On 3/24/16 9:19 AM, Moritz Schubotz wrote:
Hi Andrew,

now, it works nicely. I don't know what was wrong but there were no
messages the other day
for example instead of
That's great!  Whoever fixed that, take a bow :)

-A


Download a mobile app for two-factor authentication (such as Google
Authenticator) on to your phone.

it showed

<oathauth-step1-test>

So I'm now set up as two factor auth user.

Best
Moritz

On Thu, Mar 24, 2016 at 10:10 AM, Andrew Bogott <abog...@wikimedia.org> wrote:
On 3/23/16 6:42 PM, Moritz Schubotz wrote:
Hi Andrew,

enabling two factor authentification looks not very well documented.
I see no text just the i18n labels
<oathauth-step1-test>
Is there a guide?

Can you send me a screenshot of what you're seeing?  When I setup 2fa there
are clear step-by-step instructions on the page that displays the initial QR
code.

-A


Best
Moritz


On Wed, Mar 23, 2016 at 6:44 PM, Andrew Bogott <abog...@wikimedia.org>
wrote:
== Executive Summary ==

Creation of new web proxies and DNS records will be disabled over the
weekend; Labs and Tools will switch to a new public DNS system on Monday,
with possible accompanying hiccups and interruptions.

Nothing will change for ToolLabs users, and no immediate action is
required
on the part of tool or project maintainers.  Starting Monday, however,
Labs
project maintainers will need to use the Horizon[1] web UI to manage
proxies, manage public DNS records, and assign floating IPs to instances.

Labs Project Admins:  Two-factor authentication will be required to
access
the new Horizon interface.  Please set up 2fa now (via Preferences-> User
Profile on Wikitech) so that you aren't rudely surprised when trying to
manage Horizon during future emergencies.

== The whole story ==

Currently the public DNS server that resolves things under wmflabs.org is
running an old and creaky setup using ldap and powerdns.  These domains
are
configured using WMF-developed features on wikitech.  Labs internal dns
(e.g. foo.bar.eqiad.wmflabs) is now managed by the OpenStack Designate
project with a more modern mysql-based powerdns backend.

There's a ready-made upstream web UI for designate[2] that is part of the
Horizon project.  So, we're going to standardize on Designate, Horizon,
and
mysql/powerdns, and rip out the old ldap/pdns/wikitech code[3].  Web
proxy
management is intimately linked with dns management, so the proxy UI will
also move to Horizon, thanks to a custom Horizon panel written by Alex
Monk.

Timeline:

This week:  Various web Domain and Proxy UIs will appear and disappear
from
horizon.wikimedia.org as we put the finishing touches on the new
interface.
Changes made via these interfaces will have no effect on public DNS
before
Monday; on Monday some such changes may persist and some may be
overwritten.

Friday, 2015-03-27:  A few sidebar links on wikitech will vanish:  "
Manage
Addresses," and " Manage Web Proxies."  During the following days, public
DNS will be effectively frozen so that we have time to safely migrate to
the
new setup.

Friday (and, possibly, weekend):  DNS migration to designate, testing

Monday, 2015-03-30, 18:00 UTC:  The public dns servers labs-ns0 and
labs-ns1
will be moved to point to the new DNS service.  There may be brief
interruptions to public DNS during the switch-over.  The Horizon web UI
for
domains and proxies will be live and available to all project admins.



[1] https://wikitech.wikimedia.org/wiki/Help:Horizon_FAQ
[2] https://github.com/openstack/designate-dashboard
[3] https://phabricator.wikimedia.org/T124184

_______________________________________________
Labs-announce mailing list
labs-annou...@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/labs-announce

_______________________________________________
Labs-l mailing list
Labs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/labs-l






_______________________________________________
Labs-l mailing list
Labs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/labs-l

Reply via email to