1135198 - Requesting access for Liz Henry to the verbatim and shipit LDAP groups

Status: RESOLVED FIXED

(Infrastructure & Operations :: MOC: Service Requests, task)

Description

[Liz Henry (:lizzard) (relman/hg->git project)]

Hi, I would like to be in the LDAP groups for verbatim and shipit, as I am joining the release management team and will need to help with build tools and l10n. Thanks!

Comment 1

[Liz Henry (:lizzard) (relman/hg->git project)]

n-i to Lukas to vouch for me.

Comment 2

[Ludovic Hirlimann [:Usul]]

Can sylvestre vouch too ?

Comment 3

[Sylvestre Ledru [:Sylvestre]]

Sure. I do triple vouch for Liz \o/

Comment 4

[Ludovic Hirlimann [:Usul]]

(In reply to Sylvestre Ledru [:sylvestre] from comment #3)
> Sure. I do triple vouch for Liz \o/

Merci.

Comment 5

[Ludovic Hirlimann [:Usul]]

Added to cn=verbatim,ou=groups,dc=mozilla and cn=vpn_shipit,ou=groups,dc=mozilla

Comment 6

[Sylvestre Ledru [:Sylvestre]]

(In reply to Ludovic Hirlimann [:Usul] from comment #4)
> (In reply to Sylvestre Ledru [:sylvestre] from comment #3)
> > Sure. I do triple vouch for Liz \o/
> 
> Merci.

Tout le plaisir est pour moi !

Comment 7

[Liz Henry (:lizzard) (relman/hg->git project)]

Hi, I’m on Mozilla certificate based VPN and going to https://ship-it.mozilla.org/  and trying to authenticate as [e-mail], but still don't have access.

Comment 8

[Ludovic Hirlimann [:Usul]]

I might have forgot to press the modify user button.

Comment 9

[Ludovic Hirlimann [:Usul]]

sorry :(

Comment 10

[Liz Henry (:lizzard) (relman/hg->git project)]

Thanks Usul. Hate to bug you again but I still can't see ship-it. Maybe something is still missing, or maybe I need to tweak something in my Viscosity settings. 

I get the LDAP login dialog:

A username and password are being requested by https://ship-it.mozilla.org. The site says:"ship-it LDAP Login"

and then:

Authorization Required

This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.

Comment 11

[Justin Dow [:jabba]]

There are actually two LDAP groups that control access to the app. vpn_shipit just provides the network-level access to reach the server on the VPN. There is another group just called shipit which allows logging into the app. I've added the shipit group and confirmed on IRC that :lizzard can now log in.

Comment 12

[Liz Henry (:lizzard) (relman/hg->git project)]

Hi Axel, I am now in the verbatim LDAP group, and can see the page to create milestones, but can't actually create a milestone at https://l10n.mozilla.org/shipping/release/select-milestones.     

Is there something else you need to do in an admin interface for verbatim ?  Or, are we missing something from the LDAP permission setup?    Thanks!

Comment 13

[Axel Hecht [:Pike]]

Liz, you should be good. My ldap query shows that you're set up right. I added you to the group associated in ldap on elmo, but logging out and in should have probably fixed it, too. Just figured I'd spare us the day that the roundtrip is gonna take.

Note, I'm not sure what the verbatim group does, and if that matters to a life in relman. It shouldn't.