Special:MergeAccount does not identify all accounts
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	• bzimport
	Nov 24 2007, 10:01 PM

Description

Author: gangleri

Description:
Hi!

When I go to the url from above the following is displayed:

Create unified account
... some code not copied here ...
You're ready to create your unified account, with the following wikis attached: 

Home wiki

The password and e-mail address set at this wiki will be used for your unified account, and your user page here will be automatically linked to from other wikis. You will be able to change which is your home wiki later.

test.wikipedia.org primary

Attached accounts

The account named "גאַנגלערי" on each the following sites will be automatically attached to the unified account: 

en.wikipedia.org password
meta.wikimedia.org password
yi.wiktionary.org password

( Unify accounts ) button

The page does neither identify
http://commons.wikimedia.org/w/index.php?title=special:Contributions/%D7%92%D7%90%D6%B7%D7%A0%D7%92%D7%9C%D7%A2%D7%A8%D7%99&uselang=en
showing first edit from « 23:55, 20 November 2007 »
nor
http://zh.wikisource.org/w/index.php?title=special:Contributions/%D7%92%D7%90%D6%B7%D7%A0%D7%92%D7%9C%D7%A2%D7%A8%D7%99&uselang=en
created recently and showing first edit from « 20:22, 24 November 2007 »
nor
http://za.wikiquote.org/w/index.php?title=special:Contributions/%D7%92%D7%90%D6%B7%D7%A0%D7%92%D7%9C%D7%A2%D7%A8%D7%99&uselang=en
created recently and showing first edit from « 20:58, 24 November 2007 » .

In order to show that the account names do not contain hidden characters, general punctuation characters etc. I list them here:

http://test.wikipedia.org/w/index.php?title=special:Contributions/%D7%92%D7%90%D6%B7%D7%A0%D7%92%D7%9C%D7%A2%D7%A8%D7%99&uselang=en
showing first edit from « 12:24, 29 March 2006 » .
http://en.wikipedia.org/w/index.php?title=special:Contributions/%D7%92%D7%90%D6%B7%D7%A0%D7%92%D7%9C%D7%A2%D7%A8%D7%99&uselang=en
showing first edit from « 16:04, 19 November 2005 » .
http://yi.wiktionary.org/w/index.php?title=special:Contributions/%D7%92%D7%90%D6%B7%D7%A0%D7%92%D7%9C%D7%A2%D7%A8%D7%99&uselang=en
showing first edit from « 21:44, 18 November 2005 » .
http://meta.wikimedia.org/w/index.php?title=special:Contributions/%D7%92%D7%90%D6%B7%D7%A0%D7%92%D7%9C%D7%A2%D7%A8%D7%99&uselang=en
showing first edit from « 21:57, 29 November 2005 » .

Please investigate what is wrong.

Thanks in advance!

Best regards Reinhardt [[user:Gangleri]]

see bug 012091 · tracking bug for issues related to « Single login » · « Unified login »

Version: unspecified
Severity: normal
URL: http://test.wikipedia.org/w/index.php?title=Special:MergeAccount&action=submit

Details

Reference: bz12096

Event Timeline

• bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:00 PM

• bzimport added a project: MediaWiki-extensions-CentralAuth.

• bzimport set Reference to bz12096.

• bzimport added a subscriber: Unknown Object (MLST).

• bzimport created this task.Nov 24 2007, 10:01 PM

gangleri wrote:

note: for my main user name « Gangleri » I changed some of the accounts adding both another password and an alternate email address. Then « Special:MergeAccount » displays additionaly:

Confirm more accounts

Some of the accounts couldn't be automatically matched to the designated home wiki. If these accounts belong to you, you can confirm that they are yours by providing the password for them.

  * mo.wiktionary.org
  * wikimania2006.wikimedia.org

Password: ( input field )


or

... list as above ...

rotemliss wrote:

The problem is caching. The table localnames in the CentralAuth database is used to store all the user names in the various Wikimedia sites. If it is empty, it is retrieved, using a relatively inefficient process, from the different databases. When you register to a site which has CentralAuth enabled (i.e. only testwiki on the moment), you get all the names imported if necessary and the new user added. Also, all the names are imported when you open the second phase (dry run merging) in Special:MergeAccount. After that, the cache is no longer updated. When all the sites will have CentralAuth enabled, the cache will be updated for every new user and every rename.

It is possible to truncate globalnames and localnames periodically in this test period, and truncate them once anyway after CentralAuth is enabled in all sites.

brianna.laugher wrote:

I just tried it from my Commons account. It failed to detect my accounts at private/closed wikis: foundation, otrs and internal. They meet the requirements for merging.

Accounts on wikis where account creation is restricted are not merged. This is for security. There were concerns that a user could accidentally confirm the email address for a maliciously created account not under their control. That would then leave them vulnerable to usurpation of the whole global set of accounts. The problem is somewhat more severe if private and fishbowl wikis are included in the merge list.

So, is this bug to be closed?

rotemliss wrote:

This bug is about cached account records which are not updated, and is thus fixed. However, as noted, accounts in private wikis are not merged, and that "bug" won't be fixed.

MarcoAurelio moved this task from Backlog to Done on the MediaWiki-extensions-CentralAuth board.May 5 2015, 6:12 PM

Change 313613 had a related patch set uploaded (by Kmuthu):
[WIP] Make notifications top toolbar controls sticky

https://gerrit.wikimedia.org/r/313613

gerritbot added a project: Patch-For-Review.Sep 30 2016, 7:27 PM

Special:MergeAccount does not identify all accountsClosed, ResolvedPublicActions

Description

Details

Event Timeline

Special:MergeAccount does not identify all accounts
Closed, ResolvedPublic
Actions