Closed Bug 1875697 Opened 2 years ago Closed 2 years ago

Unable to access searchfox AWS account

Categories

(Cloud Services :: Operations: AWS Account Request, task)

Product:
Cloud Services
Component:
Operations: AWS Account Request
Type:
task

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: kats, Unassigned)

Details

Attachments

(1 file)

AWS error page
50.84 KB, image/png
Details
Attached image AWS error page —

Hi, I'm a former MoCo employee who remained a contributor to searchfox. Not too long ago the maws tool for authenticating to AWS was retired in favor of https://mozilla-aws.awsapps.com/start and I'm trying to use that method to authenticate. However it doesn't work for me. The specific instructions I'm following are at https://github.com/mozsearch/mozsearch/blob/master/docs/aws.md#logging-into-the-aws-console:

Please let me know if there's something I need to do to regain access to the searchfox AWS account so I can continue contributing. Thanks!

(Based off reading some private slack/whatever resources): Can you try using https://sso.mozilla.com/logout to log out and then log in again at https://sso.mozilla.com/ ?

Personally, I end up seeing a "AWS (IT)" option on the https://sso.mozilla.com/dashboard link that I end up after doing that, and when I click on that it gives me the start URL, etc.

I suspect that might give more useful error messages, hopefully, if it doesn't fix the issue. Thanks!

Flags: needinfo?(kats)

After logging out and logging back in, I do get redirected to https://sso.mozilla.com/dashboard?, but the contents of the page are just the text "Internal Server Error".

Flags: needinfo?(kats)

Thank you for trying that. I've asked in the #iam slack channel about this which was my point of contact for the maws transition; it seems like ticket tracking may be happening in Jira so I'll try and bridge if/as necessary.

This account had a known issue impacting it, where the LDAP identity was not the primary identity. I've unlinked and re-linked the account which should fix this problem but Kartikaya needs to log in with their LDAP credentials in order to trigger the profile creation process. Once completed the new profile can be invited to the same groups as the previous profile. We can then delete the previous profile and the username can be reclaimed for the new profile.

Thank you for your help!

I'm not sure I 100% parsed the action steps, can you confirm if my understanding is correct?:

  1. :kats needs to login at people.mozilla.org? (as opposed to sso.mozilla.com or login.mozilla.com ?)
  2. this will trigger creation of a new people.mozilla.org account; the existing username can't initially be used because "staktrace" is taken by the existing account.
    • could :kats simplify things by renaming the old account's user id, or has that ship already sailed because that account is now something that can't be logged into via the existing credentials?
  3. I will need to invite the new people.mozilla.org account to https://people.mozilla.org/a/searchfox-aws/ because I am a curator for the group
  4. I will need to contact ghe-admins to add the new account to https://people.mozilla.org/a/ghe_mozsearch_users/ for github access, because I am not a curator for the group, only the GHE admins are.
  5. you can delete the old account?
  6. :kats can then rename the people.mozilla.org user id on the profile editing page?

Thanks!

Flags: needinfo?(jwatkins)

(In reply to Andrew Sutherland [:asuth] (he/him) from comment #6)

Hi Sorry for the confusion here. Let me try to clear this up.

Thank you for your help!

I'm not sure I 100% parsed the action steps, can you confirm if my understanding is correct?:

  1. :kats needs to login at people.mozilla.org? (as opposed to sso.mozilla.com or login.mozilla.com ?)

:kats can log into sso.mozilla.com or people.mozilla.org with their LDAP credentials and this will trigger a new profile creation both in the backend (CIS) and in the frontend (people.mozilla.org).

  1. this will trigger creation of a new people.mozilla.org account; the existing username can't initially be used because "staktrace" is taken by the existing account.

This is correct. This new profile will appear in people.mozilla.org with random generated profile name.

  • could :kats simplify things by renaming the old account's user id, or has that ship already sailed because that account is now something that can't be logged into via the existing credentials?

Renaming the profile username in people.mozilla.org is no longer an option and would not have been useful either way since the profile needs to be deleted anyway. I prefer to delete the account after the new one is create so it can be used as a reference for the new profile.

  1. I will need to invite the new people.mozilla.org account to https://people.mozilla.org/a/searchfox-aws/ because I am a curator for the group

You can send the invite once the profile is generated on first login.

  1. I will need to contact ghe-admins to add the new account to https://people.mozilla.org/a/ghe_mozsearch_users/ for github access, because I am not a curator for the group, only the GHE admins are.

This is also correct.

  1. you can delete the old account?

I will delete the old profiles once the new profile is generated.

  1. :kats can then rename the people.mozilla.org user id on the profile editing page?

Correct. Once the 'staktrace' profile is deleted, :kats can log into people.mozilla.org and change the username to staktrace since it will then be available.

Thanks!

Flags: needinfo?(jwatkins)

Hi, sorry for the delay. I've now logged in to sso.mozilla.com and people.mozilla.org. The latter prompted me to select a username when I logged in, do I chose staktrace2 just to avoid confusion with the previous one. Please go ahead with deletion of the old account. Thanks!

Flags: needinfo?(jwatkins)

(In reply to Kartikaya Gupta (email:kats@mozilla.staktrace.com) from comment #8)

Hi, sorry for the delay. I've now logged in to sso.mozilla.com and people.mozilla.org. The latter prompted me to select a username when I logged in, do I chose staktrace2 just to avoid confusion with the previous one. Please go ahead with deletion of the old account. Thanks!

Great! I've sent you invites to the following groups:

  • ghe_mozsearch_users
  • searchfox-aws
  • webrender-ci

Please make sure to join those groups via the link in the invitation emails. The links expire in 1 week.

I've also deleted your previous profile so you can reclaim the user name staktrace

Flags: needinfo?(jwatkins)

Thanks! I've accepted the invites and changed my user name back to staktrace.

I've also verified I can now log in to the searchfox AWS account using the https://mozilla-aws.awsapps.com/start url. Is there anything else I need to do on my end? Feel free to mark this bug fixed if not. Thanks again!

That is great! You probably need to link your bugzilla and github accounts to your people.mozilla.org profile. Other than that, I think you should be set. Feel free to reopen if you still need help.

Status: NEW → RESOLVED
Closed: 2 years ago
Resolution: --- → FIXED

You probably need to link your bugzilla and github accounts to your people.mozilla.org profile.

Done, thanks!

You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: