The access for David Sharpe was removed. It needs to be checked if data was left in home dirs on stat*/HDFS since they were part of the "analytics-privatedata-users" group.
The Kerberos principal has already been removed. Point of contact wrt keeping any data is @Jcross
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Ottomata | T310463 Check home/HDFS leftovers of dsharpe | |||
| Resolved | sbassett | T310314 Offboard David Sharpe from Security Team |
====== stat1004 ====== total 0 ====== stat1005 ====== total 0 ====== stat1006 ====== total 0 ====== stat1007 ====== total 4 -rw-rw-r-- 1 20828 wikidev 0 Jan 8 2020 derby.log drwx------ 3 20828 wikidev 4096 Jan 24 13:00 T299315 ====== stat1008 ====== total 0 ======= HDFS ======== Found 1 items drwx------ - dsharpe dsharpe 0 2021-02-08 19:23 /user/dsharpe/.staging ====== Hive =========
Dsharpe does have a few files that look like part of analysis of {T299315}. These all look like old access logs that should be deleted anyway. Just verifying with @Jcross that it is okay to delete these files.
Hey @Ottomata , could we possible have the files related to T299315: Automated attempts to log into a Phab account transmitted to us securely and then that and the rest can be deleted?
As discussed at https://phabricator.wikimedia.org/T299315#8072518, the /home/dsharpe/T299315 files have been moved to /home/sbassett/T299315.
Proceeding with removal of dsharpe files and dirs.
sudo -u hdfs kerberos-run-command hdfs hdfs dfs -rm -r /user/dsharpe
sudo cumin 'C:profile::analytics::cluster::client or C:profile::hadoop::master or C:profile::hadoop::master::standby' 'rm -rf /home/dsharpe'