Topic on Project:Support desk

Unable to auto login after SSO authentication

23
Rallison11 (talkcontribs)

I am trying to get my wiki to allow auto logins after being authenticated by SSO (siteminder). I am trying to use the extension Auth_remoteuser, and has added wfLoadExtension( 'Auth_remoteuser' ); to the LocalSettings.php file. But each time I access the wiki site, it shows that I am not logged in. Can anyone help with a correct set up to allow auto logins?

The configuration consists of the following:

Apache 2.4

mediawiki 1.32.2

PHP 7.1

MySQL 5.7

Running on servers with Solaris 11.3  


MarkAHershberger (talkcontribs)

How have you configured Auth_remoteuser?

Rallison11 (talkcontribs)

I have added the following to LocalSettings.php. but it's not working to auto login to the wiki site


wfLoadExtension( 'Auth_remoteuser' );

$wgAuthRemoteuserUserName = getenv( 'REMOTE_USER' );

Rallison11 (talkcontribs)

I would like to follow up to see if anyone can help point me in the right direction to get auto login to work after authenticating via SSO. Thanks in advance!

MarkAHershberger (talkcontribs)

Have you enabled the debug log and looked at it for problems?

Rallison11 (talkcontribs)

Mark, Yes, I had enabled the following debug log in LocalSettings.php

$wgDebugLogFile = "/var/apache2/2.4/logs/mw_debug.log";


I am not really sure what to look for in the debug output. I have pasted the output (some sensitive info replaced with xxx, company or domain) from when I logged in via SSO. I always get to my wiki page, but I am not logged into the wiki.


Could you review the out and see if you can determine if there are any errors in the output that could be preventing the auto login to work?


Once other thing, is this mediawiki site is being rebuilt on newer Solaris server hardware from a previous site running older versions of mediawiki and mysql. Could there be an issue with the user names existing in the wikidb imported from the previous wiki site?


IP: 10.xx.xxx.xxx

Start request GET /wiki/Main_Page

HTTP HEADERS:

HOST: osswiki.company.com

CONNECTION: keep-alive

CACHE-CONTROL: max-age=0

UPGRADE-INSECURE-REQUESTS: 1

USER-AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36

SEC-FETCH-USER: ?1

ACCEPT: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3

SEC-FETCH-SITE: cross-site

SEC-FETCH-MODE: navigate

REFERER: https://logindev.ebiz.company.com/onesso/login.jsp?TYPE=33554433&REALMOID=06-527c6c29-addf-1070-9023-85114dc6fd5f&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=$SM$YAGo%2bTm3X%2bxRSAx4LRFCBnyXNBzu%2b9oyRxqxU0vhKyCtCikXn9KzPpZbbJqMoDpg&TARGET=$SM$HTTPS%3a%2f%2fosswiki%2etdc%2edomain%2ecom%2fwiki%2fMain_Page

ACCEPT-ENCODING: gzip, deflate, br

ACCEPT-LANGUAGE: en-US,en;q=0.9

COOKIE: SMSESSION=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

SM_TRANSACTIONID: 0000000000000000000000000a901826-078d-5de6e3ab-0001-316064a7

SM_SDOMAIN: .domain.com

SM_REALM: Root

SM_REALMOID: 06-527c6c29-addf-1070-9023-85114dc6fd5f

SM_AUTHTYPE: Form

SM_AUTHREASON: 0

SM_UNIVERSALID: 5896176581

SM_AUTHDIROID: 0e-d407abee-b2e6-105c-b646-85114dc60000

SM_AUTHDIRNAME: Prod AD

SM_AUTHDIRSERVER: QTWINLB.company.com:636,QTWINLB.company.com:636,QTWINLB.company.com:636,QTWINLB.company.com:636

SM_AUTHDIRNAMESPACE: LDAP:

SM_USER: allisra

SM_USERDN: CN=allisra,OU=SO,OU=Dev,OU=Accts,DC=qtwin,DC=qad,DC=domain,DC=com

SM_SERVERSESSIONID: XqDZ1LrSt/fmoFXpxnzH+SZIqjg=

SM_SERVERSESSIONSPEC: /mPxQ8vJMBcLjuFkP9Xt9VveCwgpOi9vyE6/mPjnuEZC+bnFHZZLh+NlL44nsLCSnJmJIcZaloO8mcoF0+5YRfs0JAFXIg3PUfnw+ob2qfnQlQyGymR9LfQnWnNZOoyjmnFGccXPRijZ9ddHEVGepxqFiHTAHHXqb94UiFHANY1/JwoyZI9X5gga9zY46NGJgW5cpCetfaPE8RHZcY7h1JqHFYzcWmZ3882Lme92wS1WJYUEBKHC3H0tzrTwG8lGY/UncEyfvZRmH6WAGvmtkGQwiS+8bUzKYfuU6FtwfaJSj1oUMytYA3i33aQwpDh5zP3eZ12Zza/FE6BrI63EyQAJdAhUjNT0NnUqJeIqXD/glXmGZ57PjR5y8smc7VHDRLNzoEqA7zor29jrw+bYkWSvQESl1eI/ffgrXZ1OkRu8TrVoJN1/kOvAoq8MCa1F3zjBKmak+r8KMAMagUtH1rizoaSlzg+t

SM_TIMETOEXPIRE: 35991

SM_SERVERIDENTITYSPEC:

EID: 5896176581

EMAIL: rance.lastname@company.com

FIRSTNAME: Rance

LASTNAME: Lastname

OFFICEPHONENUMBER: 678-xxx-xxxx

REMOTE_USER: allisra

VZID: V170450

[caches] cluster: EmptyBagOStuff, WAN: mediawiki-main-default, stash: db-replicated, message: SqlBagOStuff, session: SqlBagOStuff

[caches] LocalisationCache: using store LCStoreDB

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openConnection: calling initLB() before first connection.

