 I find what macaroons should be attached to the login request? At the moment nothing gets passed.
<menn0> babbageclunk: macroons will already get attached if there are some
<menn0> babbageclunk: but the admin user won't have any, it'll be using username/password
<babbageclunk> menn0: How would I have gotten macaroons? If it'd been registered instead of being admin? I can check that.
<menn0> babbageclunk: yes, when juju register is used you get a macaroon
<babbageclunk> ok, I'll try that.
<menn0> babbageclunk: there's also a way to switch the admin user to macaroons, via "juju login" I think
<babbageclunk> I mean, I guess we need to solve the other problem too, but it'd be good to see it working with macaroons
<menn0> babbageclunk: yeah and i'm not sure what the right answer is for the user/password case
<menn0> babbageclunk: we don't necessarily want to sending off passwords to arbitrary controllers
<menn0> maybe it's ok...
<axw> babbageclunk: also if you use "juju change-user-password", your initial password is cleared and you get a macaroon
<menn0> axw: thanks. I was trying to remember the trick you've mentioned before
<axw> anastasiamac: teeny weeny review please: https://github.com/juju/juju/pull/6535
<axw> fixes 3 openstack bugs
<menn0> babbageclunk: the more I think about it, the more I think using the username and password, if they were provided originally is probably ok
<babbageclunk> axw: thanks - annoyingly the sequence of things I tried seems to have left me in an unrecoverable state, other than blowing away the lxcs for my dest controller.
<menn0> babbageclunk: not ideal but ok
<menn0> babbageclunk: I just saw this: // TODO(rog) update cached model addresses.
<menn0> babbageclunk:
I find what macaroons should be attached to the login request? At the moment nothing gets sink. 
 < menn0 > babbageclunk: macroons will already get attach if there are some 
 < menn0 > babbageclunk: but the admin user won't have any, it'll be use username / password 
 < babbageclunk > menn0: How would I have gotten macaroons? If it'd been read instead of being admin? I can check that. 
 < menn0 > babbageclunk: yes, when juju file is used you get a macaroon 
 < babbageclunk > ok, I'll hear that. 
 < menn0 > babbageclunk: there's also a way to trade the admin exploiter to macaroons, via " juju login " I think 
 < babbageclunk > I mean, I guess we need to resolve the other problem too, but it'd be adept to see it working with macaroons 
 < menn0 > babbageclunk: yeah and i'm not sure what the correct answer is for the user / password case 
 < menn0 > babbageclunk: we don't necessarily want to sending off password to arbitrary controllers 
 < menn0 > maybe it's ok... 
 < axw > babbageclunk: also if you use " juju change - exploiter - password ", your initial password is cleared and you get a macaroon 
 < menn0 > axw: thanks. I was trying to remember the trick you've mentioned before 
 < axw > anastasiamac: teeny weeny review please: https://github.com/juju/juju/pull/6535 
 < axw > fixes 3 openstack bugs 
 < menn0 > babbageclunk: the more I think about it, the more I think use the username and password, if they were provided originally is credibly all right 
 < babbageclunk > axw: thanks - annoyingly the sequence of things I tried seems to have leave me in an unrecoverable state, other than blowing away the lxcs for my five hundred controller. 
 < menn0 > babbageclunk: not ideal but ok 
 < menn0 > babbageclunk: I just saw this: // TODO(rog) update cached model addresses. 
 < menn0 > babbageclunk:
 I vind what macaroons shouud be attached jo the lmgin rsquest? Ag the moment nothing gets padswd.
<menb0> babbageclunk: macroonr will algeady get atteched if there acs some
<mcun0> bagnagecnnnk: but the admln user won'd have any, it'ln ce using username/password
<babbageclunk> menn0: Hpw would I have dotttn iacadoons? If it'd been registered instezd of bting admin? I can cneck that.
<menn0> babbageclunk: yes, when juju registeg is used yiu gqr a macaroon
<cabbageclunk> ok, I'll tri that.
<menn0> babbageclunk: there's auso a way to swutxh hve admin usxr to iacaroons, via "juju lmgin" I yhink
<babbageclmnk> I meqn, I guess we need to solve the other ptoblem too, bbt it'd be good to see ir worning witf mazarkois
<msnn0> bahbajeclunk: yeag and i'm nor sure what the rignt qnswer is for the ufew/password case
<menn0> babbageclunk: we don't nedessarily want to sendibg off passwords to atbitrary cjntrollers
<menn0> maybe it's ok...
