PS: Perhaps it would make sense to add other WMDE employees that have signed an NDA as well.

I think they're all included by now… especially all which have shell access to production (like you have).

In T148832#2734258, @hoo wrote:

PS: Perhaps it would make sense to add other WMDE employees that have signed an NDA as well.

I think they're all included by now… especially all which have shell access to production (like you have).

That's what I thought, but it's apparently not the case.

This could be probably my fault since I am the one that configured pivot.w.o to check the following LDAP groups (Apache directives):

Require ldap-group cn=wmf,ou=groups,dc=wikimedia,dc=org
Require ldap-group cn=nda,ou=groups,dc=wikimedia,dc=org

I tried to check WMDE members via the following queries but didn't find them:

ldapsearch -x -b ou=groups,dc=wikimedia,dc=org cn=nda  | grep member
ldapsearch -x -b ou=groups,dc=wikimedia,dc=org cn=wmf | grep member

Now if I didn't make any trivial mistakes, there is a gap between people that have signed an NDA and people in the nda LDAP group.

How should we proceed?

People who you've confirmed to have signed an NDA can just be added to the nda LDAP group.

In T148832#2745388, @Krenair wrote:

People who you've confirmed to have signed an NDA can just be added to the nda LDAP group.

Thanks! Any quick way to verify it in bulk? Is there something that I can check or should I just ask Legal/other-team ?

Newer ones may show up on the L2-signers list. People who signed the volunteer NDA long enough ago, like me, won't be found there. I actually don't know who would have them. Maybe WMF Legal?

From https://phabricator.wikimedia.org/T140911 it seems that previously we required to sign https://phabricator.wikimedia.org/L2

Yes, WMF Legal has 'older' NDAs.

WMF Legal has also the new NDAs that are on paper and not on the L2-signers list. I checked with Manprit and Rachel via email, they confirmed that Daniel has signed a correct NDA.

I am in contact with the WMDE people over email and they have a solid use case to use pivot, namely observing Wikidata's traffic patterns.

Lydia Pintscher is Wikidata's project manager and she has asked for Pivot's access as well, for the same motivations. I verified her NDA as well via email.

I added both to the nda LDAP group to unblock the WMDE use case. I am going to add a not in the description to reflect this action.

While re-checking https://wikitech.wikimedia.org/wiki/Volunteer_NDA I realized that I missed one key point, namely final sign-off from C-Level staff. I removed the entries that I just added to nda a minute ago, will wait for the final sign-off before proceeding.

@Wwes: Hi! This request is to grant access to the nda LDAP group to Lydia Pintscher and Daniel Kinzler (Wikimedia Germany, Wikidata project). They would need to consult pivot.wikimedia.org to observe and analyse Wikidata's traffic patterns. I verified with WMF-Legal that their NDAs are compliant with our policies; would you mind to review this request as final sign-off?

Approved