Lockout is locking out all accounts

  • Resolved logi098

    (@logi098)


    6 years, 5 months ago

    Hello,

    We have a WP site set up on an external server. Our organization logs into this cloud host, but we noticed that if one user’s account gets locked, then *everyone* is getting the “Must wait 20 minutes” message.

    We are figuring this is because it’s locking out based on IP. And if one IP is locked, then everyone on our campus gets locked out too (since on the outside we are one IP). I tried changing the “Limit Login Attempts” settings area to Reverse Proxy, but that didn’t fix the problem. Is there some WP site setting we might be missing to correct this problem? Thanks.

    • This topic was modified 6 years, 5 months ago by logi098.
    • This topic was modified 6 years, 5 months ago by logi098.
Viewing 11 replies - 1 through 11 (of 11 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    What plugin are you using for this?

    Generally speaking, you should whitelist the IP address(es) used by your office because — well, you know!

    Thread Starter logi098

    (@logi098)

    Thanks for the response. It’s funny because we never installed any sort of plugin for this. I am seeing under Settings a “Limit Login Attempts” option, but there’s no plugin like that in our plugin list. I thought it just came built into WP to be honest.

    Do you have any good plugin suggestion for doing the whitelist operation? Or, can that be done in WP itself?

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Nope. “Limit Login Attempts” is from a plugin. How you whitelist depends on the plugin.

    What plugins do you have installed?

    Please install the health check plugin and report back its findings on the debug tab: https://www.ads-software.com/plugins/health-check/

    Thread Starter logi098

    (@logi098)

    `Add Categories to Pages. Version 1.1 by a.ankit
    Adminimize Version 1.11.4 by Frank Bültge
    Category Specific RSS Menu Version v2.0 by Tips and Tricks HQ, Ruhul Amin
    Disable Comments Version 1.7.1 by Samir Shah
    Duplicate Menu Version 0.2.1 by Jonathan Christopher
    Easy Google Fonts Version 1.4.3 by Titanium Themes
    Elementor Version 2.2.5 by Elementor.com
    Elementor Pro Version 2.1.10 by Elementor.com
    Enable Media Replace Version 3.2.7 by ShortPixel
    Health Check & Troubleshooting Version 1.2.1 by The www.ads-software.com community
    Max Mega Menu Version 2.5.2 by megamenu.com
    MimeTypes Link Icons Version 3.2.7 by Toby Cox, Juliette Reinders Folmer
    Ocean Custom Sidebar Version 1.0.4 by OceanWP
    Ocean Elementor Widgets Version 1.1.0 by OceanWP
    Ocean Extra Version 1.4.29 by OceanWP
    Ocean Sticky Header Version 1.1.11 by OceanWP
    Redirection Version 3.5 by John Godley
    Simple Custom CSS and JS Version 3.19 by SilkyPress.com
    TablePress Version 1.9.1 by Tobias B?thge
    The Events Calendar Version 4.6.24.1 by Modern Tribe, Inc.
    The Events Calendar PRO Version 4.4.33 by Modern Tribe, Inc.
    User Role Editor Pro Version 4.48 by Vladimir Garagulia
    Wicked Folders Pro Version 2.11.4 by Wicked Plugins
    WP Add Mime Types Version 2.2.1 by Kimiya Kitani
    Yoast SEO Version 8.4 by Team Yoast’

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Any MU plugins?

    Also, check with your host, as they may have installed something.

    Thread Starter logi098

    (@logi098)

    I just checked the mu plugins folder and don’t see anything, outside of the Health Check I just installed. I also don’t see any Limit Login plugin in our plugin directory either.

    I opened a ticket with our provider to ask if they did something. But, shouldn’t I be able to see that plugin regardless if I’m SFTP’ing into the directory itself? In any case, is there a standard plugin people use nowadays for whitelisting?

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    There is no standard plugin for whitelisting — you specifically got a “limit login attempt” error, so there’s *something* generating that and it’s not WP core. Where did you find those settings?

    Thread Starter logi098

    (@logi098)

    Settings -> Limit Login Attempts

    Thread Starter logi098

    (@logi098)

    Yep, it was our provider. They’re enabling it somehow on all their sites, so I asked them to remove it (Flywheel FYI).

    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Well, bless their little heart.

    Thread Starter logi098

    (@logi098)

    Thanks!

Viewing 11 replies - 1 through 11 (of 11 total)
  • The topic ‘Lockout is locking out all accounts’ is closed to new replies.

Tags