Thursday, 2016-12-08

*** asettle has joined #openstack-keystone00:12
*** spzala has joined #openstack-keystone00:14
*** asettle has quit IRC00:17
*** guoshan has joined #openstack-keystone00:24
openstackgerritEric Brown proposed openstack/keystone: Trivial indentation corrections in mappings doc  https://review.openstack.org/40836300:28
*** guoshan has quit IRC00:28
*** jamielennox is now known as jamielennox|away00:45
*** tqtran has quit IRC00:54
*** hoangcx has joined #openstack-keystone00:54
*** itisha has quit IRC00:59
*** chrisplo has quit IRC01:00
*** jistr|mtgs has quit IRC01:00
*** jistr has joined #openstack-keystone01:00
*** phalmos has joined #openstack-keystone01:08
*** tovin07 has quit IRC01:08
*** liujiong has joined #openstack-keystone01:10
*** adrian_otto has joined #openstack-keystone01:10
*** davechen has joined #openstack-keystone01:11
*** asettle has joined #openstack-keystone01:13
*** asettle has quit IRC01:18
*** guoshan has joined #openstack-keystone01:25
*** spzala has quit IRC01:25
*** adrian_otto has quit IRC01:25
*** bigjools has quit IRC01:25
*** dave-mccowan has joined #openstack-keystone01:26
*** zhangjl has joined #openstack-keystone01:28
*** bigjools has joined #openstack-keystone01:28
*** bigjools has quit IRC01:28
*** bigjools has joined #openstack-keystone01:28
*** browne has quit IRC01:28
*** spzala has joined #openstack-keystone01:34
*** diazjf has joined #openstack-keystone01:47
*** davechen1 has joined #openstack-keystone01:49
*** jamielennox|away is now known as jamielennox01:50
davechen1Anyone knows the possible reason for "None of the configured SessionInitiators handled the request" thrown from Horizon?01:53
davechen1we are trying to enable SSO with K-K federation but seems the confiugration for the horzion is not correctly set.01:54
*** diazjf has quit IRC01:57
*** diazjf has joined #openstack-keystone01:58
*** ayoung has joined #openstack-keystone02:03
*** ChanServ sets mode: +v ayoung02:03
openstackgerritayoung proposed openstack/keystone-specs: Role Check from Middleware  https://review.openstack.org/39162402:07
ayounglbragstad, morgan stevemar dstanek that updated version has another special case:  if role: "None" then the RBAC check will be skipped for the specified API.02:08
*** asettle has joined #openstack-keystone02:14
*** asettle has quit IRC02:19
*** phalmos has quit IRC02:28
*** lamt has joined #openstack-keystone02:29
*** Zer0Byte__ has quit IRC02:39
mfischstevemar: M-> N upgrade was non-detectable, no outage02:43
mfischso thanks guys02:43
morganay02:49
morganayoung: interesting..02:49
*** spzala has quit IRC02:54
*** asettle has joined #openstack-keystone03:15
*** asettle has quit IRC03:20
*** guoshan has quit IRC03:33
*** edtubill has joined #openstack-keystone03:34
*** guoshan has joined #openstack-keystone03:36
*** edmondsw has joined #openstack-keystone03:41
*** diazjf has quit IRC03:43
*** edmondsw has quit IRC03:46
*** guoshan has quit IRC03:52
*** chrisplo has joined #openstack-keystone03:56
*** chrisplo has quit IRC04:01
*** zhangjl has quit IRC04:12
*** zhangjl has joined #openstack-keystone04:12
*** asettle has joined #openstack-keystone04:16
*** zhangjl has quit IRC04:17
*** dave-mccowan has quit IRC04:19
*** asettle has quit IRC04:21
*** ayoung has quit IRC04:34
*** harlowja has joined #openstack-keystone04:37
*** GB21 has joined #openstack-keystone04:37
*** nicolasbock has quit IRC04:48
*** guoshan has joined #openstack-keystone04:53
*** spzala has joined #openstack-keystone04:54
*** adriant has quit IRC04:56
*** faizy has joined #openstack-keystone04:57
*** guoshan has quit IRC04:57
*** chrisplo has joined #openstack-keystone04:59
*** spzala has quit IRC04:59
*** links has joined #openstack-keystone05:05
*** asettle has joined #openstack-keystone05:17
*** faizy has quit IRC05:17
*** asettle has quit IRC05:22
*** faizy has joined #openstack-keystone05:28
*** harlowja has quit IRC05:46
*** GB21 has quit IRC05:49
*** guoshan has joined #openstack-keystone05:54
*** guoshan has quit IRC05:58
*** tovin07 has joined #openstack-keystone05:59
*** jaosorior has joined #openstack-keystone06:05
*** GB21 has joined #openstack-keystone06:09
*** asettle has joined #openstack-keystone06:18
*** alex_xu has quit IRC06:20
*** davechen has quit IRC06:23
*** asettle has quit IRC06:23
*** davechen has joined #openstack-keystone06:23
*** alex_xu has joined #openstack-keystone06:24
*** udesale has joined #openstack-keystone06:26
*** guoshan has joined #openstack-keystone06:28
*** voelzmo has joined #openstack-keystone06:37
*** voelzmo has quit IRC06:38
*** voelzmo has joined #openstack-keystone06:38
openstackgerritchenaidong1 proposed openstack/python-keystoneclient: Use assertIsNone(...) instead of assertEqual(None, ...)  https://review.openstack.org/40843006:38
*** richm has quit IRC06:40
*** tsufiev_ is now known as tsufiev06:45
*** jaosorior has quit IRC06:48
*** liujiong_66 has joined #openstack-keystone06:48
*** liujiong has quit IRC06:50
*** pnavarro has joined #openstack-keystone06:54
*** voelzmo has quit IRC06:57
*** tobberydberg has joined #openstack-keystone07:00
*** pnavarro has quit IRC07:00
*** faizy has quit IRC07:11
*** faizy has joined #openstack-keystone07:12
*** asettle has joined #openstack-keystone07:19
*** liujiong_66 is now known as liujiong07:23
*** asettle has quit IRC07:23
*** rcernin has joined #openstack-keystone07:26
*** edtubill has quit IRC07:27
*** magic has joined #openstack-keystone07:29
*** xiaoyang has quit IRC07:32
*** xiaoyang has joined #openstack-keystone07:32
*** magic has quit IRC07:33
*** zhangjl has joined #openstack-keystone07:36
*** GB21 has quit IRC07:40
*** tobberyd_ has joined #openstack-keystone07:44
*** tobberydberg has quit IRC07:48
*** GB21 has joined #openstack-keystone07:52
*** spzala has joined #openstack-keystone07:54
*** spzala has quit IRC07:59
*** xiaoyang has quit IRC08:00
*** arunkant has quit IRC08:10
openstackgerritchenaidong1 proposed openstack/python-keystoneclient: Use assertIsNone(...) instead of assertEqual(None, ...)  https://review.openstack.org/40843008:10
*** tobberyd_ has quit IRC08:16
*** tobberydberg has joined #openstack-keystone08:17
*** asettle has joined #openstack-keystone08:20
*** asettle has quit IRC08:24
*** jamielennox is now known as jamielennox|away08:33
*** pcaruana has joined #openstack-keystone08:58
*** zzzeek has quit IRC09:00
*** zzzeek has joined #openstack-keystone09:00
*** edmondsw has joined #openstack-keystone09:06
*** zhangjl has quit IRC09:10
openstackgerritchenaidong1 proposed openstack/python-keystoneclient: Use assertIsNone(...) instead of assertEqual(None, ...)  https://review.openstack.org/40843009:11
*** edmondsw has quit IRC09:11
*** zhangjl has joined #openstack-keystone09:11
*** zhangjl has quit IRC09:13
*** pnavarro has joined #openstack-keystone09:22
*** asettle has joined #openstack-keystone09:24
*** davechen1 has left #openstack-keystone09:36
*** mvk has quit IRC09:39
*** jaosorior has joined #openstack-keystone09:41
*** hogepodge has quit IRC09:45
*** hogepodge has joined #openstack-keystone09:46
*** arunkant has joined #openstack-keystone09:54
*** liujiong has quit IRC10:06
*** Zer0Byte__ has joined #openstack-keystone10:06
*** mvk has joined #openstack-keystone10:11
*** GB21 has quit IRC10:11
*** GB21 has joined #openstack-keystone10:34
*** hoangcx has quit IRC10:36
*** guoshan has quit IRC11:00
*** links has quit IRC11:00
*** hogepodge has quit IRC11:01
*** udesale has quit IRC11:04
*** udesale has joined #openstack-keystone11:05
*** GB21 has quit IRC11:06
*** richm has joined #openstack-keystone11:10
*** links has joined #openstack-keystone11:17
*** udesale has quit IRC11:17
*** Zer0Byte__ has quit IRC11:20
*** hogepodge has joined #openstack-keystone11:21
*** lamt has quit IRC11:24
*** hogepodge has quit IRC11:26
*** udesale has joined #openstack-keystone11:31
*** edtubill has joined #openstack-keystone11:33
*** hogepodge has joined #openstack-keystone11:38
*** voelzmo has joined #openstack-keystone11:39
*** GB21 has joined #openstack-keystone11:44
*** tobberydberg has quit IRC11:45
*** tobberydberg has joined #openstack-keystone11:46
*** hogepodge has quit IRC11:48
*** nicolasbock has joined #openstack-keystone11:49
*** spzala has joined #openstack-keystone11:55
*** GB21 has quit IRC11:55
*** spzala has quit IRC11:59
*** hogepodge has joined #openstack-keystone12:00
*** dave-mccowan has joined #openstack-keystone12:02
*** voelzmo has quit IRC12:06
*** jaosorior has quit IRC12:10
*** edtubill has quit IRC12:11
*** edtubill has joined #openstack-keystone12:15
*** edtubill has quit IRC12:21
samueldmqmorning keystone12:24
openstackgerritMerged openstack/keystone: Trivial indentation corrections in mappings doc  https://review.openstack.org/40836312:26
*** faizy has quit IRC12:36
*** jaosorior has joined #openstack-keystone12:37
*** links has quit IRC12:53
*** udesale has quit IRC12:58
*** udesale has joined #openstack-keystone12:58
*** guoshan has joined #openstack-keystone13:01
*** edmondsw_ has joined #openstack-keystone13:04
dstaneksamueldmq: morning13:04
*** links has joined #openstack-keystone13:05
*** guoshan has quit IRC13:05
*** edmondsw__ has joined #openstack-keystone13:06
*** edmondsw__ has quit IRC13:06
stevemardstanek: samueldmq morning!13:09
