Page MenuHomePhabricator

Wikitech 2FA reset needed for User:Epantaleo
Closed, ResolvedPublic

Description

I am trying to restart etytree but I don't seem to be able to authenticate into Wikitech (two factors identification is on and I don't have my old mobile device).
How can I get access again?

Event Timeline

Reedy added a project: Cloud-VPS.
Reedy added a subscriber: Andrew.

Hello!

There are two issues here. I would guess that to fix etytree you need access to the server it runs on -- that doesn't really involve wikitech; rather you'd want to ssh in. Are there also reasons why you can't do that?

As for wikitech access -- you can request to have your 2fa disabled. To do that you'll need to confirm your identity (which is generally also done via ssh access -- log into a bastion or the cloud-vps server of your choice and put a file called 'reset2fa' in your home directory, owned by you.)

@Epantaleo The 2FA reset process for Wikitech accounts is documented at https://wikitech.wikimedia.org/wiki/Password_reset#Reset_two_factor_authentication

Usually the easiest identity verification method is "Have the user write a request to disable 2fa in their home directory on a CloudVPS/Toolforge bastion." One way to do this:

$ ssh bastion.wmflabs.org
$ cd $HOME
$ touch 2fa-reset-request.txt
$ chmod 0600 2fa-reset-request.txt
$ echo "https://phabricator.wikimedia.org/T236242" > 2fa-reset-request.txt
$ echo "$(hostname -f):$(pwd)/2fa-reset-request.txt"

Then come back here and make a comment including the output of the last command.

bd808 renamed this task from etytree is down http://etytree-virtuoso.wmflabs.org/sparql - cannot access wikitech to Wikitech 2FA reset needed for User:Epantaleo.Oct 23 2019, 3:44 PM
bd808 triaged this task as Medium priority.
bd808 moved this task from Inbox to Clinic Duty on the cloud-services-team (Kanban) board.

Thanks a lot! I can see the two separate issues. Fixing the 2FA problem for now.
I got the following output:

bastion-eqiad1-01.bastion.eqiad.wmflabs:/home/epantaleo/2fa-reset-request.txt

bd808 claimed this task.
$ ssh root@bastion.wmflabs.org
$ ls -lh /home/epantaleo/2fa-reset-request.txt
-rw------- 1 epantaleo wikidev 42 Oct 23 15:51 /home/epantaleo/2fa-reset-request.txt
$ cat /home/epantaleo/2fa-reset-request.txt
https://phabricator.wikimedia.org/T236242
$ ssh labweb1001.wikimedia.org
$ mwscript extensions/OATHAuth/maintenance/disableOATHAuthForUser.php --wiki=labswiki 'Epantaleo'
OATHAuth disabled for Epantaleo.

2FA disabled. Please do record your recovery codes when you re-enable 2FA at wikitech. They should let you fix a similar problem yourself in the future by using 1 code to authenticate to wikitech and a second code to disable your own 2FA setting.

Perfect, thanks a lot. I was able to solve both issues. And saved the recovery codes.