| *** jamielennox|away is now known as jamielennox | 00:00 | |
| *** gyee has quit IRC | 00:01 | |
| *** gyee has joined #openstack-keystone | 00:05 | |
| *** esp has quit IRC | 00:08 | |
| *** adrian_otto has quit IRC | 00:11 | |
| *** gagehugo has quit IRC | 00:12 | |
| *** adrian_otto has joined #openstack-keystone | 00:13 | |
| *** tqtran has quit IRC | 00:19 | |
| *** gyee has quit IRC | 00:25 | |
| *** Marcellin__ has quit IRC | 00:27 | |
| openstackgerrit | Sean Perry proposed openstack/keystone: Allow creation of domain specific implied roles by the domain admin https://review.openstack.org/339558 | 00:29 |
|---|---|---|
| *** ddieterly has joined #openstack-keystone | 00:33 | |
| *** ddieterly is now known as ddieterly[away] | 00:33 | |
| *** ddieterly[away] is now known as ddieterly | 00:33 | |
| stevemar | mfisch: another poke for https://review.openstack.org/#/c/369618/ :P | 00:35 |
| *** jlvillal has quit IRC | 00:41 | |
| *** rkrum has joined #openstack-keystone | 00:46 | |
| *** jlvillal has joined #openstack-keystone | 00:46 | |
| *** jlvillal has quit IRC | 00:47 | |
| *** jlvillal has joined #openstack-keystone | 00:47 | |
| *** jlvillal has quit IRC | 00:47 | |
| *** jlvillal has joined #openstack-keystone | 00:47 | |
| *** rkrum has quit IRC | 01:02 | |
| *** namnh has joined #openstack-keystone | 01:08 | |
| *** itsuugo has quit IRC | 01:08 | |
| *** roxanaghe has quit IRC | 01:09 | |
| *** itsuugo has joined #openstack-keystone | 01:10 | |
| *** roxanaghe has joined #openstack-keystone | 01:12 | |
| openstackgerrit | Ha Van Tu proposed openstack/keystone: Refactor Keystone admin-tokens and admin-users v2 https://review.openstack.org/369883 | 01:13 |
| openstackgerrit | Ha Van Tu proposed openstack/keystone: Refactor Keystone admin-tenant API v2 https://review.openstack.org/369849 | 01:13 |
| *** itsuugo has quit IRC | 01:15 | |
| *** itsuugo has joined #openstack-keystone | 01:16 | |
| *** adrian_otto has quit IRC | 01:17 | |
| *** ddieterly has quit IRC | 01:21 | |
| *** itsuugo has quit IRC | 01:22 | |
| *** itsuugo has joined #openstack-keystone | 01:22 | |
| openstackgerrit | Ha Van Tu proposed openstack/keystone: Refactor Keystone admin-tokens and admin-users v2 https://review.openstack.org/369883 | 01:27 |
| *** EinstCrazy has joined #openstack-keystone | 01:27 | |
| *** itsuugo has quit IRC | 01:27 | |
| *** itsuugo has joined #openstack-keystone | 01:28 | |
| *** ddieterly has joined #openstack-keystone | 01:31 | |
| *** EinstCrazy has quit IRC | 01:33 | |
| *** roxanaghe has quit IRC | 01:42 | |
| *** roxanaghe has joined #openstack-keystone | 01:48 | |
| *** itsuugo has quit IRC | 01:48 | |
| *** woodster_ has quit IRC | 01:50 | |
| *** itsuugo has joined #openstack-keystone | 01:50 | |
| *** itsuugo has quit IRC | 01:55 | |
| *** itsuugo has joined #openstack-keystone | 01:57 | |
| *** richm has quit IRC | 01:59 | |
| *** itsuugo has quit IRC | 02:08 | |
| *** itsuugo has joined #openstack-keystone | 02:09 | |
| *** roxanaghe has quit IRC | 02:10 | |
| *** ddieterly has quit IRC | 02:11 | |
| *** itsuugo has quit IRC | 02:16 | |
| *** itsuugo has joined #openstack-keystone | 02:17 | |
| *** itsuugo has quit IRC | 02:22 | |
| *** namnh has quit IRC | 02:22 | |
| *** itsuugo has joined #openstack-keystone | 02:23 | |
| *** ddieterly has joined #openstack-keystone | 02:24 | |
| *** nicolasbock has quit IRC | 02:27 | |
| *** itsuugo has quit IRC | 02:29 | |
| *** itsuugo has joined #openstack-keystone | 02:30 | |
| *** itsuugo has quit IRC | 02:35 | |
| *** itsuugo has joined #openstack-keystone | 02:36 | |
| *** itsuugo has quit IRC | 02:43 | |
| *** itsuugo has joined #openstack-keystone | 02:44 | |
| *** itsuugo has quit IRC | 02:48 | |
| *** itsuugo has joined #openstack-keystone | 02:50 | |
| *** ddieterly has quit IRC | 02:53 | |
| *** itsuugo has quit IRC | 03:01 | |
| *** sdake has joined #openstack-keystone | 03:01 | |
| *** itsuugo has joined #openstack-keystone | 03:03 | |
| *** atod has joined #openstack-keystone | 03:04 | |
| *** itsuugo has quit IRC | 03:08 | |
| *** itsuugo has joined #openstack-keystone | 03:10 | |
| *** code-R has joined #openstack-keystone | 03:15 | |
| *** itsuugo has quit IRC | 03:17 | |
| *** code-R_ has joined #openstack-keystone | 03:18 | |
| *** itsuugo has joined #openstack-keystone | 03:18 | |
| *** namnh has joined #openstack-keystone | 03:19 | |
| *** code-R has quit IRC | 03:21 | |
| *** itsuugo has quit IRC | 03:23 | |
| *** namnh has quit IRC | 03:24 | |
| *** itsuugo has joined #openstack-keystone | 03:24 | |
| *** namnh has joined #openstack-keystone | 03:25 | |
| *** namnh has quit IRC | 03:25 | |
| *** namnh has joined #openstack-keystone | 03:25 | |
| *** roxanaghe has joined #openstack-keystone | 03:26 | |
| *** namnh has quit IRC | 03:26 | |
| *** namnh has joined #openstack-keystone | 03:27 | |
| *** namnh has quit IRC | 03:27 | |
| *** fangxu has quit IRC | 03:27 | |
| *** namnh has joined #openstack-keystone | 03:27 | |
| *** itsuugo has quit IRC | 03:33 | |
| *** itsuugo has joined #openstack-keystone | 03:36 | |
| *** roxanaghe has quit IRC | 03:37 | |
| *** namnh has quit IRC | 03:39 | |
| *** namnh has joined #openstack-keystone | 03:40 | |
| *** namnh has quit IRC | 03:40 | |
| *** itsuugo has quit IRC | 03:41 | |
| *** namnh has joined #openstack-keystone | 03:41 | |
| *** namnh has quit IRC | 03:41 | |
| *** namnh has joined #openstack-keystone | 03:42 | |
| *** itsuugo has joined #openstack-keystone | 03:42 | |
| *** namnh has quit IRC | 03:43 | |
| *** namnh has joined #openstack-keystone | 03:44 | |
| *** itsuugo has quit IRC | 03:51 | |
| *** itsuugo has joined #openstack-keystone | 03:52 | |
| *** itsuugo has quit IRC | 03:59 | |
| *** itsuugo has joined #openstack-keystone | 04:00 | |
| *** mordred has quit IRC | 04:08 | |
| *** mordred has joined #openstack-keystone | 04:10 | |
| *** itsuugo has quit IRC | 04:10 | |
| *** itsuugo has joined #openstack-keystone | 04:12 | |
| *** itsuugo has quit IRC | 04:16 | |
| *** itsuugo has joined #openstack-keystone | 04:18 | |
| *** itsuugo has quit IRC | 04:23 | |
| *** itsuugo has joined #openstack-keystone | 04:24 | |
| *** itsuugo has quit IRC | 04:29 | |
| *** itsuugo has joined #openstack-keystone | 04:29 | |
| *** atod has quit IRC | 04:33 | |
| *** itsuugo has quit IRC | 04:34 | |
| *** itsuugo has joined #openstack-keystone | 04:35 | |
| *** atod has joined #openstack-keystone | 04:37 | |
| *** itsuugo has quit IRC | 04:40 | |
| *** adriant has quit IRC | 04:40 | |
| *** itsuugo has joined #openstack-keystone | 04:41 | |
| *** jaosorior has joined #openstack-keystone | 04:47 | |
| *** aswadr_ has joined #openstack-keystone | 04:49 | |
| *** itsuugo has quit IRC | 04:53 | |
| *** itsuugo has joined #openstack-keystone | 04:54 | |
| *** jaosorior has quit IRC | 05:01 | |
| *** jaosorior has joined #openstack-keystone | 05:02 | |
| *** sdake has quit IRC | 05:03 | |
| *** itsuugo has quit IRC | 05:03 | |
| *** itsuugo has joined #openstack-keystone | 05:04 | |
| *** esp has joined #openstack-keystone | 05:05 | |
| *** itsuugo has quit IRC | 05:10 | |
| *** itsuugo has joined #openstack-keystone | 05:10 | |
| *** roxanaghe has joined #openstack-keystone | 05:14 | |
| *** tqtran has joined #openstack-keystone | 05:17 | |
| *** rcernin has joined #openstack-keystone | 05:17 | |
| *** itsuugo has quit IRC | 05:20 | |
| *** itsuugo has joined #openstack-keystone | 05:21 | |
| *** sdake has joined #openstack-keystone | 05:22 | |
| *** tqtran has quit IRC | 05:22 | |
| *** roxanaghe has quit IRC | 05:22 | |
