| *** tobberydberg has quit IRC | 00:35 | |
| *** awalende has joined #openstack-keystone | 00:36 | |
| *** johanssone has quit IRC | 00:36 | |
| *** tobberydberg has joined #openstack-keystone | 00:37 | |
| *** johanssone has joined #openstack-keystone | 00:39 | |
| *** awalende has quit IRC | 00:41 | |
| *** rcernin has joined #openstack-keystone | 00:48 | |
| *** gyee has quit IRC | 00:52 | |
| *** jamesmcarthur has joined #openstack-keystone | 00:55 | |
| *** ayoung has joined #openstack-keystone | 01:10 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone-tempest-plugin master: WIP/PoC:Add RBAC tests https://review.opendev.org/686305 | 01:17 |
|---|---|---|
| *** jamesmcarthur has quit IRC | 01:28 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:09 | |
| openstackgerrit | Zane Bitter proposed openstack/oslo.policy master: Don't use string processing to combine deprecated rules https://review.opendev.org/698790 | 02:25 |
| *** jamesmcarthur has quit IRC | 02:44 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:47 | |
| *** jamesmcarthur has quit IRC | 02:48 | |
| *** ayoung has quit IRC | 02:59 | |
| *** ayoung has joined #openstack-keystone | 03:00 | |
| *** jamesmcarthur has joined #openstack-keystone | 03:10 | |
| *** jamesmcarthur has quit IRC | 03:34 | |
| *** jamesmcarthur has joined #openstack-keystone | 03:37 | |
| *** jamesmcarthur has quit IRC | 03:53 | |
| openstackgerrit | Merged openstack/keystone master: Migrate grenade jobs to py3 https://review.opendev.org/695103 | 04:13 |
| *** awalende has joined #openstack-keystone | 04:36 | |
| *** awalende has quit IRC | 04:41 | |
| *** dave-mccowan has quit IRC | 05:30 | |
| *** pcaruana has joined #openstack-keystone | 06:02 | |
| *** pawan-gupta has joined #openstack-keystone | 06:47 | |
| *** dancn has joined #openstack-keystone | 07:39 | |
| *** rcernin has quit IRC | 07:41 | |
| *** tesseract has joined #openstack-keystone | 07:43 | |
| *** awalende has joined #openstack-keystone | 08:19 | |
| *** amoralej|off is now known as amoralej | 08:27 | |
| *** FlorianFa has quit IRC | 08:49 | |
| *** spatel has joined #openstack-keystone | 08:50 | |
| *** spatel has quit IRC | 08:54 | |
| *** FlorianFa has joined #openstack-keystone | 09:01 | |
| *** FlorianFa has quit IRC | 09:09 | |
| *** rcernin has joined #openstack-keystone | 09:14 | |
| *** tkajinam has quit IRC | 09:19 | |
| *** FlorianFa has joined #openstack-keystone | 09:22 | |
| *** jmlowe has quit IRC | 09:35 | |
| *** jmlowe has joined #openstack-keystone | 09:37 | |
| *** rcernin has quit IRC | 09:53 | |
| *** raildo has joined #openstack-keystone | 11:34 | |
| *** kozhukalov has joined #openstack-keystone | 12:30 | |
| *** kozhukalov has quit IRC | 12:48 | |
| *** kozhukalov has joined #openstack-keystone | 12:48 | |
| *** spatel has joined #openstack-keystone | 12:48 | |
| *** lbragstad_ has quit IRC | 12:53 | |
| *** spatel has quit IRC | 12:55 | |
| *** gshippey has quit IRC | 13:20 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:26 | |
| *** jamesmcarthur has quit IRC | 13:34 | |
| *** awalende has quit IRC | 13:42 | |
| *** awalende has joined #openstack-keystone | 13:42 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:44 | |
| *** awalende has quit IRC | 13:46 | |
| *** awalende has joined #openstack-keystone | 13:47 | |
| *** lbragstad has joined #openstack-keystone | 13:48 | |
| *** awalende_ has joined #openstack-keystone | 13:48 | |
| *** awalende_ has quit IRC | 13:51 | |
| *** awalende has quit IRC | 13:52 | |
| *** awalende has joined #openstack-keystone | 14:13 | |
| *** amoralej is now known as amoralej|lunch | 14:15 | |
| *** jamesmcarthur has quit IRC | 14:16 | |
| *** jamesmcarthur has joined #openstack-keystone | 14:17 | |
| *** awalende has quit IRC | 14:17 | |
| *** jamesmcarthur has quit IRC | 14:21 | |
| *** jamesmcarthur has joined #openstack-keystone | 14:21 | |
| *** dmellado has quit IRC | 14:36 | |
| *** dmellado has joined #openstack-keystone | 14:39 | |
| *** amoralej|lunch is now known as amoralej | 14:48 | |
| *** gshippey has joined #openstack-keystone | 14:52 | |
| *** kozhukalov has quit IRC | 14:56 | |
| *** jamesmcarthur has quit IRC | 15:02 | |
| *** jamesmcarthur has joined #openstack-keystone | 15:02 | |
| *** jamesmcarthur has quit IRC | 15:09 | |
| *** jamesmcarthur has joined #openstack-keystone | 15:17 | |
| *** ayoung has quit IRC | 15:23 | |
| *** ayoung has joined #openstack-keystone | 15:24 | |
| *** spatel has joined #openstack-keystone | 15:29 | |
| *** spatel has quit IRC | 15:41 | |
| *** kozhukalov has joined #openstack-keystone | 15:46 | |
| *** lbragstad has quit IRC | 15:47 | |
| *** baffle has quit IRC | 15:54 | |
| *** kozhukalov has quit IRC | 15:56 | |
| *** bnemec is now known as beekneemech | 16:06 | |
| knikolla | o/ | 16:15 |
| gagehugo | o/ | 16:16 |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone-specs master: Repropose federated attributes in the user API for Ussuri https://review.opendev.org/698950 | 16:20 |
| *** dancn has quit IRC | 16:21 | |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone-specs master: Repropose Expiring Group Membership for Ussuri https://review.opendev.org/698951 | 16:22 |
| *** gyee has joined #openstack-keystone | 16:26 | |
| *** kozhukalov has joined #openstack-keystone | 16:41 | |
| *** tesseract has quit IRC | 16:53 | |
| *** dklyle has quit IRC | 17:26 | |
| *** david-lyle has joined #openstack-keystone | 17:26 | |
| *** openstackgerrit has quit IRC | 17:29 | |
| *** mvkr has quit IRC | 17:34 | |
| *** kozhukalov has quit IRC | 17:35 | |
| *** lbragstad has joined #openstack-keystone | 17:39 | |
| *** cmurphy is now known as cmorpheus | 17:43 | |
| *** openstackgerrit has joined #openstack-keystone | 17:49 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystonemiddleware master: Remove _v3_to_v2_catalog and associated tests https://review.opendev.org/678382 | 17:49 |
| *** amoralej is now known as amoralej|off | 17:51 | |
| *** melwitt is now known as jgwentworth | 17:57 | |
| openstackgerrit | Ghanshyam Mann proposed openstack/keystone-specs master: [ussuri][goal] Drop python 2.7 support https://review.opendev.org/698983 | 18:24 |
| *** lbragstad has quit IRC | 18:41 | |
| *** lbragsta_ has joined #openstack-keystone | 18:41 | |
| openstackgerrit | Ghanshyam Mann proposed openstack/keystone-specs master: [ussuri][goal] Drop python 2.7 support https://review.opendev.org/698983 | 18:59 |
| *** awalende has joined #openstack-keystone | 19:01 | |
| *** awalende has quit IRC | 19:06 | |
| openstackgerrit | Merged openstack/oslo.policy master: Don't use string processing to combine deprecated rules https://review.opendev.org/698790 | 19:09 |
| *** jamesmcarthur has quit IRC | 19:18 | |
| *** jamesmcarthur has joined #openstack-keystone | 19:20 | |
| *** jamesmcarthur has quit IRC | 19:25 | |
| gagehugo | lbragsta_ you around? | 19:31 |
| lbragsta_ | gagehugo yeah | 19:31 |
| *** lbragsta_ is now known as lbragstad | 19:31 | |
| gagehugo | lbragstad: Do you know why LDAP users IDs are that 64 char uuid? | 19:32 |
| lbragstad | gagehugo they're hashed | 19:32 |
| gagehugo | from the user_id_mapping? | 19:32 |
| gagehugo | user_id_attribute* | 19:32 |
| lbragstad | iirc - it's a property from LDAP and keystone hashes that against the domain ID or domain name | 19:32 |
| lbragstad | i think so - it's in the id mapping backend, i believe | 19:32 |
| gagehugo | ok, I'll take a look | 19:33 |
| lbragstad | so - technically, you can prune ldap users from keystone and if they come back, they'll get the same id (assuming none of the information used in the hash has changed) | 19:33 |
| gagehugo | I remembered that ldap users were 64 char uuids, just not how we generated that | 19:34 |
| gagehugo | lbragstad: trying to figure out how to have the ldap user name in cadf notifications, currently getting that uuid and its not immediately obvious who is doing what | 19:36 |
| lbragstad | gagehugo i think it's in keystone.identity.id_generators.sha256.py | 19:36 |
| gagehugo | ok | 19:37 |
| lbragstad | can't you consume the notification, pull out the ID, and query keystone for the rest of the information about the user (name, email, domain, etc...) | 19:37 |
| gagehugo | yes, was curious if there was another way | 19:37 |
| gagehugo | but that's all I got so far | 19:37 |
| lbragstad | sounds like you want more information in the notification payload? | 19:38 |
| gagehugo | possibly | 19:40 |
| *** lbragsta_ has joined #openstack-keystone | 19:40 | |
| lbragsta_ | in the past, we've hesitated to bloat the notification payload in favor of just adding an ID and having the consumer query keystone for the information they want | 19:41 |
| lbragsta_ | nick lbragstad | 19:41 |
| gagehugo | I originally thought the user_id_attribute config setting would set the id, since we have unique IDs | 19:41 |
| gagehugo | in LDAP | 19:41 |
| lbragsta_ | yeah... i think we wanted to make sure two users with the same ids in different domains (ldap installations) wouldn't collide | 19:42 |
| lbragsta_ | but i'm not 100% sure | 19:43 |
| *** lbragstad has quit IRC | 19:43 | |
| gagehugo | that makes sense | 19:43 |
| *** kozhukalov has joined #openstack-keystone | 20:10 | |
| *** gmann is now known as gmann_afk | 20:13 | |
| gagehugo | the cadf spec shows the initiator containing the user name, not sure why it's just the user id for most cases | 20:19 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: [DNM] Testing CADF initiator username https://review.opendev.org/699013 | 20:25 |
| *** kozhukalov has quit IRC | 20:31 | |
| *** gyee has quit IRC | 20:35 | |
| *** kozhukalov has joined #openstack-keystone | 20:37 | |
| *** lbragstad has joined #openstack-keystone | 20:41 | |
| *** lbragsta_ has quit IRC | 20:44 | |
| *** ayoung has quit IRC | 20:44 | |
| *** ayoung has joined #openstack-keystone | 20:45 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: [WIP] Add functional testing gate https://review.opendev.org/531014 | 20:48 |
| *** raildo has quit IRC | 20:59 | |
| *** gyee has joined #openstack-keystone | 21:17 | |
| *** ayoung has quit IRC | 21:23 | |
| *** lbragstad has quit IRC | 21:40 | |
| *** lbragstad has joined #openstack-keystone | 21:42 | |
| *** kozhukalov has quit IRC | 21:54 | |
| lbragstad | gagehugo are you using basic notification or pycadf? | 22:00 |
| gagehugo | cadf | 22:02 |
| lbragstad | hmm - those should adhere to the specification | 22:03 |
| lbragstad | basic notifications are pretty slim | 22:03 |
| gagehugo | Yeah we're getting the full cadf notifciations, but they just have user_id for everything internally | 22:04 |
| *** jamesmcarthur has joined #openstack-keystone | 22:17 | |
| openstackgerrit | Merged openstack/keystone master: Add name in GET API of application credentials https://review.opendev.org/696519 | 22:21 |
| *** jamesmcarthur has quit IRC | 22:28 | |
| *** jamesmcarthur has joined #openstack-keystone | 22:28 | |
| lbragstad | that seems like a bug if the spec says we're suppose to be emitting the name, too | 22:30 |
| gagehugo | https://www.dmtf.org/sites/default/files/standards/documents/DSP2038_1.1.0.pdf#page=12 | 22:38 |
| *** mvkr has joined #openstack-keystone | 22:38 | |
| *** lbragsta_ has joined #openstack-keystone | 22:42 | |
| *** lbragstad has quit IRC | 22:43 | |
| gagehugo | I'll open a bug and we can discuss there | 22:48 |
| *** pcaruana has quit IRC | 22:48 | |
| *** lbragsta_ has quit IRC | 22:54 | |
| *** jamesmcarthur has quit IRC | 22:57 | |
| *** jamesmcarthur has joined #openstack-keystone | 23:15 | |
| *** jamesmcarthur has quit IRC | 23:18 | |
| *** jamesmcarthur has joined #openstack-keystone | 23:37 | |
| *** jamesmcarthur has quit IRC | 23:41 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: [WIP] Add support for functional RBAC tests https://review.opendev.org/699051 | 23:54 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone-tempest-plugin master: WIP/PoC:Add RBAC tests https://review.opendev.org/686305 | 23:55 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!