*** AndyWojo has quit IRC13:09
*** boris-42 has quit IRC13:09
*** AndyWojo has joined #openstack-keystone13:10
*** boris-42 has joined #openstack-keystone13:10
dstanekmorning stevemar13:10
samueldmqdstanek: stevemar: hi, morning13:12
openstackgerritDougal Matthews proposed openstack/keystone: Correct missspellings of secret  https://review.openstack.org/40861113:14
*** itisha has joined #openstack-keystone13:17
openstackgerritMerged openstack/python-keystoneclient: Use assertIsNone(...) instead of assertEqual(None, ...)  https://review.openstack.org/40843013:19
openstackgerritDougal Matthews proposed openstack/keystone: Correct missspellings of secret  https://review.openstack.org/40861113:25
*** ayoung has joined #openstack-keystone13:35
*** ChanServ sets mode: +v ayoung13:35
*** udesale has quit IRC13:42
openstackgerritMerged openstack/keystone: Fixed multiple warnings in tox -edocs  https://review.openstack.org/40831213:54
*** spzala has joined #openstack-keystone14:10
*** eandersson has joined #openstack-keystone14:11
openstackgerritMerged openstack/keystone: Revert "Rename doctor symptom in security_compliance"  https://review.openstack.org/40776314:18
openstackgerritSamuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS  https://review.openstack.org/40389814:19
openstackgerritSamuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS  https://review.openstack.org/40389814:24
*** guoshan has joined #openstack-keystone14:28
dstanekayoung: i know i've asked this before, but do you know of any good book on policy? (asking for a friend :)14:32
*** guoshan has quit IRC14:33
ayoungdstanek, https://www.amazon.com/U-S-Foreign-Policy-Michael-Cox/dp/0199585814/ref=sr_1_1?ie=UTF8&qid=1481207601&sr=8-1&keywords=us+foreign+policy14:33
ayoungdstanek, actually, I don't think you have asked this before14:34
ayoungand I don't have a recommendation for you.  I have a book on Web Services security, but it does not really lay things out.14:34
ayoungdstanek, I have a bunch of links at the bottom of the current spec, and I might suggest you start there14:35
dstanekayoung: will do thx14:36
dstanekforeign policy just isn't my style anyway14:36
dstaneki have general knowlegde, but was hoping to really dig into theory and advanced implementations14:36
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Print domain name in mapping_populate error message  https://review.openstack.org/40419714:37
ayoungdstanek, not sure how advanced the theory is here.  Mostly things grow from the principal of least privilege.14:38
ayoungdstanek, think in terms of Python Namespaces14:39
openstackgerritLance Bragstad proposed openstack/keystone-specs: Fix a spelling mistake in a PCI-DSS spec  https://review.openstack.org/40864814:39
ayoungits not much different than code:  how do you expose only what is required to get the job done, but not some much as to break your working assumptions14:40
ayoungheh, kindof like our discussion about the project ID from Tuesdays meeting14:40
*** thiagolib has quit IRC14:48
openstackgerritayoung proposed openstack/keystone: URL pattern based RBAC Management Interface  https://review.openstack.org/40180814:48
*** daemontool has joined #openstack-keystone14:49
ayoungdstanek, which name do you like better for the database table (and the object, API etc)  api_access or access_rule?14:53
openstackgerritMerged openstack/keystone: Add doctor check for debug mode enabled  https://review.openstack.org/40821814:55
openstackgerritMerged openstack/keystone: Upload service provider metadata to testshib  https://review.openstack.org/40074714:55
openstackgerritMerged openstack/keystone: Include mapped in the default auth methods  https://review.openstack.org/40381614:55
dstanekayoung: i don't really have a preference - probably would depend on what fields it contains14:57
dstaneki'm terrible at naming things14:57
ayoungdstanek, it contains:  the VERB (GET, PUT POST) and URL pattern for an API, and the role ID for the role that can access it14:58
ayoungdstanek,  https://review.openstack.org/#/c/391624/18/specs/keystone/ongoing/role-check-from-middleware.rst  line 26514:58
*** lamt has joined #openstack-keystone15:01
*** adrian_otto has joined #openstack-keystone15:02
*** phalmos has joined #openstack-keystone15:03
*** nklenke has joined #openstack-keystone15:12
*** chlong has joined #openstack-keystone15:13
*** links has quit IRC15:20
ayoungdstanek, another possiblity is api_role15:21
ayoungthat might be the most accurate15:21
openstackgerrithenry-nash proposed openstack/keystone: Pass request back into wsgi render_reponse  https://review.openstack.org/33072015:22
openstackgerrithenry-nash proposed openstack/keystone: Pass request back into wsgi render_reponse  https://review.openstack.org/33072015:31
