[07:39:39] !log h2o@tools-bastion-13 tools.stewardbots ./stewardbots/StewardBot/manage.sh restart # Disconnected [07:39:42] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stewardbots/SAL [09:11:23] !log jeanfred@tools-sgebastion-10 tools.wikiloves Deploy afb66f1, a2be205, 47e99e3 [09:11:28] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.wikiloves/SAL [10:28:15] !log tools updated ci image with latest precommit versions [10:28:18] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [16:37:04] Attempting to reset my password on Wikitech results in "The supplied credentials cannot be changed, as nothing would use them." [16:38:03] T376140 [16:40:19] !status Wikitech password reset problems T376140 [16:40:19] T376140: Setting new password at wikitech does not work - https://phabricator.wikimedia.org/T376140 [17:26:53] !log bd808@tools-bastion-12 tools.stashbot Switched OAuth credentials (T376176) [17:26:56] wmbot~bd808@tools-bastion-12: Failed to log message to wiki. Somebody should check the error logs. [17:42:28] hey folks, having some trouble logging in to the toolforge admin. getting a 500 every time i get to https://toolsadmin.wikimedia.org/auth/login/  I reset my password, but no dice. [17:43:21] mahmoudhashemi: https://phabricator.wikimedia.org/T376140 [17:44:09] !log bd808@tools-bastion-12 tools.stashbot Switched OAuth credentials in the proper config file this time (T376176) [17:44:12] aha, looks to be an active issue. ok, i'll try again later :) [17:44:13] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.stashbot/SAL [17:44:45] bd808: i might be missing something but how is that related to striker? [17:45:48] taavi: oh... I spaced on the mahmoudhashemi saying toolforge admin. :/ [17:46:53] toolsadmin doesn't have a password reset though. mahmoudhashemi where were you trying a password reset? [17:47:33] * bd808 is afraid to logout of toolsadmin to test logins [17:49:03] I can recreate a 500 error when trying to login to toolsadmin from an incognito window. I'm pretty certain that this is T376188 [17:49:04] T376188: OAuth consumers registered locally at Wikitech are no longer configured to be used - https://phabricator.wikimedia.org/T376188 [17:49:10] well, at least toolsadmin-toolsbeta is having the same problem [17:49:27] toolsadmin would be trying to use an oauth grant to talk to the wikitech api [17:49:39] hmm, I'm wondering whether we might as well rip out the 2fa code from striker entirely [17:49:59] taavi: probably, but it goes a lot deeper than that [17:50:47] the whole workflow for creating a new Developer account via Striker is now broken because of ties to the wikitech API [17:51:38] creating a new owner-only OAuth grant at metawiki and rotating the credentials should get it limping along again [17:52:01] oh, right [17:52:07] which account is that tied to? [17:52:18] StrikerBot [17:52:32] which may or may not have a SUL account... [17:52:43] ah, it does [17:53:43] I will start a bug report for Striker OAuth and then make new credentials for the SUL account [17:55:11] i'll be around for a bit longer if you need anything updated in private puppet [17:55:59] taavi: awesome! I should have new creds in 5-10 minutes [17:59:25] Oh I was on https://toolsadmin.wikimedia.org/auth/login/?next=/ and it had a "forgot your password?" [18:00:48] mahmoudhashemi: :nod: I think we caught up with the real problem in the mean time. I'm working on a fix. It is related to the wikitech auth changes but not exactly the same problem that I first linked you to. [18:01:03] cool, appreciate it! [18:08:39] taavi: mwmaint2002.codfw.wmnet:/home/bd808/striker-sul-oauth-secrets.txt has the new values that need to go in profile::wmcs::striker::docker::instances_secret_env in the private repo. [18:13:38] bd808: done. kicking off a puppet run now [18:22:07] done [18:22:52] hmmm... I still seem to be getting a 500 error. Time to find the logs I guess. [18:24:00] (btw, schedule-deployment is working just fine, I tested it earlier… unless any relevant config changed since 14:00 UTC ^^) [18:25:57] taavi: I think the StrikerBot wikitech account needs to be attached to the StrikerBot SUL account to finish the fix. [18:26:25] 'The authorization headers in your request are for a user that does not exist here' is the new error [18:28:31] bd808: I think you should be able to do that via Special:MergeAccount on wikitech [18:28:52] ok, let me try that [18:29:11] or run the maintenance script. I put away mu laptop already [18:31:00] oh ffs. the gd global block on tunnerbroker.net ipv6 now rears it's ugly head [18:37:54] I could probably run a maintenance script if needed… [18:38:41] I just got the on-wiki merge to work. I just had to switch wifi networks here at home to do it [18:38:48] \o/ [18:40:58] argh -- `mwclient.errors.APIError: ('permissiondenied', "You don't have permission to check OATH status.", None)` -- Looks like I'm about to do something nasty in the database. [18:41:07] !status Wikitech SUL migration [18:41:19] thanks ACN [18:57:17] Logins to toolsadmin are still busted. I'm going to step away for food and then come back to poking at T376190 [18:57:18] T376190: toolsadmin.wikimedia.org login fails because of missing OAuth grant at Wikitech - https://phabricator.wikimedia.org/T376190 [21:35:25] !log bd808@tools-bastion-12 tools.gitlab-account-approval Rotate OAuth credentntials (T376214) [21:35:28] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.gitlab-account-approval/SAL [21:45:54] !log bd808@tools-bastion-12 tools.phab-ban Rotate OAuth credentials (T376216) [21:45:57] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.phab-ban/SAL [22:02:04] !log bd808@tools-bastion-12 tools.schedule-deployment Rootate OAuth credentials (T376217) [22:02:07] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.schedule-deployment/SAL [22:45:38] bd808 I just logged in and got everything I needed to do done, fwiw. Thanks!