Page MenuHomePhabricator

Account recovery help needed for Developer account [DaxServer]
Closed, ResolvedPublic

Description

Hi. I'd like to request a password reset for logging into Wikitech using my Developer account identified by "DaxServer" username and "daxserver" UNIX shell name. It seems I have not linked my email address to the account and thus never received the password reset email.

For confirmation, I have access to Toolforge and the account is linked as Wikimedia developer account. Thanks!

Event Timeline

Toolserver verification:

tools-bastion-13.tools.eqiad1.wikimedia.cloud:/home/daxserver/password-reset-request.txt

Proof of ownership checks out:

root@tools-bastion-13:~# ls -lh /home/daxserver/password-reset-request.txt
-rw------- 1 daxserver wikidev 42 Aug 13 13:12 /home/daxserver/password-reset-request.txt
root@tools-bastion-13:~# cat /home/daxserver/password-reset-request.txt
https://phabricator.wikimedia.org/T372401

@DaxServer because your Developer account is missing an email address (likely related to the now fixed bug at T339917: wikitech logins set the email address every time) the easy option of having MediaWiki email you a reset link is not possible. I can however use some back office magic to set an email address in your LDAP record which should then make it possible for you to use the password reset function from https://idm.wikimedia.org/wikimedia/password/.

I will need the email address you want associated with your Developer account to proceed with this plan. You can either give it to me here in this Phabricator task (which will be public in perpetuity) or you can make a file in your $HOME on the Toolforge bastion like you did in T372401#10061578 that has the desired email in it and report the file name back here.

Note that email addresses associated with Developer accounts are publicly visible as noted on Developer account creation screens, so even if passed via the text file on the bastion the email you give me to set for your account will eventually be publicly discoverable.

Please add the email: daxserver@icloud.com

bd808 changed the task status from Open to In Progress.Aug 13 2024, 4:51 PM
bd808 claimed this task.

@DaxServer I can see your newly set email address in the read-only LDAP replica now. You should be able to visit https://idm.wikimedia.org/wikimedia/password/ and request a password reset link. The username to use there is the "DaxServer" username of your Developer account.


Digging around more in LDAP I think you may also be suffering from confusion related to having two different Developer accounts as well. There is an account named "Dax" with the shell account name "dax" that is linked to the daxserver@icloud.com email address and the https://meta.wikimedia.org/wiki/Special:CentralAuth/DaxServer SUL account. This account was created on 2024-08-13 at 13:00 UTC (about 4 hours ago).

There is also a Developer account named "DaxServer" with the shell account name "daxserver" that I just set the email for. This account is a member of the Toolforge project and a co-maintainer of the daxbot and flickr2commons-ng tools. This account was created on 2022-03-30.

Thanks @bd808 I changed the email address and have a new password. When I login using the "DaxServer" account at idp.wikimedia.org/login, I was logged in as DaxServer with these attributes resolved:

cn	                [DaxServer]
mail	                [daxserver@icloud.com]
memberOf	        [cn=project-tools,ou=groups,dc=wikimedia,dc=org, cn=tools.daxbot,ou=servicegroups,dc=wikimedia,dc=org, cn=tools.flickr2commons-ng,ou=servicegroups,dc=wikimedia,dc=org]
sshPublicKey	        [ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK4V+GA8YbLFQDWjp/L7rjkqzgCwXhUEj0IN3d0DjrVx daxserver@icloud.com, ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDtSbEDpVwQB+8cHzuSN5E16xqznychSM4c4460KN6w5 daxserver@icloud.com]
uid	                [daxserver]

However, when I move on to idm.wikimedia.org, the account with "dax" shell username is loaded. Is it because of the DaxServer SUL link? If so, would you be able to disconnect that so that I can reconnect the SUL to "daxserver" account? Thanks again!

However, when I move on to idm.wikimedia.org, the account with "dax" shell username is loaded. Is it because of the DaxServer SUL link? If so, would you be able to disconnect that so that I can reconnect the SUL to "daxserver" account? Thanks again!

It would not be related to the SUL account linkage. It is more likely that you have an active session on idm.wikimedia.org from creating the "Dax" account that you will need to end by visiting https://idm.wikimedia.org/accounts/logout/ before you can start a new session there. The single sign-on mechanism (idp.wikimedia.org) has some quirks and this is one of them.