Page MenuHomePhabricator

bbogaert (Byron)
Disabled

Projects

User Details

User Since
Jun 16 2015, 11:27 PM (218 w, 1 d)
Roles
Disabled
LDAP User
Unknown
MediaWiki User
BBogaert (WMF) [ Global Accounts ]

Recent Activity

May 18 2018

bbogaert added a comment to T189065: Outbound mail from Greenhouse is broken.

Great, thanks!

May 18 2018, 8:06 PM · User-herron, DNS, Operations, Mail

May 17 2018

bbogaert added a comment to T189065: Outbound mail from Greenhouse is broken.

I have a meeting with Lisa in recruiting for 1 pm Pacific on Monday, May

  1. I'll be doing the green house changes with her then. Can we coordinate

for this time or we can reschedule?

May 17 2018, 11:34 PM · User-herron, DNS, Operations, Mail
bbogaert added a comment to T189065: Outbound mail from Greenhouse is broken.

Hi All,

May 17 2018, 12:09 AM · User-herron, DNS, Operations, Mail

May 3 2018

bbogaert added a comment to T159750: E-mail for people in different OIT LDAP object unit .

I have verified we can make Organizational Units under people without affecting mail flow, so this good!

May 3 2018, 10:19 PM · Operations, Mail

Apr 30 2018

bbogaert added a comment to T159750: E-mail for people in different OIT LDAP object unit .

Thanks for sending this along. This is a great help. I'm going to read over this, and see if I can make some sub OU's and see if mail still flows.

Apr 30 2018, 6:54 PM · Operations, Mail

Apr 28 2018

bbogaert added a comment to T159750: E-mail for people in different OIT LDAP object unit .

Hi All,

Apr 28 2018, 12:20 AM · Operations, Mail

Apr 23 2018

bbogaert added a comment to T127549: move travel related aliases to OIT.

@Dzahn Can we try this again? We have made the Google and LDAP groups. I think we just have to wait for the "previous cache callout" to expire, then the mail will flow.

Apr 23 2018, 11:29 PM · Mail, Operations

Feb 21 2018

bbogaert created T187846: Security Review of Office IT Internal Account Management Tool.
Feb 21 2018, 12:59 AM · Security-Team-Reviews

Feb 16 2018

bbogaert added a comment to T185961: Enable Google login in discourse-mediawiki.wmflabs.org.

Let us know if the "secrets" worked.

Feb 16 2018, 2:18 AM · Office-IT, Discourse

Feb 14 2018

bbogaert added a comment to T185961: Enable Google login in discourse-mediawiki.wmflabs.org.

I set the email address to the Google Group discourse-oauth@wikimedia.org, which I am an Manager of. Who should be a member and receive emails here if they are sent?

Feb 14 2018, 5:17 PM · Office-IT, Discourse

Feb 13 2018

bbogaert added a comment to T185961: Enable Google login in discourse-mediawiki.wmflabs.org.

I have set this up and can send the secrets. Should I send via PGP or give you an usb in person, or something else? If I'm sending by PGP, can you email your fingerprint?

Feb 13 2018, 11:40 PM · Office-IT, Discourse

Feb 12 2018

bbogaert added a comment to T185961: Enable Google login in discourse-mediawiki.wmflabs.org.

Adding me to this ticket is fine.

Feb 12 2018, 9:54 PM · Office-IT, Discourse

Dec 22 2017

bbogaert added a comment to T159750: E-mail for people in different OIT LDAP object unit .

How about if we design a way where Office IT can create the groups that are needed in G-Suite without Ops having to make separate OUs? This way we (Office IT) could have more granular groups in G-Suite, without having to ask Ops for the OUs?

Dec 22 2017, 7:25 PM · Operations, Mail

Jul 25 2017

bbogaert triaged T168460: Update certificates on productions replicas of corp.wikimedia.org LDAP as Normal priority.
Jul 25 2017, 12:17 AM · LDAP, Operations

Jun 20 2017

bbogaert updated the task description for T168460: Update certificates on productions replicas of corp.wikimedia.org LDAP.
Jun 20 2017, 7:06 PM · LDAP, Operations
bbogaert created T168460: Update certificates on productions replicas of corp.wikimedia.org LDAP.
Jun 20 2017, 7:05 PM · LDAP, Operations

Jun 16 2017

bbogaert created T168032: URL for wikimania2018.wikimedia.org.
Jun 16 2017, 12:57 AM

Jun 7 2017

bbogaert added a comment to T133191: Make SPF for wikimedia.org more strict.

I'd suggest a separate ticket for it :)

Jun 7 2017, 6:12 PM · Security, Operations, Mail
bbogaert added a comment to T133191: Make SPF for wikimedia.org more strict.

Could we also look at setting up a more restrictive DMARC record for our domain? Has it been considered before?

Jun 7 2017, 5:28 PM · Security, Operations, Mail

May 4 2017

bbogaert added a comment to T164424: Allow Qualtrics to send @wikimedia.org emails using an SPF record or an SMTP relay.

I found a workaround to avert our security concerns, and use gmail smtp, because Neil did not need the "reply-to" address to be qualtrics@wikimedia.org. If the "reply-to" address was needed we would have had to place cn=qualtrics in ou=people, ou=corp, ou=wikimedia, ou=org instead of ou=qualtrics, ou=corp, ou=wikimedia, ou=org so the address would receive mail. The ou=qualtrics, ou=corp, ou=wikimedia, ou=org is not replicated in production LDAP and does not receive mail.

May 4 2017, 10:00 PM · New-Editor-Experiences

Apr 7 2017

bbogaert added a comment to T160158: Make disabled accounts visible in the corp mirror LDAP replica.

The problem is somewhere in "Google Cloud Directory Sync", then. It appears as if moving a user to a different OU isn't reflected in the LDAP data generated by GCDS

I do not think this is the issue because GCDS does not generate LDAP data and it does not change our LDAP data. The GCDS just queries our LDAP server for users.

Apr 7 2017, 11:56 PM · Office-IT, LDAP, Operations
bbogaert added a comment to T160158: Make disabled accounts visible in the corp mirror LDAP replica.

ldap1 is running Ubuntu 14.04.5 LTS. Google Cloud Directory Sync [1], to sync users from LDAP with G-Suite, is hosted on another server. We can not run ldap queries against G-suite, we have to use their Admin API [2]. A standard search, on ldap1, that determines if a employee is with us or not could be run as follows:

Apr 7 2017, 12:45 AM · Office-IT, LDAP, Operations

Apr 4 2017

bbogaert updated subscribers of T161004: Remove disabled users from internal mailing lists.

...
@bbogaert: If OIT offboards a staff member, does the @wikimedia.org continue to receive mail in general or what's the policy here?

Apr 4 2017, 4:36 AM · Office-IT, LDAP, Operations

Mar 28 2017

bbogaert added a comment to T159750: E-mail for people in different OIT LDAP object unit .

I see the value in making a more generic ou address more use cases, but I would rather have an ou that more aligns more with their purpose. These persons will also have access to Google Calendar too. Also, I would like to account for a situation if we were to give these persons more access, for example, Google Drive.

Mar 28 2017, 6:01 PM · Operations, Mail
bbogaert added a comment to T160158: Make disabled accounts visible in the corp mirror LDAP replica.

Is it possible for us to modify the replication? We have an ou for ex-employees.

Mar 28 2017, 5:50 PM · Office-IT, LDAP, Operations

Mar 8 2017

bbogaert added a project to T159750: E-mail for people in different OIT LDAP object unit : Operations.
Mar 8 2017, 7:55 PM · Operations, Mail

Mar 6 2017

bbogaert created T159750: E-mail for people in different OIT LDAP object unit .
Mar 6 2017, 8:52 PM · Operations, Mail

Jan 24 2017

bbogaert added a comment to T123818: setup YubiHSM and laptop at office.

@Dzahn Ricard has the laptop.

Jan 24 2017, 8:32 PM · Operations
bbogaert closed T154972: G-suite for WMF suspended ? as Resolved.

Thanks for the nudge @demon !!!

Jan 24 2017, 6:23 PM · Office-IT
bbogaert added a comment to T152892: corp DNS servers return SERVFAIL for PTR queries.

@Krenair Thanks, for the input. I updated ns2 to have those records too.

Jan 24 2017, 12:18 AM · Office-IT

Jan 23 2017

bbogaert added a comment to T152892: corp DNS servers return SERVFAIL for PTR queries.

I updated for these missing records.

Jan 23 2017, 9:45 PM · Office-IT

Jan 20 2017

bbogaert added a comment to T152892: corp DNS servers return SERVFAIL for PTR queries.

I looked at past backups and could not find reverse lookup records going back as far as September, 2013. I started with creating a reverse record for tan1.corp.wikimedia.org and have now added tan[2-4].

Jan 20 2017, 6:13 PM · Office-IT

Jan 17 2017

bbogaert closed T125699: Modify performance and tweak settings as needed, a subtask of T125604: Install Wireless Access Points on 5th and Sixth Floor, as Invalid.
Jan 17 2017, 9:06 PM · Office-IT
bbogaert closed T125699: Modify performance and tweak settings as needed as Invalid.

With the decision to move to a a new Office, we will not be pursuing infrastructure changes such as this.

Jan 17 2017, 9:06 PM · Office-IT

Jan 10 2017

Elitre awarded T154972: G-suite for WMF suspended ? a Like token.
Jan 10 2017, 5:41 PM · Office-IT
bbogaert changed the status of T154972: G-suite for WMF suspended ? from Open to Stalled.

Today around 12:00 AM PST our domain was suspended and if you attempted to use any of our google services you would have received an error. It was suspended because Google had "set up billing" for us and it expired today. They "Set Up Billing" for us because we wanted to explore moving to a G-Suite Unlimited plan and this was the only way they could send "terms and conditions". When I received notice at 10:08 PM PST I emailed our representative to make sure our account was not suspended and he assurede me it was not, and opened a support case. However, at 12:00 AM PST it was indeed suspended and services became inaccessible. I called G-suite support numbers but they were unavailable. I was able to fix our issue for now by setting up billing and moving the organization to an unlimited plan.
In the morning I plan on contacting Google, and finding out what happened and how this could have been prevented.

Jan 10 2017, 9:35 AM · Office-IT

Jan 9 2017

bbogaert claimed T152892: corp DNS servers return SERVFAIL for PTR queries.

@akosiaris Yes, I can take a look.

Jan 9 2017, 5:56 PM · Office-IT

Nov 7 2016

bbogaert added a comment to T150046: Spaces request for SIEM.

Hi All,

Nov 7 2016, 2:50 PM · Developer-Advocacy (Oct-Dec-2016), Project-Admins

Oct 28 2016

bbogaert closed T130071: Migrate to new file server as Resolved.

Migration to new file server with LDAP integration has been completed.

Oct 28 2016, 12:27 AM · Office-IT
bbogaert closed T130072: Point DNS to new File Server as Resolved.

DNS points to new server and is working properly.

Oct 28 2016, 12:26 AM · Office-IT
bbogaert closed T130072: Point DNS to new File Server, a subtask of T130071: Migrate to new file server, as Resolved.
Oct 28 2016, 12:26 AM · Office-IT
bbogaert closed T130074: Configure rsnapshot backups as Resolved.

Made sure rsnapshot backups were working correctly for new server.

Oct 28 2016, 12:25 AM · Office-IT
bbogaert closed T130074: Configure rsnapshot backups, a subtask of T130071: Migrate to new file server, as Resolved.
Oct 28 2016, 12:25 AM · Office-IT

Sep 27 2016

bbogaert closed T130087: Restrict access to old file server and perform final RSYNC as Resolved.
Sep 27 2016, 5:04 PM · Office-IT
bbogaert closed T130087: Restrict access to old file server and perform final RSYNC, a subtask of T130071: Migrate to new file server, as Resolved.
Sep 27 2016, 5:04 PM · Office-IT

Sep 26 2016

bbogaert added a comment to T146102: Add yubikey attribute to production ldap.

I made the change to corp LDAP. I have been able to add the wikimediaPerson objectClass and YubiKeyVPN attribute to myself. Can you check if LDAP is still syncing properly?

Sep 26 2016, 10:24 PM · Patch-For-Review, LDAP, Operations, Mail

Sep 23 2016

bbogaert added a comment to T146102: Add yubikey attribute to production ldap.

Awesome. Thank you for the help @MoritzMuehlenhoff . I'll make the changes and let you know if there's any trouble.

Sep 23 2016, 7:18 PM · Patch-For-Review, LDAP, Operations, Mail

Sep 20 2016

bbogaert added a comment to T127548: status of fdcsupport@ ?.

Updated Google Group to have members: dmenard and wolliff

Sep 20 2016, 10:43 PM · Mail, Operations
bbogaert added a comment to T127548: status of fdcsupport@ ?.

Hi Daniel,

Sep 20 2016, 9:30 PM · Mail, Operations
bbogaert added a comment to T127551: status of wikigroup@ alias.

Hi Daniel,

Sep 20 2016, 9:26 PM · Mail, Operations
bbogaert added a comment to T127551: status of wikigroup@ alias.

Sure. Thanks for the bump.

Sep 20 2016, 5:00 PM · Mail, Operations

Sep 19 2016

bbogaert created T146102: Add yubikey attribute to production ldap.
Sep 19 2016, 11:07 PM · Patch-For-Review, LDAP, Operations, Mail
bbogaert added a comment to T145800: Delivery failed to eng-admin.

Update: The sync was getting stuck on person's whom had an yubikey ldap attribute. I added the attribute back, deleted the attribute from the people that had it, and then removed the attribute from the schema. Email is now flowing again to the new entries who were not receiving anything.

Sep 19 2016, 9:49 PM · Operations, Mail
bbogaert added a comment to T145800: Delivery failed to eng-admin.

I added the yubikey attribute for two-factor -vpn.

Sep 19 2016, 5:35 PM · Operations, Mail

Sep 16 2016

bbogaert triaged T145800: Delivery failed to eng-admin as High priority.
Sep 16 2016, 7:18 PM · Operations, Mail

Sep 15 2016

bbogaert created T145800: Delivery failed to eng-admin.
Sep 15 2016, 5:22 PM · Operations, Mail

Aug 18 2016

bbogaert closed T142427: Emails dropping from Greenhouse to Alan as Resolved.

Hi Alex,

Aug 18 2016, 5:49 PM · Mail, Operations

Aug 16 2016

bbogaert added a comment to T142427: Emails dropping from Greenhouse to Alan.

Hi Alex,

Aug 16 2016, 12:47 AM · Mail, Operations

Aug 8 2016

bbogaert created T142427: Emails dropping from Greenhouse to Alan.
Aug 8 2016, 6:49 PM · Mail, Operations

Apr 11 2016

bbogaert renamed T130071: Migrate to new file server from Migrate to new new file server to Migrate to new file server.
Apr 11 2016, 9:59 PM · Office-IT

Mar 16 2016

bbogaert closed T125178: Placeholder Task for OIT Learning as Invalid.

We can close this. This was a session with Grace on Phabricator.

Mar 16 2016, 1:08 AM · Office-IT
bbogaert created T130087: Restrict access to old file server and perform final RSYNC.
Mar 16 2016, 12:59 AM · Office-IT

Mar 15 2016

bbogaert closed T130073: Schedule recurring RSYNC of all data to New File Server, a subtask of T130071: Migrate to new file server, as Resolved.
Mar 15 2016, 11:41 PM · Office-IT
bbogaert closed T130073: Schedule recurring RSYNC of all data to New File Server as Resolved.

RSYNC configured to run at 4 AM every day.

Mar 15 2016, 11:41 PM · Office-IT
bbogaert triaged T130071: Migrate to new file server as Normal priority.
Mar 15 2016, 9:53 PM · Office-IT
bbogaert removed a parent task for T130073: Schedule recurring RSYNC of all data to New File Server: T130072: Point DNS to new File Server.
Mar 15 2016, 9:52 PM · Office-IT
bbogaert removed a subtask for T130072: Point DNS to new File Server: T130073: Schedule recurring RSYNC of all data to New File Server.
Mar 15 2016, 9:52 PM · Office-IT
bbogaert removed a subtask for T130073: Schedule recurring RSYNC of all data to New File Server: T130074: Configure rsnapshot backups.
Mar 15 2016, 9:51 PM · Office-IT
bbogaert removed a parent task for T130074: Configure rsnapshot backups: T130073: Schedule recurring RSYNC of all data to New File Server.
Mar 15 2016, 9:51 PM · Office-IT
bbogaert added a parent task for T130073: Schedule recurring RSYNC of all data to New File Server: T130071: Migrate to new file server.
Mar 15 2016, 9:51 PM · Office-IT
bbogaert added a parent task for T130074: Configure rsnapshot backups: T130071: Migrate to new file server.
Mar 15 2016, 9:51 PM · Office-IT
bbogaert added subtasks for T130071: Migrate to new file server: T130074: Configure rsnapshot backups, T130073: Schedule recurring RSYNC of all data to New File Server.
Mar 15 2016, 9:51 PM · Office-IT
bbogaert created T130074: Configure rsnapshot backups.
Mar 15 2016, 9:50 PM · Office-IT
bbogaert created T130073: Schedule recurring RSYNC of all data to New File Server.
Mar 15 2016, 9:49 PM · Office-IT
bbogaert created T130072: Point DNS to new File Server.
Mar 15 2016, 9:47 PM · Office-IT
bbogaert created T130071: Migrate to new file server.
Mar 15 2016, 9:46 PM · Office-IT

Mar 9 2016

bbogaert added a comment to T127503: why is shop@ -> board@ ?.

Hi All,

Mar 9 2016, 10:22 PM · Wikimedia-Shop, Mail, Operations
bbogaert added a comment to T127503: why is shop@ -> board@ ?.

Board@wikimedia.org is a Google Group that sends to board members and wikimedia staff.

Mar 9 2016, 8:18 PM · Wikimedia-Shop, Mail, Operations

Mar 7 2016

bbogaert added a comment to T129168: fr-all fails with error 451.

Hi Alex,

Mar 7 2016, 11:18 PM · Operations, Mail
bbogaert closed T128647: move fundraising group aliases to OIT, a subtask of T122144: Move most (all?) exim personal aliases to OIT, as Resolved.
Mar 7 2016, 10:18 PM · Mail, Operations
bbogaert closed T128647: move fundraising group aliases to OIT as Resolved.

Hi All,

Mar 7 2016, 10:18 PM · Mail, Operations
bbogaert created T129168: fr-all fails with error 451.
Mar 7 2016, 10:12 PM · Operations, Mail
bbogaert added a comment to T128647: move fundraising group aliases to OIT.

Hi Daniel,

Mar 7 2016, 8:36 PM · Mail, Operations
bbogaert reopened T128647: move fundraising group aliases to OIT as "Open".
Mar 7 2016, 8:35 PM · Mail, Operations
bbogaert reopened T128647: move fundraising group aliases to OIT, a subtask of T122144: Move most (all?) exim personal aliases to OIT, as Open.
Mar 7 2016, 8:35 PM · Mail, Operations
bbogaert added a comment to T127551: status of wikigroup@ alias.
Mar 7 2016, 8:29 PM · Mail, Operations
bbogaert added a comment to T129091: iPad at R32 crashed.

Hi Daniel,

Mar 7 2016, 6:02 PM · Office-IT

Mar 4 2016

bbogaert updated subscribers of T128647: move fundraising group aliases to OIT.

Hi Daniel,

Mar 4 2016, 1:31 AM · Mail, Operations
bbogaert added a comment to T128647: move fundraising group aliases to OIT.

@Dzahn Thanks, I just need to make sure they were added to fr-tech

Mar 4 2016, 1:06 AM · Mail, Operations
bbogaert updated subscribers of T128647: move fundraising group aliases to OIT.

@Dzahn Who was in fr-tech-ops? I can not nest/inherit other groups in Google Groups.

Mar 4 2016, 1:00 AM · Mail, Operations
bbogaert updated subscribers of T128647: move fundraising group aliases to OIT.

@atgo Do we need fundraiser-2012 or fr-2012?

Mar 4 2016, 12:51 AM · Mail, Operations

Mar 3 2016

bbogaert added a comment to T127549: move travel related aliases to OIT.

Hi Daniel,

Mar 3 2016, 11:44 PM · Mail, Operations
bbogaert added a comment to T128669: Office network using monkeybrains.net instead of connection to SFO pop site.

Found problem to be ports for uplinks to ulsfo were in err-disable. These have been recovered (thanks cajoel), and the links are backup.

Mar 3 2016, 10:25 PM · Office-IT, netops, Operations, Traffic
bbogaert added a comment to T128669: Office network using monkeybrains.net instead of connection to SFO pop site.

What I have found out so far:

Mar 3 2016, 8:29 PM · Office-IT, netops, Operations, Traffic
bbogaert added a comment to T128669: Office network using monkeybrains.net instead of connection to SFO pop site.

Thanks Faidon. I'll troubleshoot, and let you know what I find.

Mar 3 2016, 7:06 PM · Office-IT, netops, Operations, Traffic

Mar 2 2016

bbogaert created T128669: Office network using monkeybrains.net instead of connection to SFO pop site.
Mar 2 2016, 11:40 PM · Office-IT, netops, Operations, Traffic

Feb 26 2016

bbogaert reopened T127549: move travel related aliases to OIT, a subtask of T122144: Move most (all?) exim personal aliases to OIT, as Open.
Feb 26 2016, 12:28 AM · Mail, Operations
bbogaert reopened T127549: move travel related aliases to OIT as "Open".

Hey Daniel,

Feb 26 2016, 12:28 AM · Mail, Operations

Feb 25 2016

bbogaert added a comment to T127549: move travel related aliases to OIT.

Hi Daniel,

Feb 25 2016, 10:13 PM · Mail, Operations

Feb 3 2016

bbogaert created T125699: Modify performance and tweak settings as needed.
Feb 3 2016, 7:27 PM · Office-IT