| *** openstack has joined #openstack-keystone | 00:02 | |
| *** sdake has quit IRC | 00:06 | |
| *** sdake has joined #openstack-keystone | 00:09 | |
| *** zzzeek has quit IRC | 00:10 | |
| notmorgan | jamielennox: thnx | 00:10 |
|---|---|---|
| *** zzzeek has joined #openstack-keystone | 00:14 | |
| *** harlowja has joined #openstack-keystone | 00:19 | |
| *** rderose has quit IRC | 00:21 | |
| *** ddieterly has joined #openstack-keystone | 00:27 | |
| *** sdake_ has joined #openstack-keystone | 00:28 | |
| *** sdake has quit IRC | 00:30 | |
| *** roxanaghe has quit IRC | 00:32 | |
| *** chlong has quit IRC | 00:46 | |
| *** openstackstatus has quit IRC | 00:46 | |
| *** sdake_ has quit IRC | 00:50 | |
| *** openstack has joined #openstack-keystone | 00:53 | |
| *** akscram has joined #openstack-keystone | 01:05 | |
| *** tonytan4ever has joined #openstack-keystone | 01:11 | |
| *** ddieterly is now known as ddieterly[away] | 01:11 | |
| *** ddieterly[away] is now known as ddieterly | 01:12 | |
| *** hockeynut has quit IRC | 01:21 | |
| *** hockeynut has joined #openstack-keystone | 01:21 | |
| *** EinstCrazy has joined #openstack-keystone | 01:24 | |
| *** agrebennikov has quit IRC | 01:24 | |
| *** sdake has quit IRC | 01:25 | |
| *** georgem1 has joined #openstack-keystone | 01:30 | |
| *** georgem1 has quit IRC | 01:31 | |
| *** georgem1 has joined #openstack-keystone | 01:33 | |
| *** ddieterly has quit IRC | 01:33 | |
| *** georgem1 has joined #openstack-keystone | 01:33 | |
| *** roxanaghe has joined #openstack-keystone | 01:33 | |
| *** cheran has quit IRC | 01:35 | |
| *** sheel has joined #openstack-keystone | 01:35 | |
| *** roxanaghe has quit IRC | 01:38 | |
| *** rderose has joined #openstack-keystone | 01:44 | |
| *** ddieterly has joined #openstack-keystone | 01:47 | |
| *** openstackgerrit has quit IRC | 01:49 | |
| *** ddieterly is now known as ddieterly[away] | 01:51 | |
| *** openstackgerrit has joined #openstack-keystone | 01:51 | |
| *** ddieterly[away] is now known as ddieterly | 01:51 | |
| *** lhcheng has joined #openstack-keystone | 01:51 | |
| *** ChanServ sets mode: +v lhcheng | 01:51 | |
| *** tonytan4ever has quit IRC | 01:55 | |
| *** openstackgerrit has quit IRC | 01:56 | |
| *** openstackgerrit has joined #openstack-keystone | 01:57 | |
| *** lhcheng has quit IRC | 01:59 | |
| *** chlong has joined #openstack-keystone | 01:59 | |
| *** zqfan has joined #openstack-keystone | 02:03 | |
| *** lhcheng has joined #openstack-keystone | 02:05 | |
| *** ChanServ sets mode: +v lhcheng | 02:05 | |
| *** ddieterly has quit IRC | 02:15 | |
| *** richm has quit IRC | 02:17 | |
| *** lhcheng has quit IRC | 02:18 | |
| *** sdake has joined #openstack-keystone | 02:19 | |
| openstackgerrit | ayoung proposed openstack/keystone: [WIP]Make fernet default token provider https://review.openstack.org/258650 | 02:19 |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties https://review.openstack.org/296246 | 02:32 |
| *** raddaoui has quit IRC | 02:37 | |
| *** openstack has joined #openstack-keystone | 02:38 | |
| *** TxGVNN has joined #openstack-keystone | 02:39 | |
| *** openstackstatus has joined #openstack-keystone | 02:39 | |
| *** ChanServ sets mode: +v openstackstatus | 02:39 | |
| *** rderose has quit IRC | 02:39 | |
| *** lhcheng has joined #openstack-keystone | 02:46 | |
| *** ChanServ sets mode: +v lhcheng | 02:46 | |
| *** ddieterly has joined #openstack-keystone | 02:57 | |
| *** sdake_ has joined #openstack-keystone | 03:00 | |
| *** sdake has quit IRC | 03:02 | |
| *** TxGVNN has quit IRC | 03:05 | |
| *** sdake_ is now known as sdake | 03:05 | |
| *** georgem1 has quit IRC | 03:06 | |
| *** julim has joined #openstack-keystone | 03:24 | |
| *** ddieterly is now known as ddieterly[away] | 03:25 | |
| *** ddieterly[away] is now known as ddieterly | 03:25 | |
| *** ddieterly is now known as ddieterly[away] | 03:25 | |
| *** julim has quit IRC | 03:30 | |
| *** links has joined #openstack-keystone | 03:34 | |
| *** roxanaghe has joined #openstack-keystone | 03:34 | |
| *** roxanaghe has quit IRC | 03:39 | |
| *** rderose has joined #openstack-keystone | 03:39 | |
| *** fawadkhaliq has joined #openstack-keystone | 03:42 | |
| *** mhu has quit IRC | 03:45 | |
| *** BrAsS_mOnKeY has quit IRC | 03:45 | |
| *** BrAsS_mOnKeY has joined #openstack-keystone | 03:47 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Remove unused iso8601 requirement https://review.openstack.org/320914 | 03:47 |
| *** mhu has joined #openstack-keystone | 03:47 | |
| *** fawadkhaliq has quit IRC | 03:56 | |
| *** furface has quit IRC | 03:57 | |
| *** furface has joined #openstack-keystone | 04:00 | |
| *** iurygregory has joined #openstack-keystone | 04:05 | |
| *** jamielennox is now known as jamielennox|away | 04:08 | |
| *** chlong has quit IRC | 04:15 | |
| *** jamielennox|away is now known as jamielennox | 04:22 | |
| *** ddieterly[away] has quit IRC | 04:25 | |
| *** chlong has joined #openstack-keystone | 04:34 | |
| *** roxanaghe has joined #openstack-keystone | 04:47 | |
| *** fawadkhaliq has joined #openstack-keystone | 04:57 | |
| *** flwang1 has quit IRC | 05:01 | |
| *** jaosorior has joined #openstack-keystone | 05:05 | |
| *** iurygregory has quit IRC | 05:13 | |
| *** dave-mccowan has quit IRC | 05:13 | |
| *** GB21 has joined #openstack-keystone | 05:15 | |
| *** rderose has quit IRC | 05:19 | |
| *** GB21 has quit IRC | 05:21 | |
| *** yolanda_ has quit IRC | 05:23 | |
| *** lhcheng has quit IRC | 05:24 | |
| *** roxanaghe has quit IRC | 05:28 | |
| *** jamielennox is now known as jamielennox|away | 05:33 | |
| *** furface_ has joined #openstack-keystone | 05:40 | |
| *** furface has quit IRC | 05:42 | |
| *** GB21 has joined #openstack-keystone | 05:47 | |
| *** chlong has quit IRC | 05:47 | |
| *** jamielennox|away is now known as jamielennox | 05:50 | |
| *** yolanda_ has joined #openstack-keystone | 05:52 | |
| *** roxanaghe has joined #openstack-keystone | 05:53 | |
| *** roxanaghe has quit IRC | 05:53 | |
| *** roxanaghe has joined #openstack-keystone | 05:53 | |
| *** sdake has quit IRC | 05:54 | |
| *** belmoreira has joined #openstack-keystone | 05:54 | |
| *** rcernin has joined #openstack-keystone | 05:54 | |
| *** furface_ has quit IRC | 05:58 | |
| *** chlong has joined #openstack-keystone | 05:59 | |
| *** sdake has joined #openstack-keystone | 05:59 | |
| *** roxanaghe has quit IRC | 06:01 | |
| *** GB21 has quit IRC | 06:05 | |
| *** gyee has quit IRC | 06:07 | |
| *** woodster_ has quit IRC | 06:08 | |
| jamielennox | oh wtf - we don't have a unique constraint on the service table for service_type, nor for service_type+name because name is in the extras field | 06:11 |
| jamielennox | extras needs to die painfully and horribly | 06:12 |
| jamielennox | lol but for various reasons i now have 100 services in a testing instance with service_type=compute name=nova because the script is wrong | 06:13 |
| *** GB21 has joined #openstack-keystone | 06:19 | |
| *** yolanda_ has quit IRC | 06:29 | |
| *** sdake has quit IRC | 06:30 | |
| *** yolanda has joined #openstack-keystone | 06:31 | |
| *** furface_ has joined #openstack-keystone | 06:37 | |
| *** mvk has quit IRC | 06:50 | |
| *** openstack has joined #openstack-keystone | 06:53 | |
| *** sdake has joined #openstack-keystone | 06:54 | |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware: Make sure audit can handle API requests which does not require a token https://review.openstack.org/320725 | 07:03 |
| *** sdake has quit IRC | 07:13 | |
| *** markvoelker has quit IRC | 07:13 | |
| *** sdake has joined #openstack-keystone | 07:16 | |
| *** mvk has joined #openstack-keystone | 07:20 | |
| *** jed56 has joined #openstack-keystone | 07:20 | |
| *** sdake has quit IRC | 07:21 | |
| breton_ | wow, revocation tree was killed | 07:34 |
| *** sdake has joined #openstack-keystone | 07:44 | |
| *** sdake has quit IRC | 07:49 | |
| *** lhcheng has joined #openstack-keystone | 07:50 | |
| *** ChanServ sets mode: +v lhcheng | 07:50 | |
| *** sdake has joined #openstack-keystone | 07:50 | |
| *** lhcheng has quit IRC | 07:55 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:01 | |
| *** chlong has quit IRC | 08:04 | |
| *** aloga has quit IRC | 08:06 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 08:10 |
| *** afazekas is now known as afazekas|sick | 08:12 | |
| *** tqtran has joined #openstack-keystone | 08:17 | |
| *** henrynash has joined #openstack-keystone | 08:19 | |
| *** ChanServ sets mode: +v henrynash | 08:19 | |
| *** dmk0202 has joined #openstack-keystone | 08:23 | |
| *** pnavarro has joined #openstack-keystone | 08:23 | |
| *** mvk has quit IRC | 08:25 | |
| *** mvk has joined #openstack-keystone | 08:25 | |
| *** pnavarro has quit IRC | 08:27 | |
| *** pnavarro has joined #openstack-keystone | 08:27 | |
| *** tqtran has quit IRC | 08:28 | |
| *** aloga has joined #openstack-keystone | 08:41 | |
| *** jaosorior is now known as jaosorior_lunch | 08:45 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Create V9 driver for identity backend https://review.openstack.org/305315 | 08:46 |
| *** daemontool has joined #openstack-keystone | 08:58 | |
| *** tesseract has joined #openstack-keystone | 09:02 | |
| *** GB21 has quit IRC | 09:06 | |
| *** GB21 has joined #openstack-keystone | 09:09 | |
| *** markvoelker has joined #openstack-keystone | 09:14 | |
| *** flwang1 has joined #openstack-keystone | 09:16 | |
| *** rbridgeman_ has quit IRC | 09:16 | |
| *** rbridgeman_ has joined #openstack-keystone | 09:17 | |
| *** pnavarro has quit IRC | 09:18 | |
| *** pnavarro has joined #openstack-keystone | 09:19 | |
| *** BlackDex has quit IRC | 09:20 | |
| *** markvoelker has quit IRC | 09:21 | |
| *** BlackDex has joined #openstack-keystone | 09:21 | |
| *** mou has joined #openstack-keystone | 09:22 | |
| *** pnavarro has quit IRC | 09:22 | |
| *** GB21 has quit IRC | 09:26 | |
| *** GB21 has joined #openstack-keystone | 09:32 | |
| *** jaosorior_lunch is now known as jaosorior | 09:35 | |
| *** pnavarro has joined #openstack-keystone | 09:39 | |
| *** fawadkhaliq has quit IRC | 09:57 | |
| *** fawadkhaliq has joined #openstack-keystone | 09:58 | |
| *** rk4n has joined #openstack-keystone | 10:10 | |
| *** aurelien__ has joined #openstack-keystone | 10:11 | |
| *** GB21 has quit IRC | 10:21 | |
| *** code-R has joined #openstack-keystone | 10:43 | |
| *** GB21 has joined #openstack-keystone | 10:43 | |
| *** rk4n has quit IRC | 10:45 | |
| *** rk4n has joined #openstack-keystone | 10:57 | |
| *** yolanda has quit IRC | 10:57 | |
| *** yolanda has joined #openstack-keystone | 11:04 | |
| *** robcresswell has joined #openstack-keystone | 11:07 | |
| robcresswell | Hey folks, could I possibly get some eyes on https://bugs.launchpad.net/horizon/+bug/1585682 ? Something is mucked up with the Horizon / Keystone interaction in devstack right now, but its a bit beyond my keystone knowledge. | 11:08 |
| openstack | Launchpad bug 1585682 in OpenStack Identity (keystone) "Horizon gating on dsvm-integration job is broken due to recent changes in devstack/keystone" [Undecided,Incomplete] | 11:08 |
| robcresswell | Horizon gate is blocked until this is resolved :) | 11:08 |
| *** links has quit IRC | 11:08 | |
| *** EinstCrazy has quit IRC | 11:16 | |
| *** markvoelker has joined #openstack-keystone | 11:16 | |
| *** raildo-afk is now known as raildo | 11:20 | |
| *** markvoelker has quit IRC | 11:21 | |
| yolanda | hi, notmorgan, or other keystone cores, can i ask for a new release cut of keystoneauth? so i can start using the updated betamax fixture | 11:30 |
| *** TxGVNN has joined #openstack-keystone | 11:32 | |
| *** julim has joined #openstack-keystone | 11:32 | |
| *** jaosorior has quit IRC | 12:00 | |
| *** jaosorior has joined #openstack-keystone | 12:00 | |
| *** julim has quit IRC | 12:03 | |
| *** afred312_ has quit IRC | 12:03 | |
| *** gordc has joined #openstack-keystone | 12:05 | |
| *** markvoelker has joined #openstack-keystone | 12:08 | |
| *** ddieterly has joined #openstack-keystone | 12:13 | |
| *** lupine has quit IRC | 12:18 | |
| *** lupine has joined #openstack-keystone | 12:20 | |
| *** lupine has quit IRC | 12:21 | |
| *** lupine has joined #openstack-keystone | 12:21 | |
| *** GB21 has quit IRC | 12:22 | |
| *** ddieterly is now known as ddieterly[away] | 12:23 | |
| *** afred312 has joined #openstack-keystone | 12:34 | |
| *** rodrigods has quit IRC | 12:34 | |
| *** rodrigods has joined #openstack-keystone | 12:34 | |
| *** dave-mccowan has joined #openstack-keystone | 12:39 | |
| *** ddieterly[away] is now known as ddieterly | 12:42 | |
| *** code-R has quit IRC | 12:48 | |
| *** julim has joined #openstack-keystone | 12:49 | |
| *** georgem1 has joined #openstack-keystone | 12:49 | |
| *** richm has joined #openstack-keystone | 12:55 | |
| openstackgerrit | Mikhail Nikolaenko proposed openstack/keystone: Added app for policy enforcement https://review.openstack.org/317529 | 12:58 |
| *** afred312 has quit IRC | 13:01 | |
| *** ddieterly has quit IRC | 13:01 | |
| samueldmq | robcresswell: hi | 13:15 |
| samueldmq | bknudson: path urls are just an alternative to specifying the ports, right? | 13:16 |
| robcresswell | samueldmq: Hi | 13:16 |
| bknudson | samueldmq: the keystone server accepts on both the path and the port | 13:16 |
| samueldmq | bknudson: so that http://ip-address/identity/v3 is somethign valid | 13:17 |
| *** spzala has joined #openstack-keystone | 13:17 | |
| bknudson | samueldmq: Here's the httpd config file: http://git.openstack.org/cgit/openstack-dev/devstack/tree/files/apache-keystone.template | 13:17 |
| samueldmq | robcresswell: I was looking at the bug comments ... reverting 312238 you were able to make it work ? | 13:17 |
| bknudson | It listens on both port and on /idenity and /identity_v2_admin | 13:17 |
| robcresswell | samueldmq: Yes, tested with the revert and without multiple times and it functions on revert. | 13:18 |
| robcresswell | Would be good to avoid that though. | 13:18 |
| robcresswell | May well be some old/invalid logic on our side. | 13:18 |
| samueldmq | robcresswell: you reverted the devstack patch or keystone one ? | 13:19 |
| samueldmq | or both ? | 13:19 |
| robcresswell | the devstack patch | 13:19 |
| robcresswell | https://review.openstack.org/#/c/193894/ | 13:20 |
| patchbot | robcresswell: patch 193894 - openstack-dev/devstack - Use path-mounted keystone when running in httpd (MERGED) | 13:20 |
| robcresswell | Hey, thats a handy bot. | 13:20 |
| *** edmondsw has joined #openstack-keystone | 13:20 | |
| bknudson | the only diff with 193894 is that the service catalog has /identity and /identity_v2_admin rather than :5000 / :35357 | 13:21 |
| samueldmq | robcresswell: is anything else failing ? or just that specific endpoint ? | 13:22 |
| samueldmq | bknudson: yes, that's what I can see too; can't understand how that may have broken somehting | 13:23 |
| bknudson | applications make lots of assumptions about what the url is going to look like | 13:23 |
| bknudson | I had to make fixes in tempest in order to get this in to begin with | 13:23 |
| robcresswell | Right, which is why it may be to do with stale config in Horizon | 13:24 |
| robcresswell | So the expected url is <HOST>/identity/v3 ? | 13:24 |
| samueldmq | bknudson: robcresswell ++ yes, that is likely the cause of failures | 13:24 |
| samueldmq | amd why I asked if other API calls were also failing | 13:25 |
| samueldmq | robcresswell: that's correct afaict | 13:25 |
| samueldmq | robcresswell: could you check on the URL being used? | 13:25 |
| bknudson | robcresswell: keystone will accept http://<host>/identity/v3 or http://<host>:5000/v3 or http://<host>:35357/identity/v3 | 13:25 |
| bknudson | they'll all work | 13:25 |
| bknudson | http://<host>/identity/v3 is preferred | 13:25 |
| bknudson | we'd like to get to https | 13:26 |
| samueldmq | in the bug, tsufiev is saying the URL used by horizon is 'http://<hostip>/identity/users/<userid>/projects' | 13:26 |
| samueldmq | however it should be 'http://<hostip>/identity/v3/users/<userid>/projects ' | 13:26 |
| bknudson | i'm hoping to drop the :5000 and :35357 in devstack | 13:26 |
| samueldmq | there is a '/v3' missing there | 13:26 |
| samueldmq | robcresswell: ^ | 13:26 |
| robcresswell | Yep, we're missing the v3 part of the URL | 13:27 |
| samueldmq | exactly | 13:27 |
| samueldmq | hence the 404 | 13:27 |
| bknudson | not too long back the /v2.0 was removed from the service catalog entry in devstack | 13:27 |
| *** georgem1 has left #openstack-keystone | 13:27 | |
| samueldmq | bknudson: in favor on unversioned url? | 13:28 |
| bknudson | yes, so the service catalog had http://<host>:5000/ rather than http://<host>:5000/v2.0 | 13:29 |
| samueldmq | however horizon OPENSTACK_KEYSTONE_URL config receives the URI + /v3 https://review.openstack.org/#/c/312238/3/lib/horizon | 13:30 |
| patchbot | samueldmq: patch 312238 - openstack-dev/devstack - Reference keystone URIs rather than building URI (MERGED) | 13:30 |
| samueldmq | bknudson: that may be related somehow... because it would endup with somehting without /v3 if it just appended /users/<userid>/projects | 13:32 |
| samueldmq | I think robcresswell will be able to find it out in horizon code :) | 13:32 |
| bknudson | y, they always stuck v3 on OPENSTACK_KEYSTONE_URL | 13:32 |
| bknudson | apparently horizon doesn't use this config option because it's got /v3 on it and they're seeing url without /v3. | 13:33 |
| *** code-R has joined #openstack-keystone | 13:34 | |
| *** henrynash has quit IRC | 13:34 | |
| * samueldmq nods | 13:35 | |
| robcresswell | I think there's enough in the discussion that points toward horizon being silly. | 13:35 |
| * robcresswell is still going to blame keystone for all his woes | 13:35 | |
| *** pauloewerton has joined #openstack-keystone | 13:36 | |
| bknudson | we should have done this right from the beginning and not used ports | 13:36 |
| bknudson | horizon never used a port | 13:36 |
| *** EinstCrazy has joined #openstack-keystone | 13:39 | |
| *** EinstCrazy has quit IRC | 13:39 | |
| *** EinstCrazy has joined #openstack-keystone | 13:39 | |
| *** code-R_ has joined #openstack-keystone | 13:41 | |
| *** dave-mccowan has quit IRC | 13:42 | |
| *** code-R has quit IRC | 13:45 | |
| *** TxGVNN has quit IRC | 13:45 | |
| *** ddieterly has joined #openstack-keystone | 13:49 | |
| *** ngupta has joined #openstack-keystone | 13:52 | |
| openstackgerrit | Matthew Edmonds proposed openstack/keystone: Honor ldap_filter on filtered user list https://review.openstack.org/312126 | 13:52 |
| *** ametts has joined #openstack-keystone | 13:52 | |
| edmondsw | notmorgan, fixed the merge conflict there... since you caused it, maybe you'll review :) | 13:54 |
| edmondsw | (the conflict, not the bug) | 13:55 |
| *** darosale has joined #openstack-keystone | 14:02 | |
| *** afred312 has joined #openstack-keystone | 14:02 | |
| *** ngupta_ has joined #openstack-keystone | 14:03 | |
| *** ngupta has quit IRC | 14:06 | |
| *** afred312_ has joined #openstack-keystone | 14:08 | |
| knikolla | o/ | 14:08 |
| *** afred312 has quit IRC | 14:09 | |
| *** rderose has joined #openstack-keystone | 14:13 | |
| *** afred312_ has quit IRC | 14:15 | |
| *** afred312 has joined #openstack-keystone | 14:16 | |
| *** pushkaru has joined #openstack-keystone | 14:19 | |
| *** code-R_ has quit IRC | 14:20 | |
| *** lupine has quit IRC | 14:21 | |
| *** raddaoui has joined #openstack-keystone | 14:21 | |
| *** spzala has quit IRC | 14:25 | |
| *** afred312 has quit IRC | 14:26 | |
| *** afred312 has joined #openstack-keystone | 14:26 | |
| *** belmoreira has quit IRC | 14:30 | |
| *** iurygregory has joined #openstack-keystone | 14:32 | |
| *** code-R has joined #openstack-keystone | 14:34 | |
| ayoung | bknudson, stevemar, dolphm, any of you use python3.4 next-review? | 14:37 |
| bknudson | it's been a while since I used next-review. I star reviews that I'm interested in so find them that way. | 14:38 |
| bknudson | or I look for reviews that already have a +2 | 14:38 |
| bknudson | If I ran out of that I'd probably just go to the oldest review in the watch list. | 14:39 |
| bknudson | https://review.openstack.org/#/q/status:open+is:watched+label:Code-Review%253D2+label:Code-Review%253D0%252Cself+branch:master+-owner:self+label:Verified%253D1+-label:Workflow%253D-1+-label:Code-Review%253D-2,n,z | 14:40 |
| bknudson | https://review.openstack.org/#/q/status:open+is:starred+label:Verified%253D1+-label:Workflow%253D-1+-label:Code-Review%253D2%252Cself,n,z | 14:40 |
| bknudson | I'd like to have a tool that included bug severity in the review priority | 14:41 |
| ayoung | bknudson, ++ | 14:43 |
| *** afred312 has quit IRC | 14:43 | |
| *** afred312 has joined #openstack-keystone | 14:44 | |
| ayoung | bknudson, I star reviews, too, but I'm more interested in catching up with the things thrown at me that I am not expecting | 14:44 |
| ayoung | having saved searches probably makes sense | 14:44 |
| ayoung | gate-keystone-dsvm-functional-nvFAILURE in 20m 04s (non-voting) | 14:48 |
| ayoung | gate-keystone-dsvm-functional-v3-only-nvFAILURE in 32m 45s (non-voting) | 14:48 |
| ayoung | gate-tempest-dsvm-keystone-uwsgi-full-nvFAILURE in 1h 07m 53s (non-voting) | 14:48 |
| ayoung | either the persons interested in those need to fix them, or I am recommending we yank them. We can't leave tests broken so long that we start ignoring the red | 14:49 |
| *** timcline has joined #openstack-keystone | 14:52 | |
| *** gagehugo has joined #openstack-keystone | 14:53 | |
| *** spzala has joined #openstack-keystone | 14:54 | |
| *** spzala_ has joined #openstack-keystone | 14:56 | |
| *** phalmos has joined #openstack-keystone | 14:58 | |
| *** spzala has quit IRC | 14:59 | |
| *** ddieterly is now known as ddieterly[away] | 15:00 | |
| tsufiev | bknudson, samueldmq: gentlemen, I don't think current horizon/keystone/devstack problems stem from the wrong OPENSTACK_KEYSTONE_URL handling | 15:01 |
| *** tonytan4ever has joined #openstack-keystone | 15:01 | |
| tsufiev | so I've fixed the code inside django_openstack_auth and now it works for either AUTH_URL = http://<devstack_ip>:5000 or http://<devstack_ip>/identity | 15:02 |
| tsufiev | the list of projects is filled properly, the new error is http://paste2.org/IeffPHNf | 15:02 |
| tsufiev | it has something to do with project / domain tokens | 15:03 |
| * tsufiev haven't figured out what's happening there | 15:03 | |
| *** dmk0202 has quit IRC | 15:04 | |
| tsufiev | also, am I correct that the bright moment described at https://github.com/openstack/horizon/blob/master/openstack_dashboard/api/keystone.py#L119 has come? | 15:04 |
| tsufiev | so lines 121-122 can be deleted safely | 15:05 |
| tsufiev | right? | 15:05 |
| *** code-R has quit IRC | 15:06 | |
| notmorgan | @all https://github.com/linsomniac/python-memcached/issues/95 possibly taking over maintenance of python-memcached | 15:08 |
| notmorgan | zzzeek, ayoung, dstanek, zigo: ^ cc | 15:08 |
| notmorgan | edmondsw: i can always review conflicts :P | 15:08 |
| notmorgan | edmondsw: hehe | 15:08 |
| edmondsw | hehe... already got +W now :) | 15:08 |
| notmorgan | edmondsw: hehe | 15:08 |
| *** raildo is now known as raildo-afk | 15:08 | |
| notmorgan | tsufiev: nice job chasing that down. | 15:09 |
| zigo | notmorgan: Good stuff, as the current maintainer has been really laggy in all of his replies and actions. | 15:09 |
| tsufiev | notmorgan, I cannot say that the chase is over :) | 15:10 |
| notmorgan | zigo: contributing to that discussion (be nice he's been super busy and is willing to discuss this with a decision made post pycon) doesn't hurt our case. | 15:10 |
| tsufiev | although the new error is not as serious as previous one, something is still wrong there :/ | 15:10 |
| *** code-R has joined #openstack-keystone | 15:10 | |
| notmorgan | zigo: or you can just lurk and watch | 15:10 |
| *** ddieterly[away] is now known as ddieterly | 15:10 | |
| bknudson | tsufiev: we have no control over whether deployments will have versions in the service catalog or not | 15:10 |
| notmorgan | zigo: but just thought i'd let ya know cause we def. talked about this | 15:11 |
| notmorgan | bknudson: ++, not until the TNG catalog | 15:11 |
| notmorgan | bknudson: and i think we'll standardize there, but that wont solve this issue | 15:11 |
| tsufiev | bknudson, okay, so these 2 lines are red herring regarding this bug | 15:11 |
| notmorgan | sine we will will need to support both things | 15:11 |
| *** ngupta_ has quit IRC | 15:11 | |
| tsufiev | perhaps http://paste2.org/IeffPHNf rings some bells? | 15:12 |
| notmorgan | tsufiev: we would like to delete those lines, but not yet. | 15:12 |
| ayoung | notmorgan, ++ | 15:12 |
| *** rbridgeman_ has quit IRC | 15:13 | |
| notmorgan | tsufiev: ... what is that error?? | 15:13 |
| notmorgan | tsufiev: i... i haven't ever seen that before | 15:13 |
| *** rbridgeman_ has joined #openstack-keystone | 15:13 | |
| tsufiev | notmorgan, the problem now is that although user's personal project list is not empty, the list that he sees when at Identity->Projects panel _is_ empty | 15:14 |
| notmorgan | "Pure project admin doesn't have a domain token" | 15:14 |
| notmorgan | that seems like a terrible error message | 15:14 |
| notmorgan | ... that is borderline useless. | 15:14 |
| tsufiev | it clearly didn't came from horizon/django_openstack_auth | 15:15 |
| notmorgan | tsufiev: it did | 15:15 |
| notmorgan | :P | 15:15 |
| notmorgan | erm | 15:15 |
| ayoung | No project admin is completely pure | 15:15 |
| notmorgan | no from horizon | 15:15 |
| *** sheel has quit IRC | 15:15 | |
| notmorgan | ahhh | 15:15 |
| notmorgan | http://git.openstack.org/cgit/openstack/horizon/tree/openstack_dashboard/api/keystone.py#n222 | 15:15 |
| tsufiev | oops | 15:16 |
| notmorgan | ok, this is an issue where the user can't lookup the domain. | 15:16 |
| notmorgan | this seems to boil down to policy | 15:16 |
| notmorgan | and/or assuming a domain_list is a sane thing to do | 15:16 |
| notmorgan | ayoung: ^ | 15:16 |
| tsufiev | sorry, I forgot to disable case-sensitive search over sources | 15:16 |
| *** afred312_ has joined #openstack-keystone | 15:16 | |
| ayoung | notmorgan, Domains. | 15:17 |
| ayoung | Horizon | 15:17 |
| notmorgan | ayoung: and an issue with domain_listing in horizon | 15:17 |
| ayoung | yep | 15:17 |
| ayoung | Maye it was a type | 15:17 |
| ayoung | maybe it should read | 15:17 |
| *** jaugustine has joined #openstack-keystone | 15:18 | |
| ayoung | Poor project admin doesn't have a domain token. Nya nya nya nya nya nya! | 15:18 |
| notmorgan | that is def. a bug but i'm not sure (too early in the morning pre-coffee) what thzt is intending | 15:18 |
| *** afred312 has quit IRC | 15:18 | |
| *** rcernin has quit IRC | 15:19 | |
| notmorgan | ayoung: https://github.com/openstack/horizon/commit/2b846515f388278e2bf8d0198a4f821309e08e69 | 15:19 |
| notmorgan | horizon using domain scoped token. | 15:20 |
| notmorgan | i didn't know that was a thing. | 15:20 |
| ayoung | notmorgan, yep. Makes me sad. Domain tokens...domains existing separate from IdPs...it makes me sad. | 15:20 |
| *** rk4n has quit IRC | 15:20 | |
| ayoung | It was happening for al ong while | 15:20 |
| *** rk4n has joined #openstack-keystone | 15:21 | |
| ayoung | That moment when instaaod Ctrl W you hit Ctlr Q | 15:21 |
| *** phalmos has quit IRC | 15:21 | |
| *** rk4n has quit IRC | 15:23 | |
| *** rk4n has joined #openstack-keystone | 15:23 | |
| tsufiev | should I expect http://<devstack_ip>/identity/domains to return something meaningful, given a valid token is provided? | 15:23 |
| * tsufiev is trying to understand if it's a wrong url for getting domains list, or just an authentication/permission failure | 15:24 | |
| *** rk4n has quit IRC | 15:24 | |
| tsufiev | aha! | 15:25 |
| notmorgan | tsufiev: looks ilke an authz issue | 15:26 |
| notmorgan | jamielennox: i'm good with https://bitbucket.org/zzzeek/dogpile.cache/pull-requests/50/nulllockacquire-should-accept-wait/diff but would like a test so we dont duplicate that again.. fwiw | 15:27 |
| tsufiev | it's hitting http://<ip>/identity/domains or http://<ip>/v3/domains (depends if I remove those 2 lines0 | 15:27 |
| *** TxGVNN has joined #openstack-keystone | 15:27 | |
| tsufiev | but actually it should hit http://<ip>/identity/v3/domains | 15:27 |
| tsufiev | the same issue as before, but now in a different place | 15:27 |
| *** ngupta has joined #openstack-keystone | 15:28 | |
| notmorgan | jamielennox: also, new gerrit for dogpile | 15:28 |
| gsilvis | I'm hitting https://bugs.launchpad.net/python-openstackclient/+bug/1418810 in stable/mitaka devstack---should it have been fixed there? | 15:28 |
| openstack | Launchpad bug 1418810 in python-openstackclient "auth with os-token fails with unexpected keyword argument 'user_domain_id'" [High,Fix released] - Assigned to Igor Bolotin (ibolotin) | 15:28 |
| gsilvis | hmm, I played around with the accrc file, and now it works. Kind of odd that it doesn't work by default, though... | 15:31 |
| *** EinstCrazy has quit IRC | 15:32 | |
| notmorgan | ayoung: [openstack-dev] [keystone] integrating keystone with oauth2 (keycloak) -- nokia asking about something you might know things about on theML | 15:32 |
| ayoung | notmorgan, looking | 15:33 |
| notmorgan | gsilvis: i think that was fixed. do you have the latest mitaka? | 15:33 |
| notmorgan | gsilvis: (not a stale checkout of keystone) | 15:33 |
| tsufiev | robcresswell, I fixed it! | 15:33 |
| notmorgan | tsufiev: aha woo | 15:34 |
| *** tesseract has quit IRC | 15:34 | |
| gsilvis | notmorgan: I installed this devstack two days ago | 15:34 |
| *** ngupta_ has joined #openstack-keystone | 15:34 | |
| ayoung | notmorgan, same kind of question we were looking at before: oauth2 versus openidc. But Keycloak with SAML works. I just confirmed it working this week. | 15:34 |
| *** ngupta has quit IRC | 15:35 | |
| *** pnavarro has quit IRC | 15:35 | |
| *** pushkaru has quit IRC | 15:36 | |
| notmorgan | ayoung: right. | 15:37 |
| *** pushkaru has joined #openstack-keystone | 15:37 | |
| gsilvis | notmorgan: I'm one commit behind in keystone, but it doesn't look related to this bug | 15:37 |
| notmorgan | ayoung: i figured you have a quick answer for them, that i don't | 15:37 |
| notmorgan | :) | 15:37 |
| notmorgan | gsilvis: hmmm. | 15:37 |
| notmorgan | gsilvis: ooh wait, openstackclient | 15:37 |
| notmorgan | gsilvis: derp. uh, that i don't know how that works across releases/backports | 15:38 |
| notmorgan | gsilvis: you might need to get a newer version of OSC | 15:38 |
| gsilvis | hm, okay. for whatever it's worth, the /nova/ client is failing with a different error | 15:38 |
| ayoung | notmorgan, right now, jdennis has a package up for review that does the registration for SAML2 to Keycloak. We would need something comparable for OpenIDC. I don't know how important that is. | 15:38 |
| gsilvis | (but changing the accrc fixes that too) | 15:38 |
| *** henrynash has joined #openstack-keystone | 15:39 | |
| *** ChanServ sets mode: +v henrynash | 15:39 | |
| notmorgan | gsilvis: yep, you need a new OSC | 15:39 |
| notmorgan | gsilvis: does not look like it's backported to stable (does OSC have a "stable" branch?) | 15:39 |
| gsilvis | notmorgan: (don't know the answer to that question) | 15:40 |
| gsilvis | notmorgan: Who should I tell about this? | 15:40 |
| dtroyer_zz | notmorgan: 'stable' exists, we don't use it in reality | 15:41 |
| ayoung | notmorgan, https://review.openstack.org/#/c/297342/9/manifests/wsgi/apache.pp do we have sanity values for threads/processes to run Keystone in Apache? They are looking at $::processorcount, with a max of 32 | 15:41 |
| patchbot | ayoung: patch 297342 - puppet-keystone - Tune number of apache processes/threads for Keysto... | 15:41 |
| *** agrebennikov has joined #openstack-keystone | 15:41 | |
| notmorgan | gsilvis: ^ dtroyer_zz is the person to help you out there :) | 15:42 |
| gsilvis | dtroyer_zz: hi :) | 15:42 |
| gsilvis | dtroyer_zz: it sounds like this is fixed, but devstack isn't installing a version with the fix | 15:43 |
| notmorgan | ayoung: my puppet skills are... minimal. there are people in the community far better at this than I am. I can look to see if it seems to make sense, but... | 15:43 |
| notmorgan | ayoung: i am def. not a puppet expert. | 15:43 |
| ayoung | Nah not Puppet question | 15:43 |
| ayoung | notmorgan, it is an Apache question | 15:43 |
| notmorgan | ah | 15:43 |
| ayoung | puppet just needs to set reasonable defaults for number of workers | 15:43 |
| dtroyer_zz | gsilvis: we're releaseing 2.5.0 any minute now, if that's where the fix is it'll be in devstack soon | 15:43 |
| notmorgan | so, uhm. i dont like hard cap limits | 15:43 |
| notmorgan | not really a win imo | 15:44 |
| gsilvis | dtroyer_zz: okay, cool | 15:44 |
| notmorgan | it's fine to set sane defaults, but if someone wants to shoot themselves in the foot, or has a system that benefits from > 32 processes... let them | 15:44 |
| ayoung | notmorgan, right, but an autoconfig limit of, say 8 makes sense, and then let them crank it up explicitly if needed | 15:44 |
| gsilvis | dtroyer_zz: I'll try this again in a day or two, and ping you if it still doesn't work | 15:44 |
| dtroyer_zz | gsilvis: ok | 15:45 |
| *** ngupta__ has joined #openstack-keystone | 15:48 | |
| *** code-R has quit IRC | 15:48 | |
| *** code-R has joined #openstack-keystone | 15:48 | |
| notmorgan | ayoung: yes. | 15:49 |
| *** ngupta_ has quit IRC | 15:50 | |
| *** tonytan4ever has quit IRC | 15:54 | |
| *** itlinux has quit IRC | 15:54 | |
| *** roxanaghe has joined #openstack-keystone | 15:55 | |
| *** mvk has quit IRC | 15:58 | |
| *** ddieterly is now known as ddieterly[away] | 15:59 | |
| *** itlinux has joined #openstack-keystone | 16:00 | |
| *** ddieterly[away] is now known as ddieterly | 16:00 | |
| ayoung | I keep getting ImportError: No module named testresources | 16:01 |
| ayoung | when running tox. py27 and py34 | 16:01 |
| *** rk4n has joined #openstack-keystone | 16:01 | |
| *** itlinux has quit IRC | 16:02 | |
| jaosorior | ayoung: tried tox -r ? | 16:03 |
| ayoung | jaosorior, yep. Just rebuilt it | 16:03 |
| jaosorior | :/ | 16:04 |
| ayoung | jaosorior, is that supposed to come in as a dependency? | 16:04 |
| *** sheel has joined #openstack-keystone | 16:04 | |
| jaosorior | no clue dude, just noticed that I hadn't cloned the latest keystone in a bit. gonna try again | 16:05 |
| ayoung | jaosorior, I even added it to test-requirments and still see this | 16:06 |
| jaosorior | trying again | 16:06 |
| ayoung | testresources==2.0.0 is in the venv | 16:08 |
| jaosorior | ayoung: funky, worked for me dude | 16:09 |
| ayoung | what did I do ...? | 16:09 |
| jaosorior | O_O | 16:09 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow LDAP and custom driver users https://review.openstack.org/305487 | 16:10 |
| *** gyee has joined #openstack-keystone | 16:11 | |
| *** ChanServ sets mode: +v gyee | 16:11 | |
| *** jaosorior has quit IRC | 16:11 | |
| *** afred312_ has quit IRC | 16:12 | |
| *** henrynash has quit IRC | 16:13 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow LDAP and custom driver users https://review.openstack.org/305487 | 16:14 |
| *** ngupta__ has quit IRC | 16:16 | |
| *** ngupta__ has joined #openstack-keystone | 16:16 | |
| *** mou has quit IRC | 16:17 | |
| *** ngupta__ has quit IRC | 16:21 | |
| gyee | dims, there? | 16:25 |
| dims | gyee : pong | 16:26 |
| gyee | dims, a oslo_config question | 16:26 |
| gyee | dims, so I can do this, CONF.some_group.some_attr = 'foo' | 16:27 |
| gyee | but I can't access it via CONF['some_group']['some_attr'] | 16:27 |
| gyee | looking at the code, ConfigOpts.__getattr__ and ConfigOpts.__getitem__ is essentially doing the same thing | 16:28 |
| gyee | what I am doing wrong? | 16:28 |
| gyee | s/I am/am I/ | 16:28 |
| dims | gyee : don't remember using that pattern | 16:29 |
| *** dave-mccowan has joined #openstack-keystone | 16:29 | |
| dims | does CONF.some_group['some_attr'] work? (also sanity check if CONF.some_group.some_attr still works too) | 16:29 |
| gyee | but getattr(getattr(CONF, 'some_group'), 'some_attr') works as well | 16:30 |
| *** ddieterly is now known as ddieterly[away] | 16:30 | |
| *** ddieterly[away] is now known as ddieterly | 16:31 | |
| dims | beats me... dhellmann or rbradfor may be able to help | 16:31 |
| *** lhcheng has joined #openstack-keystone | 16:31 | |
| *** ChanServ sets mode: +v lhcheng | 16:31 | |
| gyee | dims, CONF['some_group'].some_attr seem to work as well | 16:33 |
| gyee | so something is going on with the way it handles GroupAttr | 16:33 |
| gyee | anyway, time for a concentrated dose of pdb :-) | 16:35 |
| *** code-R has quit IRC | 16:37 | |
| dims | haha | 16:37 |
| *** ddieterly is now known as ddieterly[away] | 16:38 | |
| *** aurelien__ has quit IRC | 16:41 | |
| *** pushkaru has quit IRC | 16:43 | |
| *** pushkaru has joined #openstack-keystone | 16:43 | |
| *** markvoelker has quit IRC | 16:48 | |
| *** spzala_ has quit IRC | 16:49 | |
| *** markvoelker has joined #openstack-keystone | 16:49 | |
| *** spzala has joined #openstack-keystone | 16:50 | |
| *** browne has joined #openstack-keystone | 16:51 | |
| *** spzala has quit IRC | 16:55 | |
| *** amrith is now known as _amrith_ | 16:58 | |
| *** _amrith_ is now known as amrith | 16:59 | |
| *** diazjf has joined #openstack-keystone | 17:01 | |
| *** lhcheng has quit IRC | 17:02 | |
| *** lhcheng has joined #openstack-keystone | 17:03 | |
| *** ChanServ sets mode: +v lhcheng | 17:03 | |
| *** julim_ has joined #openstack-keystone | 17:03 | |
| *** lhcheng has quit IRC | 17:04 | |
| *** lhcheng has joined #openstack-keystone | 17:04 | |
| *** ChanServ sets mode: +v lhcheng | 17:04 | |
| *** ddieterly[away] is now known as ddieterly | 17:05 | |
| *** gyee has quit IRC | 17:06 | |
| *** fawadkhaliq has quit IRC | 17:07 | |
| *** julim has quit IRC | 17:07 | |
| *** afred312 has joined #openstack-keystone | 17:11 | |
| *** amakarov has quit IRC | 17:12 | |
| *** spzala has joined #openstack-keystone | 17:13 | |
| *** iurygregory has quit IRC | 17:13 | |
| *** code-R has joined #openstack-keystone | 17:14 | |
| *** spzala has quit IRC | 17:17 | |
| openstackgerrit | Merged openstack/keystone: Enhance federation group mapping validation https://review.openstack.org/313504 | 17:21 |
| *** spzala has joined #openstack-keystone | 17:24 | |
| *** tqtran has joined #openstack-keystone | 17:27 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:27 | |
| openstackgerrit | Merged openstack/keystone: Install necessary files in etc/ https://review.openstack.org/320880 | 17:27 |
| openstackgerrit | Merged openstack/keystone: Honor ldap_filter on filtered user list https://review.openstack.org/312126 | 17:28 |
| *** spzala has quit IRC | 17:29 | |
| notmorgan | zzzeek: FYI, there were some reasons, openstack-ci has stopped leaving jenkins available publically: https://groups.google.com/forum/#!msg/jenkinsci-advisories/lJfvDs5s6bk/4dRqSc4pHgAJ just noticed your jenkins was available | 17:30 |
| *** code-R has quit IRC | 17:30 | |
| *** sc68cal has joined #openstack-keystone | 17:30 | |
| *** spzala has joined #openstack-keystone | 17:30 | |
| notmorgan | zzzeek: not sure if this is sometrhing you are worried about or not :) | 17:30 |
| *** code-R has joined #openstack-keystone | 17:31 | |
| *** cheran has joined #openstack-keystone | 17:31 | |
| notmorgan | zzzeek: i haven't looked too closely at the issue(s), so it may not affect your setup. | 17:31 |
| *** diazjf1 has joined #openstack-keystone | 17:32 | |
| *** sc68cal has left #openstack-keystone | 17:33 | |
| *** diazjf has quit IRC | 17:33 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Deprecate shadow users backend driver https://review.openstack.org/321774 | 17:34 |
| *** spzala has quit IRC | 17:34 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Deprecate shadow users backend driver https://review.openstack.org/321774 | 17:35 |
| *** spzala has joined #openstack-keystone | 17:36 | |
| *** ddieterly is now known as ddieterly[away] | 17:37 | |
| *** ksavich has joined #openstack-keystone | 17:39 | |
| *** phalmos has joined #openstack-keystone | 17:40 | |
| *** spzala has quit IRC | 17:41 | |
| *** ksavich has quit IRC | 17:41 | |
| *** vgridnev has joined #openstack-keystone | 17:44 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/321781 | 17:45 |
| *** david-lyle has quit IRC | 17:47 | |
| *** david-lyle has joined #openstack-keystone | 17:47 | |
| *** spzala has joined #openstack-keystone | 17:48 | |
| *** code-R has quit IRC | 17:50 | |
| *** code-R has joined #openstack-keystone | 17:50 | |
| *** edtubill has joined #openstack-keystone | 17:51 | |
| *** TxGVNN has quit IRC | 17:51 | |
| *** dave-mccowan has quit IRC | 17:52 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/321781 | 17:52 |
| *** pushkaru has quit IRC | 17:53 | |
| *** spzala has quit IRC | 17:53 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/321781 | 17:55 |
| *** spzala has joined #openstack-keystone | 17:56 | |
| *** spzala has quit IRC | 18:04 | |
| *** spzala has joined #openstack-keystone | 18:07 | |
| *** tqtran has quit IRC | 18:07 | |
| *** code-R_ has joined #openstack-keystone | 18:09 | |
| *** spzala has quit IRC | 18:11 | |
| *** rk4n_ has joined #openstack-keystone | 18:12 | |
| *** code-R has quit IRC | 18:12 | |
| *** rk4n has quit IRC | 18:14 | |
| *** jaugustine has quit IRC | 18:26 | |
| *** rbridgeman_ has quit IRC | 18:31 | |
| *** spzala has joined #openstack-keystone | 18:31 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Concrete role assignments for federated users https://review.openstack.org/284943 | 18:33 |
| *** dave-mccowan has joined #openstack-keystone | 18:35 | |
| *** gyee has joined #openstack-keystone | 18:36 | |
| *** ChanServ sets mode: +v gyee | 18:36 | |
| *** code-R_ has quit IRC | 18:37 | |
| *** ddieterly[away] has quit IRC | 18:38 | |
| *** mvk has joined #openstack-keystone | 18:40 | |
