| *** gyee has quit IRC | 00:02 | |
| *** pcaruana has quit IRC | 00:02 | |
| *** rmascena__ has quit IRC | 00:25 | |
| *** namnh has joined #openstack-keystone | 00:42 | |
| *** spzala has joined #openstack-keystone | 00:49 | |
| *** spzala has quit IRC | 01:13 | |
| *** jdennis has quit IRC | 01:14 | |
| *** zeus has quit IRC | 01:15 | |
| *** zeus has joined #openstack-keystone | 01:18 | |
| *** zeus is now known as Guest62751 | 01:18 | |
| *** jdennis has joined #openstack-keystone | 01:18 | |
| *** spzala has joined #openstack-keystone | 01:52 | |
| *** spzala has quit IRC | 01:57 | |
| wxy | ayoung: The blog's name is "麦田的守望者", in English is "The Catcher in the Rye", actually it's from an English book. https://en.wikipedia.org/wiki/The_Catcher_in_the_Rye | 01:58 |
|---|---|---|
| ayoung | wxy Thank you. I got the reference, but I was wondering if it was a play on his name. | 01:58 |
| wxy | his nick name is "麦田麦芽" | 01:59 |
| ayoung | wxy, do you happen to know if he is a regular OpenStack contributor? | 01:59 |
| ayoung | Google is translating his nickname to "Wheat malt" which I have no idea if that is even close. | 02:00 |
| ayoung | 麦田 is the same first two characters. Google wants that to be Wheat Fields | 02:01 |
| wxy | ayoung: it's hard to know, because he just uses a blog website, on which he just registered a nick name casually | 02:01 |
| ayoung | wxy, its too bad, as it seems to be the best documentation of using Gnocchi out there | 02:01 |
| wxy | ayoung: I can ask others in my Chinese wechat group. Maybe someone knows. | 02:02 |
| *** panbalag has joined #openstack-keystone | 02:06 | |
| *** panbalag has left #openstack-keystone | 02:11 | |
| ayoung | wxy, thanks. Its not critical, but it would be nice to properly cite. If it is OK with them | 02:17 |
| wxy | ayoung: well, seems nobody knows this blog. I think it's OK to properly cite them. We are not very strict for this kind of cite in China. You just need to add a link to his article when citing | 02:29 |
| *** spzala has joined #openstack-keystone | 02:34 | |
| *** annp has quit IRC | 02:42 | |
| *** gongysh has joined #openstack-keystone | 02:45 | |
| *** spzala has quit IRC | 02:48 | |
| *** jdennis has quit IRC | 02:52 | |
| *** annp has joined #openstack-keystone | 02:54 | |
| *** jdennis has joined #openstack-keystone | 02:58 | |
| *** nicolasbock has quit IRC | 03:26 | |
| *** jdennis has quit IRC | 03:33 | |
| *** jdennis has joined #openstack-keystone | 03:36 | |
| *** jdennis has quit IRC | 03:51 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Update IdP sql model https://review.openstack.org/559676 | 04:10 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix the test for unique IdP https://review.openstack.org/563812 | 04:10 |
| *** evrardjp has quit IRC | 04:15 | |
| *** dklyle has joined #openstack-keystone | 04:17 | |
| *** markvoelker has quit IRC | 04:29 | |
| *** dklyle has quit IRC | 04:37 | |
| *** edmondsw has joined #openstack-keystone | 04:43 | |
| *** edmondsw_ has joined #openstack-keystone | 04:44 | |
| *** edmondsw has quit IRC | 04:48 | |
| *** sapd has quit IRC | 04:59 | |
| *** sapd_ has joined #openstack-keystone | 04:59 | |
| *** edmondsw_ has quit IRC | 04:59 | |
| *** sapd_ has quit IRC | 05:07 | |
| *** sapd__ has joined #openstack-keystone | 05:07 | |
| *** gongysh has quit IRC | 05:11 | |
| *** evrardjp has joined #openstack-keystone | 05:21 | |
| *** edmondsw has joined #openstack-keystone | 05:41 | |
| *** edmondsw has quit IRC | 05:45 | |
| *** edmondsw has joined #openstack-keystone | 06:02 | |
| *** edmondsw has quit IRC | 06:06 | |
| *** gongysh has joined #openstack-keystone | 06:07 | |
| *** martinus__ has joined #openstack-keystone | 06:08 | |
| *** links has joined #openstack-keystone | 06:16 | |
| *** markvoelker has joined #openstack-keystone | 06:30 | |
| *** threestrands has quit IRC | 06:32 | |
| *** tesseract has joined #openstack-keystone | 06:49 | |
| *** threestrands has joined #openstack-keystone | 06:50 | |
| *** threestrands has quit IRC | 06:50 | |
| *** threestrands has joined #openstack-keystone | 06:50 | |
| *** pcaruana has joined #openstack-keystone | 06:58 | |
| *** gongysh has quit IRC | 06:59 | |
| *** dangtrinhnt has joined #openstack-keystone | 07:02 | |
| *** markvoelker has quit IRC | 07:04 | |
| *** jaosorior has joined #openstack-keystone | 07:08 | |
| *** threestrands has quit IRC | 07:10 | |
| *** rcernin has quit IRC | 07:16 | |
| *** oikiki has joined #openstack-keystone | 07:23 | |
| *** edmondsw has joined #openstack-keystone | 07:24 | |
| *** edmondsw has quit IRC | 07:28 | |
| *** edmondsw has joined #openstack-keystone | 07:45 | |
| *** edmondsw has quit IRC | 07:49 | |
| *** spzala has joined #openstack-keystone | 07:53 | |
| *** spzala has quit IRC | 07:57 | |
| *** markvoelker has joined #openstack-keystone | 08:01 | |
| *** oikiki has quit IRC | 08:03 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 08:05 | |
| *** edmondsw has joined #openstack-keystone | 08:05 | |
| *** edmondsw has quit IRC | 08:09 | |
| *** gongysh has joined #openstack-keystone | 08:15 | |
| *** edmondsw has joined #openstack-keystone | 08:26 | |
| *** mvk has quit IRC | 08:28 | |
| *** jistr is now known as jistr|mtgs | 08:28 | |
| *** edmondsw has quit IRC | 08:30 | |
| *** markvoelker has quit IRC | 08:34 | |
| openstackgerrit | Merged openstack/keystone master: Remove the sample .conf file https://review.openstack.org/521249 | 08:50 |
| *** ianw is now known as ianw_pto | 08:54 | |
| *** mvk has joined #openstack-keystone | 08:59 | |
| *** panbalag has joined #openstack-keystone | 09:03 | |
| *** panbalag has left #openstack-keystone | 09:04 | |
| *** jaosorior has quit IRC | 09:18 | |
| *** markvoelker has joined #openstack-keystone | 09:31 | |
| *** jaosorior has joined #openstack-keystone | 09:44 | |
| *** gongysh has quit IRC | 09:48 | |
| *** namnh has quit IRC | 09:54 | |
| *** markvoelker has quit IRC | 10:06 | |
| *** annp has quit IRC | 10:29 | |
| *** mvk has quit IRC | 10:29 | |
| *** annp has joined #openstack-keystone | 10:30 | |
| *** mvk has joined #openstack-keystone | 10:42 | |
| *** jaosorior has quit IRC | 10:43 | |
| *** sapd__ has quit IRC | 10:45 | |
| *** annp has quit IRC | 10:46 | |
| *** markvoelker has joined #openstack-keystone | 11:02 | |
| *** nicolasbock has joined #openstack-keystone | 11:05 | |
| *** magnumbonum has joined #openstack-keystone | 11:14 | |
| magnumbonum | hi all! | 11:14 |
| magnumbonum | I have a customer where we have implemented Keystone with an LDAP connection. Works fine. However, it is a fairly large AD. | 11:15 |
