On https://fedoraproject.org/wiki/Fedora_Project_Wiki I try to authenticate but a click on "login" returns a red Fatal error authenticating user. Tried various browsers and even OS, cleared browser cache to no avail. (Login to bodhi, fas, ... work just fine).
I see nothing on error_log, I've restarted apache w/o any effect :(
Found it, in /var/log/php-fpm/www-error.log
/var/log/php-fpm/www-error.log
[05-Oct-2020 08:18:36 UTC] PHP Notice: Unable to find phpseclib Crypt/RSA.php. Ensure phpseclib is installed and in include_path before you include this file in /usr/share/php/jumbojett/OpenID-Connect-PHP/src/OpenIDConnectClient.php on line 35
I've installed php-phpseclib-crypt-rsa.noarch and php-phpseclib-crypt-base. That didn't help.
php-phpseclib-crypt-rsa.noarch
php-phpseclib-crypt-base
On @remi's advice, I've added a require_once '/usr/share/php/phpseclib/autoload.php'; just before the check. That removed the error from the log but did not fix the login issue.
require_once '/usr/share/php/phpseclib/autoload.php';
I'm inclined to think we have an issue with php-jumbojett-OpenID-Connect-PHP-0.9.0-1.fc32.noarch itself.
php-jumbojett-OpenID-Connect-PHP-0.9.0-1.fc32.noarch
Metadata Update from @zlopez: - Issue priority set to: Waiting on Assignee (was: Needs Review) - Issue tagged with: high-gain, high-trouble, ops
Metadata Update from @zlopez: - Issue priority set to: None (was: Waiting on Assignee)
The remaining error is:
[05-Oct-2020 08:54:55 UTC] PHP Deprecated: Non-static method HTTP302Found::onArticleViewRedirect() should not be called statically in /usr/share/mediawiki/includes/Hooks.php on line 174
I'd think it's not related but maybe it is, to redirect the user to the login page?
Metadata Update from @pingou: - Issue untagged with: high-gain, high-trouble, ops - Issue priority set to: Needs Review
Metadata Update from @pingou: - Issue priority set to: None (was: Needs Review) - Issue tagged with: high-gain, high-trouble, ops
The remaining error is: [05-Oct-2020 08:54:55 UTC] PHP Deprecated: Non-static method HTTP302Found::onArticleViewRedirect() should not be called statically in /usr/share/mediawiki/includes/Hooks.php on line 174 I'd think it's not related but maybe it is, to redirect the user to the login page?
The remaining error is: [05-Oct-2020 08:54:55 UTC] PHP Deprecated: Non-static method HTTP302Found::onArticleViewRedirect() should not be called statically in /usr/share/mediawiki/includes/Hooks.php on line 174
After checking with @remi this appears to not be the issue, it's a deprecation warning for something that will stop working in 8.0. So we're good for now and the next release of mediawiki changed quite a bit of this file, so hopefully they've fixed the issue.
Alright, so after much digging, I realized the error was in the URL returned:
error=invalid_scope&error_description=unknown+scope+https%3A%2F%2Fid.fedoraproject.org%2Fscope%2Fagreements+requested&state=373cf20043bc95d4daeca3646bc9ec49
ie: error = invalid_scope description: unknown scope
This pointed me to changes we've made recently to the mediawiki config: https://pagure.io/fedora-infra/ansible/c/c2187f319ad2d49cc39b3655d86db2325a1ca1b7 I then realized that the if/else condition for the scopes for staging vs prod was inverted... The fix became simple: https://pagure.io/fedora-infra/ansible/c/d766ed3e0c659d1286ce6b289206d6e4d9254612?branch=master
I ran the playbook and it was able to log in into the wiki.
So this is fixed for me, could you confirm on your side?
Metadata Update from @pingou: - Issue assigned to pingou
Fix confirmed.
Thank you!!
Metadata Update from @augenauf: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.