Solution: in Apache wiki was configured through https, but in wiki LocalSettings.php was $wgServer = "http://...". So just correct $wgServer to https.
| MediaWiki | 1.27.4 |
| PHP | 7.0.27-0+deb9u1 (apache2handler) |
| MariaDB | 10.1.26-MariaDB-0+deb9u1 |
User log in, press Preferences, then Change password. And instead Change password form open url <server>/w/index.php?title=Special:ChangeCredentials/MediaWiki\Auth\PasswordAuthenticationRequest&returnto=Special%3APreferences with authorization request.
What extensions do you have installed? Looks like you may have an auth plugin or similar
Installed extensions:
Cite
Nuke
ParserFunctions
Renameuser
SyntaxHighlight_GeSHi
WikiEditor
Math
Semantic MediaWiki
Already tried to disable all extensions - nothing changed.
Ugh, well, I though it was an error, but no, it's normal behavior. To change your password you should first enter your current password. What's the problem with that?
It doesn't look like normal behavior. It doesn't simple require password. Text on page is:
"Login required
Please log in to view other pages."
OK, press log in. It ask not only password, username field is also empty. Fill both fields.Fail: "There seems to be a problem with your login session; this action has been canceled as a precaution against session hijacking. Go back to the previous page, reload that page and then try again."
For "session hijacking" error in MediaWiki 1.27, see Topic:T7irqyk4rhfy3ohk.
This error for first log in I already solved a long time ago - now it work fine. But now - on try to change password - it appear again. Disabling all cache also doesn't help.
Note that you don't need to disable all cache. Just be sure to set Manual:$wgSessionCacheType to CACHE_DB in case it's wrongly set to a non-persistent cache.
Yes, I know it. I disabled all cache only for test. But problem with change password using preferences still exists.
Problem solved.
Solution: in Apache wiki was configured through https, but in wiki LocalSettings.php was $wgServer = "http://...". So just correct $wgServer to https.
Thanks for help.