LDAP-Access-RequestsComponent
ActivePublic
Watch Project

Members (7)

Micromadmonkey (Micromadmonkey)
User
Dzahn (Daniel Zahn)
SRE in team collaboration services
greg (Greg Grossmeier)
Director of Engineering
Reedy (Sam Reed)
Breaker of Wikis
Krenair (Alex Monk)
Wikimedia volunteer
Jdforrester-WMF (James D. Forrester)
Software Engineer
View All

Watchers (10)

khunRyPak (KhunPhanDuae)
User
AaR888 (Ariandi Lie)
Spy
mmartorana (manfredi martorana)
Application Security Engineer
Micromadmonkey (Micromadmonkey)
User
xSavitar
User
Jony (ZI Jony)
Volunteer Support
Tommy_Kronkvist (Tommy Kronkvist)
User
Jay8g
User
Jdforrester-WMF (James D. Forrester)
Software Engineer
Krenair (Alex Monk)
Wikimedia volunteer
View All

Details

Description

This workboard represents access requests for LDAP groups, including the ldap/wmf group which controls access in Gerrit, Logstash, and various other developer tools.

Click here to start creating your request

Please include:

Username: (The user name used on Wikitech.)
Shell access: Yes/No (Whether you currently have shell access).
Purpose: (Specify which service you need to get access to, e.g. Icinga, Grafana, Superset etc).
Group: (The specific group you want to be added to - optional).
Contract end date: End date of contract (Contractors only)
Contract contact: Contact person for the contractor (Contractors only)

Refer to https://wikitech.wikimedia.org/wiki/LDAP/Groups for documentation on what each LDAP group is for.

How to create a LDAP account?

Make sure you have an LDAP account (aka "Wikimedia Developer" account). If you can login at https://idm.wikimedia.org or https://gerrit.wikimedia.org, then you have an LDAP account. If not, then create your LDAP account via idm.wikimedia.org.

For LDAP admins only, how to process a request?

Check and follow https://wikitech.wikimedia.org/wiki/SRE/Clinic_Duty/Access_requests#LDAP_access
Note that LDAP flags can only be added to users who are listed in the admin/data.yaml file in Puppet. This is for auditing purposes. This basically means that for a user to gain access to one or more restricted LDAP groups, there is a paper trail managed by SRE with a Git commit recording that the user has signed the relevant NDAs or other documents.

Recent Activity
View All

Fri, Nov 22

WMDECyn added a comment to T380487: Grant Access to ldap/wmde, ldap/nda for SuzanneWood-WMDE.

approved from WMDE end

Fri, Nov 22, 9:26 AM · SRE, LDAP-Access-Requests

Thu, Nov 21

sbassett added a parent task for T380523: Grant Access to wmf for JLy-WMF: T380014: Onboard Jimmy Ly to the Security Team.

Thu, Nov 21, 7:30 PM · SRE, LDAP-Access-Requests

mmartorana created T380523: Grant Access to wmf for JLy-WMF.

Thu, Nov 21, 6:21 PM · SRE, LDAP-Access-Requests

SuzanneWood-WMDE added a comment to T380487: Grant Access to ldap/wmde, ldap/nda for SuzanneWood-WMDE.

@WMDECyn could you please approve?

Thu, Nov 21, 3:31 PM · SRE, LDAP-Access-Requests

SuzanneWood-WMDE created T380487: Grant Access to ldap/wmde, ldap/nda for SuzanneWood-WMDE.

Thu, Nov 21, 3:30 PM · SRE, LDAP-Access-Requests

Fri, Nov 15

Maintenance_bot removed a project from T373142: Grant Access to NDA-users for ncreasy: Patch-For-Review.

Fri, Nov 15, 9:30 PM · SRE, LDAP-Access-Requests

greg added a comment to T380091: Access to Data Hub - IAckerman-WMF.

Ilse's manager (Erica Roden, Dir of Fundraising Operations) is out on parental leave until May. I can give my approval for this request as a peer of Erica's.

Fri, Nov 15, 9:29 PM · SRE, LDAP-Access-Requests

Maintenance_bot added a project to T380097: Grant Access to NDA-users for ncreasy: SRE.

Fri, Nov 15, 9:29 PM · SRE, LDAP-Access-Requests

Peachey88 renamed T380091: Access to Data Hub - IAckerman-WMF from Access to Data Hub to Access to Data Hub - IAckerman-WMF.

Fri, Nov 15, 9:20 PM · SRE, LDAP-Access-Requests

NCreasy added a comment to T380097: Grant Access to NDA-users for ncreasy.

The request is so that I can access Data Hub with my developer account.

Fri, Nov 15, 9:18 PM · SRE, LDAP-Access-Requests

taavi added a project to T380097: Grant Access to NDA-users for ncreasy: LDAP-Access-Requests.

Hi. Which service do you need access to that you can't access at the moment?

Fri, Nov 15, 9:13 PM · SRE, LDAP-Access-Requests

Maintenance_bot added a project to T380091: Access to Data Hub - IAckerman-WMF: SRE.

Fri, Nov 15, 8:29 PM · SRE, LDAP-Access-Requests

taavi edited projects for T380091: Access to Data Hub - IAckerman-WMF, added: LDAP-Access-Requests; removed SRE-Access-Requests.

Fri, Nov 15, 7:42 PM · SRE, LDAP-Access-Requests

Tue, Nov 12

Maintenance_bot removed a project from T379630: Grant Access to ldap/wmf for HArroyo-WMF: Patch-For-Review.

Tue, Nov 12, 4:30 PM · SRE, LDAP-Access-Requests

herron closed T379630: Grant Access to ldap/wmf for HArroyo-WMF as Resolved.

membership to ldap group wmf has been provisioned, thanks!

Tue, Nov 12, 3:47 PM · SRE, LDAP-Access-Requests

gerritbot added a comment to T379630: Grant Access to ldap/wmf for HArroyo-WMF.

Change #1090481 merged by Herron:

[operations/puppet@production] admin: add ldap_only entry for harroyo-wmf

https://gerrit.wikimedia.org/r/1090481

Tue, Nov 12, 3:36 PM · SRE, LDAP-Access-Requests

herron closed T379409: Grant Access to ldap/wmf for khantstop as Resolved.

uid=khantstop has been added to ldap group wmf

Tue, Nov 12, 2:56 PM · SRE, LDAP-Access-Requests

gerritbot added a project to T379630: Grant Access to ldap/wmf for HArroyo-WMF: Patch-For-Review.

Tue, Nov 12, 2:36 PM · SRE, LDAP-Access-Requests

gerritbot added a comment to T379630: Grant Access to ldap/wmf for HArroyo-WMF.

Change #1090481 had a related patch set uploaded (by Herron; author: Herron):

[operations/puppet@production] admin: add ldap_only entry for harroyo-wmf

https://gerrit.wikimedia.org/r/1090481

Tue, Nov 12, 2:36 PM · SRE, LDAP-Access-Requests

hector.arroyo created T379630: Grant Access to ldap/wmf for HArroyo-WMF.

Tue, Nov 12, 2:11 PM · SRE, LDAP-Access-Requests

PWaigi-WMF closed T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi as Resolved.

Tue, Nov 12, 8:29 AM · SRE, LDAP-Access-Requests

PWaigi-WMF added a comment to T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi.

@MatthewVernon, I have access now; I am closing this ticket. Thanks.

Tue, Nov 12, 8:28 AM · SRE, LDAP-Access-Requests

Fri, Nov 8

Khantstop created T379409: Grant Access to ldap/wmf for khantstop.

Fri, Nov 8, 7:03 PM · SRE, LDAP-Access-Requests

Thu, Nov 7

Maintenance_bot removed a project from T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi: Patch-For-Review.

Thu, Nov 7, 11:30 AM · SRE, LDAP-Access-Requests

MatthewVernon added a comment to T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi.

Hi @PWaigi-WMF you're already in both the analytics-privatedata-users group and the wmf LDAP group, after ticket T315257 (in 2022). Can you confirm if you need any other access, please? If not, I'll close this ticket.

