| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 00:03 |
|---|---|---|
| *** rcernin has joined #openstack-keystone | 00:19 | |
| *** rcernin has quit IRC | 00:23 | |
| *** rcernin has joined #openstack-keystone | 00:24 | |
| *** thorst has joined #openstack-keystone | 00:29 | |
| *** jmlowe has quit IRC | 00:32 | |
| *** jmlowe has joined #openstack-keystone | 00:36 | |
| *** thorst has quit IRC | 00:46 | |
| *** brad[] has quit IRC | 00:59 | |
| *** brad[] has joined #openstack-keystone | 01:00 | |
| *** gyee has quit IRC | 01:17 | |
| *** jamielennox has quit IRC | 01:20 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 01:20 |
| *** gus has quit IRC | 01:21 | |
| *** gus has joined #openstack-keystone | 01:22 | |
| *** jamielennox has joined #openstack-keystone | 01:23 | |
| *** thorst has joined #openstack-keystone | 01:29 | |
| *** rcernin has quit IRC | 01:32 | |
| *** rcernin has joined #openstack-keystone | 01:32 | |
| *** rcernin has quit IRC | 01:33 | |
| *** thorst has quit IRC | 01:34 | |
| *** gvrangan has joined #openstack-keystone | 01:37 | |
| *** gvrangan_odl has joined #openstack-keystone | 01:39 | |
| *** gvrangan__odl has joined #openstack-keystone | 01:41 | |
| *** gvrangan has quit IRC | 01:42 | |
| *** edmondsw has joined #openstack-keystone | 01:43 | |
| *** gvrangan_odl has quit IRC | 01:44 | |
| *** sapd has quit IRC | 01:46 | |
| *** edmondsw has quit IRC | 01:47 | |
| *** sapd has joined #openstack-keystone | 01:48 | |
| *** itlinux has joined #openstack-keystone | 01:53 | |
| *** annp has joined #openstack-keystone | 01:54 | |
| *** rcernin has joined #openstack-keystone | 01:55 | |
| *** gvrangan_odl has joined #openstack-keystone | 01:59 | |
| *** prashkre has joined #openstack-keystone | 02:00 | |
| *** gvrangan__odl has quit IRC | 02:02 | |
| *** prashkre has quit IRC | 02:04 | |
| *** prashkre has joined #openstack-keystone | 02:04 | |
| *** dikonoor has joined #openstack-keystone | 02:06 | |
| *** itlinux has quit IRC | 02:15 | |
| *** itlinux has joined #openstack-keystone | 02:16 | |
| *** jhesketh_ is now known as jhesketh | 02:22 | |
| *** thorst has joined #openstack-keystone | 02:46 | |
| *** thorst has quit IRC | 02:50 | |
| *** gvrangan_odl has quit IRC | 02:52 | |
| *** dave-mccowan has quit IRC | 02:59 | |
| *** namnh has joined #openstack-keystone | 02:59 | |
| *** itlinux has quit IRC | 03:00 | |
| openstackgerrit | Shan Guo proposed openstack/keystone master: Remove v2 token value model https://review.openstack.org/514554 | 03:19 |
| *** edmondsw has joined #openstack-keystone | 03:31 | |
| *** edmondsw has quit IRC | 03:35 | |
| *** rcernin has quit IRC | 04:21 | |
| *** panbalag has quit IRC | 04:27 | |
| *** gvrangan_odl has joined #openstack-keystone | 04:30 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 04:37 |
| *** rmcallis has quit IRC | 04:39 | |
| *** panbalag has joined #openstack-keystone | 04:41 | |
| *** rmcallis has joined #openstack-keystone | 04:42 | |
| *** rmcallis has quit IRC | 04:42 | |
| *** rmcallis has joined #openstack-keystone | 04:43 | |
| *** rcernin has joined #openstack-keystone | 04:45 | |
| *** thorst has joined #openstack-keystone | 04:51 | |
| *** alex_xu has quit IRC | 04:56 | |
| *** thorst has quit IRC | 04:56 | |
| *** alex_xu has joined #openstack-keystone | 04:59 | |
| *** prashkre has quit IRC | 04:59 | |
| *** prashkre_ has joined #openstack-keystone | 04:59 | |
| *** Trident has quit IRC | 05:03 | |
| *** gvrangan_odl has quit IRC | 05:06 | |
| *** jaosorior has quit IRC | 05:07 | |
| *** jaosorior has joined #openstack-keystone | 05:23 | |
| *** prashkre_ has quit IRC | 05:24 | |
| *** cloudnull has quit IRC | 05:32 | |
| *** eglute has quit IRC | 05:33 | |
