Extension talk:OpenID

From MediaWiki.org
Jump to: navigation, search
An archive box Archives 

Archive 1 - Archive 2

Warning Warning: Please do not use the google discussion group to discuss this extension. I as maintainer do not follow the discussions there. You are kindly asked to discuss the extension here, watch this page, have your e-mail notification enabled, and your e-mail address confirmed. --Wikinaut 00:35, 14 February 2012 (UTC)

First aid checklist [edit]

checklist 1: Did the OpenID extension ever work before ?
status quo ante your answer (my hints in italics)
Did the OpenID extension ever work before?
What constellation (version numbers of MediaWiki, OpenID, PHP see Special:Version on your wiki) has been known to work before?
Are you trying to use the extension from an intranet? If you can, check the proxy and fire wall settings. Contact your intranet system administrator and ask if and what exactly they have changed recently.
What has been changed on your system, and when?
Did you re-install, upgrade or move your MediaWiki installation recently? We do know of problems of remains from different versions when mixing or upgrading from an unknown status. If you can, then delete your complete installation and the extension and try a fresh installation.
When you installed OpenID extension manually after your MediaWiki, you need to run php update.php once before it can be used. Have you done it really? If you are unsure, and want to be on the safe side, then run it now again.
When did you notice the problem for the first time?

Before posting a question and request for help here, please check the presence of prerequisites with a small file in one of your web accessible directories.

<?php
phpinfo();
?>
Warning Warning: Do not reveal the output to the public. Do not post its output here or somewhere else, unless this is a safe place. After use, it is a good practice to wipe the script file from your web server in order not to give details of your system configuration to evil persons.

Access the phpinfo script with your web browser. Scrutinize the output very carefully, whether the following libraries are really installed, maybe as php module or as installed library. Look carefully through the whole output, what you are looking for might be at the end. If one of the modules is missing, please install the missing module, or recompile PHP to include the required modules to libphp5.so). This is explained on the main page of the extension.

checklist 2: PHP modules, which the extension requires
check the output of phpinfo():

library

is support installed for this?
openssl
gmp
mcrypt
bzip2

Along with your question, please indicate versions from your wiki's version page

checklist 3: MediaWiki components
check your wiki's version page

for component

what version do you run?
MediaWiki version and revision
PHP
OpenID extension version and revision

Please study the MediaWiki debug manual. Before reporting here, please always check your logfiles for obvious problems such as missing files due to wrong include paths and so. Add the following line temporarily to your LocalSettings.php and try to log in with OpenID

$wgDebugLogFile = "/tmp/{$wgSitename}-debug.log"; // my wiki's debug logfile - comment the line after use
Warning Warning: Make sure to have the debug file unaccessible for the public, and via the web, as the debug file may contain confidential information such as cookies.
checklist 4: Webbrowser, System, and MediaWiki debug logfiles
check your logfile are there fatal errors or warnings logged with relevance to OpenID extension, or MediaWiki?
/var/log/apache2/error_log
/var/log/messages
/tmp/<yourWikiSitename>-debug.log look for lines starting with OpenID:

After finishing the checklist tests, don't forget to

  • remove the phpinfo script
  • disable the debug logging
  • remove the debug log file

Contents

Thread titleRepliesLast modified
What version should I download?122:20, 6 May 2013
[RESOLVED/INVALID] Is it possible to change the expiration of the session/cookie for logged-in users?110:46, 11 April 2013
OpenID with Google Apps117:48, 13 March 2013
Suggestion: change $wgOpenIDConsumerForce so that it fully specifies an OpenID provider (Url, logo, ...)319:30, 9 February 2013
[SOLVED] ConfirmAccount extension and OpenID extension119:07, 7 November 2012
First attempt to edit new user page shows red message "<User id> is not registered"107:21, 30 October 2012
CAVEAT: Google's OpenIDs are Unique Per-Domain121:28, 22 June 2012
[SOLVED] Call to a member function getAssociation() on a non-object in ...Consumer.php on line 945606:37, 9 June 2012
OpenID for MediaWiki version 1.15.5, 1.17 [SOLVED]1104:49, 9 June 2012
Howo to prevent OpenID account creation213:36, 25 May 2012
[SOLVED] 1.18.x Download?110:44, 28 March 2012
[SOLVED] OpenID for MediaWiki 1.18 (addExtensionField method missing)110:43, 28 March 2012
[SOLVED] OpenID: no auth_request419:38, 26 February 2012
404: Page Not Found [SOLVED]100:15, 7 February 2012
functional questions [answered]020:11, 15 December 2011
Shared hosting - no command line [not possible; no solution]120:05, 15 December 2011
Wrote a new extension for the specific integration with Google Apps OpenId017:22, 8 August 2011
OpenID login and return links don't use short URL [SOLVED]110:27, 31 July 2011
Error in install description (OpenID Extension README) [SOLVED]108:18, 12 July 2011
Verification error [AWAITING DETAILS]015:01, 13 June 2011
First page
First page
Previous page
Previous page
Last page
Last page

