Page MenuHomePhabricator

Kerberos credentials for sbassett
Closed, ResolvedPublic

Description

Hey all-

Looks like I missed the party at T237605, but I'll need some kerberos credentials for access to the stat100* servers. Shell name is sbassett. Email is sbassett@wikimedia. Thanks.

Event Timeline

elukey@krb1001:~$ sudo manage_principals.py create sbassett --email_address=sbassett@wikimedia.org
Principal successfully created. Make sure to update data.yaml in Puppet.
Successfully sent email to sbassett@wikimedia.org

Please check your email :)

Change 562881 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] admin: add kerberos flag to the user sbasset

https://gerrit.wikimedia.org/r/562881

Change 562881 merged by Elukey:
[operations/puppet@production] admin: add kerberos flag to the user sbasset

https://gerrit.wikimedia.org/r/562881

@elukey - thanks. Can I create a keytab for myself on stat1007 or does Analytics need to do that for me? Wasn't quite certain of the process from https://wikitech.wikimedia.org/wiki/Analytics/Systems/Kerberos/UserGuide#Run_a_recurrent_job_via_Cron_or_similar_without_kinit_every_day.

@elukey - thanks. Can I create a keytab for myself on stat1007 or does Analytics need to do that for me? Wasn't quite certain of the process from https://wikitech.wikimedia.org/wiki/Analytics/Systems/Kerberos/UserGuide#Run_a_recurrent_job_via_Cron_or_similar_without_kinit_every_day.

You can use the one that all the members of analytics-privatedata-users can access, sudoing as the analytics-privatedata users. We don't create per-user keytabs for the moment, we'll see in the future if needed..

You can use the one that all the members of analytics-privatedata-users can access, sudoing as the analytics-privatedata users. We don't create per-user keytabs for the moment, we'll see in the future if needed..

Ok, thanks. Everything looks good for me now.