[DBReplication] Cannot use ChronologyProtector with EmptyBagOStuff.

[DBReplication] Wikimedia\Rdbms\LBFactory::getChronologyProtector: using request info {

  "IPAddress": "10.xx.xxx.xxx",
  "UserAgent": "Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/78.0.3904.97 Safari\/537.36",
  "ChronologyProtection": false,
  "ChronologyPositionIndex": 0,
  "ChronologyClientId": null

}

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[SQLBagOStuff] Connection 6870 will be used for SqlBagOStuff

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[session] SessionBackend "5t3l8ojqoc00hbjic5qka2rr78984rf9" is unsaved, marking dirty in constructor

[session] SessionBackend "5t3l8ojqoc00hbjic5qka2rr78984rf9" save: dataDirty=1 metaDirty=1 forcePersist=0

[cookie] already deleted setcookie: "wikidb_vzwiki__session", "", "1543876653", "/", "", "1", "1"

[cookie] already deleted setcookie: "wikidb_vzwiki_UserID", "", "1543876653", "/", "", "1", "1"

[cookie] already deleted setcookie: "wikidb_vzwiki_Token", "", "1543876653", "/", "", "1", "1"

[cookie] already deleted setcookie: "forceHTTPS", "", "1543876653", "/", "", "", "1"

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

Title::getRestrictionTypes: applicable restrictions to Main Page are {edit,move}

[ContentHandler] Created handler for wikitext: WikitextContentHandler

OutputPage::checkLastModified: client did not send If-Modified-Since header

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2038-01-19 03:14:07

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[MessageCache] MessageCache::load: Loading en... local cache is empty, global cache is expired, loading from database

Unstubbing $wgParser on call of $wgParser::firstCallInit from MessageCache->transform

Parser: using preprocessor: Preprocessor_DOM

Unstubbing $wgLang on call of $wgLang::_unstub from ParserOptions->__construct

[caches] parser: SqlBagOStuff

Article::view using parser cache: yes

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-02 19:00:38

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

Article::view: doing uncached parse

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-02 19:00:38

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[Preprocessor] Cached preprocessor output (key: wikidb-vzwiki_:preprocess-xml:d63d12039fb041e3530d2ccbf28fb636:0)

SiteStats::loadAndLazyInit: reading site_stats from replica DB

[Preprocessor] Cached preprocessor output (key: wikidb-vzwiki_:preprocess-xml:087fe8b59415ccad0899929d13cb0c94:1)

[Mime] MimeAnalyzer::loadFiles: loading mime types from /var/apache2/2.4/htdocs/mediawiki-1.32.2/includes/libs/mime/mime.types

[Mime] MimeAnalyzer::loadFiles: loading mime info from /var/apache2/2.4/htdocs/mediawiki-1.32.2/includes/libs/mime/mime.info

File::transform: Doing stat for mwstore://local-backend/local-thumb/1/19/Vzwlogo2015-0903.png/163px-Vzwlogo2015-0903.png

[FileOperation] FileBackendStore::getFileStat: File mwstore://local-backend/local-thumb/1/19/Vzwlogo2015-0903.png/163px-Vzwlogo2015-0903.png does not exist

TransformationalImageHandler::doTransform: creating 163x37 thumbnail at /var/tmp//transform_748abc5167c7.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/1/19/Vzwlogo2015-0903.png/163px-Vzwlogo2015-0903.png

TransformationalImageHandler::doTransform: creating 163x37 thumbnail at /var/tmp//transform_bee56ddf7c59.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/1/19/Vzwlogo2015-0903.png/163px-Vzwlogo2015-0903.png

TransformationalImageHandler::doTransform: creating 163x37 thumbnail at /var/tmp//transform_84a1e9aafedd.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/b/b2/Documentation_icon.png/80px-Documentation_icon.png

[FileOperation] FileBackendStore::getFileStat: File mwstore://local-backend/local-thumb/b/b2/Documentation_icon.png/80px-Documentation_icon.png does not exist

TransformationalImageHandler::doTransform: creating 80x80 thumbnail at /var/tmp//transform_41b37130bf05.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/b/b2/Documentation_icon.png/80px-Documentation_icon.png

TransformationalImageHandler::doTransform: creating 80x80 thumbnail at /var/tmp//transform_116d8de68b70.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/b/b2/Documentation_icon.png/80px-Documentation_icon.png

TransformationalImageHandler::doTransform: creating 80x80 thumbnail at /var/tmp//transform_a2f5702a8ca8.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/3/31/320px-RedHat_svg.png/320px-320px-RedHat_svg.png

[FileOperation] FileBackendStore::getFileStat: File mwstore://local-backend/local-thumb/3/31/320px-RedHat_svg.png/320px-320px-RedHat_svg.png does not exist

TransformationalImageHandler::doTransform: creating 320x103 thumbnail at /var/tmp//transform_da051bce1f08.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/3/31/320px-RedHat_svg.png/320px-320px-RedHat_svg.png

TransformationalImageHandler::doTransform: creating 320x103 thumbnail at /var/tmp//transform_7758e3ff33c2.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/3/31/320px-RedHat_svg.png/320px-320px-RedHat_svg.png

TransformationalImageHandler::doTransform: creating 320x103 thumbnail at /var/tmp//transform_d1e7d1e50127.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/e/e7/320px-Centos-logo-light_svg.png/320px-320px-Centos-logo-light_svg.png

