bastiononly doesn't exist. Please re-check each of your groups to decide which ones you really need.

I also don't think you need both researchers and statistics-users simultaneously.

@Krenair it doesn't seem like statistics-users adds any additional access than researchers so I will remove that from my request https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Production_access

@Krenair it is hard for me to figure out what access groups are required for what, even with the given documentation. Can you help us out? Zareen needs access to event logging and weblogs. She also needs to be able two write hadoop jobs against the weblogs or transfer event logs to hadoop for larger operations.

Yeah, this is a big mess. What I know for sure is that researchers will certainly give access to EventLogging data, among other things.

Based on https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Production_access and a bit of digging around operations/puppet:

• Both analytics-users and analytics-privatedata-users will give access to Hadoop
• I think full webrequest logs is only in analytics-privatedata-users? So analytics-users might be redundant?
• statistics-privatedata-users gives researcher access (also via an extra shell server, stat1002 instead of just stat1003) and some sampled webrequest logs. So if you want sampled webrequest logs instead of full ones, I would probably suggest this instead of researchers+analytics-privatedata-users. If not, I suggest this is redundant.

@Ottomata?

researchers, statistics-privatedata-users, and analytics-privatedata-users is good enough.

Thanks @Krenair and @Ottomata!

Hi @Zareenf could you please create a new SSH key for production access that is different from the key used in Wikitech/Labs and paste it here? Thank you

Change 318688 had a related patch set uploaded (by Dzahn):
admin: create shell account for Zareen Farooqui

https://gerrit.wikimedia.org/r/318688

@Dzahn here is a new SSH key for production access:

ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKJFKzMQRJcDPrtRBIi7/b8hWbngR59UA3VCHZXbWVaNCKe+mOz9gXUvmAmeSr29p5vnmAP7tafnWYktvYbqGV02e1x5P09fvAWOvOaQob/A7/5shTGwtVxsip3/Ky2viP5Kycb8THbRHOtOt0DmeUVrWlhwie5M9AeKSWmTVJOivoME8g//nIlq7cXTCYyv+NHFSDIPKDmvlLbVFFdBbhYdDWlT6DQvTPFjTAyD23pltRBDo2WwufnSZB1sQ7spg+6+SN7e2fIcRiGXv8ar8fjwiolLtNz2I5nsLoBsb6q0ZHSwOdta4EhnkmswMrjNAgo6ayImKzXMeG35dvHvZh ZareenFarooqui@ZAREENs-MacBook.local

Change 318688 merged by Dzahn:
admin: create shell account for Zareen Farooqui

https://gerrit.wikimedia.org/r/318688

In T149211#2747507, @Ottomata wrote:

researchers, statistics-privatedata-users, and analytics-privatedata-users is good enough.

I am a bit confused by this comment.

The question before was " I would probably suggest this instead of researchers+analytics-privatedata-users. If not, I suggest this is redundant."

The response "Good enough" sounds like not all of them are neeed indeed but that's all the groups that were requested including the redundant one.

Change 318992 had a related patch set uploaded (by Dzahn):
admin: add zareen to *-privatedata-users, researchers

https://gerrit.wikimedia.org/r/318992

Ok, I see now. It was about "analytics-users" being redundant.

Change 318992 merged by Dzahn:
admin: add zareen to *-privatedata-users, researchers

https://gerrit.wikimedia.org/r/318992

Hi @Zareenf

your user has now been created and added to the groups:

researchers, statistics-privatedata-users, and analytics-privatedata-users

On the hosts stat1002.eqiad.wmnet and stat1003.eqiad.wmnet i can confirm it has been created.

This should resolve the request.

[stat1002:~] $ id zareen
uid=15813(zareen) gid=500(wikidev) groups=500(wikidev),725(statistics-privatedata-users),731(analytics-privatedata-users)

[stat1003:~] $ id zareen
uid=15813(zareen) gid=500(wikidev) groups=500(wikidev),714(researchers),725(statistics-privatedata-users)

On https://wikitech.wikimedia.org/wiki/Production_shell_access#SSH_configuration you can find docs on how to configure your ssh client to connect via the "bastion" hosts to stat1002/stat1003 behind them.

Cheers

Mentioned in SAL (#wikimedia-operations) [2016-12-07T18:03:11Z] <YuviPanda> add zareen to nda LDAP group, per https://phabricator.wikimedia.org/T149211