I am trying to restart etytree but I don't seem to be able to authenticate into Wikitech (two factors identification is on and I don't have my old mobile device).
How can I get access again?
Description
Event Timeline
Hello!
There are two issues here. I would guess that to fix etytree you need access to the server it runs on -- that doesn't really involve wikitech; rather you'd want to ssh in. Are there also reasons why you can't do that?
As for wikitech access -- you can request to have your 2fa disabled. To do that you'll need to confirm your identity (which is generally also done via ssh access -- log into a bastion or the cloud-vps server of your choice and put a file called 'reset2fa' in your home directory, owned by you.)
@Epantaleo The 2FA reset process for Wikitech accounts is documented at https://wikitech.wikimedia.org/wiki/Password_reset#Reset_two_factor_authentication
Usually the easiest identity verification method is "Have the user write a request to disable 2fa in their home directory on a CloudVPS/Toolforge bastion." One way to do this:
$ ssh bastion.wmflabs.org $ cd $HOME $ touch 2fa-reset-request.txt $ chmod 0600 2fa-reset-request.txt $ echo "https://phabricator.wikimedia.org/T236242" > 2fa-reset-request.txt $ echo "$(hostname -f):$(pwd)/2fa-reset-request.txt"
Then come back here and make a comment including the output of the last command.
Thanks a lot! I can see the two separate issues. Fixing the 2FA problem for now.
I got the following output:
bastion-eqiad1-01.bastion.eqiad.wmflabs:/home/epantaleo/2fa-reset-request.txt
$ ssh root@bastion.wmflabs.org $ ls -lh /home/epantaleo/2fa-reset-request.txt -rw------- 1 epantaleo wikidev 42 Oct 23 15:51 /home/epantaleo/2fa-reset-request.txt $ cat /home/epantaleo/2fa-reset-request.txt https://phabricator.wikimedia.org/T236242
$ ssh labweb1001.wikimedia.org $ mwscript extensions/OATHAuth/maintenance/disableOATHAuthForUser.php --wiki=labswiki 'Epantaleo' OATHAuth disabled for Epantaleo.
2FA disabled. Please do record your recovery codes when you re-enable 2FA at wikitech. They should let you fix a similar problem yourself in the future by using 1 code to authenticate to wikitech and a second code to disable your own 2FA setting.
Perfect, thanks a lot. I was able to solve both issues. And saved the recovery codes.