/srv/irclogs.ubuntu.com/2011/02/03/#launchpad.txt

micahgin the email interface if I want to affect multiple packages and set the status for each, is that possible?00:07
wgrantmicahg: Use multiple affects commands, following each with a status command.00:40
micahgwgrant: ok, that's what I figured, but the docs seem to imply that all the affects commands need to be first01:04
=== stub1 is now known as stub
=== pvo is now known as pvo_away
=== stub1 is now known as stub
=== robbiew is now known as robbiew_
=== Ursinha-bbl is now known as Ursinha
=== MTecknology is now known as ngx_mteck
=== ngx_mteck is now known as MTecknology
=== matsubara-afk is now known as matsubara
d1bhi um i logged into launchpad to edit a wiki page and i hit this11:41
wgrantd1b: What's the issue?11:43
d1b1 s11:44
d1bhttp://pastebin.com/axSZiZyt11:44
d1bthe redirect failed - it might because i had js disabled but ..11:44
wgrantd1b: It looks like the wiki doesn't like usernames with + signs in them.11:45
d1bwgrant: now im getting an error 50011:45
wgrantYou could rename your Launchpad account, I guess :/11:45
d1bwgrant: no11:45
d1b:P11:46
wgrantOtherwise you'll have to track down whoever maintains the Ubuntu wiki auth plugin these days.11:47
d1bor just sign up with a wiki account / new account11:47
wgrantTrue.11:47
d1bwgrant: wany reason why the max password is 20 chars?11:59
d1blenth*11:59
wgrantd1b: Is it? That sounds like a bug.12:00
wgrantIn fact, my password is far longer than that...12:00
wgrantWhere are you seeing that?12:00
d1bwgrant: on the sign up page12:00
wgrantWhich URL, exactly?12:00
d1b1 min12:00
d1bhttps://login.launchpad.net/+new_account12:01
d1b--> password field size=2012:01
wgrantd1b: Your browser limits it to that size?12:03
wgrantThat's normally just a suggestion for how wide the textbox should be, not the value inside.12:03
d1byes /me is tired. yeah i think that is the case12:15
d1bsorry12:15
d1bweird, my username is now daveb, my 'fullname' is daveb - so it must not like the + in my email now12:21
d1berh... but im now logged in12:21
d1b./sleep &12:21
wgrantHeh.12:21
wgrantI should as well, once this deployment is done.12:22
d1bthe wiki page just throws up 500s to a lot ...12:24
=== oubiwann_ is now known as oubiwann
Adri2000hi12:55
Adri2000is it possible to subscribe to a merge proposal? (without subscribing to the whole branch and receiving all commits)12:55
wgrantAdri2000: You can't subscribe directly to a merge proposal, but you can subscribe to just merge proposals on the proposed branch, without subscribing to revisions.12:56
=== pvo_away is now known as pvo
Adri2000wgrant: ok, thanks13:10
=== Ursinha is now known as Ursinha-lunch
=== oubiwann is now known as oubiwann_
=== gary_poster changed the topic of #launchpad to: Launchpad: https://launchpad.net/ | Read https://help.launchpad.net/ for help | On-call help contact: gary_poster | Join https://launchpad.net/~launchpad-users | This channel is logged: http://irclogs.ubuntu.com/ | Launchpad is open source: https://dev.launchpad.net/
hazmatdoes launchpad karma calculation skew to whoever owns the trunk of a repository..ie they get points for merges to trunk, even if they where not involved in any of the branch commits or merge.14:20
=== shadeslayer is now known as shadeslayer_
=== shadeslayer_ is now known as shadeslayer
=== matsubara is now known as matsubara-lunch
niemeyerYo!15:07
niemeyerI need a hand in a fight with PPA15:07
bigjoolsniemeyer: wassup15:08
niemeyerAnyone willing to spend some time for the cause?15:08
niemeyerbigjools: hey!15:08
niemeyerbigjools: Trying to build golang there15:08
niemeyerbigjools: The package has lots of tests, among them something for the syslog module which communicates with the local syslog over unix sockets15:08
niemeyerbigjools: Works fine locally, but apparently I'm unable to convince the PPA to bring up the syslog dameon15:09
niemeyerdaemon15:09
bigjoolsI vaguely remember problems like this before15:09
bigjoolsthe chroot may not start a syslog15:09
barryleonardr: did you try my ppas?15:10
niemeyerHmmm, chroot15:10
niemeyerbigjools: So is it a lost cause, or is there a workaround?15:10
bigjoolslamont: what do you know about our buildd chroots and syslog?15:10
leonardrbarry: i forgot about them before the maverick build completed. let's try again15:10
bigjoolsniemeyer: lamont may know more, he's the buildd admin15:10
niemeyerbigjools: Ah, superb, thanks15:11
barryleonardr: thx15:11
niemeyerlamont: What's the magic sauce?15:11
bigjoolsSalt Lick BBQ sauce, Driftwood, Texas.  But I digress :)15:11
niemeyerbigjools: Hmmm, sounds good :)15:12
leonardrbarry: could you do me a huge favor and repackage the natty version of lazr.restfulclient for maverick?15:26
leonardrotherwise i can't test15:26
leonardralt. i can upgrade one of my machines to natty, but that'll take a while15:26
lamontbigjools: daemons do not start in build chroots.15:56
bigjoolslamont: yeah I figured as much15:56
lamontniemeyer: the solution is to stop wanting that15:56
barryleonardr: will do after my meeting16:15
=== deryck is now known as deryck[lunch]
Guest25832 /join #dondetuhermana16:30
ScottKIt would have been nice to see speed at least mentioned in https://lists.launchpad.net/launchpad-dev/msg06389.html16:30
maxbleonardr, barry: dputted to ppa:maxb/launchpad, thought I might as well since it's just a no-change upload :-)16:33
leonardrmaxb, thanks16:34
barrymaxb: thanks.  yeah, i'm building it in my ppa too, but either way should work for leonardr16:34
=== matsubara-lunch is now known as matsubara
=== beuno is now known as beuno-lunch
gary_posterScottK, speed is one of the TA's two projects, and an active effort that the product team (of which I am not a member, to be clear) is fully behind.  I believe that email was about upcoming changes.  The performance work is active and current.16:59
gary_posterhazmat: I know you asked that a while ago, but no one replied.  I have no idea.  Is it important to you?  If so, I can try to investigate.16:59
barryleonardr: i'm getting some lunch now.  b/w maxb's and my ppa, you should have what you need to test.  please update the bugs with status.  i want to get the new versions into debian and then sync them to ubuntu.17:00
hazmatgary_poster, i'm a bit curious, as i'm working on a project, where i've got committed most of the lines of code (~80-90%), and done a ton of bug management and some review, and someone who is only doing code reviews is significantly ahead (x2), we both started on the project at the same time, the only difference i can see is that he's owner of the trunk. its baffled both of us.17:01
gary_posterhazmat, ack.  sinzui, would you happen to know off-hand?  The original question was this:17:03
gary_posterdoes launchpad karma calculation skew to whoever owns the trunk of a repository..ie they get points for merges to trunk, even if they where not involved in any of the branch commits or merge.17:03
leonardrbarry: will do as soon as i get this branch into review17:03
gary_posterthat's probably more of a code question, but sinzui knows all...17:03
=== shadeslayer is now known as kshadeslayer
sinzuigary_poster: karma is 100% arbitrary and untrustable. I believe karma balancing skews aways from project maintainer and branch contributors. I think karma favours blueprints, answers, and bugs17:05
gary_posterthanks sinzui.  hazmat, I'm afraid that's what I expected.  I think filing a bug would be a reasonable next step though, if you are willing.  If karma is causing project maintainers/contributors to be unhappy, perhaps we should consider either deciding to spend some more time on it or removing it.  It's supposed to encourage participation, and arbitrariness does not.17:07
sinzuigary_poster: hazmat those bugs are already filed17:07
sinzuigary_poster: hazmat: the specific bug is to stop rebalancing karma. We are not working on karma, We are discussing removing it17:08
hazmatokay.. its good to know its arbitrary and not capricious ;-).. and that relevant bugs are filed.. thanks sinzui, gary_poster17:08
gary_posterthank you sinzui.  hazmat, heh. :-)  welcome17:08
sinzuihazmat: indeed that is the core issue. Karma is helpful to identify recent activity, but it is easilly misunderstood and users that it very seriously.17:09
hazmatsinzui, i'd be in favor of removing it, if the activity stream for a user had enough contextual information to be useful..  https://launchpad.net/~hazmat/+karma ie.. actually linked to the project and artifact in question17:09
hazmati hate to say it but something more akin to the github activity for a user.. which has enough contextual info and links to be useful as an rss feed for example17:10
hazmatas it is rather hard to decipher what karma means, outside of 'goodness'17:11
hazmatand understanding the relative karma on a project as to a user's contributions to it seems opaque to me17:12
hazmati digress, thanks folks17:12
pvofwiw ++ on removing karma17:15
gary_posterhazmat, agree with your analysis, and I think the product team (in charge of direction/features) does as well.17:16
gary_posteryou might or might not be interested in this brainstormy email, psted above in a different context:17:16
gary_posterhttps://lists.launchpad.net/launchpad-dev/msg06389.html17:16
gary_poster"Activity walls"17:16
leonardrmaxb: argh, barry's keyring package is built against a natty version of python. could you maybe put python 2.7.1-0ubuntu2 into that repository?17:17
leonardralthough at this point i should probably just put my desktop on natty17:18
maxbPutting python 2.7 onto maverick sounds rather like a can of worms17:18
maxbRebuilding a more maverick-like python-keyring sounds easier17:19
sinzuileonardr: natty is fine, though you might want to avoid unity. It has been very unstable for the last 3 weeks17:19
leonardrmaxb: another possibility is that i could tell you some python code to run and you could tell me what happens17:20
leonardrtest it that way17:20
maxbRun some python code on maverick, or on natty?17:20
leonardrmaxb: on natty, with barry's launchpadlib17:24
maxbsec, booting natty netbook17:24
maxbbooted. updating. what ppa do I need?17:27
=== deryck[lunch] is now known as deryck
leonardrmaxb: checking...17:28
leonardrmaxb: ppa:barry/python17:29
leonardrinstall python-launchpadlib and python-keyring17:29
computerxlkp.werld.access@x.net17:39
computerxphreak phreaker17:39
* computerx mixcve@werld.name17:39
* computerx adm|n acc0unt17:39
computerxu$er{uki.net.com}err0r17:39
computerxcomputer{x}17:40
* computerx 192.168.0.117:40
* computerx linux account access17:40
computerx$phreak;terminal|*17:40
computerxukg$;~|*17:40
* computerx elos$;17:41
maxbleonardr: now installing those.17:41
computerxexecute: send_submit("form2");17:41
* computerx ;character-map*com|oli$;|17:42
=== beuno-lunch is now known as beuno
* computerx !n$ta|| dr!v3r17:42
* computerx goode17:43
* computerx Citrix_XenApp5.0_ExpansionServer_W2K8_32bit_v10217:44
* computerx help user admin17:45
maxbnhandler: Can you kill this bot? ^17:45
* computerx account17:45
computerxukil$;.net.com computerx;~17:45
computerxcomputer*x|ill;{dlsos$}17:45
nhandlerLooks like it quit17:47
leonardrmaxb: this should test the new launchpadlib pretty well: http://pastebin.ubuntu.com/562102/17:56
maxbyikes, from launchpadlib.launchpad import Launchpad took something like 3 seconds17:57
maxbleonardr: During step one, the text on the "Confirm Computer Access" page saying "See all applications authorized to access Launchpad on your behalf." needs updating ("applications")18:00
leonardrmaxb: fair enough18:00
leonardr"applications and computers"18:00
maxbleonardr: The "Within a few seconds you should be able to start using its Launchpad integration features." should advise the user that they should now go back and look at the application, not wait for the webpage to say something more18:01
leonardrok, file a bug for this stuff if you don't mind18:01
maxbOn the console, the text "Running global cleanup code from study base classes." appeared after authorizing. This is weird.18:02
leonardrthe application is also free to grab the focus, btw--it knows when it's been authorized18:02
leonardrnever seen that before18:02
maxbI don't have time to file bugs right now, so I'll just say stuff, and search my irc logs later18:02
leonardrok18:02
leonardrmaxb: "global cleanup code" is a firefox message18:03
maxb*blink*18:03
maxbwhat's firefox doing accessing stdout in my terminal?!18:03
leonardrmaxb: was firefox running before, or did python start it up when it did the browser open?18:05
maxb*ah*18:05
maxbexplained, good.18:05
maxbleonardr: Does lp.people.me ever work? Because lp.people doesn't seem to have such an attribute18:05
leonardrmaxb: argh, typo. should be lp.me18:05
maxbuhoh, get_token_and_login is behaving wrongly18:06
maxbfirst, no deprecation warning18:06
maxbalso, somehow launchpad has given me a "Sorry, you don't have permission to access this page" for accessing /+authorize-token18:07
leonardrdammit, now i have to remember what get_token_and_login does18:08
leonardri already purged that knowledge18:08
maxbthis is repeatable18:09
maxbmy guess is that you're sending +authorize-token the wrong token id18:09
maxbleonardr: Step 4 [login_with(credentials_file="....")] works as described, but I'm not sure it ought to be requesting a desktop integration token in that case18:11
leonardrmaxb: those arguments are for a desktop integration token. you can get a per-application token by specifying a consumer name instead of an application name18:12
maxbleonardr: I feel your API change of changing the purpose of positional argument 0 is not appropriate18:14
maxbI (speaking as an application author programming against the launchpadlibs currently available in released Ubuntu distributions) _am_ specifying a consumer name in this case18:15
maxbThe newer launchpadlib has chosen to reinterpret my api call in a different manner18:15
leonardrmaxb: can you explain why you want to specify a consumer name?18:16
maxbIt's unfriendly for an upgrade of launchpadlib to change the behaviour of existing APIs in this manner18:17
leonardrmaxb: the goal is to transparently migrate you from per-application credentials to desktop-wide credentials. do you have a reason for opting out of that?18:17
maxbI feel uncomfortable about applications having behaviour "transparently" changed underneath them18:18
maxbI most particularly do not want several different applications on my system to all request separate desktop integration tokens because they are all written to use per-app credentials_file paths18:19
maxbAlso, why can't I integrate my entire system to change non-private data only?18:19
maxb(sorry, I'm sure you've heard this one before, I'm just trying to hit on all the things occurring to me from this walkthrough of the proposed new system)18:20
leonardrmaxb: "per-app credentials_file paths" -- i agree, which is why i originally ignored per-app credentials file paths. unfortunately, there's a legitimate use for them, so i had to add them back18:20
mok0Why would subversion import to LP suddenly stop retrieving new revisions?18:21
leonardr"why can't I integrate my entire system to change non-private data only" -- we considered that and rejected it as causing way too much confusion. you would create one "desktop-wide" token, and the first time an app needed to change private data you would get another browser open and have to upgrade that credential18:21
mok0https://code.edge.launchpad.net/~mok0/coot/trunk18:21
leonardrafter this gets into ubuntu we will be going through the ubuntu applications that use launchpadlib and making sure they use the new system well18:22
maxbleonardr: the kind of people who care about such things will *want* that re-auth to happen18:22
maxbleonardr: And if you're planning to go through ubuntu apps anyway, that's even more rationale NOT to reorder the login_with parameters18:22
leonardrmaxb: the rationale for reordering the login_with parameters is for _new_ apps18:22
maxbBy doing so you change the behaviour of existing code. Personally I reckon that's not kind to people using your library *at all*, and barely acceptable18:23
leonardri want it to be _extremely difficult_ to do a non-system-wide integration except in the case where a system-wide integration is impossible (integrating another web site)18:23
maxbLet me go over the api changes (will probably not be until the weekend), and write an email18:24
leonardrmaxb: i think you should talk to flacoste or lifeless. i have been going back and forth with developers on this for over a year18:25
Garo_hello. I'm trying to find out where I can download the sources of the last revision in the trunk for this project? http://bazaar.launchpad.net/~duplicity-team/duplicity/0.6-series/files18:25
Garo_I'm propably just stupid, but I can't find anywhere the repository url nor any download links for the repository18:26
leonardrthe per-application credential system was broken and useless, and i don't feel a strong need to preserve backwards compatibility for it18:26
maxbI think it works quite well.18:28
maxbMoreover, I feel that for a library to change the behaviour of an API call in such a significant way is really quite evil.18:28
leonardrmaxb: just to be clear, we're talking about a system that shuttles the user through a complex process N times, for no more security benefit than doing the same thing 1 time18:29
leonardra process so complex that developers will go through almost any amount of work to hack around it18:30
maxbmok0: That import looks fine to me.18:45
mok0maxb, it's missing the last two18:45
maxbNot according to "svn log -v http://coot.googlecode.com/svn/trunk/ --limit 2" executed by me locally18:45
maxbThe returned revisions match the last two shown on the launchpad branch webpage18:46
mok0maxb: what does "--limit 2" do?18:46
maxbJust avoids retrieving the entire project history18:46
mok0maxb, I checked out the repo and I get up to r335718:47
mok0maxb: but LP only has upto r335518:48
maxbmok0: svn revnums are global to the repository. For this project, r3356 and r3357 did not touch /trunk18:49
mok0maxb, I am confused. So you are saying that the last 2 revs are not part of trunk?18:51
maxbyes, exactly18:51
mok0But if I check out trunk, I get r3357, that's weird18:52
maxbmok0: Now run "svn info" in the checkout18:52
maxbTake particular note of "Revision:" vs. "Last Changed Rev:"18:53
mok0maxb: I hate svn18:53
maxbhah :-)18:53
mok0:-I18:53
maxbIt would be more friendly if svn printed the last changed rev of the root, not the revision, after a checkout/update/switch etc.18:54
mok0maxb: indeed18:55
mok0maxb: thanks for your help18:56
maxbnp18:56
mok0Now, if bzr would only know about the svn revno18:57
maxbit does18:57
mok0maxb: ah! How so?18:57
maxbbzr log should show it to you18:57
maxb(if you have the bzr-svn plugin installed)18:58
maxbIf you don't, you can use bzr log --show-ids and note that the svn revno is the last part of the revision id, for a bzr-svn imported revision18:58
mok0maxb: I don't,, I think18:58
mok0Ah, yes, I see19:00
=== tremolux_ is now known as tremolux
mok0maxb, that is so cool, now I can extract the svn revision and get a correct name for my package19:03
d34df00dHi!19:38
d34df00dI've heard some rumors that launchpad is going to support .ts files (Qt's translation format) directly, without 3d-party tools for converting them to .po.19:38
d34df00dIs that really planned?19:38
=== jcsackett is now known as jcsackett-mobile
lifelessd34df00d: I'm not aware of direct work going on to do that, but we do have pluggable input/output layers, so we probably can do it, or someone could submit a patch.19:46
=== gary_poster changed the topic of #launchpad to: Launchpad: https://launchpad.net/ | Read https://help.launchpad.net/ for help | On-call help contact: - | Join https://launchpad.net/~launchpad-users | This channel is logged: http://irclogs.ubuntu.com/ | Launchpad is open source: https://dev.launchpad.net/
=== Lcawte|Away is now known as Lcawte
Methslifeless: It's just dawned on me that the line spacing is huge on the revision pages, should they be using the same CSS as the code browsing?20:51
lifelessMeths: url?20:57
leonardrbarry, mixed results from the launchpadlib test. i gave some code to maxb to run. he reported a problem with one of the deprecated methods.21:06
leonardri hosed my netbook upgrading it to natty, so i still can't test on my own21:06
barryleonardr: ok.  please let me know if there's anything i can help with21:10
leonardrbarry: let me go back to the code and ask you to try some stuff out21:11
barryk21:11
leonardrbarry: what happens when you run this code?21:14
leonardrfrom launchpadlib.launchpad import Launchpad21:14
leonardrLaunchpad.get_token_and_login("foo", "staging")21:14
barryleonardr: in natty, with the ppas, right?  i need to get my vm updated, sec...21:14
leonardrbarry: right21:15
Methslifeless: e.g. difference between http://bazaar.launchpad.net/~launchpad-pqm/launchpad/devel/revision/12321 and http://bazaar.launchpad.net/~launchpad-pqm/launchpad/devel/view/head:/bootstrap.py21:25
leonardrmaxb, when you write up your comments on the change to launchpadlib, please keep in mind these two earlier emails from me, esp. if you haven't read them before21:31
leonardrhttp://www.mail-archive.com/launchpad-dev@lists.launchpad.net/msg04664.html and http://www.mail-archive.com/launchpad-dev@lists.launchpad.net/msg04858.html21:32
leonardrwhen we make these changes our policy is to talk them over with identified stakeholders (this was an unofficial policy before and it's official as of a couple weeks ago). right now the stakeholders are doctormo, james_w, thekorn, and poolie. if you want to self-identify as a stakeholder we'll include you as well21:33
lifelessMeths: which is the one that is double spacing ?21:37
MethsThe revision view (first URL).21:38
lifelessMeths: which bit is double spacing for you? [perhaps a screen shot with a circle where to look?]21:39
MethsAny expanded file, i.e. any bit of code.21:40
MethsScreenshot will just look like the other bug for code browsing except be on a different page.21:40
lifelessMeths: well, the css is accessible21:41
lifelessso I think we need a bug filed21:41
MethsOkay21:42
flacostehttp://codeconf.com/21:49
james_whey, when looking at a ppa +packages, if a source was built from a recipe wouldn't it link to said recipe?21:50
james_wah, it does if you go to the binary build21:51
pooliehello leonardr21:51
lifelessjames_w: if the source doesn't, perhaps file a bug?21:51
poolieleonardr, i'm curious if you think i'm smoking toenails in https://bugs.launchpad.net/bugs/71171821:51
james_wone step ahead of you21:51
james_wbug 71277321:54
ubot5Launchpad bug 712773 in Launchpad itself "PPA +packages doesn't show recipes for source packages that were built from them" [Undecided,New] https://launchpad.net/bugs/71277321:54
pooliemaxb, what were you going to propose?21:56
james_wand 712776 from filing that one21:56
lifelessthats a dup22:00
lifelessjml: should 712773 be in the 'must do' for the feature?22:00
* james_w files a bug on the dupe finder22:00
lifelessjames_w: that will be a dupe too22:01
leonardrpoolie, checking22:01
lifelessjames_w: the dupe finder works nearly like a regular search, all terms need to be present.22:01
lifelessjames_w: won't be addressed till the major search overhaul22:01
=== jcsackett-mobile is now known as jcsackett
lifelessjames_w: when filing, only use the key elements, not an english description22:02
leonardrpoolie: yeah, that's fine. you're seeing status quo bias. some things are published as scoped collections because they're that way in the model, and some things aren't because we didn't put them in the model22:03
poolieok, and i'm correct in saying generally speaking, collections linked from the object are preferable?22:06
barryleonardr, maxb: are ppas still off-line or something?22:08
leonardrbarry: no idea22:08
barryapt-get update fails after add-apt-repository22:08
pooliebarry, how?22:09
poolieand hi22:09
barrypoolie: hi22:09
barryErr http://ppa.launchpad.net natty/main Sources22:10
barry  404  Not Found22:10
barryErr http://ppa.launchpad.net natty/main amd64 Packages22:10
barry  404  Not Found22:10
barry 22:10
pooliebarry, often this means that ppa has no builds for natty22:10
pooliei 'd check that first22:10
* barry checks22:10
barryindeed, maxb's ppa doesn't have natty packages22:11
pooliearguably this is a bug in ...something22:13
pooliethat it doesn't give you a more obvious message22:13
pooliei also find it a bit unobvious that apt-add-repository doesn't apt-get update22:13
barryagreed22:14
barryleonardr: results of running the code:22:21
barry>>> from launchpadlib.launchpad import Launchpad22:21
barry>>> Launchpad.get_token_and_login('foo', 'staging')22:21
barryThe authorization page:22:21
barry (https://staging.launchpad.net/+authorize-token?oauth_token=vWVgVFQhmTvltPmmsXmb&allow_permission=DESKTOP_INTEGRATION)22:21
barryshould be opening in your browser. Use your browser to authorize22:21
barrythis program to access Launchpad on your behalf.22:21
barry 22:21
barryWaiting to hear from Launchpad about your decision...22:21
barry 22:21
leonardrbarry: you get a browser open?22:21
barryat that point though i killed it because i'm running on a command line interface22:21
barryleonardr: no, because i was ssh'd in.   let me try again in a graphical login22:21
leonardrbarry: you could also have copied the url into some other browser22:22
lifelessbarry: not even w3m ?22:22
barrylifeless: nope, just hangs22:22
barryleonardr: in a graphical login, firefox opens up to login.staging.launchpad.net22:23
leonardrbarry: ok, authorize the token and see if it works22:23
barrysays: Sign in to Launchpad's staging environment22:23
leonardractually, i guess you should run 'print Launchpad.get_token_and_login(...).me.name'22:24
leonardrso that yo'll actually do something with the resultig launchpad object22:24
barryi land on a page that says "Not allowed here" but i am apparently logged into staging22:25
barryand the python prompt is still hanging22:25
leonardrbarry: it's not hanging per se, it's periodically polling launchpad22:26
leonardrbarry: give me the url?22:26
barryleonardr: it's a bit tricky as this is in a vm, but look at pastebin.ubuntu.com/56224322:27
leonardrbarry: you get the error "didn't say what kind of desktop it is..."?22:29
barryleonardr: nope.  now, this is on natty with just my ppa, so hopefully it's testing what you want me to test22:30
leonardrbarry: ok, i'm confused about the page that says "not allowed here"22:31
leonardrwhen you go to the url you pasted to me, where do you end up?22:31
barrythat's the url for the "not allowed here" page22:32
barrywhich is where i end up after authenticating with the lp staging login service22:32
leonardrbarry: i see an exception with a traceback. do you?22:33
leonardrand at the bottom of the traceback i see Consumer "foo" asked for desktop integration...22:33
barryi don't see an exception, tho i see some warnings from NSPlugin Viewer (from ff i'm guessing).  and then "Running global cleanup code from study base classes."  Also from FF?22:34
barryi can try C-c'ing python and doing it again22:34
leonardrbarry: i'm talking about an exception *in the web browser*22:34
leonardron the very page that also says "not allowed here"22:34
leonardra *launchpad* exception22:35
barryleonardr: nope i don't see that22:35
barryleonardr: the page just says:22:35
barryNot allowed here (in bold)22:35
barrySorry, you don't have permission to access this page.22:35
barryYou are logged in as Barry Warsaw.22:36
leonardrnot sure why you don't get a traceback, but i'm pretty sure we're seeing the same page22:36
barryleonardr: should i ctrl-C and try again?22:36
wgrantleonardr: Only ~launchpad sees tracebacks.22:36
barryand i think flacoste booted me from that a few weeks ago :)22:37
leonardrthat would explain it22:37
wgrantYup.22:37
leonardrok, we have a regression in at least one deprecated method22:38
leonardrbarry, how long do we have to fix this problem?22:38
barryleonardr: natty alpha 2 just came out, and feature freeze is something like feb 24, so you have some time22:39
leonardrok. i will file a bug about this and work on it on monday22:39
barrysounds good.  ping me for another test22:40
leonardrflacoste, since i have to do another release anyway, i would also like to remove the keyring code. i feel bad about this because it was a lot of work, but nobody wants it, and everyone who is paranoid enough to benefit from it has an encrypted home directory22:40
poolieflacoste, why do you want to remove it?22:40
flacostepoolie: i don't, leonardr wants22:41
poolies///22:41
leonardrpoolie:22:41
leonardrpoolie: i don't think its benefits outweigh the additional complexity22:42
poolieistm gui clients will almost certainly want to use this,22:43
poolieand it's better to have it in the base library than to have N slightly different implementations of it22:43
poolieas is tending to happen at the moment with similar features22:43
leonardrgui clients will want to use login_with()22:44
pooliebut, perhaps we should be more precise about which feature we're discussing22:44
leonardrpoolie: good idea22:44
pooliei think lplib ought to have a way for a client to say "log me in, getting/putting the credentials in the keyring"22:45
leonardrcurrently the desktop-wide credential is stored in the keyring/kde wallet22:45
leonardri propose storing the desktop-wide credential in a file on disk, instead22:45
pooliewhat's the api to get the desktop-wide credential now?22:46
leonardri think lplib ought to allow a client to say "log me in, reusing credentials if possible, getting new ones if necessary"22:46
pooliebtw can i suggest you post about this to the list and the stakeholders before doing anything drastic?22:46
leonardrsure22:46
leonardrthere is no api to "get the desktop-wide credential"22:46
leonardrthere is an api to "log in"22:46
leonardrthe caller should not have to know *anything* about credentials, desktop-wide or otherwise22:47
leonardri don't consider this a change that affects the third-party developer or the typical end-user at all22:48
pooliewell, it does affect people22:49
poolies//developers and users22:49
pooliebecause it changes the behaviour of the app, and that's likely to generate user support requests and change the way they need to be answered22:50
leonardrok, let's talk about that22:50
poolieso, i think telling people when you change behaviour is a pretty good idea22:50
leonardrin my experience "file on disk" is a lot more reliable than the gnome keyring22:51
leonardreg. i had to find a workaround to make the keyring work over x forwarding22:51
pooliemm22:51
pooliethat's probably true22:51
pooliethat it's more reliable, i mean22:51
leonardrwe went with the keyring because it was a desktop standard22:51
leonardrand that's the leading argument for it imo22:52
leonardrbut on an absolute scale, it's not that great22:52
pooliei do also agree with you that generally we should be assuming that people have encrypted home directories22:52
poolieif they care at all22:52
leonardrbarry: btw, judging from my experience today, i'm +1 on putting the python-keyring update into natty22:54
poolieleonardr, i wonder if it would be good to have a wiki page or something stating what the recommended approach is and what the options are22:54
pooliefor app authors or users22:54
poolielike just saying:22:54
poolie- for desktop apps, we will normally give just one token per user and computer22:55
poolieand this will be stored mode 0600 but unencrypted in blah blah22:55
poolie- and if you want a per-app token, do X22:55
barryleonardr: okay. i'll work with debian to get the update there and then request a sync to natty.  in the meantime it's in my ppa22:55
poolie- and if you want to use the keyring, do Y22:55
pooliemaybe this already exists, for all i know22:56
pooliewhat do you think?22:56
leonardrpoolie: what you describe is close to an existing document22:57
leonardrhttps://help.launchpad.net/API/ThirdPartyIntegration22:57
leonardrbut, i think it's a mistake to think thoughts like "if you want to use the keyring"22:58
leonardrthere are three use cases:22:58
leonardr1. desktop use case22:58
leonardr2. headless server use case22:58
leonardr3. website integration use case22:58
poolieyou're right, thinking in terms of cases like that is better22:59
=== mauricio is now known as Guest47117
leonardrfor #1, we have decided to use the keyring. we may decide to switch to an unencrypted file. either way, the developer goes with what we chose without seeing a difference22:59
leonardrthe api is the same22:59
pooliei suppose i wonder whether users are really happy having just one token per home directory22:59
poolieso, i should ask, why would they not be?22:59
leonardryeah, they're certainly not happy with more than one token22:59
poolieas we discussed previously, there is not a great deal of process isolation such that they would want to be running untrusted apps23:00
pooliebut...23:00
leonardrbut there is no way to partition the tokens. it's simply not possible23:00
poolie1- perhaps they're *accustomed* to seeing apps ask before doing stuff to launchpad and it will be weird, until they reacclimatize, to see it just work23:00
poolie2- i guess the initial token needs to get full access?23:01
poolieso you can partition the tokens by having several named by app, but it you can't _securely_ partition them23:01
leonardryeah23:01
pooliegnome-keyring probably comes closest to that23:01
leonardrit's security theater23:01
pooliehey, it works for uncle sam, it can work for you too :)23:01
leonardrthumper: i need to work on https://bugs.launchpad.net/launchpadlib/+bug/712808, that's my project for monday23:03
poolieleonardr, does the server still get the app name for logging/statistical purposes?23:03
leonardrpoolie: yes, the app name is still sent in the User-Agent string23:03
poolieand that's still passed to the login function?23:03
leonardryes23:03
poolieso we could, potentially, split up the tokens further down the road23:03
leonardryeah, but that looks like it will require magic computers23:04
poolieif someone thinks it's worthwhile23:04
poolie:)23:04
pooliecool23:04
wgrantMagic computers?23:04
pooliewhat about apps that want to do security-sensitive stuff with short-lived tokens?23:04
pooliethey'll still open a web browser to confirm it?23:04
pooliewgrant, magic computers that protect you against hostile code running in your own uid23:05
pooliehostile local apps23:05
wgrantpoolie: Just needs non-sucky OSes.23:05
poolieyep23:05
poolieit's not impossible23:05
leonardrpoolie: we have a plan for short-lived/single-use tokens that have powers above and beyond what a normal token can do23:06
leonardrfor quickly23:06
leonardrthese tokens will probably not be cached at all, and you'll get them using some method other than login_with. i don't remember the details, if there even are any details23:07
poolieok23:07
poolieso what's the story for (2), servers?23:07
leonardrthe credentials_file argument23:08
leonardryou pass in a path and it uses that instead of the keyring (or, instead of the standard path, should we get rid of keyring)23:08
poolieso the application controls the location, and you get a per-application token23:10
pooliecool, thanks for taking the time to explain it23:10
leonardrsure23:10
pooliethat sounds good to me23:10
poolieperhaps we can leave the keyring glue in but turn it off by default if it causes trouble?23:10
leonardrpoolie: i suggested that and barry said it wold cause bitrot23:11
leonardrwhich is true enough23:11
poolieit may23:11
leonardrand we don't really have any way for an end-user to signal that they would rather their credential be stored in the keyring23:12
leonardri was really frustrated with the keyring earlier which is why i had this thought, but i think we've resolved the major problems23:12
leonardrand as keyring improves we'll reap the benefits rather than going off and doing our own thing23:13
leonardrso, i think i'm ok with leaving it... but ask me again on monday23:13
poolie:)23:13
pooliei do think a brief note just about where you're heading would be good23:13
poolieit's a good plan23:14
leonardrok, another thing for monday23:14
=== pvo is now known as pvo_away
=== pvo_away is now known as pvo
=== pvo is now known as pvo_away

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!