Page MenuHomePhabricator

LDAP access to the wmf group for Kate Zimmerman
Closed, ResolvedPublic

Description

Please give me access to the 'wmf' LDAP group. I am a full-time WMF employee (Head of Product Analytics).

Wikitech Username: Kate Zimmerman

Thanks!

Event Timeline

Change 472961 had a related patch set uploaded (by ArielGlenn; owner: ArielGlenn):
[operations/puppet@production] add kzimmerman as ldap only user

https://gerrit.wikimedia.org/r/472961

Change 472961 merged by ArielGlenn:
[operations/puppet@production] add kzimmerman as ldap only user

https://gerrit.wikimedia.org/r/472961

Change 472968 had a related patch set uploaded (by ArielGlenn; owner: ArielGlenn):
[operations/puppet@production] Fix up the ldap only entry for kzimmerman

https://gerrit.wikimedia.org/r/472968

Change 472968 merged by ArielGlenn:
[operations/puppet@production] Fix up the ldap only entry for kzimmerman

https://gerrit.wikimedia.org/r/472968

I've verified that kzeta is now a member of the wmf ldap group. Please check that you can do things with it :-)

@ArielGlenn I was able to access Turnilo but not Superset; is there something else I need in order to log into Superset?

What user name did you give when trying to log in to Superset?

ArielGlenn triaged this task as Medium priority.Nov 14 2018, 8:33 AM

@ArielGlenn I tried both "Kate Zimmerman" and "kzeta". And now it appears I'm locked out(?) Getting this 500 error:

Screen Shot 2018-11-14 at 8.57.38 AM.png (1×2 px, 323 KB)

kzeta would be the right name; it apparently does want your shell account over there. And that image looks like you found a bug. Adding @Ottomata who knows anything about superset's setup and service. I'll snoop around a bit though.

I see some attempts at access with kzeta and 401 (meaning 'unauthorized'). Maybe there's more needed, like adding you to a whitelist of some kind. Hopefully Ottomata can shed some light on this.

https://wikitech.wikimedia.org/wiki/Analytics/Systems/Superset#Access This is the problem (see the end of that section. Someone in Analytics will have to create an account for you manually.

Ah, I had missed that! Thanks - I'll file a request for Superset access separately.

ArielGlenn claimed this task.

Going to go ahead and close this, since Turnilo is working.