This request is now merged; please re-open if there are any issues, thanks!

Change #1020879 merged by Ssingh:

[operations/puppet@production] admin: add derenrich to ldap_only_users

https://gerrit.wikimedia.org/r/1020879

As Daniel's manager I approve of this request!

@Kgraessle: The request has been merged; please let us know if there is any issue. Thanks!

Change #1020881 merged by Ssingh:

[operations/puppet@production] admin: add kgraessle to ldap_only_users

https://gerrit.wikimedia.org/r/1020881

I approve

@DMburugu: this requires your approval, thanks!

Change #1020881 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] admin: add kgraessle to ldap_only_users

https://gerrit.wikimedia.org/r/1020881

Change #1020879 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] admin: add derenrich to ldap_only_users

https://gerrit.wikimedia.org/r/1020879

@NBaca-WMF: This needs your approval, thanks!

@Aitolkyn I am marking this as resolved but if that's not the case, please re-open it again thanks!

Do we expect a new access request to add him to "wmf" LDAP group, WMF-NDA in Phabricator etc?

In T361266#9716925, @Urbanecm_WMF wrote:

Since Michael was hired by WMF

Thanks @Muehlenhoff! And good to know @Michael that this is resolved; closing this task.

In T362618#9718814, @MoritzMuehlenhoff wrote:

Can you try accessing https://idp.wikimedia.org/logout and then retrying a login to https://idp.wikimedia.org/? You might have still had an SSO session with your previous memberships.

Can you try accessing https://idp.wikimedia.org/logout and then retrying a login to https://idp.wikimedia.org/? You might have still had an SSO session with your previous memberships. I just had a look at the LDAP replicas and your cn=wmf membership is present there.

I now have Gerrit +2 rights again, but sadly, I still cannot access Logstash or log in to Grafana:

Added to wmf LDAP group (as well as Phabricator). Please try to access Logstash and let us know if there are any issues.

Change #1020225 merged by Ssingh:

[operations/puppet@production] admin: add migr to ldap_only_users

https://gerrit.wikimedia.org/r/1020225

Change #1020225 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] admin: add migr to ldap_only_users

https://gerrit.wikimedia.org/r/1020225

Thanks indeed @Urbanecm_WMF! Nice catch. @Aitolkyn: the contract expiry and date have been updated. If this has been resolved for you, please feel free to the task.

In T362533#9716944, @Urbanecm_WMF wrote:

In T362533#9714116, @Aitolkyn wrote:

In T362533#9713681, @ssingh wrote:

In T362533#9713602, @Aitolkyn wrote:

@ssingh Thank you for checking! I get the following error when trying to access my tables:

mysql error: SELECT command denied to user 'research'@'10.67.30.187' for table `aitolkyn`.`domain_reverted_added_2019_2023`

Maybe I need to set anything before I can access those?

Hi @Aitolkyn: Can you share the query you are trying to run? While knowing nothing about this, shouldn't the user be aitolkyn here and the table name research? I may be wrong about this! It says table aitolkyn.

The table name is "aitolkyn.domain_reverted_added_2019_2023" and my user name is "aitolkyn". I am running

SELECT *
FROM   aitolkyn.domain_reverted_added_2019_2023

The error message suggests you're trying to run that query in the analytics MariaDB replicas (using analytics-mysql or directly via mysql). This database only exists in Hive:

[urbanecm@stat1005 ~]$ hive --database=aitolkyn
[...]
hive (aitolkyn)> show tables;
OK
[...]
domain_reverted_added_2019_2023
[...]

Can you try querying for the data using eg. Hive (see https://wikitech.wikimedia.org/wiki/Analytics/Cluster/Systems/Hive)? Or when in Superset, using the presto_analytics_hive database?

In T362533#9714116, @Aitolkyn wrote:

In T362533#9713681, @ssingh wrote:

In T362533#9713602, @Aitolkyn wrote:

@ssingh Thank you for checking! I get the following error when trying to access my tables:

mysql error: SELECT command denied to user 'research'@'10.67.30.187' for table `aitolkyn`.`domain_reverted_added_2019_2023`

Maybe I need to set anything before I can access those?

Hi @Aitolkyn: Can you share the query you are trying to run? While knowing nothing about this, shouldn't the user be aitolkyn here and the table name research? I may be wrong about this! It says table aitolkyn.

The table name is "aitolkyn.domain_reverted_added_2019_2023" and my user name is "aitolkyn". I am running

SELECT *
FROM   aitolkyn.domain_reverted_added_2019_2023

In T361266#9677105, @Aklapper wrote:

FYI I have disabled the Phabricator account @Michael as it is linked to the WMDE staff account https://www.mediawiki.org/wiki/User:Michael_Gro%C3%9Fe_(WMDE)

Also removed from wmde-mediawiki Gerrit group.

Change #1019824 merged by Ssingh:

[operations/puppet@production] admin: update expiry_{contact,date} for aitolkyn

https://gerrit.wikimedia.org/r/1019824

In T362533#9713681, @ssingh wrote:

In T362533#9713602, @Aitolkyn wrote:

@ssingh Thank you for checking! I get the following error when trying to access my tables:

mysql error: SELECT command denied to user 'research'@'10.67.30.187' for table `aitolkyn`.`domain_reverted_added_2019_2023`

Maybe I need to set anything before I can access those?

Hi @Aitolkyn: Can you share the query you are trying to run? While knowing nothing about this, shouldn't the user be aitolkyn here and the table name research? I may be wrong about this! It says table aitolkyn.

Change #1019824 had a related patch set uploaded (by Ssingh; author: Ssingh):

[operations/puppet@production] admin: update expiry_{contact,date} for aitolkyn

https://gerrit.wikimedia.org/r/1019824

In T362533#9713602, @Aitolkyn wrote:

@ssingh Thank you for checking! I get the following error when trying to access my tables:

mysql error: SELECT command denied to user 'research'@'10.67.30.187' for table `aitolkyn`.`domain_reverted_added_2019_2023`

Maybe I need to set anything before I can access those?

Unsure why @Aitolkyn isn't have access now then ://

@ssingh Thank you for checking! I get the following error when trying to access my tables:

Hi @FNavas-foundation: @Aitolkyn already should already have access to Superset as they are part of the analytics_privatedata_users group. @Aitolkyn, can you please confirm?