Hi @CDenes_WMF,

The two things we need to do at this point are:

• have you generate an ssh keypair
• get you a yubikey

Instructions for generating the ssh keypair are here: https://collab.wikimedia.org/wiki/Fundraising_ssh_access

Yubikeys are distributed through OIT. Could you let me know if you already have one, or if there was a request put in for you to get one?

Dallas

Hi there Dallas!

Happy Monday
I do indeed have a Yubikey; and I will follow the directions for the ssh
keypair. Please let me know how best to proceed.

Thanks!
Camille

Great, since you have a yubikey already, we can just move along. What I need to do now is collect the public keys for your yubikey and for your ssh key.

For the yubikey, there are 2 options:

1. Visit https://directory.corp.wikimedia.org/yubikey.php logging in with your 'OIT' ldap credentials like you would for email, and clicking on the yubikey in the text box. It will then trim the code for you and provide the public side.
2. In a text editor, just repeatedly press the button on the yubikey. You will notice there are 12 characters at the beginning of the output that don't change. That is the public side of the key.

For the ssh public key, when you created your keypair, it will have asked you for a file to store it in. That will have created two files, one containing the private side of the key and one containing the public side. What we need is the contents of the public portion of the key which should be in a file ending in .pub like: /Users/you/.ssh/fr_id_rsa.pub

You can just paste in the contents of the 12 characters of the yubikey and the ssh public key straight into this ticket. Don't hesitate to ask if any of this isn't clear.

Hi Dallas!

Yubikey Public ID: cccccckudvcb

ssh-rsa
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
“cdenes@wikimedia.org
ssh-keygen -t rsa -b 4096 -C “cdenes@wikimedia.org

Thanks :)

Camille

Initial commits pushed:

[frack::puppet::private] bee2fc1 Adding cdenes as a user (Dallas Wisehaupt:Dallas Wisehaupt)

Adding her yubikey and public ssh key.

Bug: T246390

[frack::puppet] d58175a1 Adding cdenes as a user (Dallas Wisehaupt:Dallas Wisehaupt)

@spatton @CDenes_WMF I'm looking for a little clarity on what will be needed with this access. IE: will database access be needed of just basic shell access?

From email:

Hey Dallas, yes - SSH + mysql access would be great.

Scripts and mysql access will be needed so adding that in.

configs have been pushed and mysql access granted:

[frack::puppet] d4b143f2 Adding cdenes to the fundraising group

[frack::puppet::private] 1fce902 Add cdenes user and grants

I worked with this a bit with Camille today via chat. There's something I didn't get to completely figure out going on re. her user/homedir.

ls ~/.ssh/

-rw-r--r-- 1 aalikhan staff 201 Sep 14 16:39 known_hosts

pwd

/Users/cdenes

So there appears to be a history of two different local users on her laptop? At any rate there are no keys or config for the user she's working with now. She's going to redo the SSH steps here https://collab.wikimedia.org/wiki/Fundraising_ssh_access and ping us when she has time to work on it again.

SSH contents :
ssh-rsa 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 cdenes@wikimedia.org

Yubikey ID: Cccccckudvcb

Repo updated with new keys and pushed via puppet. All clear for testing.