Page MenuHomePhabricator

Grant Access to ldap/wmf for Samtar (TheresNoTime)
Closed, ResolvedPublic

Description

  • The username of your existing account on wikitech.wikimedia.org: Samtar
  • Do you currently have shell access (Yes/No)? No
  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc): Gerrit ACLs for code review
  • The specific LDAP group that you want to be added to (optional): ldap/wmf

For contractors only:

  • Contract end date: October 17, 2022
  • Contract contact person: @KSiebert

Event Timeline

For contractors we usually grant the ldap/nda group instead, at the practical level they are almost equivalent, so that should work too.
@TheresNoTime Would be ok for you to convert this request into requesting the ldap/nda group?

Adding @KSiebert for approval.

For contractors we usually grant the ldap/nda group instead, at the practical level they are almost equivalent, so that should work too.
@TheresNoTime Would be ok for you to convert this request into requesting the ldap/nda group?

Adding @KSiebert for approval.

Hey @Volans, I'm already in the ldap/nda group from previous volunteer work :-) I believe the only reason for this request was for the gerrit +2 ACLs (which the nda group doesn't provide)?

Hey @Volans, I'm already in the ldap/nda group from previous volunteer work :-) I believe the only reason for this request was for the gerrit +2 ACLs (which the nda group doesn't provide)?

@TheresNoTime gerrit +2 on which repositories? Because each repository can have different settings and each group might get different permissions.
By any chance did you get an @wikimedia.org email account? If so an LDAP (wikitech) account associated with that email could be granted automatically the wmf ldap group.

Hey @Volans, I'm already in the ldap/nda group from previous volunteer work :-) I believe the only reason for this request was for the gerrit +2 ACLs (which the nda group doesn't provide)?

@TheresNoTime gerrit +2 on which repositories? Because each repository can have different settings and each group might get different permissions.
By any chance did you get an @wikimedia.org email account? If so an LDAP (wikitech) account associated with that email could be granted automatically the wmf ldap group.

Not sure which repositories (perhaps @KSiebert can answer there?)

And yes I did (starling-ctr@wikimedia) :-)

And yes I did (starling-ctr@wikimedia) :-)

Perfect, then you just need to provide me an LDAP (wikitech) account associated with this email (either modifying your existing one or creating a new one) and I can grant on that account the ldap/wmf group. Sorry for the confusion.

Oh! I've just changed the email for my current LDAP account (samtar) — hopefully that works :)

Granted ldap/wmf to uid= samtar, revoked pre-existing ldap/nda one as they can't coexists on the same account.
Don't worry if/when the contract will be over you can re-get the nda one.

Change 784704 had a related patch set uploaded (by Volans; author: Volans):

[operations/puppet@production] admin: update samtar account

https://gerrit.wikimedia.org/r/784704

Volans triaged this task as Medium priority.Apr 20 2022, 3:48 PM

Change 784704 merged by Volans:

[operations/puppet@production] admin: update samtar account

https://gerrit.wikimedia.org/r/784704

@Volans Hey there, I am Sammy's manager and am approving!

Volans claimed this task.

@KSiebert thanks, it's all done. There was some confusion based on which email should the account be associated with.
@TheresNoTime I'm resolving this, feel free to reopen it in case you encounter any issue.