| *** eglute has joined #openstack-keystone | 05:34 | |
| *** cloudnull has joined #openstack-keystone | 05:34 | |
| *** prashkre_ has joined #openstack-keystone | 05:47 | |
| *** cloudnull has quit IRC | 05:48 | |
| *** cloudnull has joined #openstack-keystone | 05:51 | |
| *** gvrangan has joined #openstack-keystone | 05:54 | |
| *** zhangjl has joined #openstack-keystone | 05:56 | |
| *** Suramya has joined #openstack-keystone | 05:58 | |
| *** alex_xu has quit IRC | 06:09 | |
| *** alex_xu has joined #openstack-keystone | 06:15 | |
| *** josecastroleon has quit IRC | 06:20 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Imported Translations from Zanata https://review.openstack.org/514529 | 06:37 |
| *** josecastroleon has joined #openstack-keystone | 06:38 | |
| *** pcaruana has joined #openstack-keystone | 06:39 | |
| *** josecastroleon has quit IRC | 06:49 | |
| *** thorst has joined #openstack-keystone | 06:53 | |
| *** tesseract has joined #openstack-keystone | 06:54 | |
| *** thorst has quit IRC | 06:57 | |
| *** ioggstream has joined #openstack-keystone | 07:04 | |
| *** josecastroleon has joined #openstack-keystone | 07:05 | |
| *** spectr has joined #openstack-keystone | 07:13 | |
| *** josecastroleon has quit IRC | 07:13 | |
| *** josecastroleon has joined #openstack-keystone | 07:27 | |
| *** magicboiz has joined #openstack-keystone | 07:35 | |
| *** magicboiz has quit IRC | 07:39 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/oslo.policy master: Imported Translations from Zanata https://review.openstack.org/514946 | 07:40 |
| *** AlexeyAbashkin has joined #openstack-keystone | 07:46 | |
| *** magicboiz has joined #openstack-keystone | 07:46 | |
| *** gmann is now known as gmann_afk | 07:54 | |
| *** zhangjl has quit IRC | 07:57 | |
| *** magicboiz has quit IRC | 08:05 | |
| *** hoonetorg has quit IRC | 08:07 | |
| *** zhangjl has joined #openstack-keystone | 08:14 | |
| *** thorst has joined #openstack-keystone | 08:14 | |
| *** thorst has quit IRC | 08:19 | |
| *** namnh_ has joined #openstack-keystone | 08:21 | |
| *** namnh has quit IRC | 08:23 | |
| *** hoonetorg has joined #openstack-keystone | 08:24 | |
| *** ioggstream has quit IRC | 08:33 | |
| *** zhangjl has quit IRC | 08:35 | |
| *** zhangjl has joined #openstack-keystone | 08:35 | |
| *** josecastroleon has quit IRC | 08:40 | |
| *** rmcallis has quit IRC | 08:41 | |
| *** Suramya has quit IRC | 08:45 | |
| *** ioggstream has joined #openstack-keystone | 08:46 | |
| *** namnh has joined #openstack-keystone | 08:51 | |
| *** namnh_ has quit IRC | 08:53 | |
| *** ioggstream has quit IRC | 08:58 | |
| *** rcernin has quit IRC | 08:59 | |
| *** ioggstream has joined #openstack-keystone | 09:00 | |
| *** jmlowe has quit IRC | 09:07 | |
| *** jmlowe_ has joined #openstack-keystone | 09:07 | |
| *** ioggstream has quit IRC | 09:18 | |
| *** ioggstream has joined #openstack-keystone | 09:21 | |
| *** nkinder has quit IRC | 09:33 | |
| *** prashkre has joined #openstack-keystone | 09:41 | |
| *** prashkre_ has quit IRC | 09:41 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/keystone master: Add non-voting rolling upgrade test https://review.openstack.org/514765 | 09:50 |
| *** nkinder has joined #openstack-keystone | 09:52 | |
| *** magicboiz has joined #openstack-keystone | 10:04 | |
| *** daidv has joined #openstack-keystone | 10:07 | |
| daidv | lbragstad, hi | 10:08 |
| *** magicboiz has quit IRC | 10:09 | |
| *** magicboiz has joined #openstack-keystone | 10:16 | |
| *** annp has quit IRC | 10:24 | |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/keystone master: Add non-voting rolling upgrade test https://review.openstack.org/514765 | 10:34 |
| *** pcaruana has quit IRC | 10:37 | |
| *** namnh has quit IRC | 10:38 | |
| *** gmann_afk is now known as gmann | 10:40 | |
| *** nicolasbock has joined #openstack-keystone | 10:55 | |
| *** josecastroleon has joined #openstack-keystone | 11:21 | |
| *** thorst has joined #openstack-keystone | 11:21 | |
| *** thorst has quit IRC | 11:26 | |
| *** panbalag has quit IRC | 11:26 | |
| *** dave-mccowan has joined #openstack-keystone | 11:31 | |
| *** belmoreira has joined #openstack-keystone | 11:33 | |
| *** prashkre_ has joined #openstack-keystone | 11:41 | |
| *** pcaruana has joined #openstack-keystone | 11:43 | |
| *** prashkre has quit IRC | 11:45 | |
| *** mvk has quit IRC | 11:58 | |
| *** Guest3211 has quit IRC | 11:59 | |
| *** mvk has joined #openstack-keystone | 12:01 | |
| *** pcaruana has quit IRC | 12:03 | |
| *** pcaruana has joined #openstack-keystone | 12:04 | |
| *** raildo has joined #openstack-keystone | 12:04 | |
| *** masuberu has joined #openstack-keystone | 12:06 | |
| *** thorst has joined #openstack-keystone | 12:08 | |
| *** masber has quit IRC | 12:09 | |
| *** amrith has joined #openstack-keystone | 12:14 | |
| *** amrith is now known as Guest7230 | 12:15 | |
| *** thorst_ has joined #openstack-keystone | 12:24 | |
| *** sbezverk has joined #openstack-keystone | 12:26 | |
| *** thorst has quit IRC | 12:26 | |
| *** Drankis has joined #openstack-keystone | 12:31 | |
| *** Guest7230 has quit IRC | 12:31 | |
| *** edmondsw has joined #openstack-keystone | 12:32 | |
| *** amrith_ has joined #openstack-keystone | 12:35 | |
| *** amrith_ is now known as Guest30707 | 12:35 | |
| *** edmondsw has quit IRC | 12:37 | |
| *** edmondsw has joined #openstack-keystone | 12:37 | |
| *** markvoelker has joined #openstack-keystone | 12:43 | |
| *** panbalag has joined #openstack-keystone | 12:55 | |
| *** panbalag has left #openstack-keystone | 12:56 | |
| *** gvrangan has quit IRC | 13:09 | |
| *** belmoreira has quit IRC | 13:10 | |
| *** aselius has quit IRC | 13:48 | |
| lbragstad | daidv: o/ | 13:50 |
| *** sbezverk has quit IRC | 13:50 | |
| *** gus has quit IRC | 13:51 | |
| *** gus has joined #openstack-keystone | 13:51 | |
| *** dikonoor has quit IRC | 13:54 | |
| *** dikonoor has joined #openstack-keystone | 13:55 | |
| *** gmann is now known as gmann_afk | 13:58 | |
| *** wes_dillingham has joined #openstack-keystone | 14:03 | |
| *** Guest30707 is now known as amrith | 14:10 | |
| *** Drankis has quit IRC | 14:16 | |
| *** ayoung_ has joined #openstack-keystone | 14:25 | |
| *** ayoung_ has quit IRC | 14:26 | |
| *** ayoung has quit IRC | 14:27 | |
| *** ayoung has joined #openstack-keystone | 14:27 | |
| *** david-lyle has quit IRC | 14:44 | |
| *** gema has left #openstack-keystone | 14:50 | |
| knikolla | o/ | 14:52 |
| *** david-lyle has joined #openstack-keystone | 14:53 | |
| *** sbezverk has joined #openstack-keystone | 14:56 | |
| *** AlexeyAbashkin has quit IRC | 14:58 | |
| knikolla | lbragstad: iam session now? | 14:59 |
| lbragstad | cmurphy: knikolla change of plans | 15:00 |
| lbragstad | google hangouts doesn't let you actually record unless you pay for it | 15:00 |
| lbragstad | hrybacki: has a meeting setup with blue jeans instead | 15:01 |
| lbragstad | https://bluejeans.com/8559013623 | 15:01 |
| *** AlexeyAbashkin has joined #openstack-keystone | 15:03 | |
| *** zaneb has joined #openstack-keystone | 15:03 | |
| lbragstad | edmondsw: gagehugo cmurphy knikolla hrybacki use https://bluejeans.com/8559013623 instead of the Google hangout | 15:03 |
| cmurphy | i'm here i just don't have a webcam | 15:03 |
| gagehugo | o/ | 15:06 |
| lbragstad | ayoung: are you going to be joining the policy meeting | 15:06 |
| ayoung | yep | 15:06 |
| lbragstad | ayoung: https://bluejeans.com/8559013623 | 15:06 |