[FileOperation] FileBackendStore::getFileStat: File mwstore://local-backend/local-thumb/e/e7/320px-Centos-logo-light_svg.png/320px-320px-Centos-logo-light_svg.png does not exist

TransformationalImageHandler::doTransform: creating 320x108 thumbnail at /var/tmp//transform_92ec2a3fff71.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/e/e7/320px-Centos-logo-light_svg.png/320px-320px-Centos-logo-light_svg.png

TransformationalImageHandler::doTransform: creating 320x108 thumbnail at /var/tmp//transform_b768911755a9.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/e/e7/320px-Centos-logo-light_svg.png/320px-320px-Centos-logo-light_svg.png

TransformationalImageHandler::doTransform: creating 320x108 thumbnail at /var/tmp//transform_0b68fce1d385.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/e/ee/Aktualne_logo_Oracle_Solaris_OS_OSos.png/252px-Aktualne_logo_Oracle_Solaris_OS_OSos.png

[FileOperation] FileBackendStore::getFileStat: File mwstore://local-backend/local-thumb/e/ee/Aktualne_logo_Oracle_Solaris_OS_OSos.png/252px-Aktualne_logo_Oracle_Solaris_OS_OSos.png does not exist

TransformationalImageHandler::doTransform: creating 252x122 thumbnail at /var/tmp//transform_4444b2a9a4ce.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/e/ee/Aktualne_logo_Oracle_Solaris_OS_OSos.png/252px-Aktualne_logo_Oracle_Solaris_OS_OSos.png

TransformationalImageHandler::doTransform: creating 252x122 thumbnail at /var/tmp//transform_737f81b7cb95.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

File::transform: Doing stat for mwstore://local-backend/local-thumb/e/ee/Aktualne_logo_Oracle_Solaris_OS_OSos.png/252px-Aktualne_logo_Oracle_Solaris_OS_OSos.png

TransformationalImageHandler::doTransform: creating 252x122 thumbnail at /var/tmp//transform_ecdf6c6a9f4e.png using scaler client

TransformationalImageHandler::doTransform: returning unscaled image

[Preprocessor] Cached preprocessor output (key: wikidb-vzwiki_:preprocess-xml:d63d12039fb041e3530d2ccbf28fb636:0)

Saved in parser cache with key wikidb-vzwiki_:pcache:idhash:1-0!canonical and timestamp 20191203223734 and revision id 79909

MediaWiki::preOutputCommit: primary transaction round committed

MediaWiki::preOutputCommit: pre-send deferred updates completed

MediaWiki::preOutputCommit: LBFactory shutdown completed

Title::getRestrictionTypes: applicable restrictions to Main Page are {edit,move}

OutputPage::sendCacheControl: private caching; Tue, 03 Dec 2019 22:33:21 GMT **

[SQLBagOStuff] Duplicate get(): "wikidb-vzwiki_:pcache:idoptions:1" fetched 2 times

Request ended normally

[session] Saving all sessions on shutdown

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[caches] cluster: EmptyBagOStuff, WAN: mediawiki-main-default, stash: db-replicated, message: SqlBagOStuff, session: SqlBagOStuff

[caches] LocalisationCache: using store LCStoreDB

[DBReplication] Cannot use ChronologyProtector with EmptyBagOStuff.

[DBReplication] Wikimedia\Rdbms\LBFactory::getChronologyProtector: using request info {

  "IPAddress": "10.xxx.xxx.xxx",
  "UserAgent": "Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/78.0.3904.97 Safari\/537.36",
  "ChronologyProtection": false,
  "ChronologyPositionIndex": 0,
  "ChronologyClientId": null

}

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openConnection: calling initLB() before first connection.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[SQLBagOStuff] Connection 6873 will be used for SqlBagOStuff

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[caches] cluster: EmptyBagOStuff, WAN: mediawiki-main-default, stash: db-replicated, message: SqlBagOStuff, session: SqlBagOStuff

[caches] LocalisationCache: using store LCStoreDB

[DBReplication] Cannot use ChronologyProtector with EmptyBagOStuff.

[DBReplication] Wikimedia\Rdbms\LBFactory::getChronologyProtector: using request info {

  "IPAddress": "10.xx.xxx.xxx",
  "UserAgent": "Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/78.0.3904.97 Safari\/537.36",
  "ChronologyProtection": false,
  "ChronologyPositionIndex": 0,
  "ChronologyClientId": null

}

[caches] cluster: EmptyBagOStuff, WAN: mediawiki-main-default, stash: db-replicated, message: SqlBagOStuff, session: SqlBagOStuff

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openConnection: calling initLB() before first connection.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[caches] LocalisationCache: using store LCStoreDB

[DBReplication] Cannot use ChronologyProtector with EmptyBagOStuff.

[DBReplication] Wikimedia\Rdbms\LBFactory::getChronologyProtector: using request info {

  "IPAddress": "10.xx.xxx.xxx",
  "UserAgent": "Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/78.0.3904.97 Safari\/537.36",
  "ChronologyProtection": false,
  "ChronologyPositionIndex": 0,
  "ChronologyClientId": null

}

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[SQLBagOStuff] Connection 6875 will be used for SqlBagOStuff

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2038-01-19 03:14:07

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openConnection: calling initLB() before first connection.

[MessageCache] MessageCache::load: Loading en... local cache is empty, global cache is expired/volatile, loading from database

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[ContentHandler] Created handler for css: CssContentHandler

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[SQLBagOStuff] Connection 6877 will be used for SqlBagOStuff

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:54

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 17:50:57

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[caches] cluster: EmptyBagOStuff, WAN: mediawiki-main-default, stash: db-replicated, message: SqlBagOStuff, session: SqlBagOStuff

[caches] LocalisationCache: using store LCStoreDB

[DBReplication] Cannot use ChronologyProtector with EmptyBagOStuff.

[DBReplication] Wikimedia\Rdbms\LBFactory::getChronologyProtector: using request info {

  "IPAddress": "10.xx.xxx.xxx",
  "UserAgent": "Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/78.0.3904.97 Safari\/537.36",
  "ChronologyProtection": false,
  "ChronologyPositionIndex": 0,

    "ChronologyClientId": null

}

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openConnection: calling initLB() before first connection.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[SQLBagOStuff] Connection 6879 will be used for SqlBagOStuff

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2038-01-19 03:14:07

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[MessageCache] MessageCache::load: Loading en... local cache is empty, global cache is expired/volatile, loading from database

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 15:04:58

[SQLBagOStuff] SqlBagOStuff debug: get: key has expired

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

IP: 10.xx.xxx.xxx

Start request GET /favicon.ico

HTTP HEADERS:

HOST: osswiki.company.com

CONNECTION: keep-alive

USER-AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36

ACCEPT: image/webp,image/apng,image/*,*/*;q=0.8

SEC-FETCH-SITE: same-origin

SEC-FETCH-MODE: no-cors

REFERER: https://osswiki.company.com/wiki/Main_Page

ACCEPT-ENCODING: gzip, deflate, br

ACCEPT-LANGUAGE: en-US,en;q=0.9

COOKIE: SMSESSION=D4C3GEVV9IHcEv09NyNQK20dJWl2Yadc4NboQMqDfHQDTiLlaAOezpANfgp1nhcBL0IFcg5OgyRFZnKdeG8TJjEC2lZ0+FcNVMLxftIobGNbutVA+h4o8Y+AZYW8Uj00t5ldDQs682ZxicLEvCYMhIPctvnvZYxDPEH4CKWLXRGAtjynNbQAhDjCNC2Jd9C5ZqF7RSbgEJY3HT9MVXy3vyryPCAciPx6Bk1x65sUWLVJcoWMx5g3Q4bEKa/oVwdTyBKRHTK9kNUoeP9xNEvr/+IOKVZ0ySXM7SCDLEEhOQwEFq6tO4jxqgKpkqPu8xwO8p6FbKthCyp43zoUTfRG+ITZvAyy5wyL+MDgijI3d5zuBPZZeY41Kic+y3RXNyZtLbWAyQVzLCe62B1ikB5MZEx5x6vPl1s7iHDOVHTsVg4vXCgiTGiaM+GAFxyG4jN/dU0hNu5DPHBaZZwOS8PDt8T3b+IpjCxkgVfmXv5kk7YvsUrtRwh7qf176y8BTTxBwqV5AIiR0jvg7wPmqWcFv/aYw5feaDwLNYEEFgxlikMm690O6Ns2iFOMsdKR3bYm1oGlZ4Rl4NkDDcclvraIq9GRcz2UpkvG98ohLTGtJfkOvRE3rxwf9KPzBkuTxrkAxB5NblzJkUySobEt5F7c8ou3wGgRh82fvdpJrbNy438DnWMB8V+BdxVkyxz56Jubpvf/qMvRgQXpL5PCR/UorS5p6tRuRTqUqJJR62CZZNkYE9IJWWo0GDF+U7u5ZSmSiREsfqnFf4DnRNtVWn/8BsDln84VQEwpmO8bCQmMD58UzHY4GBgiziPC5LR16CjsWYjE5goLwkYlj1KwxF5GifwVQfWGx3j2H0iVAqHqW8Ts883cWI+v6XqY4VclFzt6KpcMvYF7lrfAkMC3qh8RDuDkfdvYUO4VWvy4afXk5UDPWEC+bdZ4SS/OCfju4ma0r/UR0kwNmkIIqF3Jw5GhBDqwzyVtMKO8qOcObrReQIHDEhx4YWl8/VZmrvwPn4EWz2pj6O8K9HhRecfznAuEIDXBeE4MuSXPx2Ud1VoJA2Fq6LNnKo3KGIVn6EvtXQlTnzH4/0shClRXr3w5X/2+JRq0/ctJMgqvB0LmfV/32/y7Cb7g+y1ux24BAoY36P9yFXbZcpcwVnyGeMrnxNJ+s/LiWBluNKRm

SM_TRANSACTIONID: 0000000000000000000000000a901826-078e-5de6e3b8-0001-02773545

SM_SDOMAIN: .domain.com

SM_REALM: Root

SM_REALMOID: 06-527c6c29-addf-1070-9023-85114dc6fd5f

SM_AUTHTYPE: Form

SM_AUTHREASON: 0

SM_UNIVERSALID: 5896176581

SM_AUTHDIROID: 0e-d407abee-b2e6-105c-b646-85114dc60000

SM_AUTHDIRNAME: Prod AD

SM_AUTHDIRSERVER: QTWINLB.company.com:636,QTWINLB.company.com:636,QTWINLB.company.com:636,QTWINLB.company.com:636

SM_AUTHDIRNAMESPACE: LDAP:

SM_USER: allisra

SM_USERDN: CN=allisra,OU=SO,OU=Dev,OU=Accts,DC=qtwin,DC=qad,DC=domain,DC=com

SM_SERVERSESSIONID: XqDZ1LrSt/fmoFXpxnzH+SZIqjg=

SM_SERVERSESSIONSPEC: /mPxQ8vJMBcLjuFkP9Xt9VveCwgpOi9vyE6/mPjnuEZC+bnFHZZLh+NlL44nsLCSnJmJIcZaloO8mcoF0+5YRfs0JAFXIg3PUfnw+ob2qfnQlQyGymR9LfQnWnNZOoyjmnFGccXPRijZ9ddHEVGepxqFiHTAHHXqb94UiFHANY1/JwoyZI9X5gga9zY46NGJgW5cpCetfaPE8RHZcY7h1JqHFYzcWmZ3882Lme92wS1WJYUEBKHC3H0tzrTwG8lGY/UncEyfvZRmH6WAGvmtkGQwiS+8bUzKYfuU6FtwfaJSj1oUMytYA3i33aQwpDh5zP3eZ12Zza/FE6BrI63EyQAJdAhUjNT0NnUqJeIqXD/glXmGZ57PjR5y8smc7VHDRLNzoEqA7zor29jrw+bYkWSvQESl1eI/ffgrXZ1OkRu8TrVoJN1/kOvAoq8MCa1F3zjBKmak+r8KMAMagUtH1rizoaSlzg+t

SM_TIMETOEXPIRE: 35978

SM_SERVERIDENTITYSPEC:

EID: 5896176581

EMAIL: rance.lastname@company.com

FIRSTNAME: Rance

LASTNAME: Lastname

OFFICEPHONENUMBER: 678-xxx-xxxx

REMOTE_USER: allisra

VZID: V170450

[caches] cluster: EmptyBagOStuff, WAN: mediawiki-main-default, stash: db-replicated, message: SqlBagOStuff, session: SqlBagOStuff

[caches] LocalisationCache: using store LCStoreDB

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openConnection: calling initLB() before first connection.

[DBReplication] Cannot use ChronologyProtector with EmptyBagOStuff.

[DBReplication] Wikimedia\Rdbms\LBFactory::getChronologyProtector: using request info {

  "IPAddress": "10.xx.xxx.xxx",
  "UserAgent": "Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/78.0.3904.97 Safari\/537.36",
  "ChronologyProtection": false,
  "ChronologyPositionIndex": 0,
   "ChronologyClientId": null

}

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[SQLBagOStuff] Connection 6880 will be used for SqlBagOStuff

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[session] SessionBackend "i8u8h87fsb59ilg7kck9t5n69pgk5m52" is unsaved, marking dirty in constructor

[session] SessionBackend "i8u8h87fsb59ilg7kck9t5n69pgk5m52" save: dataDirty=1 metaDirty=1 forcePersist=0

[cookie] already deleted setcookie: "wikidb_vzwiki__session", "", "1543876664", "/", "", "1", "1"

[cookie] already deleted setcookie: "wikidb_vzwiki_UserID", "", "1543876664", "/", "", "1", "1"

[cookie] already deleted setcookie: "wikidb_vzwiki_Token", "", "1543876664", "/", "", "1", "1"

[cookie] already deleted setcookie: "forceHTTPS", "", "1543876664", "/", "", "", "1"

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2038-01-19 03:14:07

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[MessageCache] MessageCache::load: Loading en... local cache is empty, global cache is expired/volatile, loading from database

Title::getRestrictionTypes: applicable restrictions to Main Page are {edit,move}

[ContentHandler] Created handler for wikitext: WikitextContentHandler

MediaWiki::preOutputCommit: primary transaction round committed

MediaWiki::preOutputCommit: pre-send deferred updates completed

MediaWiki::preOutputCommit: LBFactory shutdown completed

OutputPage::sendCacheControl: private caching; Tue, 03 Dec 2019 22:37:44 GMT **

Request ended normally

[session] Saving all sessions on shutdown

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

IP: 10.xx.xxx.xxx

Start request GET /wiki/Main_Page

HTTP HEADERS:

HOST: osswiki.company.com

CONNECTION: keep-alive

USER-AGENT: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.97 Safari/537.36

ACCEPT: image/webp,image/apng,image/*,*/*;q=0.8

SEC-FETCH-SITE: same-origin

SEC-FETCH-MODE: no-cors

REFERER: https://osswiki.company.com/wiki/Main_Page

ACCEPT-ENCODING: gzip, deflate, br

ACCEPT-LANGUAGE: en-US,en;q=0.9

COOKIE: SMSESSION=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

SM_TRANSACTIONID: 0000000000000000000000000a901826-078e-5de6e3b8-0001-04fa4f61

SM_SDOMAIN: .domain.com

SM_REALM: Root

SM_REALMOID: 06-527c6c29-addf-1070-9023-85114dc6fd5f

SM_AUTHTYPE: Form

SM_AUTHREASON: 0

SM_UNIVERSALID: 5896176581

SM_AUTHDIROID: 0e-d407abee-b2e6-105c-b646-85114dc60000

SM_AUTHDIRNAME: Prod AD

SM_AUTHDIRSERVER: QTWINLB.company.com:636,QTWINLB.company.com:636,QTWINLB.company.com:636,QTWINLB.company.com:636

SM_AUTHDIRNAMESPACE: LDAP:

SM_USER: allisra

SM_USERDN: CN=allisra,OU=SO,OU=Dev,OU=Accts,DC=qtwin,DC=qad,DC=domain,DC=com

SM_SERVERSESSIONID: XqDZ1LrSt/fmoFXpxnzH+SZIqjg=

SM_SERVERSESSIONSPEC: /mPxQ8vJMBcLjuFkP9Xt9VveCwgpOi9vyE6/mPjnuEZC+bnFHZZLh+NlL44nsLCSnJmJIcZaloO8mcoF0+5YRfs0JAFXIg3PUfnw+ob2qfnQlQyGymR9LfQnWnNZOoyjmnFGccXPRijZ9ddHEVGepxqFiHTAHHXqb94UiFHANY1/JwoyZI9X5gga9zY46NGJgW5cpCetfaPE8RHZcY7h1JqHFYzcWmZ3882Lme92wS1WJYUEBKHC3H0tzrTwG8lGY/UncEyfvZRmH6WAGvmtkGQwiS+8bUzKYfuU6FtwfaJSj1oUMytYA3i33aQwpDh5zP3eZ12Zza/FE6BrI63EyQAJdAhUjNT0NnUqJeIqXD/glXmGZ57PjR5y8smc7VHDRLNzoEqA7zor29jrw+bYkWSvQESl1eI/ffgrXZ1OkRu8TrVoJN1/kOvAoq8MCa1F3zjBKmak+r8KMAMagUtH1rizoaSlzg+t

SM_TIMETOEXPIRE: 35978

SM_SERVERIDENTITYSPEC:

EID: 5896176581

EMAIL: rance.lastname@company.com

FIRSTNAME: Rance

LASTNAME: Lastname

OFFICEPHONENUMBER: 678-xxx-xxxx

REMOTE_USER: allisra

VZID: V170450

[caches] cluster: EmptyBagOStuff, WAN: mediawiki-main-default, stash: db-replicated, message: SqlBagOStuff, session: SqlBagOStuff

[caches] LocalisationCache: using store LCStoreDB

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openConnection: calling initLB() before first connection.

[DBReplication] Cannot use ChronologyProtector with EmptyBagOStuff.

[DBReplication] Wikimedia\Rdbms\LBFactory::getChronologyProtector: using request info {

  "IPAddress": "10.xx.xxx.xxx",
  "UserAgent": "Mozilla\/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\/537.36 (KHTML, like Gecko) Chrome\/78.0.3904.97 Safari\/537.36",
  "ChronologyProtection": false,
  "ChronologyPositionIndex": 0,
  "ChronologyClientId": null

}

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

[SQLBagOStuff] Connection 6882 will be used for SqlBagOStuff

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[session] SessionBackend "k0rglovea38evq8ogj33j20juef4a3tf" is unsaved, marking dirty in constructor

[session] SessionBackend "k0rglovea38evq8ogj33j20juef4a3tf" save: dataDirty=1 metaDirty=1 forcePersist=0

[cookie] already deleted setcookie: "wikidb_vzwiki__session", "", "1543876664", "/", "", "1", "1"

[cookie] already deleted setcookie: "wikidb_vzwiki_UserID", "", "1543876664", "/", "", "1", "1"

[cookie] already deleted setcookie: "wikidb_vzwiki_Token", "", "1543876664", "/", "", "1", "1"

[cookie] already deleted setcookie: "forceHTTPS", "", "1543876664", "/", "", "", "1"

[DBConnection] Wikimedia\Rdbms\LoadBalancer::openLocalConnection: connected to database 0 at 'localhost'.

Title::getRestrictionTypes: applicable restrictions to Main Page are {edit,move}

[ContentHandler] Created handler for wikitext: WikitextContentHandler

OutputPage::checkLastModified: client did not send If-Modified-Since header

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2038-01-19 03:14:07

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[SQLBagOStuff] SqlBagOStuff debug: get: no matching rows

[MessageCache] MessageCache::load: Loading en... local cache is empty, global cache is expired/volatile, loading from database

Unstubbing $wgParser on call of $wgParser::firstCallInit from MessageCache->transform

Parser: using preprocessor: Preprocessor_DOM

Unstubbing $wgLang on call of $wgLang::_unstub from ParserOptions->__construct

[caches] parser: SqlBagOStuff

Article::view using parser cache: yes

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 23:37:35

Parser cache options found.

[SQLBagOStuff] SqlBagOStuff debug: get: retrieved data; expiry time is 2019-12-03 23:37:35

ParserOutput cache found.

Article::view: showing parser cache contents

MediaWiki::preOutputCommit: primary transaction round committed

MediaWiki::preOutputCommit: pre-send deferred updates completed

MediaWiki::preOutputCommit: LBFactory shutdown completed

Title::getRestrictionTypes: applicable restrictions to Main Page are {edit,move}

OutputPage::sendCacheControl: private caching; Tue, 03 Dec 2019 22:33:21 GMT **

Request ended normally

[session] Saving all sessions on shutdown

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

[DBConnection] Wikimedia\Rdbms\LoadBalancer::closeAll: closing connection to database 'localhost'.

Rallison11 (talkcontribs)

Hello, Can anyone help me out with this? Thanks in advance!

Ciencia Al Poder (talkcontribs)

Maybe the problem is on this line:

$wgAuthRemoteuserUserName = getenv( 'REMOTE_USER' );

You may try to change it to:

$wgAuthRemoteuserUserName = $_SERVER['HTTP_REMOTE_USER'];

Since getenv is used to get enviroment variables, but REMOTE_USER is an HTTP header value.

Rallison11 (talkcontribs)

I made the change to reflect $wgAuthRemoteuserUserName = $_SERVER['HTTP_REMOTE_USER'];


But it still do not auto log into the wiki site after logging in via SSO.

I get this message in the browser "Notice: Undefined index: HTTP_REMOTE_USER in /var/apache2/2.4/htdocs/mediawiki-1.32.2/LocalSettings.php on line 478"

Ciencia Al Poder (talkcontribs)

Apparently, by looking at the debug log, php receives an HTTP header "REMOTE_USER", it should work...

You can set up a php file with a call to phpinfo() as described here: https://www.php.net/manual/function.phpinfo.php

Visit that file from the browser and CTRL+F to find your username there, it should appear in one of the $_SERVER variables. If you find it, use that in place of the $_SERVER['HTTP_REMOTE_USER']; I recommended above.

Rallison11 (talkcontribs)

I set up the phpinfo file and checked for the info in the browser.  I do not see my user id in any of the $_SERVER variables. I have pasted all $_SERVER variables from the output below.


