRC | 02:37 | |
| *** roxanaghe has joined #openstack-keystone | 02:42 | |
| *** roxanaghe has quit IRC | 02:42 | |
| *** dan_nguyen has joined #openstack-keystone | 02:46 | |
| *** EinstCrazy has quit IRC | 02:46 | |
| *** lhcheng has joined #openstack-keystone | 02:51 | |
| *** ChanServ sets mode: +v lhcheng | 02:51 | |
| *** fedruantine has joined #openstack-keystone | 02:54 | |
| *** dan_nguyen has quit IRC | 02:56 | |
| *** EinstCrazy has joined #openstack-keystone | 02:58 | |
| *** EinstCrazy has quit IRC | 03:03 | |
| *** TxGVNN has joined #openstack-keystone | 03:07 | |
| *** TxGVNN has quit IRC | 03:14 | |
| *** dan_nguyen has joined #openstack-keystone | 03:18 | |
| *** EinstCrazy has joined #openstack-keystone | 03:21 | |
| *** dan_nguyen has quit IRC | 03:31 | |
| *** richm has quit IRC | 03:32 | |
| *** EinstCrazy has quit IRC | 03:34 | |
| *** roxanaghe has joined #openstack-keystone | 03:43 | |
| *** lhcheng has quit IRC | 03:44 | |
| *** lhcheng has joined #openstack-keystone | 03:45 | |
| *** ChanServ sets mode: +v lhcheng | 03:45 | |
| *** roxanaghe has quit IRC | 03:48 | |
| *** stingaci has joined #openstack-keystone | 03:52 | |
| *** TxGVNN has joined #openstack-keystone | 03:52 | |
| *** sdake has joined #openstack-keystone | 03:53 | |
| *** stingaci has quit IRC | 03:57 | |
| *** stingaci has joined #openstack-keystone | 03:57 | |
| *** spandhe has left #openstack-keystone | 03:57 | |
| *** josecastroleon has quit IRC | 04:07 | |
| *** chlong has joined #openstack-keystone | 04:34 | |
| *** roxanaghe has joined #openstack-keystone | 04:44 | |
| *** edtubill has joined #openstack-keystone | 04:47 | |
| *** roxanaghe has quit IRC | 04:48 | |
| *** EinstCrazy has joined #openstack-keystone | 04:54 | |
| *** EinstCra_ has joined #openstack-keystone | 04:55 | |
| *** fangxu has quit IRC | 04:56 | |
| *** EinstCrazy has quit IRC | 04:59 | |
| *** TxGVNN has quit IRC | 05:04 | |
| *** EinstCra_ has quit IRC | 05:11 | |
| *** EinstCrazy has joined #openstack-keystone | 05:11 | |
| *** EinstCrazy has quit IRC | 05:17 | |
| *** EinstCrazy has joined #openstack-keystone | 05:17 | |
| *** EinstCra_ has joined #openstack-keystone | 05:20 | |
| *** EinstCrazy has quit IRC | 05:23 | |
| *** EinstCrazy has joined #openstack-keystone | 05:30 | |
| *** EinstCrazy has quit IRC | 05:32 | |
| *** EinstCrazy has joined #openstack-keystone | 05:32 | |
| *** EinstCra_ has quit IRC | 05:33 | |
| *** EinstCrazy has quit IRC | 05:36 | |
| *** EinstCrazy has joined #openstack-keystone | 05:36 | |
| *** EinstCrazy has quit IRC | 05:54 | |
| *** EinstCrazy has joined #openstack-keystone | 05:54 | |
| *** fedruantine has quit IRC | 05:56 | |
| *** roxanaghe has joined #openstack-keystone | 06:00 | |
| *** edtubill has quit IRC | 06:02 | |
| *** edtubill has joined #openstack-keystone | 06:03 | |
| *** roxanaghe has quit IRC | 06:04 | |
| *** edtubill has quit IRC | 06:07 | |
| *** edtubill has joined #openstack-keystone | 06:18 | |
| *** e0ne has joined #openstack-keystone | 06:19 | |
| *** EinstCrazy has quit IRC | 06:19 | |
| *** fangxu has joined #openstack-keystone | 06:20 | |
| *** stingaci has quit IRC | 06:21 | |
| *** EinstCrazy has joined #openstack-keystone | 06:21 | |
| *** edtubill has quit IRC | 06:24 | |
| *** edtubill has joined #openstack-keystone | 06:26 | |
| *** EinstCrazy has quit IRC | 06:26 | |
| *** EinstCrazy has joined #openstack-keystone | 06:26 | |
| *** edtubill has quit IRC | 06:29 | |
| *** fedruantine has joined #openstack-keystone | 06:32 | |
| *** EinstCrazy has quit IRC | 06:34 | |
| *** fangxu_ has joined #openstack-keystone | 06:41 | |
| *** fangxu has quit IRC | 06:41 | |
| *** fangxu_ is now known as fangxu | 06:41 | |
| *** EinstCrazy has joined #openstack-keystone | 06:43 | |
| *** EinstCra_ has joined #openstack-keystone | 06:50 | |
| *** EinstCrazy has quit IRC | 06:53 | |
| *** sdake has quit IRC | 06:56 | |
| *** EinstCra_ has quit IRC | 07:02 | |
| *** EinstCrazy has joined #openstack-keystone | 07:03 | |
| *** jasonsb has quit IRC | 07:05 | |
| *** EinstCrazy has quit IRC | 07:08 | |
| *** yolanda has joined #openstack-keystone | 07:16 | |
| *** e0ne has quit IRC | 07:23 | |
| openstackgerrit | yolanda.robla proposed openstack/keystoneauth: Use betamax hooks to mask fixture results https://review.openstack.org/311133 | 07:25 |
| *** fangxu has quit IRC | 07:34 | |
| *** jasonsb has joined #openstack-keystone | 07:35 | |
| *** jasonsb has quit IRC | 07:40 | |
| *** lhcheng has quit IRC | 07:47 | |
| *** lhcheng has joined #openstack-keystone | 07:49 | |
| *** ChanServ sets mode: +v lhcheng | 07:49 | |
| *** EinstCrazy has joined #openstack-keystone | 07:49 | |
| *** EinstCra_ has joined #openstack-keystone | 07:50 | |
| *** lhcheng has quit IRC | 07:54 | |
| *** EinstCrazy has quit IRC | 07:54 | |
| *** EinstCra_ has quit IRC | 07:55 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** EinstCrazy has joined #openstack-keystone | 08:16 | |
| *** EinstCrazy has quit IRC | 08:21 | |
| *** yolanda has quit IRC | 08:28 | |
| *** EinstCrazy has joined #openstack-keystone | 08:39 | |
| *** EinstCrazy has quit IRC | 08:43 | |
| *** yolanda has joined #openstack-keystone | 09:02 | |
| *** EinstCrazy has joined #openstack-keystone | 09:18 | |
| *** EinstCrazy has quit IRC | 09:23 | |
| *** EinstCrazy has joined #openstack-keystone | 09:23 | |
| *** EinstCrazy has quit IRC | 09:23 | |
| *** EinstCrazy has joined #openstack-keystone | 09:24 | |
| *** EinstCrazy has quit IRC | 09:28 | |
| *** roxanaghe has joined #openstack-keystone | 09:36 | |
| *** roxanaghe has quit IRC | 09:41 | |
| *** TxGVNN has joined #openstack-keystone | 09:41 | |
| *** TxGVNN has quit IRC | 10:11 | |
| *** EinstCrazy has joined #openstack-keystone | 10:24 | |
| *** EinstCrazy has quit IRC | 10:30 | |
| *** stingaci has joined #openstack-keystone | 10:36 | |
| *** daemontool has joined #openstack-keystone | 11:07 | |
| *** gus has quit IRC | 11:09 | |
| *** daemontool has quit IRC | 11:14 | |
| *** daemontool has joined #openstack-keystone | 11:16 | |
| *** gus has joined #openstack-keystone | 11:22 | |
| *** yolanda has quit IRC | 11:24 | |
| *** daemontool has quit IRC | 11:27 | |
| *** daemontool has joined #openstack-keystone | 11:36 | |
| *** daemontool has quit IRC | 11:37 | |
| *** yolanda has joined #openstack-keystone | 11:53 | |
| *** bebech_ has joined #openstack-keystone | 12:01 | |
| *** samueldmq has quit IRC | 12:06 | |
| *** bebech has quit IRC | 12:06 | |
| *** jasonsb has joined #openstack-keystone | 12:07 | |
| *** jasonsb has quit IRC | 12:12 | |
| *** samueldmq has joined #openstack-keystone | 12:13 | |
| *** wxy has quit IRC | 12:20 | |
| *** stingaci has quit IRC | 12:22 | |
| *** henrynash has joined #openstack-keystone | 12:41 | |
| *** ChanServ sets mode: +v henrynash | 12:41 | |
| *** e0ne has joined #openstack-keystone | 12:51 | |
| *** EinstCrazy has joined #openstack-keystone | 12:51 | |
| *** EinstCrazy has quit IRC | 12:56 | |
| *** EinstCrazy has joined #openstack-keystone | 12:56 | |
| *** roxanaghe has joined #openstack-keystone | 13:12 | |
| *** EinstCrazy has quit IRC | 13:16 | |
| *** EinstCrazy has joined #openstack-keystone | 13:16 | |
| *** roxanaghe has quit IRC | 13:17 | |
| *** fedruantine has quit IRC | 13:18 | |
| *** EinstCrazy has quit IRC | 13:20 | |
| *** markvoelker has joined #openstack-keystone | 13:23 | |
| *** TxGVNN has joined #openstack-keystone | 13:24 | |
| *** marg7175 has joined #openstack-keystone | 13:31 | |
| *** henrynash has quit IRC | 13:54 | |
| *** spandhe has joined #openstack-keystone | 14:04 | |
| *** tellesnobrega_af is now known as tellesnobrega | 14:08 | |
| *** EinstCrazy has joined #openstack-keystone | 14:08 | |
| *** dave-mccowan has joined #openstack-keystone | 14:11 | |
| *** dave-mcc_ has joined #openstack-keystone | 14:12 | |
| *** fedruantine has joined #openstack-keystone | 14:12 | |
| *** dave-mccowan has quit IRC | 14:15 | |
| *** TxGVNN has quit IRC | 14:21 | |
| *** EinstCrazy has quit IRC | 14:21 | |
| *** mylu has joined #openstack-keystone | 14:24 | |
| *** spandhe has left #openstack-keystone | 14:24 | |
| *** mylu has quit IRC | 14:24 | |
| *** sdake has joined #openstack-keystone | 14:39 | |
| *** sdake_ has joined #openstack-keystone | 14:40 | |
| *** sdake has quit IRC | 14:43 | |
| *** mylu has joined #openstack-keystone | 14:47 | |
| *** e0ne has quit IRC | 14:48 | |
| *** henrynash has joined #openstack-keystone | 14:51 | |
| *** ChanServ sets mode: +v henrynash | 14:51 | |
| *** yolanda has quit IRC | 14:52 | |
| *** dave-mccowan has joined #openstack-keystone | 14:52 | |
| *** dave-mcc_ has quit IRC | 14:52 | |
| *** marg7175 has quit IRC | 14:53 | |
| *** dave-mccowan has quit IRC | 15:02 | |
| *** jasonsb has joined #openstack-keystone | 15:09 | |
| *** roxanaghe has joined #openstack-keystone | 15:14 | |
| *** jasonsb has quit IRC | 15:14 | |
| *** yolanda has joined #openstack-keystone | 15:16 | |
| *** roxanaghe has quit IRC | 15:18 | |
| *** markvoelker has quit IRC | 15:23 | |
| *** sdake_ is now known as sdake | 15:32 | |
| *** tonytan4ever has joined #openstack-keystone | 15:47 | |
| *** tonytan4ever has quit IRC | 15:50 | |
| *** mylu has quit IRC | 15:50 | |
| *** harlowja has joined #openstack-keystone | 15:52 | |
| *** harlowja has quit IRC | 15:52 | |
| *** yolanda has quit IRC | 15:55 | |
| *** mylu has joined #openstack-keystone | 15:58 | |
| *** mylu has quit IRC | 16:00 | |
| *** mylu has joined #openstack-keystone | 16:03 | |
| *** yolanda has joined #openstack-keystone | 16:04 | |
| *** fedruantine has quit IRC | 16:12 | |
| *** henrynash has quit IRC | 16:14 | |
| *** sdake has quit IRC | 16:16 | |
| *** mylu has quit IRC | 16:17 | |
| *** sdake has joined #openstack-keystone | 16:21 | |
| *** markvoelker has joined #openstack-keystone | 16:24 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add identity providers integration tests https://review.openstack.org/302299 | 16:24 |
| *** chlong has quit IRC | 16:28 | |
| *** markvoelker has quit IRC | 16:29 | |
| *** chlong has joined #openstack-keystone | 16:29 | |
| *** mylu has joined #openstack-keystone | 16:37 | |
| *** roxanaghe has joined #openstack-keystone | 16:37 | |
| *** mylu has quit IRC | 16:40 | |
| *** harlowja has joined #openstack-keystone | 16:41 | |
| *** mylu has joined #openstack-keystone | 16:41 | |
| *** dan_nguyen has joined #openstack-keystone | 16:42 | |
| *** mylu has quit IRC | 16:45 | |
| *** henrynash has joined #openstack-keystone | 16:48 | |
| *** ChanServ sets mode: +v henrynash | 16:48 | |
| *** mylu has joined #openstack-keystone | 16:49 | |
| *** sdake has quit IRC | 16:49 | |
| *** mylu has quit IRC | 16:52 | |
| *** mylu has joined #openstack-keystone | 16:53 | |
| *** harlowja has quit IRC | 16:57 | |
| *** fedruantine has joined #openstack-keystone | 16:58 | |
| *** mylu has quit IRC | 17:20 | |
| *** roxanaghe has quit IRC | 17:24 | |
| *** markvoelker has joined #openstack-keystone | 17:25 | |
| *** chlong has quit IRC | 17:25 | |
| *** mylu has joined #openstack-keystone | 17:25 | |
| *** markvoelker has quit IRC | 17:31 | |
| *** david-lyle has joined #openstack-keystone | 17:38 | |
| *** david-lyle has quit IRC | 17:51 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth: Updated from global requirements https://review.openstack.org/311536 | 18:04 |
| *** sdake has joined #openstack-keystone | 18:08 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/311548 | 18:08 |
| *** hoonetorg has joined #openstack-keystone | 18:15 | |
| hoonetorg | hi | 18:18 |
| hoonetorg | is for keystone backend "uuid" the pki_setup (and therefore certificates) required??? | 18:19 |
| hoonetorg | i have an easy installation for learning purposes and want a simple way of installing keystone | 18:21 |
| hoonetorg | which doesn't produce problems like outdated certs over | 18:21 |
| hoonetorg | time | 18:21 |
| lbragstad | hoonetorg by uuid backend I assume you're referencing the UUID token provider (CONF.token.provider = uuid) | 18:21 |
| hoonetorg | lbragstad: yep | 18:22 |
| lbragstad | hoonetorg the UUID token provider doesn't require any certificates and it works out of the box with keystone | 18:22 |
| lbragstad | hoonetorg the PKI and PKIZ token providers require some additional setup prior to use, which is where the pki_setup command comes in | 18:22 |
| lbragstad | hoonetorg so you don't need to run those if you're going to be using the UUID token provider | 18:23 |
| lbragstad | s/run those/run the keystone-manage pki_setup command/ | 18:23 |
| hoonetorg | i've seen howto's where uuid token was used and people still did keystone-manage pki_setup | 18:24 |
| lbragstad | hoonetorg oh - really? | 18:24 |
| lbragstad | hoonetorg do you have links to the how-tos? are they owned by openstack documentation/ | 18:24 |
| hoonetorg | maybe i'll find a link, wait | 18:24 |
| *** markvoelker has joined #openstack-keystone | 18:27 | |
| hoonetorg | lbragstad: afair it was not official doc | 18:31 |
| hoonetorg | i think it was a howto from a university course, but i could not find it | 18:31 |
| *** markvoelker has quit IRC | 18:32 | |
| hoonetorg | is using token.provider=uuid and token.driver=mysql and revoke.driver=mysql still valid nowadays | 18:35 |
| hoonetorg | (mitaka, newton and following releases) | 18:35 |
| hoonetorg | i only know about a problem with db containing lots of tokens which is prevented by a cronjob doing /usr/bin/keystone-manage token_flush | 18:36 |
| *** mylu has quit IRC | 18:38 | |
| hoonetorg | what is the advantage of using memcached as token driver | 18:39 |
| hoonetorg | or fernet as token provider | 18:39 |
| hoonetorg | in short terms | 18:39 |
| *** mylu has joined #openstack-keystone | 18:46 | |
| *** sdake has quit IRC | 18:46 | |
| *** fedruantine has quit IRC | 19:01 | |
| *** mylu has quit IRC | 19:02 | |
| *** jasonsb has joined #openstack-keystone | 19:12 | |
| *** jasonsb has quit IRC | 19:17 | |
| *** mylu has joined #openstack-keystone | 19:25 | |
| *** markvoelker has joined #openstack-keystone | 19:28 | |
| *** mylu has quit IRC | 19:29 | |
| *** yolanda has quit IRC | 19:29 | |
| *** tellesnobrega is now known as tellesnobrega_af | 19:31 | |
| *** markvoelker has quit IRC | 19:32 | |
| *** mylu has joined #openstack-keystone | 19:46 | |
| *** tellesnobrega_af is now known as tellesnobrega | 20:02 | |
| hoonetorg | lbragstad: still around? | 20:04 |
| hoonetorg | http://dolphm.com/openstack-keystone-fernet-tokens/ mentioned you regarding fernet token rotation in a cluster | 20:05 |
| *** darosale has joined #openstack-keystone | 20:05 | |
| hoonetorg | i'm in the process of deploying openstack in a pacemaker cluster | 20:05 |
| *** darosale has quit IRC | 20:05 | |
| *** mylu has quit IRC | 20:05 | |
| hoonetorg | Lance Bragstad illustrates our rotation solution which avoids this pitfall entirely by introducing a three phase key rotation strategy | 20:06 |
| hoonetorg | lbragstad: but the link to this explanation is broken http://lbragstad.com/?p=133 | 20:06 |
| hoonetorg | does the page still exist??? | 20:07 |
| *** fedruantine has joined #openstack-keystone | 20:10 | |
| *** mylu has joined #openstack-keystone | 20:10 | |
| hoonetorg | lbragstad: what I don't understand is if i run three keystone instances (haproxy) with fernet keys, if i need to do something to keep them in sync or to prevent race conditions | 20:18 |
| hoonetorg | or dolphm: any information on fernet keys in cluster ^^^ | 20:23 |
| hoonetorg | ??? | 20:23 |
| *** markvoelker has joined #openstack-keystone | 20:28 | |
| *** tellesnobrega is now known as tellesnobrega_af | 20:30 | |
| *** markvoelker has quit IRC | 20:33 | |
| *** mylu has quit IRC | 20:36 | |
| *** mylu has joined #openstack-keystone | 20:38 | |
| *** henrynash has quit IRC | 20:43 | |
| *** mylu has quit IRC | 20:44 | |
| *** mylu has joined #openstack-keystone | 20:46 | |
| *** dave-mccowan has joined #openstack-keystone | 20:49 | |
| *** dave-mccowan has quit IRC | 20:50 | |
| *** sdake has joined #openstack-keystone | 21:00 | |
| *** sdake_ has joined #openstack-keystone | 21:02 | |
| *** sdake has quit IRC | 21:06 | |
| *** markvoelker has joined #openstack-keystone | 21:29 | |
| *** markvoelker has quit IRC | 21:34 | |
| *** stingaci has joined #openstack-keystone | 21:58 | |
| *** dave-mccowan has joined #openstack-keystone | 21:58 | |
| *** fedruantine has quit IRC | 21:59 | |
| *** dan_nguyen has quit IRC | 22:13 | |
| *** stingaci has quit IRC | 22:17 | |
| *** stingaci has joined #openstack-keystone | 22:18 | |
| *** markvoelker has joined #openstack-keystone | 22:30 | |
| *** markvoelker has quit IRC | 22:35 | |
| *** mylu has quit IRC | 22:38 | |
| *** sdake_ has quit IRC | 22:40 | |
| *** mylu has joined #openstack-keystone | 22:40 | |
| *** dave-mccowan has quit IRC | 22:48 | |
| *** fedruantine has joined #openstack-keystone | 23:05 | |
| *** e0ne has joined #openstack-keystone | 23:13 | |
| *** e0ne has quit IRC | 23:21 | |
| *** stingaci has quit IRC | 23:25 | |
| *** stingaci has joined #openstack-keystone | 23:25 | |
| *** stingaci has quit IRC | 23:30 | |
| *** dan_nguyen has joined #openstack-keystone | 23:30 | |
| *** markvoelker has joined #openstack-keystone | 23:31 | |
| *** markvoelker has quit IRC | 23:36 | |
| *** dan_nguyen has quit IRC | 23:45 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!