455790 - Give Cww access to daily dumps on khan

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: Account Requests, task)

Description

[[:Cww]]

To make it easier to collect weekly metrics, I'd like to have access to the daily database dumps on kirk.mozilla.org.

Comment 1

[Reed Loden [:reed]]

morgamic: approval?

Comment 2

[Michael Morgan [:morgamic]]

We have daily dumps on kirk?

Comment 3

[[:Cww]]

That's what laura said.

I don't even know what kirk is... but I assume part of fixing this bug is telling me how to use the credentials I'd get.

Comment 4

[Laura Thomson :laura]

khan, not kirk.  Sorry for the confusion.

Comment 5

[Michael Morgan [:morgamic]]

Is Cww a contractor or volunteer?

Comment 6

[[:Cww]]

I'm a contractor.

Comment 7

[Aravind Gottipati [:aravind]]

morgamic:  So.. should I just grant him access to this machine?

Comment 8

[Michael Morgan [:morgamic]]

Yeah, if he's a contractor it's okay with me.

Comment 9

[Aravind Gottipati [:aravind]]

@cww: What is your mozilla LDAP account?  I will grant that account access to this box.

Comment 10

[[:Cww]]

[e-mail]

Comment 11

[Laura Thomson :laura]

aravind: ping?

Comment 12

[Aravind Gottipati [:aravind]]

(In reply to comment #11)
> aravind: ping?

Sorry, I meant to comment here, but I forgot.  I am not comfortable granting access to our systems to a contractor based on their external id.  All contractors working for us should have mozilla.com accounts and we should be granting/revoking access to those mozilla.com accounts.  AFAIK, this is how we have been doing things, but I could be wrong.

So, I'd like Cww to have a mozilla.com account, and grant access to that account.

Comment 13

[David Tenser [:djst]]

Aravind, is there a different level of security with an @mozilla.com LDAP account compared to another account address? If it is, cww should have an @mozilla.com account, otherwise please use the current one. 

I'm cww's manager so whichever alternative you choose above, a=djst. Thanks!

Comment 14

[Aravind Gottipati [:aravind]]

(In reply to comment #13)
> If it is, cww should have an
> @mozilla.com account, otherwise please use the current one. 
> 

There will be,  mozilla.com accounts and folks with those accounts have access to corporate resources.

> I'm cww's manager so whichever alternative you choose above, a=djst. Thanks!

Cool, I need to know his full/last name and whatever else sean uses on the new hire form here https://intranet.mozilla.org/workermgmt/.

Comment 15

[[:Cww]]

I don't have access to that page but if you e-mail me (my bugmail address works fine) I can reply with what info you need.

Comment 16

[Reed Loden [:reed]]

(In reply to comment #15)
> I don't have access to that page but if you e-mail me (my bugmail address works
> fine) I can reply with what info you need.

Your manager needs to fill it out, not you. :)

Comment 17

[Aravind Gottipati [:aravind]]

Please attach an LDAP public key.  I will need that to grant you access to khan.

Comment 18

[Reed Loden [:reed]]

(In reply to comment #17)
> Please attach an LDAP public key.  I will need that to grant you access to
> khan.

I believe Aravind means "SSH public key" there, fyi.

Comment 19

[David Tenser [:djst]]

Is there a reason why we can't just export the relevant db tables of SUMO needed to do the poll count analysis without granting access to corporate resources? The poll data is already public info, it's just that the way it's presented in the admin panel of TikiWiki is too complicated to efficiently do analysis. 

Just a separate dump that is e.g. mailed to him would work well, unless of course there are other reason why we're not considering this.

Comment 20

[[:Cww]]

Attachment: Cww's SSH public key

Attach'd

Comment 21

[Aravind Gottipati [:aravind]]

(In reply to comment #19)
> Just a separate dump that is e.g. mailed to him would work well, unless of
> course there are other reason why we're not considering this.

Mainting such one off jobs over time is hard.  Its that many more cron jobs we have to keep track of, etc.  Granting a contractor access to a dev box is easier to maintain.  That's the reason I was insisting on getting him access this way.

Comment 22

[Aravind Gottipati [:aravind]]

(In reply to comment #20)
> Created an attachment (id=341374) [details]
> Cww's SSH public key
> 
> Attach'd

Cool, I added your key to your account.  You uid is cwang.  Please try to login to khan.mozilla.org once you vpn in.  Laura should be able to point you to the db dump files.

Comment 23

[David Tenser [:djst]]

Thanks for the explanation. Anything needed from me?