Changing my shell preference - Cloud

Martin Urbanec

31 Dec 31 Dec

12:41 p.m.

Hello, your password on tools is your Wikitech password. Anyway, what you tried won't work because it works with /etc/passwd and tools authorize you using LDAP. The only one think that comes to my mind is to add /usr/bin/zsh to the .bashrc file (and probably delete the rest of its content as it won't be needed). But this is a hack, maybe there is some LDAP field that can be used for the same. I have no way how I can examine the LDAP thing because I'm not an admin :). Martin ne 31. 12. 2017 v 5:00 odesílatel Huji Lee <huji.huji(a)gmail.com> napsal:

...

Is there a way to change my preferred shell on the Clouds to zsh? When I try chsh -s `which zsh` it asks for a password, which I don't have of course. Thanks, Huji _______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

Reply

Martin Urbanec

4:41 p.m.

At dev.tools.wmflabs.org: command not found. At bastion.wmflabs.org the command exists, ask for LDAP password but do nothing for both bastion and dev.tools.wmflabs.org. Martin ne 31. 12. 2017 v 16:35 odesílatel Chad Horohoe <chorohoe(a)wikimedia.org> napsal:

...

It can be set in LDAP. Does `chsh.ldap` work for you? It'll prompt for your LDAP password, I believe. -Chad On Sun, Dec 31, 2017 at 3:42 AM Martin Urbanec < martin.urbanec(a)wikimedia.cz> wrote:

Hello, your password on tools is your Wikitech password. Anyway, what you tried won't work because it works with /etc/passwd and tools authorize you using LDAP. The only one think that comes to my mind is to add /usr/bin/zsh to the .bashrc file (and probably delete the rest of its content as it won't be needed). But this is a hack, maybe there is some LDAP field that can be used for the same. I have no way how I can examine the LDAP thing because I'm not an admin :). Martin ne 31. 12. 2017 v 5:00 odesílatel Huji Lee <huji.huji(a)gmail.com> napsal:

Is there a way to change my preferred shell on the Clouds to zsh? When I try chsh -s `which zsh` it asks for a password, which I don't have of course. Thanks, Huji _______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

_______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

Reply

Alex Monk

4:46 p.m.

getent passwd* On 31 Dec 2017 15:46, "Alex Monk" <krenair(a)gmail.com> wrote: Does it change what's shown at `ldapsearch -x uid=yourusername loginShell` or `getent passed yourusername`? On 31 Dec 2017 15:41, "Martin Urbanec" <martin.urbanec(a)wikimedia.cz> wrote:

...

At dev.tools.wmflabs.org: command not found. At bastion.wmflabs.org the command exists, ask for LDAP password but do nothing for both bastion and dev.tools.wmflabs.org. Martin ne 31. 12. 2017 v 16:35 odesílatel Chad Horohoe <chorohoe(a)wikimedia.org> napsal:

It can be set in LDAP. Does `chsh.ldap` work for you? It'll prompt for your LDAP password, I believe. -Chad On Sun, Dec 31, 2017 at 3:42 AM Martin Urbanec < martin.urbanec(a)wikimedia.cz> wrote:

Hello, your password on tools is your Wikitech password. Anyway, what you tried won't work because it works with /etc/passwd and tools authorize you using LDAP. The only one think that comes to my mind is to add /usr/bin/zsh to the .bashrc file (and probably delete the rest of its content as it won't be needed). But this is a hack, maybe there is some LDAP field that can be used for the same. I have no way how I can examine the LDAP thing because I'm not an admin :). Martin ne 31. 12. 2017 v 5:00 odesílatel Huji Lee <huji.huji(a)gmail.com> napsal:

Is there a way to change my preferred shell on the Clouds to zsh? When I try chsh -s `which zsh` it asks for a password, which I don't have of course. Thanks, Huji _______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

_______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

Reply

Alex Monk

5:05 p.m.

Maybe our instances are not set to pull loginShell info from LDAP? On 31 Dec 2017 16:03, "Martin Urbanec" <martin.urbanec(a)wikimedia.cz> wrote:

...

Just the first one, second one stays to be /bin/bash. Martin ne 31. 12. 2017 v 16:47 odesílatel Alex Monk <krenair(a)gmail.com> napsal:

getent passwd* On 31 Dec 2017 15:46, "Alex Monk" <krenair(a)gmail.com> wrote: Does it change what's shown at `ldapsearch -x uid=yourusername loginShell` or `getent passed yourusername`? On 31 Dec 2017 15:41, "Martin Urbanec" <martin.urbanec(a)wikimedia.cz> wrote:

At dev.tools.wmflabs.org: command not found. At bastion.wmflabs.org the command exists, ask for LDAP password but do nothing for both bastion and dev.tools.wmflabs.org. Martin ne 31. 12. 2017 v 16:35 odesílatel Chad Horohoe <chorohoe(a)wikimedia.org> napsal:

It can be set in LDAP. Does `chsh.ldap` work for you? It'll prompt for your LDAP password, I believe. -Chad On Sun, Dec 31, 2017 at 3:42 AM Martin Urbanec < martin.urbanec(a)wikimedia.cz> wrote: > Hello, > > your password on tools is your Wikitech password. Anyway, what you > tried won't work because it works with /etc/passwd and tools > authorize you using LDAP. The only one think that comes to my mind is to > add /usr/bin/zsh to the .bashrc file (and probably delete the rest of > its content as it won't be needed). But this is a hack, maybe there is some > LDAP field that can be used for the same. I have no way how I can examine > the LDAP thing because I'm not an admin :). > > Martin > > ne 31. 12. 2017 v 5:00 odesílatel Huji Lee <huji.huji(a)gmail.com> > napsal: > >> Is there a way to change my preferred shell on the Clouds to zsh? >> When I try chsh -s `which zsh` it asks for a password, which I >> don't have of course. >> >> Thanks, >> Huji >> _______________________________________________ >> Wikimedia Cloud Services mailing list >> Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) >> https://lists.wikimedia.org/mailman/listinfo/cloud > > _______________________________________________ > Wikimedia Cloud Services mailing list > Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) > https://lists.wikimedia.org/mailman/listinfo/cloud _______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

_______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

Reply

Huji Lee

5:31 p.m.

At login.tools.wmflabs.org the command chsh.ldap does not exist either. On Sun, Dec 31, 2017 at 10:41 AM, Martin Urbanec < martin.urbanec(a)wikimedia.cz> wrote:

...

At dev.tools.wmflabs.org: command not found. At bastion.wmflabs.org the command exists, ask for LDAP password but do nothing for both bastion and dev.tools.wmflabs.org. Martin ne 31. 12. 2017 v 16:35 odesílatel Chad Horohoe <chorohoe(a)wikimedia.org> napsal:

It can be set in LDAP. Does `chsh.ldap` work for you? It'll prompt for your LDAP password, I believe. -Chad On Sun, Dec 31, 2017 at 3:42 AM Martin Urbanec < martin.urbanec(a)wikimedia.cz> wrote:

Hello, your password on tools is your Wikitech password. Anyway, what you tried won't work because it works with /etc/passwd and tools authorize you using LDAP. The only one think that comes to my mind is to add /usr/bin/zsh to the .bashrc file (and probably delete the rest of its content as it won't be needed). But this is a hack, maybe there is some LDAP field that can be used for the same. I have no way how I can examine the LDAP thing because I'm not an admin :). Martin ne 31. 12. 2017 v 5:00 odesílatel Huji Lee <huji.huji(a)gmail.com> napsal:

Is there a way to change my preferred shell on the Clouds to zsh? When I try chsh -s `which zsh` it asks for a password, which I don't have of course. Thanks, Huji _______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

_______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

Reply

Bryan Davis

9:14 p.m.

On Sun, Dec 31, 2017 at 10:02 AM, Alex Monk <krenair(a)gmail.com> wrote:

...

I think there might just be some caching going on. I ran chsh.ldap on bastion.wmflabs.org and when I went to deployment-puppetmaster02.deployment-prep.eqiad.wmflabs, it executed the new shell. bastion still didn't.

We run nscd (<https://linux.die.net/man/8/nscd>) on every host in Cloud VPS to cache NSS lookup data. The cache time for passwd data is set to 3600 seconds (1 hour). Bryan -- Bryan Davis Wikimedia Foundation <bd808(a)wikimedia.org> [[m:User:BDavis_(WMF)]] Manager, Cloud Services Boise, ID USA irc: bd808 v:415.839.6885 x6855

Reply

Francisco Venancio

3:15 a.m.

While 'ldapsearch -x uid=tools.huji loginShell' returns 'loginShell: /usr/bin/zsh'; 'ldapsearch -x uid=tools.huji loginShell' returns 'loginShell: /bin/bash'. Since 'become huji' is effectively 'sudo -niu tools.huji' (after running some checks) it will check what the configured shell is for tools.huji and use bash right now. Tomorrow morning I will check into changing that for you. Cheers, ------------------------------------- Chico Venancio Cloud Services Tech Support On Sun, Jan 28, 2018 at 9:27 PM, Huji Lee <huji.huji(a)gmail.com> wrote:

...

The method proposed above works with my own username (huji). But when I do "become huji" (my bot's name is also huji), the new "tools.huji" account still uses bash. How can I make that one use another shell? On Sun, Dec 31, 2017 at 3:14 PM, Bryan Davis <bd808(a)wikimedia.org> wrote:

On Sun, Dec 31, 2017 at 10:02 AM, Alex Monk <krenair(a)gmail.com> wrote:

I think there might just be some caching going on. I ran chsh.ldap on bastion.wmflabs.org and when I went to deployment-puppetmaster02.deployment-prep.eqiad.wmflabs, it executed the new shell. bastion still didn't.

We run nscd (<https://linux.die.net/man/8/nscd>) on every host in Cloud VPS to cache NSS lookup data. The cache time for passwd data is set to 3600 seconds (1 hour). Bryan -- Bryan Davis Wikimedia Foundation <bd808(a)wikimedia.org> [[m:User:BDavis_(WMF)]] Manager, Cloud Services Boise, ID USA irc: bd808 v:415.839.6885 x6855 _______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

_______________________________________________ Wikimedia Cloud Services mailing list Cloud(a)lists.wikimedia.org (formerly labs-l(a)lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/cloud

Reply