Page MenuHomePhabricator

Project Bastion has service groups
Closed, InvalidPublic

Description

This doesn't look like it should have been possible; the service group seems to be not in use AFAICS.

scfc@tools-bastion-03:~$ ldaplist -l servicegroups bastion.\*

If you are still relying on ldaplist and not using ldapsearch,
please comment on https://phabricator.wikimedia.org/T114063
before 30 August 2016. If nobody comments, ldaplist will be removed!


dn: cn=bastion.deadlinkfinder,ou=servicegroups,dc=wikimedia,dc=org
        objectClass: groupofnames
        objectClass: posixgroup
        objectClass: top
        member: uid=santosh,ou=people,dc=wikimedia,dc=org
        member: uid=bastion.deadlinkfinder,ou=people,ou=servicegroups,dc=wikimedia,dc=org
        gidNumber: 52591
        cn: bastion.deadlinkfinder

dn: cn=bastion.jybot,ou=servicegroups,dc=wikimedia,dc=org
        objectClass: groupofnames
        objectClass: posixgroup
        objectClass: top
        member: uid=javad,ou=people,dc=wikimedia,dc=org
        gidNumber: 52458
        cn: bastion.jybot

dn: cn=bastion.linktranslator,ou=servicegroups,dc=wikimedia,dc=org
        objectClass: groupofnames
        objectClass: posixgroup
        objectClass: top
        member: uid=nadwi,ou=people,dc=wikimedia,dc=org
        member: uid=linktranslator,ou=people,dc=wikimedia,dc=org
        member: uid=bastion.linktranslator,ou=people,ou=servicegroups,dc=wikimedia,dc=org
        gidNumber: 52642
        cn: bastion.linktranslator
scfc@tools-bastion-03:~$

Details

Reference
bz62537

Related Objects

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:00 AM
bzimport set Reference to bz62537.
bzimport added a subscriber: Unknown Object (MLST).

And now there are three (cf. also bug #64792):

dn: cn=bastion.local-cobain,ou=servicegroups,dc=wikimedia,dc=org
objectClass: groupofnames
objectClass: posixgroup
objectClass: top
member: uid=anskar-cawiki,ou=people,dc=wikimedia,dc=org
gidNumber: 51843
cn: bastion.local-cobain
dn: cn=bastion.local-theherald,ou=servicegroups,dc=wikimedia,dc=org
objectClass: groupofnames
objectClass: posixgroup
objectClass: top
member: uid=theherald,ou=people,dc=wikimedia,dc=org
gidNumber: 51898
cn: bastion.local-theherald
dn: cn=bastion.rezabot,ou=servicegroups,dc=wikimedia,dc=org
objectClass: groupofnames
objectClass: posixgroup
objectClass: top
member: uid=reza,ou=people,dc=wikimedia,dc=org
gidNumber: 51024
cn: bastion.rezabot

Unused groups should be deleted imho. And it shouldn't be a big thing to delete this groups.

Krenair renamed this task from Project Bastion has a service group "local-rezabot" to Project Bastion has service groups.Mar 18 2015, 4:05 PM
Krenair updated the task description. (Show Details)
Krenair set Security to None.
Krenair removed a subscriber: Unknown Object (MLST).
Krenair subscribed.

Now we also have ziad, bastionramtonz, and jybot

Aklapper subscribed.

Now there are deadlinkfinder, jybot and linktranslator.

bd808 subscribed.

Cleaned up at some point in the past.

$ ldap '(&(objectClass=groupofnames)(cn=bastion.*))' dn
# pagedresults: cookie=