Page MenuHomePhabricator

Root emails for projects going to the wrong LDAP groups
Closed, DuplicatePublic

Description

@RobLa-WMF pointed out to me that he is getting cron spam emails for the deployment-prep project even though he is not an admin or even a member of that project currently.

On original investigation I thought the problem was that LDAP and the UI on Wikitech were somehow out of sync. I found that RobLa is listed as a member of the dn: cn=deployment-prep,ou=projects,dc=wikimedia,dc=org LDAP group.

@Krenair pointed out that the cn=deployment-prep group is legacy data and that the active group would be dn: cn=project-deployment-prep,ou=groups,dc=wikimedia,dc=org.

It looks like the underlying problem here may be the notification script iteself: https://phabricator.wikimedia.org/diffusion/OPUP/browse/production/modules/base/files/labs/notify_maintainers.py;73adc52065931d295fc418ab22385a3a156296d5$49

Related Objects