| *** rossella_s has joined #openstack-outreachy | 00:00 | |
| *** rossella_s has quit IRC | 01:06 | |
| *** rossella_s has joined #openstack-outreachy | 01:09 | |
| *** rossella_s has quit IRC | 01:09 | |
| *** rossella_s has joined #openstack-outreachy | 01:10 | |
| *** tellesnobrega has quit IRC | 02:07 | |
| *** rossella_s has quit IRC | 02:08 | |
| *** tellesnobrega has joined #openstack-outreachy | 02:20 | |
| *** rossella_s has joined #openstack-outreachy | 02:31 | |
| *** rossella_s has quit IRC | 03:03 | |
| *** rossella_s has joined #openstack-outreachy | 04:01 | |
| *** rossella_s has quit IRC | 04:21 | |
| *** rossella_s has joined #openstack-outreachy | 06:30 | |
| *** mine0901 has joined #openstack-outreachy | 06:31 | |
| *** rossella_s has quit IRC | 06:35 | |
| *** jpich has joined #openstack-outreachy | 07:29 | |
| *** raildo has joined #openstack-outreachy | 10:56 | |
| *** lwanderley has joined #openstack-outreachy | 11:25 | |
| *** lwanderley has quit IRC | 11:33 | |
| *** mine0901 has quit IRC | 11:40 | |
| *** tellesnobrega has quit IRC | 11:46 | |
| *** nishaYadav has joined #openstack-outreachy | 12:04 | |
| *** nishaYadav_ has joined #openstack-outreachy | 12:21 | |
| *** tellesnobrega has joined #openstack-outreachy | 12:22 | |
| *** nishaYadav has quit IRC | 12:24 | |
| *** nishaYadav_ has quit IRC | 12:42 | |
| *** nishaYadav has joined #openstack-outreachy | 12:43 | |
| *** nishaYadav is now known as Guest57493 | 12:43 | |
| *** Guest57493 is now known as nishaYadav_ | 12:46 | |
| *** nishaYadav__ has joined #openstack-outreachy | 12:59 | |
| *** nishaYadav_ has quit IRC | 13:02 | |
| *** nishaYadav__ is now known as nishaYadav_ | 13:06 | |
| nishaYadav_ | o/ | 13:06 |
|---|---|---|
| nishaYadav_ | vkmc, o/ | 13:15 |
| vkmc | nishaYadav_, \o | 13:23 |
| vkmc | :) | 13:23 |
| nishaYadav_ | vkmc, I am thinking of starting contributing in Horizon | 13:25 |
| vkmc | that would be awesome | 13:25 |
| vkmc | ! | 13:25 |
| nishaYadav_ | vkmc, basically, i am interested in learning more about how openstack is deployed by firms | 13:26 |
| nishaYadav_ | vkmc, is horizon a good place or any other project would be more relevant for this adventure :D | 13:26 |
| vkmc | nishaYadav_, you want to know how OpenStack is being deployed on production? | 13:28 |
| vkmc | that sounds more like you need an ops experience rather than dev | 13:28 |
| nishaYadav_ | vkmc, oooh, I wanted to contribute to understand better :/ | 13:29 |
| vkmc | I see | 13:29 |
| vkmc | yes... | 13:29 |
| vkmc | if you want to learn more about deployments in production I'd go to something like openstack-ansible or tripleo | 13:29 |
| vkmc | those are automation tools for deployments | 13:30 |
| nishaYadav_ | oh, hmm | 13:30 |
| nishaYadav_ | vkmc, I will dive into their details then and probably hang around the channel afterwards | 13:32 |
| nishaYadav_ | vkmc, thanksss | 13:32 |
| vkmc | nishaYadav_, let me know if I can help | 13:32 |
| nishaYadav_ | vkmc, cool :D | 13:33 |
| *** raildo has quit IRC | 14:02 | |
| *** raildo has joined #openstack-outreachy | 14:03 | |
| *** nishaYadav_ has quit IRC | 14:04 | |
| *** mine0901 has joined #openstack-outreachy | 14:36 | |
| *** rossella_s has joined #openstack-outreachy | 14:53 | |
| *** rossella_s has quit IRC | 15:08 | |
| *** tellesnobrega has quit IRC | 15:17 | |
| *** jpich has quit IRC | 16:05 | |
| *** lwanderley has joined #openstack-outreachy | 17:07 | |
| rodrigods | hello | 17:31 |
| rodrigods | is everyone here? ping lwanderley raildo | 17:31 |
| lwanderley | i'm here | 17:31 |
| rodrigods | #agenda https://etherpad.openstack.org/p/outreachy-leticia | 17:32 |
| rodrigods | lwanderley, let's wait some minutes for raildo | 17:32 |
| lwanderley | ok | 17:33 |
| rodrigods | ok... let's start | 17:35 |
| lwanderley | cool | 17:35 |
| rodrigods | lwanderley, so... any progress after the email you sent last week? | 17:36 |
| lwanderley | i don't really have a lot new to share | 17:36 |
| rodrigods | lwanderley, ok... so you are seeing the same error? | 17:37 |
| lwanderley | the lastest commit on the keystone core.py file states that the delete operations from the ldap backend were removed because it is supposed to be used on read only mode | 17:37 |
| rodrigods | yes | 17:37 |
| lwanderley | and the create were left there for sake of the test, but they should not be called if one is not tesing | 17:37 |
| raildo | sorry, now I'm here | 17:38 |
| lwanderley | testing* | 17:38 |
| rodrigods | lwanderley, correct, keystone should only use as read-only | 17:38 |
| rodrigods | meaning... anything it is trying to modify in ldap should be handled differently in the script | 17:40 |
| lwanderley | yeah, i was thinking it could have something to do with the Invalid uuid warning it shows a few log lines above the error | 17:41 |
| raildo | lwanderley, did you figure out how to change this? since we should keep the read-only behavior | 17:41 |
| lwanderley | not yet | 17:41 |
| lwanderley | but right now i'm focusing on finding out why it is trying to create a user | 17:42 |
| rodrigods | lwanderley, do you know where the user is being created? | 17:42 |
| rodrigods | i mean, the line of some script creating the user | 17:43 |
| rodrigods | that is trying to create* | 17:43 |
| lwanderley | https://github.com/openstack/keystone/blob/master/keystone/cmd/cli.py#L255 | 17:43 |
| lwanderley | on that line | 17:43 |
| rodrigods | cool, so during keystone bootstrap | 17:44 |
| rodrigods | to explain what is going on... | 17:44 |
| rodrigods | so keystone needs to bootstrap some stuff like an admin account for its first usage | 17:45 |
| rodrigods | when using ldap, this user would be created in a different backend (not in ldap) | 17:45 |
| lwanderley | hmmm ok | 17:46 |
| rodrigods | meaning we need to setup this somehow in the ldap script - having a "service domain" and a "all other users domain" | 17:46 |
| raildo | exactly, we should have some sql backend at this point, and configure this to point for this backend, instead of ldap | 17:46 |
| rodrigods | lwanderley, take a look on this: http://heig-cloud.github.io/article/2015-12-17%20ldap/ | 17:46 |
| lwanderley | aah, that makes a lot of sense | 17:47 |
| rodrigods | basically: we need a script to setup the multiple domains/backends | 17:48 |
| rodrigods | this can be done inside the ldap script, but should be refactored later | 17:49 |
| rodrigods | lwanderley, makes sense? do you have enough information to be unblocked? | 17:49 |
| lwanderley | so when keystone o setup with sql it uses the same user for bootstrap? | 17:49 |
| raildo | lwanderley, keystone supports multiple backends(including multiple ldaps), but we should have at least on sql backend for the keystone configuration, and this is the error that you're facing at this moment | 17:49 |
| rodrigods | ^ correct | 17:49 |
| raildo | lwanderley, yeap | 17:49 |
| lwanderley | yeah, i think i can work with that | 17:50 |
| rodrigods | lwanderley, you basically say: if you are accessing domain1 -> use this driver, if accessing domain2 -> use this other driver | 17:50 |
| raildo | rodrigods, ++ | 17:50 |
| raildo | lwanderley, by default, keystone only use one domain, called default" | 17:51 |
| raildo | "default" and use sql driver for this | 17:51 |
| raildo | so, this is the part that we have to change on this script | 17:51 |
| lwanderley | on the cli script? | 17:52 |
| rodrigods | lwanderley, ldap | 17:52 |
| lwanderley | good, ok | 17:53 |
| raildo | lwanderley, we should keep with the default domain created so, the bootstrap will works fine with the sql driver. but should have another one, for the ldap stuffs | 17:53 |
| raildo | we should* | 17:53 |
| *** nishaYadav has joined #openstack-outreachy | 17:54 | |
| lwanderley | so the sql default is missing and should be created | 17:54 |
| lwanderley | ? | 17:54 |
| rodrigods | lwanderley, the ldap script is setting the keystone "identity" backend to "ldap" | 17:55 |
| rodrigods | and when keystone tries to write anything there, it fails | 17:55 |
| rodrigods | what the ldap script should be doing is creating an additional domain and configuring the ldap backend there | 17:56 |
| lwanderley | hmm ok, i get it | 17:56 |
| rodrigods | #link http://heig-cloud.github.io/article/2015-12-17%20ldap/ | 17:57 |
| raildo | on the keystone script on devstack, you can find more information about this, like: https://github.com/openstack-dev/devstack/blob/1ca22d50b0847f9af0c569ed32f358711952b17a/lib/keystone#L103 | 17:57 |
| rodrigods | ^ should clarify things | 17:57 |
| rodrigods | lwanderley, any more doubts? | 17:58 |
| rodrigods | questions? | 17:58 |
| lwanderley | nop, thank you | 17:58 |
| rodrigods | great, let us know if you need anything | 17:58 |
| lwanderley | i will, thanks | 17:59 |
| rodrigods | i will also review the WIP patch you've submitted | 17:59 |
| rodrigods | thanks and nice progress! | 17:59 |
| lwanderley | that should keep me busy tomorrow at least | 17:59 |
| rodrigods | :) | 17:59 |
| raildo | lwanderley, great, so good luck and anything else, let us know :) | 17:59 |
| lwanderley | :) thanks | 18:00 |
| lwanderley | btw, i made my first post on the blog | 18:00 |
| raildo | lwanderley, nice, do you have a link? | 18:00 |
| rodrigods | lwanderley, fwiw a blog post about how you solved these first issues, including the multidomain setup would be awesome | 18:01 |
| rodrigods | as you can see we don't have much resources about it | 18:01 |
| lwanderley | hahah yeah | 18:01 |
| rodrigods | lwanderley, great! i will take a look! | 18:01 |
| lwanderley | i plane to post something about that by the end of the week | 18:01 |
| raildo | lwanderley, sounds great | 18:01 |
| lwanderley | plan* | 18:01 |
| lwanderley | #link https://medium.com/@wanderleylf/welcome-to-outreachy-5283e79b7961 | 18:03 |
| rodrigods | awesome, so for me that's it | 18:04 |
| rodrigods | anything else? | 18:04 |
| raildo | not from my side | 18:04 |
| rodrigods | great | 18:04 |
| raildo | lwanderley, nice progress! | 18:04 |
| lwanderley | thanks, not from me | 18:05 |
| rodrigods | cool, bye! :) | 18:05 |
| lwanderley | bye :) | 18:05 |
| raildo | bye! | 18:05 |
| *** lwanderley has quit IRC | 18:06 | |
| *** lwanderley has joined #openstack-outreachy | 18:07 | |
| *** lwanderley has quit IRC | 18:50 | |
| *** nishaYadav has quit IRC | 19:03 | |
| *** tellesnobrega has joined #openstack-outreachy | 19:24 | |
| *** rmascena has joined #openstack-outreachy | 20:16 | |
| *** raildo has quit IRC | 20:18 | |
| *** rmascena has quit IRC | 22:07 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!