On Mon, Jan 13, 2014 at 11:52 AM, Till Kraemer <info(a)till-kraemer.com>wrote;wrote:
Hi Chris,
thanks a lot for your help!
Things will work a little better if you have a
central wiki defined.
Since
you have a poolwiki, you may want to make that
central. Users should
never
know it's there, but that code path has been
worn in a little more on
Wikimedia wikis.
I've set $wgCentralAuthLoginWiki = 'poolwiki';
If I try to login with my account Till Kraemer into the German wiki (my
home wiki), it gives me the following message:
"No active login attempt is in progress for your session."
But I'm still logged in.
In the other wikis I can't login anymore. It also outputs the message
above.
This often happens when Memcached can't be reached / used. CentralAuth
requires memcache caching, so make sure that's working.
A helpful diagnosis would be to turn on debugging
and watch a user who is
not attached on the wiki, but has a global account, login. You should
see CentralAuth and CentralAuthVerbose message that will show why
centralauth isn't attaching the user account.
Great idea, thanks! I didn't even know that you can log errors via
MediaWiki. I just turned on debugging and checked out debug-poolwiki.log
which is filled with this error:
CentralAuthHooks::onUserLoadFromSession: no token or session
This is expected on login, assuming you're submitting the login form as a
logged out user (it does the user setup for all pages, including the login
page, before it starts handling the contents of the form itself. The
interesting stuff should be a few lines later.
I also tried this:
$wgCentralAuthCookieDomain = array(
'cswiki' => 'cs.example.com',
'dewiki' => 'de.example.com',
'enwiki' => 'en.example.com',
'eswiki' => 'es.example.com',
'frwiki' => 'fr.example.com',
'huwiki' => 'hu.example.com',
'hywiki' => 'hy.example.com',
'nlwiki' => 'nl.example.com',
'plwiki' => 'pl.example.com',
'poolwiki' => 'pool.example.com',
'ptwiki' => 'pt.example.com',
'ruwiki' => 'ru.example.com',
'svwiki' => 'sv.example.com',
);
...but then I can't login at all. It says my password is wrong and if I
try again it says cookies have to be enabled.
I also tried this:
$wgCentralAuthCookieDomain = '.example.com';
If they're all in the same top level domain, this is probably the better
way to do it.
...but it just seems to create an https:// connection showing the
following error in my browser:
This should only happen if you have wgSecureLogin enabled for a wiki, or
you have https in wgServer. You'll want to get that fixed before you can
get much further in setting up CentralAuth.
"Secure Connection Failed
An error occurred during a connection to
de.example.com. SSL received a
record that exceeded the maximum permissible length. (Error code:
ssl_error_rx_record_too_long)"
But I guess this has nothing to do with CentralAuth but with me not
having SSL configured correctly yet.
Thanks and cheers,
Till
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l