(Go: >> BACK << -|- >> HOME <<)

Page MenuHomePhabricator

Drop gu_salt from globaluser
Open, In Progress, Needs TriagePublic

Description

All values which are stored in gu_salt can be stored as ':B:' . $this->mSalt . ':' . $this->mPassword in the gu_password column.

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript
Zabe added a parent task: Restricted Task.May 7 2024, 10:23 PM

Change #1028906 had a related patch set uploaded (by Zabe; author: Zabe):

[mediawiki/extensions/CentralAuth@master] Add migrateGuSalt.php script

https://gerrit.wikimedia.org/r/1028906

Change #1029709 had a related patch set uploaded (by Zabe; author: Zabe):

[operations/puppet@production] wikireplicas: Drop gu_salt from maintain-views

https://gerrit.wikimedia.org/r/1029709

Claiming this task temporarily: I will deploy the wikireplicas change on Monday, then I will unassign myself.

fnegri changed the task status from Open to In Progress.May 10 2024, 1:45 PM

Change #1028906 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@master] Add migrateGuSalt.php script

https://gerrit.wikimedia.org/r/1028906

Change #1030526 had a related patch set uploaded (by Gergő Tisza; author: Gergő Tisza):

[mediawiki/extensions/CentralAuth@master] migrateGuSalt: Use transaction

https://gerrit.wikimedia.org/r/1030526

Change #1030526 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@master] migrateGuSalt: Use transaction

https://gerrit.wikimedia.org/r/1030526

Mentioned in SAL (#wikimedia-operations) [2024-05-14T22:48:31Z] <zabe> start running migrateGuSalt.php in screen session # T364435

Change #1031606 had a related patch set uploaded (by Zabe; author: Zabe):

[mediawiki/extensions/CentralAuth@master] Stop using gu_salt

https://gerrit.wikimedia.org/r/1031606

Change #1031608 had a related patch set uploaded (by Zabe; author: Zabe):

[operations/puppet@production] filtered_tables: Remove gu_salt

https://gerrit.wikimedia.org/r/1031608

Change #1029709 merged by FNegri:

[operations/puppet@production] wikireplicas: Drop gu_salt from maintain-views

https://gerrit.wikimedia.org/r/1029709

Cookbook cookbooks.sre.wikireplicas.update-views run by fnegri: Started updating wiki replica views

Cookbook cookbooks.sre.wikireplicas.update-views started by fnegri completed:

  • clouddb1021.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'
  • clouddb1017.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'
  • clouddb1018.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'
  • clouddb1019.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'
  • clouddb1020.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'
  • clouddb1013.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'
  • clouddb1014.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'
  • clouddb1015.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'
  • clouddb1016.eqiad.wmnet (PASS)
    • Ran Puppet agent
    • Ran 'maintain-views --all-databases --replace-all --auto-depool --table globaluser'

Claiming this task temporarily: I will deploy the wikireplicas change on Monday, then I will unassign myself.

Apologies, I did this a few days later. The wikireplicas patch is now merged and applied.

Do we need to do something to support third-party users (although officially, third-party use of CentralAuth is not supported)? I guess once T348486: Migrate CentralAuth to use a virtual database domain lands, CA can have update scripts and we can just automatically run the migration?

Change #1031606 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@master] Stop using gu_salt

https://gerrit.wikimedia.org/r/1031606

Change #1032596 had a related patch set uploaded (by Zabe; author: Zabe):

[mediawiki/extensions/CentralAuth@master] Run migrateGuSalt.php on Third-party wikis

https://gerrit.wikimedia.org/r/1032596

Change #1032596 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@master] Run migrateGuSalt.php on Third-party wikis

https://gerrit.wikimedia.org/r/1032596

Change #1035532 had a related patch set uploaded (by Zabe; author: Zabe):

[mediawiki/extensions/CentralAuth@master] Drop gu_salt from globaluser table

https://gerrit.wikimedia.org/r/1035532

Change #1035897 had a related patch set uploaded (by Zabe; author: Zabe):

[mediawiki/extensions/CentralAuth@master] Add sql files for dropping gu_salt from globaluser

https://gerrit.wikimedia.org/r/1035897

Change #1035897 merged by jenkins-bot:

[mediawiki/extensions/CentralAuth@master] Add sql files for dropping gu_salt from globaluser

https://gerrit.wikimedia.org/r/1035897

Change #1031608 abandoned by Zabe:

[operations/puppet@production] filtered_tables: Remove gu_salt

Reason:

Done in https://gerrit.wikimedia.org/r/c/operations/puppet/+/1037046

https://gerrit.wikimedia.org/r/1031608