Page MenuHomePhabricator
Create Task
Maniphest T190414

Delete legacy svn accounts from LDAP directory
Open, LowPublic
Actions

Description

We have long had some variation of this message on the Wikitech account creation screen:

If you already had a SVN account with the same username, ask it to be created manually and include this information.

This is apparently needed because there are some LDAP records left over from when SVN was used as version control which have the uid attribute (?) but are not fully functional accounts for use as Wikitech/Gerrit/Phabricator/Cloud VPS developer accounts.

Is there any reason that we can not find and remove all such LDAP records to prevent the need for manual intervention on behalf of these users?

See also:

Related Objects

Event Timeline

bd808 created this task.Mar 22 2018, 3:20 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 22 2018, 3:20 PM
bd808 added a comment.Mar 22 2018, 3:23 PM

There are really 2 questions to be answered here:

  • How can we identify the legacy LDAP records?
  • Are the legacy LDAP records actually needed for anything?
bd808 added a comment.Mar 22 2018, 3:54 PM

Looking at the dated instructions on how to fix this, I think a tell-tale sign may be a missing mail attribute:

$ ldapsearch -xLLL -P 3 -E pr=40000/noprompt -o ldif-wrap=no -b"ou=people,dc=wikimedia,dc=org" '(&(objectClass=person)(!(mail=*)))' dn | grep dn: | sort
dn: uid=80686,ou=people,dc=wikimedia,dc=org
dn: uid=aaronpk,ou=people,dc=wikimedia,dc=org
dn: uid=abernala,ou=people,dc=wikimedia,dc=org
dn: uid=abigor,ou=people,dc=wikimedia,dc=org
dn: uid=aboostani,ou=people,dc=wikimedia,dc=org
dn: uid=adammck,ou=people,dc=wikimedia,dc=org
dn: uid=adam,ou=people,dc=wikimedia,dc=org
dn: uid=aigerim,ou=people,dc=wikimedia,dc=org
dn: uid=aj,ou=people,dc=wikimedia,dc=org
dn: uid=ajvol,ou=people,dc=wikimedia,dc=org
dn: uid=algorithmix,ou=people,dc=wikimedia,dc=org
dn: uid=allyunion,ou=people,dc=wikimedia,dc=org
dn: uid=alnokta,ou=people,dc=wikimedia,dc=org
dn: uid=amidaniel,ou=people,dc=wikimedia,dc=org
dn: uid=ankitgarg833,ou=people,dc=wikimedia,dc=org
dn: uid=aphid,ou=people,dc=wikimedia,dc=org
dn: uid=appy,ou=people,dc=wikimedia,dc=org
dn: uid=avar,ou=people,dc=wikimedia,dc=org
dn: uid=awrigh01,ou=people,dc=wikimedia,dc=org
dn: uid=balasyum,ou=people,dc=wikimedia,dc=org
dn: uid=bartek,ou=people,dc=wikimedia,dc=org
dn: uid=beckr,ou=people,dc=wikimedia,dc=org
dn: uid=benjamin,ou=people,dc=wikimedia,dc=org
dn: uid=bhagya,ou=people,dc=wikimedia,dc=org
dn: uid=bigsmoke,ou=people,dc=wikimedia,dc=org
dn: uid=blobaugh,ou=people,dc=wikimedia,dc=org
dn: uid=borgo,ou=people,dc=wikimedia,dc=org
dn: uid=bradneuberg,ou=people,dc=wikimedia,dc=org
dn: uid=brezelben,ou=people,dc=wikimedia,dc=org
dn: uid=cdangerville,ou=people,dc=wikimedia,dc=org
dn: uid=cogden,ou=people,dc=wikimedia,dc=org
dn: uid=collinj,ou=people,dc=wikimedia,dc=org
dn: uid=conrad,ou=people,dc=wikimedia,dc=org
dn: uid=cosoleto,ou=people,dc=wikimedia,dc=org
dn: uid=cydeweys,ou=people,dc=wikimedia,dc=org
dn: uid=david,ou=people,dc=wikimedia,dc=org
dn: uid=devayon,ou=people,dc=wikimedia,dc=org
dn: uid=dfinzer,ou=people,dc=wikimedia,dc=org
dn: uid=diana,ou=people,dc=wikimedia,dc=org
dn: uid=diebuche,ou=people,dc=wikimedia,dc=org
dn: uid=djbauch,ou=people,dc=wikimedia,dc=org
dn: uid=dom,ou=people,dc=wikimedia,dc=org
dn: uid=downchuck,ou=people,dc=wikimedia,dc=org
dn: uid=edyskant,ou=people,dc=wikimedia,dc=org
dn: uid=emiller,ou=people,dc=wikimedia,dc=org
dn: uid=emil,ou=people,dc=wikimedia,dc=org
dn: uid=erwin85,ou=people,dc=wikimedia,dc=org
dn: uid=evan,ou=people,dc=wikimedia,dc=org
dn: uid=fabianh,ou=people,dc=wikimedia,dc=org
dn: uid=faurethomas,ou=people,dc=wikimedia,dc=org
