Page MenuHomePhabricator

Add trebuchet user to wikidev group
Closed, ResolvedPublic

Description

The production trebuchet user (created by puppet) belongs to both the trebuchet and wikidev groups. The LDAP user that Coren created for me in labs (thanks Coren!) is only in the trebuchet group. Having the trebuchet user in the wikidev group allows it to chgrp checked out content so that deployers can update the origin repositories on the deployment host.

Right now in the deployment-prep project usage a sudo chgrp -R wikidev /srv/deploy must be used occasionally to reset the permissions.


Version: unspecified
Severity: normal

Details

Reference
bz62843

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 3:03 AM
bzimport set Reference to bz62843.
bzimport added a subscriber: Unknown Object (MLST).

Bryan, i did that. please let me know if all is fine and it worked this way.

modify-ldap-group --addmembers=trebuchet wikidev

root@silver:~# ldaplist -l group wikidev | grep trebuchet
member: uid=trebuchet,ou=people,dc=wikimedia,dc=org

deployment-bastion:~
bd808$ id trebuchet
uid=604(trebuchet) gid=604(trebuchet) groups=500(wikidev),604(trebuchet)

tin:~
bd808$ id trebuchet
uid=995(trebuchet) gid=10004(trebuchet) groups=10004(trebuchet),500(wikidev)

Looks prod-matching to me. Thanks!