Page MenuHomePhabricator

Add Kelton Hurd to wmf ldap group
Closed, ResolvedPublic

Description

  • The username of your existing account on wikitech.wikimedia.org: khurd1
  • Do you currently have shell access (Yes/No)? No (is this required for wmf ldap access?)
  • Purpose (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc): Access to various developer tools and gerrit rights.
  • The specific LDAP group that you want to be added to (optional): wmf

Event Timeline

Marostegui changed the task status from Open to Stalled.Nov 29 2022, 6:35 AM
Marostegui triaged this task as Medium priority.
Marostegui subscribed.

Missing a few fields so far.

@Marostegui - Ok, @KHurd-WMF has a shell account now - khurd. Relevant wikitech account: https://wikitech.wikimedia.org/w/index.php?title=User:KHurd. Do we need to specify specific tools these days or is wmf ldap good enough? (I believe that's all we've done in the past).

@sbassett I am not sure KHurd is the right user name, from what I can see there are two users with KHurd, there is KHurd and KHurd1, both created in 2022. One was created in Nov 2022 and another one yesterday (6th Dec).
Only KHurd1 has a wikimedia email associated to.

@KHurd-WMF can you please clarify this issue?

Hey Marostegui,

I’d be somewhat happy to explain.

The first one in November was created but I had issues logging in, as at times it would show that I’m logged in, then the next time would say something along the lines of user does not exist.
The one created yesterday was created (again) because of the confusion from KHurd not working properly, as well as simply trying to complete my onboarding.

Anyway I can help, I’m all down for! If you need to delete one, I’d say let’s delete the KHurd1, then I’ll verify if KHurd works?

Thanks teammate,

Kelton Hurd
Wikimedia Foundation - Security team
khurd@wikimedia.org

{F35843971}

@KHurd-WMF Thanks for the explanation. It is probably easier if you keep KHurd1 then as it is associated to your wmf email account already. Could you edit the task to reflect that's the user that needs to go into the wmf group?

Done.

Thanks teammate,

Kelton Hurd
Wikimedia Foundation - Security team
khurd@wikimedia.org

{F35844006}

So, check_user looks good and KHurd1 is associated to khurd WMF email account now.

Thank you. I appreciate you work on this.

KHurd-WMF claimed this task.
Marostegui added a subscriber: jhathaway.

@KHurd-WMF this is not yet done - I was just verifying it is now fine and also added you to the Phabricator group wmf-nda
This can now proceed and can be picked up by the clinic duty person this week!

Change 865716 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] Add Kelton Hurd to ldap_only_users

https://gerrit.wikimedia.org/r/865716

Change 865716 merged by JHathaway:

[operations/puppet@production] Add Kelton Hurd to ldap_only_users

https://gerrit.wikimedia.org/r/865716