Page MenuHomePhabricator

LDAP access to wmde and nda for Simon Kock (WMDE)
Closed, ResolvedPublic

Description

Please give me access to the wmde and nda LDAP group. I am an employee at WMDE (Data Analyst).

Username: Siko WMDE

Shell access: No

Purpose: Superset / Turnilo

I will contact Katie Francis, so she will have my e-mail adress.
Thank you and best regards!

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (This can be checked by SRE via the NDA tracking sheet & is included in all WMF Staff/Contractor hiring.)
  • - User has provided the following: wikitech username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform.
  • - Access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for WMF/WMDE staff). If the permissions also give access to restricted data then the data owner must also approve the request.
  • - Patchset for access request

Event Timeline

@Siko_WMDE: Please make any potential internal docs point to https://phabricator.wikimedia.org/tag/ldap-access-requests/ which has canonical instructions for such requests, for future reference. Thanks. :)

Aklapper renamed this task from LDAP access for Simon Kock (WMDE) to LDAP access to wmde and nda for Simon Kock (WMDE).Aug 4 2022, 10:51 AM

Hello @Siko_WMDE

please create a user on the Wikitech wiki ( https://wikitech.wikimedia.org/wiki/Special:CreateAccount)
and let us know the user name you picked once done.

Additionally, please let us know which is the right manager in WMDE to approve this, or simply add them here directly to the ticket.

The list is at:

https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#wmde_access

Best,

Daniel

I confirm @Siko_WMDE's identity, and approve the request. Thank you!

Hi @Dzahn,

I already created a user on Wikitech wiki, the name is:

Siko_WMDE

Thank you and best regards,
Simon

@Dzahn The agreement is out for signatures. I'll let you know when it's complete.

Thank you @KFrancis as always!

@Siko_WMDE Thank you, I will prepare a patch to go into code review.

Change 820830 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] admin: add Simon Kock to ldap_only admins (nda,wmde)

https://gerrit.wikimedia.org/r/820830

Dzahn changed the task status from Open to In Progress.Aug 6 2022, 12:57 AM

@Dzahn I am confirming the NDA has been signed. Please proceed with the access request. Thanks!

@Siko_WMDE, what is the email address associated with your user? I need that before we can merge the change in. Thank you.

BCornwall triaged this task as Medium priority.Aug 8 2022, 9:36 PM
BCornwall moved this task from NDA Pending to Awaiting User Input on the LDAP-Access-Requests board.
BCornwall updated the task description. (Show Details)

@BCornwall, the associated e-mail address is: simon.kock@wikimedia.de

thank you :)

BCornwall updated the task description. (Show Details)

Hi, @Siko_WMDE I'll need you to:

  • Get your manager's approval here in this ticket
  • Provide your SSH pubkey (This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • Provide your full name, and preferred shell username

Thanks!

jbond updated the task description. (Show Details)

Hi, @Siko_WMDE I'll need you to:

This is still required

confirmed

  • Get your manager's approval here in this ticket

confirmed as per https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#wmde_access

  • Provide your SSH pubkey (This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • Provide your full name, and preferred shell username

Neither of theses are required, @Siko_WMDE did you use a form or link to create this access request, if so which one, as it seems like its a bit outdated?

Hi @jbond,

I signed the L3 document.
To create the access request, I did not use a form or link..

Thank you and best regards,
Simon

Change 820830 merged by Jbond:

[operations/puppet@production] admin: add Simon Kock to ldap_only admins (nda,wmde)

https://gerrit.wikimedia.org/r/820830

Hi, @Siko_WMDE I'll need you to:

This is still required

  • Get your manager's approval here in this ticket
  • Provide your SSH pubkey (This ssh key pair should only be used for WMF cluster access, and not share with any other service (this includes not sharing with WMCS access, no shared keys.)
  • Provide your full name, and preferred shell username

Thanks!

Hi @jbond,

I signed the L3 document.
To create the access request, I did not use a form or link..

Thank you and best regards,
Simon

Ack, thanks you should have access now

BCornwall reassigned this task from BCornwall to jbond.
BCornwall added a subscriber: BCornwall.