| *** itlinux has joined #openstack-keystone | 18:44 | |
| openstackgerrit | Kevin Esensoy proposed openstack/python-keystoneclient: OS_INTERFACE ignored when determining endpoint_type https://review.openstack.org/321809 | 18:44 |
| *** KevinE has joined #openstack-keystone | 18:45 | |
| *** gagehugo has quit IRC | 18:45 | |
| *** rk4n has joined #openstack-keystone | 18:46 | |
| *** henrynash has joined #openstack-keystone | 18:47 | |
| *** ChanServ sets mode: +v henrynash | 18:47 | |
| *** rk4n_ has quit IRC | 18:49 | |
| *** ddieterly has joined #openstack-keystone | 18:50 | |
| *** daemontool has quit IRC | 18:51 | |
| *** rk4n has quit IRC | 18:53 | |
| *** rbridgeman has joined #openstack-keystone | 18:53 | |
| *** rbridgeman_ has joined #openstack-keystone | 18:54 | |
| edmondsw | my first cherry pick, so I hope I did this right: https://review.openstack.org/#/c/321812/ | 18:57 |
| patchbot | edmondsw: patch 321812 - keystone (stable/mitaka) - Honor ldap_filter on filtered user list | 18:57 |
| *** rbridgeman__ has joined #openstack-keystone | 18:57 | |
| *** rbridgeman has quit IRC | 18:58 | |
| bknudson | edmondsw: the commit message is missing the "cherry-picked from" line | 18:59 |
| edmondsw | I thought I added that... are you looking at patchset 1 or 2? | 18:59 |
| bknudson | edmondsw: I was looking at patch set 1. | 19:00 |
| edmondsw | I thought it would add that automatically, but it didn't, so I edited | 19:00 |
| *** rbridgeman_ has quit IRC | 19:01 | |
| bknudson | it will be added automatically in some cases. Maybe if there's a conflict it's not added automatically? | 19:01 |
| bknudson | how did you do the cherry-pick? | 19:01 |
| bknudson | git review or git cherry-pick? | 19:01 |
| bknudson | it's either -x or -X depending on the method | 19:01 |
| edmondsw | I did: git checkout stable/mitaka; git cherry-pick <id>; git commit --amend (to see what it had); git-review | 19:01 |
| bknudson | git cherry-pick requires -x option | 19:02 |
| bknudson | "When recording the commit, append a line that says "(cherry picked from commit ...)" to the original commit message" | 19:02 |
| edmondsw | bknudson k, so I'll use that next time... tx | 19:03 |
| openstackgerrit | Colleen Murphy proposed openstack/keystoneauth: (WIP) Make the kerberos plugin loadable https://review.openstack.org/321814 | 19:03 |
| *** vgridnev has quit IRC | 19:05 | |
| *** code-R has joined #openstack-keystone | 19:07 | |
| *** code-R_ has joined #openstack-keystone | 19:08 | |
| *** mvk_ has joined #openstack-keystone | 19:10 | |
| *** vgridnev has joined #openstack-keystone | 19:10 | |
| *** code-R has quit IRC | 19:11 | |
| *** mkrcmari__ has joined #openstack-keystone | 19:12 | |
| *** mvk has quit IRC | 19:13 | |
| *** itlinux has quit IRC | 19:15 | |
| *** mvk_ has quit IRC | 19:15 | |
| *** fawadkhaliq has quit IRC | 19:16 | |
| *** zzzeek has quit IRC | 19:31 | |
| *** darosale has quit IRC | 19:32 | |
| *** zzzeek has joined #openstack-keystone | 19:39 | |
| *** darosale has joined #openstack-keystone | 19:42 | |
| *** code-R_ has quit IRC | 19:43 | |
| *** haplo37_ has joined #openstack-keystone | 19:52 | |
| *** sdake_ has joined #openstack-keystone | 19:58 | |
| *** sdake has quit IRC | 20:00 | |
| *** pushkaru has joined #openstack-keystone | 20:00 | |
| *** ayoung has quit IRC | 20:07 | |
| *** itlinux has joined #openstack-keystone | 20:10 | |
| *** pauloewerton has quit IRC | 20:10 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow LDAP and custom driver users https://review.openstack.org/305487 | 20:11 |
| *** vgridnev has quit IRC | 20:11 | |
| *** flwang1 has quit IRC | 20:15 | |
| *** slberger has joined #openstack-keystone | 20:20 | |
| *** ddieterly is now known as ddieterly[away] | 20:22 | |
| *** rk4n has joined #openstack-keystone | 20:33 | |
| *** julim_ has quit IRC | 20:33 | |
| *** sheel has quit IRC | 20:35 | |
| openstackgerrit | Merged openstack/keystoneauth: Updated from global requirements https://review.openstack.org/321683 | 20:38 |
| openstackgerrit | Colleen Murphy proposed openstack/keystoneauth: (WIP) Make the kerberos plugin loadable https://review.openstack.org/321814 | 20:39 |
| *** woodster_ has joined #openstack-keystone | 20:40 | |
| *** ddieterly[away] is now known as ddieterly | 20:50 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS Change password requirements https://review.openstack.org/320156 | 20:52 |
| openstackgerrit | werner mendizabal proposed openstack/keystone: Support encryption of credentials in Keystone https://review.openstack.org/317169 | 20:53 |
| *** ddieterly is now known as ddieterly[away] | 20:57 | |
| *** ddieterly[away] is now known as ddieterly | 20:57 | |
| *** josdotso has joined #openstack-keystone | 20:59 | |
| josdotso | QQ: Using v3oidcpassword in python-openstack, and given multiple groups (via "group_ids" in mapping), how would someone specify which group (and thus project/role?) to invoke for a session? | 21:04 |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/321684 | 21:06 |
| *** pushkaru has quit IRC | 21:09 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/321682 | 21:10 |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: WIP - Devstack plugin for Federation https://review.openstack.org/320623 | 21:13 |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: WIP - Devstack plugin for Federation https://review.openstack.org/320623 | 21:18 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS Change password requirements https://review.openstack.org/320156 | 21:18 |
| openstackgerrit | Colleen Murphy proposed openstack/keystoneauth: Make the kerberos plugin loadable https://review.openstack.org/321814 | 21:19 |
| *** itlinux has quit IRC | 21:20 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS Change password requirements https://review.openstack.org/320156 | 21:22 |
| *** iurygregory has joined #openstack-keystone | 21:23 | |
| *** edtubill has quit IRC | 21:24 | |
| *** itlinux has joined #openstack-keystone | 21:26 | |
| *** pushkaru has joined #openstack-keystone | 21:28 | |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: WIP - Devstack plugin for Federation https://review.openstack.org/320623 | 21:30 |
| *** edtubill has joined #openstack-keystone | 21:32 | |
| *** jrist has quit IRC | 21:32 | |
| *** ddieterly is now known as ddieterly[away] | 21:34 | |
| *** edtubill has quit IRC | 21:37 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - PCI-DSS Change password requirements https://review.openstack.org/320156 | 21:38 |
| *** haplo37_ has quit IRC | 21:39 | |
| *** ddieterly[away] is now known as ddieterly | 21:43 | |
| *** jrist has joined #openstack-keystone | 21:45 | |
| *** sdake has joined #openstack-keystone | 21:53 | |
| *** sdake_ has quit IRC | 21:54 | |
| *** darosale has quit IRC | 21:57 | |
| *** ametts has quit IRC | 21:58 | |
| *** flwang1 has joined #openstack-keystone | 22:00 | |
| openstackgerrit | Merged openstack/keystone: Updating sample configuration file https://review.openstack.org/321781 | 22:03 |