| magnumbonum | We are hence getting a size limit exceeded error message in `keystone.log` when logging in, when pointing Keystone to the proper OU. Pointing Keystone to a another OU with fewer users works fine. | 11:16 |
| magnumbonum | I am implementing the `page_size` feature in the [ldap] stanza which I interpret like this: When Keystone contacts the LDAP server, it will page the results. So if there are more than `page_size` number of records, it will query the LDAP-server repeatedly until all items are retrieved. | 11:17 |
| magnumbonum | My question is whether or not it is probable that Keystone also handles the attribute limit in AD when specifying the `page_size`? The problem with AD and large result sets are described in this article: https://support.microsoft.com/en-us/help/2009267/windows-server-2008-and-newer-domain-controller-returns-only-5000-valu | 11:20 |
| magnumbonum | The problem might be when Keystone retrieves the user list. But it can also be that the MaxValRange attribute (the maximum number of attributes returned). This would mean that AD will not serve all memberOf or members on a group query, if it exceeds the hardcoded limit of 5.000 | 11:22 |
| magnumbonum | Next action is setting up a testing environment for this, with a large number of users. But does anyone have any insight into the MaxValRange problem and if it is handled by Keystone? | 11:23 |
| *** markvoelker has quit IRC | 11:36 | |
| *** alee has joined #openstack-keystone | 11:37 | |
| *** alee__ has quit IRC | 11:39 | |
| *** jaosorior has joined #openstack-keystone | 11:48 | |
| *** spzala has joined #openstack-keystone | 11:53 | |
| *** spzala has quit IRC | 11:57 | |
| *** raildo has joined #openstack-keystone | 12:08 | |
| *** zhongjun_ has quit IRC | 12:09 | |
| *** zhongjun_ has joined #openstack-keystone | 12:09 | |
| *** jaosorior has quit IRC | 12:15 | |
| *** jaosorior has joined #openstack-keystone | 12:16 | |
| *** markvoelker has joined #openstack-keystone | 12:16 | |
| *** mwhahaha has quit IRC | 12:26 | |
| *** mwhahaha has joined #openstack-keystone | 12:26 | |
| *** edmondsw has joined #openstack-keystone | 12:28 | |
| *** lbragstad has joined #openstack-keystone | 12:29 | |
| *** ChanServ sets mode: +o lbragstad | 12:29 | |
| *** edmondsw_ has joined #openstack-keystone | 12:29 | |
| *** alee has quit IRC | 12:31 | |
| *** Guest46098 has quit IRC | 12:32 | |
| *** Guest46098 has joined #openstack-keystone | 12:32 | |
| *** mchlumsky has joined #openstack-keystone | 12:33 | |
| *** edmondsw has quit IRC | 12:33 | |
| *** portdirect has quit IRC | 12:36 | |
| *** portdirect has joined #openstack-keystone | 12:37 | |
| *** edmondsw_ has quit IRC | 12:44 | |
| *** panbalag has joined #openstack-keystone | 12:46 | |
| *** panbalag has left #openstack-keystone | 12:46 | |
| *** edmondsw has joined #openstack-keystone | 12:48 | |
| *** felipemonteiro__ has joined #openstack-keystone | 12:52 | |
| *** edmondsw has quit IRC | 12:52 | |
| *** spzala has joined #openstack-keystone | 12:53 | |
| *** spzala has quit IRC | 12:57 | |
| *** edmondsw has joined #openstack-keystone | 12:59 | |
| *** edmondsw has quit IRC | 13:01 | |
| lbragstad | o/ | 13:17 |
| hrybacki | o/ | 13:19 |
| *** dave-mccowan has joined #openstack-keystone | 13:22 | |
| *** alee has joined #openstack-keystone | 13:22 | |
| *** spzala has joined #openstack-keystone | 13:26 | |
| *** edmondsw has joined #openstack-keystone | 13:27 | |
| *** jmlowe has quit IRC | 13:27 | |
| *** edmondsw has quit IRC | 13:31 | |
| gagehugo | o/ | 13:34 |
| *** jaosorior has quit IRC | 13:55 | |
| *** jaosorior has joined #openstack-keystone | 13:55 | |
| *** felipemonteiro__ has quit IRC | 13:57 | |
| *** felipemonteiro__ has joined #openstack-keystone | 13:57 | |
| *** jdennis has joined #openstack-keystone | 13:58 | |
| *** edmondsw has joined #openstack-keystone | 13:59 | |
| *** edmondsw has quit IRC | 14:04 | |
| *** edmondsw has joined #openstack-keystone | 14:04 | |
| *** jaosorior has quit IRC | 14:07 | |
| *** spilla has joined #openstack-keystone | 14:08 | |
| *** edmondsw has quit IRC | 14:09 | |
| *** edmondsw has joined #openstack-keystone | 14:09 | |
| *** r-daneel has joined #openstack-keystone | 14:10 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add conceptual overview of the service catalog https://review.openstack.org/563974 | 14:12 |
| *** edmondsw has quit IRC | 14:14 | |
| *** zhongjun_ has quit IRC | 14:19 | |
| ayoung | wxy, so one reason I am leary of an anonymous cite is that, if the information originally comes from someone else, and that someone does not want it released, it can make a sticky situation. In this case, I think all the info is public, just well organized. | 14:23 |
| *** panbalag has joined #openstack-keystone | 14:24 | |
| *** AlexeyAbashkin has quit IRC | 14:25 | |
| *** cristicalin has joined #openstack-keystone | 14:32 | |
| *** edmondsw has joined #openstack-keystone | 14:35 | |
| *** r-daneel has quit IRC | 14:38 | |
| *** r-daneel has joined #openstack-keystone | 14:39 | |
| *** edmondsw has quit IRC | 14:40 | |
| *** links has quit IRC | 14:42 | |
| *** edmondsw has joined #openstack-keystone | 14:42 | |
| *** edmondsw has quit IRC | 14:46 | |
| *** wxy| has joined #openstack-keystone | 15:02 | |
| *** jaosorior has joined #openstack-keystone | 15:05 | |
| *** tesseract has quit IRC | 15:06 | |
| *** tesseract has joined #openstack-keystone | 15:06 | |
| knikolla | o/ | 15:07 |
| *** AlexeyAbashkin has joined #openstack-keystone | 15:08 | |
| *** felipemonteiro_ has joined #openstack-keystone | 15:13 | |
| *** felipemonteiro__ has quit IRC | 15:16 | |
| lbragstad | hrybacki: i don't think i have permission to add anything to the retro board | 15:21 |
| lbragstad | s/anything/cards/ | 15:21 |
| hrybacki | lbragstad: try now | 15:23 |
| hrybacki | lbragstad: can't seem to make it public... | 15:24 |
| lbragstad | 404 | 15:25 |
| hrybacki | one mo time. It's public now | 15:25 |
| hrybacki | https://trello.com/b/PiJecAs4/keystone-rocky-m1-retrospective or https://trello.com/b/PiJecAs4 | 15:25 |
| gagehugo | I had to join the board first | 15:25 |
| hrybacki | fun fact: You cannot make a board public from the settings, but rather from a little button on the board UI itself -_- | 15:26 |
| gagehugo | nice ui design | 15:26 |
| kmalloc | hrybacki: what in the actualk... | 15:26 |
| kmalloc | thats.... | 15:26 |
| lbragstad | aha | 15:27 |
| *** dklyle has joined #openstack-keystone | 15:29 | |
| hrybacki | \_0_/ | 15:33 |
| hrybacki | perfect use case for the modern day shruggie | 15:33 |
| *** edmondsw has joined #openstack-keystone | 15:33 | |
