| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| admin: Add abhas (atripathi) to the list of LDAP only users (wmf) | operations/puppet | production | +4 -0 |
Hello, @Abhas . Privileged access to LDAP is provided to people according to certain rules and needs. I hope this doesn't sound disrespectful, but I am not sure who is the requester (this is an account created today with little to no information or verification) and who you are requesting the access for (@Atripathi?)- another account created today with no context.
Could you provide more context, as indicated on the "Purpose" question? Feel free to reach me in private through internal channels if preferred.
Hi Jaime,
I'm the Disinformation Manager in the Trust & Safety team, and my team consumes data from a dashboard built on Superset. It is for access to the dashboard that I'm requesting LDAP access.
In the process of figuring out how to create the account, and get the required access, I was trying to do multiple things (apparently unsuccessfully). In that process, I ended up creating multiple accounts, including "Abhas". So, it is indeed my account which I created just today.
I'm eventually requesting access for "Atripathi" since that is the account linked to the Dev account, and my WMF email.
I hope this clarifies things. I apologize if this has caused confusion or undue trouble.
I contacted Abhas in private, proving the request was legitimate. Thank you and apologies for any problem caused!
For the record, the UID/CN on LDAP associated with the corporate LDAP/email is: Abhas, I updated it on the request.
Change 857689 had a related patch set uploaded (by Jcrespo; author: Jcrespo):
[operations/puppet@production] Add abhas (atripathi) to the list of LDAP only users for WMF group
Change 857689 merged by Jcrespo:
[operations/puppet@production] admin: Add abhas (atripathi) to the list of LDAP only users (wmf)
@Abhas: you have been added to the WMF ldap group- which should provide you access to superset. Please check access is working for you. You were also aded to the NDA group here on phabricator.
Aside from that, I remind you 2 suggested followups to speed up any possible later request: 1) adding your Wiki authentication to your Phabricator profile at https://phabricator.wikimedia.org/settings/user/Abhas/page/external/ and 2) notifying us if you want us to disable the other Phab account, to prevent it from being abused (it is ok to keep it e.g. for personal/volunteer use).
Hi Jaime,
Thank you so much!
I have already completed #1.
Could I please request you to disable the other Phab account (Username: AbhasT)?
Could I please request you to disable the other Phab account (Username: AbhasT)?
Just to make sure I am doing the right thing, I believe you mean to request disabling @Atripathi, right? There is no account called AbhasT, that I am aware.
You will continue using @Abhas here, right? We can also disable the LDAP username/wikitech for Atripathi, which is associated with an alias of your mail, if you want. (you will keep the one associated with @Abhas for superset access.
Yes, I meant delete user @Atripathi and the LDAP username associated with it.
I will use @Abhas here.
Thank you for bearing with me! Old account is now disabled on Phabricator and everywhere else. Further requests should go much smoother! Sorry for the complications. Have a nice day and enjoy your new privileges! :-)