[01:02:41] legoktm: Around? [01:08:05] hoo: hi [01:08:35] throw new PasswordError( 'Invalid hash given' ); [01:08:43] in PasswordFactory::newFromCiphertext [01:08:47] a user is reporting to see that [01:08:55] but I can't find *anything* in the logs [01:09:01] newly migrated global account [01:09:13] can successfully log in according to CA logs [01:09:27] but he says, he ends up at a pick a new password form [01:09:29] and then that fails [01:09:45] https://de.wikipedia.org/wiki/Wikipedia:Benutzernamen_%C3%A4ndern#2014-12-23_Kann_Passwort_nach_dem_Globalisieren_nicht_.C3.A4ndern [01:09:48] I'm clueless [01:10:02] umm, are they in the labsdb password reset list? [01:10:06] the password hash is ok and testing the passwords works fine from hhvm and zend [01:10:15] could be, no idea [01:11:57] yep, he is [01:12:40] legoktm: What to do now? Just delete the rows and tell them to reset the password manually? [01:12:54] Or do you need the user for debugging, or... ? [01:12:57] have they gone through the password reset process? [01:13:09] It fails :/ [01:13:24] with an exception? [01:13:36] apparently [01:13:42] that text is only present in that one exception [01:13:48] but the exception is never logged [01:14:10] hasn't been logged a single time in the last 90d [01:14:42] dewiki: Aborting login until they reset password: Stilfehler [01:15:27] just delete the row then? [01:15:49] Ok [01:15:56] shall we maybe disable that whole thing? [01:22:41] or convert it to use the real password reset mechanism in core? [01:22:52] the password expiry thing [01:24:14] If you think that's worth it [01:25:54] well, it depends on how many users are left [01:26:56] More than 50% [01:27:07] 25057 of 41079 [01:27:07] :| [01:39:25] legoktm: https://gerrit.wikimedia.org/r/181710 [01:39:51] I would like to push taht today and not wait until next year [01:40:26] I'm afraid of breaking accounts where people don't know how to complain or just don't care enough and then give up :( [01:41:22] diff with --ignore-all-space to get a decent diff [10:29:34] _joe_: it looks like the default hhvm init script or the 'default file' is broken, where should I report that? [11:26:42] wtf Salt is weird [11:29:40] https://github.com/saltstack/salt/issues/13312 [11:35:20] 3MediaWiki-Core-Team: Look into Maria 10 parallel-replication - https://phabricator.wikimedia.org/T85266#942877 (10aaron) 3NEW [11:35:32] 3MediaWiki-Core-Team: Look into Maria 10 parallel-replication - https://phabricator.wikimedia.org/T85266#942877 (10aaron) [13:57:05] <_joe_> Nikerabbit: you mean in our package? [13:57:20] <_joe_> sorry, I was travelling this morning [13:57:28] <_joe_> Nikerabbit: to me is fine [14:23:28] _joe_: as far as I can see it does not even start with the default settings... not even if I change it to use server.ini [14:24:02] <_joe_> Nikerabbit: sorry I meant "I am the right person to report this to" [14:24:28] <_joe_> Nikerabbit: mmmh I'll check it out [14:26:35] <_joe_> Nikerabbit: upstart or the traditional init? [14:27:45] _joe_: upstart I believe [14:28:02] <_joe_> ok thanks, I suspected it [14:29:44] is there any way to get output or exit codes from the start-stop-daemon? It's pretty frustrating when it starts a service which dies/exists immediately with no output [14:33:33] <_joe_> Nikerabbit: I'll remove that from the upstart script btw [14:36:40] _joe_: start-stop-daemon? [14:48:56] WARNING: Logging before InitGoogleLogging() is written to STDERR [14:49:02] suspicious I say? [14:49:09] -? [14:50:48] hmph, I'm just unable to start hhvm and unable to figure out why [14:52:37] I guess I need to read some http://upstart.ubuntu.com/cookbook/ [14:53:23] <_joe_> Nikerabbit: I'll fix that in the coming weeks, today I'm just trying to wrap a few things up [14:53:37] <_joe_> as I have a few days off until the new year [15:16:58] gosh I am so stupid! [15:17:37] I had mixed up /etc/init/hhvm{.conf} [15:18:09] hours wasted on that ;) [15:27:16] <_joe_> if you have a bug report, please do it anyway [16:56:08] 3MediaWiki-Core-Team, Librarization: Create RFC for library extraction (PHP & javascript) practices - https://phabricator.wikimedia.org/T1017#943155 (10bd808) Draft on wiki now! I will announce on... [16:57:36] legoktm, ^demon|away, Krinkle|detached: ^ RFC draft on wiki now. Would love feedback and edits. I think all of you could become co-authors too but I didn't want to put you on without asking. [17:05:03] bd808: https://gerrit.wikimedia.org/r/#/c/181730/ [17:06:48] bd808: legoktm: in fact, things like the API are already using the LoginForm class (which implements the special page) as if it was just such "login controller". [17:07:02] i think we could totally split them up in a reasonable way in a few hours of work. [17:21:57] Reedy: good catch. {{done}] [17:24:30] 3MediaWiki-Core-Team: Authn and authz as a service - https://phabricator.wikimedia.org/T84962#943201 (10bd808) I think we should consider issues like {T19312} to be in scope for this project. It seems reasonable to me that we will need to refactor/rethink the authn/authz stack inside MediaWiki in order to make i... [18:11:05] bd808: so chris's jenkins job thing is "working" except he was waiting on monolog to accept his security patch to make sure it actually works... [18:11:50] legoktm: excellent. [18:12:17] https://integration.wikimedia.org/ci/job/test-csteipp-sensiolabs-securityadvisorieschecker/ [18:12:36] https://github.com/Seldaek/monolog/pull/448 is disappointing though :( [18:14:04] Hmmm... I wonder why they don't care? [18:16:01] no comment on bug, no activity on code review. Not cool [18:38:01] 3LabsDB-Auditor, Scrum-of-Scrums, MediaWiki-Core-Team, Security-Reviews: Manually verify whitelisted.yaml / graylisted.yaml to ensure completeness - https://phabricator.wikimedia.org/T78730#943314 (10bd808) Is there a gerrit review for this that needs attention? [18:52:17] Nothing surprising at SoS today. jdlrobson mentioned the lightncandy patch to vendor but I think legoktm is on top of the review for that. [20:05:16] marry xmas everyone [20:05:22] happy holidays [20:06:41] * bd808 is fighting with travis-ci and losing [20:13:46] 3MediaWiki-Installer, MediaWiki-Core-Team, Librarization: composer.json should be useable by WMF, core and extensions - https://phabricator.wikimedia.org/T67188#943399 (10bd808) The plugin is on packagist now () so it should be a bit easier to test.... [21:27:48] 3Wikidata, wikidata-query-service, MediaWiki-Core-Team: Evaluate Titan as graph storage/query engine for Wikidata Query service - https://phabricator.wikimedia.org/T76373#943426 (10Smalyshev) Proposed storage format for dates: # Dates are stored as long signed integers, representing number of seconds since 19... [21:56:49] will you merry me [21:58:57] sure [22:13:17] argh. legoktm that crapy hack for importing plancake with composer breaks my cool new toy. :/ [22:13:26] awwwwww [22:13:53] bd808: we should just move it into BounceHandler at this point... [22:14:03] yeah we really should [22:14:16] one class that has been abandoned basically [22:14:33] or get Tony to find something that's not abandonware [22:16:02] the plugin is really close to working. We it actually works now but I realized that I did something I don't love with the config [22:18:10] oh? [22:19:19] I documented what I wanted for the config in the README but then wrote the code differently :/ [22:19:24] heh [22:19:37] https://github.com/wikimedia/composer-merge-plugin/issues/2 [22:20:14] :P [22:20:14] * bd808 adds legoktm to a team that has access to push to that repo [22:20:27] I think I already had push access? [22:20:44] Or at least I can edit the description and url :P [22:20:50] oh probably. you're an admin right? [22:20:54] I think so [22:21:11] I just made a "composer" team that consists of you an me at the moment [22:21:16] s/at/and/ [22:21:23] whatever [22:21:27] typing sucks [22:22:08] Want to merge the first pull request there? https://github.com/wikimedia/composer-merge-plugin/pull/1 [22:22:38] done [22:22:42] I finally got travis beat into submission -- https://travis-ci.org/wikimedia/composer-merge-plugin [22:23:58] Failed to download symfony/process from dist: You must enable the openssl extension to download files via https [22:23:58] Now trying to download from source [22:24:24] is that at travis? I saw it do that the other day too [22:24:29] yeah [22:30:37] other projects I saw that use travis usually specify --prefer-source [22:30:44] But why would travis just not enable the openssl extension? [22:31:12] *shrug* [22:31:36] https://github.com/travis-ci/travis-cookbooks/pull/401 :|||||| [22:31:54] yeah [22:32:18] I'm bad at nagging about those kinds of things :/ [22:32:33] take my fix or don't, whatever jerk [22:53:11] bd808: oh cool that is the issue I was having [22:54:07] Nikerabbit: Yeah. The work around for the moment is to use the other syntax if you want to hunt for other bugs [22:54:33] I'll get it fixed "soon" but xmas family obligations start soon [22:55:28] bd808: good to know.. I might want to use it on my pet project soon [22:55:52] I want to get to "1.0" next week if possible [22:56:30] 3Wikidata, wikidata-query-service, MediaWiki-Core-Team: Evaluate Titan as graph storage/query engine for Wikidata Query service - https://phabricator.wikimedia.org/T76373#943453 (10GWicke) >>! In T76373#943426, @Smalyshev wrote: > Proposed storage format for dates: > > # Dates are stored as long signed intege... [23:02:40] 3Wikidata, wikidata-query-service, MediaWiki-Core-Team: Evaluate Titan as graph storage/query engine for Wikidata Query service - https://phabricator.wikimedia.org/T76373#943454 (10Smalyshev) @GWicke Do we really need per-second precision transitioning between year 292M and 292M+1? I'm not sure it is ever requir... [23:08:30] 3Wikidata, wikidata-query-service, MediaWiki-Core-Team: Evaluate Titan as graph storage/query engine for Wikidata Query service - https://phabricator.wikimedia.org/T76373#943458 (10GWicke) >>! In T76373#943454, @Smalyshev wrote: > seconds(292M-12-31T23:59:59) < seconds(292M+1) It's pretty likely that there were... [23:11:23] 3Wikidata, wikidata-query-service, MediaWiki-Core-Team: Evaluate Titan as graph storage/query engine for Wikidata Query service - https://phabricator.wikimedia.org/T76373#943459 (10Smalyshev) For dates beyond real Gregorian calendar, the values more precise than years have little meaning anyway, so I don't think... [23:27:14] 3Wikidata, wikidata-query-service, MediaWiki-Core-Team: Evaluate Titan as graph storage/query engine for Wikidata Query service - https://phabricator.wikimedia.org/T76373#943462 (10GWicke) >>! In T76373#943459, @Smalyshev wrote: > For dates beyond real Gregorian calendar, the values more precise than years have...