@akosiaris, I seem to be having trouble following those instructions. I can't log in on Wikitech nor on Gerrit. Please see the screenshots attached below:

I'm using the same password as I had before the rename.

^ Worth to document this somewhere™ (or in more places) to avoid repeating?

In T227529#5335623, @bd808 wrote:

In T227529#5333480, @akosiaris wrote:

I am resolving this, feel free to reopen is something is amiss

The cn and sn for uid=waldir,ou=people,dc=wikimedia,dc=org are both waldyrious (lower case w). Wikitech will never be able to authenticate as MediaWiki will canonicalize the username to start with a capital letter W and wikitech is configured to enforce same case matching for user account lookup.

Changed to Waldyrious (upper case) per comment above. @waldyrious could you please try again logging into wikitech?

@thcipriani The gerrit error seems to be the same as T216605, mind running that script?

In T227529#5336709, @Aklapper wrote:

^ Worth to document this somewhere™ (or in more places) to avoid repeating?

I am inclined to make it more like "renaming is not really possible and should not be tried in general"

I 've added a note in https://wikitech.wikimedia.org/wiki/LDAP/Renaming_users, https://wikitech.wikimedia.org/w/index.php?title=LDAP/Renaming_users&diff=1832853&oldid=1801956

In T227529#5344660, @akosiaris wrote:

In T227529#5335623, @bd808 wrote:

In T227529#5333480, @akosiaris wrote:

I am resolving this, feel free to reopen is something is amiss

The cn and sn for uid=waldir,ou=people,dc=wikimedia,dc=org are both waldyrious (lower case w). Wikitech will never be able to authenticate as MediaWiki will canonicalize the username to start with a capital letter W and wikitech is configured to enforce same case matching for user account lookup.

Changed to Waldyrious (upper case) per comment above. @waldyrious could you please try again logging into wikitech?

@thcipriani The gerrit error seems to be the same as T216605, mind running that script?

In this instance it's not the case of the username, gerrit requires a manual rename in this instance. For reference, I wrote a different script to handle this:

#!/bin/bash

set -euo pipefail

OLD_USERNAME="$1"
NEW_USERNAME="$2"

OLD_SHASUM=$(printf "gerrit:%s" "${OLD_USERNAME}" | shasum -a 1)
NEW_SHASUM=$(printf "gerrit:%s" "${NEW_USERNAME}" | shasum -a 1)

OLD_FILE=$(printf '%s/%s\n' "${OLD_SHASUM:0:2}" "${OLD_SHASUM:2:38}")
NEW_FILE=$(printf '%s/%s\n' "${NEW_SHASUM:0:2}" "${NEW_SHASUM:2:38}")

git mv "$OLD_FILE" "$NEW_FILE"

# Change username to lowercase in new file
sed -i "s/gerrit:${OLD_USERNAME}/gerrit:${NEW_USERNAME}/" "$NEW_FILE"

Account should be updated in gerrit -- @waldyrious try logging in now.

I've managed to log in to Wikitech now.

I've also updated my Phabricator account by unlinking the "Waldir" LDAP account and adding the "Waldyrious" one.

On Gerrit, I could log in, and did click on "Reload" in https://gerrit.wikimedia.org/r/#/settings/contact, but it didn't seem to make any change: my Gerrit username still appears to be "Waldir", and that's also the name that shows up in the changesets I am the owner of. Attaching screenshots below:

Maybe I messed up some of the steps?

Your gerrit username (the one that is depicted in the username line on F29825695, can not change. That's something that is in gerrit, there is nothing we can do about that (aside from creating a new account, and even then deleting an account is not safe). What can change is the Full name (which is what is used in most screens/dashboards), which should happen when clicking that reload button, after which you should be kicked out of gerrit and forced to login again.

Got you. Still, I've done that multiple times now (click "Reload", get asked to login again, and login with the new credentials), yet the Full name still shows "Waldir" as shown in the screenshot above.

In T227529#5359449, @waldyrious wrote:

Got you. Still, I've done that multiple times now (click "Reload", get asked to login again, and login with the new credentials), yet the Full name still shows "Waldir" as shown in the screenshot above.

hrm. I can't manually update the fullname using gerrit set-account --full-name since we have it set to the cn in ldap. I guess that means I need to update the full name directly in the database since there seems to be no way to trigger a re-sync with ldap.

In T227529#5366950, @thcipriani wrote:

I can't manually update the fullname using gerrit set-account --full-name since we have it set to the cn in ldap.

Just to clear things up a bit: do you mean the old value of cn for my LDAP account? I'm asking because

In T227529#5335623, @bd808 wrote:

The cn and sn for uid=waldir,ou=people,dc=wikimedia,dc=org are both waldyrious (lower case w).

@thcipriani any update on this? seems stalled or partially resolved.