I just sent an mail on ca@wikimedia.org

I think Wikitech falls within Cloud-Services. Not sure if T&S shell access does cover Wikitech. Tagging CST just in case.

@Zoranzoki21 The 2FA reset process for Wikitech accounts is documented at https://wikitech.wikimedia.org/wiki/Password_reset#Reset_two_factor_authentication

Usually the easiest identity verification method is "Have the user write a request to disable 2fa in their home directory on a CloudVPS/Toolforge bastion." One way to do this:

$ ssh bastion.wmflabs.org
$ cd $HOME
$ touch 2fa-reset-request.txt
$ chmod 0600 2fa-reset-request.txt
$ echo "https://phabricator.wikimedia.org/T237841" > 2fa-reset-request.txt
$ echo "$(hostname -f):$(pwd)/2fa-reset-request.txt"

Then come back here and make a comment including the output of the last command.

In T237841#5650952, @bd808 wrote:

@Zoranzoki21 The 2FA reset process for Wikitech accounts is documented at https://wikitech.wikimedia.org/wiki/Password_reset#Reset_two_factor_authentication

Usually the easiest identity verification method is "Have the user write a request to disable 2fa in their home directory on a CloudVPS/Toolforge bastion." One way to do this:

$ ssh bastion.wmflabs.org
$ cd $HOME
$ touch 2fa-reset-request.txt
$ chmod 0600 2fa-reset-request.txt
$ echo "https://phabricator.wikimedia.org/T237841" > 2fa-reset-request.txt
$ echo "$(hostname -f):$(pwd)/2fa-reset-request.txt"

Then come back here and make a comment including the output of the last command.

@bd808 Output is:
bastion-eqiad1-01.bastion.eqiad.wmflabs:/home/zoranzoki21/2fa-reset-request.txt

In T237841#5651681, @bd808 wrote:

$ ssh root@bastion-eqiad1-01.bastion.eqiad.wmflabs
$ ls -lh /home/zoranzoki21/2fa-reset-request.txt
-rw------- 1 zoranzoki21 wikidev 42 Nov 11 00:33 /home/zoranzoki21/2fa-reset-request.txt
$ cat /home/zoranzoki21/2fa-reset-request.txt
https://phabricator.wikimedia.org/T237841

$ ssh labweb1001.wikimedia.org
$ mwscript extensions/OATHAuth/maintenance/disableOATHAuthForUser.php --wiki=labswiki 'Zoranzoki21'
OATHAuth disabled for Zoranzoki21.

Login works, thank you very much! I enabled 2FA again and saved keys.