Thu, Nov 7, 10:57 AM · SRE, LDAP-Access-Requests

MatthewVernon moved T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi from Backlog to Awaiting User Input on the LDAP-Access-Requests board.

Thu, Nov 7, 10:51 AM · SRE, LDAP-Access-Requests

gerritbot added a comment to T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi.

Change #1088256 abandoned by MVernon:

[operations/puppet@production] admin: add pwaigi1- to analytics-privatedate-users

Reason:

user already in requested group

https://gerrit.wikimedia.org/r/1088256

Thu, Nov 7, 10:47 AM · SRE, LDAP-Access-Requests

gerritbot added a project to T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi: Patch-For-Review.

Thu, Nov 7, 10:40 AM · SRE, LDAP-Access-Requests

gerritbot added a comment to T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi.

Change #1088256 had a related patch set uploaded (by MVernon; author: MVernon):

[operations/puppet@production] admin: add no-krb,no-ssh analytics-privatedate-users pwaigi1-

https://gerrit.wikimedia.org/r/1088256

Thu, Nov 7, 10:40 AM · SRE, LDAP-Access-Requests

Maintenance_bot removed a project from T378182: Grant Access to ldap/nda for Deepesha Burse WMDE: Patch-For-Review.

Thu, Nov 7, 10:30 AM · SRE, LDAP-Access-Requests

MatthewVernon closed T378182: Grant Access to ldap/nda for Deepesha Burse WMDE as Resolved.

Hi @Deepesha_WMDE this is all done for you now.

Thu, Nov 7, 10:28 AM · SRE, LDAP-Access-Requests

gerritbot added a comment to T378182: Grant Access to ldap/nda for Deepesha Burse WMDE.

Change #1088239 merged by MVernon:

[operations/puppet@production] admin: add Deepesha Burse to ldap_only_users

https://gerrit.wikimedia.org/r/1088239

Thu, Nov 7, 10:18 AM · SRE, LDAP-Access-Requests

gerritbot added a project to T378182: Grant Access to ldap/nda for Deepesha Burse WMDE: Patch-For-Review.

Thu, Nov 7, 9:41 AM · SRE, LDAP-Access-Requests

gerritbot added a comment to T378182: Grant Access to ldap/nda for Deepesha Burse WMDE.

Change #1088239 had a related patch set uploaded (by MVernon; author: MVernon):

[operations/puppet@production] admin: add Deepesha Burse to ldap_only_users

https://gerrit.wikimedia.org/r/1088239

Thu, Nov 7, 9:41 AM · SRE, LDAP-Access-Requests

KCVelaga_WMF renamed T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi from Grant Access to analytics-privatedata-users, wmf for <Pwaigi> to Grant Access to analytics-privatedata-users, wmf for Pwaigi.

Thu, Nov 7, 9:02 AM · SRE, LDAP-Access-Requests

Arrbee added a comment to T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi.

Also endorsing an approval for this request as Purity's manager.

Thu, Nov 7, 8:50 AM · SRE, LDAP-Access-Requests

Maintenance_bot added a project to T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi: SRE.

Thu, Nov 7, 8:29 AM · SRE, LDAP-Access-Requests

PWaigi-WMF created T379225: Grant Access to analytics-privatedata-users, wmf for Pwaigi.

Thu, Nov 7, 8:07 AM · SRE, LDAP-Access-Requests

Wed, Nov 6

Deepesha_WMDE added a comment to T378182: Grant Access to ldap/nda for Deepesha Burse WMDE.

@MatthewVernon here is my username: Deepesha_WMDE. Please let me know if you need anything else from me. Thanks!

Wed, Nov 6, 3:37 PM · SRE, LDAP-Access-Requests

MatthewVernon added a comment to T378182: Grant Access to ldap/nda for Deepesha Burse WMDE.

@Deepesha_WMDE do you have a Wikimedia developer account? If so, what is the username? If not, can you create one following these instructions and then tell me the username, please?

Wed, Nov 6, 10:13 AM · SRE, LDAP-Access-Requests