| *** pushkaru has quit IRC | 22:04 | |
| *** pushkaru has joined #openstack-keystone | 22:04 | |
| *** ddieterly is now known as ddieterly[away] | 22:06 | |
| *** ddieterly[away] is now known as ddieterly | 22:06 | |
| *** pushkaru has quit IRC | 22:09 | |
| *** rk4n has quit IRC | 22:10 | |
| *** rk4n has joined #openstack-keystone | 22:10 | |
| *** ayoung has joined #openstack-keystone | 22:12 | |
| *** ChanServ sets mode: +v ayoung | 22:12 | |
| openstackgerrit | Merged openstack/keystone: Add identity providers integration tests https://review.openstack.org/302299 | 22:17 |
| *** rbridgeman_ has joined #openstack-keystone | 22:18 | |
| *** phalmos has quit IRC | 22:18 | |
| *** rbridgeman__ has quit IRC | 22:21 | |
| *** rbridgeman_ has quit IRC | 22:25 | |
| *** rbridgeman has joined #openstack-keystone | 22:26 | |
| *** slberger has left #openstack-keystone | 22:27 | |
| *** itlinux has quit IRC | 22:27 | |
| *** rbridgeman_ has joined #openstack-keystone | 22:28 | |
| *** rk4n has quit IRC | 22:29 | |
| *** itlinux has joined #openstack-keystone | 22:30 | |
| *** rbridgeman has quit IRC | 22:31 | |
| *** ddieterly has quit IRC | 22:35 | |
| *** itlinux has quit IRC | 22:38 | |
| *** KevinE has quit IRC | 22:39 | |
| *** itlinux has joined #openstack-keystone | 22:41 | |
| *** edmondsw has quit IRC | 22:42 | |
| *** diazjf1 has quit IRC | 22:42 | |
| openstackgerrit | guang-yee proposed openstack/keystonemiddleware: Support local config options https://review.openstack.org/321882 | 22:48 |
| *** spzala has quit IRC | 22:50 | |
| *** spzala has joined #openstack-keystone | 22:51 | |
| *** jdennis has quit IRC | 22:51 | |
| *** jdennis has joined #openstack-keystone | 22:53 | |
| *** darrenc is now known as darrenc_afk | 22:54 | |
| jamielennox | notmorgan: so can you tell me why i'm only hitting that nulllock issue intermittently? i had a quick look through the code but it's storing locks there somewhere | 22:54 |
| notmorgan | jamielennox: not sure | 22:54 |
| notmorgan | jamielennox: honestly | 22:54 |
| notmorgan | without more digging. | 22:54 |
| notmorgan | where were you hitting it? [what consuming project]? | 22:54 |
| jamielennox | notmorgan: CI using ansible to create services/endpoints in keystone | 22:55 |
| jamielennox | so i expect it would be keystone in general | 22:55 |
| notmorgan | not sure. | 22:55 |
| notmorgan | weird. | 22:55 |
| jamielennox | just this was the earliest api calls | 22:55 |
| *** spzala has quit IRC | 22:55 | |
| jamielennox | yea, ok i can look into it further but the lock storing thing seems to have a purpose i'm not sure about yet | 22:56 |
| jamielennox | zzzeek: if you're around ^ | 22:56 |
| zzzeek | jamielennox: hu | 22:56 |
| zzzeek | i | 22:56 |
| zzzeek | ARG | 22:56 |
| zzzeek | hello! | 22:56 |
| jamielennox | hey | 22:57 |
| jamielennox | thanks for all the gerrit fixes and tests | 22:57 |
| zzzeek | sure | 22:57 |
| jamielennox | you really should change author on that :) | 22:57 |
| zzzeek | doesnt matter | 22:57 |
| jamielennox | yep | 22:57 |
| zzzeek | i usually put a clause for my name as assited | 22:57 |
| zzzeek | but im so far behind on PRs i cant even think straight | 22:58 |
| notmorgan | zzzeek: now that there is a gerrit it'll be easier to iterate on them | 22:58 |
| zzzeek | so i dont know what "the lock storing thing" is | 22:58 |
| zzzeek | yes | 22:58 |
| notmorgan | zzzeek: also, i'm wondering why local testing is succeeding on some and gerrit is cranky | 22:58 |
| notmorgan | zzzeek: looking at the things. | 22:58 |
| notmorgan | (the merge patch, just cause it's a beast to rebase) | 22:59 |
| zzzeek | notmorgan: mmm ive been tuning the gerrit but didnt see anything unexplained so far... | 22:59 |
| notmorgan | ImportError: cannot import name Dogpile | 22:59 |
| notmorgan | oh.. heh | 22:59 |
| notmorgan | hmm | 22:59 |
| notmorgan | tests run locally for me =/ | 23:00 |
| jamielennox | alright i'll need to go back through it a bit, the stacktrace can be difficult with the contextmanagers | 23:00 |
| zzzeek | notmorgan: there's some namespace package crap im fixing | 23:00 |
| notmorgan | ahhh ok | 23:00 |
| notmorgan | i'll hold off on poking at things then unless you want me to look at something specific | 23:00 |
| zzzeek | notmorgan: just getting the bulid to work on this, added some more docs took out some legacy stuff, will look at it fresh tomorrow | 23:01 |
| * notmorgan nods. | 23:01 | |
| notmorgan | wfm | 23:01 |
| jamielennox | so i guess it's only getting triggered when it goes through the NameRegistry | 23:02 |
| jamielennox | so locks are held per key which make sense | 23:03 |
| jamielennox | but i'm not sure yet where createdtime is coming from | 23:03 |
| *** ayoung has quit IRC | 23:07 | |
| *** ayoung has joined #openstack-keystone | 23:07 | |
| *** ChanServ sets mode: +v ayoung | 23:07 | |
| jamielennox | so without stepping through (because i can't reliably reproduce) i'm lost in get_or_create_multi as to why sometimes its returning a createdtime but mostly not | 23:08 |
| *** timcline has quit IRC | 23:13 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/321722 | 23:15 |
| *** darrenc_afk is now known as darrenc | 23:16 | |
| rodrigods | https://review.openstack.org/#/c/321890/1 <- making functional-nv now voting :) | 23:19 |
| patchbot | rodrigods: patch 321890 - openstack-infra/project-config - Make keystone functional tests job voting | 23:19 |
| *** iurygregory has quit IRC | 23:20 | |
| *** furface_ is now known as furface | 23:23 | |
| *** markvoelker has quit IRC | 23:29 | |
| *** roxanaghe has quit IRC | 23:29 | |
| *** rbridgeman_ has quit IRC | 23:30 | |
| *** rbridgeman has joined #openstack-keystone | 23:31 | |
| *** julim has joined #openstack-keystone | 23:33 | |
| *** ayoung has quit IRC | 23:34 | |
| *** raddaoui has quit IRC | 23:37 | |
| *** rbridgeman has quit IRC | 23:38 | |
| *** itlinux has quit IRC | 23:41 | |
| *** jlk has joined #openstack-keystone | 23:46 | |
| jlk | Hi there. So I'm using Mitaka, keystone v3, and trying to do multiple domain support in Horizon. But it looks like horizon is looking for something out of the session it has with keystone API for 'domain_token', is there any way that Keystone would hand something back like that? | 23:47 |
| *** rderose has quit IRC | 23:49 | |
| *** spzala has joined #openstack-keystone | 23:51 | |
| *** ddieterly has joined #openstack-keystone | 23:51 | |
| jamielennox | jlk: i haven't looked at horizon for a while, but horizon/django has its own concept of a session | 23:57 |
| *** iurygregory has joined #openstack-keystone | 23:57 | |
| jamielennox | jlk: i remember they were going to do something about trying to get a domain scoped token which i assume is what this is | 23:58 |
| jlk | yeah, seems like it | 23:58 |
| jlk | I'm now tracing t hrough the django bits | 23:58 |
| jamielennox | https://github.com/openstack/django_openstack_auth/blob/master/openstack_auth/backend.py#L261 seems like it being set | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!