What version should I download?

The instructions are not at all clear. It seems my options are:

  • Download a tag. But I think, the OpenID extension doesn't have any tags
  • The latest version of one of the extensions branches. But the comments say these might be unstable. That gives me the heebie-jeebies -- I really want a stable version.
  • A snapshot made during the release of a MediaWiki version. This also says it might be unstable.
  • clone from git. But the master branch of the git repo seems to be under (very) active development, so I'm assuming it, too, will be unstable.

I have MediaWiki 1.19 installed on my server. That's not listed in the compatibility table.

What should I do? Thanks for any advice!

Klortho (talk)00:48, 18 April 2013

I recommend to use the latest MediaWiki from git and the latest OpenID version from git.

Wikinaut (talk)22:20, 6 May 2013
 

[RESOLVED/INVALID] Is it possible to change the expiration of the session/cookie for logged-in users?

Users are logged out pretty quickly after their session goes idle. Is there a way to force the login session to remain open longer?

Shifuimam (talk)14:31, 3 April 2013

This is not an issue of the OpenID extension.

Wikinaut (talk)10:46, 11 April 2013
 

OpenID with Google Apps

We are hoping to set up a private cloud wiki and would like to make sure that it is locked down to users within our organization. We have a domain with Google Apps and this would be ideal to use for authenticating our users into the wiki. I am using a fresh install without any content though it is a canned bitnami hosted installation rather than rolling my own from the ground up.

I have been able to configure the OpenID extension and I can log in with my own Google credentials. I am not clear on whether I have locked it down to just our own organization or from Google if it would still authenticate any OpenID from any provider. I would like the user names to be the user part before the @ of the email address.


I have tried to search for specific instructions on configuring the OpenID extension to only use Google Apps but without success, if anybody can point me to a step by step guide I will attempt that before taking up anyone's time on here. To re-iterate, I want to only allow access to people in my domain authenticating with Google. (In future I may wish to grant access to users outside our Google App domain but have them sign up with a regular login and then manually grant them access.)

Meanwhile here are some details about our installation pasted from the Version page


 MediaWiki 1.19.1
 PHP 5.3.13 (apache2handler)
 MySQL 5.5.21-log
 OpenID(Version 1.004 20120427)
 


My LocalSettings.php looks like this (Updated since first posted, I have re-read the README and figured out how to only use Google as the provider)

 #// *** OpenID Configuration ***
require_once( "$IP/extensions/OpenID/OpenID.php" );
$wgTrustRoot = "http://okthen.bitnamiapp.com/mediawiki/";
#$wgOpenIDOnly = true;
#$wgOpenIDConsumerDenyByDefault = true;
$wgOpenIDConsumerForce = "https://www.google.com/accounts/o8/id";
$wgOpenIDUseEmailAsNickname = true;
$wgOpenIDAllowExistingAccountSelection = false;
$wgOpenIDAllowNewAccountname = false;
$wgOpenIDShowProviderIcons = true;
$wgOpenIDLoginLogoUrl = "http://www.google.com/favicon.ico";

I am not clear on how I can only allow folks who are part of my domain hosted on google apps to login.

I have not modified anything in the OpenID extension folder.

Okthen (talk)06:28, 9 July 2012

Did you ever get this figured out? I am trying to do the same thing but keeping getting stuck!

198.177.94.25017:48, 13 March 2013
 

Suggestion: change $wgOpenIDConsumerForce so that it fully specifies an OpenID provider (Url, logo, ...)

I have a patch (committed in my git repo) that I would like reviewed for inclusion. I clicked around and searched somewhat but didn't see any documentation here about submitting patches.

I've registered at gerrit.wikimedia.org; and I see that it gives me a git remote url customized to my user. Should I just push to there and that will launch a new review entry?

Cheers, Nathan Bird

UnwashedMeme (talk)21:18, 18 January 2013
  • hi, what is that patch about ?
  • Is it based on my latest version Version 1.004 20120427 ?
  • have you tested locally everything so that you are fully sure your patch does not break anything ?
Wikinaut (talk)22:41, 18 January 2013

I'd left the question deliberately vague trying to create a generic "How do you submit patches" documentation bit.

I actually have a series of patches in git, pulled from gerrit as specified in the download section. The patches are currently based on 7e5b4d13b9 (master as of writing this).

This is about extending $wgOpenIDConsumerForce to be able to specify an OpenIDProvider instead of just a flat URL. This is useful if the provider varies by username and you wish to display the login form like the builtin providers.

  • If you specify $wgOpenIDConsumerForce as a string it continues to behave as before (tested).
  • If you don't specify $wgOpenIDConsumerForce it continues to behave as before (tested).
  • If you specify an OpenIDProvider, e.g. $wgOpenIDConsumerForce = new OpenIDProvider('wp', 'www.wordpress-site.com', 'Wordpress-site.com Username', 'http://www.wordpress-site.com/author/{username}/' ); it will display a login form asking for the username; skips rendering other providers' forms. (tested and using)

In the last case (or a future one with a specified list of providers, instead of just the one) the generic provider 'openid' (arbitrary url) may not be present. To handle this I removed the special case logic in

  • OpenIDProvider::getLoginFormHTML
  • skin/openid.js

The special case used to, for the provider 'openid', name the field 'openid_url' instead of "openid_provider_param_$id". There is now a hidden input 'openid_url' always present and the 'openid' provider is treated the same as everything else.


I tried to test the code paths that were effected by the change I made after each patch. There are quite a few options though so there is a chance that I missed one that would be a confounding factor. To ease review I tried to break it into several logically distinct patches that stepped in the right direction.

UnwashedMeme (talk)20:49, 22 January 2013

Searching for information on Gerrit I came across: http://www.mediawiki.org/wiki/Git/Tutorial#How_to_submit_a_patch; would this be a good procedure for this extension, which appears to be housed in the same domain?

Gerrit appears to prefer commits to not be a series; it looks like it creates separate reviews for each commit in a branch when you push. I've squashed some of the commits but I think it will be more palatable as several reviews unless you would specifically like to avoid that.

UnwashedMeme (talk)16:50, 23 January 2013
 
 
 

[SOLVED] ConfirmAccount extension and OpenID extension

Hi, i have had a running setup of Mediawiki: 1.19.1 PHP Version 5.3.3 OpenID: 1.004.

I wanted to have control of the user account creations and so tried the AccountConfirm extension. However, the extension did not seem to work together with the OpenID extension. So I removed it again. Since then, when going through and finishing the login process at Special:OpenIDLogin, I am not logged in on mediawiki anymore. On the "Verification Success" page of the login process it says "Successful verification and log in as user 111.111.111.111", so the user name is not given there. My LocalSettings.php is as before and I could not find any errors indicating to the problem in the log file. If I use the regular login (without OpenID) I can login and create accounts fine.

How can I make my setup work as before again?

What possibility exists with the OpenID extension to confirm accounts before their creation? I only know of the $wgOpenIDConsumerAllow

Thanks

128.196.105.8817:36, 7 November 2012

The problem was that I had removed the user account manually from the user table. I found that there was still an entry in the user_openid table with an openId that I wanted to use to login. After the removal of this entry everything works fine again.

128.196.105.8818:24, 7 November 2012
 

First attempt to edit new user page shows red message "<User id> is not registered"

After logging in a new user with OpenID (Google account), the first attempt to edit the User page shows a message in large red letters "<User id> is not registered". Later, after closing session, the message is gone. This has confused some of our new contributors.

Can this misinformation be corrected? --Fred

96.254.52.10622:19, 22 August 2012

I have never seen this. Please go through the First aid checklist on top of this page, thanks,

Wikinaut (talk)22:26, 22 August 2012
 

CAVEAT: Google's OpenIDs are Unique Per-Domain

Hi, we're using version 0.9.0 patched (as described here) to work with MediaWiki 1.17.2. Using Google as OpenID provider it worked like a charm until we changed subdomains on the Wiki server (foo.example.com --> bar.example.com). The login itself succeeded but the user was presented with a form where he should choose his user name. We found out that $user = self::getUser( $openid ); in SpecialOpenIDLogin.body.php failed to return a valid user object since $openid was not found in the user_openid table! After switching back to foo.example.com the login worked again as expected. A bit of googling revealed the reason: Google's OpenIDs are Unique Per-Domain. We implemented a rather hackish way to update OpenIDs in the database for the time of the migration. Basically: Be very careful when changing domains when using Google as OpenID provider. Is the SVN version able to work with Google's changing OpenIDs?

Pigpen (talk)14:31, 22 June 2012

Thanks for reporting this issue. I already knew the problem, for example from this report https://drupal.org/node/1223386 .

You asked "Is the SVN version able to work with Google's changing OpenIDs?". Answer: no, currently not, but the SVN version allows users with an OpenID account to associate a normal password to the account, which was not possible in older OpenID versions. This can at least help to overcome (wiki) domain move problems.

Wikinaut (talk)21:28, 22 June 2012
 

[SOLVED] Call to a member function getAssociation() on a non-object in ...Consumer.php on line 945

Hey!

Mediawiki: 1.19 PHP Version 5.3.10 OpenID: 1.001

The problem is when I try to login with google-account. After the request of which email I want to use I get redirected to another page where I see this:

Fatal error: Call to a member function getAssociation() on a non-object in ...Consumer.php on line 945

I've also tried the extension on mediawiki 1.18

Does anyone have a solution for this?

Regards Anders

Rajjder (talk)09:15, 14 May 2012

Please check and make sure that you have also the correct version of php-OpenID library. Most likely you are using and incorrect outdated version of the library.

I suggest you delete all files in the subdirectory $IP/extension/OpenID, and that subdirectoy itself, and you make a fresh installation of version 1.004. Follow the installation instructions and apply the "make" (makefile) to download the correct library from https://github.com/Wikinaut/php-openid/tree/mw-extension-openid . You can inspect the library code on GitHub and the extension code itself on MediaWiki SVN http://svn.wikimedia.org/viewvc/mediawiki/trunk/extensions/OpenID/ , see readme files, in case you want to study it.

Wikinaut (talk)09:34, 14 May 2012

I've now made a fresh installation with version 1.004 by following the instructions. Unfortunately the problem remains with the exact error message as I posted before.

Rajjder (talk)23:10, 16 May 2012

Thanks for letting me know. The issue is now filed as Bug 36924 - Call to a member function getAssociation() on a non-object in ...Consumer.php on line 945. If you have further message, please comment on the bugtracker.

Wikinaut (talk)04:34, 17 May 2012

I already answered you directly. The gmd functions are apparently missing in your installation. This is explained for example on the main page and here on top in the checklist 2: PHP modules, which the extension requires.

Problem appears to be user-specific (missing gmd); issue closed.

Wikinaut (talk)09:55, 21 May 2012
Edited by another user.
Last edit: 06:36, 9 June 2012

Actually no, this issue is caused by openbase_dir. You assume that you can write to /tmp, in today's hosting market this is no always the case. I suggest in the future you use sys_get_temp_dir.

The easy work around is to set:

$wgOpenIDServerStorePath

and

$wgOpenIDConsumerStorePath

to a dir that you do have write perms to.

76.171.151.17305:29, 9 June 2012
 
 
 
 
 

OpenID for MediaWiki version 1.15.5, 1.17 [SOLVED]

Hi,

Where to find an OpenID version compatible with MW 1.17?

Cheers,

Dmb18:47, 2 July 2011
Edited by 2 users.
Last edit: 08:08, 12 July 2011

This is an issue because the 'latest' OpenID release (svn) relies on features in version 1.18+ of MW. However, the latest release of OpenID has a convenient Makefile for pulling in (and patching) the required php libs.