| *** itsuugo has quit IRC | 05:26 | |
| *** itsuugo has joined #openstack-keystone | 05:28 | |
| *** adriant has joined #openstack-keystone | 05:29 | |
| *** atod has quit IRC | 05:32 | |
| *** itsuugo has quit IRC | 05:37 | |
| *** itsuugo has joined #openstack-keystone | 05:38 | |
| *** markvoelker has quit IRC | 05:41 | |
| *** itsuugo has quit IRC | 05:43 | |
| *** itsuugo has joined #openstack-keystone | 05:43 | |
| *** esp has quit IRC | 05:46 | |
| *** itsuugo has quit IRC | 05:51 | |
| *** itsuugo has joined #openstack-keystone | 05:51 | |
| *** itsuugo has quit IRC | 05:56 | |
| *** itsuugo has joined #openstack-keystone | 05:58 | |
| *** itsuugo has quit IRC | 06:03 | |
| *** itsuugo has joined #openstack-keystone | 06:03 | |
| *** pcaruana has joined #openstack-keystone | 06:04 | |
| *** pcaruana is now known as pcaruana|afk| | 06:13 | |
| *** itsuugo has quit IRC | 06:18 | |
| *** atod has joined #openstack-keystone | 06:19 | |
| *** itsuugo has joined #openstack-keystone | 06:19 | |
| *** roxanaghe has joined #openstack-keystone | 06:23 | |
| *** roxanaghe has quit IRC | 06:28 | |
| *** itsuugo has quit IRC | 06:28 | |
| *** asettle has joined #openstack-keystone | 06:29 | |
| *** itsuugo has joined #openstack-keystone | 06:30 | |
| *** adriant has quit IRC | 06:32 | |
| *** asettle has quit IRC | 06:34 | |
| *** sdake has quit IRC | 06:36 | |
| *** itsuugo has quit IRC | 06:37 | |
| *** itsuugo has joined #openstack-keystone | 06:38 | |
| *** pcaruana|afk| is now known as pcaruana | 06:40 | |
| *** itsuugo has quit IRC | 06:44 | |
| *** jamielennox is now known as jamielennox|away | 06:45 | |
| *** itsuugo has joined #openstack-keystone | 06:45 | |
| *** atod has quit IRC | 06:48 | |
| *** joerch has quit IRC | 06:54 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Trivial fixes in the ldap common functions https://review.openstack.org/370564 | 06:55 |
| *** itsuugo has quit IRC | 07:00 | |
| *** itsuugo has joined #openstack-keystone | 07:02 | |
| *** tqtran has joined #openstack-keystone | 07:08 | |
| *** bjolo_ is now known as bjolo | 07:08 | |
| *** code-R_ has quit IRC | 07:08 | |
| *** joerch has joined #openstack-keystone | 07:09 | |
| *** joerch has quit IRC | 07:15 | |
| *** itsuugo has quit IRC | 07:17 | |
| *** itsuugo has joined #openstack-keystone | 07:18 | |
| *** jed56 has joined #openstack-keystone | 07:19 | |
| *** itsuugo has quit IRC | 07:23 | |
| *** jpena|off is now known as jpena | 07:24 | |
| *** itsuugo has joined #openstack-keystone | 07:24 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Removal of imports within functions https://review.openstack.org/370575 | 07:29 |
| *** itsuugo has quit IRC | 07:29 | |
| *** itsuugo has joined #openstack-keystone | 07:30 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Removal of imports within functions https://review.openstack.org/370575 | 07:31 |
| *** amoralej|off is now known as amoralej | 07:34 | |
| *** itsuugo has quit IRC | 07:35 | |
| *** itsuugo has joined #openstack-keystone | 07:35 | |
| *** asettle has joined #openstack-keystone | 07:37 | |
| *** asettle has quit IRC | 07:39 | |
| *** chrome0 has joined #openstack-keystone | 07:41 | |
| *** markvoelker has joined #openstack-keystone | 07:42 | |
| *** itsuugo has quit IRC | 07:47 | |
| *** markvoelker has quit IRC | 07:48 | |
| *** itsuugo has joined #openstack-keystone | 07:49 | |
| *** jamielennox|away is now known as jamielennox | 07:57 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** basilAB has quit IRC | 08:03 | |
| *** basilAB has joined #openstack-keystone | 08:05 | |
| *** atod has joined #openstack-keystone | 08:10 | |
| *** atod has quit IRC | 08:14 | |
| *** pnavarro has joined #openstack-keystone | 08:21 | |
| *** code-R has joined #openstack-keystone | 08:27 | |
| *** GB21 has joined #openstack-keystone | 08:28 | |
| *** code-R_ has joined #openstack-keystone | 08:29 | |
| *** itsuugo has quit IRC | 08:32 | |
| *** code-R has quit IRC | 08:32 | |
| *** itsuugo has joined #openstack-keystone | 08:34 | |
| *** schmil has joined #openstack-keystone | 08:37 | |
| schmil | Hi, after rebooting the controller the keystone service cannot bind to the port 35357 which is already in use by apache2 | 08:38 |
| schmil | I didn't do any change to the configuration and it worked fine before I rebooted the controlled | 08:38 |
| schmil | any idea how I solve this | 08:39 |
| *** itsuugo has quit IRC | 08:46 | |
| *** itsuugo has joined #openstack-keystone | 08:46 | |
| *** itsuugo has quit IRC | 08:51 | |
| *** itsuugo has joined #openstack-keystone | 08:52 | |
| *** asettle has joined #openstack-keystone | 08:52 | |
| *** asettle has quit IRC | 08:57 | |
| *** asettle has joined #openstack-keystone | 08:58 | |
| breton | schmil: netstat -tulpn | 09:02 |
| breton | oh, ok, already used by apache | 09:02 |
| breton | stop apache and start it again | 09:02 |
| *** itsuugo has quit IRC | 09:06 | |
| *** itsuugo has joined #openstack-keystone | 09:08 | |
| marekd | schmil: don't mix keystone standalone and apache. | 09:11 |
| *** itsuugo has quit IRC | 09:18 | |
| schmil | if I stop apache and restart it I get Address already in use: AH00072: make_sock: could not bind to address 192.168.0.3:35357 | 09:18 |
| *** itsuugo has joined #openstack-keystone | 09:19 | |
| marekd | schmil: turn apache off | 09:19 |
| schmil | marekd: I've installed opentsck with fuel and everything was fine and didn't change anything to how keystone should run | 09:19 |
| marekd | execute, as breton said netstat -tulip and se if something is listening on this port. | 09:20 |
| marekd | schmil: ^^ | 09:20 |
| *** mvk has quit IRC | 09:20 | |
| schmil | I ran netstat -lntp | grep 35357 and see the following "tcp 0 0 192.168.0.3:35357 0.0.0.0:* LISTEN 416/python" | 09:21 |
| *** adrian_otto has joined #openstack-keystone | 09:22 | |
| schmil | should it be keystone or apache2? | 09:23 |
| schmil | somehow both services are running | 09:23 |
| schmil | and they are both trying to attach to port 5000 and 35357 | 09:23 |
| *** tqtran has quit IRC | 09:26 | |
| *** alex_xu has quit IRC | 09:26 | |
| *** alex_xu has joined #openstack-keystone | 09:27 | |
| *** joerch has joined #openstack-keystone | 09:28 | |
| marekd | schmil: apache. | 09:29 |
| marekd | schmil: keystone should not be running as a standalone server. | 09:29 |
| schmil | so how come that it suddenly does? | 09:29 |
| marekd | schmil: i don't know. maybe fuel is doing something wrong? | 09:30 |
| marekd | schmil: are using init.d or systemd ? | 09:30 |
| schmil | upstart/init.d | 09:32 |
| schmil | if i stop both and start apache and i run "nova list" i get "No handlers could be found for logger "keystoneauth.identity.generic.base" No handlers could be found for logger "keystoneauth.identity.generic.base"" | 09:34 |
| schmil | if i stop both and start apache and i run "nova list" i get "No handlers could be found for logger "keystoneauth.identity.generic.base" ERROR (DiscoveryFailure): Could not determine a suitable URL for the plugin" | 09:34 |
| marekd | schmil: which ver of openstack is that? | 09:37 |
| marekd | schmil: use openstack command instead of nova/glance/keystone etc | 09:38 |
| marekd | schmil: how about running: $ openstack token issue | 09:38 |
| marekd | $ openstack server list | 09:38 |
| marekd | schmil: did you use only fuel to install openstack or mixed something? | 09:38 |
| marekd | looks like you have super old OS version mixed with a newwer one. | 09:38 |
| schmil | only fuel | 09:38 |
| marekd | and it worker well nwith 'nova list' etc and sudently, after restarting it doesn't ? | 09:39 |
| schmil | "openstack server list" also fails with "Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL." | 09:39 |
| marekd | schmil: do you have openrc exported? | 09:42 |
| marekd | can you paste it here ? | 09:42 |
| schmil | root@edge-ctrl0-mirantis-9:~# cat openrc #!/bin/sh export OS_NO_CACHE='true' export OS_TENANT_NAME='admin' export OS_PROJECT_NAME='admin' export OS_USERNAME='admin' export OS_PASSWORD='admin' export OS_AUTH_URL='http://192.168.0.2:5000/' export OS_DEFAULT_DOMAIN='Default' export OS_AUTH_STRATEGY='keystone' export OS_REGION_NAME='RegionOne' export CINDER_ENDPOINT_TYPE='internalURL' export GLANCE_ENDPOINT_TYPE='internalURL | 09:42 |
| marekd | whoa, looks like old. | 09:43 |
| schmil | that is what fuel created | 09:44 |
| marekd | fuel has some work ahead.... | 09:44 |
| marekd | export OS_TENANT_NAME='admin' and export OS_PROJECT_NAME='admin' ... | 09:44 |
| *** markvoelker has joined #openstack-keystone | 09:44 | |
| *** Trident has joined #openstack-keystone | 09:48 | |
| marekd | schmil: https://gist.github.com/zaccone/a290fa1dad1aa450164d8938b2c72f51 try with this. | 09:48 |
| *** adrian_otto has quit IRC | 09:49 | |
| marekd | but remember to clean old variables. | 09:49 |
| marekd | logout from shell or something | 09:49 |
| *** markvoelker has quit IRC | 09:49 | |
| marekd | schmil: is it new fuel ? | 09:49 |
| *** mvk has joined #openstack-keystone | 09:50 | |
| *** roxanaghe has joined #openstack-keystone | 09:59 | |
| *** itsuugo has quit IRC | 10:00 | |
| *** itsuugo has joined #openstack-keystone | 10:01 | |
| *** roxanaghe has quit IRC | 10:04 | |
| breton | marekd: fuel openrc relies on v2, but still works | 10:05 |
| breton | schmil: what does curl http://192.168.0.2:5000/ return? | 10:05 |
| breton | and what does it print? | 10:06 |
| marekd | breton: so, why mixing parameters? | 10:08 |
| breton | marekd: you mean OS_PROJECT_NAME and OS_TENANT_NAME? | 10:09 |
| *** itsuugo has quit IRC | 10:11 | |
| *** itsuugo has joined #openstack-keystone | 10:12 | |
| marekd | breton: for instance. | 10:21 |
| marekd | is OS_AUTH_STRATEGY new or super old parameter? I guess the latter. | 10:21 |
| breton | marekd: well, maybe one could do OS_IDENTITY_API_VERSION=3 openstack ... and it should work | 10:22 |
| breton | marekd: but i agree, some things are very old. | 10:23 |
| *** adrian_otto has joined #openstack-keystone | 10:23 | |
| breton | marekd: but schmil's issues are not because of old openrc | 10:23 |
| *** itsuugo has quit IRC | 10:25 | |
| *** itsuugo has joined #openstack-keystone | 10:27 | |
| *** itsuugo has quit IRC | 10:32 | |
| *** itsuugo has joined #openstack-keystone | 10:32 | |
| *** itsuugo has quit IRC | 10:39 | |
| *** itsuugo has joined #openstack-keystone | 10:41 | |
| *** itsuugo has quit IRC | 10:46 | |
| *** itsuugo has joined #openstack-keystone | 10:46 | |
| marekd | breton: did you manage to resolve schmil issue? | 10:55 |
| marekd | breton: i mean, looks like fues may be installig some super old keystone? | 10:55 |
| schmil | root@edge-ctrl0-mirantis-9:~# curl root@edge-ctrl0-mirantis-9:~# ^C <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="http://edge-ctrl0-mirantis-9/horizon">here</a>.</p> </body></html> curl: (6) Could not resolve host: ^C root@edge-ctrl0-mirantis-9:~# curl ^C root@edge-ctrl0-mirantis-9:~# curl htt | 10:58 |
| *** pnavarro has quit IRC | 10:59 | |
| schmil | sorry disregard the previous | 10:59 |
| schmil | root@edge-ctrl0-mirantis-9:~# curl http://192.168.0.2:5000/ <html><body><h1>503 Service Unavailable</h1> No server is available to handle this request. </body></html> | 10:59 |
| *** nicolasbock has joined #openstack-keystone | 11:00 | |
| *** pnavarro has joined #openstack-keystone | 11:01 | |
| schmil | fuel version is 9.0 | 11:02 |
| *** dave-mccowan has joined #openstack-keystone | 11:06 | |
| *** adrian_otto has quit IRC | 11:09 | |
| *** Sam__ has joined #openstack-keystone | 11:15 | |
| *** itsuugo has quit IRC | 11:23 | |
| breton | marekd: nope, keystone in 9.0 is Mitaka. | 11:24 |
| *** itsuugo has joined #openstack-keystone | 11:25 | |
| breton | schmil: try this: service keystone stop; service apache2 stop; sleep 5; service apache2 start | 11:25 |
| breton | in fact, everything in 9.0 is Mitaka | 11:26 |
| *** asettle has quit IRC | 11:30 | |
| schmil | still doesn't work | 11:33 |
| breton | schmil: still the same reply to curl? | 11:34 |
| schmil | yes | 11:35 |
| schmil | "/var/log/apache2/keystone_wsgi_main_error.log" shows the following error | 11:35 |
| schmil | Thu Sep 15 11:34:42.240202 2016] [wsgi:error] [pid 2627:tid 140535886997248] [remote 192.168.0.2:54295] mod_wsgi (pid=2627): Target WSGI script '/usr/lib/cgi-bin/keystone/keystone-public' cannot be loaded as Python module. [Thu Sep 15 11:34:42.240254 2016] [wsgi:error] [pid 2627:tid 140535886997248] [remote 192.168.0.2:54295] mod_wsgi (pid=2627): Exception occurred processing WSGI script '/usr/lib/cgi-bin/keystone/keyston | 11:36 |
| breton | please post the full error to paste.openstack.org. Also check if there are any errors in /var/log/keystone/ | 11:36 |
| *** edmondsw has joined #openstack-keystone | 11:42 | |
| *** itsuugo has quit IRC | 11:43 | |
| schmil | just paste to paste.openstack.org | 11:43 |
| *** itsuugo has joined #openstack-keystone | 11:44 | |
| breton | link? | 11:44 |
| *** markvoelker has joined #openstack-keystone | 11:45 | |
| schmil | http://paste.openstack.org/show/577383/ | 11:48 |
| schmil | "/var/log/keystone-all.log" shows the same error | 11:50 |
| *** markvoelker has quit IRC | 11:50 | |
| breton | schmil: something is wrong with your keystone.conf probably. Have you changed it manually somehow? | 11:51 |
| schmil | nope | 11:59 |
| *** jpena is now known as jpena|lunch | 12:02 | |
| breton | i think i saw a problem like this some time ago | 12:04 |
| breton | i just don't remember how i fixed it | 12:04 |
| breton | here is a stupid suggestion: try rebooting the controller again | 12:05 |
| *** Sam__ has quit IRC | 12:07 | |
| *** amoralej is now known as amoralej|lunch | 12:07 | |
| schmil | did that | 12:08 |
| schmil | how come that after reboot both keystone and apache service are running | 12:09 |
| *** namnh has quit IRC | 12:09 | |
| marekd | schmil: you might have init.d scripts that enable both keystone and apache | 12:10 |
| breton | that's weird. If you have both keystone and apache services running, file a bugreport on fuel | 12:14 |
| *** nicolasbock has quit IRC | 12:21 | |
| schmil | my bad keystone is not running after reboot | 12:22 |
| *** nicolasbock has joined #openstack-keystone | 12:22 | |
| *** itsuugo has quit IRC | 12:23 | |
| *** itsuugo has joined #openstack-keystone | 12:23 | |
| *** pauloewerton has joined #openstack-keystone | 12:27 | |
| *** itsuugo has quit IRC | 12:28 | |
| *** itsuugo has joined #openstack-keystone | 12:29 | |
| *** richm has joined #openstack-keystone | 12:30 | |
| *** asettle has joined #openstack-keystone | 12:30 | |
| marekd | schmil: so you accidentally enabled keystone ? | 12:35 |
| marekd | after reboot | 12:35 |
| *** asettle has quit IRC | 12:36 | |
| schmil | no | 12:36 |
| schmil | I just saw keystone-admin and keystone-main processes running and concluded that keystone is running | 12:37 |
| stevemar | o/ | 12:37 |
| *** sdake has joined #openstack-keystone | 12:38 | |
| *** markvoelker has joined #openstack-keystone | 12:38 | |
| schmil | but they are child processes of apache | 12:38 |
| schmil | so I think that because the keystone process cannot start because of the error in http://paste.openstack.org/show/577383/ | 12:41 |
| openstackgerrit | Merged openstack/keystone: Tweak api-ref doc for services/endpoints https://review.openstack.org/367760 | 12:44 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Move rolling upgrade repo names into constants https://review.openstack.org/370779 | 12:44 |
| *** itsuugo has quit IRC | 12:45 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Use a read-only DB session to retrieve schema version https://review.openstack.org/370780 | 12:46 |
| *** itsuugo has joined #openstack-keystone | 12:46 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Move rolling upgrade repo names into constants https://review.openstack.org/370779 | 12:49 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Use a read-only DB session to retrieve schema version https://review.openstack.org/370780 | 12:49 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Move the responsibility for stdout to the CLI module https://review.openstack.org/370784 | 12:49 |
| stevemar | dolphm: while you're on the topic of upgrades... https://bugs.launchpad.net/keystone/+bug/1620764 and https://bugs.launchpad.net/keystone/+bug/1620230 | 12:49 |
| openstack | Launchpad bug 1620764 in OpenStack Identity (keystone) "migration test fails on table addition" [Medium,Confirmed] | 12:49 |
| openstack | Launchpad bug 1620230 in OpenStack Identity (keystone) "migrate script is not correctly called in testcase" [Undecided,In progress] | 12:49 |
| breton | schmil: could you please post your keystone.conf to paste.openstack.org? Don't forget to remove all sensitive parts, like passwords and admin token. | 12:57 |
| *** itsuugo has quit IRC | 13:01 | |
| *** jpena|lunch is now known as jpena | 13:02 | |
| *** jaosorior has quit IRC | 13:02 | |
| schmil | I've cleaned all apache and keystone logs and rebooted and now I see the following http://paste.openstack.org/show/577429/ | 13:02 |
| *** jaosorior has joined #openstack-keystone | 13:02 | |
| *** itsuugo has joined #openstack-keystone | 13:02 | |
| dstanek | schmil: how did you install keystone? i looks like you are using the wrong verions of our requirements | 13:07 |
| schmil | just installed using mirantis/fuel | 13:10 |
| dstanek | schmil: you may want to see if they have a know bug for this. it appears to me that it has installed a version of a library that is older than what keystone requires | 13:12 |
| dstanek | i have no idea how fuel works though | 13:12 |
| breton | schmil: this is very weird. It seems that some packages were installed not by fuel. | 13:13 |
| breton | dstanek: from deb packages | 13:13 |
| *** sdake_ has joined #openstack-keystone | 13:14 | |
| dstanek | breton: ah, ok. you just roll your own debs and such? | 13:15 |
| *** amoralej|lunch is now known as amoralej | 13:15 | |
| *** sdake has quit IRC | 13:16 | |
| breton | dstanek: they get packaged, put into a repository and then fuel installs the packages. Humans don't do anything. | 13:19 |
| dstanek | zzzeek: i have a question about https://bugs.launchpad.net/keystone/+bug/1620764 when you have a few | 13:23 |
| openstack | Launchpad bug 1620764 in OpenStack Identity (keystone) "migration test fails on table addition" [Medium,Confirmed] | 13:23 |
| rderose | stevemar: I replied to your comments on https://review.openstack.org/#/c/367025/ | 13:28 |
| rderose | stevemar: let me know if that makes sense | 13:28 |
| stevemar | keystoners, i'm tagging rc1 now, or we're gonna miss the train! | 13:29 |
| stevemar | rderose: that can go into rc2 fyi | 13:29 |
| rderose | ok | 13:29 |
| stevemar | rderose: for https://review.openstack.org/#/c/367025/29/keystone/tests/unit/test_sql_upgrade.py | 13:30 |
| stevemar | i mean can you do: if db_engine == postgres, then do a different validation | 13:30 |
| stevemar | instead of self.assertEqual('DATETIME', str(password.c.created_at.type)) | 13:30 |
| stevemar | you do self.assertEqual('TIMESTAMP', str(password.c.created_at.type)) | 13:30 |
| rderose | ah okay | 13:31 |
| rderose | stevemar: I see what you mean | 13:31 |
| dstanek | stevemar: can't miss the train | 13:32 |
| *** asettle has joined #openstack-keystone | 13:33 | |
| *** roxanaghe has joined #openstack-keystone | 13:35 | |
| *** BjoernT has joined #openstack-keystone | 13:36 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Fixes password created_at errors due to the server_default https://review.openstack.org/367025 | 13:37 |
| rderose | stevemar: done | 13:37 |
| *** asettle has quit IRC | 13:37 | |
| schmil | breton: packages were only installed by fuel. it worked fine until i rebooted the controller | 13:38 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 13:40 |
| *** roxanaghe has quit IRC | 13:40 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation assignment driver https://review.openstack.org/291318 | 13:40 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Move dependency-related trust logic to manager https://review.openstack.org/360735 | 13:40 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 13:41 |
| breton | schmil: i don't know how to help you with that :( maybe people in #openstack-fuel or #fuel might help you. | 13:44 |
| *** artmr has joined #openstack-keystone | 13:45 | |
| *** itsuugo has quit IRC | 13:46 | |
| *** itsuugo has joined #openstack-keystone | 13:48 | |
| *** EinstCrazy has joined #openstack-keystone | 13:48 | |
| stevemar | dstanek + breton does Iad7ca87a30fd5fa9f8bc88a0c7f74acca2ae1a56 also need to be backported? | 13:49 |
| *** tonytan4ever has joined #openstack-keystone | 13:51 | |
| dstanek | stevemar: i didn't write that because of caching - it has something to do with a feature lbragstad or dolphm was working on | 13:53 |
| dstanek | so i doubt a backport would be necessary | 13:54 |
| dolphm | yeah, that fixed a problem i was having... | 13:55 |
| *** tonytan_brb has joined #openstack-keystone | 13:56 | |
| *** atod has joined #openstack-keystone | 13:56 | |
| dolphm | oh, no that was lbragstad | 13:56 |
| stevemar | dolphm: you often get confused between who you are and who lbragstad is? | 13:56 |
| dolphm | stevemar: it's required for credential encryption - so it should be in newton | 13:56 |
| dolphm | stevemar: sometimes | 13:57 |
| lbragstad | ah - yeah | 13:57 |
| stevemar | dolphm: :) thanks for the clarification | 13:57 |
| lbragstad | that was because I was defining an interface for the fernet provider and it was breaking because the implementation was using a property method (but it wasn't being run every time it was called) | 13:57 |
| breton | stevemar: right, i didn't run into issues related to that bugreport | 13:57 |
| breton | still worth backporting though. | 13:57 |
| *** ddieterly has joined #openstack-keystone | 13:57 | |
| *** tonytan4ever has quit IRC | 13:58 | |
| dstanek | breton: only if we add new code. it was making assumptions on manager/driver interfaces that still hold true pre-Newton | 13:58 |
| dstanek | it's only when a property was added that it broke | 13:59 |
| zzzeek | dstanek: im here for ten minutes or so | 13:59 |
| *** ddieterly has quit IRC | 14:00 | |
| zzzeek | dstanek: dont know too much about migrate's module manipulation though. i maintain OS projects shoudl really be prioritizing moving to alembic :) | 14:01 |
| dstanek | zzzeek: totally agree, but that's maybe a next cycle issue | 14:01 |
| dstanek | zzzeek: any thoughts on what could be reusing objects? | 14:02 |
| zzzeek | dstanek: if chaging module import logic fixes, that is odd. the original stack trace is "file not found" so i cant see much | 14:02 |
| dstanek | the only explicity reuse that i see is Version objects | 14:02 |
| *** ddieterly has joined #openstack-keystone | 14:02 | |
| zzzeek | dstanek: e.g. if i knew what system was producing "table does not exist" at least. | 14:02 |
| dstanek | zzzeek: somehow self._module seems to have the wrong python script for the second repo | 14:03 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Refactor find_migrate_repo(): require caller to specify repo https://review.openstack.org/370856 | 14:03 |
| zzzeek | dstanek: .pyc issues ? | 14:03 |
| dstanek | zzzeek: no, because we don't even try to import it again since the values already exists in the object | 14:04 |
| zzzeek | dstanek: change is reproducible? random? was introduced by some change? | 14:05 |
| dstanek | zzzeek: do you see anything fundamentally wrong with how we are using the multiple repos (my biggest concern is the module names are the same and i wonder if that's it)? | 14:05 |
| dstanek | zzzeek: i can reproduce it everytime | 14:05 |
| zzzeek | dstanek: you have a stack trace swomehwere I can see ? the link in the launchpad is 404 | 14:05 |
| zzzeek | dstanek: great. bisect to find offending changeset ? | 14:06 |
| dstanek | zzzeek: i'd have to bisect sqlalchemy-migrate - and i don't know if this would have ever worked | 14:06 |
| *** jaugustine has joined #openstack-keystone | 14:07 | |
| zzzeek | dstanek: wait, what about bisect keystone? | 14:07 |
| dstanek | zzzeek: did you see my link to a paste in the bug? | 14:07 |
| zzzeek | dstanek: issue appeared w/ new migrate version ? | 14:07 |
| dstanek | zzzeek: i know exactly what we did in keystone and i think it should work | 14:08 |
| zzzeek | dstanek: OK and...what's that ? | 14:08 |
| zzzeek | dstanek: self.assertTableExists(delegation_table_name) is....hitting the database? is it using the correct MySQL database, opportunistic testing creates multiple databases | 14:09 |
| *** asettle has joined #openstack-keystone | 14:09 | |
| dstanek | we have 3 repos (expand,migrate,contract) all having 4 versions (have module filename, e.g. 00#_something.py) - we mirage up to 003 on expand, then migrate and then contract | 14:09 |
| dstanek | so now the schema is a version 003 | 14:09 |
| dstanek | we then run expand to 004 to make sure it worked we check the tables | 14:09 |
| *** code-R has joined #openstack-keystone | 14:09 | |
| dstanek | but it never runs because the change object actually hold the code to the migrate code | 14:10 |
| zzzeek | dstanek: this paste? http://paste.openstack.org/show/577431/ yes that tells me like nothing. tells me, ".pyc files are messed up and/or the naming of the files is confusing the import system". that wouldn't tell me that a table isn't present in the DB. i dont have any context here. | 14:10 |
| dstanek | zzzeek: i've logged the change's module and filename when the changes are applied and it seems fine up until we try to migrate to 004 | 14:10 |
| dstanek | zzzeek: the table is not there because the module is never run | 14:11 |
| zzzeek | dstanek: ok | 14:11 |
| zzzeek | dstanek: that helps a ton to know that :) | 14:11 |
| *** spedione|AWAY is now known as spedione | 14:11 | |
| zzzeek | dstanek: pdb at that point in the code, look at self._module, see what's wrong with it, what changes when self.verify_module(self.path) is run instead? look at self._module.__file__ etc. ? | 14:12 |
| dstanek | that module property actually uses the wrong value for _module so it is never actually imported again | 14:12 |
| zzzeek | dstanek: sqla-migrate bug then. pdb | 14:12 |
| *** code-R__ has joined #openstack-keystone | 14:12 | |
| dstanek | zzzeek: i know what's wrong, just not why yet. the _module is the wrong one and already exists in the object seemingly before the module property is evaluated for the first time | 14:12 |
| *** ddieterly has quit IRC | 14:13 | |
| *** code-R_ has quit IRC | 14:13 | |
| dstanek | zzzeek: it's almost like some objects are being shared | 14:13 |
| zzzeek | dstanek: I know people dont want to talk about alembic but I've been telling keystone, nova, everyone else since 2014 to please start migrating | 14:13 |
| zzzeek | so i know "next cycle" is the answer for now but this is just ongoing technical debt | 14:13 |
| *** code-R has quit IRC | 14:15 | |
| dstanek | zzzeek: yep | 14:15 |
| *** asettle has quit IRC | 14:15 | |
| *** ddieterly has joined #openstack-keystone | 14:16 | |
| zzzeek | dstanek: for now, id say sure, hack into sqla-migrate and propose patches. b.c. at least migrate is already nothing but technical debt, no reason to not add more :) | 14:16 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Refactor get_init_version(): require caller to specify repo name https://review.openstack.org/370870 | 14:19 |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystone: Update reno for stable/newton https://review.openstack.org/370878 | 14:23 |
| *** ravelar has joined #openstack-keystone | 14:31 | |
| *** gagehugo has joined #openstack-keystone | 14:35 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Refactor get_init_version(): require caller to specify repo name https://review.openstack.org/370870 | 14:40 |
| *** Trident has quit IRC | 14:41 | |
| stevemar | i regret not cleaning up release notes before tagging rc1 | 14:41 |
| stevemar | grr | 14:41 |
| *** Trident has joined #openstack-keystone | 14:41 | |
| *** thiagolib has joined #openstack-keystone | 14:44 | |
| dstanek | stevemar: there's always next time | 14:44 |
| *** EinstCrazy has quit IRC | 14:44 | |
| *** jed56 has quit IRC | 14:45 | |
| *** ddieterly has quit IRC | 14:46 | |
| *** chrisshattuck has joined #openstack-keystone | 14:48 | |
| amakarov | stevemar, hi! Do your OAuth1 implementation care about roles? I found nothing - looks like it authorizes for access to a project without specifying any role... | 14:48 |
| amakarov | stevemar, I'm asking because a team that want use oauth complains about inability to see what roles were requested on a project and I'm trying to add that | 14:50 |
| *** chrisshattuck has quit IRC | 14:50 | |
| stevemar | amakarov: hmm, it should require the authorizer specify which roles he wants to delegate | 14:51 |
| stevemar | amakarov: this step: https://github.com/openstack/keystone/blob/master/keystone/oauth1/controllers.py#L354-L402 | 14:52 |
| amakarov | stevemar, yes, and all I've found in auth plugin is this: https://github.com/openstack/keystone/blob/master/keystone/auth/plugins/oauth1.py#L62-L64 | 14:52 |
| amakarov | stevemar, oh, missed that | 14:53 |
| stevemar | amakarov: the access token the user auths with should contain the roles too | 14:53 |
| amakarov | stevemar, yes, and I thought it's pulled from the request token somehow | 14:54 |
| amakarov | looking... | 14:54 |
| *** tonytan_brb is now known as tonytan4ever | 14:57 | |
| *** chrisshattuck has joined #openstack-keystone | 14:57 | |
| *** edtubill has joined #openstack-keystone | 14:57 | |
| *** edtubill has quit IRC | 14:57 | |
| *** edtubill has joined #openstack-keystone | 14:58 | |
| *** chrisshattuck has quit IRC | 14:58 | |
| *** chrisshattuck has joined #openstack-keystone | 14:59 | |
| *** edtubill has quit IRC | 15:00 | |
| *** esp has joined #openstack-keystone | 15:10 | |
| *** asettle has joined #openstack-keystone | 15:11 | |
| *** asettle has quit IRC | 15:16 | |
| *** atod has quit IRC | 15:17 | |
| *** spzala has joined #openstack-keystone | 15:17 | |
| *** jaosorior has quit IRC | 15:18 | |
| *** pcaruana has quit IRC | 15:19 | |
| *** adrian_otto has joined #openstack-keystone | 15:20 | |
| *** atod has joined #openstack-keystone | 15:21 | |
| *** ddieterly has joined #openstack-keystone | 15:25 | |
| *** ddieterly has quit IRC | 15:26 | |
| *** ddieterly has joined #openstack-keystone | 15:26 | |
| *** woodster_ has joined #openstack-keystone | 15:36 | |
| *** esp has quit IRC | 15:38 | |
| *** arunkant__ has joined #openstack-keystone | 15:42 | |
| *** itsuugo has quit IRC | 15:48 | |
| *** itsuugo has joined #openstack-keystone | 15:49 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: WIP OAuth1 driver for unified delegation https://review.openstack.org/370965 | 15:51 |
| *** thumpba has joined #openstack-keystone | 16:00 | |
| *** schmil has quit IRC | 16:03 | |
| *** adrian_otto has quit IRC | 16:06 | |
| *** gyee has joined #openstack-keystone | 16:06 | |
| *** ezpz_ has joined #openstack-keystone | 16:09 | |
| *** ezpz_ is now known as ezpz | 16:10 | |
| breton | isn't it a little late for https://review.openstack.org/#/c/370856/ ? | 16:10 |
| breton | or we have stable/newton already cut? | 16:12 |
| *** asettle has joined #openstack-keystone | 16:12 | |
| breton | yes, we have stable/newton. Cool then! | 16:12 |
| *** asettle has quit IRC | 16:17 | |
| *** Marcellin__ has joined #openstack-keystone | 16:18 | |
| *** ravelar has quit IRC | 16:20 | |
| *** gagehugo has quit IRC | 16:21 | |
| stevemar | breton: :) | 16:24 |
| *** rcernin has quit IRC | 16:26 | |
| breton | something very weird is going on in https://review.openstack.org/#/c/370252/3/keystone/tests/unit/test_token_provider.py | 16:29 |
| *** asettle has joined #openstack-keystone | 16:31 | |
| *** itsuugo has quit IRC | 16:32 | |
| *** adrian_otto has joined #openstack-keystone | 16:33 | |
| *** itsuugo has joined #openstack-keystone | 16:34 | |
| rderose | stevemar: FYI - Patches in review for adding a dialog window for passwords that are about to expire in Horizon: | 16:35 |
| rderose | https://review.openstack.org/#/c/370973/ | 16:35 |
| rderose | https://review.openstack.org/#/c/369652/ | 16:35 |
| *** asettle has quit IRC | 16:36 | |
| *** adrian_otto has quit IRC | 16:37 | |
| *** gagehugo has joined #openstack-keystone | 16:38 | |
| *** spzala has quit IRC | 16:39 | |
| *** roxanaghe has joined #openstack-keystone | 16:39 | |
| *** spzala has joined #openstack-keystone | 16:39 | |
| *** adrian_otto has joined #openstack-keystone | 16:40 | |
| *** gagehugo has quit IRC | 16:41 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: OAuth1 driver for unified delegation https://review.openstack.org/370965 | 16:42 |
| *** tonytan4ever has quit IRC | 16:42 | |
| *** adrian_otto has quit IRC | 16:43 | |
| *** roxanaghe has quit IRC | 16:44 | |
| *** adrian_otto has joined #openstack-keystone | 16:45 | |
| *** adrian_otto has quit IRC | 16:46 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 16:47 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation assignment driver https://review.openstack.org/291318 | 16:47 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Move dependency-related trust logic to manager https://review.openstack.org/360735 | 16:47 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 16:47 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: OAuth1 driver for unified delegation https://review.openstack.org/370965 | 16:48 |
| *** adrian_otto has joined #openstack-keystone | 16:48 | |
| *** thumpba has quit IRC | 16:48 | |
| *** ravelar has joined #openstack-keystone | 16:49 | |
| *** thumpba has joined #openstack-keystone | 16:49 | |
| *** spzala has quit IRC | 16:49 | |
| *** browne has joined #openstack-keystone | 16:49 | |
| *** atod has quit IRC | 16:49 | |
| *** esp has joined #openstack-keystone | 16:52 | |
| *** adrian_otto1 has joined #openstack-keystone | 16:53 | |
| *** thumpba has quit IRC | 16:54 | |
| *** ravelar has quit IRC | 16:54 | |
| *** asettle has joined #openstack-keystone | 16:55 | |
| *** adrian_otto has quit IRC | 16:57 | |
| *** code-R__ has quit IRC | 17:01 | |
| *** asettle has quit IRC | 17:01 | |
| *** adrian_otto1 has quit IRC | 17:04 | |
| *** pnavarro has quit IRC | 17:05 | |
| *** adrian_otto has joined #openstack-keystone | 17:05 | |
| *** Guest_83848 has joined #openstack-keystone | 17:06 | |
| Guest_83848 | allah is doing | 17:07 |
| Guest_83848 | sun is not doing allah is doing | 17:08 |
| Guest_83848 | moon is not doing allah is doing | 17:08 |
| Guest_83848 | stars are not doing allah is doing | 17:08 |
| Guest_83848 | planets are not doing allah is doing | 17:08 |
| dstanek | um... stevemar dolphm ? | 17:08 |
| Guest_83848 | galaxies are not doing allah is doing | 17:08 |
| Guest_83848 | oceans are not doing allah is doing | 17:08 |
| Guest_83848 | mountains are not doing allah is doing | 17:09 |
| Guest_83848 | trees are not doing allah is doing | 17:09 |
| Guest_83848 | mom is not doing allah is doing | 17:09 |
| Guest_83848 | dad is not doing allah is doing | 17:09 |
| Guest_83848 | boss is not doing allah is doing | 17:09 |
| Guest_83848 | job is not doing allah is doing | 17:09 |
| Guest_83848 | dollar is not doing allah is doing | 17:09 |
| Guest_83848 | degree is not doing allah is doing | 17:10 |
| Guest_83848 | medicine is not doing allah is doing | 17:10 |
| Guest_83848 | customers are not doing allah is doing | 17:10 |
| Guest_83848 | you can not get a job without the permission of allah | 17:10 |
| breton | stevemar: | 17:10 |
| mtreinish | dstanek: heh, that bot gets around, just did the same in ironic | 17:10 |
| mtreinish | fungi: ^^^ | 17:10 |
| *** jpena is now known as jpena|off | 17:10 | |
| Guest_83848 | you can not get married without the permission of allah | 17:11 |
| dstanek | mtreinish: :-) | 17:11 |
| Guest_83848 | nobody can get angry at you without the permission of allah | 17:11 |
| *** ChanServ sets mode: -v+b rderose Guest_83848!*@* | 17:11 | |
| *** Guest_83848 was kicked by ChanServ (Banned: spamming is off-topic) | 17:11 | |
| fungi | sniped | 17:11 |
| dstanek | fungi: thanks! | 17:11 |
| fungi | np | 17:12 |
| rderose | fungi: ++ | 17:12 |
| *** thumpba has joined #openstack-keystone | 17:17 | |
| stevemar | dstanek: breton ah sorry, i was out grabbing food | 17:19 |
| stevemar | dstanek: thanks for pinging fungi | 17:19 |
| dstanek | stevemar: np | 17:19 |
| mtreinish | stevemar, dstanek: I see how it is... :) | 17:21 |
| dstanek | mtreinish: you have not been forgotten! thanks. (maybe just taken for granted?) | 17:25 |
| mtreinish | hah | 17:25 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 17:26 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation assignment driver https://review.openstack.org/291318 | 17:27 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Move dependency-related trust logic to manager https://review.openstack.org/360735 | 17:27 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 17:27 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: OAuth1 driver for unified delegation https://review.openstack.org/370965 | 17:27 |
| amakarov | rderose, added migrate and contract migrations... Test that failed in 51 patch, passed somehow on my local env. | 17:28 |
| rderose | amakarov: running sqlite? | 17:29 |
| amakarov | rderose, mysql opportunistic | 17:29 |
| rderose | amakarov: hmm... let me try | 17:30 |
| amakarov | rderose, anyway - following patches require pretty much attention ) | 17:30 |
| *** mvk has quit IRC | 17:32 | |
