Please give Bartosz (MatmaRex) membership of the "researchers" and "statistics-users" groups so that they can access stat1003 for EventLogging analysis.
Description
Details
Subject | Repo | Branch | Lines +/- | |
---|---|---|---|---|
add matmarex to researchers | operations/puppet | production | +9 -2 |
Related Objects
Event Timeline
It looks like this is the first access request for Bartosz. Please have him go through the steps here https://wikitech.wikimedia.org/wiki/Requesting_shell_access if he hasn't already, and let's get the information on this task (gerrit patch with ssh key, perferred shell user name, link to wikitech page,). He should also sign the L3 statement on Phabricator mentioned on the Requesting shell access page. @Jdforrester-WMF are you his manager? If so I can take manager approval as a given. Thanks!
Full name: Bartosz Dziewoński
Wikitech page: https://wikitech.wikimedia.org/wiki/User:Bartosz_Dziewoński
Labs username: Bartosz Dziewoński (yeah, with a space and a diacritic… hopefully won't be a problem here)
Preferred shell user name: matmarex
Public key:
I signed L3.
To be more precise than "EventLogging analysis": I'm going to be working on T95527/T91652.
Thanks!
The labs username stuff needed is just your shell name (uid, not cn which is used for wikitech usernames). Which you've given as preferred shell name anyway.
Change 256000 had a related patch set uploaded (by ArielGlenn):
add matmarex to researchers, statistics-users
Lindsey Anne Frankenfield will be his manager but she is just starting. @TrevorParscal is technically his manager and can approve this.
I think Ariel meant to ping @TrevorParscal here, which is important because Bartosz needs this access to implement some time-sensitive features.
I, Trevor Parscal, hereby approve of giving Bartosz Dziewoński membership in the "researchers" and "statistics-users" groups.
How? researchers just gives access to mysql credentials for the research db. Has it been changed? Or is there no limitation on the mysql GRANT to stat1003 and people just connect from anywhere?
researchers gives access to both stat1003 itself and the mysql credentials. I have the same thing myself to access the EventLogging database (it also provides access to other databases):
krenair@stat1003:~$ ls -l /etc/mysql/conf.d/research-client.cnf -r--r----- 1 root researchers 108 Mar 4 2015 /etc/mysql/conf.d/research-client.cnf krenair@stat1003:~$ groups wikidev researchers krenair@stat1003:~$ mysql --defaults-file=/etc/mysql/conf.d/research-client.cnf -h analytics-store.eqiad.wmnet -A log -s mysql:research@analytics-store.eqiad.wmnet [log]>
You can use the credentials in that file to log in to the DB from any other host that can connect to dbstore1002 on the mysql port (this depends on firewalls etc.). I suspect most people just use stat1003 though.
Thanks. Then the researchers group has been changed at some point to include stat1003. Moving and and merging this.
[stat1003:~] $ id matmarex
uid=2501(matmarex) gid=500(wikidev) groups=500(wikidev),714(researchers)
@matmarex your user exists on stat1003.eqiad.wmnet now
the mysql credentials are here, i confirmed i can read them as your user.
matmarex@stat1003: cat /etc/mysql/conf.d/research-client.cnf # Note: This file is managed by Puppet. [client] #host = password = ...
Thank you, it all works fine.
Guess what, it turned out to have been a problem, and it's been dediacriticised in https://gerrit.wikimedia.org/r/#/c/258713/ :)