$_SERVER['UNIQUE_ID']              Xft3U8uKBzZpZrox5NT5fQAAAAM

$_SERVER['SCRIPT_URL']              /phpinfo.php

$_SERVER['SCRIPT_URI']              https://servername.company.com/phpinfo.php

$_SERVER['HTTPS']          on

$_SERVER['SSL_TLS_SNI']             servername.company.com

$_SERVER['HTTP_HOST']              servername.company.com

$_SERVER['HTTP_CONNECTION']             keep-alive

$_SERVER['HTTP_UPGRADE_INSECURE_REQUESTS']      1

$_SERVER['HTTP_USER_AGENT']              Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36

$_SERVER['HTTP_SEC_FETCH_USER']     ?1

$_SERVER['HTTP_ACCEPT']                text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9

$_SERVER['HTTP_SEC_FETCH_SITE']        none

$_SERVER['HTTP_SEC_FETCH_MODE']   navigate

$_SERVER['HTTP_ACCEPT_ENCODING'] gzip, deflate, br

$_SERVER['HTTP_ACCEPT_LANGUAGE']               en-US,en;q=0.9

$_SERVER['HTTP_COOKIE']          s_fid=686AE64C1FDA8DF8-1CEE5A7BB48617F0; s_cc=true; __MyInfoAntiXsrfToken=0783350d44f8413eb6dab6dad2fb85e8; s_sq=%5B%5BB%5D%5D; SMCHALLENGE=NTC_CHALLENGE_DONE; s_pers=%20s_lv%3D1574734646900%7C1669342646900%3B%20s_lv_s%3DFirst%2520Visit%7C1574736446900%3B; ; SMSESSION=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

$_SERVER['HTTP_EID']   5896176581

$_SERVER['HTTP_EMAIL']            firs.last@company.com

$_SERVER['HTTP_FIRSTNAME'] First name

$_SERVER['HTTP_LASTNAME']   Last name

$_SERVER['HTTP_OFFICEPHONENUMBER']          xxx.xxx.xxxx

$_SERVER['HTTP_VZID']                V170450

$_SERVER['PATH']                /apps/opt/siteminder/webagent/bin:/apps/opt/siteminder/webagent/bin:/usr/sbin:/usr/bin:/usr/local/bin:/opt/site

$_SERVER['LD_LIBRARY_PATH']                /usr/sfw/lib:/apps/opt/siteminder/webagent/bin:/apps/opt/siteminder/webagent/bin/thirdparty:/usr/sfw/lib:/apps/opt/siteminder/webagent/bin:/apps/opt/siteminder/webagent/bin/thirdparty:

$_SERVER['SERVER_SIGNATURE']            no value

$_SERVER['SERVER_SOFTWARE']              Apache

$_SERVER['SERVER_NAME']       servername.company.com

$_SERVER['SERVER_ADDR']         xx.xxx.xx.xx

$_SERVER['SERVER_PORT']         443

$_SERVER['REMOTE_ADDR']       xx.xx.xxx.xxx

$_SERVER['DOCUMENT_ROOT']               /var/apache2/2.4/htdocs/

$_SERVER['REQUEST_SCHEME']                https

$_SERVER['CONTEXT_PREFIX']   no value

$_SERVER['CONTEXT_DOCUMENT_ROOT']          /var/apache2/2.4/htdocs/

$_SERVER['SERVER_ADMIN']     groupname@company.com

$_SERVER['SCRIPT_FILENAME'] /var/apache2/2.4/htdocs/phpinfo.php

$_SERVER['REMOTE_PORT']       53561

$_SERVER['GATEWAY_INTERFACE']         CGI/1.1

$_SERVER['SERVER_PROTOCOL']              HTTP/1.1

$_SERVER['REQUEST_METHOD']               GET

$_SERVER['QUERY_STRING']      no value

$_SERVER['REQUEST_URI']          /phpinfo.php

$_SERVER['SCRIPT_NAME']         /phpinfo.php

$_SERVER['PHP_SELF']  /phpinfo.php

$_SERVER['REQUEST_TIME_FLOAT']       1576761171.049

$_SERVER['REQUEST_TIME']       1576761171

Ciencia Al Poder (talkcontribs)

Those headers were set on the debug log... I wonder if those headers are **only** set when you are redirected from login... This may be a problem, since I'm pretty sure the extension requires this information to be present on each request.

You may want to look at other variables from phpinfo and see if it appears somewhere else (like on ENV vars or similar).

Rallison11 (talkcontribs)

The $_SERVER variables are under the PHP Variables section in the phpinfo output.  I do see my username, allisra, under the “HTTP Headers Information” section in SM_USER and REMOTE_USER.  Note: Previously the REMOTE_USER value was reflecting the same as VZID, V170450, not allisra.  It was changed by my SSO team before I posted my question to the MediaWiki support forum. I am wondering if that could be casing an issue?   But to confirm I should see my username in one of the $_SERVER variables.  And should that be something passed from the SSO (siteminder) side?


SM_USER            allisra

SM_USERDN      CN=allisra,OU=SO,OU=Dev,OU=Accts,DC=qtwin,DC=qad,DC=company,DC=com

SM_SERVERSESSIONID  ON4UyX85YrmV/m5yIv7rZOvGARQ=

SM_SERVERSESSIONSPEC                IiSnu0aHMJ0+rK7Hs7/YNvolbAzHbUSDWlD9sdH6b4x1u8Pb9VWh/h0Pr/6uQhoSoo1Pl/RYsLSWhMvH1ncrNZWMSYUPpLuaD+BJMgGz8woJcxW6+bKvAjbNq38afdc7n/5ZDyMwbsQnSkF00TRvoKr98DR6brdk1qfYhDWCK2I86Je73eE+Mr4g+532/sMMm1fvmjNiqnrd+WpZrdHTBvlgozM2vy4W7r4dVeQx19QGmU4sX0d3d86m8Uq2LFOyaEc9a362xFxPDKXcwnl6IktN47thF+lf/View6nefZtRDu2+KzmvkPsl9XAT8zZkywCui60EdXvqyjSWb+LdJjqRQmcCb2AGapxWNh7dID3WeRkchmTw+dJpUlkTdKn162wi9yuIFGiPq0tQRAcMZfutF38RRxhJKRgtIWkXPDYKcL8I50+bppCaVd102yNsacr8KtigPwxy4BtWbFtOX6qIZWpZu3vI

SM_TIMETOEXPIRE         35389

SM_SERVERIDENTITYSPEC           no value

EID         5896176581

Email     first.last@company.com

FirstName           First

LastName            Last

OfficePhoneNumber     xxx-xxx-xxxx

REMOTE_USER allisra

VZID      V170450

Ciencia Al Poder (talkcontribs)

You need to set $wgAuthRemoteuserUserName with the variable that holds the username. If it's under the HTTP headers, it should be:

$wgAuthRemoteuserUserName = $_SERVER['HTTP_SM_USER'];
Rallison11 (talkcontribs)

I am sorry. It's still not working to auto log in. When I add the below line to the LocalSettings.php file

$wgAuthRemoteuserUserName =  $_SERVER['HTTP_SM_USER'];


I get the message below when I access my wiki site. Could this be because "HTTP_SM_USER" is not in the phpinfo $_SERVER variables output?

"Notice: Undefined index: HTTP_SM_USER in /var/apache2/2.4/htdocs/mediawiki-1.32.2/LocalSettings.php on line 470"


Or could it be an issue with some variable not being passed from the SSO (siteminder) side?


I appreciate your responses to this issue. I am new to this, and not really sure how to go about troubleshooting it.

Ciencia Al Poder (talkcontribs)

From the debug log you posted I can see SM_USER and REMOTE_USER. I assumed those variables were HTTP header variables that arrived to the server, but apparently I was wrong. I don't know from where the debug log is finding those variables...

In any case, if you find those variables in phpinfo(), use those variables from there. If they aren't present in phpinfo, then there's something very strange here, since phpinfo should see the same variables as MediaWiki.

Rallison11 (talkcontribs)

ok, thanks. Maybe I will go back to my SSO team and see if they can tell me what HTTP headers are being passed from their side. And if they are passing the SM_USER and REMOTE_USER HTTP headers or can pass them? If that's possible. I will post back here on any outcome. I will be out over the next two week for the holiday break, so posting may be limited during that time. I i really would like to get this resolved. Again I do appreciate your responses, and giving me some direction with this.

Rallison11 (talkcontribs)

I checked with our SSO team resource on which HTTP headers are being passed, and he pointed me to the apache smtrace.log. In the smtrace.log I see the HTTP header "'HTTP_SM_USER=allisra'" with my username. I also see the HTTP header HTTP_REMOTE_USER=V170450 in the smtrace.log. Even though I see these headers in the apache smtrace.log they are still not showing up in the phpinfo output. Is there anyway to add entries into the apache httpd.conf or any config file to get these headers to show up in the phpinfo output? Or to retrieve them?


[01/02/2020][19:52:12][8299][1][0000000000000000000000000a901826-206b-5e0e903a-0001-879b4a01][CSmHttpPlugin::ProcessResponses][Setting custom HTTP hieder variable: 'HTTP_SM_USER=allisra'][CSmHttpPlugin.cpp:3413][allisra][][Root][ossds][03-2f6b5464-add5-1070-9023-85114dc6fd5f]


[01/02/2020][19:52:12][8299][1][0000000000000000000000000a901826-206b-5e0e903a-0001-879b4a01][C

SmHttpPlugin::ProcessResponses][Setting custom HTTP header variable: 'HTTP_REMOTE_USER=V170450'][CSmHttpPlugin.cpp:3413][allisra][][Root][ossds][03-2f6b5464-add5-1070-9023-85114dc6fd5f]


Ciencia Al Poder (talkcontribs)

The problem may be that the authenticator plugin you're using on Apache is loaded after PHP engine runs, setting those headers after PHP has already processed the response.

If phpinfo doesn't see them, there's nothing we can do...

Rallison11 (talkcontribs)
Is there a way that I can determine when or what authenticator plugin in Apache is getting loaded?
Ciencia Al Poder (talkcontribs)
Rallison11 (talkcontribs)

Thanks. I will check out the info in the link.

Rallison11 (talkcontribs)

I am now seeing the HTTP headers for SM_USER and REMOTE_USER in the phpinfo output.

$_SERVER['HTTP_REMOTE_USER']           V170450

$_SERVER['HTTP_SM_USER']     allisra


It may have had something to do with Apache 2.4 not recognizing HTTP headers with underscores(not sure). But after our SSO team resource changed SM_USER and REMOTE_USER to SM-USER and REMOTE-USER on the SSO side the HTTP headers showed up in the phpinfo output.


I am now able to get auto logged into our wiki site after logging in via SSO. So far everything appears to be working. I have the following set in LocalSettings.php.

wfLoadExtension( 'Auth_remoteuser' );

$wgAuthRemoteuserUserName =  $_SERVER['HTTP_SM_USER'];


Ciencia Al Poder - Thanks so much for your responses and ,most of all, patience! I really appreciate it, as you pointed me to where to focus to resolve the issue.