Page MenuHomePhabricator

[[Special:PasswordReset]] can not be used on private wiki
Closed, ResolvedPublic

Description

[[Special:PasswordReset]] seems to be a new page and is currently forcing login on at least otrs-wiki, internal, collab, and office.

Needs whitelisting in many places (there are more I didn't try yet) but I'm not certain this should be done across the board. (I also have no complaints if it is done globally) OTOH, I don't want to wait for each wiki to make it's own decision. I'll let someone else decide the criteria. :)


Version: 1.18.x
Severity: major
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=23231

Details

Reference
bz32473

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 11:58 PM
bzimport set Reference to bz32473.

I think office and internal use a LDAP backend so you can not really reset your password using MediaWiki tools.

(In reply to comment #1)

I think office and internal use a LDAP backend so you can not really reset your
password using MediaWiki tools.

I don't think office does...

(In reply to comment #2)

(In reply to comment #1)

I think office and internal use a LDAP backend so you can not really reset your
password using MediaWiki tools.

I don't think office does...

None of the wikis except labs ones use ldap.

This bug is in MediaWiki 1.18 at least. Need to allow someone to reset their password.. To reproduce the issue:

log out of your test wiki
set $wgGroupPermissions['*']['read'] = false;
click the login link to access the login page
next to the login button ask for a new password (Forgotten your login details?)

You get a "login required" error.

r105428 whitelist Special:PasswordReset . Would need a backport in REL1_18.

r105537 merge the fix in REL1_18. Would be available in MediaWiki 1.18.1

  • Bug 33130 has been marked as a duplicate of this bug. ***