[13:37:45] <brouberol>	 godog: not 100% sure this is related to you but I saw `Info: Applying configuration version '(cae1e72ca4) Filippo Giunchedi - dumps: add nfs_client for dumps-nfs.w.o'` when running puppet on the deployment host, and then
[13:37:45] <brouberol>	 ...
[13:37:45] <brouberol>	 Notice: /Stage[main]/Rsync::Server/Service[rsync]: Triggered 'refresh' from 1 event
[13:37:45] <brouberol>	 Error: Systemd start for stunnel4 failed!
[13:38:56] <claime>	 brouberol: that's https://phabricator.wikimedia.org/T418262#12102130 I think
[13:39:07] <claime>	 which deployment host is that?
[13:39:15] <brouberol>	 2003
[13:40:27] <godog>	 hah, mhh, more-grunting-noises
[13:42:04] <claime>	 brouberol: yeah it's that, I'll kill and restart the process cleanly, and we'll investigate on monday
[13:42:19] <brouberol>	 cool cool
[13:42:41] <godog>	 yeah indeed, looks like puppet and stunnel haven't been happy with each other
[13:43:11] <cdanis>	 godog: https://www.youtube.com/watch?v=RBmoQSHfO2U
[13:43:17] <claime>	 godog: Not just puppet tbh, a manual systemctl restart fails the same way
[13:46:55] <godog>	 cdanis: lol very fun, thank you
[13:47:12] <godog>	 claime: hah! that explains, that's the new deploy host isn't it ?
[13:48:06] <claime>	 godog: yes
[13:48:10] <claime>	 and the current prod one
[13:48:42] * godog nods
[13:48:43] <claime>	 My brain's broken today so I can't productively look unfortunately
[13:49:09] <godog>	 that's okay I think, doesn't look it is on fire
[13:51:17] <jhathaway>	 o/, I'm looking into the puppetserver woes
[13:51:27] <claime>	 jhathaway: <3
[13:51:28] <godog>	 cdanis: somehow that video reminded me of https://www.youtube.com/watch?v=JXD-jvHage8
[18:07:44] <swfrench-wmf>	 FYI, per discussion in #wikimedia-traffic, I'll be restarting one pybal instance (high-traffic2 in codfw) shortly, in order to clear some lingering config diffs / alerts before the weekend. cc: jhathaway (and t.opranks) FYI
[18:10:22] <topranks>	 swfrench-wmf: thanks! 
[18:16:56] <swfrench-wmf>	 {{done}}
[20:32:59] <RhinosF1>	 jhathaway: Bitu-account-managers is the ldap group you need to disable/enable people. Not sure about how to reset a password.
[20:33:43] <RhinosF1>	 https://ldap.toolforge.org/group/bitu-account-managers
[20:34:45] <RhinosF1>	 https://wikitech.wikimedia.org/wiki/SRE/LDAP#Changing_the_password_of_a_user
[20:40:15] <jhathaway>	 RhinosF1: I think that information is out of date, https://wikitech.wikimedia.org/wiki/IDM/Account_Blocking
[20:40:46] <jhathaway>	 the log, https://idm.wikimedia.org/wikimedia/log/#, shows slyngs blocking the account via Bitu
[20:41:28] <RhinosF1>	 jhathaway: that guide links to the exact same list of people in who can access the block feature in Bitu
[20:41:36] <jhathaway>	 ah!
[20:41:41] <RhinosF1>	 The very last paragraph
[20:43:33] <jhathaway>	 thanks, your reading comprehension was better than mine!
[20:43:42] <jhathaway>	 looks like I am in neither list at present