Page MenuHomePhabricator
Create Task
Maniphest T411952

Special:CreateLocalAccount doesn't create accounts for other users due to IP blocks, even when I am a sysop
Closed, ResolvedPublicBUG REPORT
Actions

Description

Steps to replicate the issue (include links if applicable):

What happens?:

What should have happened instead?:

  • Account should be created.

Software version (on Special:Version page; skip for WMF-hosted wikis like Wikipedia):

Other information (browser name/version, screenshots, etc.):

  • Browser name/version: Google Chrome 142.0.7444.176 for Windows 10.
  • Screenshot: See below (Sensitive content redacted via browser element inspector):

image.png (1×1 px, 211 KB)

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
Pass an explicit performer when attempting CreateLocalAccountmediawiki/extensions/CentralAuthwmf/1.46.0-wmf.5+36 -4
Pass an explicit performer when attempting CreateLocalAccountmediawiki/extensions/CentralAuthmaster+36 -4
Customize query in gerrit

Related Objects

Event Timeline

HideonRosie created this task.Dec 7 2025, 9:59 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptDec 7 2025, 9:59 AM
A_smart_kitten added a project: MediaWiki-extensions-CentralAuth.Dec 7 2025, 10:08 AM
A_smart_kitten subscribed.
Restricted Application added a project: MediaWiki-Platform-Team. · View Herald TranscriptDec 7 2025, 10:08 AM
Johannnes89 subscribed.Dec 7 2025, 10:23 AM

sounds similar to T330602: Special:CreateLocalAccount should comply with user's block-bypass permissions which got resolved by fixing T189362: ipblock-exempt does not allow account creation when blocked – seems like IPBE gets ignored again

Dragoniez added subscribers: Tgr, matmarex, DAlangi_WMF, Dragoniez.Dec 7 2025, 1:52 PM

Sounds like T408724 messed up something.

matmarex added a comment.Dec 7 2025, 4:53 PM

This is probably a symptom of the same issue as T411826: MediaWiki periodic job centralauth-backfilllocalaccounts.php-loginwiki failed. We'll definitely want to fix this on Monday.

Dragoniez claimed this task.EditedDec 8 2025, 9:44 AM

Ah, I think I've found the culprit. In CentralAuthForcedLocalCreationService::attemptAutoCreateLocalUserFromName#87, we probably need to pass an explicit performer.

gerritbot added a comment.Dec 8 2025, 10:05 AM

Change #1216556 had a related patch set uploaded (by Dragoniez; author: Dragoniez):

[mediawiki/extensions/CentralAuth@master] Pass an explicit performer when attempting CreateLocalAccount

https://gerrit.wikimedia.org/r/1216556

gerritbot added a project: Patch-For-Review.Dec 8 2025, 10:05 AM
gerritbot added a comment.Dec 8 2025, 10:15 AM

Change #1216556 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@master] Pass an explicit performer when attempting CreateLocalAccount

https://gerrit.wikimedia.org/r/1216556

gerritbot added a comment.Dec 8 2025, 10:17 AM

Change #1216558 had a related patch set uploaded (by D3r1ck01; author: Dragoniez):

[mediawiki/extensions/CentralAuth@wmf/1.46.0-wmf.5] Pass an explicit performer when attempting CreateLocalAccount

https://gerrit.wikimedia.org/r/1216558

ReleaseTaggerBot added a project: MW-1.46-notes (1.46.0-wmf.7; 2025-12-16).Dec 8 2025, 11:00 AM
gerritbot added a comment.Dec 8 2025, 2:27 PM

Change #1216558 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@wmf/1.46.0-wmf.5] Pass an explicit performer when attempting CreateLocalAccount

https://gerrit.wikimedia.org/r/1216558

Stashbot added a comment.Dec 8 2025, 2:27 PM

Mentioned in SAL (#wikimedia-operations) [2025-12-08T14:27:50Z] <derick@deploy2002> Started scap sync-world: Backport for [[gerrit:1216558|Pass an explicit performer when attempting CreateLocalAccount (T411826 T411952)]]

Stashbot mentioned this in T411826: MediaWiki periodic job centralauth-backfilllocalaccounts.php-loginwiki failed.Dec 8 2025, 2:27 PM

Mentioned in SAL (#wikimedia-operations) [2025-12-08T14:29:47Z] <derick@deploy2002> d3r1ck01, derick: Backport for [[gerrit:1216558|Pass an explicit performer when attempting CreateLocalAccount (T411826 T411952)]] synced to the testservers (see https://wikitech.wikimedia.org/wiki/Mwdebug). Changes can now be verified there.

Maintenance_bot removed a project: Patch-For-Review.Dec 8 2025, 2:30 PM
Stashbot added a comment.Dec 8 2025, 2:34 PM

Mentioned in SAL (#wikimedia-operations) [2025-12-08T14:34:54Z] <derick@deploy2002> Finished scap sync-world: Backport for [[gerrit:1216558|Pass an explicit performer when attempting CreateLocalAccount (T411826 T411952)]] (duration: 07m 04s)

DAlangi_WMF added a comment.Dec 8 2025, 2:57 PM

@HideonRosie, an attempted fix was deployed. Could you check to see if the issue is resolved on your side? Thanks!

ReleaseTaggerBot edited projects, added MW-1.46-notes (1.46.0-wmf.5; 2025-12-02); removed MW-1.46-notes (1.46.0-wmf.7; 2025-12-16).Dec 8 2025, 3:00 PM
Tgr moved this task from Inbox, needs triage to Q3 Kanban Board on the MediaWiki-Platform-Team board.Dec 8 2025, 3:07 PM
Tgr edited projects, added MediaWiki-Platform-Team (Q3 Kanban Board); removed MediaWiki-Platform-Team.
Tgr moved this task from Essential Work to In Progress on the MediaWiki-Platform-Team (Q3 Kanban Board) board.
HideonRosie added a comment.EditedDec 8 2025, 3:31 PM

@DAlangi_WMF @Tgr @Dragoniez The issue now is a bit diffrent.

image.png (1×1 px, 204 KB)

Now it's blocked by local filter (filter is not a problem). The filter 32 logs show that the target account is the one who performed the action. Added a bypass for sysops, but it doesn’t seem to have any effect.

image.png (305×1 px, 131 KB)

Dragoniez added a comment.EditedDec 8 2025, 4:00 PM
In T411952#11440713, @HideonRosie wrote:

@DAlangi_WMF @Tgr @Dragoniez The issue now is a bit diffrent.

image.png (1×1 px, 204 KB)

Now it's blocked by local filter (filter is not a problem). The filter 32 logs show that the target account is the one who performed the action. Added a bypass for sysops, but it doesn’t seem to have any effect.

image.png (305×1 px, 131 KB)

This is expected behaviour. The performer is Veritas Sapientiae, and the account being autocreated is Nvdtn19-bot. The "real performer" cannot be referenced with the current AbuseFilter functionality. You may be interested in T366858.

@DAlangi_WMF Thanks for the backport!

Dragoniez added a comment.Dec 8 2025, 4:05 PM

@HideonRosie Was your source IP blocked from account creation when you attempted this? If so, the block was correctly bypassed, and we can resolve this task :)

HideonRosie closed this task as Resolved.Dec 8 2025, 4:20 PM
In T411952#11440845, @Dragoniez wrote:

@HideonRosie Was your source IP blocked from account creation when you attempted this? If so, the block was correctly bypassed, and we can resolve this task :)

Yes, my IP is still blocked, and I agree now this task is resolved.

DAlangi_WMF added a comment.Dec 8 2025, 4:58 PM

@DAlangi_WMF Thanks for the backport!

Sure thing @Dragoniez, and thanks for the patch. I'm glad the issue is now resolved. 🎉

And this for reporting @HideonRosie 🥳

DAlangi_WMF awarded a token.Dec 8 2025, 4:58 PM
matmarex added a comment.Dec 8 2025, 6:31 PM

Thank you all!

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits