In T376267#10293251, @Ladsgroup wrote:

Hi, can you try the 2fa value for your SUL account?

I do not have 2FA enabled in my SUL account AFAIK.

In T376267#10295702, @roti_WMDE wrote:

In T376267#10293251, @Ladsgroup wrote:

Hi, can you try the 2fa value for your SUL account?

I do not have 2FA enabled in my SUL account AFAIK.

Wikitech itself no longer has 2FA installed as it was prior to October 1, 2024. If you are prompted for 2FA it is coming from the SUL side of the Wikimedia accounts world.

In T376267#10297262, @bd808 wrote:

In T376267#10295702, @roti_WMDE wrote:

In T376267#10293251, @Ladsgroup wrote:

Hi, can you try the 2fa value for your SUL account?

I do not have 2FA enabled in my SUL account AFAIK.

Wikitech itself no longer has 2FA installed as it was prior to October 1, 2024. If you are prompted for 2FA it is coming from the SUL side of the Wikimedia accounts world.

@bd808 I do have 2FA enabled on my SUL account (and it works), any idea why it wouldn't for Wikitech?

In T376267#10301557, @Eevans wrote:

In T376267#10297262, @bd808 wrote:

Wikitech itself no longer has 2FA installed as it was prior to October 1, 2024. If you are prompted for 2FA it is coming from the SUL side of the Wikimedia accounts world.

@bd808 I do have 2FA enabled on my SUL account (and it works), any idea why it wouldn't for Wikitech?

I can confirm that there are OATHAuth user {user} failed OTP token/recovery code from {clientip} log events from Wikitech for your Eevans account.

It looks like there is a SUL account name collision for "Eevans":

• https://wikitech.wikimedia.org/wiki/Special:CentralAuth/Eevans
• https://commons.wikimedia.org/w/index.php?title=Special:Log&logid=8404848
• https://wikitech.wikimedia.org/w/index.php?title=Special:Log&logid=63676

Off the top of my head I'm not understanding how that might end up prompting you for 2FA though. The SUL account "Eevans" does not have 2FA enabled. Maybe I am confused about where and how OATH checks happen?

2FA doesn't work. Until today, I've been logging in to Wikitech as cdobbins. I tried logging in as CDobbins-WMF, but it didn't work. Requesting a password reset for that account resulted in no email, but requesting a password reset for cdobbins did. I have 2FA enabled on cdobbins, but not (AFAICT) on CDobbins-WMF.

In T376267#10304857, @CDobbins wrote:

Wikitech account/LDAP:	cdobbins
SUL account	CDobbins-WMF
Account linked on IDM	Y
I have read MediaWiki:Loginprompt	Y
I have tried to reset my password using Special:PasswordReset	Y

2FA doesn't work. Until today, I've been logging in to Wikitech as cdobbins. I tried logging in as CDobbins-WMF, but it didn't work. Requesting a password reset for that account resulted in no email, but requesting a password reset for cdobbins did. I have 2FA enabled on cdobbins, but not (AFAICT) on CDobbins-WMF.

https://meta.wikimedia.org/wiki/Special:CentralAuth/cdobbins

Registered: 21:08, 13 April 2013 (11 years ago)

https://ldap.toolforge.org/user/cdobbins

SUL account: CDobbins-WMF

Did you ever actually log into wikitech, make edits etc?

When I try to log in to wikitech it says: "Auto-creation of a local account failed: You are not allowed to execute the action you have requested." After password reset attempt, behavior is the same with the suggested temp password.

It is very likely that I am an extremely weird corner case!

In T376267#10313466, @Andrew wrote:

Wikitech account/LDAP:	Andrew Bogott
SUL account	Andrewbogott
Account linked on IDM	Yes
I have visited MediaWiki:Loginprompt	Yes
I have tried to reset my password using Special:PasswordReset	Yes

When I try to log in to wikitech it says: "Auto-creation of a local account failed: You are not allowed to execute the action you have requested." After password reset attempt, behavior is the same with the suggested temp password.

