623715 - give access to loaned buildslave to developer

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps, task)

Description

[Mike Taylor [:bear]]

developer Daniel Brooks (:db48x) is being given access to machine 

talos-r3-fed64-040.build.mozilla.org

and will need to be given access thru the vpn/firewall

Comment 1

[Mike Taylor [:bear]]

bumping priority to poke to find out what is blocking this from happening

Comment 2

[matthew zeier [:mrz]]

We don't have an easy method to get non-employees access to build resources.  Yet, anyways.

Netops is working on an SSL VPN that we can use for this and should have it this week.  Will that timing work?

Comment 3

[Mike Taylor [:bear]]

ah - didn't realize he was non-moco.

yes, this week will have to work as that will be the only secure way for him to access the resource.

Comment 5

[Mike Taylor [:bear]]

backing out my errant dup close

Comment 6

[Daniel Brooks [:db48x]]

(In reply to comment #2)
> Netops is working on an SSL VPN that we can use for this and should have it
> this week.  Will that timing work?

Sounds good. Is there an ETA?

Comment 7

[Ravi Pina [:ravi]]

I should have a working VPN config tomorrow.  How will you be connecting?  SSH?

Comment 8

[Daniel Brooks [:db48x]]

(In reply to comment #7)
> I should have a working VPN config tomorrow.  How will you be connecting?  SSH?

Yes, SSH sounds good. This isn't my normal computer though, I'll need to create another key...

Comment 9

[Daniel Brooks [:db48x]]

Attachment: public key

Please add this public key to my account. Thanks.

Comment 10

[Ravi Pina [:ravi]]

If you have a local login to the box I can get you the URL to connect right now.  If you can only connect with an SSH key I likely won't have this complete for you until tomorrow.

Comment 11

[Ravi Pina [:ravi]]

Okay, I have the SSL VPN up and running.  I just need to discuss which is the appropriate LDAP attribute/group for you so you can have access.  I'll update the bug tomorrow with instructions for connecting.

Comment 12

[Ravi Pina [:ravi]]

Okay, give this a go:

https://ssl1.sjc1.mozilla.com/

Login with your Mozilla credentials and select Community from the drop down menu.

Under the Client Application Sessions group is Network Connect -- click Start.  This will launch a Java applet which essentially is a VPN client.  It should indicate a successful connect at which time you should be able to ssh to talos-r3-fed64-040.build.mozilla.org from a local terminal.

This is a new deployment so there are only self-signed certificates at the moment.

FF4 is also cot currently supported.  3.6, Chrome, or Safari are.

Comment 13

[Daniel Brooks [:db48x]]

(In reply to comment #12)
> Okay, give this a go:
> 
> https://ssl1.sjc1.mozilla.com/
> 
> Login with your Mozilla credentials and select Community from the drop down
> menu.

I'm unable to log in. I'm quite sure that I'm typing my password in correctly...

> FF4 is also cot currently supported.  3.6, Chrome, or Safari are.

That's a bit unusual. Would you mind elaborating? I'm merely curious.

Comment 14

[Ravi Pina [:ravi]]

What login are you using? Are you able to use it elsewhere that uses LDAP auth? 

What is unusual?

Comment 15

[Ravi Pina [:ravi]]

I see failed logins as '[e-mail]'.  Would you like me to reset your password, perhaps?

Comment 16

[Daniel Brooks [:db48x]]

(In reply to comment #15)
> I see failed logins as '[e-mail]'.  Would you like me to reset your
> password, perhaps?

Yea, that's me. Shouldn't need to reset the password, I was able to log into (ironically) the password reset page successfully.

Comment 17

[Daniel Brooks [:db48x]]

(In reply to comment #14)
> What is unusual?

I'm merely curious about why FF4.0 isn't supported. Is there a bug?

Comment 18

[Ravi Pina [:ravi]]

Puzzling.  I have a test account with near identical settings as yours (username, password, and ssh key are different) and am able to login with success.

Perhaps try resetting the password.  Maybe something is wedged somewhere?  Alternately I could reset it and test with the temp one and then on success have you test with it.

Comment 19

[Daniel Brooks [:db48x]]

(In reply to comment #18)
> Puzzling.  I have a test account with near identical settings as yours
> (username, password, and ssh key are different) and am able to login with
> success.
> 
> Perhaps try resetting the password.  Maybe something is wedged somewhere? 
> Alternately I could reset it and test with the temp one and then on success
> have you test with it.

We might as well try that.

Comment 20

[Ravi Pina [:ravi]]

Worked as expected with the generated password.  Give it a go with that one and then again with whatever password you end up changing it to.

Comment 21

[Daniel Brooks [:db48x]]

Yea, now it works just fine. I guess I was mistyping my password on this page but not others after all.

Comment 22

[Ravi Pina [:ravi]]

Glad you got in.  I'll let you close out once you successfully connect.

Re: FF4 - Something changed that during the install it asks for a system password to complete.  After correctly entering in the password it stalls.  I've reached out to the vendor to ask them if they have FF4 in mind, but I suspect they may be reluctant to allocate time to it while it is still in beta and we haven't announced an actual release date.

On OSX it will launch in a broken state if you install the app using any of the supported browsers.  A force quit/kill is the only thing that works to quit the failed launch of the Java applet.

Comment 23

[Daniel Brooks [:db48x]]

Ok, this is working fairly well, although I can't look up domain names, so it's not perfect.

Also, I forgot and did it in FF4.0, but it seems to have worked ok. It did ask me to allow it to run downloaded programs about 8 times or so though.

Comment 24

[Daniel Brooks [:db48x]]

Excellent, that last change got the dns working as well. Thanks Ravi.

Comment 25

[matthew zeier [:mrz]]

Which fx4 version worked for you?  Trunk?  b8?  b9?

Comment 26

[Daniel Brooks [:db48x]]

(In reply to comment #25)
> Which fx4 version worked for you?  Trunk?  b8?  b9?

4.0b9 on Windows 7.