Requesting access to Analytic Cluster for Research Intern (paramita_das)
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	diego
	Apr 2 2022, 11:11 AM

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

Wikitech username: Paramita Das
Preferred shell username: paramita_das
Email address: dasparamita1708@gmail.com
SSH public key (must be a separate key from Wikimedia cloud SSH access):
Requested group membership: analytics-privatedata-users (with kerberos)
Reason for access: Internship with the research team. The intern has already signed a contract with us.
Name of approving party (manager for WMF/WMDE staff): @diego
Ensure you have signed the L3 Wikimedia Server Access Responsibilities document:
Please coordinate obtaining a comment of approval on this task from the approving party.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

- User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
- User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
- User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
- User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
- access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
- access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Details

	Subject	Repo	Branch	Lines +/-
	Enable access for Paramita Das	operations/puppet	production	+10 -1

Customize query in gerrit

Event Timeline

diego created this task.Apr 2 2022, 11:11 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 2 2022, 11:11 AM

@paramita_das please update the task description with your SSH key.

Maintenance_bot added a project: SRE.Apr 2 2022, 11:45 AM

The public ssh key is the following-

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPeBt7k/eGE1vzrFGbQBNMv0wKtsv+4zIuwMSNYnK3EO dasparamita1708@gmail.com

@diego: We also need the estimated end date of the internship (you'll be contacted two weeks before it expires whether to extend access or not).

@odimitrijevic or @Ottomata : This needs your approval wrt addition to analytics-privatedata-users

MoritzMuehlenhoff triaged this task as Medium priority.Apr 4 2022, 2:38 PM

Approved!

In T305298#7828668, @MoritzMuehlenhoff wrote:

@diego: We also need the estimated end date of the internship (you'll be contacted two weeks before it expires whether to extend access or not).

The internship ends on June 24th.

Approved.

Hi all, I am confirming as Paramita Das is a contractor with the WMF, an NDA is already on file. Please proceed with the access request.

Change 777339 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Enable access for Paramita Das

https://gerrit.wikimedia.org/r/777339

gerritbot added a project: Patch-For-Review.Apr 5 2022, 11:11 AM

Change 777339 merged by Muehlenhoff:

[operations/puppet@production] Enable access for Paramita Das

https://gerrit.wikimedia.org/r/777339

Maintenance_bot removed a project: Patch-For-Review.Apr 5 2022, 11:31 AM

@paramita_das: Your access has been enabled and you should have received an email with instructions how to change your Kerberos password. If there are any issues or questions, please just followup to the task.

And please note that your username is "paramd" (the UID you used when creating the account on wikitech).

@MoritzMuehlenhoff, I am new to Kerberos settings. Any documentation available how to login to Kerberos account via ssh tunneling? My system is windows.

@paramita_das: Hi, basically https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Kerberos - could you elaborate at which step you are stuck? Thanks a lot! :)

Hi @paramita_das, I can try and help., If you are using ssh tunneling (I assume to access JupyterHub?), maybe https://wikitech.wikimedia.org/wiki/Analytics/Systems/Jupyter#Authenticate_to_Hadoop_via_Kerberos will help?

If you are doing something else, let us know.

Hi @Aklapper @Ottomata, I am trying to open a SSH tunnel to connect to analytics clients using the command mentioned https://wikitech.wikimedia.org/wiki/Analytics/Systems/Jupyter#Access.

Putty and command prompt (windows) both are showing the host does not exist. Do I need to set SSH config file?

Hello!

Yes:

https://wikitech.wikimedia.org/wiki/SRE/Production_access#Setting_up_your_access

Hi... Yes, I have set up access to the cluster. Thanks a lot!

Requesting access to Analytic Cluster for Research Intern (paramita_das)Closed, ResolvedPublicActions