Page MenuHomePhabricator
Create Task
Maniphest T373827

Log spam from CentralAuthSessionProvider: "username ~2024-XXXX is not usable on this wiki"
Open, Needs TriagePublic1 Estimated Story Points
Actions

Description

I was browsing through channel:session logs looking for a cause of T372702. I didn't find that, but I found this instead.

We have ~1500 warnings logged per day, starting on 2024-07-22, that look like this:
CentralAuthSessionProvider::provideSessionInfo: username ~2024-XXXX is not usable on this wiki

https://logstash.wikimedia.org/goto/25a50e3951f929a265ede5df1f7dea43

image.png (526×2 px, 83 KB)

It's good that it's not usable (this is getting logged on wikis with temp accounts disabled). CentralAuth shouldn't log these warnings for temporary users.

Details

SubjectRepoBranchLines +/-
[session] Don't create a warning if name reserved by temp user systemmediawiki/extensions/CentralAuthmaster+17 -5
Customize query in gerrit

Related Objects

Event Timeline

matmarex created this task.Mon, Sep 2, 10:02 PM
Restricted Application added a project: MediaWiki-Platform-Team. · View Herald TranscriptMon, Sep 2, 10:02 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
JJMC89 removed a project: Wikimedia-production-error.Mon, Sep 2, 10:14 PM
matmarex edited projects, added Trust and Safety Product Team, MediaWiki-Platform-Team (Radar); removed MediaWiki-Platform-Team.Mon, Sep 9, 3:01 PM
Dreamy_Jazz edited projects, added Temporary accounts (Blockers to minor pilot wiki deployment); removed Temporary accounts.Mon, Sep 9, 3:03 PM
Dreamy_Jazz subscribed.

Thanks for filing this. Tagging this as a pilot wiki blocker as the rate of logstash entries would increase once we deploy to more wikis.

Dreamy_Jazz claimed this task.Tue, Sep 10, 5:26 PM
Dreamy_Jazz set the point value for this task to 1.
Dreamy_Jazz added a project: Trust and Safety Product Sprint (Sprint Theremin (Aug 26 - Sept. 6)).
Dreamy_Jazz moved this task from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Theremin (Aug 26 - Sept. 6)) board.
gerritbot added a comment.Tue, Sep 10, 6:01 PM

Change #1071929 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/CentralAuth@master] [session] Don't create a warning if name reserved by temp user system

https://gerrit.wikimedia.org/r/1071929

gerritbot added a project: Patch-For-Review.Tue, Sep 10, 6:01 PM
Dreamy_Jazz moved this task from In Progress to Needs QA on the Trust and Safety Product Sprint (Sprint Theremin (Aug 26 - Sept. 6)) board.Tue, Sep 10, 6:32 PM
Dreamy_Jazz added a comment.EditedTue, Sep 10, 6:37 PM

Suggested testing steps:

  1. Use a MediaWiki-extensions-CentralAuth wiki farm for testing
  2. Enable temporary accounts on one wiki (wiki A) and then have them disabled on another wiki (wiki B)
  3. Create a temporary account on wiki A
  4. Open wiki B while logged in to the temporary account
  5. Verify that no warning is logged on wiki B for the username of the temporary account not being usable

This may instead be easier to test when this reaches production wikis.

gerritbot added a comment.Tue, Sep 10, 6:51 PM

Change #1071929 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@master] [session] Don't create a warning if name reserved by temp user system

https://gerrit.wikimedia.org/r/1071929

ReleaseTaggerBot added a project: MW-1.43-notes (1.43.0-wmf.23; 2024-09-17).Tue, Sep 10, 7:00 PM
Maintenance_bot removed a project: Patch-For-Review.Tue, Sep 10, 7:30 PM
kostajh moved this task from Backlog to In progress on the Temporary accounts (Blockers to minor pilot wiki deployment) board.Mon, Sep 16, 8:41 AM
Dreamy_Jazz moved this task from Sprint Theremin (Aug 26 - Sept. 6) to Sprint Beatboxing (Sept 16-27) on the Trust and Safety Product Sprint board.Mon, Sep 16, 10:16 AM
Dreamy_Jazz edited projects, added Trust and Safety Product Sprint (Sprint Beatboxing (Sept 16-27)); removed Trust and Safety Product Sprint (Sprint Theremin (Aug 26 - Sept. 6)).
Dreamy_Jazz moved this task from Priority Backlog to Needs QA on the Trust and Safety Product Sprint (Sprint Beatboxing (Sept 16-27)) board.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits