View source for User talk:BryanDavis/Archives/2020

{{Archive-header}}

== Setting for tools per page on list? ==

Was wondering if there was a setting to increase the number of entries per page (and if so, where) on https://toolsadmin.wikimedia.org/tools/ [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 03:17, 5 January 2020 (UTC)
:{{ping|DSquirrelGM}} I don't think I made a secret page length setting in that app. The browsing functionality in toolsadmin was really only started and never made into a full featured system. https://tools.wmflabs.org/admin/tools lists them all in one giant page. --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 04:03, 5 January 2020 (UTC)
::Added that to my list of bookmarks, thanks. [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 05:19, 5 January 2020 (UTC)

== Revdels ==

I would recommend some for [[Special:Contributions/Vamdalise_Wikitech_on_WheeIs]] and [[Special:Contributions/Fu'erdai_vamdal]], if for no other reason than [[:w:en:WP:DENY]]. [[User:Koavf|Koavf]] ([[User talk:Koavf|talk]]) 01:34, 13 January 2020 (UTC)

== deleting repository for tool ==

I decided not to use the repository I had previously set up for my tool, but I can't find anything about where exactly to run the remove destroy command from to delete the repository. What server and directory do I need to connect to to run that command? [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 05:37, 13 January 2020 (UTC)
:Or should I send in a ticket to have it removed by an administrator on Phabricator? [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 05:42, 13 January 2020 (UTC)
:: {{u|DSquirrelGM}}, the repository is created on servers which are not directly user accessible. There is also currently no mechanism in https://toolsadmin.wikimedia.org to delete a repository. Leaving an empty repo laying around really does not cause any ongoing issues (a small amount disk on the Phabricator server is really on that is consumed). If having the repo listed really bothers you, your instinct to ask for admin help through a Phabricator ticket is the right one. We do not have a runbook for how to do this type of cleanup yet, so if you decided to make that task please add me (<code>@bd808</code> on Phabricator) as a subscriber so I notice and can figure out the steps needed. --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 18:39, 13 January 2020 (UTC)
::Guess I'll just leave it disabled then, unless you WANT to investigate a potential cleanup project for use later. [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 20:13, 13 January 2020 (UTC)

== ssh connections to login running slow ==

For the past ~15 minutes, the interactive sessions for toolforge seem to be running very slow compared to normal. Doesn't seem to be an issue on my end since the related websites are loading normally. Delays approaching 15-30 seconds. [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 20:21, 18 January 2020 (UTC)
== PHP extensions available on Toolforge? ==

Do you have a list of which PHP extensions are available for use on Toolforge, or do I just need to attempt to use the extensions' functions on a case-by-case basis to check if they're supported? [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 05:28, 21 January 2020 (UTC)
:: See [[toolforge:phpinfo]] --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 16:55, 21 January 2020 (UTC)
<!--
:::So there IS at least one option for storing and retrieving encrypted data (Sodium); that was my primary concern regarding my current project, since storage of other site login credentials will be involved, and one-way encryption isn't really suitable for this use case. [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 01:26, 22 January 2020 (UTC)
:::: This bit, "storage of other site login credentials will be involved", jumped out at me. A public talk page may or may not be the best forum to discuss your project, but I would really like to know more about this. My specific concern is whether or not these login credentials are your own and needed to facilitate the interactions the tool will carry out in multiple environments, or if instead they would be provided by your users. The first case is very normal for a tool in Toolforge or a Cloud VPS project. The latter is not, or at least may not be depending on the type of credentials. Storing OAuth tokens for interactions with Wikimedia wikis is pretty normal, at least for session based storage. There can be issues with storing even OAuth tokens durably so that your tool can operate on behalf of another user. We have seen poor implementations of well meant designs in the past. In the case of OAuth tokens the damage of leaked or potentially leaked credentials can be mitigated by revoking the corresponding grant. Password breaches are not so easily solved because revoking the credentials must be done on a case by case basis. --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 05:32, 22 January 2020 (UTC)
:::::Generally speaking for the tool I'm going to have a note, after testing is completed, to recommend that people use dedicated separate accounts for those reasons, besides having credentials to use for the bot itself. The specific use case is just editing uploaded text-based files, but no other automation facilities. This isn't intended for large-scale page changes. If you have any suggestions to improve on the idea, or want to do some code review once it's ready for operational testing, I'll add you as a maintainer in the latter case.<br /><br />If you have some alternative ideas that don't involve server-side storage of that information but still allow the user to save that information for later use, I'd consider that as well. [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 06:37, 22 January 2020 (UTC)
:::::: Are the credentials for accessing Wikimedia wikis or some other external sites? For the Wikimedia wiki use case, [[mw:OAuth/For Developers]] is the correct way to ask for and receive permissions to edit a wiki as another user. For 3rd party sites, OAuth is still the best solution if the site supports OAuth. Storing other people's passwords is a really tricky thing to do well in general and should be considered a last resort solution. --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 18:16, 22 January 2020 (UTC)
:::::::Third-party sites mostly - at this point I'm considering just using some sort of local browser storage for the user's external login info, instead of my original plan to store in the database. [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 18:48, 22 January 2020 (UTC)
!-->
== registered on freenode ==

Just registered and joined on FreeNode IRC

DSquirrelGM

Letting you know in case you need to do any account verification for permissions, cloaks, etc. - [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 14:00, 2 February 2020 (UTC)
== #toolforge on IRC ==

I started setting up a general chat channel for Toolforge users, and set your account to have channel control. [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 08:22, 14 February 2020 (UTC)
:{{ping|DSquirrelGM}} The {{irc|wikimedia-cloud}} channel is the correct channel for Toolforge discussion on Freenode. A #toolforge channel breaks the convention that the Wikimedia movement has established with Freenode for channel management and verification. I will not be monitoring your new channel. --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 15:26, 14 February 2020 (UTC)
::EDIT: removed the channel registration. [[User:DSquirrelGM|DSquirrelGM]] ([[User talk:DSquirrelGM|talk]]) 16:34, 14 February 2020 (UTC)
== Request ==

Hi! I just made a Toolforge membership request. Can you see, please? [[User:Albertoleoncio|Albertoleoncio]] ([[User talk:Albertoleoncio|talk]]) 19:58, 19 March 2020 (UTC)
== Reverts ==

Hi, I was trying to help out with {{T|260698}} and realised you reverted some of my edits

Is db.svc.eqiad.wmflabs the only ones that shouldn't be changed?

(I also realised I accidentally changed some historical content on [[Portal:Toolforge/Admin/Kubernetes/2020 Kubernetes cluster rebuild plan notes]]) --[[User:Nintendofan885|Nintendofan885]] ([[User talk:Nintendofan885|talk]]) 11:28, 1 October 2020 (UTC)
:{{u|Nintendofan885}} I think that *.svc.eqiad.wmflabs should stay unchanged for now in our docs. The *.db.svc.eqiad.wmflabs for sure have not changed yet (which can be easily verified by trying to lookup any *.db.svc.eqiad1.wikimedia.cloud hostname). There is an upcoming project to build a new Wiki Replica cluster and we are holding back adding database service names using the new scheme for the testing phase of that project. --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 16:00, 1 October 2020 (UTC)
::Oh ok, I'll make sure not to change them for now --[[User:Nintendofan885|Nintendofan885]] ([[User talk:Nintendofan885|talk]]) 19:28, 1 October 2020 (UTC)
== Block: "account $account_name not found" ==

Hello. I've just blocked some spammers and socks (cfr. [[Special:Contributions/Xvideos]] or [[Special:Contributions/Contactgmmzcq]]). I remember we made Wikitech blocks to affect LDAP logins as well in the past ({{PhabT|168692}}). However for these accounts I blocked today, the message "Account xvideos not found" or "Account contactgmzcg not found". I think this is {{phabT|242554}} again. Could you please check if their LDAP login is indeed disabled as expected? I'll leave a note on task as well. Thanks. &mdash;&nbsp;[[User:MarcoAurelio|MarcoAurelio]] ([[User talk:MarcoAurelio|talk]]) 20:06, 16 October 2020 (UTC)
:{{Ping|MarcoAurelio}} Both of these LDAP accounts are disabled. <syntaxhighlight lang=shell-session>
$ ldap '(|(cn=Xvideos)(cn=Contactgmmzcq))' pwdPolicySubentry
dn: uid=mtnwap,ou=people,dc=wikimedia,dc=org
pwdPolicySubentry: cn=disabled,ou=ppolicies,dc=wikimedia,dc=org

dn: uid=contactgmmzcq,ou=people,dc=wikimedia,dc=org
pwdPolicySubentry: cn=disabled,ou=ppolicies,dc=wikimedia,dc=org
</syntaxhighlight>
:I ''think'' that "Account NAME not found" message is emitted from the hook handler which checks for and disables Phabricator accounts that have been linked to the LDAP backed Developer account. --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 23:05, 16 October 2020 (UTC)

== Resigning as contentadmin and oversight ==

Hello. I'd like to resign my contentadmin and oversight access to this wiki. In addition, I shall request [[Special:Contribs/MABot|MABot]] 'bot' flag to be removed as well after I make sure the bot won't be editting here anymore. In any case the first part of the request can proceed. Thank you for your assistance. Best regards, &mdash;&nbsp;[[User:MarcoAurelio|MarcoAurelio]] ([[User talk:MarcoAurelio|talk]]) 21:21, 16 October 2020 (UTC)
:{{Ping|MarcoAurelio}} {{Done}}. Thank you for your help in vandal fighting here on Wikitech. You know where to find me if you want to talk about what led to this decision or if you change your mind. --[[User:BryanDavis|BryanDavis]] ([[User talk:BryanDavis|talk]]) 23:33, 16 October 2020 (UTC)