openstackgerritSamuel Pilla proposed openstack/keystone: API Documentation for user password expires  https://review.openstack.org/40557415:31
*** henrynash has joined #openstack-keystone15:31
*** ChanServ sets mode: +v henrynash15:31
*** jaugustine has joined #openstack-keystone15:34
dstanekayoung: sounds relatively accurate. I wish I had a better noun for API though15:34
ayoungdstanek, yeah, me too.  URL is the resource locator, the Verb is the action.  In the past they were RPCs, but for REST the term API seems to be the most accepted15:36
*** adrian_otto has quit IRC15:40
*** ravelar has joined #openstack-keystone15:48
*** chris_hultin|AWA is now known as chris_hultin15:49
*** phalmos has quit IRC15:49
*** Marcellin__ has joined #openstack-keystone15:50
*** jaosorior has quit IRC15:52
*** jaosorior has joined #openstack-keystone15:53
*** narasimha_SV has joined #openstack-keystone15:55
openstackgerritLance Bragstad proposed openstack/keystone: Expose idempotency issue with bootstrap  https://review.openstack.org/40869415:57
*** henrynash has quit IRC15:58
narasimha_SVhttps://review.openstack.org/#/c/395967/ after adding this patch I am able to connect to LDAP and I can use the admin user in LDAP. but getting authorization error while running any keystone command15:59
*** phalmos has joined #openstack-keystone15:59
narasimha_SVhttp://paste.openstack.org/show/591824/15:59
*** henrynash has joined #openstack-keystone15:59
*** ChanServ sets mode: +v henrynash15:59
*** agrebennikov has joined #openstack-keystone16:02
*** agarner has joined #openstack-keystone16:03
*** phalmos has quit IRC16:04
*** daemontool has quit IRC16:05
openstackgerritayoung proposed openstack/keystone-specs: Role Check from Middleware  https://review.openstack.org/39162416:08
*** ayoung_ has joined #openstack-keystone16:09
*** ayoung_ has quit IRC16:09
*** ayoung_ has joined #openstack-keystone16:09
*** jaosorior has quit IRC16:11
openstackgerritRichard Avelar proposed openstack/keystone: Add unit tests for doctor's database symptoms  https://review.openstack.org/40706216:13
*** ayoung has quit IRC16:13
*** ayoung_ is now known as ayoung16:14
*** ayoung_ has joined #openstack-keystone16:14
*** adrian_otto has joined #openstack-keystone16:17
*** pcaruana has quit IRC16:19
*** guoshan has joined #openstack-keystone16:29
*** mvk has quit IRC16:30
*** rcernin has quit IRC16:31
*** guoshan has quit IRC16:34
*** knikolla has quit IRC16:42
*** knikolla has joined #openstack-keystone16:42
openstackgerritRodrigo Duarte proposed openstack/keystone: Federated authentication via ECP functional tests  https://review.openstack.org/32476916:53
*** tobberydberg has quit IRC16:55
*** browne has joined #openstack-keystone16:59
*** alex_xu has quit IRC17:00
*** nklenke has quit IRC17:00
*** alex_xu has joined #openstack-keystone17:02
*** rcernin has joined #openstack-keystone17:03
openstackgerritLance Bragstad proposed openstack/keystone: Make bootstrap idempotent when it needs to be  https://review.openstack.org/40871917:03
*** Ephur has joined #openstack-keystone17:04
lbragstaddolphm ^17:08
lbragstadit'd be good to have morgan review that, too17:09
dolphmlbragstad: awesome, will review17:09
lbragstaddolphm thanks17:09
*** knikolla has quit IRC17:11
*** henrynash has quit IRC17:12
*** knikolla has joined #openstack-keystone17:12
* stevemar grumbles17:13
samueldmqlbragstad: lgtm, thanks for addressing it quickly17:18
*** phalmos has joined #openstack-keystone17:18
samueldmqayoung: ayoung_: about your retry on deadlock bug17:19
ayoungsamueldmq, I asked for steps to reproduce17:19
samueldmqthose kind of deadlocks may happen in write operations to the database, correct ? thus delete/update/create17:19
samueldmqayoung: ^ should we always retry ?17:20
samueldmqwhat I mean is, this time it was that operation, tomorrow it'll be another.17:21
ayoungsamueldmq, I don't know.  It depends on how much info we have at the time17:21
ayoungneed to look into what shows in the log, and what is actionable in the exception17:21
samueldmqayoung: from the logs posted in the bug, I can clearly see it was the delete_user operation17:22
samueldmqayoung: can't see anything else useful besides that17:23
samueldmqayoung: just ping me if you need help or someone to discuss on that (since you're the reporter)17:23
ayoungsamueldmq, only because the original reporter stuck it in RH Bugzilla but not upstream17:24
ayoungI'm kindof "Meh" about it personally, but due dilligence....17:24
samueldmqayoung: gotcha. and you're trying to get more info from it17:24
ayoungor if someone else sees something comparable, we have a place to gather data17:25
