Page MenuHomePhabricator

Reset email address for "taxonbot" Developer account
Closed, ResolvedPublic

Description

Doc Taxon can't reset the password of his developer account taxonbot. He tried the form at https://idm.wikimedia.org/wikimedia/password/, where he got no response. He also contacted you on 2025-03-23 at idm-help@wikimedia.org, where he got no response either.

Event Timeline

He tried the form at https://idm.wikimedia.org/wikimedia/password/, where he got no response.

What does that mean exactly? What did happen after which steps?

What does that mean exactly? What did happen after which steps?

Hm, I thought that was clear. He tried to reset his password, this is the page that you get to. He entered his username and should have gotten a response email with a link to reset his password, which did not arrive.

He mentioned that he possibly used an address which no longer exists.

Ah, thanks!

@doctaxon: Do you still have access to the email address listed on https://ldap.toolforge.org/user/taxonbot ?

Ah, thanks!

@doctaxon: Do you still have access to the email address listed on https://ldap.toolforge.org/user/taxonbot ?

Hi @Aklapper : This is the email address I lost access to. The email provider has no options to reactivate the address. Can you replace it with the new email address please?

Aklapper renamed this task from Reset developer account password for Doc Taxon to Reset developer account password and email address for "taxonbot" user.Jul 2 2025, 9:43 AM
Aklapper added a project: LDAP.

Aklapper renamed this task from Reset developer account password for Doc Taxon to Reset developer account password and email address for "taxonbot" user.

@Aklapper: How do I submit my new email address secure way to assist completing this task?

Aklapper renamed this task from Reset developer account password for Doc Taxon to Reset developer account password and email address for "taxonbot" user.

@Aklapper: How do I submit my new email address secure way to assist completing this task?

The ssh access based validation process from https://wikitech.wikimedia.org/wiki/Password_and_2FA_reset#For_developer_account_users is probably the nicest way we have to verifying account ownership.

As @Aklapper has pointed out the email address associated with a Developer account is public information. It may not be stored in places that web scraper bots are looking, but it is public. Sharing the address here is an option, or you could choose to put the address in the text file used for validating the request from the step above.

@bd808 : The new email address is dr.taxon[at]gmail.com

@bd808 : The new email address is dr.taxon[at]gmail.com

Perfect, we can use that to update your Developer account as soon as we verify that the human writing messages here on Phabricator is the human who controls the "Doc Taxon" Developer account. The process at https://wikitech.wikimedia.org/wiki/Password_and_2FA_reset#For_developer_account_users of using your ssh access to Toolforge to create a file there that references the task here is generally the easiest way to verify ownership.

If you have lost access to the ssh key for the Developer account we will need to come up with another verification method from https://wikitech.wikimedia.org/wiki/Password_and_2FA_reset/Confirming_identities that will work.

bd808 renamed this task from Reset developer account password and email address for "taxonbot" user to Reset email address for "taxonbot" Developer account.Aug 12 2025, 12:35 AM

@bd808 : Let's try the second confirming method. These stewards know me in real life and can verify my account: @Johannnes89 and @DerHexer

I'm not sure but I think I didn't lose the ssh key, I only lost my password. So I should try the first confirming method. But it's explained in a too difficult English language for me, it's too hard to understand it clearly.

@bd808 : I tried the first verification method and got the verification file output:

tools-bastion-12.tools.eqiad1.wikimedia.cloud:/home/taxonbot/2fa-reset-request.txt

@bd808 : Let's try the second confirming method. These stewards know me in real life and can verify my account: @Johannnes89 and @DerHexer

Hi, I can verify the account. I know the person in real life and an assure you that this request is valid.

@bd808 : Let's try the second confirming method. These stewards know me in real life and can verify my account: @Johannnes89 and @DerHexer

Hi, I can verify the account. I know the person in real life and an assure you that this request is valid.

+1

bd808 claimed this task.
bd808 triaged this task as Medium priority.
bd808 moved this task from Inbox to Clinic Duty on the cloud-services-team board.

@bd808 : I tried the first verification method and got the verification file output:

tools-bastion-12.tools.eqiad1.wikimedia.cloud:/home/taxonbot/2fa-reset-request.txt
bd808@mbp03:~$ ssh root@login.toolforge.org
root@tools-bastion-13:~# ls -lh /home/taxonbot/2fa-reset-request.txt
-rw------- 1 taxonbot wikidev 42 Aug 12 01:30 /home/taxonbot/2fa-reset-request.txt
root@tools-bastion-13:~# cat /home/taxonbot/2fa-reset-request.txt
https://phabricator.wikimedia.org/T398220

Looks good.

bd808@cloudweb1003:~/projects/ldap$ ./ldap-modify.sh T398220-taxonbot.ldif
./ldap-modify.sh:3+ LDIF=T398220-taxonbot.ldif
./ldap-modify.sh:5+ ldapmodify -v -H ldap://ldap-rw.eqiad.wikimedia.org:389 -D uid=novaadmin,ou=people,dc=wikimedia,dc=org -y .ldap-password -f T398220-taxonbot.ldif
ldap_initialize( ldap://ldap-rw.eqiad.wikimedia.org:389/??base )
replace mail:
        dr.taxon@gmail.com
modifying entry "uid=taxonbot,ou=people,dc=wikimedia,dc=org"
modify complete
bd808@cloudweb1003:~/projects/ldap$ ldap uid=taxonbot mail
dn: uid=taxonbot,ou=people,dc=wikimedia,dc=org
mail: dr.taxon@gmail.com

# pagedresults: cookie=

@doctaxon: You should be able to use https://idm.wikimedia.org/wikimedia/password/ now to get a password reset link for your https://ldap.toolforge.org/user/taxonbot Develper account.