| rderose | amakarov: yep, passed for me as well. lets see if it gets through the gate :) | 17:32 |
| amakarov | rderose, my main concern :) | 17:32 |
| *** karenb has joined #openstack-keystone | 17:33 | |
| rderose | amakarov: is it passing because you are not upgrading to 4 on migrate and contract in your tests? | 17:34 |
| amakarov | rderose, ops.. | 17:35 |
| rderose | :) | 17:36 |
| *** adrian_otto has quit IRC | 17:36 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 17:37 |
| amakarov | rderose, ^ | 17:37 |
| *** tonytan4ever has joined #openstack-keystone | 17:37 | |
| amakarov | works for me | 17:37 |
| rderose | amakarov: cool | 17:37 |
| *** karenb has quit IRC | 17:41 | |
| *** GB21 has quit IRC | 17:41 | |
| *** spilla has joined #openstack-keystone | 17:42 | |
| *** ravelar has joined #openstack-keystone | 17:43 | |
| *** amoralej is now known as amoralej|off | 17:43 | |
| *** andrewbogott has quit IRC | 17:47 | |
| *** andrewbogott has joined #openstack-keystone | 17:47 | |
| *** ravelar has quit IRC | 17:51 | |
| *** adrian_otto has joined #openstack-keystone | 17:52 | |
| *** GB21 has joined #openstack-keystone | 17:54 | |
| *** gyee has quit IRC | 17:54 | |
| *** adrian_otto1 has joined #openstack-keystone | 17:56 | |
| *** adrian_otto has quit IRC | 17:57 | |
| *** adrian_otto1 has quit IRC | 17:57 | |
| *** ravelar has joined #openstack-keystone | 18:00 | |
| *** ravelar has joined #openstack-keystone | 18:00 | |
| *** atod has joined #openstack-keystone | 18:06 | |
| openstackgerrit | Sean Perry proposed openstack/keystone: Give domain admin rights to domain specific implied roles https://review.openstack.org/339558 | 18:06 |
| *** tqtran has joined #openstack-keystone | 18:10 | |
| *** gagehugo has joined #openstack-keystone | 18:10 | |
| *** mvk has joined #openstack-keystone | 18:12 | |
| *** asettle has joined #openstack-keystone | 18:13 | |
| lbragstad | stevemar is the access token dictionary for oauth token always suppose to have role ids? | 18:19 |
| lbragstad | stevemar because if not it would appear our _populate_roles method in the V3TokenDataHelper is broken | 18:20 |
| *** rodrigods has quit IRC | 18:22 | |
| *** rodrigods has joined #openstack-keystone | 18:22 | |
| *** pooja has joined #openstack-keystone | 18:22 | |
| *** pcaruana has joined #openstack-keystone | 18:22 | |
| *** spzala_ has joined #openstack-keystone | 18:25 | |
| *** ddieterly is now known as ddieterly[away] | 18:25 | |
| *** sdake_ is now known as sdake | 18:26 | |
| *** spzala_ has quit IRC | 18:27 | |
| *** spzala has joined #openstack-keystone | 18:28 | |
| *** asettle has quit IRC | 18:34 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Rename sql.migration_helpers to sql.upgrades https://review.openstack.org/371049 | 18:37 |
| *** GB21 has quit IRC | 18:41 | |
| *** itsuugo has quit IRC | 18:42 | |
| *** itsuugo has joined #openstack-keystone | 18:44 | |
| *** gagehugo has quit IRC | 18:44 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: OAuth1 driver for unified delegation https://review.openstack.org/370965 | 18:46 |
| *** spzala has quit IRC | 18:47 | |
| stevemar | lbragstad: hmmmm | 18:48 |
| stevemar | i believe so, it's been a while... | 18:48 |
| lbragstad | stevemar i think i have a work around | 18:48 |
| lbragstad | the token provider api assumes that role ids will be in the access token reference stored in the tokne | 18:48 |
| lbragstad | but they're not | 18:48 |
| lbragstad | so that's broken | 18:48 |
| stevemar | oh | 18:48 |
| stevemar | fantastic | 18:49 |
| lbragstad | but we never noticed it because we short circuit *everything* in the token provider helpers | 18:49 |
| *** joerch has quit IRC | 18:49 | |
| lbragstad | which never seemed to expose the bug | 18:49 |
| pooja | Hi, I am new to federation support in keystone and would like to understand if there is a way to query a shadow user's groups in keystone? When SSO user logs in, token context contains list of groups | 18:50 |
| pooja | But is there a way to query this at a later point? | 18:50 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Move test_sql_upgrade.MigrationRepository into keystone.common https://review.openstack.org/371058 | 18:50 |
| stevemar | dolphm: i'm liking your changes :) | 18:51 |
| *** atod has quit IRC | 18:51 | |
| openstackgerrit | Merged openstack/keystone: Move rolling upgrade repo names into constants https://review.openstack.org/370779 | 18:53 |
| *** gagehugo has joined #openstack-keystone | 18:54 | |
| dolphm | stevemar: thanks - you would not have liked the change i'm pulling them out of :P | 18:54 |
| stevemar | dolphm: luckily, that didn't happen | 18:54 |
| *** atod has joined #openstack-keystone | 18:55 | |
| *** code-R has joined #openstack-keystone | 18:55 | |
| stevemar | dolphm: aww you abandoned https://review.openstack.org/#/c/370870/ | 18:56 |
| dolphm | stevemar: yeah, i tried to do that a bit prematurely | 18:57 |
| dolphm | stevemar: i'll get back to the same outcome | 18:57 |
| *** code-R_ has joined #openstack-keystone | 18:59 | |
| *** code-R has quit IRC | 19:02 | |
| openstackgerrit | Merged openstack/keystone: Use a read-only DB session to retrieve schema version https://review.openstack.org/370780 | 19:08 |
| *** gagehugo has quit IRC | 19:10 | |
| *** ddieterly[away] has quit IRC | 19:26 | |
| *** ametts has joined #openstack-keystone | 19:26 | |
| openstackgerrit | Merged openstack/keystone: Use URIOpt for endpoint URL options https://review.openstack.org/350713 | 19:30 |
| *** pauloewerton has quit IRC | 19:32 | |
| *** aswadr_ has quit IRC | 19:32 | |
| *** pcaruana has quit IRC | 19:32 | |
| *** ddieterly has joined #openstack-keystone | 19:33 | |
| openstackgerrit | Merged openstack/keystone: EndpointPolicy driver doesn't inherit interface https://review.openstack.org/352586 | 19:33 |
| *** asettle has joined #openstack-keystone | 19:34 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Ensure the sqla-migrate scripts cache is cleared https://review.openstack.org/371075 | 19:39 |
| *** asettle has quit IRC | 19:40 | |
| *** david-lyle has quit IRC | 19:40 | |
| *** david-lyle has joined #openstack-keystone | 19:40 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Reduce revoke events for disabled domains/projects https://review.openstack.org/371076 | 19:40 |
| *** atod has quit IRC | 19:41 | |
| *** code-R_ has quit IRC | 19:44 | |
| *** gagehugo has joined #openstack-keystone | 19:48 | |
| *** sdake has quit IRC | 19:49 | |
| *** sdake_ has joined #openstack-keystone | 19:49 | |
| *** atod has joined #openstack-keystone | 19:51 | |
| *** gagehugo has quit IRC | 19:52 | |
| *** rcernin has joined #openstack-keystone | 19:53 | |
| *** itsuugo has quit IRC | 19:53 | |
| *** itsuugo has joined #openstack-keystone | 19:55 | |
| rderose | amakarov: https://review.openstack.org/#/c/371075 | 19:57 |
| *** asettle has joined #openstack-keystone | 19:58 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Make all token providers validate the same way https://review.openstack.org/371083 | 19:59 |
| *** artmr has quit IRC | 20:00 | |
| *** ametts has quit IRC | 20:01 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Make all token providers validate the same way https://review.openstack.org/371083 | 20:01 |
| *** jaugustine has quit IRC | 20:04 | |
| *** nicolasbock has quit IRC | 20:06 | |
| openstackgerrit | Merged openstack/keystone: Test that rolling upgrade repos are in lockstep https://review.openstack.org/370370 | 20:13 |
