Ben Kerensa needs VPN access and LDAP permissions

RESOLVED FIXED

Status

Infrastructure & Operations
Infrastructure: LDAP
RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: lsblakk, Assigned: jabba)

Tracking

Details

Ben Kerensa is a long-time contributor who in the past year has become an invaluable asset to Release Management in triaging bugs nominated for release tracking. He’s been included on many security bugs throughout that time in order to learn about making calls on tracking and reasoning about the criticality of our various product issues in Desktop/Mobile Firefox.

We’re planning to create a new track for experienced Release Management community contributors where they will be able to take on the shepherding of ESR releases and as such, Ben will be the first community RM to do this.  He will need to have access:

* security bugs (requested on that list)
* http://ship-it.mozilla.org/
* http://bedrockadm.private.phx1.mozilla.com/chief/bedrock.productdetails

The latter two require LDAP permissions and the ship-it site requires VPN access.

We're pretty sure that Ben did a committer's agreement a long time back, if it's possible to look that up somewhere if needed?
(Assignee)

Updated

3 years ago
Assignee: infra → jdow
(Assignee)

Comment 1

3 years ago
Account created, put in vpn_default, vpn_shipit, shipit, shipitdev and vpn_bedrock groups, e-mailed Ben instructions for changing password and obtaining VPN configuration files/certificates.
Status: NEW → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
(In reply to Justin Dow [:jabba] from comment #1)
> Account created, put in vpn_default, vpn_shipit, shipit, shipitdev and
> vpn_bedrock groups, e-mailed Ben instructions for changing password and
> obtaining VPN configuration files/certificates.

Hello Justin,

 I was just drying to install the credentials into my VPN client and it gives me an error:
Installation failed:

At line 14 of the OpenVPN configuration file: The configuration file refers to a file

ta.key

which should be located at

/Users/bkerensa/Downloads/bkerensa-ovpn-config/ta.key

but the file does not exist.
----------

No ta.key is generated that I can see in the zip.
Flags: needinfo?(jdow)
Flags: needinfo?(jdow)
There were some recent changes to the application and I think that you hit a regression.
Can you go to login.mozilla.com and click the button "Revoke and Regenerate Certificate" and let me know if this is resolved.
(In reply to Rob Tucker [:rtucker] from comment #3)
> There were some recent changes to the application and I think that you hit a
> regression.
> Can you go to login.mozilla.com and click the button "Revoke and Regenerate
> Certificate" and let me know if this is resolved.

Hi Rob,

I did revoke and regenerate and it still emits the missing ta.key error. 

As soon as I drop in a ta.key another person with VPN has it imports fine into the OpenVPN Client.
crap, i see now. Should be taken care of. Thanks for the test and confirmation that my last patch attempt failed.
If you were bored and wanted to revoke/regenerate to confirm that would be cool. If not i'll just keep an eye out for further cert generations and confirm the presence of the ta file.
You need to log in before you can comment on or make changes to this bug.