update labtestwiki user and password
Closed, DeclinedPublic
Actions

Assigned To

None

Authored By

	Ladsgroup
	Jan 30 2023, 1:05 PM

Description

We have updated wikiuser and wikiadmin passwords in production but since labtestwiki is not in production, it didn't get the automated changes and thus needs manual update. The new users are wikiuser2023 and wikiadmin2023 and you can read the passwords from the private repo.

Context: T326802: Rotate wikiuser and wikiadmin passwords

Related Objects
Search...

Status	Subtype	Assigned	Task
Open	Feature	None	T315926 Provide a way to search all of the XFF addresses listed in the XFF string
Open	Feature	None	T326379 Normalise the XFF and user agent columns
Resolved		• TBolliger	T120734 Epic ⚡️ Improve MediaWiki's blocking tools
Open		None	T146837 Add ability to search by user agent from CheckUser interface
Open		None	T147894 Create index for agent_id columns in the CheckUser result tables
Open		None	T305930 Normalize cu_changes table
Open		None	T361139 Normalise the user agent column in CheckUser result tables
Open		None	T361208 Remove agent columns from CheckUser result tables
Open		None	T361206 Stop writing old for user agent schema migration on WMF wikis
Open		None	T361205 Stop writing old for user agent schema migration
Open		None	T361199 Set user agent schema migration config to read new on WMF wikis
Open		None	T361201 Set user agent schema migration config to read new in extension.json
Open		None	T361192 Read user agent strings from the cu_useragent table in Special:CheckUser
Open		None	T361193 Read user agent strings from the cu_useragent table in the CheckUser API
Open		None	T361195 Read user agent strings from the cu_useragent table in Special:Investigate
Open		None	T361198 Create a maintenance script to populate the cu_useragent table and agent_id columns with values from the agent columns
Open		None	T361196 Write to the cu_useragent table and agent_id columns on WMF wikis
Open		None	T361197 Write to the cu_useragent table and agent_id columns on by default in extension.json
Open		None	T361174 Write to agent_id columns in the CheckUserInsert service when migration configuration allows it
Open		None	T361172 Purge rows from cu_useragent
Open		None	T361173 Add schema migration config for cu_useragent table
Resolved		Dreamy_Jazz	T361140 Add user agent ID column to each CheckUser result table
Resolved		Dreamy_Jazz	T361928 Update mediawiki.org pages for schema changes made by adding the cu_useragent table
Resolved		Dreamy_Jazz	T359312 Create cu_useragent table
Resolved		Marostegui	T361631 Unable to create table cu_useragent on labtestwiki
Declined	BUG REPORT	None	T339958 Running of purgeOldData.php failing for labtestwiki
Declined		None	T328289 update labtestwiki user and password
Resolved		Papaul	T369308 Decommission clouddb2002-dev.codfw.wmnet
Resolved		taavi	T378260 Retire labtestwiki

Event Timeline

Ladsgroup created this task.Jan 30 2023, 1:05 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 30 2023, 1:05 PM

Zabe subscribed.Feb 13 2023, 6:43 PM

hashar mentioned this in T330185: Wikimedia\Rdbms\DBConnectionError: Cannot access the database: could not connect to any replica DB server; Access denied for user 'wikiuser2023'@'10.194.137.171' (using password: YES) (db2170:3311).Feb 21 2023, 4:47 PM

EBernhardson subscribed.May 3 2023, 5:56 PM

Zabe mentioned this in T339958: Running of purgeOldData.php failing for labtestwiki.Jun 20 2023, 9:19 PM

tstarling mentioned this in T346989: Deploy LoginNotify seen subnets table.Oct 13 2023, 3:30 AM

Dreamy_Jazz added a parent task: T361631: Unable to create table cu_useragent on labtestwiki.Apr 2 2024, 5:33 PM

Dreamy_Jazz added a parent task: T339958: Running of purgeOldData.php failing for labtestwiki.

I have updated the grants for `wikiadmin2023@10.64.16.77 to unblock T361631

@Ladsgroup I stumbled upon this old task, not sure if it's still relevant, if yes I need more guidance :)

In T328289#10157496, @fnegri wrote:

@Ladsgroup I stumbled upon this old task, not sure if it's still relevant, if yes I need more guidance :)

It depends on what are the plans for labtestwiki. I really really like to stop special-casing labtestwiki in everything. it's quite a pain :( Are there still use cases for it after removal of ldap from wikitech?

Are there still use cases for it after removal of ldap from wikitech?

From my understanding, labtestwiki should no longer be needed after we complete the removal of LDAP. /cc @bd808 who might remember if labtestwiki was used for other things or just for testing LDAP.

or just for testing LDAP.

To clarify, the only usage of labtestwikitech that I am aware of is to manage LDAP users in the testing deployment for Cloud VPS.

That use case should be entirely replaced (as far as I know) by a new instance of Bitu deployed in codfw: T360795: Set up a bitu instance for codfw1dev

Ladsgroup mentioned this in T360795: Set up a bitu instance for codfw1dev.Sep 23 2024, 4:42 PM

In T328289#10168269, @fnegri wrote:

Are there still use cases for it after removal of ldap from wikitech?

From my understanding, labtestwiki should no longer be needed after we complete the removal of LDAP. /cc @bd808 who might remember if labtestwiki was used for other things or just for testing LDAP.

Related: T369308: Decommission clouddb2002-dev.codfw.wmnet

Are we dropping all MediaWiki integrations from Horizon? If not, that would be at least one remaining use case for labtestwiki. I would honestly wait for @Andrew to be back before making any lasting decisions to terminate that wiki.

Thanks @bd808, I'm fine with keeping labtestwiki around until Andrew is back.

I have some more questions though :)

do we need to update the passwords detailed in the description of this task?
what are they used for?
can we just ignore them as we plan to terminate this wiki in a few months?

IMHO, since this has been the case for more than 1.5 years, it can wait for a couple more months too?

wikiadmin is the user that connect mw CLI tools to the database, wikiuser is the user that connects the mw appserver to the database. HTH.

@Ladsgroup thanks, so if I'm understanding correctly nothing is broken in labtestwiki, but both the CLI and the mw appserver are still using old passwords that have not been rotated in a while.

Setting priority to Low, and linking to T369308: Decommission clouddb2002-dev.codfw.wmnet.

fnegri added a subtask: T369308: Decommission clouddb2002-dev.codfw.wmnet.Sep 25 2024, 10:51 AM

taavi added a project: wikitech.wikimedia.org.Sep 28 2024, 12:49 PM

Ameisenigel subscribed.Oct 6 2024, 6:41 PM