⚓ T128501 Create role for testing/developing LDAPAuth

Subject	Repo	Branch	Lines +/-
Add LdapAuthentication role	mediawiki/vagrant	master	+387 -0
Introduce foreachwikiwithextension	mediawiki/vagrant	master	+167 -22
Allow global extension to be disabled per-wiki	mediawiki/vagrant	master	+68 -12

Status	Subtype	Assigned	Task
Resolved		• Deskana	T75616 Tracking: API/backend issues blocking Wikipedia app development
Resolved		Anomie	T32788 Allow triggering of user password reset email via the API
Open		None	T90925 General authentication improvements for MediaWiki
Resolved		Anomie	T48179 Allow a challenge stage during authentication
Open		None	T5709 Refactoring to make external authentication and identity systems easier
Resolved		Tgr	T43201 UserLoadFromSession considered evil
Resolved		Anomie	T67493 Session is started by EditAction (problem for extensions using UserLoadFromSession hook)
Open	Feature	None	T55156 Provide option to force a login session to end within a certain time
Open		None	T89459 Modernize MediaWiki authentication system (AuthManager)
Open		None	T110291 Update all extensions to use AuthManager
Resolved		Tgr	T134945 Update API clients for AuthManager
Resolved		• demon	T135498 Release AuthManager with MediaWiki 1.27
Resolved		Tgr	T138910 Backport AuthManager-related changes to 1.27
Resolved		None	T130340 [Reading Infrastructure 2015-16 Q4] Enable two-factor authentication via AuthManager on the Wikimedia cluster
Resolved		• Mattflaschen-WMF	T68699 Increase "remember me" login cookie expiry from 30 days to 1 year on Wikimedia wikis
Resolved		Tgr	T135504 Enable AuthManager in WMF production
Resolved		Anomie	T110282 Update extensions which are deployed on the Wikimedia cluster to use AuthManager
Resolved		Anomie	T110288 Update OpenStackManager to use AuthManager
Resolved		Anomie	T110453 Update LdapAuthentication to use AuthManager
Resolved		Dbrant	T135633 Add "remember me" support
Resolved		• Mholloway	T124229 Update login and account creation for API changes
Resolved		bd808	T124832 Setup testing server for AuthManager in Labs
Resolved		bd808	T128501 Create role for testing/developing LDAPAuth

bd808 created this task.Mar 1 2016, 7:00 PM

Restricted Application added a project: User-bd808. · View Herald TranscriptMar 1 2016, 7:00 PM

Restricted Application added subscribers: StudiesWorld, Aklapper. · View Herald Transcript

This might be as simple as extracting some things from ::role::wikitech.

bd808 moved this task from To Do to In Dev/Progress on the User-bd808 board.Mar 10 2016, 4:32 PM

bd808 moved this task from Backlog to In Progress on the MediaWiki-Vagrant board.Mar 10 2016, 8:26 PM

bd808 added a parent task: T124832: Setup testing server for AuthManager in Labs.Mar 14 2016, 12:02 AM

Change 277701 had a related patch set uploaded (by BryanDavis):
Allow global extension to be disabled per-wiki

https://gerrit.wikimedia.org/r/277701

Change 277702 had a related patch set uploaded (by BryanDavis):
[WIP] Add LdapAuthentication role

https://gerrit.wikimedia.org/r/277702

In T128501#2076908, @bd808 wrote:

This might be as simple as extracting some things from ::role::wikitech.

I totally jinxed myself with that statement. :/

bd808 moved this task from In Dev/Progress to Needs Review/Feedback on the User-bd808 board.Mar 16 2016, 10:45 PM

Change 277701 merged by jenkins-bot:
Allow global extension to be disabled per-wiki

https://gerrit.wikimedia.org/r/277701

bd808 moved this task from Needs Review/Feedback to In Dev/Progress on the User-bd808 board.Mar 17 2016, 5:06 PM

The patch *almost* works. It turns out that there is a conflict with the bootstrapping of role::centralauth which was masked in my local testing due to CA being enabled on my local ldapauth wiki initially. The problem is that role::centralauth runs Mediawiki::Maintenance['Pass 0 of CentralAuth'] for all wikis (using the alldbs generated dblist). It really should use a dblist that only includes wikis where CA is installed.