Access is requested for Rosie Lewis to frdev1001 to access the donation database, for tracking major gifts and endowment appeals. Rosie already has a Yubikey, but this is a new access request and needs C-level authorization.
[x] user_verification
Requires: user request [x] access_rights: letter to C level (currently Lisa) verifing grant of access [x] account name/contact info: verify on https://collab.wikimedia.org/wiki/Fundraising#Contact_List
Accounts and Services
[x] user account
Requires: user_verification [x] Add the user to the users.yaml and group_members.yaml files as appropriate. [x] Push out puppet changes.
[x] yubikey
Requires: useraccount and OIT request to send out yubikey to user [x] physical: Make a request to OIT to have a key sent to the user [x] account_setup: Get public side and add to puppet-private/manifests/passwords/yubico.pp [x] follow_on: Make sure user can use yubikey for ssh access
[x] ssh
Requires: useraccount and yubikey [x] key_setup: Send template/docs for generating keypair and ~/.ssh/config file [x] account_setup: Get public side and add to puppet-private/secrets/ssh/default/$username [x] follow_on: Verify user can ssh to frdev1001 using correct creds and passphrases when needed.
[x] mysql
Requires: useraccount, yubikey, ssh
[x] account_setup
[x] Add user account to mysql on appropriate master host with random password.
[x] Grab password hash from mysql.
[x] Create user block in grants file
[x] Ensure user is in correct blocks for select rights on dbs.
- Generally use another user in same group as a guide
[x] Run the grant script to get the grants.
[x] Copy/paste to execute the grants
[x] Create the user a ~/.my.cnf file with the original password from account creation.
[x] follow_on: Verify user can ssh to database host and log in to mysql.