It is very likely that I am an extremely weird corner case!

https://meta.wikimedia.org/wiki/Special:CentralAuth/Andrew_Bogott is likely deeply entangled with your issues @Andrew. I think we will either need to rename your legacy Wikitech account away from colliding with that globally blocked account or get the global block lifted.

In T376267#10313488, @bd808 wrote:

https://meta.wikimedia.org/wiki/Special:CentralAuth/Andrew_Bogott is likely deeply entangled with your issues @Andrew. I think we will either need to rename your legacy Wikitech account away from colliding with that globally blocked account or get the global block lifted.

I have no objection to that account being moved. I definitely don't follow how it would be involved in this merge but am also no at all attached to it.

In T376267#10313528, @Andrew wrote:

I have no objection to that account being moved. I definitely don't follow how it would be involved in this merge but am also no at all attached to it.

Mischief managed by 1) renaming the Wikitech account to "Andrewbogott" and 2) @Reedy doing the SUL attachment via a maintenance script.

[17:51]  <    Reedy> CentralAuth account attach for: Andrewbogott
[17:51]  <    Reedy> ATTACHING: Andrewbogott@labswiki
[17:51]  <    Reedy> [2024-11-12 17:51:23] processed: 1 (9.0/sec); ok: 0 (0.0%); attached: 1 (100.0%); partial: 0 (0.0%); failed: 0 (0.0%); missing: 0 (0.0%);
[17:51]  <    Reedy> done.
[17:54]  <andrewbogott> OK! I can now log in to wikitech with the Andrewbogott SUL creds and see thousands of edits in my history.
[17:54]  <    bd808> w00t!
[17:54]  <andrewbogott> So I think we're done?
[17:55]  <    bd808> yup
[17:55]  <andrewbogott> thanks bd808 & Reedy 

Abandoned account Rodrigo not in use, with zero edit: It gives me error message. Please remove or attach to me.

In T376267#10336758, @Rodrigo wrote:

Wikitech account/LDAP:	Rodrigo
SUL account	Rodrigo
Account linked on IDM	Y
I have visited MediaWiki:Loginprompt	Y
I have tried to reset my password using Special:PasswordReset	Y

Abandoned account Rodrigo not in use, with zero edit: It gives me error message. Please remove or attach to me.

After verifying that the legacy account had 0 edits and that the Developer account was also inactive, I renamed the account to Rodrigo~labswiki (https://wikitech.wikimedia.org/w/index.php?title=Special:Log&logid=975523). You should be able to attach your SUL account now @Rodrigo.

I’ve tried to reset my password but the new password also does not work in getting me logged in.

reedy@deploy2002:~$ mwscript extensions/CentralAuth/maintenance/createLocalAccount.php --wiki=labswiki "Khantstop"
DEPRECATION WARNING: Maintenance scripts are moving to Kubernetes. See
https://wikitech.wikimedia.org/wiki/Maintenance_scripts for the new process.
Maintenance hosts will be going away; please submit feedback promptly if
maintenance scripts on Kubernetes don't work for you. (T341553)
User 'Khantstop' created

Try now?

@Reedy it works, I was able to login and change my password. Many thanks!

Please note that I seem to have another account "Aleksandar Mastilovic" that is still active on Wikitech, but I haven't used that one to access the site before. I did the "special password reset" thing using that account, since AMastilovic-WMF wasn't available in the drop-down list.

In T376267#10373975, @amastilovic wrote:

Please note that I seem to have another account "Aleksandar Mastilovic" that is still active on Wikitech, but I haven't used that one to access the site before. I did the "special password reset" thing using that account, since AMastilovic-WMF wasn't available in the drop-down list.

@amastilovic This was the expected situation for folks who have different names on their Developer and SUL accounts. Because you had both accounts attached here on Phabricator I went ahead and treated this as a rename request.

Your "Aleksandar Mastilovic" account on Wikitech has been renamed to "AMastilovic-WMF". Please login to Wikitech with the old password but new username (if it doesn't work, use Special:PasswordReset to reset it) and then once logged in, use Special:MergeAccount to unify with your SUL account.

In T376267#10374252, @bd808 wrote:

Your "Aleksandar Mastilovic" account on Wikitech has been renamed to "AMastilovic-WMF". Please login to Wikitech with the old password but new username (if it doesn't work, use Special:PasswordReset to reset it) and then once logged in, use Special:MergeAccount to unify with your SUL account.

I just logged into Wikitech using that renamed account - thank you very much for your help!

Just joined WMF, created LDAP and linked.

I tried using my SUL credentials and got the following:
Auto-creation of a local account failed: You are not allowed to execute the action you have requested.

Apologies if I misunderstood the instructions.

https://wikitech.wikimedia.org/wiki/Special:Contributions/Kevmon This account is not registered in wikitech. Since you're new (welcome to the foundation!) Let me see what I can do about it.

I force created the local account, can you try again?

welcome to the foundation!

Thank you!

I force created the local account, can you try again?

That worked a treat, thank you! My understanding from the "migrating to SUL" doc was that I would just be able to use my SUL credentials. Did I miss any steps or am I just a weird case because I just joined?

Nothing was wrong on your side. It's because we are at the middle of a migration and things are a bit whacky. It'll be fixed soon for future cases. Sorry for the inconvenience

Can you try the password reset please?

I just did but I don't receive an email

I was just looking over @Sarai-WMF's shoulder and wikitech is for some reason not editable for her. I gave her the comfirmed user right and that didn't change anything.

@Ladsgroup can you tell what's happening here? I can't really think how this is related to to the SUL migration but isn't editing permitted for all logged-in users on wikitech?

user: https://wikitech.wikimedia.org/wiki/User:SSanchez-WMF

I was just looking over @Sarai-WMF's shoulder and wikitech is for some reason not editable for her.

What exactly does this mean? Is there some permission error on the edit/"view source" pages?

In T376267#10394651, @taavi wrote:

I was just looking over @Sarai-WMF's shoulder and wikitech is for some reason not editable for her.

What exactly does this mean? Is there some permission error on the edit/"view source" pages?

No error message, she just didn't have any edit links. It was like she was viewing a read-only wiki.

Can you force-create a local account for Leaderbot? It fails when I try to login, telling me that I am not authorised to perform the action.

Hey all! I'm able to login using my Developer account and using Special:PasswordReset but I'm having trouble trying to log in with my SUL account. When I enter my SUL credentials I receive an error saying:

Auto-creation of a local account failed: You are not allowed to execute the action you have requested.

Thanks in advance for your assistance!

Kind regards,
Panos

@Reedy Confirming I can login with my SUL on Wikitech now! Thank you so much!

Hello, when I try to log I receive this error: "Auto-creation of a local account failed: You are not allowed to execute the action you have requested."
Is it normal?

In T376267#10394511, @Andrew wrote:

I was just looking over @Sarai-WMF's shoulder and wikitech is for some reason not editable for her. I gave her the comfirmed user right and that didn't change anything.

@Ladsgroup can you tell what's happening here? I can't really think how this is related to to the SUL migration but isn't editing permitted for all logged-in users on wikitech?

user: https://wikitech.wikimedia.org/wiki/User:SSanchez-WMF

Thanks for all your help, @Andrew! After further investigation, I realized that I wasn't allowed to edit because I hadn't verified my email address 😅 But this was after following the steps outlined in the SUL migration page to merge my accounts, so I'm not sure whether the issues were related. All solved for now. Thanks again!

I already reset my Wikitech account, but I can't login with it, not sure why, so I can't proceed with any of the above.
Thanks for helping.

https://wikitech.wikimedia.org/wiki/Special:CentralAuth?target=Lucamauri
https://wikitech.wikimedia.org/wiki/Special:CentralAuth/Luca_Mauri

Would you like "Luca Mauri" renaming on wikitech to "Lucamauri" so they can be linked?

In T376267#10404634, @Reedy wrote:

Would you like "Luca Mauri" renaming on wikitech to "Lucamauri" so they can be linked?

That would be great, yes, thanks.

Apparently, there is a user account named "Mathmensch" on "wikitech.wikimedia.org", and I don't know where it comes from and don't have access to it.

It also prevents me from completing my account unification.

I was to report this issue according to the Wikitech login page.

In T376267#10404866, @lucamauri wrote:

In T376267#10404634, @Reedy wrote:

Would you like "Luca Mauri" renaming on wikitech to "Lucamauri" so they can be linked?

That would be great, yes, thanks.

Done and account attached.

In T376267#10404868, @Mathmensch wrote:

Apparently, there is a user account named "Mathmensch" on "wikitech.wikimedia.org", and I don't know where it comes from and don't have access to it.

Attached.

I am trying to log in to WikiTech account, unable to login but clicking on the forget password option, each time I am getting error.

Done

reedy@deploy2002:~$ mwscript extensions/CentralAuth/maintenance/createLocalAccount.php --wiki=labswiki "Chinmayee Mishra"
DEPRECATION WARNING: Maintenance scripts are moving to Kubernetes. See
https://wikitech.wikimedia.org/wiki/Maintenance_scripts for the new process.
Maintenance hosts will be going away; please submit feedback promptly if
maintenance scripts on Kubernetes don't work for you. (T341553)
User 'Chinmayee Mishra' created
reedy@deploy2002:~$

Thank you so much. I am logged in now.

I have an existing SUL account. About 18 December 2024, I created an account on Wikitech, which seemed successful. I was logged in to Wikitech when I first created the account (and made 0 edits), but ever since, login attempts result in the error message: "Auto-creation of a local account failed: You are not allowed to execute the action you have requested." I observe that both https://wikitech.wikimedia.org/wiki/User:Daask and https://wikitech.wikimedia.org/wiki/User:Daask2 currently report "User account is not registered on this wiki." I also requested Toolforge access.

I don't know what "Developer username" means, but I recorded it during the account creation process. I was a little surprised during account creation that the username "Daask" was already taken for "Developer username" and "Shell username". Perhaps some time in the past I had created or attempted to create a developer account of some kind that is attached to my Mediawiki username and that is causing the problem?

http://ldap.toolforge.org/user/daask doesn't seem to exist...
http://ldap.toolforge.org/user/daask2 does

Anyway:

reedy@deploy2002:~$ mwscript extensions/CentralAuth/maintenance/createLocalAccount.php --wiki=labswiki "Daask"
DEPRECATION WARNING: Maintenance scripts are moving to Kubernetes. See
https://wikitech.wikimedia.org/wiki/Maintenance_scripts for the new process.
Maintenance hosts will be going away; please submit feedback promptly if
maintenance scripts on Kubernetes don't work for you. (T341553)
User 'Daask' created
reedy@deploy2002:~$ mwscript extensions/CentralAuth/maintenance/createLocalAccount.php --wiki=labswiki "Daask2"
DEPRECATION WARNING: Maintenance scripts are moving to Kubernetes. See
https://wikitech.wikimedia.org/wiki/Maintenance_scripts for the new process.
Maintenance hosts will be going away; please submit feedback promptly if
maintenance scripts on Kubernetes don't work for you. (T341553)
autoCreateUser failed for Daask2:
Error: There is no such global account.
reedy@deploy2002:~$

Everything seems to be working fine for me now. Thank you, Reedy! I'm not sure what to say about http://ldap.toolforge.org/user/daask not existing. During account creation, I attempted to use "Daask" throughout and only switched to "Daask2" for some fields after it reported that "Daask" was not available and wouldn't let me use that username.

SUL account| SecretName101|

After all the steps were followed, I was presented with

Auto-creation of a local account failed: You are not allowed to execute the action you have requested.

Thanks!

Thank you!

I am a new user, I followed the instructions, but I cannot login and I cannot reset my password.

• When I am try to log in I receive: "Incorrect user or password."
• When I go for the forgot password I am receiving a mail with user/pass but when I am passing them I receive: "Auto-creation of a local account failed: You are not allowed to execute the action you have requested."

See T383308