| *** lbragstad has joined #openstack-keystone | 00:39 | |
| *** ChanServ sets mode: +o lbragstad | 00:39 | |
| *** lbragstad has quit IRC | 00:47 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/517476 | 00:47 |
|---|---|---|
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/517477 | 00:48 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/517476 | 00:53 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/517477 | 00:54 |
| *** zhurong has joined #openstack-keystone | 00:55 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 01:09 | |
| *** AlexeyAbashkin has quit IRC | 01:13 | |
| *** aselius has quit IRC | 01:13 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 01:27 |
| *** itlinux has joined #openstack-keystone | 01:32 | |
| *** wes_dillingham has quit IRC | 01:41 | |
| *** itlinux has quit IRC | 02:03 | |
| *** lbragstad has joined #openstack-keystone | 02:08 | |
| *** ChanServ sets mode: +o lbragstad | 02:08 | |
| *** namnh has joined #openstack-keystone | 02:24 | |
| *** zhurong has quit IRC | 02:30 | |
| *** lbragstad has quit IRC | 02:34 | |
| *** zhurong has joined #openstack-keystone | 02:39 | |
| *** thorst has joined #openstack-keystone | 02:55 | |
| *** thorst has quit IRC | 02:58 | |
| *** thorst has joined #openstack-keystone | 02:58 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 03:10 | |
| *** AlexeyAbashkin has quit IRC | 03:10 | |
| *** thorst has quit IRC | 03:13 | |
| *** nicolasbock has quit IRC | 03:16 | |
| *** lbragstad has joined #openstack-keystone | 03:31 | |
| *** ChanServ sets mode: +o lbragstad | 03:31 | |
| *** prashkre has joined #openstack-keystone | 03:44 | |
| *** agrebennikov has joined #openstack-keystone | 03:51 | |
| *** lbragstad has quit IRC | 03:54 | |
| *** prashkre has quit IRC | 04:13 | |
| *** agrebennikov has quit IRC | 04:37 | |
| *** zhurong has quit IRC | 04:43 | |
| *** prashkre has joined #openstack-keystone | 04:47 | |
| *** prashkre has quit IRC | 04:53 | |
| openstackgerrit | Merged openstack/keystone master: Deprecate policies API https://review.openstack.org/503828 | 05:12 |
| *** zhurong has joined #openstack-keystone | 05:56 | |
| *** lifeless has quit IRC | 05:59 | |
| *** prashkre has joined #openstack-keystone | 06:05 | |
| *** prashkre has quit IRC | 06:08 | |
| *** aojea has joined #openstack-keystone | 06:32 | |
| *** namnh has quit IRC | 06:32 | |
| *** aojea has quit IRC | 06:34 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Imported Translations from Zanata https://review.openstack.org/514529 | 06:40 |
| *** aojea has joined #openstack-keystone | 06:42 | |
| *** aojea has quit IRC | 06:43 | |
| *** jaosorior has joined #openstack-keystone | 06:46 | |
| *** thorst has joined #openstack-keystone | 06:54 | |
| *** aojea has joined #openstack-keystone | 06:57 | |
| *** spectr has joined #openstack-keystone | 07:05 | |
| *** aojea has quit IRC | 07:07 | |
| *** pcaruana has joined #openstack-keystone | 07:24 | |
| *** zhurong has quit IRC | 07:36 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 08:06 | |
| *** aojea has joined #openstack-keystone | 08:08 | |
| *** tesseract has joined #openstack-keystone | 08:10 | |
| *** aojea has quit IRC | 08:13 | |
| *** dims has quit IRC | 08:46 | |
| *** dims has joined #openstack-keystone | 08:48 | |
| *** hoonetorg has quit IRC | 09:50 | |
| *** jsheeren has joined #openstack-keystone | 09:50 | |
| jsheeren | hi all, the password hashing method for keystone users, is that sha-512? | 09:50 |
| jsheeren | i found an old wiki article: https://wiki.openstack.org/wiki/Security/Icehouse/Keystone#Hashing_Algorithms | 09:51 |
| jsheeren | i was wondering if this is still valid | 09:51 |
| *** links has quit IRC | 09:58 | |
| *** hoonetorg has joined #openstack-keystone | 10:07 | |
| *** aojea has joined #openstack-keystone | 10:09 | |
| *** daidv has quit IRC | 10:10 | |
| *** aojea has quit IRC | 10:15 | |
| *** rcernin has joined #openstack-keystone | 10:21 | |
| *** annp has quit IRC | 10:27 | |
| *** iurygregory has quit IRC | 11:06 | |
| *** nicolasbock has joined #openstack-keystone | 11:11 | |
| *** ygl has joined #openstack-keystone | 11:28 | |
| ygl | HI all | 11:28 |
| ygl | I have a query regarding keystone federation | 11:28 |
| ygl | can anyone help me please | 11:29 |
| odyssey4me | ygl on IRC it is usually best to just ask the question, rather than ask if you can ask a question | 11:30 |
| odyssey4me | if someone is able to help, they will respond to the question | 11:30 |
| ygl | odyssey4me: is federated keystone same as integrating keystone with ldap ? | 11:30 |
| odyssey4me | nope | 11:30 |
| ygl | odyssey4me: whats the difference ? | 11:31 |
| odyssey4me | federated keystone allows the auth to be done via an external trusted party | 11:31 |
| *** panbalag has joined #openstack-keystone | 11:31 | |
| ygl | odyssey4me: so in this case is LDAP not an external iDP ? | 11:31 |
| odyssey4me | with ldap integration it is keystone that manages the whole transaction - it just uses ldap as the database for the auth details | 11:31 |
| odyssey4me | with federation keystone does not auth, it trusts something else to auth | 11:32 |
| ygl | odyssey4me: oh ok got it | 11:32 |
| ygl | odyssey4me: thats wonderful you have cleared my doubt | 11:32 |
| ygl | odyssey4me: thanks a lot | 11:32 |
| odyssey4me | happy to have helped | 11:32 |
| *** panbalag has left #openstack-keystone | 11:34 | |
| *** ygl has quit IRC | 11:35 | |
| *** efried is now known as fried_rice | 11:50 | |
| *** raildo has joined #openstack-keystone | 12:08 | |
| *** aojea has joined #openstack-keystone | 12:11 | |
| *** aloga has quit IRC | 12:12 | |
| *** raildo has quit IRC | 12:14 | |
| *** raildo has joined #openstack-keystone | 12:15 | |
| *** aojea has quit IRC | 12:16 | |
| *** thorst has quit IRC | 12:20 | |
| *** thorst has joined #openstack-keystone | 12:20 | |
| *** wes_dillingham has joined #openstack-keystone | 12:22 | |
| *** jsheeren has quit IRC | 12:34 | |
| *** catintheroof has joined #openstack-keystone | 12:37 | |
| *** catintheroof has quit IRC | 12:37 | |
| *** catintheroof has joined #openstack-keystone | 12:37 | |
| *** iurygregory has joined #openstack-keystone | 12:42 | |
| *** panbalag has joined #openstack-keystone | 12:53 | |
| *** rcernin has quit IRC | 12:54 | |
| *** ygl has joined #openstack-keystone | 12:58 | |
| *** ygl has left #openstack-keystone | 12:58 | |
| *** Dinesh_Bhor has quit IRC | 13:08 | |
| *** aojea has joined #openstack-keystone | 13:12 | |
| *** aojea has quit IRC | 13:16 | |
| *** lbragstad has joined #openstack-keystone | 13:31 | |
| *** ChanServ sets mode: +o lbragstad | 13:31 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/517476 | 13:42 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/517477 | 13:42 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 13:55 |
| panbalag | lbragstad: ping | 13:58 |
| panbalag | lbragstad: i'm seeing this issue with pike - the token is empty even after I try running 'openstack token issue' multiple times. this is a triple0 based deployment with containers | 14:00 |
| panbalag | lbragstad: *token database is empty | 14:00 |
| panbalag | lbragstad: I even tried running other commands like 'nova list' - this usually populates the token database (verified it on earlier releases) | 14:01 |
| panbalag | lbragstad: any idea what could be wrong here? | 14:01 |
| lbragstad | panbalag: everything still works, right? | 14:01 |
| lbragstad | panbalag: when you run `nova list` you still get back a list of instances? | 14:02 |
| panbalag | lbragstad: everything works. I'm just trying to verify that token flush works - https://bugs.launchpad.net/keystone/+bug/1649616 | 14:03 |
| openstack | Launchpad bug 1649616 in OpenStack Identity (keystone) ocata "Keystone Token Flush job does not complete in HA deployed environment" [Medium,In progress] - Assigned to Raildo Mascena de Sousa Filho (raildo) | 14:03 |
| lbragstad | panbalag: i believe tripleo changed their default token provider around that time frame | 14:03 |
| lbragstad | panbalag: i want to say they moved from uuid to fernet | 14:03 |
| lbragstad | uuid tokens needed to be persisted in the database | 14:03 |
| lbragstad | fernet tokens are non-persistent | 14:03 |
| lbragstad | so they're never actually persisted anywhere | 14:04 |
| panbalag | lbragstad: oh ok. | 14:04 |
| lbragstad | if you're using fernet - you shouldn't need to run or use token flush | 14:04 |
| lbragstad | which is good :) | 14:04 |
| panbalag | lbragstad: ok. so to change back to uuid, i only need to change "provider=fernet" to "provider=uuid" under [token] in keystone.conf? | 14:07 |
| panbalag | :q! | 14:07 |
| lbragstad | panbalag: yeah - that's what you would need to do if you want to use uuid over fernet | 14:07 |
| lbragstad | (but i wouldn't suggest doing that) | 14:08 |
| panbalag | lbragstad: will be changing only to verify token flush for uuid. then will revert back to fernet. | 14:14 |
| *** agrebennikov has joined #openstack-keystone | 14:18 | |
| *** sbezverk has quit IRC | 14:23 | |
| lbragstad | panbalag: awesome | 14:25 |
| *** panbalag has quit IRC | 14:29 | |
| *** prashkre has joined #openstack-keystone | 14:30 | |
| prashkre | lbragstad: please take a look at https://review.openstack.org/#/c/515409/ | 14:38 |
| lbragstad | prashkre: looks good - it looks ready for a release note and we'll be good to go | 14:42 |
| *** panbalag has joined #openstack-keystone | 14:46 | |
| *** sambetts|afk has quit IRC | 14:51 | |
| *** itlinux has joined #openstack-keystone | 14:52 | |
| *** swain has joined #openstack-keystone | 14:53 | |
| *** aojea has joined #openstack-keystone | 15:13 | |
| *** aojea has quit IRC | 15:17 | |
| *** itlinux has quit IRC | 15:20 | |
| openstackgerrit | prashkre proposed openstack/keystone master: Filter users/groups in ldap with whitespaces https://review.openstack.org/515409 | 15:23 |
| *** jaosorior has quit IRC | 15:27 | |
| *** itlinux has joined #openstack-keystone | 15:29 | |
| *** prashkre has quit IRC | 15:34 | |
| *** links has joined #openstack-keystone | 15:36 | |
| *** kmalloc has joined #openstack-keystone | 15:37 | |
| kmalloc | mornin all :) | 15:37 |
| lbragstad | kmalloc: o/ | 15:47 |
| lbragstad | kmalloc: does this make sense? https://trello.com/c/C1INH5AI/7-define-default-roles | 15:47 |
| kmalloc | I rememebered to turn off my bouncer last night, was refreshing. | 15:47 |
| kmalloc | looking | 15:48 |
| lbragstad | kmalloc: i'm attempting to port the roadmap we had into something a little more formal https://trello.com/b/bpWycnwa/policy-roadmap | 15:48 |
| lbragstad | instead of https://etherpad.openstack.org/p/queens-PTG-keystone-policy-roadmap | 15:48 |
| kmalloc | that looks pretty close. | 15:48 |
| lbragstad | cc hrybacki ^ | 15:48 |
| *** spectr has quit IRC | 15:49 | |
| *** AlexeyAbashkin has quit IRC | 15:53 | |
| *** fried_rice has quit IRC | 16:05 | |
| *** fried_rice has joined #openstack-keystone | 16:18 | |
| *** fried_rice is now known as fried_rolls | 16:18 | |
| *** gyee has joined #openstack-keystone | 16:27 | |
| *** itlinux has quit IRC | 16:39 | |
| *** itlinux has joined #openstack-keystone | 16:43 | |
| *** tesseract has quit IRC | 16:54 | |
| *** links has quit IRC | 16:55 | |
| *** swain has quit IRC | 17:13 | |
| *** aojea has joined #openstack-keystone | 17:14 | |
| *** aojea has quit IRC | 17:18 | |
| *** jmlowe has quit IRC | 17:20 | |
| *** catintheroof has quit IRC | 17:31 | |
| *** catintheroof has joined #openstack-keystone | 17:33 | |
| *** lbragstad has quit IRC | 17:37 | |
| *** arunkant has joined #openstack-keystone | 17:39 | |
| *** arunkant_ has joined #openstack-keystone | 17:39 | |
| *** aselius has joined #openstack-keystone | 17:41 | |
| *** panbalag has left #openstack-keystone | 17:41 | |
| *** catintheroof has quit IRC | 17:45 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 17:45 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/517476 | 17:47 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/517477 | 17:47 |
| *** AlexeyAbashkin has quit IRC | 17:50 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/517476 | 17:51 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/517477 | 17:51 |
| *** itlinux has quit IRC | 17:51 | |
| *** catintheroof has joined #openstack-keystone | 17:53 | |
| *** itlinux has joined #openstack-keystone | 18:01 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 18:04 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 18:04 |
| *** catintheroof has quit IRC | 18:11 | |
| *** prashkre has joined #openstack-keystone | 18:14 | |
| *** catintheroof has joined #openstack-keystone | 18:17 | |
| *** aojea has joined #openstack-keystone | 18:24 | |
| *** aojea has quit IRC | 18:28 | |
| *** aojea has joined #openstack-keystone | 18:31 | |
| *** aojea has quit IRC | 18:35 | |
| *** jmlowe has joined #openstack-keystone | 18:43 | |
| *** itlinux has quit IRC | 18:44 | |
| *** fried_rolls is now known as fried_rice | 18:49 | |
| david-lyle | I imagine most are on there way to or are enjoying Sydney, but I have an API question | 18:58 |
| *** prashkre has quit IRC | 18:58 | |
| david-lyle | The region API supports adding extra data in blob format on create | 18:58 |
| *** prashkre has joined #openstack-keystone | 18:58 | |
| david-lyle | however the update does not support updating the extra content | 18:58 |
| david-lyle | is that intentional or a bug? | 18:59 |
| david-lyle | the rest of the APIs I've encountered that supported extra on create would also update extra | 18:59 |
| *** wes_dillingham has quit IRC | 19:10 | |
| *** itlinux has joined #openstack-keystone | 19:14 | |
| *** wes_dillingham has joined #openstack-keystone | 19:17 | |
| *** aojea has joined #openstack-keystone | 19:22 | |
| *** jrist has quit IRC | 19:25 | |
| *** LobsterRoll has joined #openstack-keystone | 19:27 | |
| *** wes_dillingham has quit IRC | 19:30 | |
| *** LobsterRoll is now known as wes_dillingham | 19:30 | |
| *** pcaruana has quit IRC | 19:32 | |
| *** jrist has joined #openstack-keystone | 19:36 | |
| *** jrist_ has joined #openstack-keystone | 19:49 | |
| *** wes_dillingham has quit IRC | 19:49 | |
| *** jrist_ has quit IRC | 19:49 | |
| *** jrist has quit IRC | 19:49 | |
| *** jrist has joined #openstack-keystone | 19:50 | |
| *** jrist has quit IRC | 19:50 | |
| *** jrist has joined #openstack-keystone | 19:50 | |
| *** aojea has quit IRC | 19:56 | |
| *** McClymontS has joined #openstack-keystone | 20:01 | |
| *** McClymontS has quit IRC | 20:02 | |
| *** catintheroof has quit IRC | 20:04 | |
| *** aojea has joined #openstack-keystone | 20:10 | |
| *** aojea has quit IRC | 20:12 | |
| *** catintheroof has joined #openstack-keystone | 20:15 | |
| *** McClymontS has joined #openstack-keystone | 20:19 | |
| *** McClymontS has quit IRC | 20:20 | |
| *** panbalag has joined #openstack-keystone | 20:23 | |
| *** panbalag has left #openstack-keystone | 20:23 | |
| *** itlinux has quit IRC | 20:31 | |
| *** itlinux has joined #openstack-keystone | 20:37 | |
| *** jmlowe has quit IRC | 20:43 | |
| *** prashkre has quit IRC | 20:45 | |
| openstackgerrit | David Lyle proposed openstack/keystone master: region update extra support https://review.openstack.org/517726 | 20:56 |
| *** catintheroof has quit IRC | 21:04 | |
| *** aojea has joined #openstack-keystone | 21:06 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 21:06 | |
| *** AlexeyAbashkin has quit IRC | 21:10 | |
| *** raildo has quit IRC | 21:11 | |
| *** thorst has quit IRC | 21:19 | |
| *** jmlowe has joined #openstack-keystone | 21:43 | |
| *** swain has joined #openstack-keystone | 21:46 | |
| *** itlinux has quit IRC | 21:49 | |
| *** fried_rice is now known as efried | 21:54 | |
| *** wes_dillingham has joined #openstack-keystone | 21:58 | |
| *** d0ugal has quit IRC | 22:06 | |
| *** d0ugal has joined #openstack-keystone | 22:09 | |
| *** jrist has quit IRC | 22:11 | |
| *** harlowja has quit IRC | 22:12 | |
| *** jrist has joined #openstack-keystone | 22:15 | |
| *** jrist has quit IRC | 22:15 | |
| *** jrist has joined #openstack-keystone | 22:15 | |
| openstackgerrit | Merged openstack/keystone master: Updated from global requirements https://review.openstack.org/517476 | 22:22 |
| *** cfriesen has joined #openstack-keystone | 22:27 | |
| *** aojea has quit IRC | 22:33 | |
| *** itlinux has joined #openstack-keystone | 22:50 | |
| *** wes_dillingham has quit IRC | 22:53 | |
| *** itlinux has quit IRC | 22:53 | |
| *** thorst has joined #openstack-keystone | 22:59 | |
| *** thorst has quit IRC | 23:00 | |
| *** itlinux has joined #openstack-keystone | 23:01 | |
| *** harlowja has joined #openstack-keystone | 23:04 | |
| *** itlinux has quit IRC | 23:04 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 23:07 | |
| *** AlexeyAbashkin has quit IRC | 23:11 | |
| *** wes_dillingham has joined #openstack-keystone | 23:19 | |
| *** nicolasbock has quit IRC | 23:21 | |
| *** cfriesen has quit IRC | 23:32 | |
| *** links has joined #openstack-keystone | 23:33 | |
| *** swain has quit IRC | 23:56 | |
| *** ayoung has quit IRC | 23:56 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!