Hello,
Summary: Your SSH username on https://android-review.linaro.org will now match Linaro username (first.last) after the next login. You local repository clones need to be updated for new username.
Detailed description: https://android-review.linaro.org was the first Gerrit server in Linaro, when there were no central LDAP user database yet. As a result, there were free-form SSH usernames used, instead of the later standard first.last as used on all the other Gerrit servers. This inconsistency was a subject of background concern for Systems team, but of course not something having enough priority to "fix". However, Gerrit 2.12.2 upgrade started tonight uncovered following issue: Gerrit tries to synchronize its SSH username setting with LDAP, and fails, as Gerrits own rules disallow changing of username. The symptom of this is error "Authentication temporary unavailable" when a user with "old" SSH username tries to login via browser.
While this can be classified as a Gerrit bug (and previous versions were smart enough), we'll unlikely find any timely solution to keep things as they are. So, it makes sense to take a chance of cleaning up username and making this server follow standard username conventions. Consequently:
1. All usernames which don't match "first.last" pattern are reset. 2. If you are affected, you won't be able to perform SSH operations (like git clone/push) until you login via web interface. 3. On the next login via web interface, it will be set to LDAP's "first.last" value. 4. You will need to update remotes of your existing git clones to new username (or alternatively, re-clone). 5. If you already use "first.last" SSH username, you're unaffected.
The list of users affected is given below. While it seems long, majority of enrties there are for people no longer at Linaro, or for community accounts (which didn't work since we switched to LDAP anyway). If you need further assistance, please open a ticket at https://servicedesk.linaro.org/servicedesk/customer/portal/4 .
Thanks, Paul
username:Ng username:pfefferz username:asac username:james_w username:fgiff username:jserv username:mabac username:deeptik username:cyang username:mpoirier username:ndec username:mwaddel username:mansson username:Sachin username:vishalbhoj username:suapapa username:fabo username:pabhishek username:cnxsoft username:amitdanielk username:patrikryd username:sangwook username:ericm username:pundiramit username:glandium username:eazyigz username:tixy username:danilo username:john username:nytowl username:tony_tu username:Sangwook username:StefanEkenberg username:uichi username:plars username:zyga username:ruppi username:ebenpor username:jhkim username:Annamalai username:markoncomputer username:Claude username:tianhongwang username:rchand00 username:omarrmz username:aviksil username:nvl1109 username:a0132810 username:pelya username:krtaylor username:developer4563 username:yusufbu username:dzinman username:arussello username:mdupuy username:williamcharles username:aorth username:lanaczko username:rmcc username:kcrudup username:kelvin username:angelsl username:unixmanlinuxboy username:Quiter username:sourxsunny username:pbeeler username:anmar username:wucongdonglai username:bambi username:rperier username:sgt username:roalex username:vishveshwarbhat username:therbom username:rajagopalvenkat username:winner00 username:ramesh username:abelloni username:sparksco username:fahadkdi username:ryanharkin username:axelfagerstedt username:nocoast username:milo username:fcarpenter username:hongbozhang username:fahadk username:pelya2 username:janjic username:dpervushin username:qoowater username:cerial username:tinojantony username:stephaneeee username:kishoreboddu username:nuclearmistake username:SanjasdfsafsffaySinghsdfasfRawat username:donvigo username:tinojgit username:afarah username:mechmetal username:akbennett username:c username:sikuner username:wasungkim username:stevanr username:deqiang username:anilkumar username:willnewton username:codeart username:lrabiet username:Bintian username:bintian username:vishalbhoj2 username:tusharbehera username:jbergsag username:tgall username:amitkhare username:neo username:paramanands username:sumit username:danielt username:help username:XavierHsu username:Serban username:Z username:koenkooi (127 rows)
NOTE: We have the same issue on review.linaro.org for several active users. I'm fixing the problem for the affected users and will send each person an email with instructions.
On 04/29/2016 01:59 PM, Paul Sokolovsky wrote:
Hello,
Summary: Your SSH username on https://android-review.linaro.org will now match Linaro username (first.last) after the next login. You local repository clones need to be updated for new username.
Detailed description: https://android-review.linaro.org was the first Gerrit server in Linaro, when there were no central LDAP user database yet. As a result, there were free-form SSH usernames used, instead of the later standard first.last as used on all the other Gerrit servers. This inconsistency was a subject of background concern for Systems team, but of course not something having enough priority to "fix". However, Gerrit 2.12.2 upgrade started tonight uncovered following issue: Gerrit tries to synchronize its SSH username setting with LDAP, and fails, as Gerrits own rules disallow changing of username. The symptom of this is error "Authentication temporary unavailable" when a user with "old" SSH username tries to login via browser.
While this can be classified as a Gerrit bug (and previous versions were smart enough), we'll unlikely find any timely solution to keep things as they are. So, it makes sense to take a chance of cleaning up username and making this server follow standard username conventions. Consequently:
- All usernames which don't match "first.last" pattern are reset.
- If you are affected, you won't be able to perform SSH operations
(like git clone/push) until you login via web interface. 3. On the next login via web interface, it will be set to LDAP's "first.last" value. 4. You will need to update remotes of your existing git clones to new username (or alternatively, re-clone). 5. If you already use "first.last" SSH username, you're unaffected.
The list of users affected is given below. While it seems long, majority of enrties there are for people no longer at Linaro, or for community accounts (which didn't work since we switched to LDAP anyway). If you need further assistance, please open a ticket at https://servicedesk.linaro.org/servicedesk/customer/portal/4 .
Thanks, Paul
username:Ng username:pfefferz username:asac username:james_w username:fgiff username:jserv username:mabac username:deeptik username:cyang username:mpoirier username:ndec username:mwaddel username:mansson username:Sachin username:vishalbhoj username:suapapa username:fabo username:pabhishek username:cnxsoft username:amitdanielk username:patrikryd username:sangwook username:ericm username:pundiramit username:glandium username:eazyigz username:tixy username:danilo username:john username:nytowl username:tony_tu username:Sangwook username:StefanEkenberg username:uichi username:plars username:zyga username:ruppi username:ebenpor username:jhkim username:Annamalai username:markoncomputer username:Claude username:tianhongwang username:rchand00 username:omarrmz username:aviksil username:nvl1109 username:a0132810 username:pelya username:krtaylor username:developer4563 username:yusufbu username:dzinman username:arussello username:mdupuy username:williamcharles username:aorth username:lanaczko username:rmcc username:kcrudup username:kelvin username:angelsl username:unixmanlinuxboy username:Quiter username:sourxsunny username:pbeeler username:anmar username:wucongdonglai username:bambi username:rperier username:sgt username:roalex username:vishveshwarbhat username:therbom username:rajagopalvenkat username:winner00 username:ramesh username:abelloni username:sparksco username:fahadkdi username:ryanharkin username:axelfagerstedt username:nocoast username:milo username:fcarpenter username:hongbozhang username:fahadk username:pelya2 username:janjic username:dpervushin username:qoowater username:cerial username:tinojantony username:stephaneeee username:kishoreboddu username:nuclearmistake username:SanjasdfsafsffaySinghsdfasfRawat username:donvigo username:tinojgit username:afarah username:mechmetal username:akbennett username:c username:sikuner username:wasungkim username:stevanr username:deqiang username:anilkumar username:willnewton username:codeart username:lrabiet username:Bintian username:bintian username:vishalbhoj2 username:tusharbehera username:jbergsag username:tgall username:amitkhare username:neo username:paramanands username:sumit username:danielt username:help username:XavierHsu username:Serban username:Z username:koenkooi (127 rows)
hi,
On Tue, May 3, 2016 at 4:29 PM, Andy Doan andy.doan@linaro.org wrote:
NOTE: We have the same issue on review.linaro.org for several active users. I'm fixing the problem for the affected users and will send each person an email with instructions.
I cannot use ssh with 'ndec' anymore, and 'nicolas.dechesne' now works. However I cannot login on the Web UI anymore. I am using as before my email and password, which used to work, and I am getting the following error:
Authentication unavailable at this time.
I tried 2 browsers.
nico
On 05/03/2016 10:16 AM, Nicolas Dechesne wrote:
hi,
On Tue, May 3, 2016 at 4:29 PM, Andy Doan andy.doan@linaro.org wrote:
NOTE: We have the same issue on review.linaro.org for several active users. I'm fixing the problem for the affected users and will send each person an email with instructions.
I cannot use ssh with 'ndec' anymore, and 'nicolas.dechesne' now works. However I cannot login on the Web UI anymore. I am using as before my email and password, which used to work, and I am getting the following error:
Authentication unavailable at this time.
I tried 2 browsers.
I think I may have forgotten to flush the gerrit cache after updating your account. Could you try once more to confirm?
On Tue, May 3, 2016 at 5:19 PM, Andy Doan andy.doan@linaro.org wrote:
I think I may have forgotten to flush the gerrit cache after updating your account. Could you try once more to confirm?
thanks. it is working now.
nico