LDAPTag
ActivePublic

Members

  • This project does not have any members.
  • View All

Watchers

  • This project does not have any watchers.
  • View All

Recent Activity

Wed, Jul 10

Maintenance_bot removed a project from T359551: Replace wikitech as source of two-factor auth protection for developer accounts: Patch-For-Review.
Wed, Jul 10, 8:30 AM · LDAP, cloud-services-team, wikitech.wikimedia.org
gerritbot added a comment to T359551: Replace wikitech as source of two-factor auth protection for developer accounts.

Change #1052085 merged by Slyngshede:

[operations/software/bitu@master] MediaWiki: Allow Bitu to be used as a 2FA proxy.

https://gerrit.wikimedia.org/r/1052085

Wed, Jul 10, 8:03 AM · LDAP, cloud-services-team, wikitech.wikimedia.org

Thu, Jul 4

gerritbot added a project to T359551: Replace wikitech as source of two-factor auth protection for developer accounts: Patch-For-Review.
Thu, Jul 4, 11:17 AM · LDAP, cloud-services-team, wikitech.wikimedia.org
gerritbot added a comment to T359551: Replace wikitech as source of two-factor auth protection for developer accounts.

Change #1052085 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/software/bitu@master] MediaWiki: Allow Bitu to be used as a 2FA proxy.

https://gerrit.wikimedia.org/r/1052085

Thu, Jul 4, 11:17 AM · LDAP, cloud-services-team, wikitech.wikimedia.org

Thu, Jun 27

MoritzMuehlenhoff claimed T355663: Allocate more available UNIX UIDs for human users.

I'll take care of this when I'm back from sabbatical

Thu, Jun 27, 9:08 AM · User-MoritzMuehlenhoff, Bitu, Infrastructure-Foundations, cloud-services-team, LDAP

Wed, Jun 26

taavi removed a watcher for LDAP: taavi.
Wed, Jun 26, 9:40 AM

Tue, Jun 25

taavi placed T367287: Update Wikitech's LDAP credentials to be read-only up for grabs.
Tue, Jun 25, 3:37 PM · Patch-For-Review, Infrastructure-Foundations, cloud-services-team, LDAP, wikitech.wikimedia.org
Maintenance_bot removed a project from T367490: Split out ldap management from mwmaint: Patch-For-Review.
Tue, Jun 25, 1:31 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1049536 merged by Muehlenhoff:

[operations/puppet@production] offboard-user: New -H for ldapmodify

https://gerrit.wikimedia.org/r/1049536

Tue, Jun 25, 12:49 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a project to T367490: Split out ldap management from mwmaint: Patch-For-Review.
Tue, Jun 25, 12:38 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1049536 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] offboard-user: New -H for ldapmodify

https://gerrit.wikimedia.org/r/1049536

Tue, Jun 25, 12:38 PM · LDAP, Infrastructure-Foundations, SRE

Wed, Jun 19

taavi added a comment to T355663: Allocate more available UNIX UIDs for human users.

Currently the highest number in use is 47058. So that's 1081 accounts in the 148 days since I created this task, or about 7.3 accounts per day. Assuming a similar rate of growth we're looking at running out of numbers in about 400 days, which would be late July next calendar year.

Wed, Jun 19, 11:22 AM · User-MoritzMuehlenhoff, Bitu, Infrastructure-Foundations, cloud-services-team, LDAP
Maintenance_bot removed a project from T367490: Split out ldap management from mwmaint: Patch-For-Review.
Wed, Jun 19, 8:30 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1046596 merged by Muehlenhoff:

[operations/puppet@production] Drop ldap-admins access group from mwmaint hosts

https://gerrit.wikimedia.org/r/1046596

Wed, Jun 19, 8:20 AM · LDAP, Infrastructure-Foundations, SRE
taavi closed T161553: Remove OpenStackManager from Wikitech, a subtask of T367287: Update Wikitech's LDAP credentials to be read-only, as Resolved.
Wed, Jun 19, 5:54 AM · Patch-For-Review, Infrastructure-Foundations, cloud-services-team, LDAP, wikitech.wikimedia.org

Mon, Jun 17

MoritzMuehlenhoff triaged T367287: Update Wikitech's LDAP credentials to be read-only as Medium priority.
Mon, Jun 17, 2:06 PM · Patch-For-Review, Infrastructure-Foundations, cloud-services-team, LDAP, wikitech.wikimedia.org
MoritzMuehlenhoff closed T367490: Split out ldap management from mwmaint as Resolved.

The LDAP management parts have been split off to the new ldap-maint1001/ldap-maint2001 hosts.

Mon, Jun 17, 8:50 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1046592 merged by Muehlenhoff:

[operations/puppet@production] Disable openldap::management timers on mwmaint hosts

https://gerrit.wikimedia.org/r/1046592

Mon, Jun 17, 8:32 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1046594 merged by Muehlenhoff:

[operations/puppet@production] profile::openldap::management: Remove support for buster

https://gerrit.wikimedia.org/r/1046594

Mon, Jun 17, 8:29 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1046596 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Drop ldap-admins access group from mwmaint hosts

https://gerrit.wikimedia.org/r/1046596

Mon, Jun 17, 8:13 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1046594 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] profile::openldap::management: Remove support for buster

https://gerrit.wikimedia.org/r/1046594

Mon, Jun 17, 8:10 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1046592 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Disable openldap::management timers on mwmaint hosts

https://gerrit.wikimedia.org/r/1046592

Mon, Jun 17, 7:58 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1046318 merged by Muehlenhoff:

[operations/puppet@production] mwmaint: Stop including profile::openldap::management

https://gerrit.wikimedia.org/r/1046318

Mon, Jun 17, 7:51 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a project to T367490: Split out ldap management from mwmaint: Patch-For-Review.
Mon, Jun 17, 7:06 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1046318 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] mwmaint: Stop including profile::openldap::management

https://gerrit.wikimedia.org/r/1046318

Mon, Jun 17, 7:06 AM · LDAP, Infrastructure-Foundations, SRE

Fri, Jun 14

Maintenance_bot removed a project from T367490: Split out ldap management from mwmaint: Patch-For-Review.
Fri, Jun 14, 2:30 PM · LDAP, Infrastructure-Foundations, SRE
Stashbot added a comment to T367490: Split out ldap management from mwmaint.

Mentioned in SAL (#wikimedia-operations) [2024-06-14T14:04:54Z] <jmm@cumin2002> END (PASS) - Cookbook sre.puppet.sync-netbox-hiera (exit_code=0) generate netbox hiera data: "new ldap-maint hosts - jmm@cumin2002 - T367490"

Fri, Jun 14, 2:05 PM · LDAP, Infrastructure-Foundations, SRE
Stashbot added a comment to T367490: Split out ldap management from mwmaint.

Mentioned in SAL (#wikimedia-operations) [2024-06-14T13:49:15Z] <jmm@cumin2002> START - Cookbook sre.puppet.sync-netbox-hiera generate netbox hiera data: "new ldap-maint hosts - jmm@cumin2002 - T367490"

Fri, Jun 14, 1:49 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043783 merged by Muehlenhoff:

[operations/puppet@production] Enable account check on new ldap-main host in eqiad

https://gerrit.wikimedia.org/r/1043783

Fri, Jun 14, 1:47 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a project to T367490: Split out ldap management from mwmaint: Patch-For-Review.
Fri, Jun 14, 1:42 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043783 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Enable account check on new ldap-main host in eqiad

https://gerrit.wikimedia.org/r/1043783

Fri, Jun 14, 1:42 PM · LDAP, Infrastructure-Foundations, SRE
Maintenance_bot removed a project from T367490: Split out ldap management from mwmaint: Patch-For-Review.
Fri, Jun 14, 1:30 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043770 merged by Muehlenhoff:

[operations/puppet@production] Add ldap-admins settings to new ldap-maint role

https://gerrit.wikimedia.org/r/1043770

Fri, Jun 14, 1:19 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043770 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add ldap-admins settings to new ldap-maint role

https://gerrit.wikimedia.org/r/1043770

Fri, Jun 14, 1:08 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043709 merged by Muehlenhoff:

[operations/puppet@production] Apply openldap::maintenance role to ldap-maint* hosts

https://gerrit.wikimedia.org/r/1043709

Fri, Jun 14, 1:00 PM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043709 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Apply openldap::maintenance role to ldap-maint* hosts

https://gerrit.wikimedia.org/r/1043709

Fri, Jun 14, 10:24 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043680 merged by Muehlenhoff:

[operations/puppet@production] New openldap::management role

https://gerrit.wikimedia.org/r/1043680

Fri, Jun 14, 10:18 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043680 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] New openldap::management role

https://gerrit.wikimedia.org/r/1043680

Fri, Jun 14, 9:47 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043656 merged by Muehlenhoff:

[operations/puppet@production] profile::openldap::management: Add support for bookworm

https://gerrit.wikimedia.org/r/1043656

Fri, Jun 14, 9:32 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a project to T367490: Split out ldap management from mwmaint: Patch-For-Review.
Fri, Jun 14, 8:39 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043656 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] profile::openldap::management: Add support for bookworm

https://gerrit.wikimedia.org/r/1043656

Fri, Jun 14, 8:39 AM · LDAP, Infrastructure-Foundations, SRE
Maintenance_bot removed a project from T367490: Split out ldap management from mwmaint: Patch-For-Review.
Fri, Jun 14, 8:32 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043646 merged by Muehlenhoff:

[operations/puppet@production] Add partman globbing for ldap-maint

https://gerrit.wikimedia.org/r/1043646

Fri, Jun 14, 8:12 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043645 merged by Muehlenhoff:

[operations/puppet@production] Add ldap-maint[12]001 to site.pp

https://gerrit.wikimedia.org/r/1043645

Fri, Jun 14, 8:08 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043646 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add partman globbing for ldap-maint

https://gerrit.wikimedia.org/r/1043646

Fri, Jun 14, 8:01 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a project to T367490: Split out ldap management from mwmaint: Patch-For-Review.
Fri, Jun 14, 7:57 AM · LDAP, Infrastructure-Foundations, SRE
gerritbot added a comment to T367490: Split out ldap management from mwmaint.

Change #1043645 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add ldap-maint[12]001 to site.pp

https://gerrit.wikimedia.org/r/1043645

Fri, Jun 14, 7:57 AM · LDAP, Infrastructure-Foundations, SRE
MoritzMuehlenhoff created T367490: Split out ldap management from mwmaint.
Fri, Jun 14, 7:51 AM · LDAP, Infrastructure-Foundations, SRE

Jun 12 2024

taavi added a subtask for T367287: Update Wikitech's LDAP credentials to be read-only: T359820: Add developer account (un)blocking support to Bitu.
Jun 12 2024, 3:53 PM · Patch-For-Review, Infrastructure-Foundations, cloud-services-team, LDAP, wikitech.wikimedia.org
taavi changed the status of T367287: Update Wikitech's LDAP credentials to be read-only from Open to Stalled.
Jun 12 2024, 3:52 PM · Patch-For-Review, Infrastructure-Foundations, cloud-services-team, LDAP, wikitech.wikimedia.org