Page MenuHomePhabricator

LDAP access for HWalls and GVarnum
Closed, ResolvedPublic

Description

Greetings - please provide access for HWalls and GVarnum LDAP to be able to access piwik.wikimedia.org

Thank you!

Event Timeline

I see hwalls is already in wmf ldap group:

$ ldaplist -l group wmf | grep -i heath
	member: uid=heather,ou=people,dc=wikimedia,dc=org

Though I can't find @Varnent, what's your LDAP username? I tried a few usernames but none of them are in wmf or nda group. If that's the case we'll need signoff from a manager to be added to either ldap group.

@fgiunchedi - it should be gvarnum and @Heather can serve as my manager approval if that works.

@fgiunchedi - @Heather is reporting that she is having problems accessing as well.

(And yes, Varnent is approved to be added. Thanks!)

Hi @Heather, I've added you to the nda ldap group. Could you please try accessing piwik again now?

@Varnent, sadly I'm wasn't able to find an ldap account named gvarnum or an account matching mail attribute gvarnum@wikimedia.org. Could it be under a different username or associated with a different email address?

herron triaged this task as Medium priority.Aug 10 2018, 6:46 PM

@herron Strange - I thought there was once associated with that email under either varnent or gvarnum (might have been on older system) - but will file request for one and update here. Apologies and thank you!

@herron It appears that it is varnent and I have updated associated email. Apologies for confusion, and let me know if that still doesn't work and I will investigate. :)

There you are! Ok, I've added varnent to the nda ldap group. Could you please try accessing piwik now?

@herron - good news - I have access to piwik - bad news - wiki15 does not have access to the new website's data:

Screen Shot 2018-08-10 at 12.10.56 PM.png (484×528 px, 31 KB)

Looping in analytics to look into that

Varnent claimed this task.

@herron - thank you! I mentioned it in the primary ticket and so closing this one since it was specific to LDAP. :) Thank you again for your help!!

@herron: There's a number of issues with this task:

  • Heather was in both the cn=nda and cn=wmf LDAP groups, but a user not should be in both. Generally cn=wmf is for WMF staff/contractors and cn=nda for anyone who's not staff/contractor, but has signed an NDA. I've fixed that by removing the cn=nda group membership.
  • Gregory was added to cn=nda, not cn=wmf, I've fixed that.
  • Gregory was not added to data.yaml. I've fixed that in https://gerrit.wikimedia.org/r/452305

@Varnent: I have corrected such wikipedia15 has access to wikimediafoundation