As @aranyap's manager, I approve this request.

Please make sure the Wikimedia global and developer accounts are correctly created and not conflicting.
There seems to be two existing deactivated accounts under the aprum-ctr@wikimedia.org email, linked with the Aranyap~labswiki and the Aranyap enwiki account, as well as the aprum dewiki and aprum~labswiki wikitech account as well, but no account for aprum@wikimedia.org.

@cmooney SSH key verified out of band

In T398650#10974346, @Clement_Goubert wrote:

Please make sure the Wikimedia global and developer accounts are correctly created and not conflicting.
There seems to be two existing deactivated accounts under the aprum-ctr@wikimedia.org email, linked with the Aranyap~labswiki and the Aranyap enwiki account, as well as the aprum dewiki and aprum~labswiki wikitech account as well, but no account for aprum@wikimedia.org.

I apologize for the confusion as I don't have access to accounts under my old contractor email, aprum-ctr@wikimedia.org.

For Wikimedia global, I have access to the user Anyaprum which I believe is now linked with this Phabricator account and updated email, aprum@wikimedia.org.

My Wikimedia global account is now also linked to my developer account, Aranyap

Should.I change the "Wikimedia developer account username" field above to Aranyap?

Change #1168132 had a related patch set uploaded (by Cathal Mooney; author: Cathal Mooney):

[operations/puppet@production] admin: grant aranyap access and add to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1168132

Change #1168132 merged by Cathal Mooney:

[operations/puppet@production] admin: grant aranyap access and add to analytics-privatedata-users

https://gerrit.wikimedia.org/r/1168132

Hi @aranyap.

I have added your public ssh key and username 'aranyap' to the analytics-privatedata-users group now. Additionally I created a Kerberos principal for you which should have generated one with a new temporary password. You should receive an email about that with details on how to change it.

Apologies for the delay processing this one, there was a scheduling mix-up on my part which means I didn't pick it up earlier. Hopefully things work now, please let me know how things are looking or if you have any problems accessing what you need.

Hi @aranyap yeah you are not in that group.

cmooney@ldap-maint1001:~$ ldapsearch -x cn=wmf | grep aprum 
cmooney@ldap-maint1001:~$

I'm unfortunately far from an expert on these things. From my reading of the documentation access to that group is now done through the online system, and thus doesn't need to be manually added by SRE. Have you clicked the "request this permission" link from the screenshot you posted?

[Claiming this as the clinic duty person this week]

@aranyap: https://ldap.toolforge.org/user/aranyap indicates you are not part of the required groups. Can you please follow https://wikitech.wikimedia.org/wiki/SRE/LDAP/Groups/Request_access and request access through the online system as Cathal indicated?

@cmooney @ssingh I just requested access through the online system. Thank you!

@aranyap: It seems like the group membership has been updated. Can you please try again? Thanks!

Just for visibility here as these are around the same time: thread over at T399899#11017204 that's related, heads up.

@aranyap: Also please note that it seems like you are using the same key for WMCS and production:

aranyap uses the same SSH key(s) in WMCS and production:
  {'AAAAC3NzaC1lZDI1NTE5AAAAIOXdWYmddta1VReNU34UtJWq1zP+kkJ9pP9fLrYE+vAz'}

Please generate a new key per https://wikitech.wikimedia.org/wiki/SRE/Production_access#Generating_your_SSH_key for either WMCS or production.

@ssingh I'm now able to access JupyterHub and have deleted the WMCS key. Thank you!