Maniphest T208431

Add Marble to `wmf` LDAP group
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• mmarble
	Oct 31 2018, 3:19 PM

Description

As part of my onboarding proccess, please add my account Marble to the wmf LDAP group.

Details

	Subject	Repo	Branch	Lines +/-
	admins: add Michal Anna Marble to wmf group / ldap_only	operations/puppet	production	+4 -0
	add mmarble as ldap user	operations/puppet	production	+4 -0

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		sbassett	T206350 Onboard Michal Anna (to begin on Oct 9th)
		Resolved		Dzahn	T208431 Add Marble to `wmf` LDAP group

Event Timeline

• mmarble created this task.Oct 31 2018, 3:19 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptOct 31 2018, 3:19 PM

according to your phabricator profile, your wikitech username is Marble

Krenair renamed this task from Add [WIKITECH_ACCOUNT_USERNAME] to `wmf` LDAF group to Add Marble to `wmf` LDAF group.Oct 31 2018, 3:21 PM

Krenair updated the task description. (Show Details)

sbassett mentioned this in T206350: Onboard Michal Anna (to begin on Oct 9th).Oct 31 2018, 3:45 PM

Peachey88 added a parent task: T206350: Onboard Michal Anna (to begin on Oct 9th).Nov 1 2018, 7:57 AM

@Krenair - that's correct, re: her wikitech username.

Tagging @JBennett for any potential approval issues.

Anything else holding this up atm?

Aklapper renamed this task from Add Marble to `wmf` LDAF group to Add Marble to `wmf` LDAP group.Nov 7 2018, 6:01 PM

Change 472957 had a related patch set uploaded (by ArielGlenn; owner: ArielGlenn):
[operations/puppet@production] add mmarble as ldap user

https://gerrit.wikimedia.org/r/472957

gerritbot added a project: Patch-For-Review.Nov 12 2018, 11:04 AM

Change 472957 merged by ArielGlenn:
[operations/puppet@production] add mmarble as ldap user

https://gerrit.wikimedia.org/r/472957

I'm holding this up for a bit because mmarble@wikimedia.org has two ldap entries, one with uid marble, cn Marble and the other with uid mmarble, cn Michal Marble. I can only find one user account creation in the logs at wikitech, which would be User:Marble. @Andrew can you shed any light on this?

ArielGlenn moved this task from Backlog to Awaiting User Input on the LDAP-Access-Requests board.Nov 12 2018, 12:35 PM

She may have two wikitech accounts. The one she's linked to Phab is Marble: https://phabricator.wikimedia.org/p/mmarble/. So I'd guess that's correct - @mmarble, can you confirm which wikitech is your primary? Then I'd imagine we can close this out.

I could only find one user account creation on wikitech; where is the other one? That's what concerns me, one account there and yet two ldap entries.

maybe the other one was created via toolsadmin?

In T208431#4760106, @ArielGlenn wrote:

I could only find one user account creation on wikitech; where is the other one? That's what concerns me, one account there and yet two ldap entries.

In T208431#4760163, @Krenair wrote:

maybe the other one was created via toolsadmin?

I see both "Michal Marble" and "Marble" in the backing database for toolsadmin. The "Michal Marble" account was created 2018-10-27 20:59:27 and is linked with the https://meta.wikimedia.org/wiki/User:MMarble_(WMF) SUL account. The "Marble" account was created 2018-10-30 22:38:09 and is linked with the https://phabricator.wikimedia.org/p/mmarble/ Phabricator account.

If I was @mmarble I think I would choose the "Michal Marble" (dn: uid=mmarble,ou=people,dc=wikimedia,dc=org) account as the keeper and get rid of the "Marble" (dn: uid=marble,ou=people,dc=wikimedia,dc=org) account.

It appears this is awaiting feedback from @mmarble. Please provide input on which of the two user accounts should be used for this purpose.

ayounsi unsubscribed.Nov 20 2018, 5:27 PM

Ping @mmarble

sbassett moved this task from Incoming to Waiting on the Security-Team board.Nov 26 2018, 9:04 PM

Hi @mmarble This request has been blocked for a while, could you follow-up on T208431#4760068 so we can get this closed? Thanks!

Dzahn changed the task status from Open to Stalled.Dec 11 2018, 12:27 AM

This is correct, the account linked with Phab (Marble) is my primary

Dzahn claimed this task.Dec 11 2018, 3:37 PM

Dzahn changed the task status from Stalled to Open.Dec 11 2018, 4:56 PM

Change 478991 had a related patch set uploaded (by Dzahn; owner: Dzahn):
[operations/puppet@production] admins: add Michal Anna Marble to wmf group / ldap_only

https://gerrit.wikimedia.org/r/478991

Change 478991 merged by Dzahn:
[operations/puppet@production] admins: add Michal Anna Marble to wmf group / ldap_only

https://gerrit.wikimedia.org/r/478991

Thanks @mmarble ! This is now done, you have been added to the "wmf" LDAP group and the "ldap_only" section in the admins module.

sbassett moved this task from Waiting to Our Part Is Done on the Security-Team board.Jun 11 2019, 6:03 PM

sbassett mentioned this in T232353: Remove mmarble from wmf LDAP group.Sep 9 2019, 3:27 PM

Maintenance_bot removed a project: Patch-For-Review.Sep 9 2019, 4:10 PM