@chad ....do we rename ldap accounts and it works magically in gerrit?

No, it's a manual and very painful process

Is this hard in phab?

Changing name for wikitech/gerrit/ldap may be hard. but email address should be trivial. and Adrian can do it without help from anyone else. right?

Admins can in fact change a username in Phab but it comes with a lot of caveats like orphaned references. It doesn't seem like there is too much activity to worry about but it's a note.

I went ahead and renamed in Phab per request.

Thanks folks. Unfortunately, the user name is quite visible in gerrit (where I spend most of my time), and I can't change it (since it's from LDAP afaik). Just to be clear, this is about the ›Full Name‹, not the ›Username‹, which is ›adrian‹ in gerrit. In LDAP, that's cn and sn (and mail), not uid.

In T85913#958900, @adrianheine wrote:

Thanks folks. Unfortunately, the user name is quite visible in gerrit (where I spend most of my time), and I can't change it (since it's from LDAP afaik). Just to be clear, this is about the ›Full Name‹, not the ›Username‹, which is ›adrian‹ in gerrit. In LDAP, that's cn and sn (and mail), not uid.

Hey #labs-team folks, do you guys ever rename people for wikitech? Seems like maybe your domain?

Sorry for being a pain, but I'd really like to know if this is going to happen or not. In case it isn't I'm just going to create a new account for me.

Sorry for the delayed response.

I don't know if we have done this before (@Andrew?), but it's trivial to do. However, because we have never done this before, I do not know what will / will not break. Also it isn't just labs admins, but anyone with root + Reedy / Chad / Robla who can do LDAP changes.

We have done it before, we have docs for it (see my previous comment).

You need 3 separate accesses to make this change (meaning only a root can do all of it):

• LDAP
• Wikitech
• Gerrit

@Chad @yuvipanda @coren so, nothing seemed to has happened here for almost a month now. can you tell us what people might be relevant for getting this done. this should be a minute of work for someone who has the appropriate rights but we don't have them and thus are dependent on others.

Any update from ops here?

In T85913#1018041, @demon wrote:

We have done it before, we have docs for it (see my previous comment).

You need 3 separate accesses to make this change (meaning only a root can do all of it):

• LDAP
• Wikitech
• Gerrit

Actually... You're a deployer, an ldap-admin, and a gerrit-root. Why can't you do it?

Despite repeated assertions to the contrary, renaming someone's base ldap record is non-trivial, generally breaks things, and will involve an hour or so of interactive support between the requester and the implementer.

If it's worth it, please contact me on IRC this week and I'll see about making this happen.

Adrian is paternity leave until the end of August. It'd be great if this could be done before he returns.

In T85913#1362894, @Krenair wrote:

In T85913#1018041, @demon wrote:

We have done it before, we have docs for it (see my previous comment).

You need 3 separate accesses to make this change (meaning only a root can do all of it):

• LDAP
• Wikitech
• Gerrit

Actually... You're a deployer, an ldap-admin, and a gerrit-root. Why can't you do it?

I lack rename abilities on Wikitech. Or the knowledge of how to rename an LDAP account.

In T85913#1363840, @demon wrote:

In T85913#1362894, @Krenair wrote:

In T85913#1018041, @demon wrote:

We have done it before, we have docs for it (see my previous comment).

You need 3 separate accesses to make this change (meaning only a root can do all of it):

• LDAP
• Wikitech
• Gerrit

Actually... You're a deployer, an ldap-admin, and a gerrit-root. Why can't you do it?

I lack rename abilities on Wikitech. Or the knowledge of how to rename an LDAP account.

https://wikitech.wikimedia.org/wiki/Renaming_users covers changing the LDAP CN. @bd808, @greg, and various ops can give you the ability to rename wiki accounts - deployers and ops can do it by logging into silver.

I'm back, and I'm happy to walk through the process with someone on IRC if that's necessary :)

SRE: If nobody feels comfortable going ahead and rename because nobody understands all the potential negative side effects, would creating a new account with the updated user name be an option?

If this won't get fixed, could someone from ops please once provide info which problems we are afraid of in the current setup?

Update: I guess my last question is mostly answered by https://wikitech.wikimedia.org/wiki/Renaming_users as pointed out by demon

If somebody can give me the rename user rights on wikitech I can do this. As I've said before, that's the piece I lack.

In T85913#1917543, @demon wrote:

If somebody can give me the rename user rights on wikitech I can do this. As I've said before, that's the piece I lack.

I just gave @demon admin and crat membership on wikitech.

@demon: Ping.

@adrianheine find me on IRC (ostriches or ^d), prefer to do it synchronously so we can troubleshoot if it goes wrong.

I think I got this right. It's been awhile, so please let me know immediately if it's not.

Only thing left is to deattach the LDAP account from Phabricator and attach the new one. Should setup OAuth first though so you have an alternative way to login.

@demon, are all the steps you took documented?

Hi! I'd like to request a rename too. My global username has recently changed from "Luis Felipe Schenone" to "Felipe Schenone" so I'd like to request the same for WikiTech, LDAP, Phabricator and Gerrit. Also, my username at Gerrit is currently lfs, I would really appreciate it if someone could change it to lfschenone, as I'm unifying my username throughout the Internet and this is the very LAST service left! Is anyone able to do this for me? Thanks, in return I promise to do lots of code review!

In T85913#2250474, @lfschenone wrote:

Hi! I'd like to request a rename too. My global username has recently changed from "Luis Felipe Schenone" to "Felipe Schenone" so I'd like to request the same for WikiTech, LDAP, Phabricator and Gerrit. Also, my username at Gerrit is currently lfs, I would really appreciate it if someone could change it to lfschenone, as I'm unifying my username throughout the Internet and this is the very LAST service left! Is anyone able to do this for me? Thanks, in return I promise to do lots of code review!

please open a new ticket for this

Change 304740 had a related patch set uploaded (by Hashar):
Update Adrian Heine email

https://gerrit.wikimedia.org/r/304740

@hashar: Since I left WMDE, both addresses will be bouncing. Just remove me from the list.

In T85913#2552603, @adrianheine wrote:

@hashar: Since I left WMDE, both addresses will be bouncing. Just remove me from the list.

Done.

Change 304740 merged by jenkins-bot:
Remove Adrian Heine as owner of Wikibase and Wikidata Selenium tests.

https://gerrit.wikimedia.org/r/304740