Hi Chris,
thanks a lot for your help!
Things will work a little better if you have a central
wiki defined. Since
you have a poolwiki, you may want to make that central. Users should never
know it's there, but that code path has been worn in a little more on
Wikimedia wikis.
I've set $wgCentralAuthLoginWiki = 'poolwiki';
If I try to login with my account Till Kraemer into the German wiki (my
home wiki), it gives me the following message:
"No active login attempt is in progress for your session."
But I'm still logged in.
In the other wikis I can't login anymore. It also outputs the message above.
A helpful diagnosis would be to turn on debugging and
watch a user who is
not attached on the wiki, but has a global account, login. You should
see CentralAuth and CentralAuthVerbose message that will show why
centralauth isn't attaching the user account.
Great idea, thanks! I didn't even know that you can log errors via
MediaWiki. I just turned on debugging and checked out debug-poolwiki.log
which is filled with this error:
CentralAuthHooks::onUserLoadFromSession: no token or session
I also tried this:
$wgCentralAuthCookieDomain = array(
'cswiki' => 'cs.example.com',
'dewiki' => 'de.example.com',
'enwiki' => 'en.example.com',
'eswiki' => 'es.example.com',
'frwiki' => 'fr.example.com',
'huwiki' => 'hu.example.com',
'hywiki' => 'hy.example.com',
'nlwiki' => 'nl.example.com',
'plwiki' => 'pl.example.com',
'poolwiki' => 'pool.example.com',
'ptwiki' => 'pt.example.com',
'ruwiki' => 'ru.example.com',
'svwiki' => 'sv.example.com',
);
...but then I can't login at all. It says my password is wrong and if I
try again it says cookies have to be enabled.
I also tried this:
$wgCentralAuthCookieDomain = '.example.com';
...but it just seems to create an https:// connection showing the
following error in my browser:
"Secure Connection Failed
An error occurred during a connection to
de.example.com. SSL received a
record that exceeded the maximum permissible length. (Error code:
ssl_error_rx_record_too_long)"
But I guess this has nothing to do with CentralAuth but with me not
having SSL configured correctly yet.
Thanks and cheers,
Till