392662 - Zach can no longer access LDAP-controlled services

Status: VERIFIED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Zach Lipton [:zach]]

Someone presumably removed my LDAP access this morning as part of my end-of-internship close out. This had the handy-dandy side effect of removing my access to all ldap-controlled services, including the vpn and litmus. It would be great to get this turned back on.

Things I need access to: mpt-vpn (ssh and tunnel), dm-litmus01, dm-litmus-stage01, stage (this still works since it's not ldap controlled now, but I've been told the UIDs need to match), I also used to have access to dm-pageload01

Things I do not need access to: mail, zimbra, intranet, the office network, other MoCo services, ...

Justdave made some changes recently to my ldap account, I believe dealing with both a MoCo account and my personal one, so cc'ing him for possible assistance here.

Comment 1

[Reed Loden [:reed]]

You still have your personal LDAP account ([e-mail]). It should still have permissions to stuff.

Comment 2

[Zach Lipton [:zach]]

I believe you, and that is the account I'd like to use, but when I try to ssh to [e-mail], I get a permission denied error: 

Permission denied (publickey,gssapi-with-mic)

My key hasn't changed.

Comment 3

[chizu]

Your posix login data wasn't fixed on your [e-mail] account when your moco account was deleted. I've fixed those settings, and you should be able to log in again.

Comment 4

[Zach Lipton [:zach]]

Thanks Trevor. However, when I try to connect to mpt-vpn, I get this: 

laptop:~ zach$ ssh mpt-vpn.mozilla.com
You must be a member of cn=mptvpn,ou=groups,dc=mozilla to login.
Connection closed by 63.245.208.142

I haven't tried the other boxes, since I need to be on the vpn to get to those.

Comment 5

[chizu]

Oops, your [e-mail] account wasn't in the mptvpn group already for some reason. Fixed.

Comment 6

[Zach Lipton [:zach]]

Great. Thank you very much.