[00:00:05] Ryan_Lane: will you update https://wikitech.wikimedia.org/view/Gerrit or should I? [00:00:17] I will [00:00:50] ok. in a few minutes, second try. [00:01:01] done [00:01:07] oh [00:01:12] I already added him to that project [00:01:13] sorry :) [00:01:18] I was testing to make sure it would work [00:01:30] sumanah: btw, if they are in channel, we have a couple keywords for this [00:01:35] !account-questions | sumanah [00:01:36] sumanah: I need the following info from you: 1. Your preferred wiki user name. This will also be your git username, so if you'd prefer this to be your real name, then provide your real name. 2. Your SVN account name, or your preferred shell account name, if you do not have SVN access. 3. Your preferred email address. [00:01:42] !initial-login |sumanah [00:01:42] sumanah: https://labsconsole.wikimedia.org/wiki/Access#Initial_log_in [00:02:57] Ryan_Lane: my second try will be with a different user. I figured Benny's account was no longer a clean slate to test with. [00:03:25] ah. cool [00:03:27] sounds good [00:03:51] !new-labsuser is add-labs-user --wikiname="" --mail="" [00:03:51] Key was added! [00:03:58] !new-labsuser |sumanah [00:03:58] sumanah: add-labs-user --wikiname="" --mail="" [00:04:00] :D [00:04:23] !ping | petan [00:04:27] @search labsuser [00:04:27] No results found! :| [00:04:31] !access | petan [00:04:31] petan: https://labsconsole.wikimedia.org/wiki/Access#Accessing_public_and_private_instances [00:04:31] @search new [00:04:32] Results (found 1): newgrp, [00:04:35] damn [00:04:37] @search new- [00:04:37] No results found! :| [00:04:38] heh [00:04:43] search breaks with dashes [00:04:48] really? [00:04:50] yep [00:04:58] @search - [00:04:58] Results (found 12): bot, wm-bot, projects, putty, monitor, alert, unicorn, help, instance-json, leslie's-reset, socks-proxy, new-labsuser, [00:04:59] @regsearch new- [00:04:59] No results found! :| [00:05:06] @search instance- [00:05:06] Results (found 1): instance-json, [00:05:10] @search labsuser [00:05:10] No results found! :| [00:05:20] @search -labs [00:05:20] Results (found 1): new-labsuser, [00:05:23] maybe it takes time to index? [00:05:28] @regsearch new- [00:05:28] No results found! :| [00:05:34] @reload [00:05:34] Channel config was reloaded [00:05:36] i just did that ;) [00:05:36] @regsearch new- [00:05:36] No results found! :| [00:05:42] wtf [00:05:45] heh [00:05:49] @regsearch - [00:05:49] Results (found 12): bot, wm-bot, projects, putty, monitor, alert, unicorn, help, instance-json, leslie's-reset, socks-proxy, new-labsuser, [00:05:55] @regsearch new- [00:05:55] No results found! :| [00:05:59] weird [00:06:02] @diaf [00:06:11] 01/14/2012 - 00:06:10 - Creating a home directory for gwicke at /export/home/bastion/gwicke [00:06:20] @search socks- [00:06:20] No results found! :| [00:06:25] @search -proxy [00:06:25] No results found! :| [00:06:30] gwicke: hi. [00:06:30] @search socks-proxy [00:06:31] Results (found 1): socks-proxy, [00:06:35] o.o [00:06:39] oh yes [00:06:40] I know [00:06:45] it's actually correct [00:06:46] hi sumanah [00:06:51] new is a special word? [00:06:57] bot is searching for whole keys or part of value [00:06:58] gwicke: please use the instructions at https://labsconsole.wikimedia.org/wiki/Access#Initial_log_in [00:07:06] it doesn't match part of key [00:07:09] never [00:07:11] 01/14/2012 - 00:07:10 - Updating keys for gwicke [00:07:34] @regsearch new-user [00:07:34] No results found! :| [00:07:36] ugh- password-based login? [00:07:39] @regsearch new-labsuser [00:07:39] Results (found 1): new-labsuser, [00:07:43] here we go [00:09:36] gwicke: eh? for what? [00:09:39] gwicke: the wiki, yes [00:09:43] gwicke: instances, no [00:09:46] sudo, yes [00:09:56] at some point, we'd like kerberos [00:10:00] petan: OrenBochman: hexmode: Status update? [00:10:08] * gwicke is relieved not to receive a shell password per mail [00:10:11] 01/14/2012 - 00:10:11 - Updating keys for gwicke [00:10:11] pt wikibooks imported [00:10:21] site is now beta.wmflabs [00:10:34] johnduhart: should I do something else? [00:10:49] Hold on what? We changed from deployment to beta? [00:10:49] Ryan told me that we finally got new hw for sql, so next week probably would have it [00:10:59] johnduhart: yes [00:11:09] Hold that note, let me check the configuration [00:11:13] johnduhart: robla and hexmode talked about it in #mediawiki a few hours ago I think. [00:11:32] johnduhart: I did it based on hex request who is lead of this, imho :o [00:11:37] Should [00:11:39] Sure* [00:11:43] he came with whole idea of this deployment :) [00:11:49] I just helped him to build it [00:12:27] Sure. [00:14:26] sumanah: got shell, thanks! [00:14:55] great, glad gwicke [00:14:58] hm [00:15:02] formey is kind of dead [00:15:25] petan: Can you please use more descriptive commit messages? https://github.com/johnduhart/deploymentprep-conf/commits/ [00:15:35] yes I can [00:15:40] I just did it really quickly [00:18:00] sumanah: is there a guide on how to access / set up static webspace? If DNS is required for that, then I don't have the rights for it. [00:18:23] gwicke: you are in a room with Ryan SuperLabs Lane and he knows infinity percent more than me, sorry [00:18:39] okay, okay ;) [00:18:49] so, Ryan_Lane ;) [00:18:52] I'm fixing things again :( [00:18:57] gimme a little bit [00:19:03] np- not urgent at all [00:19:11] yeah, when you set up a supercomplicated system sometimes you turn into its janitor :D [00:19:24] well, I'm fixing a production problem right now :0 [00:20:44] :O [00:21:31] svn is down? [00:23:14] gwicke: it is essentially a shell password... it can be used to reset your key. it can be used to sudo [00:23:43] yep, I realized that once I got to that config screen [00:25:34] jeremyb: do those actually work across browsers? [00:25:36] i don't follow [00:25:37] never encountered anybody using it [00:25:43] there's at least a million users i think [00:25:45] jeremyb: formey is being rebooted [00:25:52] (at least the entire US army) [00:26:03] johnduhart: the bot runs on formey? [00:26:08] johnduhart: (wm-bot) [00:26:16] * gwicke never was in any army, the kindergarten I worked at didn't use certs ;) [00:26:22] jeremyb: bots-1 [00:26:31] gwicke: you worked at a kindergarten?! [00:26:43] petan: makes more sense ;P [00:26:59] yeah, good preparation for later tasks in life ;) [00:27:26] gwicke: anyway, the point is every browser under the sun (at least for desktop) surely supports client certs. idk about opera but just about everything else i can think of [00:27:31] gwicke: that's neat [00:28:05] gwicke: also, Ryan_Lane worked for ppl that really, really like client certs in a past life i think. (the army's sibling) [00:28:36] so, we could do client certs [00:28:42] but..... [00:28:50] when someone loses one, what are we going to do? [00:28:50] have to check the Android browser [00:28:58] also, it's local to whatever system you are on [00:29:29] Ryan_Lane: the latter is not unique to the browser variety though [00:29:30] sure. i'm not saying do client certs ;) [00:29:44] what I'd like is two facter auth via sms [00:29:58] eww, i hates teh sms [00:30:09] well, what else would you recommend? [00:30:13] gpg maybe [00:30:30] that's a great way to make sure no one will be able to use labs ;) [00:30:33] would at least allow to send encrypted passwords [00:30:43] ah. for email? [00:30:50] yeah [00:31:02] that means clients need to have gpg keys, though [00:31:33] no easy solution I guess.. [00:31:34] What are we talking about? [00:31:59] Ryan_Lane: either YubiKey or something like http://barada.sourceforge.net/ [00:33:30] yubi key is for shell login, right? [00:33:42] it has a few modes [00:33:49] I'm a fan of sms multi-factor [00:34:02] what's the downside? [00:34:22] Android seems to miss client SSL cert support: http://code.google.com/p/android/issues/detail?id=8196 [00:35:41] Ryan_Lane: certainly better than just a plain-text mail [00:35:56] the plain text mail is just for a temporary password [00:36:07] gwicke: not for the initial password but every log in i think [00:36:21] you are required to change your password when you get it [00:36:24] Ryan_Lane: 1) it's (i think?) not crypted on the wire or in the air. (could be sniffed?) 