ExpressionEngine CMS
Open, Free, Amazing

Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

Admin getting logged out - IP changing

June 10, 2011 8:46am

Subscribe [4]
  • #1 / Jun 10, 2011 8:46am

    Moe 2.0

    24 posts

    The client admins are accessing our site from a VPN/outbound proxy.  Their IP address can change during the session and they are continually getting logged-out.

    I see libraries/Session.php.fetch_session_data() expects the IP address to remain the same.

    How can I accommodate the changing IP addresses?

  • #2 / Jun 10, 2011 8:57am

    Moe 2.0

    24 posts

    The client admins are accessing our site from a VPN/outbound proxy.  Their IP address can change during the session and they are continually getting logged-out.

    I see libraries/Session.php.fetch_session_data() expects the IP address to remain the same.

    How can I accommodate the changing IP addresses?


    EE 2.1.3 Build 20101220


    PS - disregard my post in EE 1.x Tech Support forum

  • #3 / Jun 10, 2011 9:33am

    Kernon

    173 posts

    Can you switch to cookies only?

  • #4 / Jun 10, 2011 6:14pm

    Sue Crocker

    26054 posts

    Thanks for the assist, Kernon.

    Moe - Try setting Require IP Address and User Agent for Login? to No in the Security and Session Preferences.

  • #5 / Jun 13, 2011 7:31am

    Moe 2.0

    24 posts

    What exactly does setting Require IP Address and User Agent for Login? to No going to do?  The session is still created using the ip address and, up further testing, the user is logged out when the ip changes.

    Client’s security standard will not allow Cookies only for admin sessions.  I need another option.

    Just out of curiosity—CI has a sess_match_ip config setting to disable ip address matching.  It appears this has been overriden in EE - why so?

  • #6 / Jun 14, 2011 3:05pm

    Brandon Jones

    5500 posts

    Hi Moe,

    Cookies Only is probably going to be your best bet given the limitations of the VPN. What in particular is the issue with going the cookies-only route?

.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases