Page MenuHomePhabricator

Request access to data for reader research
Closed, ResolvedPublic

Description

Who
Florian Lemmerich
Philipp Singer

Access Group
analytics-privatedata-users

Why
https://meta.wikimedia.org/wiki/Research:Characterizing_Wikipedia_Reader_Behaviour

Steps

Event Timeline

Do we also need to make a ticket requesting access?

No, @ph_singer. I'll add Ops to this task as soon as we're ready for them. :) Thanks for checking though.

My wikitech username is "ph_singer" and my preferred login name is "psinger".

My public ssh key is:

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoA+dwV71A3HjSLT1LjxjtXv0fb4/ycQGhqIdqPtulshi5/PZlG3tncFSQpwcOtgbwbRIMUnxhezHdQSUQONTOD02lKOk93dVma4TN6FAkb/ZIK6c9eRU/TQwy3OCXqj6O1CQohVj60kRKBvTKMUpw/oRM9lgTT3USc6UE3Uy8/0eHPiR37nhrA3E5uZ9KgEyIY6z+WCT6inghxEFE+uDFowY/8wwd2Rq4Nsa2F88I7488G1lmZpkye/BtbNbjt3QtLt9Qk8yfJqj8Rpniroxaj1Z+MNvVAXJFK+c4ziwjjAvNHcN9ngsJCURIOlOKgpLahNYofv8OmQ2PpQwGHDj/ psinger@gobbo

I also signed all relevant documents.

My wikitech username as well as my preferred login name is "flemmerich"

My public ssh-2-rsa key is:

AAAAB3NzaC1yc2EAAAABJQAAAQEAhAOVYD/NaXnew0HlVw4i/3LYT6wn6b8D+5Yun2tWRGd8DaODevafjW0Bzf+XwjSNoRIP52ZRM4Vmhg4H6sL4g31FuMfEVgLwjI0WCTxUxIrR2aGuumXRVYRwLOhFkC2RT7TcjTkDzeMa7DijyDxjI9+/rqCgGHcQwIk/c20VYZ4AzHPpGWqeb2JQblDRu/Jz1enmzUt1rwX/4Kxo/lmkLAtJxzVKgNfn13Acj3BSu1w0DIbPBT7EjKCuzKx7ZthanoYIh+BV5KyErp13AB6dxoxSQNfcIbftBoG6idlUSkEqnzednYoVBQSWa4xNaA2NDbjqpxfbMhERRs8FSn9/iw==

I also signed the relevant documents.

@flemmerich @ph_singer please let us know if you have done steps 2 and 3 as well?

@AlexMonk-WMF thanks for letting us know. I removed that item from the description.

I signed the document (step 2) and requested developer access (step 3).

@AlexMonk-WMF I think this task is ready for Ops review?

Possibly? I don't know if it has the correct approvals... But I'm not actually ops, I just wrote the patch deleting bastiononly.

@AlexMonk-WMF got it. :)

@Ottomata I'm not sure how I can make sure if this task is received by Ops or not? Can you or someone from Ops advise? :)

Patchset has been merged for both users. You should have access at this time. It may take up to 30 minutes for the change to sync to all affected hosts.

If anyone has any issues with their access, feel free to reopen this task.

@Cmjohnson Thanks a lot! Unfortunately, we have some troubles accessing the host.

ssh -vv psinger@stat1002.eqiad.wmnet

It hangs at

debug1: Connecting to stat1002.eqiad.wmnet [83.218.160.157] port 22.
debug1: connect to address 83.218.160.157 port 22: Connection timed out
debug1: Connecting to stat1002.eqiad.wmnet [2a00:15c0:100a::2] port 22.
debug1: connect to address 2a00:15c0:100a::2 port 22: Network is unreachable
ssh: connect to host stat1002.eqiad.wmnet port 22: Network is unreachable

Am I doing something wrong here? Thanks!

@Cmjohnson Thanks a lot! Unfortunately, we have some troubles accessing the host.

ssh -vv psinger@stat1002.eqiad.wmnet

It hangs at

debug1: Connecting to stat1002.eqiad.wmnet [83.218.160.157] port 22.
debug1: connect to address 83.218.160.157 port 22: Connection timed out
debug1: Connecting to stat1002.eqiad.wmnet [2a00:15c0:100a::2] port 22.
debug1: connect to address 2a00:15c0:100a::2 port 22: Network is unreachable
ssh: connect to host stat1002.eqiad.wmnet port 22: Network is unreachable

Am I doing something wrong here? Thanks!

stat1002.eqiad.wmnet [83.218.160.157]? That's definitely not right. Can you paste the contents of your SSH configuration file?

Here you go:

Host *
SendEnv LANG LC_*
HashKnownHosts yes
GSSAPIAuthentication yes
GSSAPIDelegateCredentials no

But that shouldn't have an impact on my outgoing ssh connections.

Anyways, I tried it on different machines (Linux, Windows) and on different hosts and get the timeout each time.

On another host the debug looks like:

debug1: Reading configuration data /home/psinger/.ssh/config
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 19: Applying options for *
ssh: Could not resolve hostname stat1002.eqiad.wmnet: Name or service not known

Maybe it has something to do with the DNS?

When you read and signed L3, you should have noticed the suggested SSH configuration:

ForwardAgent no

Host !bast1001.wikimedia.org *.wikimedia.org *.wmnet 
     ProxyCommand ssh -a -W %h:%p bast1001.wikimedia.org

It won't work without ProxyCommands like that.

Thanks, indeed forgot to add that. Works now!