Before connecting wikitech to CentralAuth, there will be a limited period of time where Wikitech will authenticate its own users, ie its database. Wikitech Users will have to reset their password, as we have no way of migrating the ldap passwords to wikitech.
Requirements:
- T359820: Developer Account Blocking: Migrate the one-stop Developer (un)Blocking from Wikitech to Bitu
- T359551: Replace wikitech as source of two-factor auth protection for developer accounts
- T359590: Use IDP for authentication in Horizon
- T359554: Use IDP for authentication in Striker
- Wikitech is completely separated from Bitu
- ldap module has been removed
Between this step and T161859, Wikimedia Developers will have three accounts:
- their Developer Account which is stored in LDAP and accessed/modified via CAS and Bitu
- their temporary Wikitech internal account, stored in Wikitech's own database
- their SUL account
After T161859, Wikimedia Developers will have 2 accounts: SUL and LDAP.
Open questions:
- Shall we disable user creation during wikitech self-auth?
- How long do we estimate it will take to go from self-auth to CentralAuth?
Deadline: September 16th 2024, as has been communicated to users.
How?
In theory, with the ldap module not being present, wikitech will fallback to self-auth