We don't generally delete accounts from LDAP, but we can disable the account by blocking it on wikitech which in turn triggers blocking of any linked accounts on Phabricator and Gerrit as well as marking the LDAP record as locked.

In T302109#7722409, @bd808 wrote:

{{Done}} https://wikitech.wikimedia.org/w/index.php?title=Special:Log/block&page=User%3ATheresNoTime

The history of that account on wikitech will look a bit strange. The account was not attached so I had to attach it first before blocking.

Many thanks :-)

@bd808 what would the chances be that doing this has somehow caused me to be locked out of Gerrit? I think both LDAP accounts had the same email (sam@theresnotime.co.uk) so that might be why?

In T302109#7723227, @TheresNoTime wrote:

@bd808 what would the chances be that doing this has somehow caused me to be locked out of Gerrit? I think both LDAP accounts had the same email (sam@theresnotime.co.uk) so that might be why?

I would not rule it out as impossible. The hook that does gerrit blocks appears to use the blocked account's username and not email address, but the internals of the gerrit user db are murky to me. I do not have Gerrit superpowers, so you will need somebody from Release-Engineering-Team or another Gerrit manager to poke around and figure things out.

The account is still deactivated:

commit c021b72596aa8ce0480325a2b5bceed3546d584e (HEAD -> users/70/3070, origin/users/70/3070)
Author: [BOT] Gerrit Code Review <gerrit@wikimedia.org>
Date:   Fri Feb 18 20:19:51 2022 +0000

    Deactivate Account via API

diff --git a/account.config b/account.config
index 638684eee..5bd6b4698 100644
--- a/account.config
+++ b/account.config
+       active = false

I can not activate it again possible because the account is still blocked by the LDAP policy or is still stored in a Gerrit cache. I have tried enabling the account by manually editing the account.config. No promises it will work though. Will revisit on Monday.

In T302109#7723878, @hashar wrote:

The account is still deactivated:

commit c021b72596aa8ce0480325a2b5bceed3546d584e (HEAD -> users/70/3070, origin/users/70/3070)
Author: [BOT] Gerrit Code Review <gerrit@wikimedia.org>
Date:   Fri Feb 18 20:19:51 2022 +0000

    Deactivate Account via API

diff --git a/account.config b/account.config
index 638684eee..5bd6b4698 100644
--- a/account.config
+++ b/account.config
+       active = false

I can not activate it again possible because the account is still blocked by the LDAP policy or is still stored in a Gerrit cache. I have tried enabling the account by manually editing the account.config. No promises it will work though. Will revisit on Monday.

I can now log in to Gerrit :-)