Centralauth-oversight throws InvalidArgumentException on beta
Closed, DuplicatePublicSecurity
Actions

Assigned To

None

Authored By

	Zabe
	May 8 2021, 2:12 PM

Description

[YJabF3nd9o2bDKEQ82ZRkgAAAAQ] /w/index.php?title=Special:CentralAuth&target=Zabe+%28test+4%29 InvalidArgumentException: DB connection domain 'loginwiki' does not match 'metawiki'

Backtrace:

from /srv/mediawiki/php-master/includes/user/ActorStore.php(704)
#0 /srv/mediawiki/php-master/includes/user/ActorStore.php(412): MediaWiki\User\ActorStore->checkDatabaseDomain(Wikimedia\Rdbms\DBConnRef)
#1 /srv/mediawiki/php-master/includes/block/DatabaseBlockStore.php(357): MediaWiki\User\ActorStore->acquireActorId(MediaWiki\User\UserIdentityValue, Wikimedia\Rdbms\DBConnRef)
#2 /srv/mediawiki/php-master/includes/block/DatabaseBlockStore.php(166): MediaWiki\Block\DatabaseBlockStore->getArrayForDatabaseBlock(MediaWiki\Block\DatabaseBlock, Wikimedia\Rdbms\DBConnRef)
#3 /srv/mediawiki/php-master/includes/block/DatabaseBlock.php(535): MediaWiki\Block\DatabaseBlockStore->insertBlock(MediaWiki\Block\DatabaseBlock, Wikimedia\Rdbms\DBConnRef)
#4 /srv/mediawiki/php-master/extensions/CentralAuth/includes/CentralAuthUser.php(1952): MediaWiki\Block\DatabaseBlock->insert(Wikimedia\Rdbms\DBConnRef)
#5 /srv/mediawiki/php-master/extensions/CentralAuth/includes/CentralAuthUser.php(1881): CentralAuthUser->doLocalSuppression(boolean, string, string, string)
#6 /srv/mediawiki/php-master/extensions/CentralAuth/includes/CentralAuthUser.php(1859): CentralAuthUser->doCrosswikiSuppression(boolean, string, string)
#7 /srv/mediawiki/php-master/extensions/CentralAuth/includes/CentralAuthUser.php(1810): CentralAuthUser->suppress(string, string)
#8 /srv/mediawiki/php-master/extensions/CentralAuth/includes/specials/SpecialCentralAuth.php(245): CentralAuthUser->adminLockHide(boolean, string, string, RequestContext)
#9 /srv/mediawiki/php-master/extensions/CentralAuth/includes/specials/SpecialCentralAuth.php(143): SpecialCentralAuth->doSubmit()
#10 /srv/mediawiki/php-master/includes/specialpage/SpecialPage.php(646): SpecialCentralAuth->execute(NULL)
#11 /srv/mediawiki/php-master/includes/specialpage/SpecialPageFactory.php(1396): SpecialPage->run(NULL)
#12 /srv/mediawiki/php-master/includes/MediaWiki.php(313): MediaWiki\SpecialPage\SpecialPageFactory->executePath(string, RequestContext)
#13 /srv/mediawiki/php-master/includes/MediaWiki.php(916): MediaWiki->performRequest()
#14 /srv/mediawiki/php-master/includes/MediaWiki.php(550): MediaWiki->main()
#15 /srv/mediawiki/php-master/index.php(53): MediaWiki->run()
#16 /srv/mediawiki/php-master/index.php(46): wfIndexMain()
#17 /srv/mediawiki/w/index.php(3): require(string)
#18 {main}

Steps to Reproduce:

Go to beta metawiki
Try to hide some account completly in CentralAuth

Event Timeline

Zabe created this task.May 8 2021, 2:12 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 8 2021, 2:12 PM

Zabe changed the subtype of this task from "Task" to "Bug Report".May 8 2021, 2:12 PM

Dupe of a security protected task, protecting this one too.

Urbanecm closed this task as a duplicate of T281972: ActorStore::checkDatabaseDomain: InvalidArgumentException: DB connection domain does not match when suppressing via Special:CentralAuth (CVE-2021-36128).May 8 2021, 7:11 PM

Urbanecm changed the visibility from "Custom Policy" to "Public (No Login Required)".May 10 2021, 11:45 AM

sbassett removed a project: Security-Team.May 11 2021, 2:54 PM

Zabe added a project: User-Zabe.Aug 28 2021, 1:14 PM

Zabe moved this task from Backlog to Reports on the User-Zabe board.

Zabe removed a project: User-Zabe.Apr 13 2022, 12:49 AM

Centralauth-oversight throws InvalidArgumentException on betaClosed, DuplicatePublicSecurityActions

Description

Event Timeline

Centralauth-oversight throws InvalidArgumentException on beta
Closed, DuplicatePublicSecurity
Actions