[Labs-l] IMPORTANT: ldap renaming -- possible interruptions to logins, sudo, dns

[Andrew Bogott]

If your instances aren't on the list then you most likely have nothing 
to worry about!  Normal instances won't have this issue, it's only those 
that have a local puppetmaster.

On 9/28/14 6:00 PM, Frank Sainsbury wrote:
> Hi All
> fulltext and fulltext-pup are new instances not on list   at the 
> bottom of https://wikitech.wikimedia.org/wiki/Ldap_rename.
>
> Brians info doesn’t get me started as I have no directory: i.e.: cd 
> /var/lib/git/operations/puppet
> fails?
>
>
> and anyway I want them to use puppet master at labs-l? but seem to 
> have errors, see previous post.
>
>
> I must have missed something.
>
> What?
>
> ps if I won’t loose acces, then happy to wait.  I will backup enough 
> to do it again… 8(.
>
>
> Frank Sainsbury
> fsainsbu at gmail.com <mailto:fsainsbu at gmail.com>
> www.itsoil.com.au <http://www.itsoil.com.au>
>
>
>
>
> On 27 Sep 2014, at 3:47 am, Bryan Davis <bd808 at wikimedia.org 
> <mailto:bd808 at wikimedia.org>> wrote:
>
>> On Thu, Sep 25, 2014 at 7:56 PM, Andrew Bogott <abogott at wikimedia.org 
>> <mailto:abogott at wikimedia.org>> wrote:
>>> Quick summary:
>>>
>>> If you are only a tool labs user, you can ignore this email.
>>>
>>> If you work in a non-tools project and all of your instances are happily
>>> puppetized and talking to the central puppet server, you can 
>>> probably ignore
>>> this email.
>>>
>>> If you work in a non-tools project and you have a local puppetmaster 
>>> or use
>>> role::puppet::self, you MUST apply the following patches to your 
>>> instance,
>>> or you may LOSE ALL ACCESS to your labs instances:
>>>
>>> https://gerrit.wikimedia.org/r/#/c/159740
>>> https://gerrit.wikimedia.org/r/#/c/162689
>>
>> Here's what I did to update one host that has role::puppet::self applied:
>>
>> $ cd /var/lib/git/operations/puppet
>> $ sudo git fetch origin
>> $ sudo git rebase origin/production
>> ## verified with git log that Andrew's patches were present locally
>> $ sudo puppet agent --test --verbose
>> ## Could not start Service[puppetmaster] failure messages seen
>> $ sudo service puppetmaster stop
>> $ sudo service puppetmaster start
>> $ sudo puppet agent --test --verbose
>> ## clean puppet run
>>
>> Hope that helps someone.
>>
>> Bryan
>> -- 
>> Bryan Davis              Wikimedia Foundation    <bd808 at wikimedia.org 
>> <mailto:bd808 at wikimedia.org>>
>> [[m:User:BDavis_(WMF)]]  Sr Software Engineer            Boise, ID USA
>> irc: bd808                                        v:415.839.6885 x6855
>>
>> _______________________________________________
>> Labs-l mailing list
>> Labs-l at lists.wikimedia.org <mailto:Labs-l at lists.wikimedia.org>
>> https://lists.wikimedia.org/mailman/listinfo/labs-l
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20140928/baf4e7ce/attachment-0001.html>