Bug 2446 - apprentice account request for Florian Hubold
Summary: apprentice account request for Florian Hubold
Status: RESOLVED FIXED
Alias: None
Product: Infrastructure
Classification: Unclassified
Component: Account request (show other bugs)
Version: unspecified
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Sysadmin Team
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-08-17 23:39 CEST by Anssi Hannula
Modified: 2014-05-08 18:05 CEST (History)
3 users (show)

See Also:
Source RPM:
CVE:
Status comment:


Attachments
SSH public key of Florian Hubold (400 bytes, application/x-mspublisher)
2011-08-17 23:39 CEST, Anssi Hannula
Details

Description Anssi Hannula 2011-08-17 23:39:57 CEST
Created attachment 725 [details]
SSH public key of Florian Hubold

Please create an apprentice account for Florian Hubold.
I'll mentor him.

Username: doktor5000
SSH public key attached.
Comment 1 Michael Scherer 2011-08-18 02:14:08 CEST
I promoted him to the apprentice group. For the ssh key, he has to add it on identity directly :
- connect on identity.mageia.org ( or identity-trunk.mageia.org, as this is nicer )
- add a attribute ( bottom of the form ) of type : sshPublicKey , wth the content of the public key for the file 

( and by asking to packagers to do it, we hope that some of them will remember how to change their key without asking to admins later :) )

Once the key is in ldap, a cron job update it on the svn server every 10 minutes. People can use their password to checkout and commit. 

To check that everything work, just use ssh svn.mageia.org, and type the password if needed. This should print a list of groups, and a message about shell access being restricted.

Please also note that once having a svn commit access, the password reset feature requires to be acknowledged by a admin.

CC: (none) => misc

Comment 2 Florian Hubold 2011-08-19 21:04:14 CEST
I have added it. Is it intended that the added field for sshPublicKey is empty?

It also was possible to add a empty sshPublicKey, because i accidentaly thought it asked for the file, not for the contents. Also it was not possible to remove the empty sshPublicKey afterwards.

But something seems to not be working. I have a setup following http://mageia.org/wiki/doku.php?id=basic_ssh_configuration_for_packagers and the keychain method.
After trying ssh svn.mageia.org it looks like this:

$ ssh svn.mageia.org
Password:
Password:
Password:
doktor5000@svn.mageia.org's password:

Whatever i enter as a password is not accepted. What also bugs me is that after the third try the password prompt changes. What's going on here? Where have i made a mistake?
Comment 3 Nicolas Vigier 2011-08-19 21:10:18 CEST
There is no ssh key set on your account. Only an empty one. So I removed the empty sshPublicKey and you should add it again.

CC: (none) => boklm

Comment 4 Florian Hubold 2011-08-19 23:26:03 CEST
Thanks for the fast response, readded it and now it's working, it seems:

[doktor5000@mageia1 ~]$ ssh svn.mageia.org
Creating directory '/home/doktor5000'.
You tried to run a interactive shell.
Sorry, you are not allowed to execute that command.
You are member of the following groups :
mga-users mga-shell_access mga-packagers-committers
Connection to svn.mageia.org closed.

Would that be correct so far?
Comment 5 Anssi Hannula 2011-08-19 23:31:37 CEST
Yes.
Comment 6 Florian Hubold 2011-08-27 22:15:24 CEST
Apprentice account active. Thanks :)

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 7 Anssi Hannula 2012-03-13 00:10:49 CET
Please give Florian the submission rights.

Status: RESOLVED => REOPENED
Resolution: FIXED => (none)

Comment 8 Nicolas Vigier 2012-03-19 14:32:21 CET
Florian now has submission rights.

Status: REOPENED => RESOLVED
Resolution: (none) => FIXED

Comment 9 Florian Hubold 2012-03-20 22:14:41 CET
Thanks :)
Nicolas Vigier 2014-05-08 18:05:33 CEST

CC: boklm => (none)


Note You need to log in before you can comment on or make changes to this bug.