LDAP account for testing Persona

RESOLVED FIXED

Status

Infrastructure & Operations
Infrastructure: LDAP
RESOLVED FIXED
5 years ago
4 years ago

People

(Reporter: jen, Assigned: jen)

Tracking

Details

(Whiteboard: Created moz_lizard1 and moz_lizard2 expiring 9.30.13)

(Assignee)

Description

5 years ago
Karl Theissen is requesting 2 accounts for testing the Persona Account revocation flow to make sure that Mozilla IT can revoke a set of LDAP credentials and the associated account will not be able to continue logging into internal Mozilla properties.

Relevant bug:  https://bugzilla.mozilla.org/show_bug.cgi?id=898176#c1
(Assignee)

Updated

5 years ago
Summary: LDAP accoun for testing Persona → LDAP account for testing Persona
Whiteboard: Created moz_lizard1 and moz_lizard2 expiring 8.30.2013
(Assignee)

Updated

5 years ago
Assignee: infra → jhayashi
(Assignee)

Comment 1

5 years ago
- This is a demo account (https://mana.mozilla.org/wiki/display/SECURITY/Demo+LDAP+accounts) for testing Persona
- Accounts:
      moz_lizard1@mozilla.com
      moz_lizard2@mozilla.com
- Desired Use duration:  30 days
- Desired access: Same as a standard new employe
Testing using these accounts has been completed.

A huge thank you to :nej for all of her help.

These accounts can be deleted at your convenience.
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → FIXED
Reopening to track deletion.
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
(Assignee)

Comment 4

5 years ago
Disabled both accounts.   atoll will you be deleting the accounts?
Ack!  Bug in deployed code -- another round of testing necessary.  Can we extend these accounts another two weeks, please?

Thanks very much.
We're not planning to delete them, disabled/enabled is fine. :nej, can you do the honors?
(Assignee)

Comment 7

5 years ago
Yup - they are both enabled.
(Assignee)

Comment 8

5 years ago
Will follow up with Karl at the end of the month
Whiteboard: Created moz_lizard1 and moz_lizard2 expiring 8.30.2013 → Created moz_lizard1 and moz_lizard2 expiring 9.30.13
(Assignee)

Comment 9

4 years ago
Hi Karl -

Just wanted to follow up, can we go ahead and disable these accounts?

jen
Thanks for checking in, Jen -- yes, these accounts can be disabled now.

--KT.
(Assignee)

Comment 11

4 years ago
Accounts disabled.   I'll close out the bug for now - but let me know if you need them again for testing.
Status: REOPENED → RESOLVED
Last Resolved: 5 years ago4 years ago
Resolution: --- → FIXED

Comment 12

4 years ago
Can we please get a clarification if the requirement is just for an LDAP account and not a zimbra mailbox? Thanks
Status: RESOLVED → REOPENED
Flags: needinfo?(kthiessen)
Resolution: FIXED → ---
To clarify, there are Zimbra mailboxes for the test accounts; do these accounts require Zimbra mailboxes? (Presumably not, but confirming.)
If they are not Zimbra mailboxes, they must forward to valid email addresses -- the fallback IdP will send mail to verify that the user controls the email address.

So technically, no, Zimbra mailboxes are not a hard requirement.
Flags: needinfo?(kthiessen)

Comment 15

4 years ago
If there is no zimbra mailbox needed for this then I'm going to go ahead and close the zimbra mailbox and delete it.

Comment 16

4 years ago
Are these accounts still needed? If so, please update the whiteboard with the expected date that they can be closed.
Flags: needinfo?(kthiessen)
(Assignee)

Comment 17

4 years ago
HI Jabba -

These accounts are already disabled. We just wanted to know whether or not we can free up the associated zimbra accounts.   It sounded like they will need these accounts for testing in the future - so let's delete the zimbra accounts for now - if all they need is a working email address - I can setup a distribution lists with these email addresses for their testing.
Status: REOPENED → RESOLVED
Last Resolved: 4 years ago4 years ago
Resolution: --- → FIXED
Flags: needinfo?(kthiessen)
You need to log in before you can comment on or make changes to this bug.