On Fri, 26 Apr 2019, 4:48 am Paul Wise, <p...@debian.org> wrote:

> On Thu, Apr 25, 2019 at 6:11 PM Hilmar Preuße wrote:
>
> > Unfortunately, that does not work. Because I suspect rather an
> > organizational, than a technical problem suspect, I don't post extensive
> > logs. What am I missing? Do I need to be DD to login into porter boxes
> > or should it be possible as DM too?
>
> Debian guest accounts are only allowed to access particular machines
> but according to your account information in LDAP, you don't appear to
> be allowed to access any Debian hosts. It looks like whoever did the
> LDAP update forgot to add which machines you are allowed to access or
> something. Please contact the person who requested you get a guest
> account so they can follow up on the request ticket.
>

The problem here is that guest accounts need to be approved for each host,
and the approval has an expiration (iirc it lasts 3 months by default).
Now, your account was created on 2011 if memory serves right, and it
expired right after, and this year we just updated the attached got key
while you became a DM.

So at this point you'd need to ask access to the single hosts you need;
being a DM is just a trivial matter that doesn't need approval, afaik DSA
just adds the bits, but will still expire at some point.

(One could argue for DMs they could drop these steps, but LDAP at this time
doesn't properly know about DMs..)

Reply via email to