*** diazjf has joined #openstack-keystone17:28
samueldmqayoung: there is more info here if you want to compare https://bugs.launchpad.net/keystone/+bug/160486217:30
openstackLaunchpad bug 1604862 in OpenStack Identity (keystone) "DBDeadlock: (_mysql_exceptions.OperationalError) while deleting user" [Medium,Fix released] - Assigned to Mikhail Nikolaenko (mnikolaenko)17:30
samueldmqayoung: was it against galera ?17:31
ayoungsamueldmq, yeah, but it might not hqave that patch applied17:32
samueldmqayoung: interesting, because in that other bug it was galera too, see https://bugs.launchpad.net/keystone/+bug/1604862/comments/117:33
openstackLaunchpad bug 1604862 in OpenStack Identity (keystone) "DBDeadlock: (_mysql_exceptions.OperationalError) while deleting user" [Medium,Fix released] - Assigned to Mikhail Nikolaenko (mnikolaenko)17:33
ayoungrhos-10  was Mitaka based17:33
ayoungsamueldmq, I'm going to mark mine a dupe of this one17:33
samueldmqayoung: I think that fair. In the original one there is more log and we can see the original call was to delete a revocation event.17:35
samueldmqayoung: in yours there is not enough logging, so it might just be the same17:35
ayounglooks like it17:37
ayoungsamueldmq, here's the downstream https://bugzilla.redhat.com/show_bug.cgi?id=139447017:37
openstackbugzilla.redhat.com bug 1394470 in openstack-keystone "keystone does not retry on deadlock Transactions [500 Error]" [Unspecified,New] - Assigned to ayoung17:37
samueldmqwow our bot also understands it17:41
samueldmqayoung: yeah, for me it seems to be a duplicate report. I have commented on your report17:42
samueldmqayoung: it would be nice if you could just confirm you're not running Newton and mark as duplicate. sounds good?17:42
ayoungsamueldmq, its on OSP10.17:42
ayoungthat is Newton17:42
openstackgerritRichard Avelar proposed openstack/keystone: Add doctor check for security_compliance  https://review.openstack.org/40874317:43
samueldmqayoung: ok, you had mentioned it was on rhos-10 which is Mitaka based17:43
ayoungEr...yeah, it is Mitaka....17:44
ayounghttp://adam.younglogic.com/2015/11/translating-between-rdorhos-and-upstream-openstack-releases/17:44
ayoungI was wrong again17:44
ayoung10 is Newton...can't keep it straigh17:44
ayoungt17:44
samueldmqayoung: ok, and you're sure they've applied N-3 already17:45
samueldmq(just making sure, that was released in N-3)17:45
ayoungNo clue...going to leave it as is unless someone bothers me about it.17:45
ayoungUpstream has it fixed, we should be good downstream17:46
samueldmqayoung: kk17:46
openstackgerritSamuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS  https://review.openstack.org/40389817:54
*** browne has quit IRC17:56
bretonayoung: samueldmq: the deadlock issue was fixed only for revocations17:58
bretonafaik17:58
ayoungbreton, ah...ok17:58
samueldmqbreton: interesting, but the bug it fixes says "[..] while deleting user"17:59
bretonsamueldmq: well, it seems that 2 deadlocks can happen :)17:59
rodrigodsknikolla, around?18:03
samueldmqbreton: it seemed odd to me. bug reports user delete, fix is with revocation event :)18:03
*** rm_work has quit IRC18:16
*** harlowja has joined #openstack-keystone18:17
oomichibknudson: hi, can I help the request jsonschema validation thing I heard from mriedem ?18:20
*** harlowja_ has joined #openstack-keystone18:20
*** harlowja has quit IRC18:22
*** rm_work has joined #openstack-keystone18:23
*** tobberydberg has joined #openstack-keystone18:25
narasimha_SVhttp://paste.openstack.org/show/591824/18:27
narasimha_SVanyone working on LDAP support to openstack18:27
*** guoshan has joined #openstack-keystone18:30
*** browne has joined #openstack-keystone18:30
*** tqtran has joined #openstack-keystone18:33
*** diazjf has quit IRC18:34
*** guoshan has quit IRC18:34
openstackgerritMerged openstack/keystone: Correct missspellings of secret  https://review.openstack.org/40861118:36
lbragstadravelar have you been able to recreate the py34 failures from https://review.openstack.org/#/c/407062/7 locally?18:38
*** tobberydberg has quit IRC18:39
ravelarlbragstad no but i ran recheck18:39
bknudsonoomichi: I proposed it here: https://review.openstack.org/#/c/404962/18:41
bknudsonwould be nice to get some quick feedback on whether this is the right way to do it.18:42
lbragstadravelar hmm - i can't reproduce it locally18:45
lbragstadall the py34 tests passed for me18:45
*** dave-mccowan has quit IRC18:49
*** adrian_otto has quit IRC18:51
bknudson"Correct missspellings of secret" -- was that on purpose??18:51
*** browne1 has joined #openstack-keystone18:53
*** browne has quit IRC18:53
lbragstadbknudson i thought the use of secrete was known as "this is just some secret value"18:53
bknudsonI was referring to the misspelling in the commit title.18:54
lbragstadoh - lol18:55
openstackgerritMerged openstack/keystone: Print domain name in mapping_populate error message  https://review.openstack.org/40419718:56
openstackgerritMerged openstack/keystone: Add test to expose bug 1625230  https://review.openstack.org/40755818:56
openstackbug 1625230 in OpenStack Identity (keystone) "Role Assignment Incorrectly Reports Inheritance when --name is Used" [Medium,In progress] https://launchpad.net/bugs/1625230 - Assigned to Samuel de Medeiros Queiroz (samueldmq)18:56
openstackgerritRichard Avelar proposed openstack/keystone: Add unit tests for doctor's database symptoms  https://review.openstack.org/40706218:59
openstackgerritRichard Avelar proposed openstack/keystone: Update doctor database symptom name and add tests  https://review.openstack.org/40706219:02
*** tobberydberg has joined #openstack-keystone19:06
openstackgerritRichard Avelar proposed openstack/keystone: Print name with duplicate error on user creation  https://review.openstack.org/40510419:09
*** tobberydberg has quit IRC19:10
openstackgerritMerged openstack/keystone: Get assignments with names honors inheritance flag  https://review.openstack.org/38097319:11
*** edmondsw_ has quit IRC19:17
*** edmondsw has joined #openstack-keystone19:17
* stevemar grumbles more19:21
samueldmqlbragstad: replied to https://review.openstack.org/#/c/407062 let me know if you agree19:23
lbragstadstevemar you having a case of the Mondays?19:25
*** ravelar has quit IRC19:27
bknudsonlbragstad: probably because the leafs lost.19:28
lbragstadbknudson probably19:29
* lbragstad whooop whooop 19:30
*** guoshan has joined #openstack-keystone19:31
*** guoshan has quit IRC19:35
lbragstadwow dubnyk had a good game19:36
*** adrian_otto has joined #openstack-keystone19:39
*** agrebennikov_ has joined #openstack-keystone19:41
*** agrebennikov has quit IRC19:41
*** rcernin has quit IRC19:43
stevemarbknudson: ha19:47
stevemarlbragstad: no, my one appointment in the morning has derailed my entire day19:48
lbragstadstevemar ah19:51
*** ravelar has joined #openstack-keystone19:52
*** rcernin has joined #openstack-keystone19:57
openstackgerritRichard Avelar proposed openstack/keystone: Add unit tests for doctor's database symptoms  https://review.openstack.org/40706219:59
stevemarravelar: is there a reason why you renamed the doctor import to doc_database? meant to ask that earlier20:00
ravelarstevemar isn't there a database import already there?20:02
stevemarravelar: what the, howd i miss that!?20:04
stevemarravelar: i swear i looked at the imports earlier.. :)20:04
ravelarstevemar haha no problem:)20:04
*** tobberydberg has joined #openstack-keystone20:07
*** henrynash has joined #openstack-keystone20:09
*** ChanServ sets mode: +v henrynash20:09
*** ayoung has quit IRC20:12
*** ayoung_ has quit IRC20:12
*** ayoung has joined #openstack-keystone20:12
*** ChanServ sets mode: +v ayoung20:12
*** jamielennox|away is now known as jamielennox20:13
*** tobberydberg has quit IRC20:19
*** spzala has quit IRC20:22
openstackgerritMerged openstack/python-keystoneclient: Deprecate the generic client  https://review.openstack.org/40784420:27
*** d0ugal has quit IRC20:29
*** narasimha_SV has quit IRC20:30
*** ravelar has quit IRC20:31
*** ravelar has joined #openstack-keystone20:33
*** d0ugal has joined #openstack-keystone20:35
*** henrynash has quit IRC20:36
*** spzala has joined #openstack-keystone20:36
*** spzala has quit IRC20:39
*** sanagikoki has joined #openstack-keystone20:40
*** sanagikoki has quit IRC20:41
*** adriant has joined #openstack-keystone20:42
*** tobberydberg has joined #openstack-keystone20:45
*** diazjf has joined #openstack-keystone20:47
*** dave-mccowan has joined #openstack-keystone20:49
*** tobberydberg has quit IRC20:50
*** rcernin has quit IRC20:51
*** rcernin has joined #openstack-keystone20:51
openstackgerritSamuel Pilla proposed openstack/keystone: API Documentation for user password expires  https://review.openstack.org/40557420:52
openstackgerritMerged openstack/keystone: Print name with duplicate error on user creation  https://review.openstack.org/40510420:54
openstackgerritMerged openstack/keystone-specs: Fix a spelling mistake in a PCI-DSS spec  https://review.openstack.org/40864820:57
*** itisha has quit IRC20:59
openstackgerritLance Bragstad proposed openstack/keystone: Make bootstrap idempotent when it needs to be  https://review.openstack.org/40871921:01
*** lamt has quit IRC21:01
*** ravelar has quit IRC21:03
openstackgerritGage Hugo proposed openstack/keystone: Add reason to notifications for PCI-DSS  https://review.openstack.org/39675221:04
stevemarlbragstad: nooooo ravelar is gone21:06
lbragstadstevemar like the wind....21:07
stevemarlbragstad: had comments on https://review.openstack.org/#/c/405104/ -- i'll bug him to follow up on them21:07
*** rcernin has quit IRC21:09
*** Ephur has quit IRC21:09
*** chlong has quit IRC21:10
*** rcernin has joined #openstack-keystone21:11
lbragstadbreton do you know if we have a list of all places where deadlocks happen (re: https://bugs.launchpad.net/keystone/+bug/1648542)21:16
openstackLaunchpad bug 1648542 in OpenStack Identity (keystone) "keystone does not retry on deadlock Transactions [500 Error]" [Medium,Confirmed]21:16
openstackgerritSamuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS  https://review.openstack.org/40389821:17
*** lamt has joined #openstack-keystone21:19
openstackgerritSamuel Pilla proposed openstack/keystone: API Documentation for user password expires  https://review.openstack.org/40557421:20
*** ravelar has joined #openstack-keystone21:26
lbragstadstevemar ravelar21:27
lbragstadravelar stevemar21:27
ravelarlbragstad o/21:27
lbragstadravelar did you happen to see the comments from stevemar  on https://review.openstack.org/#/c/405104/ ?21:28
ravelarlbragstad just saw it, arent some of those like policy and trust unable to create duplicates from an operator perspective?21:29
ravelarI mean, I know one can be created if the id is not unique, but an operator cannot dictate what the id is for those?21:29
stevemarravelar: hmm maybe, so why do we even have the conflict wrapper there :O21:31
*** guoshan has joined #openstack-keystone21:32
ravelarstevemar from what I could see, it would get raised if an id was duplicate but I couldn't get it to give me a duplicated error when creating duplicate trusts/policies with the same info. :/21:32
*** mvk has joined #openstack-keystone21:33
lbragstadravelar the only thing an operator can dictate an id for is regions I think21:33
*** guoshan has quit IRC21:36
ravelarlbragstad right, so how are things like trust supposed to raise a duplicate error if having the same project, role, trustor and trustee on "trust create" doesn't raise one?21:40
lbragstadthe unique constraint in those situations from come the fact the id is the primary key of the table21:41
ravelarlbragstad so can an operator cause a duplicate error?21:42
ravelarstevemar: I will get to the remaining changes from your comments and add the tests as well for the remaining objects21:42
lbragstadthey could if they create enough trusts :)21:42
ravelarlbragstad where ids would overlap?21:42
lbragstadright21:44
ravelarlbragstad ahh okay :)21:45
lbragstadravelar http://stackoverflow.com/questions/4306420/math-question-regarding-pythons-uuid421:45
antwashravelar : you'll be great one day haha21:46
*** tobberydberg has joined #openstack-keystone21:46
*** lamt has quit IRC21:48
bretonlbragstad: no, i've only seen it in revocations21:48
bretonlbragstad: and ayoung now ran into it in identity backend21:49
*** lamt has joined #openstack-keystone21:49
bretonlbragstad: this is a pretty rare thing and happens only when many items gets deleted/updates21:49
ayoungbreton, I didn't...was just reported by someone in RH Bugzilla,. with no steps to repro21:49
ayoungthink rally, though21:49
lbragstadbreton hmmm - i'm going to update it to be identity specific then21:49
bretonayoung: i think rally too21:50
bretonlbragstad: sql specific21:50
bretonlbragstad: i think it can happen on any sql backend21:50
lbragstadbreton and sql specific21:50
lbragstadbreton it can - but for fixing that case it should only be in the identity backend, right/21:50
lbragstadbreton i was contemplating making the bug generic enough so that a patch to address all the conflicts would close it - but if we don't know what all of those are, then I'd say let's fix them independently21:51
lbragstads/conflict/deadlocks/21:52
lbragstadantwash i like the positivity ;)21:52
lbragstadantwash and ravelar is already great!21:52
antwashlbragstad : yeah he's great man, just messing with him he's over here beating his head on the keyboard lol21:53
openstackgerritMerged openstack/keystone: Add unit tests for doctor's database symptoms  https://review.openstack.org/40706221:53
lbragstadantwash lol - you sit next to him now?21:54
antwashlbragstad : If that happened I wouldn't get no work done lol -- he's was at my desk showing me the cool keystone stuff he gets to do.21:55
ravelarlbragstad don't encourage him ha.21:55
lbragstadantwash lob a nerf dart at ravelar for me please ;p21:56
stevemarantwash: ravelar keystone has cool stuff?21:56
antwashlbragstad : haha most def, specially when he's going on his keystone pep8 failing rant!21:57