You can get round this issue by grabbing a *snapshot* for 1.17 [1], saved as "extensions/OpenID" AND the svn release, saved as "extensions/OpenID-svn". Grab the SVN version like this:

svn co http://svn.wikimedia.org/svnroot/mediawiki/trunk/extensions/OpenID/ extensions/OpenID-svn


Follow the install instructions in the OpenID-svn to pull (and patch) in the required php libs, then simply copy them into the 1.17 snapshot:

cp -r OpenID-svn/Auth/ OpenID/
// updated with information from the follow-up posting. -- Wikinaut 08:08, 12 July 2011 (UTC)

The final step requires you to set up the php include path so that these libs can be found by the script successfully. That's actually easy, so just set:

## Get the right PHP libs for OpenID                                                                      
set_include_path( get_include_path() . PATH_SEPARATOR . 'extensions/OpenID' );
 
## Install OpenID                                                                                         
include_once("$IP/extensions/OpenID/OpenID.setup.php");


I hope that makes your life easier than mine ;-)

Dmb19:20, 2 July 2011

Hi Dmb,

This appears to work for MW 1.15.5 as well, though your copy command is wrong. It should be:

 cp -r OpenID-svn/Auth/ OpenID/

Without the recursive flag, the subdirectories of the Auth directory don't get copied, and the extension won't work.

Thanks,

Scottcain16:21, 7 July 2011
 

Hello

These instructions work fine with MW 1.17. Thank you!

However, on the first try I got the following error in the web server:

PHP Fatal error: Define Auth_OpenID_RAND_SOURCE as null to continue with an insecure random number generator. in $IP/extensions/OpenID/Auth/OpenID/CryptUtil.php on line 52"

Fixed it replacing the line 23 from: define('Auth_OpenID_RAND_SOURCE', '/dev/urandom); to: define('Auth_OpenID_RAND_SOURCE', NULL);

But I don't know if it is safe, is it? Regards

Mclaud200013:21, 19 October 2011

Mclaud2000,

I added the "PHP Fatal error: Define Auth_OpenID_RAND_SOURCE as null..." problem (you are not the only person reporting this) and solution to the main page, including references. All references which I consulted say that it is reasonable safe.

Wikinaut07:02, 21 October 2011

I had the same issue, its caused by openbase_dir not allowing access to /dev (as it should be)

76.171.151.17304:49, 9 June 2012
 
 
 

Previously the title of this 'thread' contained the text "SpecialPageFactory issue with 1.17?". Unfortunately, I forgot to include that text anywhere in the body of the report. I believe that such strings are useful to help people find issues based on the error messages that they see (and search), so I'm writing it here.

It's kinda annoying that there is no edit summary for these 'threads'. I guess you'll just have to ignore the history and read each one.

134.36.64.13509:02, 12 July 2011

The original text was "Where to find an OpenID version compatible with MW 1.17?" There was no indication what the issue with SpecialPageFactory really was - I cannot see any. Please can you add this problem with SpecialPageFactory, or file a real bug report in bugzilla system so that everyone can properly track the problem. The Talk page is not a suitable medium for tracking bugs.

Wikinaut10:39, 12 July 2011
 

I fell into your trap of installing the openID extension to the current stable version of Mediawiki. Very clever of you to redefine "stable" to mean "old and in the way". You're very young aren't you?

I'd also like to point out that stable version 1.17 is the only version currently SPECIFICALLY MENTIONED in the prerequisites, so a careful person will be screwed. It is so blatant that it looks intentional.

How _exactly_ does one recover from this mistake? Is some sort of deinstallation of the openId extension or mediawiki needed or possible? I was in the mode of following clear instructions exactly, and now find myself either starting over from scratch with possibly incorrect instructions (the last set got me into this mess so I don't trust you mediawiki - openID people anymore) or hacking from the instructions in this thread, which seem to be a correction to the installation from scratch instructions.

76.2.58.5816:19, 7 September 2011

The page clearly says in the first line: "This is the manual of the OpenID extension (in svn trunk) which is suited for MediaWiki trunk and PHP 5.3.x. If you need older deprecated versions, please consult one of the archived pages."

I can send you a link to a complete version which runs with MW 1.16.1; I do not know of any version which runs with MW 1.17; and I suggest to better go to MediaWiki trunk version - this for example is running live on http://translatewiki.net. "Trunk" does work with OpenID trunk since begin of the year 2011.

Wikinaut16:29, 7 September 2011

Can you post the link of a stable version that runs with MW 1.16.1 as you mention above? Thanks for this great tool. We are using 0.9-dev with 1.16.1 and it is working great, but I would like access to the new features.

152.3.58.9919:00, 22 September 2011

Sorry, the new features are only in the new trunk version of the extension; it's worth to migrate everything to trunk.

Wikinaut01:50, 23 September 2011
 
 
 
 

Howo to prevent OpenID account creation

Is that possible to prevent account creation via OpenID? I want to implement a tie control on the wiki accounts. All accounts creation must created by Admin.

I notice that OpenID always requires to create local account with password. Is that possible to create local account without password?

Cheeyang (talk)08:11, 25 May 2012

Yes, it should be possible to create account without passwords, e.g. by Admin only.

You wrote "OpenID always requires to create local account with password."., but this is not correct - as such, because you can have an existing account (created via other methods), and then (later) add one or more OpenID identities to that existing account.

Is that what you wish to have ?

You need to set the correct permissions. I'll add the detailed information later here.

Wikinaut (talk)10:28, 25 May 2012

Sorry, my mistake. I assume OpenID work this ways:

 # OpenID always link to existing local account.  
 # OpenID didn't create any local account.  
 # OpenID extension is using OpenID to logon to local account automatically.

This is what I plan to do with OpenID but I feel it may not be possible with existing extension:

 # I add a list of user's open id (url or email)
 # When login to my wiki site, the OpenID extension will pick up my session's open id and compare against the list of user's open id and attempt to login.

By implement above workflow, I don't need to create local accounts and no need to create password for each account. This is what I want to avoid. I am thinking to make it work like LDAP authentication.

Cheeyang (talk)13:36, 25 May 2012
 
 

[SOLVED] 1.18.x Download?

The download for 1.18.x is not working?

Any chance it could be fixed?

Thanks, Alex

76.4.32.19123:00, 13 December 2011
  • What do you mean exactly?
  • What message did you get?
  • Please use the checklist on top of the page.
Wikinaut20:02, 15 December 2011
 

[SOLVED] OpenID for MediaWiki 1.18 (addExtensionField method missing)

I had a minor problem upgrading from 1.16 to 1.18. I downloaded the OpenID from svn and everything worked except the preferences page. I later discovered that maintenance/update.php was failing with the error

PHP Fatal error:  Call to undefined method MysqlUpdater::addExtensionField() in /var/www/mediawiki-1.18.2/extensions/OpenID/OpenID.hooks.php on line 369

It turns out that addExtensionField() is in the MW trunk for 1.19, but not in the 1.18 release branch. To make the updater work, I had to manually revert this patch:

http://www.mediawiki.org/wiki/Special:Code/MediaWiki/99652

After that, the updater completed and the preferences page now works. I hope this helps someone.

82.76.132.18609:23, 28 March 2012

Thanks for addings this info, I will update the line in the download section. As you can see, the 1.18 is not formally supported ("1.17 → 1.18 n/a No information is currently available for these versions. Please check the talk page for user reports").

I suggest to run always the latest versions of MediaWiki and OpenID, if this is possible.

Wikinaut (talk)10:41, 28 March 2012
 

[SOLVED] OpenID: no auth_request

After I migrated to a new hosting provider, the OpenID extension stopped working.

This message appears on the page after I try to log in:

Verification error
An error occured during verification of the OpenID URL.

And this appears on the log file:

OpenID: no auth_request

You can try for yourself at http://openfarmtech.org/w/index.php?title=Special:OpenIDLogin

What could be causing this? --Elifarley 10:35, 28 March 2011 (UTC)

The "Verification error" message of the OpenID extension is admittedly not very specific. What is the consumer and what is the provider for the OpenID authentication you wanted to make? --Wikinaut 20:52, 28 March 2011 (UTC)
I was trying to use GMail to authenticate at openfarmtech.org --Elifarley 02:03, 29 March 2011 (UTC)
Wikinaut21:23, 9 June 2011

I see you've been able to solve this issue. What was the problem and how did you fix it? --Codehead 12:05, 14 June 2011 (UTC)

Codehead12:05, 14 June 2011

Codehead,

I did not receive any further information from the original submitter, Elifarley. If you have a similar problem, please do me a favour and

  • check the First aid checklist on top of this page
  • post a new thread or contact me by wiki mail.

Perhaps I can help. If possible: use MediaWik trunk and OpenID trunk versions.

Wikinaut14:07, 14 June 2011

I also get no_auth_request, also with non https endpoints. To be sure I've upgraded openssl, removed SSL certicate checks and it responded the same, so I don't think they were used yet. I've tried it on different versions of mediawiki and the corresponding version of the wiki (1.16.5 (r91224) a.t.m. and also 1.16.2). I tried using a different store (other than file), but then it reports an error even though I ran "php update.php".

In the log I see:

when choosing google: OpenID: no auth_request (because $auth_request === null)

when choosing flickr and being returned after logging in: OpenID: aborting in auth because no response was recieved


I do get an object in $customer, and there are response headers, too. So it seems to contact external servers.

I also managed to contact Elifarley whom I know by coincidence, he said he fixed it by migrating servers. His problem could be related to SSL, but it could be many things if the entire environment changed.

Apparently this: $auth_request = $consumer->begin( $openid_url ); returns null in SpecialOpenID.body.php on line 213, but I cannot change this even if I return true at the beginning of Auth_OpenID_Consumer's->begin() in "Auth/OpenID/Consumer.php"!


I'm at a loss. I spent over 6 hours trying to figure this one out!! Please let me know what else I could try...

ErikDeBruijn00:52, 1 July 2011
 
 

I spent hours trying to figure this out. Apparently RHEL 5.7 by default does not install the php-xml extension. I simply ran this and restarted apache.

yum install php-xml
Hsand01 (talk)18:48, 25 February 2012
 

404: Page Not Found [SOLVED]

I've been having trouble getting OpenID to work for my wiki, it's installed fine, displays fine, you get re-directed to the google/yahoo/etc login page fine, but once you've logged in and allowed access, the redirect back is to a 404: Page Not Found, which then causes the log in to fail.

The only thing I've been able to come up with is something like this: http://drupal.org/node/576270

But it doesn't seem to help me much as I'm not clear on what to do. Anyone else had this issue and resolved it?

115.64.32.23804:10, 7 January 2012

Never mind, ended up working. Not sure how but it fixed itself over the last few weeks. Could've been my host but likely was an update of the database or something.

Allcarwiki - http://www.allcarwiki.com00:12, 7 February 2012
 

functional questions [answered]

Edited by another user.
Last edit: 05:49, 25 October 2011

Hi, nice extension, a few q's:

inline answered by Wikinaut 05:45, 25 October 2011 (UTC)
  1. How does an openid-enabled wiki mix with a shared user table implemented using $wgSharedDB?
    I think, there are no problems, as long as userids are unique. I assume, that userids are unique in each database, i.e. each Wiki. See the database table skeleton (url next point)
  2. What is stored in the user table by this extension when the user is first created?
    the MediaWiki userid of an account x, the registration timestamp when the OpenID registration took place, or when the OpenID identity was added to that account, the OpenID (Url). Remark: there can be many of such rows linked to a single account x - if the user has added more than one OpenID. See http://svn.wikimedia.org/viewvc/mediawiki/trunk/extensions/OpenID/patches/openid_table.sql?view=markup . This is prepared for shared databases, as far as I can see.
  3. Any idea how this extension interacts with ConfirmAccount, or, any suggestions if I want to record additional fields in the user table?
    I do not think that you need to modify anything. The only link the OpenID extension relies on is the standard MediaWiki userid given by MediaWiki core when an account was opened. OpenID creates its own table, and does not modify anything else. Removing OpenID is a matter of 1) deleting the table user_openid and 2) removing the require_once( "....OpenID" ) and 3) deleting $IP/extensions/OpenID and everything below this. I will add this to the manual.
    You can try it safely and then, if you don't like it, you can disable or remove it without leaving remains in your standard MediaWiki installation.
    If you encounter problems, hopefully you don't, please first study the first-aid information form on top of this talk page.

thanks.

204.16.43.1600:38, 25 October 2011

Shared hosting - no command line [not possible; no solution]

Could the author not make this a lot lot simpler to install? I (and many others) do not have command line /shell access. I'm running on Windows shared hosting, so I need to know simply , how to install everything and get this working. Writing such instructions once would help so many people make use of this extension.! Please offer some helpful pointers!

MissioAdmin08:44, 15 December 2011

Sorry, I have no idea, how this could be done.

Wikinaut19:58, 15 December 2011
 

Wrote a new extension for the specific integration with Google Apps OpenId

It's different from this one in the way it does not give you any choice : you're connected against a google apps domain, and that's it. Worked for us ! see: Extension:GoogleAppsAuthentification

BertrandGorge17:22, 8 August 2011

OpenID login and return links don't use short URL [SOLVED]

How do I get the OpenID login link in my sidebar, and the return link, to be under the short URL http://my.domain/wiki/ rather than http://my.domain/w/index.php? I already have all the rest of my pages under http://my.domain/wiki/ by following the short URL instructions, but the OpenID login link and the return link aren't. This causes a problem because the default TrustRoot is http://my.domain/wiki/, which mis-matches with the return link. I tried changing the TrustRoot to http://my.domain/w/index.php, but that caused more problems because of URL-encoding of the ? that appeared in the return link... this confused the Janrain library.

MediaWiki 1.15.5-1 PHP 5.3.3-1ubuntu9.5 (apache2handler) MySQL 5.1.49-1ubuntu8.1 OpenID (Version 0.8.4dev)

Terminus05:02, 27 July 2011

Never mind, I found that setting the TrustRoot just to http://my.domain/ fixed the problem. Don't know why I didn't think of trying that earlier. It might be wise to add this to the documentation though.

Terminus05:02, 29 July 2011
 

Error in install description (OpenID Extension README) [SOLVED]

The install script mentions that, to create the required tables, you should run php maintenance/update.php, however, at that stage in the process, OpenID isn't included in LocalSettings.php.

afaict, you need to run maintenance/update.php *after* installing OpenID in LocalSettings.php.

HTH,

Dmb19:38, 2 July 2011

Thanks for pointing me to this error in the description. Fixed in r91941 ( http://svn.wikimedia.org/viewvc/mediawiki?view=revision&revision=91941 ).

Wikinaut08:17, 12 July 2011
 

Verification error [AWAITING DETAILS]

I'm getting a bug after downloading a very recent version of the OpenID extension (using the link provided by you). The bug is described here.

Seems to be a curl/ssl issue?

Cheers, --Dmb 23:53, 17 May 2011 (UTC)

Is it an https:// OpenID identity you are trying? Then, in my view, most probably the certificate may be invalid, see Extension:OpenID#Logging_in_using_OpenID. Check on your server whether or not a simple "wget <OpenID-Url>" does work without problems. This also relates to last posting in the google discussion --Wikinaut 00:14, 18 May 2011 (UTC)
I have no idea. I'm clicking on the big friendly Google logo (https://www.google.com/accounts/o8/id ?). --Dmb 09:01, 19 May 2011 (UTC)
Sorry, I think you did something wrong, as this is not the way to log in to your wiki. You need to click onto the Google (or another providers') logo on your Wiki OpenID login page which is Special:OpenIDLogin (on your wiki!).
Check carefully the path which must be added (currently) in LocalSettings.php, see point 5 of the installation. --Wikinaut 14:22, 19 May 2011 (UTC)
Yeah, I tried, I know how to log in. It fails. Hence the error. More details are in that Google groups thread if you read it. I'm not asking you sign up or anything. Cheers, --Dmb 14:38, 19 May 2011 (UTC)

Anyone know how to fix this yet? I'm guessing it's a PHP thing?

Your referata Wiki does not show the version number (0.10-dev) of my OpenID for MediaWiki version 1.16.1 I have sent you. So, you cannot expect it working, especially because you run PHP 5.3.x which requires at least this patch as mentioned on the OpenID article page: "Note: php-openid 2.2.0 requires a patch for PHP > 5.3.x versions to avoid "Call-time pass-by-reference is deprecated" errors.[1]". --Wikinaut 18:05, 20 May 2011 (UTC)
Wikinaut02:53, 30 May 2011
First page
First page
Previous page
Previous page
Last page
Last page