[07:14:23] apergos: I wrote a short summary of authentication in CentralAuth: https://www.mediawiki.org/wiki/Extension:CentralAuth/authentication [07:15:10] nice! I will have a look in a little while. still going through the resourceloader stuff andlookng a little at the js files in the extension [07:15:49] which is a data hash similar to the session data handled by , <-- something missing here? [07:16:00] in the Central session (backend) section [07:24:14] one for each major wiki in the wikifarm <-- this could be clarified a little (in the Central session section, edge login bullet point): what makes a wiki "major"? could not any wiki in a project family in the farm not be selected as the one for the issuing of the cross-domain cookie for that family? [07:25:16] this is a lot of great information, thanks a lot for this write-up! [07:25:51] I was looking at ext.centralauth.centralautologin.js just a bit ago this orning. [07:58:43] edited a bit for clarity [08:01:30] ok, that helped! [08:05:18] one curious thing I note about the self-redirecting url I mentioned above is that the title param appears twice, no idea why that would be : http://login.wikipedia.test/mw/index.php?title=Special:CentralAutoLogin/start&title=Special%3ACentralAutoLogin%2Fstart&type=1x1&from=testenwiki [08:05:26] anyways, back to digging around. [08:09:47] some sort of webserver misconfiguration, probably a rewrite rule if you use Apache [08:10:19] it doesn't matter much, PHP will just ignore all but the last value [15:41:20] so it wasn't a rewrite rule or any of that stuff. both that problem with the url parameters and the redirect to the wrong place went away when I set UseCanonicalName to off in the various virtual host stanzas. No reason for that, the whole point of these named virtual hosts is that the ServerName directive is supposed to be used to set the hostname... [15:41:26] but apparently that ain't so. [15:42:52] so now I get to see the proper flow of the 'edge' login (to a "representative" wiki). guess I'll make a second set of wikis and give them their own representative wiki, and see whether it does the right thing. and yes I made sure I pulled the extension after your patch got merged in ;-)