Page MenuHomePhabricator

Allow bot passwords even when local login is disabled
Open, Needs TriagePublicBUG REPORT

Description

Steps to replicate the issue (include links if applicable):

  • Install PluggableAuth
  • Create a new bot password
  • Disable local login by setting $wgPluggableAuth_EnableLocalLogin to false

What happens?:

The bot is unable to login:

❌ Login failed: The supplied credentials could not be authenticated.
❌: can't login to target Wiki genwiki39e
NoneType: None

wikipush: Exception("can't login to target Wiki genwiki39e")

When I enable local login again, it works fine.

What should have happened instead?:

Bots are able to login, even when local login is disabled.

Software version (on Special:Version page; skip for WMF-hosted wikis like Wikipedia):

MediaWiki 1.39.17
PluggableAuth 7.3.0

Event Timeline

MediaWiki 1.39.17

On an unrelated note, you are running an unsupported (and now insecure) software version.

We will not able to upgrade from MediaWiki 1.35 to this version if the above problem is not solved. We need the bot support to do so for a wiki with 17.000 users and 500.000 entries.

1.43 upgrade will follow then later with the Variables extension being the expected showstopper for that step.