dn: uid=fde,ou=people,dc=wikimedia,dc=org
dn: uid=fenzik,ou=people,dc=wikimedia,dc=org
dn: uid=filnik,ou=people,dc=wikimedia,dc=org
dn: uid=finlay,ou=people,dc=wikimedia,dc=org
dn: uid=flohack,ou=people,dc=wikimedia,dc=org
dn: uid=fptc,ou=people,dc=wikimedia,dc=org
dn: uid=fredck,ou=people,dc=wikimedia,dc=org
dn: uid=fvassard,ou=people,dc=wikimedia,dc=org
dn: uid=gigs,ou=people,dc=wikimedia,dc=org
dn: uid=gmaxwell,ou=people,dc=wikimedia,dc=org
dn: uid=grace,ou=people,dc=wikimedia,dc=org
dn: uid=gri6507,ou=people,dc=wikimedia,dc=org
dn: uid=grondin,ou=people,dc=wikimedia,dc=org
dn: uid=gslater,ou=people,dc=wikimedia,dc=org
dn: uid=gszorc,ou=people,dc=wikimedia,dc=org
dn: uid=gurch,ou=people,dc=wikimedia,dc=org
dn: uid=guyvdb,ou=people,dc=wikimedia,dc=org
dn: uid=guz,ou=people,dc=wikimedia,dc=org
dn: uid=harddisk,ou=people,dc=wikimedia,dc=org
dn: uid=hcatlin,ou=people,dc=wikimedia,dc=org
dn: uid=hhappel,ou=people,dc=wikimedia,dc=org
dn: uid=hippietrail,ou=people,dc=wikimedia,dc=org
dn: uid=holek,ou=people,dc=wikimedia,dc=org
dn: uid=hooft,ou=people,dc=wikimedia,dc=org
dn: uid=ilabarg1,ou=people,dc=wikimedia,dc=org
dn: uid=ipye,ou=people,dc=wikimedia,dc=org
dn: uid=ishidaj,ou=people,dc=wikimedia,dc=org
dn: uid=ishimatsu,ou=people,dc=wikimedia,dc=org
dn: uid=ivanlanin,ou=people,dc=wikimedia,dc=org
dn: uid=jablko,ou=people,dc=wikimedia,dc=org
dn: uid=jacquesroy7,ou=people,dc=wikimedia,dc=org
dn: uid=janesh,ou=people,dc=wikimedia,dc=org
dn: uid=janpaul123,ou=people,dc=wikimedia,dc=org
dn: uid=jarnaiz1,ou=people,dc=wikimedia,dc=org
dn: uid=jasonr,ou=people,dc=wikimedia,dc=org
dn: uid=jeluf,ou=people,dc=wikimedia,dc=org
dn: uid=jenkins-bot,ou=people,dc=wikimedia,dc=org
dn: uid=jhb,ou=people,dc=wikimedia,dc=org
dn: uid=jimbojw,ou=people,dc=wikimedia,dc=org
dn: uid=jitseniesen,ou=people,dc=wikimedia,dc=org
dn: uid=jnatividad,ou=people,dc=wikimedia,dc=org
dn: uid=jojo,ou=people,dc=wikimedia,dc=org
dn: uid=jonwilliford,ou=people,dc=wikimedia,dc=org
dn: uid=jprilusky,ou=people,dc=wikimedia,dc=org
dn: uid=juliano,ou=people,dc=wikimedia,dc=org
dn: uid=justizin,ou=people,dc=wikimedia,dc=org
dn: uid=jvelezv,ou=people,dc=wikimedia,dc=org
dn: uid=karstenuil,ou=people,dc=wikimedia,dc=org
dn: uid=kellyanne,ou=people,dc=wikimedia,dc=org
dn: uid=krafes,ou=people,dc=wikimedia,dc=org
dn: uid=krimpet,ou=people,dc=wikimedia,dc=org
dn: uid=ktchan,ou=people,dc=wikimedia,dc=org
dn: uid=l10nupdate,ou=people,dc=wikimedia,dc=org
dn: uid=labs-puppet,ou=people,dc=wikimedia,dc=org
dn: uid=leogregianin,ou=people,dc=wikimedia,dc=org
dn: uid=leon,ou=people,dc=wikimedia,dc=org
dn: uid=lhridley,ou=people,dc=wikimedia,dc=org
dn: uid=lrbabe,ou=people,dc=wikimedia,dc=org
dn: uid=lupin,ou=people,dc=wikimedia,dc=org
dn: uid=maarten,ou=people,dc=wikimedia,dc=org
dn: uid=magnusmanske,ou=people,dc=wikimedia,dc=org
dn: uid=maikmerten,ou=people,dc=wikimedia,dc=org
dn: uid=markcdeckert,ou=people,dc=wikimedia,dc=org
dn: uid=markj,ou=people,dc=wikimedia,dc=org
dn: uid=marooned,ou=people,dc=wikimedia,dc=org
dn: uid=matsuno,ou=people,dc=wikimedia,dc=org
dn: uid=matthew.ja,ou=people,dc=wikimedia,dc=org
dn: uid=mattj,ou=people,dc=wikimedia,dc=org
dn: uid=mbrad,ou=people,dc=wikimedia,dc=org
dn: uid=mej,ou=people,dc=wikimedia,dc=org
dn: uid=michaeldaly,ou=people,dc=wikimedia,dc=org
dn: uid=mikeb,ou=people,dc=wikimedia,dc=org
dn: uid=millosh,ou=people,dc=wikimedia,dc=org
dn: uid=minuteelectron,ou=people,dc=wikimedia,dc=org
dn: uid=misza13,ou=people,dc=wikimedia,dc=org
dn: uid=mrzman,ou=people,dc=wikimedia,dc=org
dn: uid=mulligen,ou=people,dc=wikimedia,dc=org
dn: uid=mwdeploy,ou=people,dc=wikimedia,dc=org
dn: uid=nadeesha,ou=people,dc=wikimedia,dc=org
dn: uid=nagelp,ou=people,dc=wikimedia,dc=org
dn: uid=nephele,ou=people,dc=wikimedia,dc=org
dn: uid=nhuffschmid,ou=people,dc=wikimedia,dc=org
dn: uid=nicdumz,ou=people,dc=wikimedia,dc=org
dn: uid=nickj,ou=people,dc=wikimedia,dc=org
dn: uid=nick,ou=people,dc=wikimedia,dc=org
dn: uid=nord,ou=people,dc=wikimedia,dc=org
dn: uid=nyergler,ou=people,dc=wikimedia,dc=org
dn: uid=oggk,ou=people,dc=wikimedia,dc=org
dn: uid=op_kai,ou=people,dc=wikimedia,dc=org
dn: uid=papyromancer,ou=people,dc=wikimedia,dc=org
dn: uid=pdhanda,ou=people,dc=wikimedia,dc=org
dn: uid=peterchd,ou=people,dc=wikimedia,dc=org
dn: uid=pinky,ou=people,dc=wikimedia,dc=org
dn: uid=pivwan,ou=people,dc=wikimedia,dc=org
dn: uid=pmwx,ou=people,dc=wikimedia,dc=org
dn: uid=preilly,ou=people,dc=wikimedia,dc=org
dn: uid=proes,ou=people,dc=wikimedia,dc=org
dn: uid=prometheus,ou=people,dc=wikimedia,dc=org
dn: uid=questpc,ou=people,dc=wikimedia,dc=org
dn: uid=quistnix,ou=people,dc=wikimedia,dc=org
dn: uid=rainman,ou=people,dc=wikimedia,dc=org
dn: uid=remco,ou=people,dc=wikimedia,dc=org
dn: uid=rememberthedot,ou=people,dc=wikimedia,dc=org
dn: uid=rfong,ou=people,dc=wikimedia,dc=org
dn: uid=rfrisar,ou=people,dc=wikimedia,dc=org
dn: uid=rikwade,ou=people,dc=wikimedia,dc=org
dn: uid=river,ou=people,dc=wikimedia,dc=org
dn: uid=robbie,ou=people,dc=wikimedia,dc=org
dn: uid=robchurch,ou=people,dc=wikimedia,dc=org
dn: uid=roberthl,ou=people,dc=wikimedia,dc=org
dn: uid=rodasmith,ou=people,dc=wikimedia,dc=org
dn: uid=roman,ou=people,dc=wikimedia,dc=org
dn: uid=rscheiber,ou=people,dc=wikimedia,dc=org
dn: uid=ruiz,ou=people,dc=wikimedia,dc=org
dn: uid=sami,ou=people,dc=wikimedia,dc=org
dn: uid=samuellampa,ou=people,dc=wikimedia,dc=org
dn: uid=sanbeg,ou=people,dc=wikimedia,dc=org
dn: uid=sanyamgoyal,ou=people,dc=wikimedia,dc=org
dn: uid=satoda,ou=people,dc=wikimedia,dc=org
dn: uid=sburke,ou=people,dc=wikimedia,dc=org
dn: uid=sgeadmin,ou=people,dc=wikimedia,dc=org
dn: uid=sgnaren,ou=people,dc=wikimedia,dc=org
dn: uid=shannon,ou=people,dc=wikimedia,dc=org
dn: uid=shimada,ou=people,dc=wikimedia,dc=org
dn: uid=shinken,ou=people,dc=wikimedia,dc=org
dn: uid=shmichael,ou=people,dc=wikimedia,dc=org
dn: uid=sillyman,ou=people,dc=wikimedia,dc=org
dn: uid=skierpage,ou=people,dc=wikimedia,dc=org
dn: uid=skud,ou=people,dc=wikimedia,dc=org
dn: uid=smoke3723,ou=people,dc=wikimedia,dc=org
dn: uid=soxred93,ou=people,dc=wikimedia,dc=org
dn: uid=stipe,ou=people,dc=wikimedia,dc=org
dn: uid=straussd,ou=people,dc=wikimedia,dc=org
dn: uid=suuch,ou=people,dc=wikimedia,dc=org
dn: uid=svip,ou=people,dc=wikimedia,dc=org
dn: uid=swalker,ou=people,dc=wikimedia,dc=org
dn: uid=swiftlytilting,ou=people,dc=wikimedia,dc=org
dn: uid=tango,ou=people,dc=wikimedia,dc=org
dn: uid=than4213,ou=people,dc=wikimedia,dc=org
dn: uid=thedevilonline,ou=people,dc=wikimedia,dc=org
dn: uid=thenub314,ou=people,dc=wikimedia,dc=org
dn: uid=thomasv,ou=people,dc=wikimedia,dc=org
dn: uid=tidan,ou=people,dc=wikimedia,dc=org
dn: uid=tkriplean,ou=people,dc=wikimedia,dc=org
dn: uid=tlaqua,ou=people,dc=wikimedia,dc=org
dn: uid=tor,ou=people,dc=wikimedia,dc=org
dn: uid=travis,ou=people,dc=wikimedia,dc=org
dn: uid=trebuchet,ou=people,dc=wikimedia,dc=org
dn: uid=vagrant,ou=people,dc=wikimedia,dc=org
dn: uid=vasilievvv,ou=people,dc=wikimedia,dc=org
dn: uid=vyznev,ou=people,dc=wikimedia,dc=org
dn: uid=warddr,ou=people,dc=wikimedia,dc=org
dn: uid=warx,ou=people,dc=wikimedia,dc=org
dn: uid=wegge,ou=people,dc=wikimedia,dc=org
dn: uid=whiteknight,ou=people,dc=wikimedia,dc=org
dn: uid=wikibhasha.msr,ou=people,dc=wikimedia,dc=org
dn: uid=wikipedian,ou=people,dc=wikimedia,dc=org
dn: uid=wwalc,ou=people,dc=wikimedia,dc=org
dn: uid=yaauie,ou=people,dc=wikimedia,dc=org
dn: uid=yar1,ou=people,dc=wikimedia,dc=org
dn: uid=zak,ou=people,dc=wikimedia,dc=org
dn: uid=zhenya,ou=people,dc=wikimedia,dc=org

Not all of these are "bad" accounts, but none of them would be able to self recover a password via Wikitech. Even if mail is set however, self recovery of a password is not possible unless the account has already been attached to Wikitech (T174469).

Peachey88 added a subscriber: • demon.Mar 22 2018, 7:27 PM
Peachey88 subscribed.
Krenair subscribed.Mar 18 2019, 10:20 AM
Krenair added a comment.Mar 18 2019, 10:23 AM

There's some stuff in that list like dn: uid=sgeadmin,ou=people,dc=wikimedia,dc=org

others:

dn: uid=travis,ou=people,dc=wikimedia,dc=org
dn: uid=trebuchet,ou=people,dc=wikimedia,dc=org
dn: uid=shinken,ou=people,dc=wikimedia,dc=org
dn: uid=mwdeploy,ou=people,dc=wikimedia,dc=org
dn: uid=l10nupdate,ou=people,dc=wikimedia,dc=org
dn: uid=labs-puppet,ou=people,dc=wikimedia,dc=org
• GTirloni added a project: cloud-services-team (Kanban).Mar 24 2019, 12:01 PM
aborrero triaged this task as Low priority.Nov 27 2019, 4:55 PM
aborrero moved this task from Inbox to Graveyard on the cloud-services-team (Kanban) board.
fnegri edited projects, added cloud-services-team; removed cloud-services-team (Kanban).Jan 18 2023, 6:53 PM
fnegri moved this task from Kanban to Graveyard on the cloud-services-team board.
fnegri moved this task to Inbox on the cloud-services-team board.Jan 18 2023, 9:58 PM
taavi removed a project: Cloud-Services.Mar 23 2023, 1:41 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL