Last modified: 2014-06-19 16:08:48 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T66441, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 64441 - Steady stream of user complaints of not receiving password reset emails
Steady stream of user complaints of not receiving password reset emails
Status: UNCONFIRMED
Product: Wikimedia
Classification: Unclassified
General/Unknown (Other open bugs)
wmf-deployment
All All
: High normal (vote)
: ---
Assigned To: Nobody - You can work on this!
: ops
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-04-25 19:17 UTC by Alex Monk
Modified: 2014-06-19 16:08 UTC (History)
4 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Comment 1 Andre Klapper 2014-04-28 06:38:16 UTC
Krenair: Password reset emails for *OTRS* only? 
What is the scope of this ticket / users of which sites are affected?
Comment 2 Alex Monk 2014-04-28 12:15:07 UTC
Hi Andre. This is not about OTRS, this is about users claiming that they aren't receiving wiki password reset emails that are supposedly being sent.
Comment 4 Andre Klapper 2014-05-22 17:21:14 UTC
Alex / Filippo: Any idea where (and who) to start investigating here, as this problem seems to come up more often now (see comment 3)?
Comment 5 Alex Monk 2014-05-22 17:46:09 UTC
I know that a few of them I've found have been due to user error (e.g. wrong email address verified for the account). So this *might* not be a technical issue.

It would help if the "Email has been sent" message didn't lie and included something along the lines of "If a wiki account has been verified against this email address, then an email has been sent" when providing an email address to reset (instead of a username).

I would suggest a "A password reset was triggered for this email address but there are no accounts verified for it" email but that has some obvious issues with spam/flooding etc.
Comment 6 Filippo Giunchedi 2014-05-22 19:08:26 UTC
Andre, (In reply to Andre Klapper from comment #4)
> Alex / Filippo: Any idea where (and who) to start investigating here, as
> this problem seems to come up more often now (see comment 3)?

As Alex mentioned one possible reason is misspelled email address, I see ~30 messages on mchenry at the moment from wiki@wikimedia.org which could be activations or password resets, most of them with misspelled domains, plus a bunch others on the mw servers sitting in their local mail queues also with misspelled domains.

Given the usual volume of outbound mail and the fact that queues on mchenry look normal it seems the mail system is working (and mediawiki too?).
Comment 7 Andre Klapper 2014-05-23 02:40:27 UTC
Thanks for providing potential other reasons and numbers, to get an idea that this is not a huge issue when it comes to potentially affected people.
Comment 8 Filippo Giunchedi 2014-05-23 09:12:15 UTC
no problem! it'd be nice to have test users to be able to test password recovery (in this case) end to end, or perhaps we already do?

another diagnostic facility thing might be to have email message-id tracked (if mw generates message-id that is) so it is easier to track
Comment 9 Alex Monk 2014-06-19 16:08:48 UTC
https://ticket.wikimedia.org/otrs/index.pl?Action=AgentTicketZoom&TicketID=7612769 reports this issue and that their mail server received no connections from mchenry.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links