Page MenuHomePhabricator

Reset 2-factor authentication on Wikitech for Susannaanas
Closed, ResolvedPublic

Description

I don't remember setting up the 2-factor authentication, and I cannot find any keys. I have probably never used that, and created in a hurry. Can you please help access account.

Event Timeline

Aklapper renamed this task from Wikitech 2-factor authentication to Reset 2-factor authentication on Wikitech for Susannaanas.May 25 2018, 5:51 PM
Aklapper added a project: Trust-and-Safety.

Yes, thanks for asking! I have hardly ever logged in and I have had both my phone and computer, let alone my own memory wiped out since! So I am trying to log into https://wikitech.wikimedia.org/wiki/Special:UserLogin.

I am generally Susannaanas in all services but at some area in wikitech/Labs my account is MapWarper.

@Susannaanas When was the last time you were successfully logged into the account?

I am not sure, it may be years ago. I recovered an ssh memo from Tuesday, 16 July 2013. I do not have the date, but at the time the wikidocumentaries instance was created.

That's perfectly possible but since I _very infrequently_ use the account I have not noticed.

And it sounds like my kind of issue: too much trouble - not right now

Docs on 2fa reset: https://wikitech.wikimedia.org/wiki/Password_reset#Reset_two_factor_authentication

07:46:16 0 ✓ zhuyifei1999@tools-bastion-02: ~$ getent passwd | grep Susannaanas
maps-warper:x:3445:500:Susannaanas:/home/maps-warper:/bin/bash
07:46:25 0 ✓ zhuyifei1999@tools-bastion-02: ~$ id maps-warper
uid=3445(maps-warper) gid=500(wikidev) groups=50062(project-bastion),50380(project-tools),53139(project-wikidocumentaries),500(wikidev)

I think we usually "Have the user write a request to disable 2fa in their home directory on a CloudVPS/Toolforge bastion" for Wikitech 2FA resets.

So... I can do calls, but I have no access to those places.

Suggestions?

DavidPat added a project: acl*security.
DavidPat changed the visibility from "Public (No Login Required)" to "Custom Policy".
DavidPat subscribed.
This comment was removed by DavidPat.
Aklapper changed the visibility from "Custom Policy" to "Public (No Login Required)".

So... I can do calls, but I have no access to those places.

We should verify your identity. In order to do that, you should jump by ssh to a bastion a write a file.
ssh login.tools.wmflabs.org

If you are unable to perform these steps we should talk and think on other methods for verifying your identity.

ssh maps-warper@login.tools.wmflabs.org could be better I think? (ldapsearch for Ssannaanas gives uid=maps-warper).

If you're able to ssh there, then you can create a file, say confirmation-T195589 and put something there like I confirm that I am requesting a 2FA reset for my wikitech account. If you're not able to do that, then as @aborrero says, they'll need to discuss if they can action your request by other means.

I know @Susannaanas in real life and can identify her if required.

I have had my computer hard drive wiped out since last login, and I would need assistance to set up the encryption keys again. The key was stored in an area that I had not backed up.

I know @Susannaanas in real life and can identify her if required.

@Nikerabbit if you can do a hangout or other video call with @Susannaanas and then a quick hangout with me to pass the info along that would be much appreciated.

@Nikerabbit confirmed with @Susannaanas and then relayed that confirmation to me.

$ mwscript extensions/OATHAuth/maintenance/disableOATHAuthForUser.php --wiki=labswiki 'Susannaanas'
OATHAuth disabled for Susannaanas.

@Susannaanas, MediaWiki's OATH service does not allow you to see the scratch codes after the initial setup, so you should print them out or put them in your password manager to make things easier in the future. Thanks for your patience with this very manual process. :)

Vvjjkkii renamed this task from Reset 2-factor authentication on Wikitech for Susannaanas to aacaaaaaaa.Jul 1 2018, 1:08 AM
Vvjjkkii reopened this task as Open.
Vvjjkkii removed bd808 as the assignee of this task.
Vvjjkkii triaged this task as High priority.
Vvjjkkii updated the task description. (Show Details)
Vvjjkkii removed subscribers: MarcoAurelio, Aklapper.
CommunityTechBot renamed this task from aacaaaaaaa to Reset 2-factor authentication on Wikitech for Susannaanas.Jul 2 2018, 3:46 PM
CommunityTechBot closed this task as Resolved.
CommunityTechBot assigned this task to bd808.
CommunityTechBot raised the priority of this task from High to Needs Triage.
CommunityTechBot updated the task description. (Show Details)