[openstack-dev] [keystone] how to generate keystone.conf.sample in havana release?

2014-08-11 Thread Dolph Mathews
if you already have all the dependencies available: $ sh tools/config/generate_sample.sh -- Forwarded message -- From: jazeltq jaze...@163.com Date: Mon, Aug 11, 2014 at 5:06 AM Subject: how to generate keystone.conf.sample in havana release? To: Dolph Mathews dolph.math

Re: [openstack-dev] [keystone] how to generate conf sample in havana?

2014-08-11 Thread Dolph Mathews
See here: http://lists.openstack.org/pipermail/openstack-dev/2014-August/042573.html On Mon, Aug 11, 2014 at 3:53 AM, Li Tianqing jaze...@163.com wrote: Hello, Right now, i customerized keystone to meet our requeriments. I want to add some configuration options in keystone.conf.sample.

Re: [openstack-dev] [keystone] Configuring protected API functions to allow public access

2014-08-12 Thread Dolph Mathews
On Tue, Aug 12, 2014 at 10:30 AM, Yee, Guang guang@hp.com wrote: Hi Kristy, Have you try the [] or @ rule as mentioned here? That still requires valid authentication though, just not any specific authorization. I don't think we have a way to express truly public resources in oslo.policy.

Re: [openstack-dev] [all] The future of the integrated release

2014-08-12 Thread Dolph Mathews
On Tue, Aug 12, 2014 at 12:30 AM, Joe Gordon joe.gord...@gmail.com wrote: On Fri, Aug 8, 2014 at 6:58 AM, Kyle Mestery mest...@mestery.com wrote: On Thu, Aug 7, 2014 at 1:26 PM, Joe Gordon joe.gord...@gmail.com wrote: On Tue, Aug 5, 2014 at 9:03 AM, Thierry Carrez

Re: [openstack-dev] [all] The future of the integrated release

2014-08-12 Thread Dolph Mathews
On Tue, Aug 12, 2014 at 1:08 PM, Doug Hellmann d...@doughellmann.com wrote: On Aug 12, 2014, at 1:44 PM, Dolph Mathews dolph.math...@gmail.com wrote: On Tue, Aug 12, 2014 at 12:30 AM, Joe Gordon joe.gord...@gmail.com wrote: On Fri, Aug 8, 2014 at 6:58 AM, Kyle Mestery mest

Re: [openstack-dev] [Keystone] What to do with Specs after they are approved?

2014-08-15 Thread Dolph Mathews
Regarding the connection to release notes, it'd be useful to link from official release note bullet points back to the corresponding spec on specs.openstack.org to provide additional detail. On Fri, Aug 15, 2014 at 2:58 PM, Anne Gentle a...@openstack.org wrote: On Fri, Aug 15, 2014 at 2:47

Re: [openstack-dev] Criteria for giving a -1 in a review

2014-08-21 Thread Dolph Mathews
On Thu, Aug 21, 2014 at 11:21 AM, Daniel P. Berrange berra...@redhat.com wrote: On Thu, Aug 21, 2014 at 05:05:04PM +0100, Matthew Booth wrote: I would prefer that you didn't merge this. i.e. The project is better off without it. A bit off topic, but I've never liked this message that

Re: [openstack-dev] Criteria for giving a -1 in a review

2014-08-21 Thread Dolph Mathews
On Thu, Aug 21, 2014 at 11:53 AM, Daniel P. Berrange berra...@redhat.com wrote: On Thu, Aug 21, 2014 at 11:34:48AM -0500, Dolph Mathews wrote: On Thu, Aug 21, 2014 at 11:21 AM, Daniel P. Berrange berra...@redhat.com wrote: On Thu, Aug 21, 2014 at 05:05:04PM +0100, Matthew Booth wrote

Re: [openstack-dev] [infra] [keystone] pysaml2/xmlsec1 dep blocking keystone-to-keystone federation

2014-08-26 Thread Dolph Mathews
On Tue, Aug 26, 2014 at 6:44 AM, Sean Dague s...@dague.net wrote: On 08/26/2014 05:38 AM, Thierry Carrez wrote: Hi keystone/infra, One key upcoming Juno feature (Keystone to keystone federation) is currently blocked on adding pysaml2 to requirements:

Re: [openstack-dev] [all] [glance] do NOT ever sort requirements.txt

2014-09-03 Thread Dolph Mathews
On Wed, Sep 3, 2014 at 8:25 AM, Sean Dague s...@dague.net wrote: On 09/03/2014 09:03 AM, Daniel P. Berrange wrote: On Wed, Sep 03, 2014 at 08:37:17AM -0400, Sean Dague wrote: I'm not sure why people keep showing up with sort requirements patches like -

Re: [openstack-dev] [all] [glance] do NOT ever sort requirements.txt

2014-09-03 Thread Dolph Mathews
On Wed, Sep 3, 2014 at 11:23 AM, Doug Hellmann d...@doughellmann.com wrote: On Sep 3, 2014, at 12:20 PM, Dolph Mathews dolph.math...@gmail.com wrote: On Wed, Sep 3, 2014 at 8:25 AM, Sean Dague s...@dague.net wrote: On 09/03/2014 09:03 AM, Daniel P. Berrange wrote: On Wed, Sep 03, 2014

Re: [openstack-dev] [all] Design Summit planning

2014-09-12 Thread Dolph Mathews
On Sep 12, 2014 10:05 AM, Russell Bryant rbry...@redhat.com wrote: On 09/12/2014 07:37 AM, Thierry Carrez wrote: If you think this is wrong and think the design summit suggestion website is a better way to do it, let me know why! If some programs really can't stand the 'etherpad/IRC'

Re: [openstack-dev] [Neutron] - what integration with Keystone is allowed?

2014-09-21 Thread Dolph Mathews
Querying keystone for tenant names is certainly fair game. Keystone should be considered the only source of truth for tenant names though, as they are mutable and not globally unique on their own, so other services should not stash any names from keystone into long term persistence (users,

[openstack-dev] [keystone] Stepping down as PTL

2014-09-22 Thread Dolph Mathews
Dearest stackers and [key]stoners, With the PTL candidacies officially open for Kilo, I'm going to take the opportunity to announce that I won't be running again for the position. I thoroughly enjoyed my time as PTL during Havana, Icehouse and Juno. There was a perceived increase in stability

Re: [openstack-dev] [Neutron] - what integration with Keystone is allowed?

2014-09-22 Thread Dolph Mathews
that route. I'd wholly recommend against it though, because I don't see a strong use case to use names instead of IDs here (correct me if I'm wrong). On Sep 21, 2014 12:18 PM, Dolph Mathews dolph.math...@gmail.com wrote: Querying keystone for tenant names is certainly fair game. Keystone should

Re: [openstack-dev] [Nova] [All] API standards working group

2014-09-23 Thread Dolph Mathews
I'd be interested in participating in this as well. I wrote Keystone's v3 Identity API Document Overview and Conventions [1] with an eye toward hopefully establishing *some* consistency across multiple projects (or at least having a starting ground with which to discuss and iterate on). [1]

Re: [openstack-dev] [keystone][heat] ec2tokens, v3 credentials and request signing

2013-12-10 Thread Dolph Mathews
On Mon, Dec 9, 2013 at 9:08 PM, Adam Young ayo...@redhat.com wrote: On 12/09/2013 05:34 PM, Steven Hardy wrote: Hi all, I have some queries about what the future of the ec2tokens API is for keystone, context as we're looking to move Heat from a horrible mixture of v2/v3 keystone to just

Re: [openstack-dev] [keystone] domain admin role query

2013-12-11 Thread Dolph Mathews
On Tue, Dec 10, 2013 at 10:49 PM, Jamie Lennox jamielen...@redhat.comwrote: Using the default policies it will simply check for the admin role and not care about the domain that admin is limited to. This is partially a left over from the V2 api when there wasn't domains to worry about. A

Re: [openstack-dev] [keystone] domain admin role query

2013-12-12 Thread Dolph Mathews
On Thu, Dec 12, 2013 at 8:50 AM, Adam Young ayo...@redhat.com wrote: On 12/11/2013 10:11 PM, Paul Belanger wrote: On 13-12-11 11:18 AM, Lyle, David wrote: +1 on moving the domain admin role rules to the default policy.json -David Lyle From: Dolph Mathews [mailto:dolph.math...@gmail.com

Re: [openstack-dev] [Keystone] policy has no effect because of hard coded assert_admin?

2013-12-12 Thread Dolph Mathews
The policy file is protecting v3 API calls at the controller layer, but you're calling the v2 API. The policy decorators should be moved to the manager layer to protect both APIs equally... but we'd have to be very careful not to break deployments depending on the trivial assert_admin behavior

Re: [openstack-dev] How to best make User Experience a priority in every project

2013-12-12 Thread Dolph Mathews
On Wed, Dec 11, 2013 at 4:25 PM, Stefano Maffulli stef...@openstack.orgwrote: On 12/06/2013 02:19 AM, Jaromir Coufal wrote: We are growing. At the moment we are 4 core members and others are coming in. But honestly, contributors are not coming to specific projects - they go to reach UX

Re: [openstack-dev] Incubation Request for Barbican

2013-12-12 Thread Dolph Mathews
On Thu, Dec 12, 2013 at 2:58 PM, Adam Young ayo...@redhat.com wrote: On 12/04/2013 08:58 AM, Jarret Raim wrote: While I am all for adding a new program, I think we should only add one if we rule out all existing programs as a home. With that in mind why not add this to the keystone

Re: [openstack-dev] [bugs] definition of triaged

2013-12-12 Thread Dolph Mathews
On Thu, Dec 12, 2013 at 3:46 PM, Robert Collins robe...@robertcollins.netwrote: Hi, I'm trying to overhaul the bug triage process for nova (initially) to make it much lighter and more effective. I'll be sending a more comprehensive mail shortly but one thing that has been giving me pause is

Re: [openstack-dev] [Keystone] policy has no effect because of hard coded assert_admin?

2013-12-12 Thread Dolph Mathews
gone, it would be a more interesting, more approachable discussion. Cheers, Morgan Fainberg On December 12, 2013 at 10:32:40, Dolph Mathews (dolph.math...@gmail.com//dolph.math...@gmail.com) wrote: The policy file is protecting v3 API calls at the controller layer, but you're calling

Re: [openstack-dev] API spec for OS-NS-ROLES extension

2013-12-18 Thread Dolph Mathews
Services already own their own policy enforcement, and therefore own their own definitions of roles. A service deployment can already require roles that are prefixed by a specific string (compute-*), and can already map actual capabilities onto those roles ({compute-create: role:compute-manager}).

