Page MenuHomePhabricator

[regression] Cannot globally suppress any global account
Closed, ResolvedPublicSecurity

Description

Trying to lock+suppress any global account fails and returns the following error message:

Sorry! This site is experiencing technical difficulties.

Try waiting a few minutes and reloading.

(Cannot access the database: Cannot access the database: Unknown database 'metawiki' (db1175) (db1175))

This impacts the stewards' ability to suppress abusive usernames that are outing or harassing (as it was the case when I discovered this bug).

Thank you.

Details

Risk Rating
Low
Author Affiliation
Wikimedia Communities

Event Timeline

sbassett changed Risk Rating from N/A to High.
sbassett added a project: DBA.

Adding DBA due to the error message. Which is really odd since the rest of metawiki (that I can see) seems fine.

Adding DBA due to the error message. Which is really odd since the rest of metawiki (that I can see) seems fine.

That's not an issue with DBAs, it's a mess in CA connecting to the wrong database but I'm helping here given the severity.

As far as I can see the two logged suppressions (not naming accounts here on purpose to avoid this being PermanentlyPrivate) after wmf.18 was have promoted completed successfully instead of being in some weird half-suppressed state.

The patch has been deployed. It should be fixed for now.

I can lock and suppress accounts via CentralAuth again in production. Thanks to all for your swift action and response to this incident.

My part for now is done.

I'm going to make this public now as the issue was resolved with the revert in gerrit and deployed.

sbassett lowered the priority of this task from High to Low.Jan 20 2022, 7:57 PM
sbassett changed the visibility from "Custom Policy" to "Public (No Login Required)".
sbassett changed the edit policy from "Custom Policy" to "All Users".
sbassett changed Risk Rating from High to Low.
Zabe raised the priority of this task from Low to High.Jan 20 2022, 8:09 PM

restoring high priority since it is still a next weeks train blocker.

Change 755758 had a related patch set uploaded (by Zabe; author: Zabe):

[mediawiki/core@master] DatabaseBlock: fetch a database connection for the correct wiki

https://gerrit.wikimedia.org/r/755758

Change 755758 merged by jenkins-bot:

[mediawiki/core@master] DatabaseBlock: fetch a database connection for the correct wiki

https://gerrit.wikimedia.org/r/755758

Zabe closed this task as Resolved.EditedJan 21 2022, 9:52 AM

Sorry for the mess and thanks to everyone who helped mitigating the incident.