Editing
Incident 2026-01-06 – BotPassword Authentication Failure (MediaWiki API)
Jump to navigation
Jump to search
Warning:
You are not logged in. Your IP address will be publicly visible if you make any edits. If you
log in
or
create an account
, your edits will be attributed to your username, along with other benefits.
Anti-spam check. Do
not
fill this in!
= Incident 2026-01-06 – BotPassword Authentication Failure (MediaWiki API) = == Summary == Attempts to authenticate to the MediaWiki API using BotPasswords repeatedly failed, despite bot accounts and credentials being present in the database and visible via maintenance scripts. This prevented automation of wiki publishing and required extended debugging of MediaWiki authentication configuration. The failure was ultimately traced to missing or inactive BotPassword authentication providers in the MediaWiki AuthManager configuration. ---- == Impact == * Automation for wiki publishing blocked * Incident documentation and operational recovery delayed * Significant engineering time spent debugging authentication paths * Increased cognitive load during already degraded operational state ---- == Timeline (condensed) == * 2026-01-06 – Bot user accounts and BotPasswords verified in database * Multiple API login attempts failed using both `login` and `clientlogin` * MediaWiki version and configuration inspected * AuthManager providers dumped via maintenance scripts * BotPasswordAuthenticationProvider found to be absent from active auth stack ---- == Root Cause == * BotPassword authentication provider not registered in MediaWiki AuthManager * MediaWiki allowed creation and storage of BotPasswords but could not authenticate them * Configuration mismatch between enabled features and active auth providers ---- == Resolution == * Identified missing BotPassword authentication provider * Determined required configuration changes for full API-based bot login * Deferred final fix pending restoration of operational baseline and documentation completion ---- == Preventive Actions == * Explicitly verify AuthManager providers after MediaWiki upgrades * Add automated test for bot API login during deployment * Document required bot authentication configuration in operations wiki ---- == Related Pages == * [[Lux-Ear Internal Incidents & Operations Log]] * [[MediaWiki Configuration]] * [[Automation & Deployment]]
Summary:
Please note that all contributions to Lux-Ear Internal Knowledge Base may be edited, altered, or removed by other contributors. If you do not want your writing to be edited mercilessly, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource (see
Lux-Ear Internal Knowledge Base:Copyrights
for details).
Do not submit copyrighted work without permission!
Cancel
Editing help
(opens in new window)
Navigation menu
Personal tools
Not logged in
Talk
Contributions
Create account
Log in
Namespaces
Page
Discussion
English
Views
Read
Edit
Edit source
View history
More
Search
Navigation
Main page
Recent changes
Random page
Help about MediaWiki
Tools
What links here
Related changes
Special pages
Page information