lbragstadantwash lol21:57
ravelarantwash: you're a good liar, you'd be great for this game called "resistance" lbragstad was destroying me at it ha21:57
*** ayoung has quit IRC21:57
lbragstadravelar ++21:58
ravelarstevemar: its cool when it works ha21:58
lbragstadravelar or when you remember to run pep8 checks before pushing patches to gerrit ;)21:58
stevemarravelar: keystone works? o_O21:58
lbragstadoh - shots fired!21:58
*** tobberydberg has quit IRC21:58
antwashravelar : Your new job is showing me the ins & outs of keystone -- need to get some patches up :)21:59
stevemarravelar: you know i went 3 for 3 when playing resistance with lbragstad21:59
*** adrian_otto has quit IRC21:59
* lbragstad high-fives stevemar 21:59
stevemarno one ever expects the canadian to be the spy21:59
antwashhahah the resistance game, I heard about that!21:59
lbragstadtopol's still trying to figure out what happened22:00
ravelarstevemar: haha that's awesome, lbragstad was giving me so much grief. All he would do is stare at me and everyone immediately became suspicious of me22:00
*** chris_hultin is now known as chris_hultin|AWA22:01
lbragstadravelar it didn't help that you giggled the *whole* game22:01
lbragstadme: ravelar are you lying?22:05
lbragstadravelar : <giggles> no!22:05
lbragstadit was all mighty suspicious22:05
knikollarodrigods: yeah, still around?22:06
ravelarlbragstad cause you cant expect me not to when I know how it looked. You would say "I don't trust you" and it was more likely that me, the new keystone member at the time, we going to come under scrutiny22:08
lbragstadbaha!22:08
lbragstadsounds like we need a rematch - but with more people22:09
ravelarlbragstad ready this time! and maybe ease up on the alcohol ha22:09
lbragstadbooze + the resistance = great team bonding22:09
ravelarlbragstad ++ just 6 people was great. can only imagine 10-1222:10
*** diazjf has quit IRC22:13
lbragstadit's a blast - i try to remember to bring my cards every time I travel somewhere22:13
*** lamt has quit IRC22:14
openstackgerritSamuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS  https://review.openstack.org/40389822:16
openstackgerritSamuel Pilla proposed openstack/keystone: API Documentation for user password expires  https://review.openstack.org/40557422:21
*** diazjf has joined #openstack-keystone22:21
*** tobberydberg has joined #openstack-keystone22:25
*** phalmos has quit IRC22:25
*** jamielennox is now known as jamielennox|away22:29
lbragstadstevemar dolphm https://review.openstack.org/#/c/408834/122:31
lbragstadand https://review.openstack.org/#/c/408835/122:31
lbragstadstable/mitaka https://review.openstack.org/#/c/408837/ and https://review.openstack.org/#/c/408838/22:34
*** jamielennox|away is now known as jamielennox22:34
*** tobberydberg has quit IRC22:36
*** ravelar has quit IRC22:39
*** spzala has joined #openstack-keystone22:39
stevemarlbragstad: done22:41
*** spzala has quit IRC22:44
*** henrynash has joined #openstack-keystone22:44
*** ChanServ sets mode: +v henrynash22:44
*** edmondsw has quit IRC22:45
* dolphm salutes lbragstad22:45
*** chris_hultin|AWA is now known as chris_hultin22:48
*** jaugustine has quit IRC22:51
lbragstaddolphm stevemar thanks for the quick reviews22:52
*** henrynash has quit IRC22:55
*** agrebennikov_ has quit IRC22:55
openstackgerritLance Bragstad proposed openstack/keystone: Remove exception from v2 validation path  https://review.openstack.org/40497722:57
openstackgerritLance Bragstad proposed openstack/keystone: Move V2TokenDataHelper to the v2.0 controller  https://review.openstack.org/38938322:57
*** pnavarro has quit IRC23:00
*** tobberydberg has joined #openstack-keystone23:03
*** david-lyle_ has joined #openstack-keystone23:05
*** david-lyle has quit IRC23:07
*** chrisplo_ has joined #openstack-keystone23:08
*** chrisplo has quit IRC23:11
*** chris_hultin is now known as chris_hultin|AWA23:11
*** rcernin has quit IRC23:11
*** tobberydberg has quit IRC23:13
*** chris_hultin|AWA is now known as chris_hultin23:15
*** ravelar has joined #openstack-keystone23:15
*** ravelar has quit IRC23:20
*** chris_hultin is now known as chris_hultin|AWA23:21
*** ayoung has joined #openstack-keystone23:24
*** ChanServ sets mode: +v ayoung23:24
*** guoshan has joined #openstack-keystone23:32
*** rcernin has joined #openstack-keystone23:33
*** david-lyle_ is now known as david-lyle23:35
*** guoshan has quit IRC23:37
*** tobberydberg has joined #openstack-keystone23:40
*** rcernin has quit IRC23:49
*** jamielennox is now known as jamielennox|away23:49
*** tobberydberg has quit IRC23:53

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!