Page MenuHomePhabricator

define in Puppet or remove user account - santhosh
Closed, ResolvedPublic

Description

@santhosh,

We're in the process of auditing and cleaning up our access lists to servers. During this audit, we found your user in place on a few sysetms, without having admin module entries. We need to review these systems and confirm you still require access to them, and why. Since we don't have this on record or in puppet, we'll have to go through the normal approval process. As such, please simply have your manager approve on this task which systems you confirm you need to continue to access.

oxygen.wikimedia.org:
gadolinium.wikimedia.org:

Please note what you need to do on each system, as we'll need to ensure you maintain the proper access levels when we add you to the admins module.

Please note feedback is required, as we'll be removing the access of anyone we don't account for during this audit.

Thanks in advance,

Event Timeline

RobH assigned this task to santhosh.
RobH raised the priority of this task from to High.
RobH updated the task description. (Show Details)
RobH added a subscriber: santhosh.

@santhosh hi

@chasemp after having cleaned a couple other users and seeing the oxygen/gadolinium combination more than once, i think the chance is 99% that santhosh wasn't aware of having this access and it happened due a mistake with some role class or so. i think we can safely remove this and always recreate access where needed

I manually deleted the user and home directory from oxygen and gadolinium. (deluser santhosh, rm -rf /home/santhosh) . Home directories were empty.

@santhosh let us know if you need anything, but calling this resolved for now, it was very very likely just by accident because many other users had the same situation with the same 2 hosts.