Our intern Lex is back working for us, so we should re-enable the following:
The last credentials were removed in puppet with https://phabricator.wikimedia.org/rOPUPb9514726ed0e6bfcb292bd9ad28e28d49a0d351c
Can we re-enable the old SSH key or should Lex create a new one?
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| admin: add user lexnasser back to active state | operations/puppet | production | +9 -5 |
Using the same key should be fine. But we will need a new "expiry_date" please. And should we use expiry_contact: nruiz@ like before?
Change 633135 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] admin: add user lexnasser back to active state
Change 633135 merged by Elukey:
[operations/puppet@production] admin: add user lexnasser back to active state
@lexnasser you should now be able to ssh to the stat100x hosts (notebooks are not there anymore, deprecated, we copied your things on stat1007 IIRC). I have also added you to the nda LDAP group as we did before, so you should be able to access UIs etc..
Last thing is kerberos: can you confirm your email address? lexnasser@icloud.com ? (I'll send the temp password to it)
Yep, that's the correct email. I also confirm that I'm now able to access Turnilo and Stat1007. Thanks for your help!
Just executed:
elukey@krb1001:~$ sudo manage_principals.py create lexnasser --email_address=lexnasser@icloud.com Principal successfully created. Make sure to update data.yaml in Puppet. Successfully sent email to lexnasser@icloud.com
@lexnasser please check you inbox and set you kerberos password, after that you should be set!