Page MenuHomePhabricator
Create Task
Maniphest T384153

SUL3 Phase 3: All existing user login on group 0 and group 1 wikis
Closed, ResolvedPublic
Actions

Description

Enable SUL3 for all existing users, across all user groups, who login to any group 0 or group 1 wikis.
(See full rollout plan here.)

Details

Due Date
Feb 9 2025, 11:00 PM
Related Changes in Gerrit:
SubjectRepoBranchLines +/-
Set $wgSul3RolloutUserPercentage on some testwikisoperations/mediawiki-configmaster+2 -2
Enable SUL3 logins on group 0operations/mediawiki-configmaster+1 -1
Enable SUL3 logins for 1% of group 1 usersoperations/mediawiki-configmaster+1 -0
Enable SUL3 login for 10% of group 1 usersoperations/mediawiki-configmaster+1 -1
Enable SUL3 logins for 50% of group 1 usersoperations/mediawiki-configmaster+1 -1
Enable SUL3 login for all group 1 usersoperations/mediawiki-configmaster+1 -1
Customize query in gerrit

Related Objects
Search...

Event Timeline

Tgr created this task.Jan 19 2025, 5:58 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 19 2025, 5:58 PM
Tgr set Due Date to Feb 9 2025, 11:00 PM.Jan 19 2025, 5:59 PM
Tgr moved this task from Inbox, needs triage to Needs refinement on the MediaWiki-Platform-Team board.
Tgr added a subtask: T375796: Synchronize SUL2 and SUL3 central browser state.Jan 20 2025, 2:35 PM
DAlangi_WMF changed the status of subtask T375796: Synchronize SUL2 and SUL3 central browser state from In Progress to Open.Feb 10 2025, 12:21 PM
Tgr renamed this task from SUL3 Phase 2: All existing user login on Group0 wikis to SUL3 Phase 3: All existing user login on Group0 wikis.Feb 25 2025, 5:37 PM
Tgr renamed this task from SUL3 Phase 3: All existing user login on Group0 wikis to SUL3 Phase 3: All existing user login on group 0 and group 1 wikis.Mar 5 2025, 12:13 PM
Tgr updated the task description. (Show Details)
Tgr moved this task from Backlog to Later on the SUL3 board.Mar 5 2025, 9:20 PM
gerritbot added a comment.Mar 13 2025, 12:23 PM

Change #1127505 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/mediawiki-config@master] Set $wgSul3RolloutUserPercentage on some testwikis

https://gerrit.wikimedia.org/r/1127505

gerritbot added a project: Patch-For-Review.Mar 13 2025, 12:23 PM
gerritbot added a comment.Mar 13 2025, 2:46 PM

Change #1127505 merged by jenkins-bot:

[operations/mediawiki-config@master] Set $wgSul3RolloutUserPercentage on some testwikis

https://gerrit.wikimedia.org/r/1127505

Stashbot mentioned this in T374021: Make WikibaseQualityConstraints use split-graph query service.Mar 13 2025, 2:47 PM
Stashbot mentioned this in T384218: SUL3 Phase 2: Staged rollout for all new account creation.

Mentioned in SAL (#wikimedia-operations) [2025-03-13T14:47:00Z] <lucaswerkmeister-wmde@deploy2002> Started scap sync-world: Backport for [[gerrit:1127462|Enable SUL3 signup for everyone (T384218)]], [[gerrit:1127505|Set $wgSul3RolloutUserPercentage on some testwikis (T384153)]], [[gerrit:1127516|Reapply "Make WikibaseQualityConstraints use split-graph query service" (T374021)]]

Stashbot added a comment.Mar 13 2025, 2:50 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-13T14:50:00Z] <lucaswerkmeister-wmde@deploy2002> tgr, lucaswerkmeister-wmde: Backport for [[gerrit:1127462|Enable SUL3 signup for everyone (T384218)]], [[gerrit:1127505|Set $wgSul3RolloutUserPercentage on some testwikis (T384153)]], [[gerrit:1127516|Reapply "Make WikibaseQualityConstraints use split-graph query service" (T374021)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Mar 13 2025, 2:57 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-13T14:57:24Z] <lucaswerkmeister-wmde@deploy2002> Finished scap sync-world: Backport for [[gerrit:1127462|Enable SUL3 signup for everyone (T384218)]], [[gerrit:1127505|Set $wgSul3RolloutUserPercentage on some testwikis (T384153)]], [[gerrit:1127516|Reapply "Make WikibaseQualityConstraints use split-graph query service" (T374021)]] (duration: 10m 24s)

Maintenance_bot removed a project: Patch-For-Review.Mar 13 2025, 3:31 PM
gerritbot added a comment.Mar 14 2025, 6:14 PM

Change #1127954 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/mediawiki-config@master] Enable SUL3 logins on group 0

https://gerrit.wikimedia.org/r/1127954

gerritbot added a project: Patch-For-Review.Mar 14 2025, 6:14 PM
Tgr mentioned this in T389064: Notify WebAuthn users about SUL3 changes.Mar 17 2025, 12:40 PM
Tgr added a subtask: T389064: Notify WebAuthn users about SUL3 changes.Mar 17 2025, 1:18 PM
Tgr mentioned this in T388218: TypeError: Argument 1 passed to MediaWiki\Extension\CentralAuth\CentralDomainUtils::getWikiPageUrl() must be of the type string, null given.Mar 17 2025, 2:36 PM
gerritbot added a comment.Mar 18 2025, 8:27 PM

Change #1127954 merged by jenkins-bot:

[operations/mediawiki-config@master] Enable SUL3 logins on group 0

https://gerrit.wikimedia.org/r/1127954

Stashbot added a comment.Mar 18 2025, 8:27 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-18T20:27:45Z] <tgr@deploy2002> Started scap sync-world: Backport for [[gerrit:1127954|Enable SUL3 logins on group 0 (T384153)]]

Maintenance_bot removed a project: Patch-For-Review.Mar 18 2025, 8:30 PM
Stashbot added a comment.Mar 18 2025, 8:34 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-18T20:34:03Z] <tgr@deploy2002> tgr: Backport for [[gerrit:1127954|Enable SUL3 logins on group 0 (T384153)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Mar 18 2025, 8:52 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-18T20:52:36Z] <tgr@deploy2002> Finished scap sync-world: Backport for [[gerrit:1127954|Enable SUL3 logins on group 0 (T384153)]] (duration: 24m 51s)

gerritbot added a comment.Mar 20 2025, 12:35 AM

Change #1129546 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/mediawiki-config@master] Enable SUL3 logins for 1% of group 1 users

https://gerrit.wikimedia.org/r/1129546

gerritbot added a project: Patch-For-Review.Mar 20 2025, 12:35 AM
Tgr added subtasks: T389318: Unable to login via SUL3 on wikitech.wikimedia.org ("Session hijacking" error), T389159: Repeatedly logged out on some local wikis, T389433: Fix stuck old cookies on Wikitech, T389430: Page and Index namespaces from ProofreadPage extension no longer considered content namespaces since deploy of 1.44.0-wmf.21.Mar 20 2025, 12:40 AM
gerritbot added a comment.Mar 20 2025, 9:02 AM

Change #1129546 merged by jenkins-bot:

[operations/mediawiki-config@master] Enable SUL3 logins for 1% of group 1 users

https://gerrit.wikimedia.org/r/1129546

Stashbot added a comment.Mar 20 2025, 9:03 AM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T09:03:00Z] <tgr@deploy2002> Started scap sync-world: Backport for [[gerrit:1129546|Enable SUL3 logins for 1% of group 1 users (T384153)]]

Stashbot added a comment.Mar 20 2025, 9:12 AM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T09:12:16Z] <tgr@deploy2002> tgr: Backport for [[gerrit:1129546|Enable SUL3 logins for 1% of group 1 users (T384153)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Mar 20 2025, 9:28 AM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T09:28:47Z] <tgr@deploy2002> Finished scap sync-world: Backport for [[gerrit:1129546|Enable SUL3 logins for 1% of group 1 users (T384153)]] (duration: 25m 47s)

Maintenance_bot removed a project: Patch-For-Review.Mar 20 2025, 9:30 AM
Tgr closed subtask T389430: Page and Index namespaces from ProofreadPage extension no longer considered content namespaces since deploy of 1.44.0-wmf.21 as Resolved.Mar 20 2025, 12:47 PM
gerritbot added a comment.Mar 20 2025, 1:00 PM

Change #1129821 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/mediawiki-config@master] Enable SUL3 login for 10% of group 1 users

https://gerrit.wikimedia.org/r/1129821

gerritbot added a project: Patch-For-Review.Mar 20 2025, 1:00 PM
gerritbot added a comment.Mar 20 2025, 1:44 PM

Change #1129821 merged by jenkins-bot:

[operations/mediawiki-config@master] Enable SUL3 login for 10% of group 1 users

https://gerrit.wikimedia.org/r/1129821

Stashbot added a comment.Mar 20 2025, 1:44 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T13:44:43Z] <sgimeno@deploy2002> Started scap sync-world: Backport for [[gerrit:1129821|Enable SUL3 login for 10% of group 1 users (T384153)]]

Stashbot added a comment.Mar 20 2025, 1:47 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T13:47:47Z] <sgimeno@deploy2002> tgr, sgimeno: Backport for [[gerrit:1129821|Enable SUL3 login for 10% of group 1 users (T384153)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Mar 20 2025, 1:56 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T13:56:02Z] <sgimeno@deploy2002> Finished scap sync-world: Backport for [[gerrit:1129821|Enable SUL3 login for 10% of group 1 users (T384153)]] (duration: 11m 18s)

Maintenance_bot removed a project: Patch-For-Review.Mar 20 2025, 2:30 PM
gerritbot added a comment.Mar 20 2025, 6:07 PM

Change #1129905 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/mediawiki-config@master] Enable SUL3 logins for 50% of group 1 users

https://gerrit.wikimedia.org/r/1129905

gerritbot added a project: Patch-For-Review.Mar 20 2025, 6:07 PM
gerritbot added a comment.Mar 20 2025, 8:59 PM

Change #1129905 merged by jenkins-bot:

[operations/mediawiki-config@master] Enable SUL3 logins for 50% of group 1 users

https://gerrit.wikimedia.org/r/1129905

Stashbot added a comment.Mar 20 2025, 8:59 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T20:59:44Z] <tgr@deploy2002> Started scap sync-world: Backport for [[gerrit:1129435|Throttle exemption for Editathon in Ciudad de Buenos Aires - 29 March 2025 (T389400)]], [[gerrit:1129905|Enable SUL3 logins for 50% of group 1 users (T384153)]], [[gerrit:1129914|AbstractIterator: Make PHP 8.1 compatible (T389515)]]

Stashbot mentioned this in T389515: PHP Deprecated: Return type of Flow\Search\Iterators\AbstractIterator::current() should either be compatible with Iterator::current(): mixed, or the #[\ReturnTypeWillChange] attribute should be used.Mar 20 2025, 8:59 PM
Stashbot mentioned this in T389400: Lift IP for a edit-a-thon in Ciudad de Buenos Aires, Argentina 2025-03-29 .
Stashbot added a comment.Mar 20 2025, 9:04 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T21:04:35Z] <tgr@deploy2002> tgr, jforrester, superpes: Backport for [[gerrit:1129435|Throttle exemption for Editathon in Ciudad de Buenos Aires - 29 March 2025 (T389400)]], [[gerrit:1129905|Enable SUL3 logins for 50% of group 1 users (T384153)]], [[gerrit:1129914|AbstractIterator: Make PHP 8.1 compatible (T389515)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Mar 20 2025, 9:14 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-20T21:14:11Z] <tgr@deploy2002> Finished scap sync-world: Backport for [[gerrit:1129435|Throttle exemption for Editathon in Ciudad de Buenos Aires - 29 March 2025 (T389400)]], [[gerrit:1129905|Enable SUL3 logins for 50% of group 1 users (T384153)]], [[gerrit:1129914|AbstractIterator: Make PHP 8.1 compatible (T389515)]] (duration: 14m 26s)

Maintenance_bot removed a project: Patch-For-Review.Mar 20 2025, 9:31 PM
Tgr closed subtask T389433: Fix stuck old cookies on Wikitech as Resolved.Mar 20 2025, 9:52 PM
gerritbot added a comment.Mar 21 2025, 1:48 PM

Change #1130121 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[operations/mediawiki-config@master] Enable SUL3 login for all group 1 users

https://gerrit.wikimedia.org/r/1130121

gerritbot added a project: Patch-For-Review.Mar 21 2025, 1:48 PM
XXBlackburnXx subscribed.EditedMar 22 2025, 12:56 AM

Just a note: users with WebAuthn enabled who registered that method on a group1 wiki are unable to authenticate with auth.wikimedia.org (just had this myself using Yubikey on meta.wikimedia.org).

