Bug 413211 – s4t4n's revoked gpg key on active dev list

• Status: RESOLVED FIXED
• Product: Community Relations

[Description Outer Measure 2012-04-23 06:45:20 UTC]

http://www.gentoo.org/proj/en/devrel/roll-call/userinfo.xml list s4t4n's gpg key as 0xADF2A3CA, but the key was revoked:


$ gpg --edit-key 0xADF2A3CA q
gpg (GnuPG) 2.0.19; Copyright (C) 2012 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


The following key was revoked on 2006-05-29 by DSA key 05FCE899ADF2A3CA Michele Noberasco (s4t4n) <[e-mail]>
pub  1024D/05FCE899ADF2A3CA  created: 2004-07-04  revoked: 2006-05-29  usage: SC  
                             trust: unknown       validity: revoked
The following key was revoked on 2006-05-29 by DSA key 05FCE899ADF2A3CA Michele Noberasco (s4t4n) <[e-mail]>
sub  2048g/717608F0E33AC0AE  created: 2004-07-04  revoked: 2006-05-29  usage: E   
[ revoked] (1). Michele Noberasco (s4t4n) <[e-mail]>


The new/old key 0x0c07369546b90acd (created 2003-01-20, most recent self-sig on primary uid 2008-09-22) is still valid.

[Comment 1 Markos Chandras (RETIRED) 2012-08-15 21:43:58 UTC]

ping?

[Comment 2 Markos Chandras (RETIRED) 2012-10-25 09:42:30 UTC]

Closing as s4t4n is retired on bug 48914

[Comment 3 Michele Noberasco (RETIRED) 2012-10-25 13:44:04 UTC]

Retired? Definitely not!

[Comment 4 Thomas Sachau 2012-10-31 11:14:42 UTC]

(In reply to comment #3)
> Retired? Definitely not!

Then please update your gpg key in ldap, so that it points to a valid and not revoked gpg key.

[Comment 5 Michele Noberasco (RETIRED) 2012-10-31 14:35:28 UTC]

OK.

Could you please point me towards the relevant documentation about 'updating my GPG key on LDAP'? If I ever did that, it was so much time ago that I completely forgot about it ;-)

[Comment 6 Markos Chandras (RETIRED) 2012-10-31 14:39:54 UTC]

(In reply to comment #5)
> OK.
> 
> Could you please point me towards the relevant documentation about 'updating
> my GPG key on LDAP'? If I ever did that, it was so much time ago that I
> completely forgot about it ;-)

Google is your friend

http://www.gentoo.org/proj/en/infrastructure/ldap.xml

[Comment 7 Michele Noberasco (RETIRED) 2012-12-06 11:14:29 UTC]

Google is always my friend, but my time is *really* in short supply.
Anyways, thanks for the link, got it.

This, however, led me to another problem: I managed to have a look at my LDAP record (after logging in into dev.gentoo.org), but to change it I need to know my login password on LDAP, which I don't know / never set up myself. I can log in just fine on dev.gentoo.org using my ssh key, but I cannot change my LDAP password using passed, since I have no idea about the current password.

Bye,
Michele

[Comment 8 Markos Chandras (RETIRED) 2012-12-06 11:18:13 UTC]

The recruiter must have told you your password when he recruited you. You need to contact the infra team to generate a new password for you

[Comment 9 Michele Noberasco (RETIRED) 2012-12-06 11:32:53 UTC]

(In reply to comment #8)
> The recruiter must have told you your password when he recruited you. 
No, she didn't, and is no longer a Gentoo dev by now.

Keep in mind that my Gentoo account is old (2004), so I suspect that the whole LDAP stuff came into being after my dev account was created.

> You need to contact the infra team to generate a new password for you
I'll try to contact somebody on the infra team about this.

[Comment 10 Michele Noberasco (RETIRED) 2012-12-06 11:48:15 UTC]

Never mind, seems my DLAP password and my e-mail account password were actually the same password.

Just updated my LDAP record with a non-revoked GPG key.

Bye,
Michele