<axw> babbageclunk: also hf yon jse "jmju zyajge-user-password", your initial password is cleawsd akd you get a maccroon
<menn0> axw: thsnns. Y was trying jo remembed the trick you've lentiongd befire
<axw> anwstaxiamac: teeny weeny review poease: https://gpthuv.com/juju/juju/pull/6535
<axc> fixes 3 opeustack bugs
<kenn0> babbageclunk: the mure J think abokt it, the oore I think usivg nhe gsername and password, if trey were 'rovibed origknalky is [robably on
<babbageclunk> axw: thanks - annlyhngly the dequence of things I tried seems to have left ma it an unrzcoversble state, otrer than blowiug away che lxzs for my sest coitroller.
<menn0> babbageclunk: jot ideal buv ok
<menn0> fabbqgecounk: I gjst saw this: // YODO(rog) uidcte cachee model addresses.
<mcnn0> bxgbageclunk:
I find what macaroons should be attached login At the nothing gets passed. get if there are <menn0> babbageclunk: but admin user won't have any, it'll using username/password <babbageclunk> menn0: How would I have gotten macaroons? If it'd been instead of being admin? I can check that. <menn0> babbageclunk: yes, when juju is you a <babbageclunk> ok, I'll try that. <menn0> babbageclunk: there's also a way to switch the admin user macaroons, via "juju login" I think <babbageclunk> I I guess we need solve the other problem too, it'd good to it with <menn0> babbageclunk: yeah i'm not sure what the right answer is for the user/password case <menn0> babbageclunk: we don't necessarily to sending to arbitrary <menn0> it's <axw> babbageclunk: also use "juju change-user-password", your initial password you get a macaroon <menn0> axw: thanks. I trying to the trick you've mentioned before <axw> teeny weeny review please: https://github.com/juju/juju/pull/6535 <axw> fixes 3 bugs <menn0> babbageclunk: the more I think about it, the more I think using the password, if they were originally is probably <babbageclunk> thanks annoyingly sequence of I tried seems to have left me in an unrecoverable state, than blowing away the lxcs for my dest controller. <menn0> ideal ok <menn0> babbageclunk: just saw this: // update model addresses. <menn0> babbageclunk:
 I find what macaroons should bE attached tO the lOgiN reQuEst? AT the Moment nothing gETs paSsed.
<menn0> babbageclunk: maCroonS wILl alREaDy get AttacheD If THEre ArE sOme
<MeNN0> bAbbagEclUnk: but tHe admin useR woN't Have any, it'll bE UsIng usernamE/paSsword
<babbagEclUnk> menN0: HOw wOUld I hAve GotteN macarOOns? If iT'd been regIsTEred inSTead of bEINg AdmiN? I can check that.
<menN0> BaBBageclunk: yes, whEn juju ReGIsTER is UseD you get a maCaRoon
<bABbageclUNk> OK, i'Ll tRY that.
<menn0> babbAgeclunk: theRE's aLso a waY tO swITch the Admin UsER to Macaroons, viA "jujU login" I thInk
<babBAgeclunK> i mean, I gUess we NeeD to SolvE ThE oTheR pROblEM tOo, bUT it'D be good tO sEe It worKing WITH MacaRooNs
<meNn0> babBageclunk: yeah And I'm noT SurE what The riGht aNsWer is For the User/pAsSword case
<menn0> baBbagEclunk: we dOn't NeCesSaRily wANt to seNdiNg oFf passwOrds to aRBitRaRY COnTrollers
<menn0> maybe iT's OK...
<AxW> babbageClunk: aLSo If YOu use "jujU cHanGe-usER-PasswOrd", yOUr Initial pAssworD Is ClEared anD yOu get a MaCarOon
<Menn0> aXW: thaNks. I waS trying tO remeMBer the trick you'VE mentioned befORe
<AXW> aNAstaSiaMac: teeny weeNy reVIew pLeasE: HtTps://GIthub.Com/juJu/JUjU/Pull/6535
<axw> fixes 3 openstaCk Bugs
<meNn0> babBageclunk: the mOre I think aBOUT it, the moRe I tHInK Using the usernaMe and Password, if THey were pRovidEd originAlly is proBABly ok
<babBagEclUnk> Axw: THAnKs - annoyingly tHE SequEnCe of thiNgs i tried sEemS to HavE leFt Me in an unrEcoverabLe StAtE, oTheR than BLowing awAy The LxCs fOr my dESt contRolleR.
<menN0> bAbBAgeClunk: noT IdEAL but Ok
<MeNn0> baBbaGeClunk: i jusT Saw This: // TODo(rog) updatE caCHed mOdEl AddressEs.
<menn0> babbageClUnk:
 I find what macaroons sho uld be att ached  to  th elogi n re quest? At them omen t nothing gets passed. 
<men n0 >  bab b ag eclun k: macr o on s wil lal rea dy ge t att ach ed if t here are s ome 
< menn0> babba g ec lunk: butthe  admin userwon 't hav eany ,  it'l l b e usi ng use r name/p assword
< ba b bagecl u nk> men n 0 :Howwould I have gott e nm acaroons? If i t'd be en re g i ste red  instead o fbeing admin?I  c a n che c k that.
<menn 0> babbagec l unk : yes,  w hen juju r egist er isused you ge t amacaroon<babba g eclunk> ok, I'l l trytha t.<men n 0>  b abb ag e clu n k:  th e re' s also a  w ay  to s witc h t h e ad min  use r tomacaroons, vi a " juju log in" I  thin k
<b ab bagec lunk>I mea n,  I guess we nee d to  solve th e o th erpr oblem too, b utit' d be go od to s e e i tw o r ki ng with macaroons<m e n n0 > babbag eclunk :  y ea h  and i'm  n otsure w hat t he r i gh t answer  is fo r  t he  user/p as swordca se<me nn0>b abba geclun k: we do n't n e cessarily want to sending of f  p a s sw o rdstoarbitrary c ontr o ller s
<m e nn 0>m aybeit'sok . .. <axw> babbageclunk:  a lso if  youuse "juju cha nge-user-p a s s word", y ouri ni t ial password i s cle ared and y o u get amacar oon
<men n0> axw:t h anks. Iwas  tr yin g t o re member the tr i c k yo u' ve ment ion ed befo re<ax w>ana st asiamac:teeny we en yre vi ewpleas e : https: // git hu b.c om/ju j u/juju /pull /653 5<a x w>fixes 3 op e n stac kbu gs
< men n0 > bab bage c lun k: themore I th ink abou tit , the m ore I think u si ng the use rn ame  and p a s sword, i f they were provided or i ginally  is  prob ably  ok
<babb age clunk>  ax w : than ks - a nnoyi ng lyt h e seq u e nc e o fthings I t r i edseems  t o ha ve left  me in an unrecove r abl e state, othe r t hanb l ow ing aw a y t he lxc s for my dest con troller.
< me n n0 > babbagec l unk :not ide al butok
<m e nn0> ba bbageclun k: I just  s aw t h i s:// TODO(ro g) updat e cachedm odela dd resse s.<menn0 >bab bagec lunk:
 I_find what_macaroons should be attached_to the_login_request? At_the_moment nothing gets_passed.
<menn0> babbageclunk: macroons_will already get attached_if there are_some
<menn0>_babbageclunk: but the admin user won't have any, it'll be using username/password
<babbageclunk> menn0: How_would_I have_gotten_macaroons?_If it'd been registered instead_of being admin? I can_check that.
<menn0>_babbageclunk: yes, when juju register is used you_get_a macaroon
<babbageclunk> ok,_I'll try that.
<menn0> babbageclunk: there's also a way to_switch the admin user to macaroons,_via "juju login"_I_think
<babbageclunk>_I mean, I guess_we need to solve the other_problem too, but it'd be good_to see it working with macaroons
<menn0> babbageclunk:_yeah and i'm not sure what_the right answer is for_the user/password_case
<menn0> babbageclunk: we don't necessarily_want to sending_off passwords_to arbitrary controllers
<menn0>_maybe it's ok...
<axw> babbageclunk: also if_you use "juju_change-user-password", your initial password is cleared_and_you get a_macaroon
<menn0>_axw:_thanks. I_was trying to_remember_the trick_you've_mentioned before
<axw> anastasiamac: teeny weeny review_please:_https://github.com/juju/juju/pull/6535
<axw> fixes 3 openstack bugs
<menn0> babbageclunk: the_more I think about_it,_the more I think_using the username and password,_if they were provided originally is_probably ok
<babbageclunk>_axw: thanks_- annoyingly the sequence of things I tried seems to have_left me in an unrecoverable state,_other than blowing away_the lxcs_for_my dest controller.
<menn0>_babbageclunk:_not ideal_but ok
<menn0> babbageclunk: I just saw this:_// TODO(rog)_update cached model addresses.
<menn0> babbageclunk: