[16:34:56] tgr, anomie: do either of you have the time/energy to dig into why account creations are failing on wikitech? T149109 [16:34:56] T149109: Account creation failing with "The authentication plugin denied the account creation." - https://phabricator.wikimedia.org/T149109 [16:35:48] bd808: Does wikitech work with X-Wikimedia-Debug? [16:35:57] sadly, no :/ [16:36:10] I thought not. [16:36:55] we really should figure out how to fix that [16:37:01] s/we/I/ [16:37:20] bd808: ran into that at the hackathon last weekend, logged-in account creation seemed to work [16:37:43] tgr: yeah. not a scalable solution obviously [16:37:52] bd808: Based on the message, my guess it it's due to LdapAuthentication. [16:38:49] seems likely. the 2 accounts that have been created by logged-in users don't look like they made it into LDAP [16:39:06] Specifically, something in LdapAuthenticationPlugin::addUser() is probably failing. [16:42:20] I can probably do some config hacking on silver directly and try to get more log data [16:42:43] * bd808 was trying to be lazy and trick someone else into digging deep [16:43:16] * anomie doesn't seem to have access to silver [16:43:57] anomie: try "ssh silver.wikimedia.org". all deployers should be able to get there [16:45:28] bd808: Do I need to do that from anyplace in particular? Just doing it on the command line hangs at "Connecting to silver.wikimedia.org [2620:0:861:2:208:80:154:136] port 22" [16:48:54] anomie: I don't see anything special about it in my ssh config. I hit it using my prod key and bast1001 as the proxy [16:52:47] bd808: Ah, ok. I had to add using the proxy for it to my ~/.ssh/config so it wouldn't try to connect directly. [16:54:21] *nod* my proxy block starts with "Host *.eqiad.wmnet *.codfw.wmnet *.wikimedia.org !gerrit.wikimedia.org !git-ssh.wikimedia.org !labtestcontrol2001.wikimedia.org" [23:49:44] TimStarling: Is the Balancer code fully obsoleted by Remex? Or used elsewhere besides Tidy? Couldn't find a task about whether one is meant to be kept only or something along those lines. [23:54:28] depends on the benchmarks [23:55:04] I haven't benchmarked RemexCompatMunger or optimised it