Page MenuHomePhabricator

Requesting access to analytics-privatedata-users for Aisha Khatun
Closed, ResolvedPublicRequest

Description

Requestor provided information and prerequisites

This section is to be completed by the individual requesting access.

  • Wikimedia developer account username: AKhatun
  • Email address: akhatun-ctr@wikimedia.org
  • SSH public key (must be a separate key from Wikimedia cloud SSH access): ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMps+r6DTe3WVUkC1e19G8cVz8SjKaQw4Da3nK7/cjz0 akhatun-ctr@wikimedia.org
  • Requested group membership: "ssh login to analytics client servers (AKA stat boxes) with Hadoop, Hive, Presto access" per Wikitech aka analytics-privatedata-users + Kerberos
  • Reason for access: Aisha is working as a contractor with the Research Team (project-page on meta). She will need cluster access for building and testing out the models she is developing.
  • Name of approving party (manager for WMF/WMDE staff): @MGerlach
  • Ensure you have signed the L3 Wikimedia Server Access Responsibilities document: Signed
  • Please coordinate obtaining a comment of approval on this task from the approving party.
  • Additional note: Aisha is a returning staff member (previous access request T328733). what I understood from previous discussions was that only the ssh key was removed after the end of the previous contract (June 30, 2023). ideally, we could restore access to the previous account.

SRE Clinic Duty Confirmation Checklist for Access Requests

This checklist should be used on all access requests to ensure that all steps are covered, including expansion to existing access. Please double check the step has been completed before checking it off.

This section is to be confirmed and completed by a member of the SRE team.

  • - User has signed the L3 Acknowledgement of Wikimedia Server Access Responsibilities Document.
  • - User has a valid NDA on file with WMF legal. (All WMF Staff/Contractor hiring are covered by NDA. Other users can be validated via the NDA tracking sheet)
  • - User has provided the following: developer account username, email address, and full reasoning for access (including what commands and/or tasks they expect to perform)
  • - User has provided a public SSH key. This ssh key pair should only be used for WMF cluster access, and not shared with any other service (this includes not sharing with WMCS access, no shared keys.)
  • - The provided SSH key has been confirmed out of band and is verified not being used in WMCS.
  • - access request (or expansion) has sign off of WMF sponsor/manager (sponsor for volunteers, manager for wmf staff)
  • - access request (or expansion) has sign off of group approver indicated by the approval field in data.yaml

For additional details regarding access request requirements, please see https://wikitech.wikimedia.org/wiki/Requesting_shell_access

Event Timeline

Hi,
@AKhatun_WMF is a returning staff member working with us (Research) as a contractor on a new research project for which she needs access to HDFS and the stat machines. She had access before until June 30 this year (T328733), so ideally we could restore access to the same account used before?

NDA should have been signed with the contract -- @KFrancis, could you confirm?

Let me know if you need any additional information.
Thanks in advance.

Hello all, I am confirming Aisha Khatun has a NDA on file. Thank you!

colewhite subscribed.

@MGerlach is there an expiry date for this contract renewal?

Change 959771 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] Restore access for akhatun

https://gerrit.wikimedia.org/r/959771

@MGerlach is there an expiry date for this contract renewal?

The contract ends June 30, 2024.

Change 959771 merged by Cwhite:

[operations/puppet@production] Restore access for akhatun

https://gerrit.wikimedia.org/r/959771

colewhite claimed this task.

Restored the level of access held before last contract expired.

Please feel free to reopen if you encounter any related issue.

I am getting this error when I kinit
kinit: Client 'akhatun@WIKIMEDIA' not found in Kerberos database while getting initial credentials
Am I supposed to get a temporary password though email?

I am getting this error when I kinit
kinit: Client 'akhatun@WIKIMEDIA' not found in Kerberos database while getting initial credentials
Am I supposed to get a temporary password though email?

Sorry about that! Would you mind giving it another try?

This comment was removed by AKhatun_WMF.