This doesn't look like an access request to me.

krenair@bastion-01:~$ ldapsearch -LLLx cn=Dchen1586 uid
dn: uid=dchen,ou=people,dc=wikimedia,dc=org
uid: dchen

krenair@bastion-01:~$ ldapsearch -LLLx cn=Dchen uid
dn: uid=daisy,ou=people,dc=wikimedia,dc=org
uid: daisy

daisy is in the production admin data, so the one that's effectively tied is dchen.

I am adding the cloud services team for the 2fa reset and removing the SRE-access-request tag per @Krenair 's comment above.

@dchen The easiest way to do the verification for a 2FA reset on Wikitech is for you to create a file in your home directory on some Cloud VPS instance (such as bastion.wmflabs.org) referencing this bug and then post an update here letting us know where the file is. Something like echo T198900 > ~/2fa-reset.txt would do the trick. This of course assumes that you are still able to use your ssh key(s) to access a bastion. If that is part of what you need to fix, we can do a quick hangout call to handle the verification step.

In T198900#4404067, @bd808 wrote:

@dchen The easiest way to do the verification for a 2FA reset on Wikitech is for you to create a file in your home directory on some Cloud VPS instance (such as bastion.wmflabs.org) referencing this bug and then post an update here letting us know where the file is.

@bd808: thanks for the details! @dchen and I are working on some analysis on SWAP in the production cluster, so could she do the same thing on a production host like bast1001?

In T198900#4408769, @Neil_P._Quinn_WMF wrote:

@bd808: thanks for the details! @dchen and I are working on some analysis on SWAP in the production cluster, so could she do the same thing on a production host like bast1001?

It is easier for me personally to verify things on a Cloud VPS host. I did check and @dchen should be able to login to bastion.wmflabs.org to create the file.

In T198900#4408850, @bd808 wrote:

In T198900#4408769, @Neil_P._Quinn_WMF wrote:

@bd808: thanks for the details! @dchen and I are working on some analysis on SWAP in the production cluster, so could she do the same thing on a production host like bast1001?

It is easier for me personally to verify things on a Cloud VPS host. I did check and @dchen should be able to login to bastion.wmflabs.org to create the file.

We just tried to do that, but it turns out @dchen only has a production SSH key on her current machine—and she can't set up a new Cloud Services SSH key, because of two-factor auth on her Wikitech account :)

She did go ahead and create the verification file on bast1002.wikimedia.org: it's /home/daisy/2fa-reset.txt

If @dchen would contact me on IRC (either in #wikimedia-cloud or #wikimedia-staff) I can set up a quick google meet to confirm her ID and request.