1160406 - Please allow the following people LDAP access to Taskcluster

Status: VERIFIED FIXED

(Taskcluster :: General, defect)

Description

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

The following people need to be able to download builds from
https://tools.taskcluster.net/index/artifacts/#gecko.v1.cypress.latest.linux.aries/gecko.v1.cypress.latest.linux.aries.eng :

[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]
[e-mail]

Comment 1

[Wander Lairson Costa]

d

Comment 2

[Ludovic Hirlimann [:Usul]]

Any idea what vpn group that is ?

Comment 3

[James Lal [:lightsofapollo]]

Hey- Looks like the time has come can we hack in the ability for qanalydocs.com to sign in here

Comment 4

[Jonas Finnemann Jensen (:jonasfj)]

TaskCluster is not behind VPN, and access cannot be granted with LDAP yet.

We issue temporary credentials to people with an @mozilla.com email address (validate it with persona).
I'll do a hack to also issue those credentials for people with an @qanalydocs.com email address.

Long term we do want to have scopes-sets in TC that are mapped to LDAP groups.
But last I looked at getting LDAP access that was complicated, I heard it changed since, so I'll take a look at that again when I find time...

But for now, I'm stealing this bug and fixing it, so we can unblock..

@nhirata,
Fix deployed, clicking the "log in" button on tools.taskcluster.net should open a page with auth.taskcluster.net, where @mozilla.com and @qanalydocs.com can login with persona and click grant access... Which will post the temporary credentials back to tools.taskcluster.net
It'll be necessary to update every 31 days or so... but an error should popup when the credentials expire.

Please, reopen this bug if @qanalydocs.com people have problems logging in. Or just ping me on IRC.

Comment 5

[Naoki Hirata :nhirata (please use needinfo instead of cc)]

Thanks Jonas!  They have access now.