Closed Bug 1062577 Opened 10 years ago Closed 10 years ago

Please grant mpressman access to addons_vpn group

Categories

(Infrastructure & Operations :: Infrastructure: LDAP, task)

Product:
Infrastructure & Operations
Component:
Infrastructure: LDAP
Platform:
x86
macOS
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: mpressman, Assigned: bhourigan)

Details

Mostly, I will need ssh access as well. The particular issue is me accessing the database on db1.mktdb.services.phx1.mozilla.com.

Thanks!
Assignee: server-ops-amo → nobody
Component: Server Operations: AMO Operations → Operations: Marketplace
Product: mozilla.org → Mozilla Services
QA Contact: oremj → operations-mkt
Version: other → unspecified
Added homedir for mpressman to our environment (3 ssh keys added) and added mpressman to mktdb role in hiera.  

Please enable the vpn_addons ldap group bit for mpressman's ldap account
Assignee: nobody → infra
Component: Operations: Marketplace → Infrastructure: LDAP
Product: Mozilla Services → Infrastructure & Operations
QA Contact: operations-mkt → jdow
Version: unspecified → other
a=jthomas
Added to vpn_addons.
Assignee: infra → bhourigan
Status: NEW → RESOLVED
Closed: 10 years ago
Resolution: --- → FIXED
I'm still getting a permission denied when trying to ssh in
[mpressman@mpressman-moz ~]$ ssh -A mpressman@wp-adm01.phx.weave.mozilla.com
Permission denied (publickey,gssapi-with-mic).

sheeri mentioned a jump host she uses to gain access and I cannot ssh into it either:
[mpressman@mpressman-moz ~]$ ssh -A mpressman@wp-adm01.phx.weave.mozilla.com
Permission denied (publickey,gssapi-with-mic).
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Good morning

> I'm still getting a permission denied when trying to ssh in
> [mpressman@mpressman-moz ~]$ ssh -A mpressman@wp-adm01.phx.weave.mozilla.com
> Permission denied (publickey,gssapi-with-mic).

My apologies - I read the summary without thoroughly reading the description. I added you to the vpn_addons group which will facilitate you to connect to the machine, but not necessarily configure your posix account. 

Infra doesn't have access to weave systems, this will need to be punted to services to get your account setup.

> 
> sheeri mentioned a jump host she uses to gain access and I cannot ssh into
> it either:
> [mpressman@mpressman-moz ~]$ ssh -A mpressman@wp-adm01.phx.weave.mozilla.com
> Permission denied (publickey,gssapi-with-mic).
If you are connected to the global vpn you should be able to access db1.mktdb.services.phx1.mozilla.com directly.
I don't have a user/pass to access the database to access it directly
mpressman now has access to the requested host.
Status: REOPENED → RESOLVED
Closed: 10 years ago → 10 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.