Create a testing server in Labs that can be used to test work in progress patches implementing AuthManager including Action API changes.
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • Deskana | T75616 Tracking: API/backend issues blocking Wikipedia app development | |||
| Resolved | Anomie | T32788 Allow triggering of user password reset email via the API | |||
| Resolved | Anomie | T48179 Allow a challenge stage during authentication | |||
| Resolved | None | T5709 Refactoring to make external authentication and identity systems easier | |||
| Resolved | Tgr | T43201 UserLoadFromSession considered evil | |||
| Resolved | Anomie | T67493 Session is started by EditAction (problem for extensions using UserLoadFromSession hook) | |||
| Open | Feature | None | T55156 Provide option to force a login session to end within a certain time | ||
| Resolved | None | T89459 Modernize MediaWiki authentication system (AuthManager) | |||
| Resolved | Tgr | T134945 Update API clients for AuthManager | |||
| Resolved | Dbrant | T135633 Add "remember me" support | |||
| Resolved | • Mholloway | T124229 Update login and account creation for API changes | |||
| Resolved | bd808 | T124832 Setup testing server for AuthManager in Labs | |||
| Resolved | bd808 | T128501 Create role for testing/developing LDAPAuth |
Event Timeline
Setup new host at am-01.authmanager.eqiad.wmflabs:
- Enabled role role::labs::mediawiki_vagrant and forced puppet run with sudo puppet agent --test --verbose
- Setup MediaWiki-Vagrant hiera config for a wiki farm by creating /srv/mediawiki-vagrant/puppet/hieradata/local.yaml:
--- role::mediawiki::hostname: authmanager.wmflabs.org mediawiki::multiwiki::base_domain: "-authmanager.wmflabs.org"
- Enabled MediaWiki-Vagrant roles:
- apex
- buggy
- centralauth
- cite
- cologneblue
- eventlogging
- fss
- gadgets2
- geshi
- inputbox
- interwiki
- jsonconfig
- math
- mobilefrontend
- oauth
- parserfunctions
- poem
- poolcounter
- psr3
- scribunto
- sitematrix
- templatedata
- thumb_on_404
- titleblacklist
- visualeditor
- wikidiff2
- wikimediamessages
- Started VM: vagrant up
- Waited forever for that to complete....
- Tested that wiki worked locally via curl -L localhost:8080
- Added web proxies pointing to am-01.authmanager.eqiad.wmflabs:8080 using wikitech UI:
- authmanager.wmflabs.org
- centralauthtest-authmanager.wmflabs.org
- gadgets-authmanager.wmflabs.org
- gadgetsclient-authmanager.wmflabs.org
- login-authmanager.wmflabs.org
- mobile-authmanager.wmflabs.org
- Logged in to https://authmanager.wmflabs.org using default MediaWiki-Vagrant credentials and then changed the Admin password
Not sure if we want to have everything on the same box, but other useful test roles are confimedit, https, oathauth, oauthauthentication.
And we should probably have an LdapAuthentication role. The wikitech role sets it up but comes with a million other things.
I enabled confirmedit. I don't think that https will really add anything in the Labs environment. We could add some custom config to ensure that https is enforced, but TLS termination is already provided by the Labs proxy.
I think we will have to setup other servers for the alternate authplugin implementations or at least change the roles to provision separate wikis.
My next big question for this stack is going to be how we will track and manage the various cherry-picks that we want to apply. Does anyone have a better idea than local feature branches that we rebase on master?
$ ssh am-01.authmanager.eqiad.wmflabs $ cd /srv/mediawiki-vagrant/mediawiki $ git fetch https://gerrit.wikimedia.org/r/mediawiki/core refs/changes/97/195297/96 && git checkout FETCH_HEAD $ git checkout -b authmanager $ git fetch https://gerrit.wikimedia.org/r/mediawiki/core refs/changes/01/265201/4 && git cherry-pick FETCH_HEAD $ git log --pretty --oneline --graph * 34603e3 WIP: API changes for AuthManager * add0d68 WIP: Add AuthManager * 88e5638 Browser test: fix log in Selenium tests * 5b33f0f Allow in messages * 6e9b4f0 Convert all array() syntax to [] * 2fd379f Merge "Update OOjs UI to v0.15.4"
Lowering priority because basic testing server is up and running. Not {{done}} yet due to missing LDAPAuth testing system.
The LdapAuthentication wiki is now up and running at https://ldapauth-authmanager.wmflabs.org/wiki/Main_Page