Its probably best to reach out to anyone using this 2FA method on a group1 wiki if possible, and suggest switching to TOTP before deploying ^^ that patch.

Tgr added a comment.Mar 22 2025, 10:12 PM
In T384153#10664580, @XXBlackburnXx wrote:

Just a note: users with WebAuthn enabled who registered that method on a group1 wiki are unable to authenticate with auth.wikimedia.org (just had this myself using Yubikey on meta.wikimedia.org).

Its probably best to reach out to anyone using this 2FA method on a group1 wiki if possible, and suggest switching to TOTP before deploying ^^ that patch.

Uh, sorry about this :(
That was supposed to be done in T389064: Notify WebAuthn users about SUL3 changes on Monday, but other problems came up and I forgot to do it. Some code changes are needed for setting up WebAuthn keys on the central domain, so I can't do it over the weekend but I'll fix it next Monday.

For the time being, you can log in on the old domain by attaching &usesul3=0 to the URL - i.e. right click on "Log in", copy link address, paste it in the URL bar, and add &usesul3=0 to it. For example, https://meta.wikimedia.org/w/index.php?title=Special:UserLogin&returnto=Main+Page&usesul3=0 or https://www.wikidata.org/w/index.php?title=Special:UserLogin&returnto=Wikidata%3AMain+Page&usesul3=0 . That will let you log in on your old domain and the WebAuthn key weill work.

Tgr added a subtask: T389796: Unable to autologin on wikitech.wikimedia.org.Mar 24 2025, 1:23 PM
Tgr closed subtask T389796: Unable to autologin on wikitech.wikimedia.org as Resolved.Mar 24 2025, 2:45 PM
gerritbot added a comment.Mar 24 2025, 8:06 PM

Change #1130121 merged by jenkins-bot:

[operations/mediawiki-config@master] Enable SUL3 login for all group 1 users

https://gerrit.wikimedia.org/r/1130121

Stashbot added a comment.Mar 24 2025, 8:06 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-24T20:06:30Z] <spiderpig@deploy1003> Started scap sync-world: Backport for [[gerrit:1130121|Enable SUL3 login for all group 1 users (T384153)]], [[gerrit:1130122|Enable SUL3 login for 1% of group 2 users (T384219)]]

Stashbot mentioned this in T384219: SUL3 Phase 4: Staged rollout for all existing users.Mar 24 2025, 8:06 PM
Stashbot added a comment.Mar 24 2025, 8:11 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-24T20:11:35Z] <spiderpig@deploy1003> tgr, spiderpig: Backport for [[gerrit:1130121|Enable SUL3 login for all group 1 users (T384153)]], [[gerrit:1130122|Enable SUL3 login for 1% of group 2 users (T384219)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Stashbot added a comment.Mar 24 2025, 8:22 PM

Mentioned in SAL (#wikimedia-operations) [2025-03-24T20:22:52Z] <spiderpig@deploy1003> Finished scap sync-world: Backport for [[gerrit:1130121|Enable SUL3 login for all group 1 users (T384153)]], [[gerrit:1130122|Enable SUL3 login for 1% of group 2 users (T384219)]] (duration: 16m 21s)

Maintenance_bot removed a project: Patch-For-Review.Mar 24 2025, 8:30 PM
Tgr closed subtask T389064: Notify WebAuthn users about SUL3 changes as Resolved.Mar 25 2025, 9:37 PM
Tgr reopened subtask T389064: Notify WebAuthn users about SUL3 changes as Open.Mar 26 2025, 12:02 AM
matmarex closed subtask T375796: Synchronize SUL2 and SUL3 central browser state as Resolved.Mar 26 2025, 6:11 PM
Izno subscribed.Mar 27 2025, 5:10 AM
Tgr closed subtask T389064: Notify WebAuthn users about SUL3 changes as Resolved.Mar 28 2025, 8:27 PM
Tgr reopened subtask T375796: Synchronize SUL2 and SUL3 central browser state as Open.Apr 1 2025, 10:55 PM
Tgr closed this task as Resolved.Apr 7 2025, 9:19 PM
Tgr claimed this task.
DAlangi_WMF closed subtask T375796: Synchronize SUL2 and SUL3 central browser state as Resolved.Apr 9 2025, 10:20 PM
Tgr closed subtask T389159: Repeatedly logged out on some local wikis as Resolved.Apr 30 2025, 5:50 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits