[05:12:26] is there a way to check to ensure someone has 2FA enabled and/or a way to make it compulsory for certain groups (i.e. admins). on WMF production I see an option to enable it but obviously it isn't forcing me to enable it. [05:14:01] We can check [05:14:12] We being wmf staff can [05:14:34] Compulsory stuff is a big political thing... [05:15:09] Its semi compulsorary for some groups but thats not really enforced [05:15:23] well assuming non-WMF wiki and without checking the database for an entry in the oathauth_users table [05:15:53] There is also a default disabled api module [05:16:46] Weare planning to add better support for technically enforcing its use [05:17:09] ok, how do wmf staff check to see if it's enabled or disabled? [05:17:58] I just query db [05:18:32] If for example a steward doesnt have it on, we then send an agsty email [05:18:48] Yeah, we need better process... [05:19:16] ok so you would have to check the db, I was thinking something more along the lines of say Special:LookupUser having a `oathauth = 1` entry or something [05:20:10] We could definitely do an api query, i just think i dont have sufficient rights for it [05:20:45] Also db is easier for get a list of everyone in group X [05:26:59] and i agree that WMF is more political given it's size and community, but a way to make it technically compulsory for certain groups should be an optional feature given third-party wikis may desire as much, as it's part of core now [05:27:23] 2fa isnt part of core [05:27:27] But i agree [05:27:55] it comes bundled with every new install and has the option of being enabled during installation, that's a pretty high visibility [05:28:56] So there are some people working on making certain rights only work if 2fa is enabled [05:29:22] But yes, there are a bunch of things with 2fa needing improvement [05:29:48] will be interesting to see it's development play out then. security is a big thing for me [05:29:48] There are also people currently working on yubikey support [05:30:34] There is also a bit of a resourcing fight within WMF where nobody wants to be responsible for it :S [05:32:15] seems silly, it's a good feature. and the average user needs 2FA, different people have different ideas on what a strong password is [05:32:52] c: i'd be interested to hear more about your wants/desires in terms of security needs for mediawiki. Its often hard to get feedback from non-wikimedia users in this area [05:33:05] c: indeed it is silly [05:33:33] WMF is often quite silly when it comes to how components are resourced [05:36:36] Im also hoping that CSP support will be useful to non-wikimedia users, although progress on that has been slow, largely due to lack of time on my part [05:37:46] well, password security should be better by default for all. while privileged groups have stricter requirements, a non-privileged user can make a stupidly easy password and get promoted [05:38:02] That is true [05:38:22] It is hard to figure out what appropriate defaults should be [05:38:45] Since mw gets used by so many different types of users [05:39:06] Maybe it should be an installer question [05:39:27] Although default should probably swing more in stronger password direction [05:40:04] indeed. and when creating an account (assuming oathauth_enable is present for *) an option for enable 2FA on account creation should be present [05:41:59] the current limits of 1 character minimum should probably change and include a check for . Gruntfile.js SECURITY composer.local.json-sample includes mw-config thumb.php [05:42:03] .. HISTORY UPGRADE devwiki2-backup index.php opensearch_desc.php thumb_handler.php [05:42:07] CODE_OF_CONDUCT.md INSTALL api.php docs jsduck.json profileinfo.php vendor [05:42:10] COPYING LocalSettings.php autoload.php extensions languages resources [05:42:13] CREDITS README cache images load.php skins [05:42:16] FAQ RELEASE-NOTES-1.32 composer.json img_auth.php maintenance tests [05:42:19] weer [05:42:24] i hate irssi [05:42:27] the current limits of 1 character minimum should probably change and include a check for PasswordCannotBePopular [05:56:08] Yeah. Especially the not popular part [15:33:14] hi [15:33:45] i am not Import pages. error: This page isn’t working bayanmedia.ir didn’t send any data. ERR_EMPTY_RESPONSE [15:35:14] MediaWiki 1.32.1 (c6f078c) PHP 7.2.18 (fpm-fcgi) MariaDB 10.0.38-MariaDB ICU 64.1 Lua 5.1.5 [15:50:26] i am not Import pages. error: This page isn’t working bayanmedia.ir didn’t send any data. ERR_EMPTY_RESPONSE [15:51:19] sokot: where are you importing those pages? [15:51:57] i am not Import pages. error: This page isn’t working bayanmedia.ir didn’t send any data. ERR_EMPTY_RESPONSE //////// MediaWiki 1.32.1 (c6f078c) PHP 7.2.18 (fpm-fcgi) MariaDB 10.0.38-MariaDB ICU 64.1 Lua 5.1.5 [15:53:16] mahdi: where are you importing those pages? [15:59:31] saper: Special pages/Import Page [15:59:45] mahdi: and what do you say there [16:00:40] saper: This page isn’t working bayanmedia.ir didn’t send any data. ERR_EMPTY_RESPONSE [16:01:46] mahdi: I'd check the debug log !debugging [16:01:52] also php.log [16:02:02] !debug | mahdi [16:02:02] mahdi: For information on debugging (including viewing errors), see https://mediawiki.org/wiki/Manual:How_to_debug . A list of related configuration variables is at https://mediawiki.org/wiki/Manual:Configuration_settings#Debug.2Flogging Also see https://mediawiki.org/wiki/Manual:Errors_and_symptoms [16:02:37] saper: ok please whait [16:09:43] saper: Not available php.log [16:17:27] saper: ok. No error [16:31:10] i am not Import pages. error: This page isn’t working bayanmedia.ir didn’t send any data. ERR_EMPTY_RESPONSE //////// MediaWiki 1.32.1 (c6f078c) PHP 7.2.18 (fpm-fcgi) MariaDB 10.0.38-MariaDB ICU 64.1 Lua 5.1.5 [16:32:05] repeating the same message 4 times isn't going to magically make people able to help you. saper was asking you questions and attempting to guide you through getting more information [16:32:57] unless you're able to find some sort of actual error message on the server (via php logs, webserver logs, or mediawiki debug logs), we aren't going to be able to assist much further [16:35:21] ERR_EMPTY_RESPONSE is probably caused by a segfault (either php or webserver, but most likely php). Php segfaults are often caused by buggy php engine (try to update to a new version) or buggy extensions, usually opcode caching [16:35:25] Skizzerz: Is the php.log file in centos7 cool? [16:35:54] that is one log file, but not the only one [16:36:16] you'll want to check your webserver log files for indication of errors (if php was segfaulting, it would likely show up there). syslog may also be helpful [16:53:18] Skizzerz: https://drive.google.com/open?id=1hMV1Xki8_SffYdqa-FIBBc_GNyvEypgO php-fpm.log [16:58:25] saper: https://drive.google.com/open?id=1hMV1Xki8_SffYdqa-FIBBc_GNyvEypgO php-fpm.log [17:03:35] mahdi: this is not that log [17:04:22] saper: Not available php.log [17:06:02] mahdi: do you have php-fpm.conf file [17:09:47] saper: https://drive.google.com/open?id=1pbH8fIJdp5IKdvY4ZctjboZ8mPO5Cnke php-fpm.conf [17:15:46] mahdi: try to uncomment [17:15:47] ;php_flag[display_errors] = off [17:15:47] ;php_admin_value[error_log] = /var/log/fpm-php.www.log [17:15:47] ;php_admin_flag[log_errors] = on [17:21:58] mahdi: but also please enable mediawiki debug log as explained in the documentation $wgDebugLog ... [17:23:11] saper: Done. [17:40:25] saper: https://drive.google.com/open?id=1OEXgvBWhOSqQeVmH5OMgaaZVcWzNrw51 error_log [17:49:29] I can not import Pages [17:49:44] https://drive.google.com/open?id=1OEXgvBWhOSqQeVmH5OMgaaZVcWzNrw51 error_log [17:50:23] mahdi_: This looks like a serious problem: [emerg] 11147#0: unknown directive "php_value" [17:53:54] Vulpix: What is the solution to this? [17:59:07] A database query error has occurred. Did you forget to run your application's database schema updater after upgrading? [18:00:48] That looks like the same problem: https://www.mediawiki.org/wiki/Topic:U4hkkys8wjanrzbz [18:57:25] error load page: http://bayanmedia.ir/wiki/%D8%B5%D9%81%D8%AD%D9%87%D9%94_%D8%A7%D8%B5%D9%84%DB%8C [18:57:40] please help me [18:58:11] mahdi_: have you seen what Vulpix wrote^^ ? [18:58:55] mahdi_: did you upgrade mediawiki from some old version? [18:58:59] saper: error load page: http://bayanmedia.ir [18:59:20] back for 1.31 [19:00:07] what does it mean "back for 1.31" [19:01:22] good news http://bayanmedia.ir/wiki/%D8%B1%D8%A7%D9%87%D9%86%D9%85%D8%A7:%D9%81%D9%87%D8%B1%D8%B3%D8%AA works so only main page is broken [19:01:57] saper: I had to go back from version 1.32 to version 1.31 so I could upload my previous pages [19:02:49] http://bayanmedia.ir/wiki/%DA%A9%D9%84%D8%A7%D9%85_%D9%86%D9%88%D8%B1/7 [19:03:02] http://bayanmedia.ir/wiki/%D8%A2%D8%AB%D8%A7%D8%B1_%D8%B4%D8%B1%D8%B9%DB%8C_%D8%A8%DB%8C%E2%80%8C%D9%88%D8%A7%D8%B3%D8%B7%D9%87%D9%94_%D9%85%D8%B3%D8%AA%D8%B5%D8%AD%D8%A8 [19:04:40] mahdi_: I don't think it was a good idea:( [19:05:42] saper: Have a better way? [19:09:47] mahdi: no, you didn't find the root problem with your import I am sorry [19:10:23] and I don't know how downgrade is supposed to work, did you restore from some backup? [19:12:08] saper: I have a backup of all my data and this was just a test. I can return my information [19:12:27] mahdi: but downgrade like this will not work [19:13:19] saper: what is your opinion? What is the solution? [19:13:28] did you run upgrade.php ? [19:13:49] no [19:14:01] after 1.32? [19:14:39] http://bayanmedia.ir/wiki/%D9%88%DB%8C%DA%98%D9%87:%D9%86%D8%B3%D8%AE%D9%87 [19:14:43] not sure it will help, you probably have a nice mess in your database [19:16:03] why don't you restore your backup [19:16:23] I've already backed up from version 1.31 of my pages. I created it in a new wiki version 1.32 [19:16:49] do you have a proper database backup or just export of pages [19:17:46] Now that I want to import Pages I am making a mistake [19:18:23] database & export of pages [19:19:42] Now that I want to import Pegasus I am making a mistake [19:21:03] I used the following command to load: [19:21:17] php importDump.php < dumpfile.xml [19:22:39] php maintenance/rebuildrecentchanges.php [19:26:14] saper: What should I do now? [19:31:37] which version is your dump from? [19:37:38] saper: Wiki is now: 1.32 //// Import Pages: 1.31 [19:40:51] are you installing it into a fresh database? [19:42:32] saper: yes [19:46:11] may I ask why? do you have the old one somewhere? [19:48:08] The previous database was on another server with version 1.31. Due to lack of proper support, the site became available. Now that it's restarted, we installed the wiki 1.32 [20:07:28] mahdi: so, install clean 1.31 first. restore your xml. (you can use https://www.mediawiki.org/wiki/Manual:ImportDump.php also). Then upgrade according to https://www.mediawiki.org/wiki/Manual:Upgrading [20:08:07] mahdi: you also need images/uploads from the old wiki if there were any [20:10:25] saper: Thank you since you left. Yes, I