as @MoritzMuehlenhoff found when running an audit script, @Volker_E's shell user "volkere" does not match the LDAP user, which is "volker-e". Back when i created it in T143465 i wanted to avoid the literal "-" character in shell user names and stick to [a-z] without a literal "-", but it is indeed a legal character and these usernames should match per policy.
rename the shell user to match the LDAP user
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| admin: rename user volkere to volker-e | operations/puppet | production | +2 -2 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T142815 Enhance account handling (meta bug) | |||
| Resolved | Dzahn | T157591 rename shell user 'volkere' to 'volker-e' |
Change 336655 had a related patch set uploaded (by Dzahn):
admin: rename user volkere to volker-e
Mentioned in SAL (#wikimedia-operations) [2017-02-08T19:07:31Z] <mutante> bastion hosts, people.wm: deluser volkere, let puppet create volker-e, move data, delete old home dir (T157591)
@Volker_E This should all be done now. Your new user is "volker-e". I checked on the 4 bastion hosts and the "people.wikimedia.org" server. There was no data to move except that one HTML file and i changed permissions accordingly. Let me know if any unexpected problems.
[rutherfordium:~] $ id volker-e uid=12186(volker-e) gid=500(wikidev) groups=500(wikidev),600(all-users) [rutherfordium:/home/volker-e/public_html] $ ls 4.0K -rw-r--r-- 1 volker-e wikidev 52 Sep 22 02:17 index.html