https://bugzilla.wikimedia.org/show_bug.cgi?id=11354


Happy-melon <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




--- Comment #1 from Happy-melon <[email protected]>  2009-01-12 
18:26:23 UTC ---
This is invalid: attempting to reproduce, I do the following:

* Find an unblocked account on en.wiki that is not a global account
* Register that username on test.wiki
* Go to [[test:Special:MergeAccount]] and enter my password
* An error message comes up, and I cannot proceed. 

CentralAuth first checks that the password is correct for the wiki you're
merging from (test.wiki in this case), but it then checks that the password is
the same as on your home wiki (en.wiki in this case).  Since they don't match,
and you can't alter them so they ''do'' match (or you wouldn't be going through
this rigmarole!) you can't proceed.  The bug is invalid as written.

What **might** be possible is A) repeatedly changing the password on the
test.wiki account and attempting the merge process again. Do we throttle
password changes?  Alternatively, you could create an account and then develop
it so that it *becomes* the home wiki. However, I doubt this is practical:
certainly for accounts with extra rights you would need an account at least as
well-flagged, if there's a ne'er-do-well in control of such on *any* wikimedia
wiki we have a problem, never mind the faint possibility of brute-forcing a
password.  

The simple solution, of course, is to complete the SUL merge process so that
there **aren't** any accounts with missing SUL partners.  New accounts are
automatically registered on all CentralAuth wikis, so this is only a potential
issue with the old unmerged accounts.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to