| *** ametts has joined #openstack-keystone | 20:13 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Let the upgrades.Repository manage its own DB engine https://review.openstack.org/371090 | 20:14 |
| *** nicolasbock has joined #openstack-keystone | 20:17 | |
| *** asettle has quit IRC | 20:18 | |
| *** zzzeek has quit IRC | 20:35 | |
| *** ddieterly is now known as ddieterly[away] | 20:39 | |
| *** zzzeek has joined #openstack-keystone | 20:39 | |
| *** ametts has quit IRC | 20:42 | |
| *** itsuugo has quit IRC | 20:47 | |
| *** itsuugo has joined #openstack-keystone | 20:50 | |
| *** raildo has quit IRC | 20:53 | |
| *** thumpba has quit IRC | 20:59 | |
| *** thumpba has joined #openstack-keystone | 20:59 | |
| *** ddieterly[away] is now known as ddieterly | 21:08 | |
| *** thumpba has quit IRC | 21:10 | |
| stevemar | rderose: can you update https://bugs.launchpad.net/keystone/+bug/1621200 to be more accurate? | 21:11 |
| openstack | Launchpad bug 1621200 in OpenStack Identity (keystone) "MySQLOpportunisticIdentityDriverTestCase.test_change_password fails in UTC+N timezone" [High,In progress] - Assigned to Ron De Rose (ronald-de-rose) | 21:11 |
| *** catintheroof has joined #openstack-keystone | 21:15 | |
| *** asettle has joined #openstack-keystone | 21:19 | |
| *** pooja has quit IRC | 21:19 | |
| catintheroof | Hi, quick question, suppose i have lots of users into a single OU on ldap, and i need to assign each user to a new domain, i dont need domain specific driver for that right ? i just need multidomains enabled and how to do i do to filter that every user is a new domain ? can i apply some filter on keystone to achieve that ? | 21:21 |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Reduce revoke events for disabled domains/projects https://review.openstack.org/371165 | 21:24 |
| *** ddieterly is now known as ddieterly[away] | 21:24 | |
| *** asettle has quit IRC | 21:24 | |
| *** ravelar has quit IRC | 21:24 | |
| *** spilla has quit IRC | 21:27 | |
| *** gyee has joined #openstack-keystone | 21:27 | |
| *** ChanServ sets mode: +v gyee | 21:27 | |
| *** ddieterly[away] is now known as ddieterly | 21:28 | |
| *** adriant has joined #openstack-keystone | 21:28 | |
| *** ravelar has joined #openstack-keystone | 21:40 | |
| *** joerch has joined #openstack-keystone | 21:40 | |
| *** ravelar has quit IRC | 21:41 | |
| *** ezpz has quit IRC | 21:42 | |
| *** AndyWojo has quit IRC | 21:45 | |
| *** jraim has quit IRC | 21:45 | |
| *** ntpttr_ has quit IRC | 21:45 | |
| *** adam_g has quit IRC | 21:45 | |
| *** knikolla has quit IRC | 21:45 | |
| *** wasmum has quit IRC | 21:46 | |
| *** pkoraca has quit IRC | 21:46 | |
| *** cargonza has quit IRC | 21:46 | |
| *** rm_work has quit IRC | 21:46 | |
| *** mjb has quit IRC | 21:46 | |
| *** madorn has quit IRC | 21:46 | |
| *** jamielennox has quit IRC | 21:46 | |
| *** jhesketh has quit IRC | 21:47 | |
| *** gus has quit IRC | 21:47 | |
| *** d34dh0r53 has quit IRC | 21:47 | |
| *** mrhillsman has quit IRC | 21:47 | |
| *** vkmc has quit IRC | 21:47 | |
| *** gus has joined #openstack-keystone | 21:48 | |
| *** jhesketh has joined #openstack-keystone | 21:49 | |
| *** jraim has joined #openstack-keystone | 21:49 | |
| *** pkoraca has joined #openstack-keystone | 21:51 | |
| *** adam_g has joined #openstack-keystone | 21:51 | |
| *** adam_g has quit IRC | 21:51 | |
| *** adam_g has joined #openstack-keystone | 21:51 | |
| *** rm_work has joined #openstack-keystone | 21:51 | |
| *** AndyWojo has joined #openstack-keystone | 21:51 | |
| *** d34dh0r53 has joined #openstack-keystone | 21:51 | |
| *** mjb has joined #openstack-keystone | 21:52 | |
| *** cargonza has joined #openstack-keystone | 21:52 | |
| *** knikolla has joined #openstack-keystone | 21:52 | |
| *** wasmum has joined #openstack-keystone | 21:54 | |
| *** spedione is now known as spedione|AWAY | 21:57 | |
| *** vkmc has joined #openstack-keystone | 21:57 | |
| *** madorn has joined #openstack-keystone | 21:59 | |
| *** mrhillsman has joined #openstack-keystone | 22:00 | |
| *** jamielennox has joined #openstack-keystone | 22:01 | |
| *** ChanServ sets mode: +v jamielennox | 22:01 | |
| *** atod has quit IRC | 22:01 | |
| openstackgerrit | Merged openstack/keystone: Trivial fixes in the ldap common functions https://review.openstack.org/370564 | 22:05 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Provide a default for [saml]/idp_sso_endpoint https://review.openstack.org/371184 | 22:05 |
| *** iurygregory_ has joined #openstack-keystone | 22:09 | |
| *** edmondsw has quit IRC | 22:14 | |
| *** itsuugo has quit IRC | 22:15 | |
| *** itsuugo has joined #openstack-keystone | 22:17 | |
| *** asettle has joined #openstack-keystone | 22:21 | |
| *** asettle has quit IRC | 22:26 | |
| *** tonytan4ever has quit IRC | 22:27 | |
| *** nicolasbock has quit IRC | 22:27 | |
| *** joerch has quit IRC | 22:28 | |
| *** ntpttr has quit IRC | 22:31 | |
| *** ddieterly is now known as ddieterly[away] | 22:34 | |
| *** itsuugo has quit IRC | 22:34 | |
| *** ntpttr has joined #openstack-keystone | 22:35 | |
| *** itsuugo has joined #openstack-keystone | 22:37 | |
| *** thumpba has joined #openstack-keystone | 22:41 | |
| *** ntpttr_ has joined #openstack-keystone | 22:41 | |
| *** itsuugo has quit IRC | 22:41 | |
| *** itsuugo has joined #openstack-keystone | 22:42 | |
| rderose | stevemar: we're still shooting for RC-2 on 367025, right? https://review.openstack.org/#/c/367025/ | 22:43 |
| rderose | stevemar: just notices that the bug milestone changed to o1 | 22:44 |
| rderose | is why I'm asking | 22:44 |
| openstackgerrit | Merged openstack/keystone: Move the responsibility for stdout to the CLI module https://review.openstack.org/370784 | 22:47 |
| stevemar | rderose: yes, we are still targeting rc2 for that | 22:51 |
| stevemar | rderose: the initial fix will go into o1, since that's where master is now pointing | 22:51 |
| stevemar | we will backport it to stable/newton | 22:51 |
| rderose | I see | 22:52 |
| rderose | thx | 22:52 |
| *** chrisshattuck has quit IRC | 22:55 | |
| *** ddieterly[away] is now known as ddieterly | 22:58 | |
| *** ddieterly has quit IRC | 23:00 | |
| *** atod has joined #openstack-keystone | 23:07 | |
| *** itsuugo has quit IRC | 23:08 | |
| *** itsuugo has joined #openstack-keystone | 23:09 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: (WIP) Update, correct, and enhance federation docs https://review.openstack.org/371210 | 23:11 |
| *** atod has quit IRC | 23:13 | |
| *** catintheroof has quit IRC | 23:21 | |
| *** asettle has joined #openstack-keystone | 23:22 | |
| *** itsuugo has quit IRC | 23:23 | |
| *** itsuugo has joined #openstack-keystone | 23:24 | |
| *** atod has joined #openstack-keystone | 23:24 | |
| *** asettle has quit IRC | 23:27 | |
| *** arunkant__ has quit IRC | 23:28 | |
| *** thumpba has quit IRC | 23:30 | |
| *** itsuugo has quit IRC | 23:35 | |
| stevemar | rderose: my bad, i should have mentioned that | 23:36 |
| stevemar | it's not immediately obvious | 23:36 |
| *** itsuugo has joined #openstack-keystone | 23:37 | |
| *** hoonetorg has quit IRC | 23:37 | |
| *** markvoelker has quit IRC | 23:39 | |
| *** BjoernT has quit IRC | 23:44 | |
| *** itsuugo has quit IRC | 23:49 | |
| *** itsuugo has joined #openstack-keystone | 23:51 | |
| *** tqtran has quit IRC | 23:52 | |
| *** hoonetorg has joined #openstack-keystone | 23:55 | |
| *** tqtran has joined #openstack-keystone | 23:55 | |
| *** thumpba has joined #openstack-keystone | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!