Remove user gerrit2 from ldap
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Paladox
	Mar 9 2017, 9:03 PM

Description

The user is not needed in ldap any more. Having the user in ldap is causing problems installing the gerrit wikimedia deb on labs because the user creates files as gerrit2:nda but it needs to be gerrit2:gerrit2 the user is also created by the deb now but that will fail as the user will be in ldap.

Related Objects

Mentioned In: T129788: Review list of LDAP groups and document exactly what kind of access they can be allowed to provide

Event Timeline

Paladox created this task.Mar 9 2017, 9:03 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 9 2017, 9:03 PM

Paladox triaged this task as High priority.Mar 9 2017, 9:03 PM

Paladox added a subscriber: Muehlenhoff.

Paladox edited subscribers, added: MoritzMuehlenhoff; removed: Muehlenhoff.Mar 9 2017, 9:06 PM

Dzahn mentioned this in T129788: Review list of LDAP groups and document exactly what kind of access they can be allowed to provide.Mar 9 2017, 9:12 PM

Paladox updated the task description. (Show Details)Mar 9 2017, 9:17 PM

@demon Can you confirm that the user is no longer needed?

In T160122#3090315, @MoritzMuehlenhoff wrote:

@demon Can you confirm that the user is no longer needed?

For a little history, it used to be there so we could run local git hooks on the gerrit machine for the puppet repo and then post the results back to Gerrit, but we killed those ages ago (this predates Jenkins talking to gerrit, see for example gerrit 27479.

So I'm pretty sure we can kill it, but I'll want to keep an eye on the error logs on cobalt after we do to make sure there's not some other usage I forgot.

Ok, I'll make the change on Tuesday when you're around (since Monday is a holiday for US staff)