*** fiddletwix has quit IRC | 00:02 | |
*** fiddletwix has joined #openstack-keystone | 00:03 | |
*** germs has joined #openstack-keystone | 00:05 | |
*** germs has quit IRC | 00:05 | |
*** germs has joined #openstack-keystone | 00:05 | |
*** odyssey4me has quit IRC | 00:08 | |
*** odyssey4me has joined #openstack-keystone | 00:08 | |
*** germs has quit IRC | 00:10 | |
*** voelzmo has quit IRC | 00:32 | |
*** lbragstad has quit IRC | 00:33 | |
*** itlinux has quit IRC | 00:51 | |
*** AlexeyAbashkin has joined #openstack-keystone | 00:58 | |
*** voelzmo has joined #openstack-keystone | 00:59 | |
*** AlexeyAbashkin has quit IRC | 01:03 | |
*** gyan__ has joined #openstack-keystone | 01:13 | |
*** spzala has quit IRC | 01:14 | |
*** harlowja has quit IRC | 01:19 | |
*** tmcm has quit IRC | 01:26 | |
*** voelzmo has quit IRC | 01:33 | |
*** nicolasbock has quit IRC | 01:36 | |
*** voelzmo has joined #openstack-keystone | 02:00 | |
*** germs has joined #openstack-keystone | 02:06 | |
*** germs has quit IRC | 02:06 | |
*** germs has joined #openstack-keystone | 02:06 | |
*** germs has quit IRC | 02:11 | |
*** ykarel|afk has joined #openstack-keystone | 02:16 | |
*** lbragstad has joined #openstack-keystone | 02:20 | |
*** ChanServ sets mode: +o lbragstad | 02:20 | |
*** felipemonteiro has joined #openstack-keystone | 02:22 | |
*** dave-mccowan has joined #openstack-keystone | 02:23 | |
*** annp has quit IRC | 02:24 | |
*** annp has joined #openstack-keystone | 02:25 | |
*** ykarel|afk has quit IRC | 02:29 | |
*** zhurong has joined #openstack-keystone | 02:29 | |
*** voelzmo has quit IRC | 02:34 | |
*** threestrands has quit IRC | 02:47 | |
*** threestrands has joined #openstack-keystone | 02:47 | |
*** threestrands has quit IRC | 02:47 | |
*** threestrands has joined #openstack-keystone | 02:47 | |
*** threestrands has quit IRC | 02:48 | |
*** threestrands has joined #openstack-keystone | 02:49 | |
*** threestrands has quit IRC | 02:49 | |
*** threestrands has joined #openstack-keystone | 02:49 | |
*** felipemonteiro has quit IRC | 02:54 | |
*** voelzmo has joined #openstack-keystone | 02:58 | |
*** gagehugo has quit IRC | 02:59 | |
*** dave-mccowan has quit IRC | 03:01 | |
*** gagehugo has joined #openstack-keystone | 03:03 | |
*** lbragstad has quit IRC | 03:25 | |
*** voelzmo has quit IRC | 03:32 | |
*** voelzmo has joined #openstack-keystone | 04:02 | |
*** ykarel|afk has joined #openstack-keystone | 04:09 | |
*** ykarel|afk is now known as ykarel | 04:10 | |
*** voelzmo has quit IRC | 04:12 | |
*** pcaruana has joined #openstack-keystone | 04:27 | |
*** pcaruana has quit IRC | 04:30 | |
*** threestrands has quit IRC | 04:38 | |
*** links has joined #openstack-keystone | 04:39 | |
*** links has quit IRC | 04:40 | |
*** links has joined #openstack-keystone | 04:46 | |
*** zhurong has quit IRC | 04:55 | |
*** harlowja has joined #openstack-keystone | 05:16 | |
*** harlowja has quit IRC | 05:20 | |
*** dave-mccowan has joined #openstack-keystone | 05:43 | |
*** belmoreira has joined #openstack-keystone | 06:03 | |
*** gmann_ is now known as gmann | 06:06 | |
*** dave-mccowan has quit IRC | 06:09 | |
*** jaosorior has quit IRC | 06:25 | |
*** martinus__ has joined #openstack-keystone | 06:27 | |
*** voelzmo has joined #openstack-keystone | 06:31 | |
*** pcichy has joined #openstack-keystone | 06:34 | |
*** voelzmo has quit IRC | 06:35 | |
*** jaosorior has joined #openstack-keystone | 06:58 | |
*** pcaruana has joined #openstack-keystone | 07:01 | |
*** voelzmo has joined #openstack-keystone | 07:08 | |
*** dangtrinhnt has joined #openstack-keystone | 07:14 | |
*** voelzmo has quit IRC | 07:22 | |
*** rcernin has quit IRC | 07:23 | |
*** tesseract has joined #openstack-keystone | 07:26 | |
*** dangtrinhnt has quit IRC | 07:38 | |
*** AlexeyAbashkin has joined #openstack-keystone | 07:44 | |
*** d0ugal_ has quit IRC | 07:46 | |
*** d0ugal has joined #openstack-keystone | 07:47 | |
*** d0ugal has quit IRC | 07:47 | |
*** d0ugal has joined #openstack-keystone | 07:47 | |
*** voelzmo has joined #openstack-keystone | 07:59 | |
*** germs has joined #openstack-keystone | 08:08 | |
*** germs has quit IRC | 08:08 | |
*** germs has joined #openstack-keystone | 08:08 | |
*** germs has quit IRC | 08:12 | |
*** voelzmo has quit IRC | 08:31 | |
*** voelzmo_ has joined #openstack-keystone | 08:31 | |
*** zhongjun_ has joined #openstack-keystone | 08:33 | |
*** voelzmo_ has quit IRC | 08:49 | |
*** voelzmo has joined #openstack-keystone | 08:50 | |
*** links has quit IRC | 08:53 | |
*** links has joined #openstack-keystone | 08:57 | |
*** edmondsw has joined #openstack-keystone | 09:10 | |
*** ykarel_ has joined #openstack-keystone | 09:14 | |
*** edmondsw has quit IRC | 09:15 | |
*** ykarel has quit IRC | 09:17 | |
*** voelzmo has quit IRC | 09:33 | |
*** voelzmo has joined #openstack-keystone | 09:34 | |
*** voelzmo has quit IRC | 09:38 | |
*** ykarel__ has joined #openstack-keystone | 09:39 | |
*** ykarel_ has quit IRC | 09:43 | |
*** dtruong_ has joined #openstack-keystone | 10:05 | |
*** HW_Peter has joined #openstack-keystone | 10:06 | |
*** annp_ has joined #openstack-keystone | 10:09 | |
*** jgrassle1 has joined #openstack-keystone | 10:11 | |
*** lifeless_ has joined #openstack-keystone | 10:11 | |
*** pcaruana|afk| has joined #openstack-keystone | 10:12 | |
*** rodrigod` has joined #openstack-keystone | 10:14 | |
*** raildo has joined #openstack-keystone | 10:14 | |
*** annp has quit IRC | 10:15 | |
*** brad[] has quit IRC | 10:15 | |
*** mvk has quit IRC | 10:15 | |
*** lifeless has quit IRC | 10:15 | |
*** rodrigods has quit IRC | 10:15 | |
*** pcaruana has quit IRC | 10:15 | |
*** sapd has quit IRC | 10:15 | |
*** dtruong has quit IRC | 10:15 | |
*** HW-Peter has quit IRC | 10:15 | |
*** jrist has quit IRC | 10:15 | |
*** jgrassler has quit IRC | 10:15 | |
*** belmoreira has quit IRC | 10:16 | |
*** sapd has joined #openstack-keystone | 10:18 | |
*** jrist has joined #openstack-keystone | 10:20 | |
*** mvk has joined #openstack-keystone | 10:21 | |
*** pcaruana|afk| has quit IRC | 10:28 | |
*** pcaruana|afk| has joined #openstack-keystone | 10:28 | |
*** nicolasbock has joined #openstack-keystone | 10:30 | |
*** rcernin has joined #openstack-keystone | 10:44 | |
*** annp_ has quit IRC | 10:46 | |
*** brad[] has joined #openstack-keystone | 11:01 | |
*** nicolasbock has quit IRC | 11:26 | |
*** belmoreira has joined #openstack-keystone | 11:31 | |
*** nicolasbock has joined #openstack-keystone | 11:31 | |
*** gyan__ has quit IRC | 11:38 | |
*** ykarel__ has quit IRC | 11:43 | |
*** mvk has quit IRC | 12:07 | |
*** germs has joined #openstack-keystone | 12:10 | |
*** germs has quit IRC | 12:10 | |
*** germs has joined #openstack-keystone | 12:10 | |
*** germs has quit IRC | 12:15 | |
*** odyssey4me has quit IRC | 12:23 | |
*** odyssey4me has joined #openstack-keystone | 12:23 | |
*** Horrorcat has joined #openstack-keystone | 12:25 | |
*** Horrorcat has left #openstack-keystone | 12:26 | |
*** Horrorcat has joined #openstack-keystone | 12:26 | |
*** lbragstad has joined #openstack-keystone | 12:29 | |
*** ChanServ sets mode: +o lbragstad | 12:29 | |
yankcrime | lbragstad: so i did a comparison of the tokens issued before and after explicitly adding that federated user into the relevant group | 12:32 |
---|---|---|
yankcrime | they both contain the right group and project | 12:33 |
lbragstad | yankcrime: hmm | 12:33 |
yankcrime | however, when it fails i do see: | 12:33 |
yankcrime | {"error": {"message": "Could not find token | 12:33 |
yankcrime | and 2018-04-04 10:20:54.373 18 DEBUG keystone.token.provider [req-720a8b5d-8686-4b56-89b5-7ab2f5900a8f - - - - -] Unable to validate token: User 4d1c38716d394e6097cf20d050f9d81e has no access to project 90fb2e3278344060a4b29008c30f1bc2 | 12:34 |
yankcrime | that's basically the first bit in the log where it starts to go awry | 12:34 |
lbragstad | hmm | 12:34 |
lbragstad | which token provider are you using? | 12:35 |
yankcrime | uuid | 12:35 |
lbragstad | oh - i have a bug report for you | 12:36 |
lbragstad | https://bugs.launchpad.net/keystone/+bug/1758460 | 12:36 |
openstack | Launchpad bug 1758460 in OpenStack Identity (keystone) "UUID (or any persistent) token providers unable to validate federation token" [Low,New] | 12:36 |
lbragstad | yankcrime: are you able to switch to fernet and test with that? | 12:36 |
yankcrime | damn, that looks exactly like it - i'd started to trawl the various bugs on launchpad but missed that one! | 12:37 |
yankcrime | yeah, it needs doing anyway so i'll press on with switching to fernet first | 12:38 |
lbragstad | yankcrime: let me know if you have any questions about fernet | 12:38 |
lbragstad | i can help | 12:38 |
yankcrime | lbragstad: thanks, much appreciated - been banging my head against a brick wall with this one for a couple of days now, good to know it's not me that's directly at fault ;) | 12:39 |
lbragstad | yeah.. it was just reported not too long ago | 12:40 |
yankcrime | and no worries, i should be ok - i have other deployments already on fernet | 12:40 |
lbragstad | but uuid support has been waning | 12:40 |
yankcrime | yup, surprised this particular instance was built with uuid tbh - probably an oversight | 12:41 |
lbragstad | i was just about ask if there was a particular reason it was being used | 12:41 |
*** mvk has joined #openstack-keystone | 12:42 | |
*** edmondsw has joined #openstack-keystone | 12:47 | |
yankcrime | this particular instance was deployed via kolla-ansible which still defaults to uuid | 12:52 |
lbragstad | ahh - gotcha | 12:55 |
yankcrime | https://review.openstack.org/#/c/549861/ fwiw | 13:01 |
*** tmcm has joined #openstack-keystone | 13:26 | |
*** jmlowe has joined #openstack-keystone | 13:31 | |
*** links has quit IRC | 13:35 | |
*** dklyle has quit IRC | 13:42 | |
*** spilla has joined #openstack-keystone | 13:48 | |
*** links has joined #openstack-keystone | 13:49 | |
*** lbragstad has quit IRC | 13:56 | |
*** belmoreira has quit IRC | 13:59 | |
*** belmoreira has joined #openstack-keystone | 14:24 | |
*** r-daneel has joined #openstack-keystone | 14:29 | |
*** rcernin has quit IRC | 14:32 | |
*** jmlowe has quit IRC | 14:34 | |
*** lbragstad has joined #openstack-keystone | 14:35 | |
*** ChanServ sets mode: +o lbragstad | 14:35 | |
*** d0ugal has quit IRC | 14:39 | |
gagehugo | o/ | 14:39 |
*** d0ugal has joined #openstack-keystone | 14:41 | |
*** r-daneel has quit IRC | 14:47 | |
*** dklyle has joined #openstack-keystone | 14:48 | |
*** Rhys has quit IRC | 14:51 | |
*** felipemonteiro has joined #openstack-keystone | 14:52 | |
*** jmlowe has joined #openstack-keystone | 14:53 | |
*** david-lyle has joined #openstack-keystone | 14:57 | |
*** dklyle has quit IRC | 14:57 | |
*** links has quit IRC | 15:00 | |
knikolla | o/ | 15:03 |
*** r-daneel has joined #openstack-keystone | 15:04 | |
lbragstad | o/ | 15:07 |
*** r-daneel_ has joined #openstack-keystone | 15:08 | |
*** r-daneel has quit IRC | 15:08 | |
*** r-daneel_ is now known as r-daneel | 15:08 | |
*** zhurong has joined #openstack-keystone | 15:14 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Fix mispelling of accommodate in install docs https://review.openstack.org/558849 | 15:17 |
gagehugo | easy change ^ | 15:17 |
*** felipemonteiro_ has joined #openstack-keystone | 15:22 | |
*** felipemonteiro has quit IRC | 15:26 | |
openstackgerrit | Harry Rybacki proposed openstack/keystone master: Update install guides https://review.openstack.org/558079 | 15:30 |
*** felipemonteiro__ has joined #openstack-keystone | 15:33 | |
*** felipemonteiro_ has quit IRC | 15:33 | |
*** evrardjp_ has joined #openstack-keystone | 15:35 | |
*** evrardjp has quit IRC | 15:36 | |
*** felipemonteiro has joined #openstack-keystone | 15:36 | |
*** germs has joined #openstack-keystone | 15:38 | |
*** germs has quit IRC | 15:38 | |
*** germs has joined #openstack-keystone | 15:38 | |
*** tesseract has quit IRC | 15:38 | |
*** germs has quit IRC | 15:39 | |
*** germs has joined #openstack-keystone | 15:39 | |
*** germs has quit IRC | 15:39 | |
*** germs has joined #openstack-keystone | 15:39 | |
*** tesseract has joined #openstack-keystone | 15:41 | |
*** dtruong_ has quit IRC | 15:41 | |
*** dtruong has joined #openstack-keystone | 15:42 | |
*** links has joined #openstack-keystone | 15:43 | |
openstackgerrit | Harry Rybacki proposed openstack/keystone master: Update install guides https://review.openstack.org/558079 | 15:43 |
*** pcaruana|afk| has quit IRC | 15:45 | |
*** Rhys has joined #openstack-keystone | 15:52 | |
*** Rhys has quit IRC | 15:52 | |
*** Rhys has joined #openstack-keystone | 15:54 | |
*** evrardjp_ is now known as evrardjp | 16:05 | |
*** links has quit IRC | 16:05 | |
*** links has joined #openstack-keystone | 16:20 | |
*** belmoreira has quit IRC | 16:23 | |
*** zhurong has quit IRC | 16:29 | |
cmurphy | woops, forgot about policy meeting - I don't have rights on that project, looks like that honor belongs to these people https://review.openstack.org/#/admin/groups/1372,members | 16:31 |
lbragstad | oh - interesting | 16:32 |
lbragstad | there were a bunch of people in the session in dublin | 16:33 |
lbragstad | and i remember smcginnis being interested in it from a TC perspective | 16:34 |
lbragstad | i might do a drive by in the TC room just to see if it jars anyone's attention | 16:34 |
*** AlexeyAbashkin has quit IRC | 16:38 | |
*** oikiki has joined #openstack-keystone | 16:42 | |
*** spilla has quit IRC | 16:57 | |
*** germs has quit IRC | 17:03 | |
*** marius1 has joined #openstack-keystone | 17:04 | |
*** felipemonteiro_ has joined #openstack-keystone | 17:05 | |
*** germs has joined #openstack-keystone | 17:06 | |
*** germs has quit IRC | 17:06 | |
*** germs has joined #openstack-keystone | 17:06 | |
*** links has quit IRC | 17:08 | |
*** felipemonteiro__ has quit IRC | 17:08 | |
*** felipemonteiro_ has quit IRC | 17:13 | |
*** felipemonteiro_ has joined #openstack-keystone | 17:14 | |
*** david-lyle has quit IRC | 17:16 | |
*** spilla has joined #openstack-keystone | 17:16 | |
*** felipemonteiro_ has quit IRC | 17:18 | |
*** felipemonteiro_ has joined #openstack-keystone | 17:20 | |
*** pcichy has quit IRC | 17:23 | |
*** d0ugal has quit IRC | 17:42 | |
*** marius1 has quit IRC | 17:46 | |
*** marius1 has joined #openstack-keystone | 17:51 | |
*** felipemonteiro__ has joined #openstack-keystone | 18:01 | |
*** felipemonteiro_ has quit IRC | 18:02 | |
*** AlexeyAbashkin has joined #openstack-keystone | 18:08 | |
hrybacki | I think this looks better lbragstad https://review.openstack.org/#/c/523973/ | 18:10 |
lbragstad | cool - i'll take another pass | 18:10 |
*** felipemonteiro has quit IRC | 18:10 | |
*** marius1 has quit IRC | 18:10 | |
*** d0ugal has joined #openstack-keystone | 18:11 | |
*** AlexeyAbashkin has quit IRC | 18:12 | |
*** mchlumsky has quit IRC | 18:13 | |
*** tesseract has quit IRC | 18:14 | |
*** voelzmo has joined #openstack-keystone | 18:16 | |
openstackgerrit | Merged openstack/keystone master: Fix mispelling of accommodate in install docs https://review.openstack.org/558849 | 18:33 |
openstackgerrit | Merged openstack/keystone master: Update install guides https://review.openstack.org/558079 | 18:34 |
*** felipemonteiro has joined #openstack-keystone | 18:38 | |
*** felipemonteiro__ has quit IRC | 18:38 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Add functional testing gate https://review.openstack.org/531014 | 18:50 |
*** AlexeyAbashkin has joined #openstack-keystone | 18:58 | |
*** AlexeyAbashkin has quit IRC | 19:02 | |
openstackgerrit | Merged openstack/keystonemiddleware master: Remove kwargs_to_fetch_token https://review.openstack.org/513273 | 19:05 |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Move fernet doctor checks into tokens checks https://review.openstack.org/527527 | 19:07 |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Move fernet doctor checks into tokens checks https://review.openstack.org/527527 | 19:09 |
*** harlowja has joined #openstack-keystone | 19:10 | |
*** marius1 has joined #openstack-keystone | 19:17 | |
*** felipemonteiro_ has joined #openstack-keystone | 19:18 | |
*** felipemonteiro has quit IRC | 19:21 | |
*** marius1 has quit IRC | 19:22 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Decouple bootstrap from cli module https://review.openstack.org/558903 | 19:22 |
lbragstad | kmalloc: just got done beating my head against ^ | 19:22 |
lbragstad | that was a fun scenic detour | 19:23 |
lbragstad | i should be able to get a patch up that bases the testing of the new keystone token model on that | 19:23 |
gagehugo | lbragstad that rips bootstrap out into it's own thing? | 19:24 |
lbragstad | yeah | 19:24 |
gagehugo | interesting | 19:24 |
*** jmlowe has quit IRC | 19:26 | |
lbragstad | yeah - i've been in the middle of a couple refactors where i need testing taht just gives me a base model to work from | 19:27 |
lbragstad | base model = admin user, project, system role assignments, default domain, etc... | 19:27 |
lbragstad | and bootstrap was written to do that for operators | 19:27 |
lbragstad | so i figured it might be useful to reuse for testing | 19:28 |
lbragstad | but the dependency injection stuff was kind of a pain for figure out | 19:28 |
*** jmlowe has joined #openstack-keystone | 19:29 | |
lbragstad | s/for/to/ | 19:32 |
*** raildo has quit IRC | 19:42 | |
*** david-lyle has joined #openstack-keystone | 19:42 | |
*** felipemonteiro__ has joined #openstack-keystone | 19:48 | |
*** felipemonteiro__ has quit IRC | 19:49 | |
*** felipemonteiro__ has joined #openstack-keystone | 19:49 | |
*** felipemonteiro_ has quit IRC | 19:52 | |
*** felipemonteiro_ has joined #openstack-keystone | 19:54 | |
lbragstad | hrybacki: took another pass | 19:56 |
lbragstad | just a few nits, otherwise i feel comfortable +1'ing it | 19:56 |
*** felipemonteiro__ has quit IRC | 19:57 | |
*** mvk has quit IRC | 20:01 | |
*** sapd has quit IRC | 20:30 | |
*** sapd has joined #openstack-keystone | 20:30 | |
*** sapd has quit IRC | 20:31 | |
*** sapd has joined #openstack-keystone | 20:32 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Add new config option and setup for token keys https://review.openstack.org/558918 | 20:33 |
*** martinus__ has quit IRC | 20:44 | |
*** tmcm has quit IRC | 20:44 | |
*** spilla has quit IRC | 20:47 | |
*** edmondsw has quit IRC | 20:50 | |
*** rcernin has joined #openstack-keystone | 20:59 | |
*** idlemind has joined #openstack-keystone | 21:04 | |
*** r-daneel has quit IRC | 21:06 | |
*** d0ugal has quit IRC | 21:21 | |
*** mvk has joined #openstack-keystone | 21:27 | |
*** rcernin has quit IRC | 21:29 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add LDAP-backed functional testing gate https://review.openstack.org/558940 | 21:37 |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Add new config option and setup for token keys https://review.openstack.org/558918 | 21:39 |
*** bhagyashri_s has joined #openstack-keystone | 21:40 | |
*** voelzmo_ has joined #openstack-keystone | 21:42 | |
*** bhagyashris has quit IRC | 21:43 | |
*** jmlowe has quit IRC | 21:44 | |
*** voelzmo has quit IRC | 21:46 | |
*** oikiki has quit IRC | 21:46 | |
*** voelzmo_ has quit IRC | 21:47 | |
*** voelzmo has joined #openstack-keystone | 21:47 | |
*** d0ugal has joined #openstack-keystone | 21:49 | |
*** d0ugal has quit IRC | 21:49 | |
*** d0ugal has joined #openstack-keystone | 21:50 | |
*** voelzmo has quit IRC | 21:52 | |
*** oikiki has joined #openstack-keystone | 21:55 | |
*** AlexeyAbashkin has joined #openstack-keystone | 21:59 | |
*** voelzmo has joined #openstack-keystone | 22:04 | |
*** voelzmo has quit IRC | 22:04 | |
*** AlexeyAbashkin has quit IRC | 22:04 | |
*** voelzmo has joined #openstack-keystone | 22:05 | |
*** voelzmo_ has joined #openstack-keystone | 22:07 | |
*** voelzmo has quit IRC | 22:07 | |
*** voelzmo_ has quit IRC | 22:11 | |
*** lbragstad has quit IRC | 22:18 | |
*** felipemonteiro_ has quit IRC | 22:21 | |
*** voelzmo has joined #openstack-keystone | 22:41 | |
*** rcernin has joined #openstack-keystone | 22:45 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add LDAP-backed functional testing gate https://review.openstack.org/558940 | 22:54 |
*** felipemonteiro has joined #openstack-keystone | 23:00 | |
*** d0ugal has quit IRC | 23:03 | |
*** voelzmo has quit IRC | 23:14 | |
*** Guest98296 has joined #openstack-keystone | 23:30 | |
*** tmcm has joined #openstack-keystone | 23:52 | |
*** tmcm has quit IRC | 23:53 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!