A fix for T13148: Users can login with global account and create an account in a wiki even if IP is blocked from account creations resulted in good faith users from other wikis being unable to edit on a wiki where they don't have a local account and account creation is blocked for their underlying IPs. Administrators can manually create accounts for users who aren't registered at all, however there's no equivalent mechanism for global accounts. The only solution is to get an admin to run createLocalAccount.php which obviously would happen only in exceptional situations and does not scale.
Description
Details
Related Objects
- Mentioned In
- T266899: Centralauth-createlocal-logentry appears as needing update
T259721: Create a front end option for administrators to create a local account from a global account
T249444: Blocks apparently prevent account autocreation
T37170: Block message for account creation if central auth autocreation of an account fails on a local project because of an account creation blocked block
T211215: Allow admins/account creators to approve automatic account creation in case of blocks - Mentioned Here
- T259721: Create a front end option for administrators to create a local account from a global account
T211215: Allow admins/account creators to approve automatic account creation in case of blocks
T13148: Users can login with global account and create an account in a wiki even if IP is blocked from account creations
Event Timeline
OTRS Ticket#2019081310000247 is another example. I think a reasonable solution is to create a globalgrouppermission to Global IP block exempt that would allow a user to create an account even if their IP is locally blocked.
Just another user hit by this problem:
https://ticket.wikimedia.org/otrs/index.pl?Action=AgentTicketZoom&TicketNumber=2020090410005808
Let's do it, I hit it over and over... Simple solution: make maintenance/createLocalAccount.php (which allows sysadmins to workaround this issue) a special page, usable by stewards at very least, possibly also local sysops at their local wiki.
Change 618734 had a related patch set uploaded (by Urbanecm; owner: Majavah):
[mediawiki/extensions/CentralAuth@master] Create special page to allow manually creating local accounts for global users
Change 618734 merged by jenkins-bot:
[mediawiki/extensions/CentralAuth@master] Create special page to allow manually creating local accounts for global users