2024-07-18T02:26:56 *** teepee_ is now known as teepee 2024-07-18T07:28:31 *** teepee_ is now known as teepee 2024-07-18T09:36:05 acidsys: AFAIK you have permissions to delete stuff on paste.o.o - please do so now (poo#164111) 2024-07-18T09:45:07 cboltz: in the cli you could as well. as this is again the "only the best" pattern I would not click through them individually in the GUI anyways 2024-07-18T09:57:13 indeed, I didn't have the cli on my radar ;-) 2024-07-18T09:57:27 thanks for the cleanup! 2024-07-18T09:59:06 there are some "anonymous paste"s that might also be worth a cleanup, but they are less critical than those from the ticket, and they'll need to be checked/deleted individually 2024-07-18T09:59:46 I clicked some of them and it's mostly computer output 2024-07-18T10:01:01 btw one of the patterns I just deleted already reappeared just now 2024-07-18T10:01:26 great :-/ 2024-07-18T10:10:04 any idea how to make a for loop in irb? https://paste.opensuse.org/pastes/32f706178577 2024-07-18T10:12:38 unfortunately not, I don't know much about ruby 2024-07-18T10:15:05 thx, made it work by putting it inside a rb file and then calling that 2024-07-18T10:15:13 cboltz: "RA SMC HAILS" is something i keep seeing reappearing in anonymous pastes 2024-07-18T10:16:44 a lot of them generally look like AI-generated spam lol 2024-07-18T10:18:02 also, spam/scam: https://paste.opensuse.org/pastes/d71768e481e4 2024-07-18T10:18:27 those I also deleted in loads but unfortunately not always so predictable/unambigious titles 2024-07-18T10:19:10 I now made this extremely ugly hack https://paste.opensuse.org/pastes/3b771536c8a7 2024-07-18T10:19:59 https://paste.opensuse.org/pastes/d694b3c28875 2024-07-18T10:19:59 god, i hate the fact i know the song this is based on 2024-07-18T10:21:00 that one is kinky but not problematic I think 2024-07-18T10:21:26 at least it does not involve children from what I can tell 2024-07-18T10:22:53 https://www.youtube.com/watch?v=h6DNdop6pD8 2024-07-18T10:22:53 the song btw 2024-07-18T10:23:58 lol 2024-07-18T10:31:53 acidsys: it doesnt, no 2024-07-18T10:32:21 well, besides the song being popular amongst 12-14 year olds i guess 2024-07-18T12:13:22 According to a dm I just got, but no direct links, somebody dumped some CP in paste.o.o I’ll see if I can’t get some direct links 2024-07-18T12:16:06 I told the guy to drop a message to admin@o.o with the posts they’re concerned with 2024-07-18T12:29:27 SFaulken: It's a constant battle... 2024-07-18T12:37:07 Yeah, I figured, any system without login requirements where you can post stuff will be 2024-07-18T12:37:32 But then you make logins requires, and nobody uses the thing 2024-07-18T12:38:06 I don’t know what they expected to be done, if they can’t point me at what they’re concerned with 2024-07-18T12:48:41 SFaulken: Someone reported stuff yesterday, I suspect it was removed already... 2024-07-18T12:50:24 I will add the autospam feature 2024-07-18T12:50:57 whenever I have the time to finish that 2024-07-18T12:51:05 I mean, mostly it's dealing with the deployment of that 2024-07-18T17:02:58 acidsys: after integrating the api call, there are 31 users in vpn group who did not even once login to the vpn. 2024-07-18T17:03:46 to odin, i meant 2024-07-18T17:04:04 nice cleanup to come then :) 2024-07-18T17:05:01 acidsys: trivia: one of which is crameleon2 2024-07-18T17:06:34 haha let me remove it 2024-07-18T17:09:53 acidsys: let it be automated 😛 2024-07-18T17:10:46 oh already did, but if it's useful for testing happy to add it again 2024-07-18T17:12:13 no problem 2024-07-18T17:12:25 lot more of them to automate 2024-07-18T17:13:27 so, the api returns users as a list 2024-07-18T17:13:43 eg: crameleon2@infra.opensuse.org 2024-07-18T17:14:28 ok, did i just saw crameleon3@infra.opensuse.org !? 2024-07-18T17:14:41 I have crameleon{,2,3} 2024-07-18T17:14:54 but only recently connected with crameleon and crameleon3 2024-07-18T17:14:58 so, my question is: this is not the actual email id, correct? 2024-07-18T17:15:11 correct, that's just the SPN 2024-07-18T17:15:30 so, should i ping another api for the email info ? 2024-07-18T17:17:13 yep I think you want/v1/person/$user/_attr/mail but it returns "null" for me .. checking 2024-07-18T17:17:16 and, should the stale vpn users to be notified ? 2024-07-18T17:19:22 I think it needs some additional privilege/group to be allowed to read the "mail" attribute .. something for Firstyear 2024-07-18T17:19:27 the service account I mean 2024-07-18T17:19:34 i feel that the kanidm team should be more verbose detailing their swagger apis 2024-07-18T17:20:11 well it is still a work in progress as stated here :) https://kanidm.github.io/kanidm/stable/developers/designs/rest_interface.html?highlight=rest%20api#rest-interface 2024-07-18T17:20:19 I think it'll get better over time 2024-07-18T17:21:13 re: notify, yes I think we discussed to notify when an account becomes stale before disabling it 2024-07-18T17:22:01 acidsys: yes, nothing specific about vpn group at that point, So ok. Will notify all stale users 2024-07-18T17:22:35 but not yet, I mean once we have it running in production 2024-07-18T17:23:12 acidsys: obviously yes 🙂 2024-07-18T17:24:28 maybe we could try it with only a test user first ? 2024-07-18T17:26:08 acidsys: yes, i prefer: crameleon* 2024-07-18T17:26:42 cool 2024-07-18T17:27:02 acidsys: oh! is that the way it is ? 2024-07-18T17:27:28 service user canot get the email? 2024-07-18T17:27:43 > 17:19 I think it needs some additional privilege/group to be allowed to read the "mail" attribute .. something for Firstyear 2024-07-18T17:31:21 ah found it. idm_people_pii_read@infra.opensuse.org 2024-07-18T17:31:55 now you should be able to read "mail" through idle-account-status 2024-07-18T17:32:22 I tested with https://idm.infra.opensuse.org/v1/person/crameleon@infra.opensuse.org/_attr/mail 2024-07-18T17:33:39 (also works with just the user / without the SPN domain part) 2024-07-18T17:35:13 need to head for training now, will be back later 2024-07-18T18:04:21 acidsys: ok. strange that "wombelix" email info is not present None 2024-07-18T18:05:06 I heard my name? Let me scroll up a bit to see what's going on :D 2024-07-18T18:06:05 Dominik Wombacher (wombelix): hi, to summarize, I am trying to automate the idle users of vpn group & in that process ur name was present in it 2024-07-18T18:06:46 +managing of 2024-07-18T18:07:35 Huh I logged in a few days ago, so I should hopefully not show up in a list of inactive VPN users? 😧 2024-07-18T18:08:53 Dominik Wombacher (wombelix): i am working with an old snapshot of logs. so it is a false positive 2024-07-18T18:10:02 we didn't deploy to production yet, so need not worry 🙂 2024-07-18T18:11:16 Ok then it sounds pretty accurate, took me a bit to get the VPN finally up and running. 2024-07-18T18:12:22 Dominik Wombacher (wombelix): was the last time u logged recently in is the first time? 2024-07-18T18:14:03 July 13th around noon CEST should be my first successful von login 2024-07-18T18:14:14 I disconnected a little later on that day 2024-07-18T18:14:25 Dominik Wombacher (wombelix): ok, my logs are > 10d old 2024-07-18T18:14:59 +test 2024-07-18T18:15:27 Ok, definitely no successful vpn login before 13th from my side 2024-07-18T18:15:41 So your logs are accurate claiming that I wasn't active 2024-07-18T18:43:27 *** teepee_ is now known as teepee 2024-07-18T19:27:13 indeed we are missing a step adding an email in the new user enrollment process 2024-07-18T19:27:39 so there is no email for kskhartik either. good find! I'll correct it shortly 2024-07-18T20:10:06 missing mails added and step added to the document