1732985 - Commit Access (Level 1) for Muhammad Malik [e-mail]

Status: RESOLVED FIXED

(Infrastructure & Operations :: Infrastructure: LDAP, task)

Description

[malikannus]

Attachment: id_rsa.pub

I have read, and agree to abide by, the Commit Access Requirements.

Comment 1

[Tom Ritter [:tjr] (OOTO until 7/21)]

I vouch for Muhammad, she's one of my capstone project students.

Comment 2

[Jonathan Lin - Not watching NI/offline [:jlin] [[e-mail]]]

requisite vouch and confirmation of requirement received.

Hi Muhammad, I've created the community ldap account for you. You will receive instructions via email for resetting credentials and setting up a duo mfa token.

I've put in the ssh key you've attached here, it will take about 1 hour for the key to update across our systems.

You can refer to https://mozilla-version-control-tools.readthedocs.io/en/latest/hgmozilla/auth.html for setting up the ssh config file

Comment 3

[Jonathan Lin - Not watching NI/offline [:jlin] [[e-mail]]]

I'll close this out. feel free to reopen if further help is needed.

Thanks!

Comment 4

[Tom Ritter [:tjr] (OOTO until 7/21)]

For debugging reasons I'm going to make this public, we can re-restrict it if needed.

Comment 5

[Tom Ritter [:tjr] (OOTO until 7/21)]

After some pretty extensive debugging, Muhammad cannot ssh to hg.mozilla.org and I don't know why.

• We confirmed that his username is the one given on his bugzilla account
• We confirmed his ssh config file is being read
• We confirmed his ssh key is in the same format as someone else's whose works
• We confirmed his public key is the one submitted here
• We confirmed his private key corresponds to his public key
• We looked extensively at ssh -vvv

I'm scraping the bottom of the barrel for things it could be. I was hoping you could double check his ldap account matches his bugzilla email and his ssh public key is correct so we can rule out something on Mozilla's side.

Comment 6

[Jonathan Lin - Not watching NI/offline [:jlin] [[e-mail]]]

Hi Tom and Muhammad

It's strange - I was trying to look up account details and didn't find an account with the hotmail email.

I was wondering if Muhammad, if you received an email from our system with the initial credentials and instructions for duo. It doesn't seem like it (since there's no duo account yet)

Comment 7

[Jonathan Lin - Not watching NI/offline [:jlin] [[e-mail]]]

Apologies. I just created/recreated the account. the ssh key will take about 1 hour to update across our systems. However, you should be getting that initial ldap credentials email.

Let me know if you receive it.

Comment 8

[Greg Cox [:gcox]]

Looking in from the server side, since this was weird. I didn't see the account in LDAP (looking before comment 6 landed).

comment 2 says the account was created late on 2021-09-29. I saw no account creation in the activity logs +/- 4h of the timestamp of that comment.

Checking the LDAP DB backups from early 2021-09-29 and 2021-10-01, I saw no increase in the count of the name 'Muhammad', no increase in accounts using 'hotmail', and I didn't see the SSH key in there on the later date. I was thinking maybe a typo happened and things got lost that way.

It's like it never got created (or possibly got created on a dead SSO session, that didn't report in anywhere).

Comment 9

[malikannus]

Hello,

yes, i just received the initial LDAP email.

Comment 10

[Jonathan Lin - Not watching NI/offline [:jlin] [[e-mail]]]

re comment 8 - yes I think I probably missed the creation (I might have posted the comment to create it but was using an expired session or just simply didn't click save/execute) - I do remember working with the name at some point though. I've created it so Muhammad should have an account now.

Comment 11

[Jonathan Lin - Not watching NI/offline [:jlin] [[e-mail]]]

closing this out. Let us know if you have any other issues.