2) what if the carrier's compromised? (idk how secure those systems typically are) 3) means that you must be able to get texts and at least in the US that means pay for them [00:36:39] jeremyb: it would be for every login [00:36:43] jeremyb: and it's two factor [00:36:51] you'd still have to use a password [00:36:53] and it's time limited [00:36:54] ah, then you can't log in without a mobile [00:36:55] yes, i know [00:37:09] correct, can't login without a mobile with two factor sms [00:37:20] Ryan_Lane: still researching yubi but what about those 2 options? [00:37:39] a special shell could also be used to echo a temporary password [00:37:52] that could then be used for the web interface [00:38:20] but how would you access the special shell? ;) [00:38:20] barada requires android [00:38:27] jeremyb: ssh key [00:39:06] gwicke: which essentially means that ssh is the one factor? or you enter the echo'd phrase+your password? [00:39:44] that's a chicken and egg problem [00:39:49] the latter would be safer, but I was thinking of the first [00:40:01] how do you get the initial password to add your ssh key? [00:40:12] you just supply the key [00:40:16] before setup [00:40:24] Ryan_Lane: i'd have to search more but i think it's possible that the same method could be used with both yubi and barada and then ppl could choose which one of the 2 to use for themselvesr [00:40:28] themselves* [00:41:08] gwicke: we want people to be able to sign up without us doing anything [00:41:34] ah [00:41:44] in that case, though, they submit their own password [00:41:50] and they are required to give an email address [00:42:38] without any information from the user, safe communication is hard to establish [00:42:48] Ryan_Lane: also, i think it's very likely that yubi can do web. barada idk as much about [00:43:15] * gwicke should get to parser tests.. [00:43:23] get back, even.. [00:43:37] could do initial auth by reading a fingerprint over phone and also sending some other way [00:43:47] of course it helps if you already know the voice somehow [00:44:26] also you could have more than one level of acct security and add ppl to groups depending on how secure their acct is [00:44:42] some ppl can do 2 factor but not all. some projects can require 2 factor [00:49:53] I'd recommend everyone make proposals [00:49:59] I'm open to better auth [00:50:09] it's hard to track options in irc, though :) [00:50:17] and everyone can demo auth things in labs [00:51:09] Ryan_Lane: well what about ops? is there 2 factor? interest in 2 factor? [00:51:23] I dunno [00:51:25] Labs in labs [00:51:34] things need to be tested [00:51:39] johnduhart: I have labs in labs [00:51:44] how do you think I test things? :) [00:51:52] labception [00:52:02] Ryan_Lane: I thought you prayed alot [00:52:07] I do that too [00:52:12] ah [00:52:16] some things you just can't properly test [00:52:25] yesterday and today have been prime examples of that [00:52:30] hehe [00:52:39] thinking of that [00:52:41] it's time to test dns again!!! [00:52:47] who feels lucky? [00:53:15] Do you feel lucky, punk? [00:53:31] * johnduhart wonders what he's going to work on tonight [00:53:34] we'll see soon enough [00:53:56] then after that is testing ldap being down :) [00:57:34] !initial-login | ezachte [00:57:34] ezachte: https://labsconsole.wikimedia.org/wiki/Access#Initial_log_in [00:57:53] PROBLEM host: labs-mw2 is DOWN address: labs-mw2 check_ping: Invalid hostname/address - labs-mw2 [00:58:06] OH NO! [00:58:50] gosh what will we do without labs-mw2 [00:59:07] johnduhart: take some more stuff down [00:59:23] PROBLEM host: bots-1 is DOWN address: bots-1 check_ping: Invalid hostname/address - bots-1 [00:59:46] well, dns is still a problem [00:59:53] PROBLEM host: master is DOWN address: master check_ping: Invalid hostname/address - master [01:00:13] PROBLEM host: nova-dev1 is DOWN address: nova-dev1 check_ping: Invalid hostname/address - nova-dev1 [01:00:15] Ryan_Lane: yubi has a service you can run to verify OTP tokens against. (which i assume means you could use it for the web. and since there's >=2 DFSG-free implementations of the service so the code/algorithms could be reused if needed) barada has a pam module. [01:00:43] RECOVERY host: bots-1 is UP address: bots-1 PING OK - Packet loss = 0%, RTA = 0.46 ms [01:00:49] Ryan_Lane: anyway, i'm interested in working on it but more research is def needed [01:00:53] RECOVERY host: labs-mw2 is UP address: labs-mw2 PING OK - Packet loss = 0%, RTA = 0.58 ms [01:01:13] RECOVERY host: master is UP address: master PING OK - Packet loss = 0%, RTA = 2.47 ms [01:01:53] RECOVERY host: nova-dev1 is UP address: nova-dev1 PING OK - Packet loss = 0%, RTA = 0.54 ms [01:06:12] 01/14/2012 - 01:06:11 - Creating a home directory for ezachte at /export/home/bastion/ezachte [01:07:11] 01/14/2012 - 01:07:10 - Updating keys for ezachte [01:11:06] ! [01:14:56] * Ryan_Lane is away for a bit [02:10:17] Ryan_Lane: back? [02:13:01] Ryan_Lane: Looks like $wgSiteMatrixSites is wrong on wmflabs/beta [02:13:07] pointing to wmf live urls [02:13:10] hosts [02:13:18] http://labs.wikimedia.beta.wmflabs.org/wiki/Special:SiteMatrix Wikipedia
w [02:15:50] Hm.. unless those portal are going to be tested, probably ok this way [02:16:52] Krinkle: it would be good to fix it [02:17:07] that's the beta equivalent though ? [02:17:16] Krinkle: what I really want fixed I have been looking for you to do [02:17:32] *drumroll* [02:18:17] Krinkle: http://labs.wikimedia.beta.wmflabs.org/wiki/Problem_reports last two reports here [02:19:13] ok. I already know both solutions [02:19:14] will comment [02:19:18] Also, will try to set the $wgSiteMatrixSites [02:19:46] http://labs.wikimedia.beta.wmflabs.org/viewfile.php?file=mc.php [02:19:57] that's still broken too ;-), th at's what I've been looking to see fixed for a week [02:20:31] Krinkle: do you have a labs account? I could give you access [02:20:39] The source code for viewfile is so awesome [02:20:52] I have 'a' labs account, yes. [02:20:57] 'krinkle' [02:21:20] Reedy: do you know if users were nuked between deployment>beta ? [02:21:20] does it 'work'? [02:21:28] no idea [02:21:35] I'm fairly out of the loop [02:21:43] deployment.wmflabs redirects but not preserving subdomain [02:21:46] anyway, that's old now [02:22:05] Reedy: Yes, my labs account works for testwarm.wmflabs and bastion [02:22:13] This time a year ago I was in SF [02:23:00] I can feel it's a VM. creating an account takes 20 seconds [02:23:12] (between pushing button and seeing the next page that is) [02:23:34] it's cause mysql is virtualised [02:23:46] and that sucks [02:24:47] hm.. selective interwiki ? http://labs.wikimedia.beta.wmflabs.org/wiki/User_talk:Krinkle [02:24:53] mw->live, m->beta, commons->error [02:24:56] Krinkle: only the DNS was changed, users should be find [02:25:05] my account didn't exist anymore [02:25:08] no big deal though [02:26:13] interwikis are broken. they link to .deployment.wmflabs still [02:26:24] lol [02:26:37] and *.deployment.wmflabs redirects to labs.wikimedia.beta.wmflabs [02:27:04] so clicking m:User:Krinkle on http://labs.wikimedia.beta.wmflabs.org/wiki/User:Krinkle goes to http://meta.wikimedia.deployment.wmflabs.org/wiki/User:Krinkle [02:27:08] and back to http://labs.wikimedia.beta.wmflabs.org/wiki/User:Krinkle [02:27:18] lol [02:28:14] 01/14/2012 - 02:28:14 - Creating a home directory for krinkle at /export/home/deployment-prep/krinkle [02:28:20] Krinkle: you should be able to get on now deployment-{web,test,nfs-memc} etc [02:29:00] ok, will check in a minute [02:29:11] 01/14/2012 - 02:29:11 - Updating keys for gwicke [02:29:14] 01/14/2012 - 02:29:14 - Updating keys for krinkle [02:31:39] hexmode: Can you grant me user rights on commonswiki.beta.wmflabs ? [02:32:10] Krinkle: k, any particular group? [02:32:34] is there steward/centralauth in this cluster ? [02:32:48] then I don't need it on each wiki [02:32:51] yep [02:33:25] Krinkle: central auth is new to me... how do I give you steward? [02:33:49] http://meta.wikimedia.beta.wmflabs.org/wiki/Special:GlobalUserRights [02:34:10] I can't see which groups are listed there [02:34:21] but I guess it's there [02:35:37] Krinkle: think you have it now, let me know [02:36:08] yep, got rights commons automatically now [02:36:09] thx [02:37:31] re [02:38:26] OrenBochman: hey [02:38:46] I wonder [02:38:51] what's new [02:39:25] OrenBochman: lqt works [02:39:36] lqt ? [02:40:28] what is the command to get a dir from svn ? [02:40:41] I use an IDE [02:41:00] OrenBochman: liquid threads http://pt.wikibooks.beta.wmflabs.org/wiki/Wikilivros:Di%C3%A1logos_comunit%C3%A1rios [02:41:25] OrenBochman: I'm not sure what you mean by a dir [02:41:38] directory [02:42:02] OrenBochman: do you mean "What is the command to check out a subversion directory?" [02:42:22] yes [02:42:48] OrenBochman: "svn co SVNURL" [02:43:12] 10x [02:43:20] what directory do what to check out? [02:45:01] languages/messages [02:47:06] OrenBochman: if you have svn write access: "svn co svn+ssh://svn.wikimedia.org/svnroot/mediawiki/trunk/phase3/languages/messages" [02:47:39] if not, http://svn.wikimedia.org/svnroot/mediawiki/trunk/phase3/languages/messages/ [02:48:05] not http:// ?I [02:48:11] not https:// ? I meen [02:49:32] that works, too [02:50:15] just checking it out readonly, you can''t commit to it without changing it to svn+ssh [02:50:46] but switching is just an "svn switch" away ;) [02:50:52] sure [02:50:57] just do it right the first time [02:51:03] makes life easier [02:51:04] :p [02:51:35] I don't have check in right in MW just Search [02:52:26] though I did a nice little hack on dumHtml ext [02:54:43] nice icons on that page [02:55:14] you will have more than search [02:55:24] probably just not phase3 and wmf/ [02:55:41] I suppose so [02:56:18] reedy do you do php work mostly? [02:57:25] OrenBochman: reedy does js, too. He is mostly awesome. [02:58:15] Most of the JS I touch is breaking it ;) [02:58:57] do you do server side js too? [02:59:13] You can't really do server side js [03:00:42] why not ? [03:01:01] It's designed to be run in a browser [03:01:02] Node.js ? [03:01:14] Well, yes [03:01:19] but that's a minority usage [03:01:43] server side has been around since a year after it was inveted... [03:02:19] anyhow I wanted to ask how hard it would be to make an extenstion that instruments links [03:02:31] instruments? [03:02:45] adds an ajax call to a tracker when they are clicked [03:02:58] We have a click tracking extension already [03:03:09] that WMF uses for feature related projects [03:03:20] feature ? [03:03:26] like the fund raiser [03:03:38] Moodbar, ArticleFeedback, WikiLove etc [03:03:47] ok [03:03:58] http://svn.wikimedia.org/viewvc/mediawiki/trunk/extensions/ClickTracking/ [03:04:11] 1 # ClickTracking lets you track users' clicks on links/buttons. [03:04:11] 2 # The current implementation tracks clicks on the navigation bar - the [03:04:12] 3 # WikiEditor toolbar makes use of this if present [03:05:49] can you get the user's who clicked too ? [03:06:04] I don't think so [03:06:27] I'd need an option for that [03:06:36] Little of the data tracks stuff to identify the individual user [03:06:47] yep [03:06:50] And that's purposely [03:06:59] I know all about it [03:07:04] ;-) [03:07:05] So for WMF deployment, you're very unlikely to get that approved [03:07:38] I would be sneeky [03:08:01] No, you wouldn't be allowed to do it [03:08:14] c.f. Gollum [03:09:40] actually I have an implimentation in mind that would allow tracking anounymoult [03:09:44] actually I have an implimentation in mind that would allow tracking anounymouly [03:10:29] I think you're ok to track a users habits, as long as you can't say it was X user [03:10:58] that's what I need for the short time [03:11:40] I'd like to track the click stream of a user that follows [03:11:54] 1 a search action [03:12:03] 2. a dismabiguation page [03:12:36] I could use a sample of this kind of data [03:13:36] the reason I want to track user's is to make a personalised search feature [03:14:06] but it could be done useing a cryptographic hash [03:17:12] Krinkle: $wgSiteMatrixSites ?? should be what? [03:17:42] hexmode: I don't know, its currently pointing to the www. portals of wmf projects. we don't have those at labs yet [03:18:40] Krinkle: I'm looking at CommonSettings.php ... will start looking at the documents [03:41:39] Krinkle: http://labs.wikimedia.beta.wmflabs.org/wiki/Special:SiteMatrix [03:41:55] shouldn't webfonts handle burmese [03:42:26] dunno, I think it has an exception for lists like these [03:42:30] ? [03:43:06] my.wikipedia.beta.wmflabs.org/wiki/ [03:43:09] ugh [03:43:35]