Page MenuHomePhabricator

Access to analytics-privatedata-users for Research intern Daniram
Closed, ResolvedPublic

Description

Who
Daniele Rama @Daniram3

Access Group
analytics-privatedata-users

Daniele, please:
[1] Sign up for a wikitech account at https://www.mediawiki.org/wiki/Developer_access per https://wikitech.wikimedia.org/wiki/Production_shell_access . Let us know the username.
[2] Read this https://wikitech.wikimedia.org/wiki/Requesting_shell_access
[3] And then sign this: https://phabricator.wikimedia.org/L3
[4] Generate a dedicated SSH key pair (Note to all: this should be a dedicated key generated for this specific access. Please do not share it between this and your other personal/academic projects.) - how to here: https://wikitech.wikimedia.org/wiki/Production_shell_access#Generating_your_SSH_key
[5] Put your public key on your user page on Office Wiki (see for example: https://office.wikimedia.org/wiki/User:Miriam_(WMF)/key)
[6] Post the link to your key in this task and also specify your preferred login name.

Event Timeline

colewhite triaged this task as Medium priority.

[1] My username is Daniram3, and my shell account name is daniram.
[2 - 4] Done.
[5] I am not able to access Office Wiki.
[6] To do.

I don't think bastiononly has existed for years.

I don't think bastiononly has existed for years.

Sorry my bad, I copied from an old task!

[6] Here is my SSH public key for production access:

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMzKRxyFfYw/A8UIQAm6o6hTdVOKCjgdh+qsXlzOGBT4 daniele@MacBook-Pro-di-Daniele.local

Preferred login name: daniram

Aklapper renamed this task from Access to analytics-privatedata-users for Research intern to Access to analytics-privatedata-users for Research intern Daniram.May 12 2020, 3:00 PM

Change 595990 had a related patch set uploaded (by Cwhite; owner: Cwhite):
[operations/puppet@production] admin: add Daniele Rama to analytics-privatedata-users

https://gerrit.wikimedia.org/r/595990

Hi Daniele!

There are a few things we'll need to continue:

We need an NDA on file with legal to proceed. @KFrancis, would you be able to help with that?

The implied approval by @Miriam creating the task I think is sufficient for management approval.

@Daniram3, would you mind signing the comment containing your SSH key on this task with MFA? This can be done with the "Add Action..." dropdown menu at the top of the comment box.

@Nuria, is this level of access to analytics infrastructure appropriate?

[6] Here is my SSH public key for production access:

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMzKRxyFfYw/A8UIQAm6o6hTdVOKCjgdh+qsXlzOGBT4 daniele@MacBook-Pro-di-Daniele.local

Preferred login name: daniram

Hi Daniele!

There are a few things we'll need to continue:

We need an NDA on file with legal to proceed. @KFrancis, would you be able to help with that?

The implied approval by @Miriam creating the task I think is sufficient for management approval.

@Daniram3, would you mind signing the comment containing your SSH key on this task with MFA? This can be done with the "Add Action..." dropdown menu at the top of the comment box.

@Nuria, is this level of access to analytics infrastructure appropriate?

Hi all, yes, I can help! I'll need a few details to move forward with the NDA:

-Full legal name
-Mailing address
-Email address
-Specifics about the type of sensitive data they will be accessing

@KFrancis thanks! We discussed this case over email, and my understanding was that the signed letter of agreement already contains and NDA, so we do not need an additional one, could you please confirm?

@Miriam Ah, yes, sorry, I clearly have pandemic brain. I am writing to confirm Daniele Rama's NDA is covered under the signed agreement, dated April 27, 2020.

@KFrancis thanks for your kind confirmation!
And thanks @colewhite for helping out. According to your list, the last point should be @Nuria's approval. Please let me know if there is anything else I can help with!

Approved on my end, we are missing the end date of the collaboration.

@Miriam, do you happen to have the end date for this collaboration available?

Yes, thanks @Nuria and @colewhite. @Daniram3's internship end date is July 26th. Many thanks!

Change 595990 merged by Cwhite:
[operations/puppet@production] admin: add Daniele Rama to analytics-privatedata-users

https://gerrit.wikimedia.org/r/595990

Access is provisioned. For Kerberos setup, an email should arrive with the necessary details at the email on file.

Please feel free to reopen if you encounter any related issue.

Yes, the email has arrived. Thank you @colewhite for helping out!

Miriam added a subscriber: elukey.

Re-opening this temporarily for a quick follow-up!
@elukey could you add @Daniram3 to the LDAP-group so that he can access the notebooks? Grazie!

I am unable to find anything in wikitech that speaks of an ldap group that allows access to the notebooks. @Miriam, do you mean shell access to the notebook100x servers?

@colewhite it is no doubt confusing, you need to be in wmf ldap group to use the wb ui to notebooks

It looks to me like membership to the nda ldap group will also fulfill this requirement. Since there is an NDA on file, it's probably fine to use this ldap group.

I've gone ahead and added @Daniram3 to that group. Please let me know if that doesn't work.

Thanks @colewhite ! Closing this task. Thanks a lot all for your help :)