Last modified: 2014-05-22 17:44:11 UTC
The production trebuchet user (created by puppet) belongs to both the trebuchet and wikidev groups. The LDAP user that Coren created for me in labs (thanks Coren!) is only in the trebuchet group. Having the trebuchet user in the wikidev group allows it to chgrp checked out content so that deployers can update the origin repositories on the deployment host. Right now in the deployment-prep project usage a `sudo chgrp -R wikidev /srv/deploy` must be used occasionally to reset the permissions.
Bryan, i did that. please let me know if all is fine and it worked this way. modify-ldap-group --addmembers=trebuchet wikidev root@silver:~# ldaplist -l group wikidev | grep trebuchet member: uid=trebuchet,ou=people,dc=wikimedia,dc=org
deployment-bastion:~ bd808$ id trebuchet uid=604(trebuchet) gid=604(trebuchet) groups=500(wikidev),604(trebuchet) tin:~ bd808$ id trebuchet uid=995(trebuchet) gid=10004(trebuchet) groups=10004(trebuchet),500(wikidev) Looks prod-matching to me. Thanks!