| lbragstad | https://etherpad.openstack.org/p/analyzing-other-policy-systems | 15:08 |
| gagehugo | firefox crashed, lemme try chrome | 15:12 |
| *** thorst_ has quit IRC | 15:34 | |
| *** thorst has joined #openstack-keystone | 15:35 | |
| *** thorst has quit IRC | 15:39 | |
| *** pcaruana has quit IRC | 15:49 | |
| *** itlinux has joined #openstack-keystone | 16:01 | |
| *** jmlowe_ has quit IRC | 16:02 | |
| *** jmlowe has joined #openstack-keystone | 16:08 | |
| *** jmlowe has quit IRC | 16:11 | |
| zaneb | lbragstad: I think this was a really useful exercise, thanks for driving :) | 16:15 |
| lbragstad | zaneb: absolutely - thanks for attending | 16:20 |
| lbragstad | zaneb: this session was pretty free form - but for next week, is there a dedicated thing we should accomplish? | 16:21 |
| *** tesseract has quit IRC | 16:25 | |
| *** thorst has joined #openstack-keystone | 16:27 | |
| *** daidv has quit IRC | 16:32 | |
| *** gyee has joined #openstack-keystone | 16:37 | |
| *** AlexeyAbashkin has quit IRC | 16:38 | |
| *** rmcallis has joined #openstack-keystone | 17:04 | |
| *** dikonoor has quit IRC | 17:18 | |
| *** phalmos has joined #openstack-keystone | 17:20 | |
| *** aselius has joined #openstack-keystone | 17:23 | |
| *** phalmos_ has joined #openstack-keystone | 17:25 | |
| lbragstad | fwiw - i can't seem to figure out how to generate a list of things i can do given an AWS policy | 17:27 |
| *** phalmos has quit IRC | 17:27 | |
| *** rmascena has joined #openstack-keystone | 17:28 | |
| *** jmlowe has joined #openstack-keystone | 17:29 | |
| *** raildo has quit IRC | 17:30 | |
| *** ioggstream has quit IRC | 17:59 | |
| *** spilla has joined #openstack-keystone | 18:09 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 18:10 | |
| *** AlexeyAbashkin has quit IRC | 18:14 | |
| *** spilla has quit IRC | 18:24 | |
| *** catintheroof has joined #openstack-keystone | 18:47 | |
| *** catintheroof has quit IRC | 18:49 | |
| *** catintheroof has joined #openstack-keystone | 18:50 | |
| cmurphy | jdennis: do you know if mod_auth_mellon can understand an IdP-initiated flow that uses ECP? (as in the keystone to keystone case) | 19:34 |
| jdennis | cmurphy: mellon can do ECP, there is no such thing as IdP intiiated ECP however | 19:37 |
| jdennis | cmurphy: is there a specific problem you're encountering? | 19:39 |
| jdennis | cmurphy: in the k2k scenario one keystone is the sp and the other is the IdP | 19:43 |
| jdennis | cmurphy: I'm pretty sure we successfully tested the k2k case with mellon | 19:43 |
| *** wes_dillingham has quit IRC | 19:46 | |
| cmurphy | jdennis: when I try to get a token on the keystone SP I see an error from mellon on the SP, "Error processing ECP authn response. Lasso error: [101] Signature element not found.", but I can clearly see a <xmldsig:Signature> tag in the assertion | 19:46 |
| jdennis | cmurphy: is the xmldsig namespace properly defined within the scope? | 19:48 |
| jdennis | cmurphy: send me the assertion at jdennis@redhat.com and I'll take a peek | 19:49 |
| *** McClymontS has joined #openstack-keystone | 19:50 | |
| cmurphy | jdennis: sent | 19:51 |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:51 | |
| *** AlexeyAbashkin has quit IRC | 19:55 | |
| jdennis | I have some lasso tools I can run this though but it will take me a little while to do that, but one of the first things I noticed is the saml namespace declarations are in the soap header, not in the saml response. I'm not sure if that's valid because soap is just a wrapper and the saml message is unwrapped from soap before processing, hence it will lose the namespace declarations once unwrapped | 20:01 |
| jdennis | cmurphy: not sure what the specs say on this, I'd have to dig | 20:02 |
| jdennis | cmurphy: is this custom code you're authoring? can you move the namespace into the saml message and see if things work? | 20:03 |
| cmurphy | jdennis: no this is not custom, this is just the Keystone2Keystone auth plugin in keystoneauth | 20:03 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Add scope_types to RuleDefault objects https://review.openstack.org/510222 | 20:04 |
| cmurphy | it works just fine with mod_shib, but of course I'm sure that doesn't mean it's to spec | 20:04 |
| cmurphy | jdennis: thanks for the hint, I'll dig in that direction | 20:04 |
| *** edmondsw_ has joined #openstack-keystone | 20:06 | |
| jdennis | cmurphy: I'll pursue running it through lasso and see where it has problems | 20:06 |
| cmurphy | jdennis: awesome, thank you! | 20:07 |
| *** edmondsw has quit IRC | 20:09 | |
| *** McClymontS has quit IRC | 20:13 | |
| *** phalmos_ has quit IRC | 20:15 | |
| jdennis | cmurphy: can you also send me the idp metadata? | 20:17 |
| cmurphy | jdennis: sure | 20:18 |
| *** jmlowe has quit IRC | 20:24 | |
| *** thorst has quit IRC | 20:27 | |
| *** tristanC has quit IRC | 20:43 | |
| *** tristanC has joined #openstack-keystone | 20:45 | |
| *** thorst has joined #openstack-keystone | 20:48 | |
| *** thorst has quit IRC | 20:48 | |
| *** thorst has joined #openstack-keystone | 20:49 | |
| *** spilla has joined #openstack-keystone | 20:49 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 20:51 | |
| *** masuberu has quit IRC | 20:51 | |
| *** thorst has quit IRC | 20:53 | |
| *** edmondsw_ is now known as edmondsw | 20:55 | |
| *** AlexeyAbashkin has quit IRC | 20:55 | |
| *** prashkre_ has quit IRC | 21:15 | |
| *** rcernin has joined #openstack-keystone | 21:16 | |
| *** sbezverk has quit IRC | 21:27 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 21:29 |
| *** wes_dillingham has joined #openstack-keystone | 21:37 | |
| jdennis | cmurphy: I need the sp metadata too | 21:42 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement controller logic for system user assignments https://review.openstack.org/515215 | 21:47 |
| lbragstad | knikolla: ^ | 21:47 |
| lbragstad | that should get us back to where we were with testing global role assignments - but with the new direction after the ptg | 21:47 |
| *** AlexeyAbashkin has joined #openstack-keystone | 21:51 | |
| *** edmondsw has quit IRC | 21:51 | |
| *** AlexeyAbashkin has quit IRC | 21:55 | |
| *** edmondsw has joined #openstack-keystone | 21:56 | |
| *** edmondsw has quit IRC | 22:04 | |
| *** lbragstad changes topic to "Queens release schedule: https://releases.openstack.org/queens/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/5F0h9Hoe/keystone | Queens release schedule: https://releases.openstack.org/queens/schedule.html" | 22:06 | |
| *** spilla has quit IRC | 22:09 | |
| *** itlinux has quit IRC | 22:14 | |
| *** catintheroof has quit IRC | 22:18 | |
| *** edmondsw has joined #openstack-keystone | 22:28 | |
| *** edmondsw has quit IRC | 22:34 | |
| *** thorst has joined #openstack-keystone | 22:35 | |
| *** rmascena has quit IRC | 22:41 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 22:42 |
| *** thorst has quit IRC | 22:42 | |
| *** thorst has joined #openstack-keystone | 22:43 | |
| *** thorst has quit IRC | 22:46 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 22:52 | |
| *** AlexeyAbashkin has quit IRC | 22:56 | |
| *** masuberu has joined #openstack-keystone | 23:05 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 23:09 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 23:13 |
| *** gmann_afk is now known as gmann | 23:25 | |
| *** thorst has joined #openstack-keystone | 23:45 | |
| *** thorst has quit IRC | 23:46 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!