Page MenuHomePhabricator

Delete legacy svn accounts from LDAP directory
Open, LowPublic

Description

We have long had some variation of this message on the Wikitech account creation screen:

If you already had a SVN account with the same username, ask it to be created manually and include this information.

This is apparently needed because there are some LDAP records left over from when SVN was used as version control which have the uid attribute (?) but are not fully functional accounts for use as Wikitech/Gerrit/Phabricator/Cloud VPS developer accounts.

Is there any reason that we can not find and remove all such LDAP records to prevent the need for manual intervention on behalf of these users?

See also:

Event Timeline

bd808 created this task.Mar 22 2018, 3:20 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 22 2018, 3:20 PM
bd808 added a comment.Mar 22 2018, 3:23 PM

There are really 2 questions to be answered here:

  • How can we identify the legacy LDAP records?
  • Are the legacy LDAP records actually needed for anything?
bd808 added a comment.Mar 22 2018, 3:54 PM

Looking at the dated instructions on how to fix this, I think a tell-tale sign may be a missing mail attribute:

$ ldapsearch -xLLL -P 3 -E pr=40000/noprompt -o ldif-wrap=no -b"ou=people,dc=wikimedia,dc=org" '(&(objectClass=person)(!(mail=*)))' dn | grep dn: | sort
dn: uid=80686,ou=people,dc=wikimedia,dc=org
dn: uid=aaronpk,ou=people,dc=wikimedia,dc=org
dn: uid=abernala,ou=people,dc=wikimedia,dc=org
dn: uid=abigor,ou=people,dc=wikimedia,dc=org
dn: uid=aboostani,ou=people,dc=wikimedia,dc=org
dn: uid=adammck,ou=people,dc=wikimedia,dc=org
dn: uid=adam,ou=people,dc=wikimedia,dc=org
dn: uid=aigerim,ou=people,dc=wikimedia,dc=org
dn: uid=aj,ou=people,dc=wikimedia,dc=org
dn: uid=ajvol,ou=people,dc=wikimedia,dc=org
dn: uid=algorithmix,ou=people,dc=wikimedia,dc=org
dn: uid=allyunion,ou=people,dc=wikimedia,dc=org
dn: uid=alnokta,ou=people,dc=wikimedia,dc=org
dn: uid=amidaniel,ou=people,dc=wikimedia,dc=org
dn: uid=ankitgarg833,ou=people,dc=wikimedia,dc=org
dn: uid=aphid,ou=people,dc=wikimedia,dc=org
dn: uid=appy,ou=people,dc=wikimedia,dc=org
dn: uid=avar,ou=people,dc=wikimedia,dc=org
dn: uid=awrigh01,ou=people,dc=wikimedia,dc=org
dn: uid=balasyum,ou=people,dc=wikimedia,dc=org
dn: uid=bartek,ou=people,dc=wikimedia,dc=org
dn: uid=beckr,ou=people,dc=wikimedia,dc=org
dn: uid=benjamin,ou=people,dc=wikimedia,dc=org
dn: uid=bhagya,ou=people,dc=wikimedia,dc=org
dn: uid=bigsmoke,ou=people,dc=wikimedia,dc=org
dn: uid=blobaugh,ou=people,dc=wikimedia,dc=org
dn: uid=borgo,ou=people,dc=wikimedia,dc=org
dn: uid=bradneuberg,ou=people,dc=wikimedia,dc=org
dn: uid=brezelben,ou=people,dc=wikimedia,dc=org
dn: uid=cdangerville,ou=people,dc=wikimedia,dc=org
dn: uid=cogden,ou=people,dc=wikimedia,dc=org
dn: uid=collinj,ou=people,dc=wikimedia,dc=org
dn: uid=conrad,ou=people,dc=wikimedia,dc=org
dn: uid=cosoleto,ou=people,dc=wikimedia,dc=org
dn: uid=cydeweys,ou=people,dc=wikimedia,dc=org
dn: uid=david,ou=people,dc=wikimedia,dc=org
dn: uid=devayon,ou=people,dc=wikimedia,dc=org
dn: uid=dfinzer,ou=people,dc=wikimedia,dc=org
dn: uid=diana,ou=people,dc=wikimedia,dc=org
dn: uid=diebuche,ou=people,dc=wikimedia,dc=org
dn: uid=djbauch,ou=people,dc=wikimedia,dc=org
dn: uid=dom,ou=people,dc=wikimedia,dc=org
dn: uid=downchuck,ou=people,dc=wikimedia,dc=org
dn: uid=edyskant,ou=people,dc=wikimedia,dc=org
dn: uid=emiller,ou=people,dc=wikimedia,dc=org
dn: uid=emil,ou=people,dc=wikimedia,dc=org
dn: uid=erwin85,ou=people,dc=wikimedia,dc=org
dn: uid=evan,ou=people,dc=wikimedia,dc=org
dn: uid=fabianh,ou=people,dc=wikimedia,dc=org
dn: uid=faurethomas,ou=people,dc=wikimedia,dc=org
dn: uid=fde,ou=people,dc=wikimedia,dc=org
dn: uid=fenzik,ou=people,dc=wikimedia,dc=org
dn: uid=filnik,ou=people,dc=wikimedia,dc=org
dn: uid=finlay,ou=people,dc=wikimedia,dc=org
dn: uid=flohack,ou=people,dc=wikimedia,dc=org
dn: uid=fptc,ou=people,dc=wikimedia,dc=org
dn: uid=fredck,ou=people,dc=wikimedia,dc=org
dn: uid=fvassard,ou=people,dc=wikimedia,dc=org
dn: uid=gigs,ou=people,dc=wikimedia,dc=org
dn: uid=gmaxwell,ou=people,dc=wikimedia,dc=org
dn: uid=grace,ou=people,dc=wikimedia,dc=org
dn: uid=gri6507,ou=people,dc=wikimedia,dc=org
dn: uid=grondin,ou=people,dc=wikimedia,dc=org
dn: uid=gslater,ou=people,dc=wikimedia,dc=org
dn: uid=gszorc,ou=people,dc=wikimedia,dc=org
dn: uid=gurch,ou=people,dc=wikimedia,dc=org
dn: uid=guyvdb,ou=people,dc=wikimedia,dc=org
dn: uid=guz,ou=people,dc=wikimedia,dc=org
dn: uid=harddisk,ou=people,dc=wikimedia,dc=org
dn: uid=hcatlin,ou=people,dc=wikimedia,dc=org
dn: uid=hhappel,ou=people,dc=wikimedia,dc=org
dn: uid=hippietrail,ou=people,dc=wikimedia,dc=org
dn: uid=holek,ou=people,dc=wikimedia,dc=org
dn: uid=hooft,ou=people,dc=wikimedia,dc=org
dn: uid=ilabarg1,ou=people,dc=wikimedia,dc=org
dn: uid=ipye,ou=people,dc=wikimedia,dc=org
dn: uid=ishidaj,ou=people,dc=wikimedia,dc=org
dn: uid=ishimatsu,ou=people,dc=wikimedia,dc=org
dn: uid=ivanlanin,ou=people,dc=wikimedia,dc=org
dn: uid=jablko,ou=people,dc=wikimedia,dc=org
dn: uid=jacquesroy7,ou=people,dc=wikimedia,dc=org
dn: uid=janesh,ou=people,dc=wikimedia,dc=org
dn: uid=janpaul123,ou=people,dc=wikimedia,dc=org
dn: uid=jarnaiz1,ou=people,dc=wikimedia,dc=org
dn: uid=jasonr,ou=people,dc=wikimedia,dc=org
dn: uid=jeluf,ou=people,dc=wikimedia,dc=org
dn: uid=jenkins-bot,ou=people,dc=wikimedia,dc=org
dn: uid=jhb,ou=people,dc=wikimedia,dc=org
dn: uid=jimbojw,ou=people,dc=wikimedia,dc=org
dn: uid=jitseniesen,ou=people,dc=wikimedia,dc=org
dn: uid=jnatividad,ou=people,dc=wikimedia,dc=org
dn: uid=jojo,ou=people,dc=wikimedia,dc=org
dn: uid=jonwilliford,ou=people,dc=wikimedia,dc=org
dn: uid=jprilusky,ou=people,dc=wikimedia,dc=org
dn: uid=juliano,ou=people,dc=wikimedia,dc=org
dn: uid=justizin,ou=people,dc=wikimedia,dc=org
dn: uid=jvelezv,ou=people,dc=wikimedia,dc=org
dn: uid=karstenuil,ou=people,dc=wikimedia,dc=org
dn: uid=kellyanne,ou=people,dc=wikimedia,dc=org
dn: uid=krafes,ou=people,dc=wikimedia,dc=org
dn: uid=krimpet,ou=people,dc=wikimedia,dc=org
dn: uid=ktchan,ou=people,dc=wikimedia,dc=org
dn: uid=l10nupdate,ou=people,dc=wikimedia,dc=org
dn: uid=labs-puppet,ou=people,dc=wikimedia,dc=org
dn: uid=leogregianin,ou=people,dc=wikimedia,dc=org
dn: uid=leon,ou=people,dc=wikimedia,dc=org
dn: uid=lhridley,ou=people,dc=wikimedia,dc=org
dn: uid=lrbabe,ou=people,dc=wikimedia,dc=org
dn: uid=lupin,ou=people,dc=wikimedia,dc=org
dn: uid=maarten,ou=people,dc=wikimedia,dc=org
dn: uid=magnusmanske,ou=people,dc=wikimedia,dc=org
dn: uid=maikmerten,ou=people,dc=wikimedia,dc=org
dn: uid=markcdeckert,ou=people,dc=wikimedia,dc=org
dn: uid=markj,ou=people,dc=wikimedia,dc=org
dn: uid=marooned,ou=people,dc=wikimedia,dc=org
dn: uid=matsuno,ou=people,dc=wikimedia,dc=org
dn: uid=matthew.ja,ou=people,dc=wikimedia,dc=org
dn: uid=mattj,ou=people,dc=wikimedia,dc=org
dn: uid=mbrad,ou=people,dc=wikimedia,dc=org
dn: uid=mej,ou=people,dc=wikimedia,dc=org
dn: uid=michaeldaly,ou=people,dc=wikimedia,dc=org
dn: uid=mikeb,ou=people,dc=wikimedia,dc=org
dn: uid=millosh,ou=people,dc=wikimedia,dc=org
dn: uid=minuteelectron,ou=people,dc=wikimedia,dc=org
dn: uid=misza13,ou=people,dc=wikimedia,dc=org
dn: uid=mrzman,ou=people,dc=wikimedia,dc=org
dn: uid=mulligen,ou=people,dc=wikimedia,dc=org
dn: uid=mwdeploy,ou=people,dc=wikimedia,dc=org
dn: uid=nadeesha,ou=people,dc=wikimedia,dc=org
dn: uid=nagelp,ou=people,dc=wikimedia,dc=org
dn: uid=nephele,ou=people,dc=wikimedia,dc=org
dn: uid=nhuffschmid,ou=people,dc=wikimedia,dc=org
dn: uid=nicdumz,ou=people,dc=wikimedia,dc=org
dn: uid=nickj,ou=people,dc=wikimedia,dc=org
dn: uid=nick,ou=people,dc=wikimedia,dc=org
dn: uid=nord,ou=people,dc=wikimedia,dc=org
dn: uid=nyergler,ou=people,dc=wikimedia,dc=org
dn: uid=oggk,ou=people,dc=wikimedia,dc=org
dn: uid=op_kai,ou=people,dc=wikimedia,dc=org
dn: uid=papyromancer,ou=people,dc=wikimedia,dc=org
dn: uid=pdhanda,ou=people,dc=wikimedia,dc=org
dn: uid=peterchd,ou=people,dc=wikimedia,dc=org
dn: uid=pinky,ou=people,dc=wikimedia,dc=org
dn: uid=pivwan,ou=people,dc=wikimedia,dc=org
dn: uid=pmwx,ou=people,dc=wikimedia,dc=org
dn: uid=preilly,ou=people,dc=wikimedia,dc=org
dn: uid=proes,ou=people,dc=wikimedia,dc=org
dn: uid=prometheus,ou=people,dc=wikimedia,dc=org
dn: uid=questpc,ou=people,dc=wikimedia,dc=org
dn: uid=quistnix,ou=people,dc=wikimedia,dc=org
dn: uid=rainman,ou=people,dc=wikimedia,dc=org
dn: uid=remco,ou=people,dc=wikimedia,dc=org
dn: uid=rememberthedot,ou=people,dc=wikimedia,dc=org
dn: uid=rfong,ou=people,dc=wikimedia,dc=org
dn: uid=rfrisar,ou=people,dc=wikimedia,dc=org
dn: uid=rikwade,ou=people,dc=wikimedia,dc=org
dn: uid=river,ou=people,dc=wikimedia,dc=org
dn: uid=robbie,ou=people,dc=wikimedia,dc=org
dn: uid=robchurch,ou=people,dc=wikimedia,dc=org
dn: uid=roberthl,ou=people,dc=wikimedia,dc=org
dn: uid=rodasmith,ou=people,dc=wikimedia,dc=org
dn: uid=roman,ou=people,dc=wikimedia,dc=org
dn: uid=rscheiber,ou=people,dc=wikimedia,dc=org
dn: uid=ruiz,ou=people,dc=wikimedia,dc=org
dn: uid=sami,ou=people,dc=wikimedia,dc=org
dn: uid=samuellampa,ou=people,dc=wikimedia,dc=org
dn: uid=sanbeg,ou=people,dc=wikimedia,dc=org
dn: uid=sanyamgoyal,ou=people,dc=wikimedia,dc=org
dn: uid=satoda,ou=people,dc=wikimedia,dc=org
dn: uid=sburke,ou=people,dc=wikimedia,dc=org
dn: uid=sgeadmin,ou=people,dc=wikimedia,dc=org
dn: uid=sgnaren,ou=people,dc=wikimedia,dc=org
dn: uid=shannon,ou=people,dc=wikimedia,dc=org
dn: uid=shimada,ou=people,dc=wikimedia,dc=org
dn: uid=shinken,ou=people,dc=wikimedia,dc=org
dn: uid=shmichael,ou=people,dc=wikimedia,dc=org
dn: uid=sillyman,ou=people,dc=wikimedia,dc=org
dn: uid=skierpage,ou=people,dc=wikimedia,dc=org
dn: uid=skud,ou=people,dc=wikimedia,dc=org
dn: uid=smoke3723,ou=people,dc=wikimedia,dc=org
dn: uid=soxred93,ou=people,dc=wikimedia,dc=org
dn: uid=stipe,ou=people,dc=wikimedia,dc=org
dn: uid=straussd,ou=people,dc=wikimedia,dc=org
dn: uid=suuch,ou=people,dc=wikimedia,dc=org
dn: uid=svip,ou=people,dc=wikimedia,dc=org
dn: uid=swalker,ou=people,dc=wikimedia,dc=org
dn: uid=swiftlytilting,ou=people,dc=wikimedia,dc=org
dn: uid=tango,ou=people,dc=wikimedia,dc=org
dn: uid=than4213,ou=people,dc=wikimedia,dc=org
dn: uid=thedevilonline,ou=people,dc=wikimedia,dc=org
dn: uid=thenub314,ou=people,dc=wikimedia,dc=org
dn: uid=thomasv,ou=people,dc=wikimedia,dc=org
dn: uid=tidan,ou=people,dc=wikimedia,dc=org
dn: uid=tkriplean,ou=people,dc=wikimedia,dc=org
dn: uid=tlaqua,ou=people,dc=wikimedia,dc=org
dn: uid=tor,ou=people,dc=wikimedia,dc=org
dn: uid=travis,ou=people,dc=wikimedia,dc=org
dn: uid=trebuchet,ou=people,dc=wikimedia,dc=org
dn: uid=vagrant,ou=people,dc=wikimedia,dc=org
dn: uid=vasilievvv,ou=people,dc=wikimedia,dc=org
dn: uid=vyznev,ou=people,dc=wikimedia,dc=org
dn: uid=warddr,ou=people,dc=wikimedia,dc=org
dn: uid=warx,ou=people,dc=wikimedia,dc=org
dn: uid=wegge,ou=people,dc=wikimedia,dc=org
dn: uid=whiteknight,ou=people,dc=wikimedia,dc=org
dn: uid=wikibhasha.msr,ou=people,dc=wikimedia,dc=org
dn: uid=wikipedian,ou=people,dc=wikimedia,dc=org
dn: uid=wwalc,ou=people,dc=wikimedia,dc=org
dn: uid=yaauie,ou=people,dc=wikimedia,dc=org
dn: uid=yar1,ou=people,dc=wikimedia,dc=org
dn: uid=zak,ou=people,dc=wikimedia,dc=org
dn: uid=zhenya,ou=people,dc=wikimedia,dc=org

Not all of these are "bad" accounts, but none of them would be able to self recover a password via Wikitech. Even if mail is set however, self recovery of a password is not possible unless the account has already been attached to Wikitech (T174469).

Peachey88 added a subscriber: Peachey88.

There's some stuff in that list like dn: uid=sgeadmin,ou=people,dc=wikimedia,dc=org

others:

dn: uid=travis,ou=people,dc=wikimedia,dc=org
dn: uid=trebuchet,ou=people,dc=wikimedia,dc=org
dn: uid=shinken,ou=people,dc=wikimedia,dc=org
dn: uid=mwdeploy,ou=people,dc=wikimedia,dc=org
dn: uid=l10nupdate,ou=people,dc=wikimedia,dc=org
dn: uid=labs-puppet,ou=people,dc=wikimedia,dc=org
aborrero triaged this task as Low priority.Nov 27 2019, 4:55 PM
aborrero moved this task from Inbox to Graveyard on the cloud-services-team (Kanban) board.