8727 is the count of all posixAccounts under ou=people,dc=wikimedia,dc=org, not the count of members of cn=project-tools,ou=groups,dc=wikimedia,dc=org
The number of tool maintainers should be just below 1000 at the moment; the number of tools seems to match up roughly (not sure where the extra 13 directories come from, though).
valhallasw@tools-bastion-03:/home$ ls | wc -l 967 valhallasw@tools-bastion-03:/data/project$ ls | wc -l 1511
However, @Krenair measured more tool maintainers:
krenair@bastion-01:~$ ldapsearch -x cn=tools | grep member: -c 1063
which might mean we have almost a hundred users that never got so far to actually log in?
And a third number:
tools-bastion-02.tools:~ bd808$ ldapsearch -LLL -x cn=project-tools|grep 'member: '|wc -l 1225
I guess the next mystery to solve here is which of cn=project-tools,ou=groups,dc=wikimedia,dc=org and cn=tools,ou=projects,dc=wikimedia,dc=org is the actual membership roster of the tools project.
cn=project-tools,ou=groups,dc=wikimedia,dc=org is the one I had picked at some point during Striker development as well. I of course didn't make any notes about why I chose that one. I'll be documenting the LDAP layout as maintained by OpenStackManager soon as I start figuring out how account creation works.