Page MenuHomePhabricator

LDAP access to the (nda) wmf group for sukhe
Closed, ResolvedPublic


Please add me to the nda group so that I can access Turnilo as I need it for the traffic anomaly report (see T219546).

As per,

Have a functioning Wikitech login. Just register an account (user and password) in this wiki:


Are an employee or contractor with wmf OR have signed an NDA.

Yes, I have a signed NDA with the foundation. (Till June 30 2019; confirmation: T217438#5022645).

Event Timeline

Mentioned in SAL (#wikimedia-operations) [2019-04-29T14:49:47Z] <herron> added uid=sukhe,ou=people,dc=wikimedia,dc=org to nda ldap group T221990

herron added a subscriber: herron.

uid=sukhe,ou=people,dc=wikimedia,dc=org has been added to the NDA group. Please re-open if any follow up is needed. Thanks!

Cron <accountcheck@mwmaint1002> /usr/local/bin/cross-validate-accounts says:

" sukhe is in nda group, but registered with a WMF account"

Looks like we should use 'wmf' group instead of the 'nda' group.

I wasn't sure if I should use the wmf group; the reason I picked nda is because even though I do have a WMF account, I am not an employee at the foundation. I have a signed NDA so I thought nda is probably better.

@ssingh I understand, thank you! It makes sense and i would say this is indeed a special case.

So far there has been an assumption that having a account means being an employee.

I don't think we have to worry about it too much since for your Turnilo access (and almost everything else) it makes no difference which group we use.

Though we should decide whether to add exceptions in the script checking for consistency or to move you to the other group. Let me add @MoritzMuehlenhoff for more input how to handle this case.

Dzahn triaged this task as Low priority.
Dzahn added a subscriber: elukey.

@MoritzMuehlenhoff What makes the most sense, move from nda to wmf, adjust the check in the script, or ..?

Move to cn=wmf, contractors with a address should be part of cn=wmf, not cn=nda.

Mentioned in SAL (#wikimedia-operations) [2019-05-06T21:59:02Z] <mutante> LDAP - remove 'sukhe' from 'nda' and add to 'wmf' instead (T221990)

Dzahn removed Dzahn as the assignee of this task.

Move to cn=wmf, contractors with a address should be part of cn=wmf, not cn=nda.

Ok, thanks. Done!

Dzahn renamed this task from LDAP access to the nda group for sukhe to LDAP access to the (nda) wmf group for sukhe.May 6 2019, 9:59 PM