| *** rcernin has quit IRC | 00:07 | |
| *** rcernin has joined #openstack-keystone | 00:09 | |
| *** itlinux has joined #openstack-keystone | 01:03 | |
| *** erus_ has quit IRC | 01:10 | |
| *** itlinux has quit IRC | 01:19 | |
| *** xek has quit IRC | 01:51 | |
| *** erus has quit IRC | 01:53 | |
| *** erus has joined #openstack-keystone | 02:04 | |
| *** erus_ has joined #openstack-keystone | 02:09 | |
| *** itlinux has joined #openstack-keystone | 02:11 | |
| *** xek has joined #openstack-keystone | 02:12 | |
| *** xek has quit IRC | 02:12 | |
| *** xek has joined #openstack-keystone | 02:13 | |
| *** itlinux has quit IRC | 02:13 | |
| openstackgerrit | inspurericzhang proposed openstack/keystone-tempest-plugin master: Update hacking version to latest https://review.openstack.org/629348 | 02:14 |
|---|---|---|
| *** whoami-rajat has joined #openstack-keystone | 02:52 | |
| *** mhen has quit IRC | 02:58 | |
| *** mhen has joined #openstack-keystone | 02:59 | |
| *** vishakha has joined #openstack-keystone | 03:05 | |
| *** gyee has quit IRC | 03:10 | |
| *** markvoelker has joined #openstack-keystone | 03:11 | |
| *** markvoelker has quit IRC | 03:12 | |
| openstackgerrit | Merged openstack/keystone master: Implement system reader role for projects https://review.openstack.org/624215 | 03:16 |
| openstackgerrit | Merged openstack/keystone master: Implement system member role project test coverage https://review.openstack.org/624216 | 03:16 |
| openstackgerrit | Merged openstack/keystone master: Implement system admin role in project API https://review.openstack.org/624217 | 03:16 |
| openstackgerrit | Merged openstack/keystone master: Enhance the shibboleth guide https://review.openstack.org/627982 | 03:16 |
| openstackgerrit | Merged openstack/keystone master: Enhance the mellon guide https://review.openstack.org/627993 | 03:16 |
| openstackgerrit | Merged openstack/keystone master: Enhance the openidc guide https://review.openstack.org/628037 | 03:16 |
| *** itlinux has joined #openstack-keystone | 03:33 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Ensure change is addressed for unified limit table https://review.openstack.org/621497 | 03:43 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain_id column for limit https://review.openstack.org/620202 | 03:43 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level limit support - Manager https://review.openstack.org/621468 | 03:43 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level limit support - API https://review.openstack.org/622773 | 03:43 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level support for strict-two-level-model https://review.openstack.org/623153 | 03:43 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Update project depth check https://review.openstack.org/623984 | 03:43 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Release note for domain level limit https://review.openstack.org/624019 | 03:43 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [api-ref] add domain level limit support https://review.openstack.org/624562 | 03:43 |
| *** spsurya has joined #openstack-keystone | 03:46 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 03:51 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Add openstack_groups to assertion https://review.openstack.org/588211 | 03:55 |
| *** Dinesh_Bhor has quit IRC | 03:59 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Optimize fernet token and receipts in cli.py https://review.openstack.org/627364 | 04:11 |
| *** erus_ has quit IRC | 04:25 | |
| *** markvoelker has joined #openstack-keystone | 04:37 | |
| *** markvoelker has quit IRC | 04:42 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone master: Add documentation for Auth Receipts and MFA https://review.openstack.org/580535 | 04:54 |
| *** lifeless_ has joined #openstack-keystone | 04:57 | |
| adriant | So sorry it has taken this bloody long to get that actually up for review ^ | 04:58 |
| adriant | my working holiday turned into an actual holiday and I'm only now getting back into doing upstream work. :( | 04:59 |
| *** sapd1_ has quit IRC | 05:02 | |
| *** irclogbot_1 has quit IRC | 05:02 | |
| *** chason has quit IRC | 05:02 | |
| *** lifeless has quit IRC | 05:02 | |
| *** irclogbot_1 has joined #openstack-keystone | 05:04 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 05:04 | |
| *** sapd1_ has joined #openstack-keystone | 05:10 | |
| *** Dinesh_Bhor has quit IRC | 05:12 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 05:30 | |
| *** markvoelker has joined #openstack-keystone | 06:04 | |
| *** shyamb has joined #openstack-keystone | 06:09 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [api-ref] add domain level limit support https://review.openstack.org/624562 | 06:14 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Clean up the create_arguments_apply methods https://review.openstack.org/627617 | 06:27 |
| *** shyamb has quit IRC | 06:43 | |
| *** shyamb has joined #openstack-keystone | 06:44 | |
| *** pcaruana has joined #openstack-keystone | 07:06 | |
| *** shyamb has quit IRC | 07:25 | |
| *** rcernin has quit IRC | 07:26 | |
| *** Dinesh_Bhor has quit IRC | 07:38 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 07:39 | |
| *** itlinux has quit IRC | 07:48 | |
| *** shyamb has joined #openstack-keystone | 07:59 | |
| *** Dinesh_Bhor has quit IRC | 07:59 | |
| cmurphy | actual holidays are awesome | 08:33 |
| *** shyamb has quit IRC | 09:02 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 09:21 | |
| openstackgerrit | zhufl proposed openstack/keystone master: Do not use self in classmethod https://review.openstack.org/629415 | 09:26 |
| *** erus has quit IRC | 09:30 | |
| *** markvoelker has quit IRC | 09:33 | |
| *** erus has joined #openstack-keystone | 09:35 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Add openstack_groups to assertion https://review.openstack.org/588211 | 09:36 |
| *** yan0s has joined #openstack-keystone | 09:41 | |
| *** erus has quit IRC | 09:42 | |
| *** erus has joined #openstack-keystone | 09:44 | |
| *** erus has quit IRC | 09:50 | |
| *** erus has joined #openstack-keystone | 09:58 | |
| *** erus has quit IRC | 10:05 | |
| *** shyamb has joined #openstack-keystone | 10:09 | |
| *** erus has joined #openstack-keystone | 10:14 | |
| *** Dinesh_Bhor has quit IRC | 10:17 | |
| *** erus has quit IRC | 10:21 | |
| *** jaosorior has quit IRC | 10:22 | |
| openstackgerrit | Merged openstack/keystonemiddleware master: Make sure audit middleware use own context https://review.openstack.org/626226 | 10:27 |
| *** erus has joined #openstack-keystone | 10:29 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 10:29 | |
| *** Dinesh_Bhor has quit IRC | 10:31 | |
| *** erus has quit IRC | 10:35 | |
| *** erus has joined #openstack-keystone | 10:44 | |
| *** erus has quit IRC | 10:50 | |
| *** erus has joined #openstack-keystone | 10:58 | |
| *** jaosorior has joined #openstack-keystone | 10:59 | |
| *** erus has quit IRC | 11:05 | |
| *** erus has joined #openstack-keystone | 11:14 | |
| *** shyamb has quit IRC | 11:15 | |
| *** raildo has joined #openstack-keystone | 12:48 | |
| *** dave-mccowan has joined #openstack-keystone | 13:19 | |
| *** erus_ has joined #openstack-keystone | 13:42 | |
| *** aojea_ has joined #openstack-keystone | 13:49 | |
| *** whoami-rajat has quit IRC | 13:52 | |
| *** vishakha has quit IRC | 13:53 | |
| *** aojea_ has quit IRC | 14:04 | |
| *** aojea_ has joined #openstack-keystone | 14:11 | |
| *** aojea_ has quit IRC | 14:22 | |
| *** aojea_ has joined #openstack-keystone | 14:27 | |
| *** aojea_ has quit IRC | 14:30 | |
| *** whoami-rajat has joined #openstack-keystone | 14:31 | |
| gagehugo | o/ | 14:46 |
| *** aojea_ has joined #openstack-keystone | 14:46 | |
| cmurphy | \o | 14:47 |
| lbragstad | hola | 14:47 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update limit policies for system admin https://review.openstack.org/621022 | 14:59 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow domain users to access the limit API https://review.openstack.org/621023 | 14:59 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add tests for project users interacting with limits https://review.openstack.org/621024 | 14:59 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove limit policies from policy.v3cloudsample.json https://review.openstack.org/621025 | 14:59 |
| *** vishakha has joined #openstack-keystone | 15:02 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Add openstack_groups to assertion https://review.openstack.org/588211 | 15:07 |
| *** chason_ has joined #openstack-keystone | 15:08 | |
| *** aojea_ has quit IRC | 15:36 | |
| *** aojea_ has joined #openstack-keystone | 15:36 | |
| *** aojea_ has quit IRC | 15:48 | |
| *** aojea_ has joined #openstack-keystone | 15:48 | |
| *** pcaruana has quit IRC | 16:03 | |
| knikolla | o/ | 16:05 |
| *** gyee has joined #openstack-keystone | 16:18 | |
| *** aojea_ has quit IRC | 16:29 | |
| *** aojea_ has joined #openstack-keystone | 16:31 | |
| *** aojea_ has quit IRC | 16:41 | |
| *** imacdonn has quit IRC | 16:51 | |
| *** imacdonn has joined #openstack-keystone | 16:51 | |
| *** erus_ has quit IRC | 17:00 | |
| *** itlinux has joined #openstack-keystone | 17:06 | |
| *** ayoung has joined #openstack-keystone | 17:15 | |
| *** erus has quit IRC | 17:32 | |
| *** erus has joined #openstack-keystone | 17:34 | |
| openstackgerrit | Ben Nemec proposed openstack/oslo.limit master: fix the url in doc https://review.openstack.org/627368 | 17:41 |
| openstackgerrit | 98k proposed openstack/python-keystoneclient master: Add doc/requirements.txt to releasenotes tox environment https://review.openstack.org/629599 | 17:45 |
| openstackgerrit | Merged openstack/oslo.limit master: fix the url in doc https://review.openstack.org/627368 | 18:00 |
| *** yan0s has quit IRC | 18:19 | |
| *** itlinux has quit IRC | 18:36 | |
| *** vishakha has quit IRC | 18:53 | |