| *** jessegler has joined #openstack-keystone | 15:33 | |
| *** gyee has joined #openstack-keystone | 15:38 | |
| *** thorst has joined #openstack-keystone | 15:43 | |
| *** felipemonteiro_ has quit IRC | 15:49 | |
| *** felipemonteiro_ has joined #openstack-keystone | 15:49 | |
| *** pcaruana has quit IRC | 15:51 | |
| *** jmlowe has joined #openstack-keystone | 15:55 | |
| gagehugo | lbragstad yeah idk about that ldap down change | 15:56 |
| gagehugo | I have no idea how to test that outside of integration testing | 15:56 |
| lbragstad | yeah | 15:56 |
| lbragstad | the one that cleans up connections? | 15:57 |
| gagehugo | yeah | 15:57 |
| gagehugo | it definitely needs work | 15:57 |
| lbragstad | we could mock it for now i suppose? | 15:57 |
| gagehugo | I don't think we test much in terms of ldap | 15:57 |
| gagehugo | I haven't dug too deep into the test_backends though to look | 15:58 |
| *** jmlowe has quit IRC | 15:59 | |
| *** r-daneel_ has joined #openstack-keystone | 15:59 | |
| *** r-daneel has quit IRC | 16:00 | |
| *** r-daneel_ is now known as r-daneel | 16:00 | |
| *** cristicalin has quit IRC | 16:16 | |
| *** alee_ has joined #openstack-keystone | 16:22 | |
| *** alee has quit IRC | 16:26 | |
| *** thorst has quit IRC | 16:30 | |
| *** pcaruana has joined #openstack-keystone | 16:43 | |
| *** jessegler has quit IRC | 16:53 | |
| *** itlinux has joined #openstack-keystone | 16:57 | |
| *** felipemonteiro__ has joined #openstack-keystone | 16:59 | |
| hrybacki | Reminder that we are conducting our M1 retrospective. Call-in: https://bluejeans.com/8559013623 Trello Board: https://trello.com/b/PiJecAs4/keystone-rocky-m1-retrospective -- I have to break. Let's plan to join in 10? Please add cards in respective columns as you may | 17:00 |
| *** felipemonteiro__ has quit IRC | 17:01 | |
| lbragstad | note that i'll start office hours after our retrospective | 17:01 |
| *** felipemonteiro__ has joined #openstack-keystone | 17:01 | |
| *** AlexeyAbashkin has quit IRC | 17:01 | |
| *** felipemonteiro_ has quit IRC | 17:02 | |
| *** felipemonteiro has joined #openstack-keystone | 17:03 | |
| *** edmondsw has quit IRC | 17:04 | |
| *** felipemonteiro__ has quit IRC | 17:06 | |
| *** mvk has quit IRC | 17:10 | |
| *** felipemonteiro_ has joined #openstack-keystone | 17:17 | |
| *** felipemonteiro has quit IRC | 17:20 | |
| *** jaosorior has quit IRC | 17:24 | |
| *** panbalag has quit IRC | 17:38 | |
| *** wxy| has quit IRC | 17:40 | |
| *** wxy| has joined #openstack-keystone | 17:40 | |
| gagehugo | sorry was pulled away | 17:42 |
| *** cristicalin has joined #openstack-keystone | 17:46 | |
| *** cristicalin has quit IRC | 17:47 | |
| *** jdennis has quit IRC | 17:54 | |
| *** jdennis has joined #openstack-keystone | 17:55 | |
| *** wxy| has quit IRC | 17:55 | |
| *** edmondsw has joined #openstack-keystone | 17:56 | |
| hrybacki | Rocky M2 Retrospective Board: https://trello.com/b/1E3SeSsl/keystone-rocky-m2-retrospective | 17:56 |
| lbragstad | #startmeeting keystone-office-hours | 17:56 |
| openstack | Meeting started Tue Apr 24 17:56:56 2018 UTC and is due to finish in 60 minutes. The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot. | 17:56 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 17:56 |
| *** openstack changes topic to " (Meeting topic: keystone-office-hours)" | 17:56 | |
| *** ChanServ changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap" | 17:57 | |
| openstack | The meeting name has been set to 'keystone_office_hours' | 17:57 |
| kmalloc | lbragstad: email sent to -dev | 17:58 |
| kmalloc | re stable | 17:58 |
| lbragstad | checking | 17:59 |
| gagehugo | nice | 17:59 |
| lbragstad | fyi - https://review.openstack.org/#/c/563974/ and https://review.openstack.org/#/c/562716/ close bugs | 17:59 |
| gagehugo | lbragstad looking | 18:01 |
| lbragstad | the one about enforcement limits needs some feedback on the API bits | 18:01 |
| lbragstad | GET /v3/limit_model versus GET /v3/limit/model | 18:01 |
| lbragstad | i left comments in review and i can respin that pretty each | 18:01 |
| lbragstad | easy* | 18:01 |
| *** edmondsw_ has joined #openstack-keystone | 18:03 | |
| *** mvk has joined #openstack-keystone | 18:03 | |
| *** alee__ has joined #openstack-keystone | 18:05 | |
| *** edmonds__ has joined #openstack-keystone | 18:05 | |
| *** edmonds__ is now known as edmondsw__ | 18:06 | |
| *** edmondsw__ is now known as edmondsw___ | 18:06 | |
| *** edmondsw has quit IRC | 18:06 | |
| *** edmondsw___ is now known as edmondsw | 18:06 | |
| *** jdennis has quit IRC | 18:06 | |
| *** alee_ has quit IRC | 18:08 | |
| *** edmondsw_ has quit IRC | 18:09 | |
| *** jdennis has joined #openstack-keystone | 18:11 | |
| *** gyee has quit IRC | 18:28 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Add idea for alternative service catalogs https://review.openstack.org/564042 | 18:31 |
| lbragstad | mnaser: ^ relevant to your discussion in -tc the other day | 18:31 |
| *** pcaruana has quit IRC | 18:32 | |
| *** jdennis has quit IRC | 18:34 | |
| *** felipemonteiro__ has joined #openstack-keystone | 18:39 | |
| *** felipemonteiro_ has quit IRC | 18:39 | |
| *** jdennis has joined #openstack-keystone | 18:51 | |
| *** dims has quit IRC | 19:02 | |
| *** dims has joined #openstack-keystone | 19:09 | |
| gagehugo | lbragstad with that double token provider use-case, we should avoid doing this: https://review.openstack.org/#/c/558918/ | 19:13 |
| gagehugo | right? | 19:13 |
| lbragstad | gagehugo: yeah - it was a far fetched use case | 19:15 |
| lbragstad | i was just trying to think of things that would require the location of both repositories | 19:15 |
| lbragstad | then again - if someone is rolling their own token providers, they might not have an issue just exposing new configuration values | 19:17 |
| * lbragstad shrugs | 19:17 | |
| gagehugo | hmm | 19:17 |
| gagehugo | leave it up for now, we will likely discuss it once dev work begins on jwt | 19:20 |
| gagehugo | I guess* | 19:20 |
| lbragstad | yeah - that works | 19:21 |
| *** tesseract has quit IRC | 19:26 | |
| * knikolla finally booked flights/hotel for vancouver. | 19:28 | |
| gagehugo | \o/ | 19:38 |
| *** tonytan4ever has joined #openstack-keystone | 19:58 | |
| *** tonytan4ever has quit IRC | 20:00 | |
| *** itlinux has quit IRC | 20:13 | |
| *** dklyle has quit IRC | 20:18 | |
| *** itlinux has joined #openstack-keystone | 20:19 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add conceptual overview of the service catalog https://review.openstack.org/563974 | 20:26 |
| *** spzala has quit IRC | 20:32 | |
| *** spzala has joined #openstack-keystone | 20:32 | |
| *** raildo has quit IRC | 20:34 | |
| *** raildo has joined #openstack-keystone | 20:34 | |
| *** spzala has quit IRC | 20:34 | |
| *** spilla has quit IRC | 20:36 | |
| lbragstad | kmalloc: do you happen to know where the translation you speak of happens? https://review.openstack.org/#/c/530509/4/oslo_context/context.py | 20:36 |
| *** spilla has joined #openstack-keystone | 20:37 | |
| *** dmellado has quit IRC | 20:38 | |
| lbragstad | i see some stuff in keystonemiddleware/audit/_api.py | 20:39 |
| lbragstad | but that doesn't seem right | 20:39 |
| *** dmellado has joined #openstack-keystone | 20:43 | |
| *** rmascena has joined #openstack-keystone | 20:44 | |
| lbragstad | oh... | 20:44 |
| lbragstad | https://github.com/openstack/keystonemiddleware/blob/686f7a5b0b13a7ef4c7ce6721e6c9e601816ad45/keystonemiddleware/auth_token/_request.py#L201-L217 | 20:45 |
| *** raildo has quit IRC | 20:46 | |
| *** rmascena has quit IRC | 20:50 | |
| kmalloc | Not off the top of my head | 20:50 |
| kmalloc | Will look when done with lunch. | 20:50 |
| *** jmlowe has joined #openstack-keystone | 20:50 | |
| *** jmlowe has quit IRC | 20:52 | |
| lbragstad | i think i found a clue | 20:53 |
| *** dklyle has joined #openstack-keystone | 20:56 | |
| *** spilla has quit IRC | 20:58 | |
| *** edmondsw_ has joined #openstack-keystone | 21:11 | |
| *** itlinux has quit IRC | 21:12 | |
| *** martinus__ has quit IRC | 21:13 | |
| *** edmondsw has quit IRC | 21:13 | |
| *** dklyle has quit IRC | 21:14 | |
| lbragstad | this is weird, i see where ksm scrubs the headers when it receives a request | 21:17 |
| lbragstad | and then it sets them appropriately if the user and service tokens are valid | 21:17 |
| lbragstad | which make total sense | 21:18 |
| lbragstad | the request object trucks along through middleware | 21:18 |
| lbragstad | following the wsgi pipeline | 21:18 |
| lbragstad | and then in the case of nova, it reaches a different piece of middleware called NovaKeystoneContext that processes the headers using oslo.context to build a context object for nova | 21:19 |
| lbragstad | where it gets strange is that ksm sets the headers like X-Project-Id | 21:20 |
| lbragstad | but oslo.context looks for request.headers['HTTP_X_PROJECT_ID'] | 21:20 |
| * lbragstad goes to dig in requests | 21:20 | |
| lbragstad | s/requests/webob/ | 21:22 |
| lbragstad | baha - https://github.com/Pylons/webob/blob/4e8c7ecc20bed6ce6c64daa3dcb97cc328058e8c/src/webob/headers.py#L111-L115 | 21:28 |
| *** dklyle has joined #openstack-keystone | 21:44 | |
| *** r-daneel has quit IRC | 21:52 | |
| *** edmondsw_ has quit IRC | 21:55 | |
| *** alee__ has quit IRC | 22:03 | |
| *** edmondsw has joined #openstack-keystone | 22:05 | |
| *** edmondsw has quit IRC | 22:05 | |
| *** dave-mccowan has quit IRC | 22:15 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystonemiddleware master: Introduce new header for system-scoped tokens https://review.openstack.org/564072 | 22:15 |
| *** gyee has joined #openstack-keystone | 22:23 | |
| kmalloc | lbragstad: aha | 22:43 |
| *** alee__ has joined #openstack-keystone | 22:44 | |
| *** felipemonteiro__ has quit IRC | 23:16 | |
| *** hoonetorg has quit IRC | 23:52 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!