1574647 - Please reset LDAP password for [e-mail]

Status: RESOLVED FIXED

(Infrastructure & Operations :: Infrastructure: LDAP, defect)

Description

[Frédéric Wang (:fredw)]

When trying to cancel jobs on https://treeherder.mozilla.org/#/jobs?repo=try with my account [e-mail], I get the following error message:

Taskcluster: Client ID mozilla-auth0/oauth2|firefoxaccounts|3c125a9b827a4c3b832baa08c6485bae|[e-mail] does not have sufficient scopes and is missing the following scopes: hooks:trigger-hook:project-gecko/in-tree-action-1-generic/9a01d0526d This request requires the client to satisfy the following scope expression: hooks:trigger-hook:project-gecko/in-tree-action-1-generic/9a01d0526d --- * method: triggerHook * errorCode: InsufficientScopes * statusCode: 403 * time: 2019-08-12T21:05:53.055Z

(see also bug 1572510)

Comment 1

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

Hrm, have you logged out of Treeherder and Taskcluster and logged back in again (after getting commit access restored)?

Comment 2

[Frédéric Wang (:fredw)]

(In reply to Wes Kocher (:KWierso) from comment #1)

Hrm, have you logged out of Treeherder and Taskcluster and logged back in again (after getting commit access restored)?

I think so. I just did it again to be sure and I still fails to cancel my tasks.

Comment 3

[Wes Kocher (:KWierso) (Not reading bugmail; email directly if needed)]

I'm not sure who you need to talk with to fix up your scopes. #treeherder or #ci would be good places to start, though.

Comment 4

[Frédéric Wang (:fredw)]

(In reply to Wes Kocher (:KWierso) from comment #3)

I'm not sure who you need to talk with to fix up your scopes. #treeherder or #ci would be good places to start, though.

Thanks. I was told I need to log in with LDAP. It seems my password expired in 2016 so I need a new one. Moving bug to LDAP component.

Comment 5

[Mike Poessy [:mpoessy]]

Password reset was completed. The temporary password was emailed.

Comment 6

[Frédéric Wang (:fredw)]

Thanks.

I now get "Access Denied. The username you have entered cannot authenticate with Duo Security. Please contact your system administrator."

So I guess I have to follow the procedure with Duo Security?

Comment 7

[Mike Poessy [:mpoessy]]

Please go to login.mozilla.com to enroll a 2FA device. Apologies but without that you will not be able to log in.

Comment 8

[Frédéric Wang (:fredw)]

Thanks. Seems to be working now

Comment 9

[Frédéric Wang (:fredw)]

I was able to add and cancel tasks for an old try push https://treeherder.mozilla.org/#/jobs?repo=try&revision=eb61452d399b4ba88a900695021b93c2e362876a