Page MenuHomePhabricator

Kerberos credentials for sbassett
Closed, ResolvedPublic

Description

Hey all-

Looks like I missed the party at T237605, but I'll need some kerberos credentials for access to the stat100* servers. Shell name is sbassett. Email is sbassett@wikimedia. Thanks.

Event Timeline

sbassett created this task.Jan 8 2020, 5:17 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 8 2020, 5:17 PM
sbassett updated the task description. (Show Details)Jan 8 2020, 5:18 PM
elukey added a comment.Jan 8 2020, 5:20 PM
elukey@krb1001:~$ sudo manage_principals.py create sbassett --email_address=sbassett@wikimedia.org
Principal successfully created. Make sure to update data.yaml in Puppet.
Successfully sent email to sbassett@wikimedia.org

Please check your email :)

Change 562881 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] admin: add kerberos flag to the user sbasset

https://gerrit.wikimedia.org/r/562881

Change 562881 merged by Elukey:
[operations/puppet@production] admin: add kerberos flag to the user sbasset

https://gerrit.wikimedia.org/r/562881

sbassett added a comment.EditedJan 8 2020, 5:37 PM

@elukey - thanks. Can I create a keytab for myself on stat1007 or does Analytics need to do that for me? Wasn't quite certain of the process from https://wikitech.wikimedia.org/wiki/Analytics/Systems/Kerberos/UserGuide#Run_a_recurrent_job_via_Cron_or_similar_without_kinit_every_day.

elukey added a comment.Jan 8 2020, 5:51 PM

@elukey - thanks. Can I create a keytab for myself on stat1007 or does Analytics need to do that for me? Wasn't quite certain of the process from https://wikitech.wikimedia.org/wiki/Analytics/Systems/Kerberos/UserGuide#Run_a_recurrent_job_via_Cron_or_similar_without_kinit_every_day.

You can use the one that all the members of analytics-privatedata-users can access, sudoing as the analytics-privatedata users. We don't create per-user keytabs for the moment, we'll see in the future if needed..

You can use the one that all the members of analytics-privatedata-users can access, sudoing as the analytics-privatedata users. We don't create per-user keytabs for the moment, we'll see in the future if needed..

Ok, thanks. Everything looks good for me now.

elukey closed this task as Resolved.Jan 8 2020, 6:13 PM