[00:06:05] gute: you could copy the wmf config [00:10:14] gute: https://github.com/wikimedia/operations-puppet/search?utf8=%E2%9C%93&q=SSL_ciphersuite&type=Code [00:26:02] jeremyb oh but I do not use apache [00:26:17] huh? [00:26:46] hold om [00:26:48] on [00:28:23] gute: so read all of both pages of the results I linked and cherry pick out the nginx bits?? [00:28:53] we don't use apache much either. mostly nginx [00:34:30] jeremyb Thank you, though my head is spinning now. do you really need nginx? cant i get it to work anyway? [00:38:14] > OuKB: I'm having trouble finding info on the subject. Is this right? http://nginx.com/resources/admin-guide/nginx-ssl-termination/ [00:38:48] I thought you were already intending to use nginx… [00:39:10] yes, but it seems so troublesome now. [00:39:22] it's not [00:39:35] are you sure? [00:39:35] if you want parsoid specific answers I can't give them [00:39:39] yes [00:39:54] I run nginx myself [00:40:35] well ok, how long do you reccon it would take to set up? [00:42:41] me? 5 mins. you may need to read some docs that I can skip :) [00:43:26] I did give you our conf to get started with though. (see protoproxy in particular) [00:46:33] well, to tell the truth I don't even know what I am looking at. so much stuff that's new to me. Protoproxy? Puppet? Well, It feels like I took water over my head. [00:50:50] ok, well I have to run. maybe ttyl [00:55:01] ok. thank you for everything! [01:14:06] gute: nginx is indeed very easy to set up [01:14:54] it also supports spdy, and of course you can also use it to host other content [01:15:41] that said, you could also modify the code slightly to support https right in node -- for that see http://stackoverflow.com/questions/5998694/how-to-create-an-https-server-in-node-js and http://nodejs.org/api/https.html [01:16:39] you'll have to modify api/ParsoidService.js, near 'listen' at the end [01:26:20] well I have some wikis that are private and some that are not, all of which I'd like to use visualeditor [01:27:02] that's fine [01:27:17] Parsoid itself just forwards the cookie (if supplied) to MW [01:27:33] so if the user is not authenticated, Parsoid won't see any of the content either [01:28:10] are you currently using Apache for MW? [01:29:34] ok. on my synology nas (on which I have my wikis) there seems to already be a nginx installed. I have never used it, so if there is a quicker and easier way, I'd be glad. [01:32:13] I wish there was a tutorial on this. [01:38:49] its four in the morning here. got to get some sleep. ttyl [01:43:55] gute: it's a few lines only [01:43:55] gute: http://nginx.com/resources/admin-guide/reverse-proxy/ [01:43:55] and http://nginx.org/en/docs/http/configuring_https_servers.html [01:43:55] but good night in any case! [01:43:55] please, could you then help me. I would go to sleep much happier if I got this working. [01:43:55] gute: did the init script work btw? [01:43:55] no. I am waiting for a response from synology. [01:43:56] oha [01:43:56] I fear that they might be less than responsive about tinkering [01:44:34] gute: so the first thing I'd set up is the proxy [01:44:50] you can then add https in a second step [01:44:50] ok [01:44:56] see the first link [01:45:16] this? http://stackoverflow.com/questions/5998694/how-to-create-an-https-server-in-node-js [01:45:31] no, http://nginx.com/resources/admin-g [01:45:32] uide/reverse-proxy/ [01:45:45] sorry for the line break [01:45:59] http://nginx.com/resources/admin-guide/reverse-proxy/ [01:46:51] ok. what file do i edit? [01:47:32] on debian it's /etc/nginx/sites-enabled/default [01:47:39] not sure about openwrt [01:48:02] find -name nginx* [01:48:02] ./etc/logrotate.d/nginx [01:48:03] ./etc/init/nginx.conf [01:48:03] ./etc/nginx [01:48:03] ./etc/nginx/nginx.conf [01:48:03] ./run/nginx.pid [01:48:07] ./usr/share/nginx [01:48:09] ./usr/bin/nginx [01:48:11] ./var/lib/nginx [01:48:13] ./var/log/nginx [01:48:15] ./volume1/@optware/etc/nginx [01:48:17] ./volume1/@optware/var/nginx [01:48:19] ./volume1/@optware/share/nginx [01:48:21] ./volume1/@optware/share/www/nginx [01:48:23] ./etc.defaults/logrotate.d/nginx [01:48:25] ./etc.defaults/init/nginx.conf [01:48:27] ./etc.defaults/nginx [01:48:29] ./etc.defaults/nginx/nginx.conf [01:48:31] ./var.defaults/lib/nginx [01:48:33] ./var.defaults/log/nginx [01:48:37] ./opt/etc/nginx [01:48:39] ./opt/var/nginx [01:48:41] ./opt/share/nginx [01:48:43] ./opt/share/www/nginx [01:48:45] ./volumeUSB2/usbshare2-2/tardis/rootbackup/run/nginx.pid [01:48:46] hey, do you pipe the find straight into IRC? [01:48:47] ./volumeUSB2/usbshare2-2/tardis/rootbackup/var/log/nginx [01:48:49] ./volumeUSB2/usbshare2-2/tardis/rootbackup/var/lib/nginx [01:48:51] ./volumeUSB2/usbshare2-2/tardis/rootbackup/usr/bin/nginx [01:49:09] better to use a pastebin [01:49:11] no copy paste [01:49:18] (next time) [01:49:26] like gist.github.com [01:49:43] ls [01:49:47] gute: I'd try /etc/nginx/nginx.conf [01:50:53] ok. have it opened [01:52:11] see if there's a server {} section in there [01:52:22] yep [01:52:22] with a listen line etc [01:52:29] okay [01:52:29] yep [01:52:46] server { [01:52:46] listen localhost:412; [01:52:46] server_name _; [01:52:46] location ~ \.php$ { [01:52:46] fastcgi_index index.php; [01:52:47] fastcgi_pass unix:/run/php-fpm/php-fpm.sock; [01:52:49] fastcgi_param SCRIPT_FILENAME $fastcgi_script_name; [01:52:51] include fastcgi_params; [01:52:53] } [01:52:55] location ~ /\.ht { [01:52:57] deny all; [01:52:59] } [01:53:23] now add something like http://nginx.com/resources/admin-guide/reverse-proxy/ [01:53:31] this pasting is probably dangerous as hell, but right now I just want it to work [01:54:00] basically another location block, with a proxy_pass line [01:54:23] location /some/path/ { [01:54:23] proxy_pass http://www.example.com/link/; [01:54:23] } [01:54:38] location /parsoid { proxy_pass http://127.0.0.1:8000/; } [01:54:48] something like that [01:55:00] assuming parsoid is listening on port 8000 [01:55:28] then restart nginx with /etc/init.d/nginx restart [01:55:38] and test it by requesting /parsoid [01:55:53] actually, try /parsoid/ [01:56:07] with the trailing slash, in both the config & the request [01:57:40] ah. so the /parsoid was not the actual location to parsoid. [01:58:34] it's the path that you'll expose it as through nginx [01:59:20] -ash: /etc/init.d/nginx: not found [01:59:36] ok [01:59:39] ah, /etc/init/nginx [02:00:01] /etc/init/nginx restart [02:00:01] -ash: /etc/init/nginx: not found [02:01:49] nginx -h [02:01:51] nginx version: nginx/1.4.4 [02:01:52] Usage: nginx [-?hvVtq] [-s signal] [-c filename] [-p prefix] [-g directives] [02:01:52] Options: [02:01:52] -?,-h : this help [02:01:52] -v : show version and exit [02:01:52] -V : show version and configure options then exit [02:01:54] -t : test configuration and exit [02:01:56] -q : suppress non-error messages during configuration testing [02:01:58] -s signal : send signal to a master process: stop, quit, reopen, reload [02:02:00] -p prefix : set prefix path (default: /etc/nginx/) [02:02:02] -c filename : set configuration file (default: /etc/nginx/nginx.conf) [02:02:04] -g directives : set global directives out of configuration file [02:02:13] maybe /etc/init/nginx.conf ? [02:02:19] that was in your listing [02:02:47] gute do NOT paste [02:02:59] k thx [02:03:21] how about nginx -s reload [02:03:42] c: i know. [02:05:09] nginx -s stop [02:05:15] nginx -s reopen [02:07:46] damnit. I just restart. [02:10:00] that should work too [02:12:18] so then I just try http://some.dns/parsoid/ ? [02:13:54] gute: yes [02:14:01] provided that your parsoid is running [02:14:15] you might have to start it manually if that's not working yet [02:15:15] no. did not work [02:16:54] but http://some.dns:8000/ does show the parsoid page? [02:18:52] yep [02:20:03] and your location line has /parsoid/ ? [02:20:12] if so, check the logs [02:20:22] /var/log/nginx [02:22:39] 2014/09/09 04:09:40 [emerg] 3562#0: still could not bind() [02:22:39] 2014/09/09 05:04:39 [notice] 25651#0: signal process started [02:22:39] 2014/09/09 05:04:39 [notice] 25653#0: signal process started [02:22:39] 2014/09/09 05:04:39 [error] 25653#0: open() "/run/nginx.pid" failed (2: No such$ [02:22:40] 2014/09/09 05:04:57 [notice] 25853#0: signal process started [02:22:41] 2014/09/09 05:08:10 [notice] 27291#0: signal process started [02:22:43] 2014/09/09 05:08:10 [error] 27291#0: open() "/run/nginx.pid" failed (2: No such$ [02:22:45] 2014/09/09 05:11:14 [emerg] 5718#0: bind() to 127.0.0.1:412 failed (99: Cannot $ [02:22:47] 2014/09/09 05:11:14 [notice] 5761#0: signal process started [02:22:49] 2014/09/09 05:11:14 [error] 5761#0: open() "/run/nginx.pid" failed (2: No such $ [02:22:51] 2014/09/09 05:17:50 [notice] 25051#0: signal process started [02:23:24] gute: use pastebin, please! [02:23:29] !pastebin [02:23:29] To avoid overflowing the channel with inane amounts of text, use https://dpaste.org/ or other awesome pastebin sites to share code, errors, and other large texts. [02:24:23] ok. sorry [02:24:32] gute: can you see anything from nginx at all? [02:24:41] http://some.dns/ for example? [02:24:46] how can i check? [02:26:35] yeah. sure. is that from nginx [02:26:37] ? [02:27:40] not sure what you mean. never used nginx before. [02:28:08] it's a web server [02:28:38] so .. THE webserver on my nas? [02:28:50] sounds like it, yes [02:29:01] ok. yeah. it works [02:29:33] okay, then only the location / proxy bit seems to be malfunctioning for some reason [02:31:18] https://dpaste.de/kGjU [02:31:45] gute: try 127.0.0.1 [02:31:48] that's localhost [02:32:08] proxy_pass http://127.0.0.1:8000/; [02:33:58] https://dpaste.de/0SEs [02:34:01] better?= [02:34:09] does not work either. [02:34:37] looks good [02:34:42] parsoid is still running? [02:35:08] and this is inside the server {} block? [02:35:19] next to other location blocks? [02:35:52] https://dpaste.de/U61f [02:36:59] wow, it's a pastebin! \o/ [02:37:32] =) sorry. noooobidoo. [02:38:43] maybe move the parsoid block up the way I did in https://dpaste.de/ziQi ? [02:39:03] what kind of response did you get at /parsoid/? [02:40:52] https://dpaste.de/cj4T [02:42:12] getting a 404 for that snippet [02:42:58] https://dpaste.de/tzOT [02:43:34] same [02:44:04] it says "Sidan du s�ker hittades inte." It's swedish for "The page you requested was not found" [02:44:35] http://hagur.synology.me/parsoid/ [02:45:48] oh man, right, running parsoid on a synology nas, crazy talk ;) [02:45:58] hehe [02:46:08] =) [02:46:13] the issue is more configuring nginx to proxy https [02:46:35] http://hagur.synology.me:8000/ [02:47:04] * gwicke points production VE to the new node [02:47:18] haha [02:47:44] * gwicke reconsiders after waiting for http://hagur.synology.me:8000/enwiki/Main_Page [02:48:16] but hey, it loads ;) [02:48:40] gute: could you paste your entire nginx config file? [02:48:45] (to pastebin) [02:48:58] sure. [02:49:44] https://dpaste.de/fQhN [02:51:17] worker_processes 1; <--- is this an issue? [02:51:21] gute: that looks fine to me [02:52:15] hmm... gah! I'm going mad! [02:52:31] *hypnotoad* [02:52:51] hehe [02:53:00] those embedded systems are a bit tricky [02:53:18] often stuff is compiled out, or init systems just work very differently, or.. [02:53:54] alright... yeah, a million things can go wrong. [02:54:03] your web server on that box seems to listen on port 80 too, but the config only sets up 412 [02:54:18] and https isn't on 412 either [02:54:33] to me that suggests that some other web server is also running [02:54:35] no.. theres a dsm interface too [02:54:43] or there is some port forwarding [02:55:02] could be [02:55:32] that's pretty much out of my area, owning no synology myself etc [02:55:52] you could try to use google for 'synology web server' or the like [02:55:57] well it was a good shot in the dark. [02:56:01] 'synology nginx' [02:56:14] yes, sorry it didn't work [02:56:31] also, GO TO BED! ;) [02:56:54] =) [02:57:39] I have installed a bootstrap, ipkg. it has nginx ... [02:57:49] http://ipkg.nslu2-linux.org/feeds/optware/syno-i686/cross/stable/ [02:58:09] there were some errors in the log [02:58:18] maybe google for those + 'synology' [02:58:37] I'm not sure about installing that, since there already is a nginx. [02:58:59] ah, so you didn't install it? [02:59:26] i did at first, but then uninstalled it. then we got going. [03:00:02] okay; I'm out of ideas really [03:00:09] me 2 [03:00:22] thanks a lot though! [03:00:31] often easier to tackle such stuff after some sleep [03:00:35] (wink, wink) [03:00:41] you are welcome! [03:00:44] yes. youre right. [03:00:56] I'm going to bed now. [03:01:25] (I will just go and hit my nas with a sledgehammer first) [03:01:32] good night everyone! [03:01:41] again, thanx! [03:01:47] noooo ;) [03:01:51] goodnight! [03:01:56] ;) [04:01:37] hi can someone help me with a mediawiki issue? [04:01:49] ask, and we'll try to help :) [04:02:24] I upgraded to the latest version and my icons are all broken, including logo which dissapeared [04:06:55] what version did you upgrade to? 1.23.3? is your wiki public? [04:07:37] 1.23.3 and yes: http://www.grailoftruth.com/wikitruth/index.php?title=Main_Page [04:09:32] so, it looks like http://www.grailoftruth.com/wikitruth/skins/common/images/cross1A.png is redirecting to http://grailoftruth.com/wikitruth/skins/common/images/cross1A.png (no www) which is 404'ing [04:09:51] but that url works for me...hmm [04:11:34] yea its wierd, when i right click on the broken image and copy the link into the browser it shows the image, but the image wont display on the main page for some reason...none of the images do [04:13:54] I can't figure out why the images don't work [04:13:59] when I look at my browser's network console it's showing them redirecting [04:15:17] I have no idea either? [04:18:20] Do you have some sort of referrer based blocking in your apache config? [04:18:20] what is that? [04:18:20] When I hit the image URLs directly they work but they 404 when linked from the website [04:18:21] they worked fine in the last version of mediawiki [04:19:51] The domain is changing so it's possible that you have some snippet of apache config that is set to serve a 404 if someone tries to link to your images directly from another domain. That would explain the direct urls working but the images embedded in www. not working. [04:20:29] Seems semi-confirmed because I get images at http://grailoftruth.com/wikitruth/index.php?title=Main_Page [04:20:38] but not http://www.grailoftruth.com/wikitruth/index.php?title=Main_Page [04:21:03] IN both cases the image urls are to http://grailoftruth.com/ [04:21:49] I have some security software installed in wordpress under the root, could that be doing it? (although it worked fine with the last version of mediawiki) [04:22:40] It might. The config wold be something like described here -- http://www.cyberciti.biz/faq/apache-mod_rewrite-hot-linking-images-leeching-howto/ [04:23:13] ok let me take a look... [04:25:41] Maybe in the prior install you didn't have the cross domain image linking problem? Like I said images are working for me from http://grailoftruth.com/wikitruth/index.php?title=Main_Page but http://grailoftruth.com/wikitruth/ redirects to http://www.grailoftruth.com/wikitruth/index.php?title=Main_Page and then the images 404. [04:33:18] I checked th wordpress security and I dont think its that. The apache thing...is that in htaccess? [04:34:01] Yeah it would be in a htaccess file or the main virtual host config files [04:36:56] there are several of these in htaccess: RewriteEngine On [04:38:16] tommy_: Anything that mentions HTTP_REFERER ? [04:38:56] Or just Referer if in a SetEnvIf statement [04:40:20] Yes, there are two of these: RewriteCond %{HTTP_REFERER} !^http(s)?://grailoftruth\.com [NC,OR] [04:41:45] hah. That's probably it. add "(www\.)?" so It looks like !^http(s)?://(www\.)?grailoftruth\.com [04:42:15] That will let you load the images from got and www.got [04:43:43] that worked! THANK YOU!!!! [04:44:02] You're welcome. I'm sort of proud of myself for that guess [04:44:17] I have no idea what that is for...I hope its not something that compromises my security elsewhere? [04:44:17] * bd808 pats self on back [04:44:37] yup,,,your good. I'm impressed. [04:45:01] We just loosened the rule a tiny bit. It will still stop ransomdomain.com from deep linking your images [04:45:16] s/ransom/random/ [04:46:00] ok...I'd much rather have my images work than worry about someone hotlinking to them, especially for such a small website [04:46:23] thanks again, I have been trying to figure this out for days! [04:46:40] The purpose of a rule like that is basically to conserve your bandwidth. It keeps another website from using you as a content delivery service. [04:47:29] Ah ok...good to know. I will keep an eye on that [04:47:53] It was a pretty random issue. I would guess that something else in your WM config changed (or changed in what MW expects) that is causing the redirect to your own www subdomain. [04:49:04] ok...well everything else in mediawiki seems to be working? so i guess its ok unless another error pops up? [04:49:26] Yeah. Get back to making your content now :) [04:49:41] lol. ok....thanks again!!!!! :) [05:43:43] hello [05:44:13] i have added these commands to my localsetting [05:44:13] $wgSMTP = array( 'host' => 'mail.parsintelligent.com', 'IDHost' => 'mail.parsintelligent.com', 'port' => 587, 'username' => 'karami@parsintelligent.com', 'password' => 'Pars98765', 'auth' => true ); $wgShowExceptionDetails = true; [05:44:26] but my wiki can not send email ? [05:59:58] could anybody help me? [06:46:33] could you help me? [06:51:59] Carmela> No. [06:58:27] : could you help? [06:58:39] i have added the commands in my localsetting.php [06:59:06] $wgSMTP = array( 'host' => 'mail.parsintelligent.com', 'IDHost' => 'mail.parsintelligent.com', 'port' => 587, 'username' => 'karami@parsintelligent.com', 'password' => 'XXX', 'auth' => true ); $wgShowExceptionDetails = true; [06:59:24] but i could not get email and show me error [06:59:31] i think i should install pear email [06:59:46] i run wiki on our website [06:59:56] and i do not know who could i do this [07:10:59] @slap-on [07:11:00] I will be slapping annoying people since now [07:11:04] sasan: hi [07:11:15] hi [07:11:42] could you help me? [07:11:44] do you see anything in logs on your mail server? [07:12:13] no nothing [07:12:17] can you even access from that webserver? did you try doing that? [07:12:40] i just add those commands to m y local settings [07:12:41] what is port 587 is it SSL or plain? [07:12:45] and it show fatal error [07:12:50] plain [07:12:51] what you see in fatal error [07:12:52] no ssl [07:12:59] let me copy to you [07:13:00] ok? [07:13:10] you can use pastebin if it;s huge [07:13:38] pastebin? [07:13:42] what is it [07:13:58] http://tools.wmflabs.org/paste [07:14:13] !paste is http://tools.wmflabs.org/paste [07:14:14] Key was added [07:14:43] what should i do there? [07:15:33] paste the error [07:16:03] a min [07:25:05] : sorry [07:25:09] i lost connection [07:25:16] i have added the error there [07:25:28] have you seen the error [07:25:29] ? [07:26:06] let me check [07:26:33] ok [07:27:13] yes I see it [07:27:39] yes indeed you are missing PEAR mail package [07:27:42] so you need to install it [07:28:49] how can i install it? [07:28:52] could you help me [07:28:57] i run my wiki on website [07:28:58] what OS you have on server [07:29:07] i run it on my website [07:29:18] ok, what OS you have on server where your website run [07:30:02] parsintelligent.com [07:30:41] I guess you will have to contact your provider then [07:31:30] you mean ins server should be installed pear mail package? [07:33:08] in my cpanel [07:33:15] i have too many options for email [07:33:21] which one do you mean?? [07:33:31] how could i find pear mail? [07:34:44] : please help me solve this problem [07:35:36] I don't really know how cpanel works I only know how to maintain servers which you have direct access to [07:35:53] you should contact the company which hosts your website [09:33:18] How do I login as ADMIN after I enabled the LDAP Authentication plugin? [09:33:51] ManDay: by using the password for user "ADMIN"? [09:34:24] or do you mean you want to log into a non-ldap admin account? i don't think that's possible. [09:35:02] you should just assign some ldap user(s) to the appropriate groups. i think it's possibel to map ldap groups to mediawiki groups, but i doN#t know how [09:35:21] perhaps you can just assign the mediawiki group directly [09:35:22] !promote [09:35:23] There is no such key, you probably want to try: !autopromote, !createandpromote, !emailconfirmed, [09:35:25] bah [09:35:33] !createandpromote [09:35:33] To recreate the admin user, run "php maintenance/createAndPromote.php" on the command line. [09:35:50] DanielK_WMDE: I'll try with the LDAP groups [09:35:59] The LDAP Authentication man page says, though: [09:36:10] A list of groups that won't automatically have their members // removed, but will have them added. The sysop, bureaucrat, and bot // groups are always considered locally managed. [09:36:44] I'm unsure as to what "locally managed" implies. Does that mean that even if I put a user into a LDAP "sysop" group, he will not be sysop? [09:37:04] ManDay: in that case, log in with the appropriate user once, so a user record is created in mediawiki. then promote that user to admin (aka sysop) status [09:37:34] i havn't used ldap, i can only guess that "locally managed" means that ldap groups are not used, but the normal mediawiki group mechanism is [09:37:37] DanielK_WMDE: Ok, I'll try that cli script [09:38:13] you need one member in the "bureaucrat" group. that user can then assign groups to other users [09:38:49] !userrights [09:38:49] For information on customizing user access, see < http://www.mediawiki.org/wiki/Help:User_rights >. For common examples of restricting access using both rights and extensions, see < http://www.mediawiki.org/wiki/Manual:Preventing_access >. [09:38:56] ManDay: --^ [09:39:04]