| *** erus has quit IRC | 19:00 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system reader role for users https://review.openstack.org/605485 | 20:14 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system member role user test coverage https://review.openstack.org/623317 | 20:14 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system admin role in users API https://review.openstack.org/623318 | 20:14 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement domain reader functionality for user API https://review.openstack.org/623319 | 20:14 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement domain member functionality for user API https://review.openstack.org/623320 | 20:14 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement domain admin functionality for user API https://review.openstack.org/623321 | 20:14 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add explicit testing for project users and the user API https://review.openstack.org/623322 | 20:14 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove user policies from policy.v3cloudsample.json https://review.openstack.org/623323 | 20:14 |
| lbragstad | alright - that should be the majority of the updates for implementing default roles | 20:29 |
| lbragstad | at least for the patches that are up | 20:29 |
| *** markvoelker has joined #openstack-keystone | 20:45 | |
| *** nwilburn has joined #openstack-keystone | 20:56 | |
| nwilburn | Hey all, I have a quick question on whether fixes can be backported into the Queens release. I am specifically looking for a package version bump in python-ldappool for the Queens release from 2.2 to at least 2.3.1. Is this feasible and if so how would I go about requesting this? Would this just be a bug report or a PR to the proper repository? If so which repository would that be? | 20:57 |
| nwilburn | I think I found my answer for the repository, but I'd still love to know if this is even feasible | 21:00 |
| *** prometheanfire has joined #openstack-keystone | 21:01 | |
| prometheanfire | lbragstad: probably a question for the stable team too :P | 21:01 |
| prometheanfire | iirc queens is security only now (or close to it) | 21:02 |
| lbragstad | nwilburn ^ prometheanfire might be able to give some guidance there | 21:02 |
| nwilburn | Ok thanks! There was a bug which you guys helped me troubleshoot a while back which involved python-ldappool and its retry mechanism. Currently Queens and below will shoot off 3 password attempts after a single bad password through Keystone. This causes an immediate lockout when your bad password threshold is set to 3. The fix has already been applied to ldappool but the version number | 21:07 |
| prometheanfire | https://docs.openstack.org/project-team-guide/stable-branches.html | 21:07 |
| nwilburn | specified in the stable/queens branch of the requirements repo is too low (2.2). If this isn't something that could be backported that is fine but if it is something that could be backported it would be much appreciated | 21:07 |
| prometheanfire | 2.3 is a fix? | 21:07 |
| prometheanfire | https://github.com/openstack/ldappool/compare/2.2.0...2.3.0 doesn't look like it | 21:08 |
| nwilburn | I believe the change wasn't included until the tag 2.3.1 | 21:09 |
| prometheanfire | looks like 2.3.1 has it | 21:09 |
| prometheanfire | https://github.com/openstack/ldappool/commit/459000d7aa3fa1ace05c800ff1273b99fbd8babe in https://github.com/openstack/ldappool/compare/2.2.0...2.3.1 | 21:09 |
| prometheanfire | dep was updated python-ldap>=3.0.0, not sure if that'll conflict with other stuff in queens | 21:10 |
| prometheanfire | the stestr stuff changed too | 21:10 |
| nwilburn | Hmm that sounds like it is probably more trouble than it is worth | 21:11 |
| prometheanfire | python-ldap isn't in upper-constraints.txt | 21:11 |
| prometheanfire | ya :( | 21:11 |
| prometheanfire | that's the main problem (process wise, rules are another thing) | 21:12 |
| nwilburn | Alright no worries. The workaround is easy enough for us and hopefully we will be moving past queens anyway. I figured I see if there was a way to get it fixed in the queens release but it doesn't sound like that is the case. So we will stick with the workaround for now. Thanks for the assistance! | 21:13 |
| prometheanfire | cool | 21:16 |
| *** aojea has joined #openstack-keystone | 21:26 | |
| *** aojea has quit IRC | 21:33 | |
| *** jdennis has quit IRC | 22:00 | |
| *** jdennis has joined #openstack-keystone | 22:10 | |
| *** nwilburn has quit IRC | 22:38 | |
| *** rcernin has joined #openstack-keystone | 22:52 | |
| *** markvoelker has quit IRC | 22:57 | |
| *** markvoelker has joined #openstack-keystone | 22:57 | |
| *** tonyb has joined #openstack-keystone | 23:00 | |
| tonyb | lbragstad: did the question re ldappool on queens get answered? | 23:01 |
| *** markvoelker has quit IRC | 23:02 | |
| *** whoami-rajat has quit IRC | 23:04 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!