@bmansurov Hi, could you let your manager add an approval on this ticket? And, could you sign L3? I see you already have access but likely since before we this process in phabricator itself. So that would just be nice to have if you could do that too.

note to other ops handling this next week: He already has a user in the admin module with that SSH key, it doesn't have to be added again. it's just about adding to groups. It's best to have groups confirmed by @Ottomata when they are analytics related.

Approved.

@Dzahn, I have signed L3. Thanks.

The relevant group here is analytics-privatedata-users

@Dzahn: You are relieved. :-)

I'm able to ssh to stat1002. I, however, am not able to login at https://hue.wikimedia.org/accounts/login/?next=/ . @Ottomata, does my LDAP account need manual syncing? Could you please help me with that? Or should I create a new task?

In T113069#1661814, @bmansurov wrote:

@Ottomata, does my LDAP account need manual syncing?

checked for group membership in "wmf" because that's a common issue but confirmed already a member. is there a a different group used here?

member: uid=bmansurov,ou=people,dc=wikimedia,dc=org

Hue does need manual syncing. Done.

Thanks all!

I can confirm the user bmansurov is still in the "wmf" LDAP group but that is all i know about hue access. Re-assigning over to ottomata for advice.

17:44 < ori> mutante: it requires membership in the analytics-privatedata-users group in admin.yaml
17:44 < ori> or admin/data/data.yaml rather
17:46 < mutante> ori: oh, thanks, let me check that
17:47 < mutante> ori: sure it's not "statistics-privatedata-users"?
17:47 < mutante> he is in that but not the other
17:47 < mutante> strange is he claims there was a recent change

Wha? That is very strange.

I had to recreate some Hue accounts yesterday, and I did it from the list of users in analytics-privatedata-users. I didn't create @bmansurov's user in Hue because he wasn't in that group.

I can't find a commit actually adding him that group either. At least, not a commit message with 'bmansurov' in the commit message that added him.

This ticket was def approved long ago, and I don't know what happened, so I'm going to add him.

Change 272988 had a related patch set uploaded (by Ottomata):
Add bmansurov to analytics-privatedata-users

https://gerrit.wikimedia.org/r/272988

Change 272988 merged by Ottomata:
Add bmansurov to analytics-privatedata-users

https://gerrit.wikimedia.org/r/272988

/user/bmansurov exists in HDFS, so he definitely had access at some time. Anyway, done. Try now.

Thanks, I'm able to login now.

Saved queries! @bmansurov I did not know that people actually used this, I am sorry.

Yesterday we upgraded Hue (and all of the rest of the CDH components). After the upgrade, it seemed that Hue reinitialized its SQLite database, which I did not expect. I've been meaning to move Hue's datastore to MySQL, which would have avoided this, but I haven't done it yet. I can't bring your saved queries back :( I am very sorry!

I just made T127990.

As for the database list error, that shouldn't happen. It works fine for me. Ping me on IRC and let's look at it.

No problem about the saved queries. They are also saved in Phabricator tasks ;))
I'll ping you after my meetings later today. Thanks.

The error is gone. All is good now. Thanks for the help.