will certainly do this. [20:11:04] saper: Can we get along with the telegram? [20:12:09] https://t.me/sokote_zaman [20:13:18] I am still here, most of the time [20:14:31] saper: Please send me a message through the telegram to make friends. I will be glad [20:14:57] I am on IRC :) [20:15:31] IRC please link download app android [22:32:54] saper: [e5a6de4ac3c1abf7a01667e1] Exception caught: Request to parsoid for "wikitext" to "html" conversion of content connected to title "مبحث:Uzwr0i280xhszixe" failed: 406 [22:38:14] saper: can not new page flow [22:39:41] Error creating thumbnail: /bin/bash: /usr/bin/convert: No such file or directory Error code: 127 [22:40:18] Hello o/ [22:40:44] I've just moved my mediawiki install from one server to another, and have been setting it up but ran into a strange error [22:41:13] ok [22:41:18] Uncaught TypeError: Argument 1 passed to MWExceptionHandler::handleException() must be an instance of Exception, instance of Error given in /var/www/html/includes/exception/MWExceptionHandler.php:153 [22:41:28] Stack trace: [22:41:28] #0 [internal function]: MWExceptionHandler::handleException(Object(Error)) [22:41:29] #1 {main} [22:41:44] thrown in /var/www/html/includes/exception/MWExceptionHandler.php on line 153 [22:42:04] what version of MW is this Luna_xoxo ? [22:43:09] umm i'm not sure, how do i find out? [22:43:39] the old instance is still running fine, it's on php5 though and the new server is php7 not sure if that makes a difference [22:43:45] grep wgVersion includes/DefaultSettings.php [22:43:49] you should get something like: [22:43:54] $wgVersion = '1.34.0-alpha'; [22:44:02] Yes, that can absolutely make a difference. [22:44:15] $wgVersion = '1.25.1'; [22:44:18] Older versions of MW will break horrifically inside PHP 7 [22:44:33] hmm [22:44:58] 1.25 is unsupported [22:45:17] shouldn't really have been used past mid 2016 [22:45:34] [e5a6de4ac3c1abf7a01667e1] Exception caught: Request to parsoid for "wikitext" to "html" conversion of content connected to title "مبحث:Uzwr0i280xhszixe" failed: 406 ///////// can not new page flow [22:45:38] if i install a newer version, and just use the same database will all my stuff still be there? i have not uploaded any files to it, it's just text pages on there [22:47:07] its saying that 1.31.1 is the legacy LTS, is there a newer LTS then the legacy version? [22:48:48] hm: https://www.mediawiki.org/w/index.php?title=Template:MW_stable_php_requirement&diff=2806147&oldid=2174519&diffmode=source [22:50:03] Please help me [22:50:05] Krenair, i'm not sure what i'm looking at [22:50:13] I'm not sure when php 7 support was added [22:50:38] I'll give 1.31.1 a go and see what happens [22:50:55] I'd take a copy of your database [22:51:10] and see if the updater in 1.31.1 is still able to update it. it should be ok [22:51:36] 1.31 is the current LTS: https://www.mediawiki.org/wiki/Version_lifecycle [22:52:54] Please help me [22:53:48] mahdi, I don't know about your parsoid error but the error creating thumbnail indicates a lack of imagemagick [22:54:30] Luna_xoxo, I guess the difficulty in finding information about php 7 is due to wikimedia going php 5 -> hhvm in 2014, and are in the process of moving from hhvm to php 7 now [23:24:15] Krenair, ok i think it's worked? [23:24:26] Problem i have now is i cant sign in to the admin account anymore [23:24:40] is there a way to reset the admin password from the terminal? [23:24:53] you can change the password of any user from CLI [23:25:10] see maintenance/changePassword.php [23:26:28] :D :D :D [23:26:46] Thanks so much Krenair, just got in and it all seems to be working great now [23:27:13] np