Page MenuHomePhabricator

Add `holger` to `wmf` LDAP group
Closed, ResolvedPublic

Description

As part of my onboarding proccess, please add my wikitech account holger to the wmf LDAP group.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 15 2019, 12:27 PM
CDanis renamed this task from Add [WIKITECH_ACCOUNT_USERNAME] to `wmf` LDAF group to Add `holger` to `wmf` LDAF group.Jan 15 2019, 4:03 PM
CDanis updated the task description. (Show Details)

Change 484506 had a related patch set uploaded (by CDanis; owner: CDanis):
[operations/puppet@production] Add Holger Knust to ldap_only_users

https://gerrit.wikimedia.org/r/484506

Change 484506 merged by CDanis:
[operations/puppet@production] Add Holger Knust to ldap_only_users

https://gerrit.wikimedia.org/r/484506

CDanis closed this task as Resolved.Jan 15 2019, 4:16 PM
CDanis reopened this task as Open.Jan 15 2019, 4:18 PM
CDanis assigned this task to holger.knust.
CDanis triaged this task as Normal priority.

Holger, apologies, but I've just been told that there's some misconception that all WMF staff should be members of wmf in LDAP, which is not actually necessary for many tasks.

Can you please let me know what you expect to need wmf group membership for?

Holger, apologies, but I've just been told that there's some misconception that all WMF staff should be members of wmf in LDAP, which is not actually necessary for many tasks.

It'd be good if whoever said that could document their thoughts somewhere. :-) It's a novel interpretation.

Can you please let me know what you expect to need wmf group membership for?

It's necessary for MediaWiki core and production extensions code review, which is a key part of the Core Platform team's work. Also dozens of other things.

Dzahn added a subscriber: Dzahn.Jan 15 2019, 4:26 PM

It'd be good if whoever said that could document their thoughts somewhere. :-) It's a novel interpretation.

Membership in the group called "wmf" has never been a tag to identify who is a WMF employee. It's an admin group to hand out specific access. It's never been meant to be given out "by default". It also would not match members of engineering because SRE uses the group "ops" instead. It's poorly named and we are not trying to make your life hard but minimal justification for membership in this group is expected.

CDanis closed this task as Resolved.Jan 15 2019, 4:37 PM

Needing to do Core Platform dev work is sufficient justification, of course. Thanks and sorry for the trouble.

MarcoAurelio renamed this task from Add `holger` to `wmf` LDAF group to Add `holger` to `wmf` LDAP group.Apr 4 2019, 8:33 PM