Re: [openstack-dev] [keystone] domain admin role query

2013-12-18 Thread Dolph Mathews
into the policy file. Henry On 12 Dec 2013, at 03:11, Paul Belanger paul.belan...@polybeacon.com wrote: On 13-12-11 11:18 AM, Lyle, David wrote: +1 on moving the domain admin role rules to the default policy.json -David Lyle From: Dolph Mathews [mailto:dolph.math...@gmail.com] Sent

Re: [openstack-dev] Incubation Request for Barbican

2013-12-19 Thread Dolph Mathews
On Thu, Dec 12, 2013 at 4:48 PM, Morgan Fainberg m...@metacloud.com wrote: On December 12, 2013 at 14:32:36, Dolph Mathews (dolph.math...@gmail.com//dolph.math...@gmail.com) wrote: On Thu, Dec 12, 2013 at 2:58 PM, Adam Young ayo...@redhat.com wrote: On 12/04/2013 08:58 AM, Jarret Raim

[openstack-dev] Process for proposing patches attached to launchpad bugs?

2013-12-20 Thread Dolph Mathews
In the past, I've been able to get authors of bug fixes attached to Launchpad bugs to sign the CLA and submit the patch through gerrit... although, in one case it took quite a bit of time (and thankfully it wasn't a critical fix or anything). This scenario just came up again (example: [1]), so

Re: [openstack-dev] Keystone Hashing MD5 to SHA256

2014-01-07 Thread Dolph Mathews
On Tue, Jan 7, 2014 at 11:01 AM, Adam Young ayo...@redhat.com wrote: On 01/06/2014 01:10 PM, Jeremy Stanley wrote: On 2014-01-06 10:19:39 -0500 (-0500), Adam Young wrote: If it were as easy as just replaceing hteh hash algorithm, we would have done it a year + ago. I'm guessing you figured

[openstack-dev] [keystone] Changes to keystone-core!

2014-01-07 Thread Dolph Mathews
Hello everyone! We've been talking this for a long while, and we finally have a bunch of changes to make to keystone-core all at once. A few people have moved on, the project has grown a bit, and our review queue grows ever longer. As ayoung phrased it in today's keystone meeting, with entirely

Re: [openstack-dev] [keystoneclient] old keystone-client package on pypi

2014-01-13 Thread Dolph Mathews
Ooh, I meant to get this done last week as I agree that keystoneclient needed to see a new release, but it totally slipped my mind. python-keystoneclient 0.4.2 is now available on pypi! https://pypi.python.org/pypi/python-keystoneclient/0.4.2 What's included in the milestone:

Re: [openstack-dev] new keystone developer

2014-01-23 Thread Dolph Mathews
First of all, welcome! As Steve suggested, feel free to ask questions in #openstack-dev ... it seems there's almost always someone online with deep knowledge of keystone. On Wed, Jan 22, 2014 at 8:28 PM, Mario Adessi mario.ade...@live.com wrote: I'd like to begin contributing to the keystone

Re: [openstack-dev] [Keystone] bp proposal: quotas on users and projects per domain

2014-01-23 Thread Dolph Mathews
... why? It strikes me as a rather shallow business decision to limit the number of users or projects in a system, as neither are actually cost-consuming resources. On Thu, Jan 23, 2014 at 6:43 AM, Matthieu Huin matthieu.h...@enovance.comwrote: Hello, I'd be interested in opinions and

Re: [openstack-dev] [Keystone] bp proposal: quotas on users and projects per domain

2014-01-23 Thread Dolph Mathews
, Florent Flament -- *From: *Dolph Mathews dolph.math...@gmail.com *To: *OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org *Sent: *Thursday, January 23, 2014 3:09:51 PM *Subject: *Re: [openstack-dev] [Keystone] bp proposal

Re: [openstack-dev] [All] Code proposal deadline for Icehouse

2014-01-26 Thread Dolph Mathews
On Thu, Jan 23, 2014 at 4:02 PM, Russell Bryant rbry...@redhat.com wrote: Greetings, Last cycle we had A feature proposal deadline across some projects. This was the date that code associated with blueprints had to be posted for review to make the release. This was in advance of the

Re: [openstack-dev] extending keystone identity

2014-01-27 Thread Dolph Mathews
_check_password() is a private/internal API, so we make no guarantees about it's stability. Instead, override the public authenticate() method with something like this: def authenticate(self, user_id, password, domain_scope=None): if user_id in SPECIAL_LIST_OF_USERS: #

Re: [openstack-dev] extending keystone identity

2014-01-27 Thread Dolph Mathews
From your original email, it sounds like you want to extend the existing LDAP identity driver implementation, rather than writing a custom driver from scratch, which is what you've written. The TemplatedCatalog driver sort of follows that pattern with the KVS catalog driver, although it's not a

Re: [openstack-dev] extending keystone identity

2014-01-28 Thread Dolph Mathews
On Tue, Jan 28, 2014 at 12:54 PM, Simon Perfer simon.per...@hotmail.comwrote: Thanks again, Dolph. First, is there some good documentation on how to write a custom driver? I'm wondering specifically about how a keystone user-list is mapped to a specific function in

Re: [openstack-dev] Hierarchicical Multitenancy Discussion

2014-01-29 Thread Dolph Mathews
CC'd Adam Young Several of us were very much in favor of this around the Folsom release, but we settled on domains as a solution to the most immediate use case (isolation between flat collections of tenants, without impacting the rest of openstack). I don't think it has been discussed much in the

Re: [openstack-dev] [keystone][heat] Migration to keystone v3 API questions

2014-02-01 Thread Dolph Mathews
On Sat, Feb 1, 2014 at 12:33 PM, Anne Gentle a...@openstack.org wrote: On Thu, Jan 23, 2014 at 5:21 AM, Steven Hardy sha...@redhat.com wrote: Hi all, I've recently been working on migrating the heat internal interfaces to use the keystone v3 API exclusively[1]. This work has mostly

Re: [openstack-dev] keystone-manage db_sync doesn't work if [database] connection points to IPv6 address

2014-02-02 Thread Dolph Mathews
Can you open a bug for this at https://bugs.launchpad.net/keystone ? Thanks! On Sun, Feb 2, 2014 at 9:15 AM, Martinx - ジェームズ thiagocmarti...@gmail.comwrote: Guys, I'm trying to install IceHouse-2 in a dual-stacked environment (Ubuntu 14.04) but, keystone-manage db_sync doesn't work if db

Re: [openstack-dev] [PTL] Designating required use upstream code

2014-02-06 Thread Dolph Mathews
On Wed, Feb 5, 2014 at 10:22 AM, Thierry Carrez thie...@openstack.orgwrote: (This email is mostly directed to PTLs for programs that include one integrated project) The DefCore subcommittee from the OpenStack board of directors asked the Technical Committee yesterday about which code

Re: [openstack-dev] [keystone] Integrating with 3rd party DB

2014-02-06 Thread Dolph Mathews
On Thu, Feb 6, 2014 at 6:38 AM, Noorul Islam Kamal Malmiyoda noo...@noorul.com wrote: Hello stackers, We have a database with tables users, projects, roles, etc. Is there any reference implementation or best practices to make keystone use this DB instead of its own? What's the problem

Re: [openstack-dev] [keystone] Integrating with 3rd party DB

2014-02-07 Thread Dolph Mathews
Sent: Friday, 7 February, 2014 7:13:20 PM Subject: Re: [openstack-dev] [keystone] Integrating with 3rd party DB Jamie Lennox jamielen...@redhat.com writes: - Original Message - From: Noorul Islam K M noo...@noorul.com To: Dolph Mathews dolph.math...@gmail.com Cc

Re: [openstack-dev] Interested in attracting new contributors?

2014-02-12 Thread Dolph Mathews
On Wed, Feb 12, 2014 at 8:30 AM, Julie Pichon jpic...@redhat.com wrote: I can definitely sympathise with the comment in Stefano's article that there are not enough easy tasks / simple issues for newcomers. There's a lot to learn already when you're starting out (git, gerrit, python,

Re: [openstack-dev] [Neutron]Do you think tanent_id should be verified

2014-02-16 Thread Dolph Mathews
keystoneclient.middlware.auth_token passes a project ID (and name, for convenience) to the underlying application through the WSGI environment, and already ensures that this value can not be manipulated by the end user. Project ID's (redundantly) passed through other means, such as URLs, are up

Re: [openstack-dev] [keystone][all] Keystone V2 and V3 support in icehouse

2014-02-18 Thread Dolph Mathews
On Mon, Feb 10, 2014 at 5:23 PM, Frittoli, Andrea (Cloud Services) fritt...@hp.com wrote: Hi, I’m working on a tempest blueprint to make tempest able to run 100% on keystone v3 (or later versions) – the auth version to be used will be available via a configuration switch. The

Re: [openstack-dev] [keystone][all] Keystone V2 and V3 support in icehouse

2014-02-18 Thread Dolph Mathews
binding is targeted for icehouse or juno? Clients are tracked against the same release milestones of the services, so the integration can happen whenever someone wants to tackle it and we can release them when they're ready. andrea *From:* Dolph Mathews [mailto:dolph.math...@gmail.com

Re: [openstack-dev] Keystone working with V3

2014-02-19 Thread Dolph Mathews
On Wed, Feb 19, 2014 at 10:21 AM, Vinod Kumar Boppanna vinod.kumar.boppa...@cern.ch wrote: Dear All, I am doing some development in Nova and in this regard, i have to write a code where Nova requests some date through V3 API of keystone. But the keystoneclient is always falling back to V2

Re: [openstack-dev] Gerrit co-authors and ticket stealing

2014-02-19 Thread Dolph Mathews
On Wed, Feb 19, 2014 at 12:33 PM, Dan Prince dpri...@redhat.com wrote: Perhaps one of the lesser know Gerrit features is the ability to overwrite someone else's patchset/review with a new revision. This can be a handy thing for collaboration, or perhaps to make minor edits (spelling fixes for

Re: [openstack-dev] [Neutron]Do you think tanent_id should be verified

2014-02-19 Thread Dolph Mathews
:35 AM, Yongsheng Gong gong...@unitedstack.comwrote: It is not easy to enhance it. If we check the tenant_id on creation, if should we also to do some job when keystone delete tenant? On Mon, Feb 17, 2014 at 6:41 AM, Dolph Mathews dolph.math...@gmail.comwrote

Re: [openstack-dev] Sent the first batch of invitations to Atlanta's Summit

2014-02-19 Thread Dolph Mathews
I just noticed the subject of this email referred to the first batch of invitations -- are there going to be subsequent batches of invites? If so, who was not included in the first batch that will be in subsequent batches? On Tue, Jan 28, 2014 at 2:45 PM, Stefano Maffulli

Re: [openstack-dev] [keystone] Notification When Creating/Deleting a Tenant in openstack

2014-02-20 Thread Dolph Mathews
Yes, see: http://docs.openstack.org/developer/keystone/event_notifications.html On Thu, Feb 20, 2014 at 10:54 AM, Nader Lahouti nader.laho...@gmail.comwrote: Hi All, I have a question regarding creating/deleting a tenant in openstack (using horizon or CLI). Is there any notification

Re: [openstack-dev] [keystone] SAML consumption Blueprints

2014-02-20 Thread Dolph Mathews
On Thu, Feb 20, 2014 at 4:18 AM, Marco Fargetta marco.farge...@ct.infn.itwrote: Dear all, I am interested to the integration of SAML with keystone and I am analysing the following blueprint and its implementation: https://blueprints.launchpad.net/keystone/+spec/saml-id

Re: [openstack-dev] [all][keystone] Increase of USER_ID length maximum from 64 to 255

2014-02-26 Thread Dolph Mathews
On Wed, Feb 26, 2014 at 4:23 AM, Marco Fargetta marco.farge...@ct.infn.itwrote: Hi Morgan, On Tue, Feb 25, 2014 at 11:47:43AM -0800, Morgan Fainberg wrote: For purposes of supporting multiple backends for Identity (multiple LDAP, mix of LDAP and SQL, federation, etc) Keystone is planning

Re: [openstack-dev] [all][keystone] Increase of USER_ID length maximum from 64 to 255

2014-02-26 Thread Dolph Mathews
On Tue, Feb 25, 2014 at 2:38 PM, Jay Pipes jaypi...@gmail.com wrote: On Tue, 2014-02-25 at 11:47 -0800, Morgan Fainberg wrote: For purposes of supporting multiple backends for Identity (multiple LDAP, mix of LDAP and SQL, federation, etc) Keystone is planning to increase the maximum size

Re: [openstack-dev] [all][keystone] Increase of USER_ID length maximum from 64 to 255

2014-02-27 Thread Dolph Mathews
external facing requirements for storage of user and group IDs (above and beyond what is true today). Henry On 27 Feb 2014, at 03:46, Adam Young ayo...@redhat.com wrote: On 02/26/2014 08:25 AM, Dolph Mathews wrote: On Tue, Feb 25, 2014 at 2:38 PM, Jay Pipes jaypi...@gmail.com

Re: [openstack-dev] [keystone] Notification When Creating/Deleting a Tenant in openstack

2014-03-01 Thread Dolph Mathews
or get these notifications ? Regards, Nader. On Feb 20, 2014, at 9:06 AM, Dolph Mathews dolph.math...@gmail.com wrote: Yes, see: http://docs.openstack.org/developer/keystone/event_notifications.html On Thu, Feb 20, 2014 at 10:54 AM, Nader Lahouti nader.laho...@gmail.com

Re: [openstack-dev] [all][keystone] Increase of USER_ID length maximum from 64 to 255

2014-03-03 Thread Dolph Mathews
On Mon, Mar 3, 2014 at 8:48 AM, Jay Pipes jaypi...@gmail.com wrote: On Sun, 2014-03-02 at 12:05 -0800, Morgan Fainberg wrote: Having done some work with MySQL (specifically around similar data sets) and discussing the changes with some former coworkers (MySQL experts) I am inclined to

Re: [openstack-dev] [Heat] [Keystone] Where are the strings in the keystone API's defined?

2014-03-10 Thread Dolph Mathews
For posterity, I assume this thread is related to: http://lists.openstack.org/pipermail/openstack-dev/2014-February/028125.html Anyway, keystone itself has issued 36-char tenant ID's in the past (diablo, I believe, if not essex as well). Something like this: $ python -c import uuid; s =

Re: [openstack-dev] [keystone] python-keystoneclient unit tests only if python-memcache is installed

2014-03-20 Thread Dolph Mathews
Yes, those tests are conditionally executed if https://pypi.python.org/pypi/python-memcached/ is installed and if so, memcached is assumed to be accessible on localhost. Unfortunately the test suite doesn't have a sanity check for that following assumption, so the test failures aren't particularly

Re: [openstack-dev] [Nova] Updates to Juno blueprint review process

2014-03-20 Thread Dolph Mathews
On Thu, Mar 20, 2014 at 10:49 AM, Russell Bryant rbry...@redhat.com wrote: We recently discussed the idea of using gerrit to review blueprint specifications [1]. There was a lot of support for the idea so we have proceeded with putting this together before the start of the Juno development

Re: [openstack-dev] [keystone] python-keystoneclient unit tests only if python-memcache is installed

2014-03-24 Thread Dolph Mathews
FWIW, I opened a bug [1] and proposed a fix [2]. [1]: https://bugs.launchpad.net/python-keystoneclient/+bug/1296794 [2]: https://review.openstack.org/#/c/82527/ On Fri, Mar 21, 2014 at 12:38 AM, Thomas Goirand z...@debian.org wrote: On 03/20/2014 11:48 PM, Dolph Mathews wrote: Yes, those

Re: [openstack-dev] [Ironic][Keystone] Move drivers credentials to Keystone

2014-03-25 Thread Dolph Mathews
On Tue, Mar 25, 2014 at 12:49 PM, Jay Pipes jaypi...@gmail.com wrote: On Tue, 2014-03-25 at 17:39 +, Miller, Mark M (EB SW Cloud - RD - Corvallis) wrote: Why not use Barbican? It stores credentials after encrypting them. No reason not to add a Barbican driver as well. If Keystone's

Re: [openstack-dev] [All][Keystone] Deprecation of the v2 API

2014-03-25 Thread Dolph Mathews
On Tue, Mar 25, 2014 at 5:50 PM, Russell Bryant rbry...@redhat.com wrote: We discussed the deprecation of the v2 keystone API in the cross-project meeting today [1]. This thread is to recap and bring that discussion to some consensus. The issue is that Keystone has marked the v2 API as

Re: [openstack-dev] [keystone] [horizon] [nova]

2014-03-28 Thread Dolph Mathews
FWIW, that issue is tracked here: https://bugs.launchpad.net/keystone/+bug/967832 On Fri, Mar 28, 2014 at 1:02 PM, Ryan Hallisey rhall...@redhat.com wrote: Currently, when you delete a tenant that has 1 or more running instances, the tenant will be deleted without warning and the running

Re: [openstack-dev] [keystone] [oslo] Using oslo.cache in keystoneclient.middleware.auth_token

2014-03-31 Thread Dolph Mathews
dogpile.cache would be substantially lighter on the client-side as it only has a hard dependency on dogpile.core. It supports plenty of backends beyond memcached and we already use it in keystone quite heavily. http://dogpilecache.readthedocs.org/en/latest/ On Mon, Mar 31, 2014 at 11:35 AM,

[openstack-dev] Keystone PTL Candidacy

2014-04-02 Thread Dolph Mathews
Hello, everyone! I'd like to keep my name in the hat as PTL for Keystone during the Juno release cycle. As I'm not looking to shake things up for Juno, I'm going to direct you to my Icehouse PTL candidacy email [1], and promise that I will continue to deliver on that philosophy in Juno.

Re: [openstack-dev] [All][Keystone] Deprecation of the v2 API

2014-04-02 Thread Dolph Mathews
On Tue, Apr 1, 2014 at 7:40 PM, Anne Gentle a...@openstack.org wrote: On Wed, Mar 26, 2014 at 5:30 AM, Thierry Carrez thie...@openstack.orgwrote: Russell Bryant wrote: [...] First, it seems there isn't a common use of deprecated. To me, marking something deprecated means that the

Re: [openstack-dev] Operators Design Summit ideas for Atlanta

2014-04-02 Thread Dolph Mathews
On Mon, Mar 31, 2014 at 10:40 PM, Adam Young ayo...@redhat.com wrote: On 03/28/2014 03:01 AM, Tom Fifield wrote: Thanks to those projects that responded. I've proposed sessions in swift, ceilometer, tripleO and horizon. Keystone would also be interested in user feedback, of course.

Re: [openstack-dev] [All][Keystone] Deprecation of the v2 API

2014-04-02 Thread Dolph Mathews
On Wed, Apr 2, 2014 at 8:43 AM, Russell Bryant rbry...@redhat.com wrote: On 04/02/2014 09:20 AM, Dolph Mathews wrote: On Tue, Apr 1, 2014 at 7:40 PM, Anne Gentle a...@openstack.org mailto:a...@openstack.org wrote: On Wed, Mar 26, 2014 at 5:30 AM, Thierry Carrez thie

Re: [openstack-dev] Help in re-running openstack

2014-04-03 Thread Dolph Mathews
On Thu, Apr 3, 2014 at 8:45 AM, Anita Kuno ante...@anteaya.info wrote: On 04/03/2014 07:02 AM, Erno Kuvaja wrote: Hi Shiva, You can get into the screen after you have made the changes stop the process you have changed (ctrl-c on the correct tab) and restart it (arrow up will give you

Re: [openstack-dev] Quota Management

2014-04-03 Thread Dolph Mathews
On Thu, Apr 3, 2014 at 11:22 AM, Jay Pipes jaypi...@gmail.com wrote: On Thu, 2014-04-03 at 15:02 +, Cazzolato, Sergio J wrote: Hi All, I’d like to know your thoughts regarding Quota Management… I’ve been contributing to this topic for icehouse and noticed some issues and

Re: [openstack-dev] Keystone OS-EP-FILTER descrepancy

2013-10-09 Thread Dolph Mathews
On Tue, Oct 8, 2013 at 3:20 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello, I am attempting to test the Havana v3 OS-EP-FILTER extension with the latest RC1 bits and I get a 404 error response. The documentation actually shows 2 different URIs for this

Re: [openstack-dev] Need suggestions and pointers to start contributing for development :

2013-10-11 Thread Dolph Mathews
On Friday, October 11, 2013, Mayank Mittal wrote: Hi Teams, Please suggest and guide for starting to contribute in development. About me - I have been working on L2/L3 protocol, SNMP, NMS development and ready to contribute as a full timer to openstack. PS : My interest lies in LB and

Re: [openstack-dev] Thanks for fixing my patch

2013-10-11 Thread Dolph Mathews
On Fri, Oct 11, 2013 at 1:34 PM, Clint Byrum cl...@fewbar.com wrote: Recently in the TripleO meeting we identified situations where we need to make it very clear that it is ok to pick up somebody else's patch and finish it. We are broadly distributed, time-zone-wise, and I know other teams

Re: [openstack-dev] Keystone RC1 Bug Question 1209440

2013-10-15 Thread Dolph Mathews
On Tue, Oct 15, 2013 at 12:05 PM, Miller, Mark M (EB SW Cloud - RD - Corvallis) mark.m.mil...@hp.com wrote: Hello, I have a generic question about the logic now available for LDAP users in association with bug 1209440. How do you associate a read-only LDAP user with a domain? I suppose it

Re: [openstack-dev] [Keystone] stabilizing internal APIs

2013-10-15 Thread Dolph Mathews
On Tue, Oct 15, 2013 at 6:05 PM, Morgan Fainberg m...@metacloud.com wrote: Hi Fellow Developers (and those who interface with keystone at the code level), I wanted to reach out to the ML and see what the opinions were about starting to stabilize the internal APIs (wherever possible) for the

[openstack-dev] [keystone] design summit session proposal deadline

2013-10-16 Thread Dolph Mathews
I'll be finalizing the design summit schedule [1] for keystone following the weekly meeting [2] on Tuesday, October 22nd 18:00 UTC. Please have your proposals submitted before then. So far I think everyone has done a GREAT job self-organizing the proposed sessions to avoid overlap, but we

Re: [openstack-dev] [keystone] design summit session proposal deadline

2013-10-16 Thread Dolph Mathews
On Wed, Oct 16, 2013 at 11:23 AM, Dolph Mathews dolph.math...@gmail.com wrote: I'll be finalizing the design summit schedule [1] for keystone following the weekly meeting [2] on Tuesday, October 22nd 18:00 UTC. Please have your proposals submitted before then. So far I think everyone has done

Re: [openstack-dev] Building on Debian: Havana unit tests at build time report

2013-10-17 Thread Dolph Mathews
On Thu, Oct 17, 2013 at 10:31 AM, Thomas Goirand z...@debian.org wrote: On 10/17/2013 09:11 PM, Monty Taylor wrote: I understand what you are saying and I also understand your frustration. However, OpenStack does not, as of yet, support SQLAlchemy 0.8, and as you can see, the requirements file

Re: [openstack-dev] [qa][keystone] Adding client library related tests to tempest

2013-10-18 Thread Dolph Mathews
On Fri, Oct 18, 2013 at 10:34 AM, Steven Hardy sha...@redhat.com wrote: Hi all, Starting a thread to discuss $subject, as requested in: https://review.openstack.org/#/c/51558/ First a bit of background. I wrote a keystoneclient patch, and ayoung stated he'd like it tested via tempest

Re: [openstack-dev] [qa][keystone] Adding client library related tests to tempest

2013-10-18 Thread Dolph Mathews
On Fri, Oct 18, 2013 at 3:19 PM, David Stanek dsta...@dstanek.com wrote: On Fri, Oct 18, 2013 at 1:48 PM, Sean Dague s...@dague.net wrote: On 10/18/2013 12:04 PM, Brant Knudson wrote: 2) git cloneing the keystoneclient doesn't work well with parallel testing (we have a similar problem in

Re: [openstack-dev] [GIT] Reset a commit in Gerrit

2013-10-20 Thread Dolph Mathews
On Sun, Oct 20, 2013 at 1:31 PM, Edgar Magana emag...@plumgrid.com wrote: Floren, Just just need to send a patch to gerrit. From you local repo, do the necessary fixes and be sure everything is just as you want. Then simply run: #git commit -a --amend #git review The only gotcha here

Re: [openstack-dev] [keystone] updating password user_crud vs credentials

2013-10-23 Thread Dolph Mathews
On Wed, Oct 23, 2013 at 8:14 AM, Chmouel Boudjnah chmo...@enovance.comwrote: Hello, If i understand correctly (and I may be wrong) we are moving away from user_crud to use /credentials for updating password including ec2. The credentials facility was implemented in this blueprint :

Re: [openstack-dev] RFC - Icehouse logging harmonization

2013-10-23 Thread Dolph Mathews
On Wed, Oct 23, 2013 at 1:20 PM, Sean Dague s...@dague.net wrote: One of the efforts that we're working on from the QA team is tooling that ensures we aren't stack tracing into our test logs during normal tempest runs. Random stack traces are scary to cloud admins consuming OpenStack logs,

Re: [openstack-dev] excessively difficult to support both iso8601 0.1.4 and 0.1.8 as deps

2013-10-23 Thread Dolph Mathews
On Wed, Oct 23, 2013 at 2:30 PM, Robert Collins robe...@robertcollins.netwrote: On 24 October 2013 07:34, Mark Washenberger mark.washenber...@markwash.net wrote: Hi folks! 1) Adopt 0.1.8 as the minimum version in openstack-requirements. 2) Do nothing (i.e. let Glance behavior depend on

Re: [openstack-dev] Remove vim modelines?

2013-10-25 Thread Dolph Mathews
On Thu, Oct 24, 2013 at 1:48 PM, Robert Collins robe...@robertcollins.netwrote: *) They help casual contributors *more* than long time core contributors : and those are the folk that are most likely to give up and walk away. Keeping barriers to entry low is an important part of making

Re: [openstack-dev] Remove vim modelines?

2013-10-25 Thread Dolph Mathews
On Fri, Oct 25, 2013 at 2:43 PM, Robert Collins robe...@robertcollins.netwrote: On 26 October 2013 08:40, Dolph Mathews dolph.math...@gmail.com wrote: On Thu, Oct 24, 2013 at 1:48 PM, Robert Collins robe...@robertcollins.net wrote: *) They help casual contributors *more* than long

Re: [openstack-dev] RFC: Filtering boring commit subjects from ChangeLog

2013-10-28 Thread Dolph Mathews
On Mon, Oct 28, 2013 at 3:18 AM, Mark McLoughlin mar...@redhat.com wrote: On Sun, 2013-10-27 at 21:50 -0400, Monty Taylor wrote: Hey all! We're adding a little bit of code to pbr to make the auto-generated ChangeLog files a bit more useful. Currently, they are just the git changelog,

Re: [openstack-dev] distibuted caching system in front of mysql server for openstack transactions

2013-10-28 Thread Dolph Mathews
It's not specific to mysql (or sql at all), but keystone is using dogpile.cache around driver calls to a similar effect. http://dogpilecache.readthedocs.org/en/latest/ It can persist to memcache, redis, etc. https://github.com/openstack/keystone/blob/master/keystone/common/cache/core.py On

Re: [openstack-dev] Keystone Concurrency Races in SQL Assignment Backend

2013-10-30 Thread Dolph Mathews
On Wed, Oct 30, 2013 at 5:08 PM, Peter Feiner pe...@gridcentric.ca wrote: Hi Brant, In addition to the race you've fixed in https://review.openstack.org/#/c/50767/, it looks like there are quite a few more races in the SQL backend of keystone.assignment. I filed a bug to this effect:

Re: [openstack-dev] [horizon / keystone] Marker could not be found?

2013-10-31 Thread Dolph Mathews
On Thu, Oct 31, 2013 at 8:38 AM, Sebastian Porombka porom...@uni-paderborn.de wrote: Hello Folks. I have a problem after grizzly-havana migration where i’m unable to rescue myself. When I open the Admin - Resource-Usage View i get no results – only a red error box with the message

Re: [openstack-dev] distibuted caching system in front of mysql server for openstack transactions

2013-10-31 Thread Dolph Mathews
On Mon, Oct 28, 2013 at 5:46 PM, Qing He qing...@radisys.com wrote: In my hard drive-less use case, I need an in-core-db/cache that can be in the same db cluster with real db (with hard drive) with the same sql api so that the current openstack code do not need to be changed, instead, just a

Re: [openstack-dev] Horizon PTL candidacy

2013-11-10 Thread Dolph Mathews
On Fri, Nov 8, 2013 at 2:38 AM, Matthias Runge mru...@redhat.com wrote: Those are my primary targets I'd like to see addressed in Horizon during the cycle. Another thing I'd like to see addressed is the lack of listening to a notification service. That's probably an integration point with

Re: [openstack-dev] RFC: reverse the default Gerrit sort order

2013-11-10 Thread Dolph Mathews
On Sun, Nov 10, 2013 at 3:06 PM, Monty Taylor mord...@inaugust.com wrote: https://review.openstack.org/#/mine/important/ Shows me old changes at the top of the reviewable section. Do you use that view at all? That shows me all my own reviews merged abandoned first, which are just noise

Re: [openstack-dev] [horizon] User registrations

2013-11-10 Thread Dolph Mathews
So, there's a bunch of use case questions here where I suspect there are no correct answers (so preferences will vary per deployment). The first ones that come to mind- Are the users accessing this web form trusted or untrusted? Do they need to be verified, somehow? Are they going to be billed

[openstack-dev] [keystone] design summit outcomes

2013-11-13 Thread Dolph Mathews
I guarantee there's a few things I'm forgetting, but this is my collection of things we discussed at the summit and determined to be good things to pursue during the icehouse timeframe. The contents represent a high level mix of etherpad conclusions and hallway meetings.

Re: [openstack-dev] [ALL] Removing generate_uuid() from uuidutils

2013-11-13 Thread Dolph Mathews
On Wed, Nov 13, 2013 at 9:47 AM, John Griffith john.griff...@solidfire.comwrote: On Wed, Nov 13, 2013 at 7:21 AM, Andrew Laski andrew.la...@rackspace.com wrote: On 11/13/13 at 05:48am, Gary Kotton wrote: I recall a few cycles ago having str(uuid.uuid4()) replaced by generate_uuid().

Re: [openstack-dev] [keystone] design summit outcomes

2013-11-13 Thread Dolph Mathews
UserID: id of user this attribute is assigned to AttributeID: id of attribute from above table Value: the value of the assigned attribute you dont need to change the existing APIs and procedure calls, as they can be re-written to access the new tables. regards David On 13/11/2013 16:04, Dolph

  1   2   3   4   >