https://bugzilla.wikimedia.org/show_bug.cgi?id=23247

           Summary: Session disappearing causes OpenID login failure
           Product: MediaWiki extensions
           Version: any
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: Normal
         Component: OpenID
        AssignedTo: sergey.chernys...@gmail.com
        ReportedBy: craig....@gmail.com


It is my understanding that if you tick the "Remember my login on this
computer" when you log in normally, your login session should last as long as
$wgCookieExpiration (default 30 days).

On my wiki, regardless of the length of time my cookie is set for, PHP's
garbage collection (or Debian's cron script) will remove PHP sessions older
than gc_maxlifetime, which causes the user to need to log in again - by
default, after 1 hour.  Not popular in my office!

It strikes me that there is a dependence on information on the session which
would normally be stored in cookies, and there is a bug here - at the very most
you should get the MW "Your session has expired" error message if your session
were garbage collected.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to