OSGeo.org › OSGeo Board and Committees › OSGeo System Administration Committee

Re: [OSGeo] #165: Wiki LDAP integration

_‹ Previous Topic Next Topic _›

Classic

List

Threaded

37 messages Options

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: astrodog
Type: task | Status: assigned
Priority: normal | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution:
Keywords: ldap, wiki |
------------------------+---------------------------------------
Changes (by robe):

* milestone: => Sysadmin Contract 2021-I

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:61>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: astrodog
Type: task | Status: assigned
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution:
Keywords: ldap, wiki |
------------------------+---------------------------------------
Changes (by robe):

* priority: normal => major

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:62>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: new
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution:
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by martin):

> Replying to [comment:56 strk]:

> I think the
[https://git.osgeo.org/gitea/hexmode/WikiToLDAP/commit/6d2bdf43f0 changes
I just committed] will fix this. Can we test the updated code?
>
> martin: If I reset the db would you have time to test again?

I'm sorry, apparently that message slipped through ....

Anyhow, I checked again and now the migration completed successfully,
moving the user page and updating the contributions included. Wonderful!

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:64>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: new
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution:
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by robe):

I've incorporated hexmode's install scripts into an ansible playbook. In
addition to the wiki ldap, he provided us with a bunch of other goodies
incorporated in this playbook -- e.g. restructuring to fit wiki modern
convention, using memcached etc.

I have it in this repo https://git.osgeo.org/gitea/sac/ansible-
deployment/src/branch/master/deployment/roles/wiki

I tested it on a backup of wiki of a week ago. I'm going to do a couple
more final tests on new snapshot of wiki before go live.

I'm planning to go live to be this coming Friday to give people a week to
test on. I'll send an official announcement after I've done some final
ansible test runs.

Testing env is:

https://staging.wiki.osgeo.org

(NOTE: I'm doing a couple more trial runs of my ansible script - so that
staging link above may be up and down depending on my testing phase)

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:65>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: closed
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution: fixed
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by wildintellect):

Just ran through the update:
1. Can we add some info to the login page (or a link), so people know they
have to use LDAP (and if they don't have LDAP make one) - I suspect many
people won't have seen the email on Discuss and will be confused.
2. After completing the merge, the continue button takes me back to
starting the merge. It did finish and navigating away seems fine, but that
was odd, maybe continue should send people to homepage.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:67>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: closed
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution: fixed
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by robe):

2. Happened to me a number of times, but I couldn't replicate the issue
consistently.

Regarding the #1, the Request login page takes you to the LDAP create
page.
I also changed the main site where it talks to wiki to say you need an
LDAP account and changed the LDAP create page to note wiki is one of the
things you need an LDAP account for.

I thought #1 was pretty clear for old users, as it does find your old
account and tells you to merge. Not sure what more we can add to that
page to make it clear without being more confusing. Perhaps we can have
link to the detailed instructions like what hexmode had provided.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:68>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: closed
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution: fixed
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by martin):

I performed the migration to LDAP user "martin" on the prod instance but,
unfortunately, in contrast to the preceding test on staging, my user page
was not migrated and my edits are still owned by the old Wiki user
"Mspott".

This time I started the migration on prod by logging in as the old Wiki
user first .... wait let me cross-check. Oh, re-running the migration on
the current staging leads to the same result when logging in as LDAP user
first. Obviously the procedure has changed since my last - successful -
test.

Meanwhile I moved the user page manually on prod, but, of course, this
still doesn't fix the ownership of my edits.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:71>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: closed
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution: fixed
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by hexmode):

Replying to [comment:69 neteler]:
> Hi, I am stuck in 2) -> endless loop, in which the continue button takes
me back to starting the merge, rejecting the merge.
>
> User name "neteler"

Can you log in with your ldap user? What happens if you do?

> Another report is at https://github.com/OSGeo/osgeo/issues/233

I replied to that one.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:73>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: closed
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution: fixed
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by neteler):

Replying to [comment:72 hexmode]:
> If you have access to https://wiki.osgeo.org/wiki/Special:UserMerge you
can merge your old user with your new one. The old user will now be
"Wiki-OLDUSERNAME".

I am part of SAC and (think) to also be part of the group "Bureaucrats",
but I get

{{{
Permission error
Jump to navigation
Jump to search

You do not have permission to merge users, for the following reason:

The action you have requested is limited to users in the group:
Bureaucrats.
}}}

Maybe robe or strk could check that please?

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:74>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: closed
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution: fixed
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by robe):

It's very odd though, cause when I look here

https://wiki.osgeo.org/w/index.php?title=Special:ListUsers&group=bureaucrat

I am listed as a bureaucrat and so is neteler. Could it be the error is
wrong and it's for a different reason, like we are in LDAP mode and that
doesn't fully apply?

But it could be just our accounts for some reason did not fully merge as
ours shows "In process of merging".

I see wildintellect's account doesn't show that strange message, so
perhaps he can do it.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:76>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: closed
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution: fixed
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by robe):

I've logged the issue in
https://git.osgeo.org/gitea/hexmode/WikiToLDAP/issues/8

@neteler I edited the mysql database to put back your group permissions
and did so with mine as well. I was going to leave the others as is until
we determine the culprit of the issue. The problem does not consistently
happen so hard to troubleshoot. Some people's groups seem to come thru
fine and some do not and as mentioned it's not even consistent by user as
my groups came thru fine when testing in staging but did not come thru
fine in prod. Wildintellect's seems to have come thru fine in prod.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:78>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo

#165: Wiki LDAP integration
------------------------+---------------------------------------
Reporter: crschmidt | Owner: robe
Type: task | Status: closed
Priority: major | Milestone: Sysadmin Contract 2021-I
Component: Wiki | Resolution: fixed
Keywords: ldap, wiki |
------------------------+---------------------------------------

Comment (by neteler):

Thanks for your efforts. I can login again but something is still wrong

- the user is still linked to an old page (or should the content be
flipped which I could do)
- https://wiki.osgeo.org/wiki/User:Neteler which should be
- https://wiki.osgeo.org/wiki/Markus_Neteler
- I have no edit rights
- perhaps because still being in "Accounts in progress of converting"
- the list of my contributions (hey, since 2006 :-) ) are currently 0
- see https://wiki.osgeo.org/wiki/Special:Contributions/Neteler

I suspect that the migration of my user account didn't work well so far.

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/165#comment:79>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.

_______________________________________________
Sac mailing list
[hidden email]
https://lists.osgeo.org/mailman/listinfo/sac

OSGeo

Re: [OSGeo] #165: Wiki LDAP integration

In reply to this post by OSGeo