Support

Admin Tools

#11616 coming from (unknown country)

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by nicholas on Tuesday, 03 April 2012 11:43 CDT

happythorntons
Mandatory information about my setup:

Have I read the related troubleshooter articles above before posting (which pages?)? Yes - Geographic blocking, Security Exceptions Log, Exceptions, Web Application Firewall
Have I searched the tickets before posting? Yes
Have I read the documentation before posting (which pages?)? Yes - see above
Joomla! version: 2.5
PHP version: (unknown)
MySQL version: (unknown)
Host: (optional, but it helps us help you)
Admin Tools version: 2.2

Description of my issue:

A client is unable to successfully log into the Password-protect Administrator window, and so therefore can't get to the administrator login, unless the Password-protect Administrator option is switched off. After walking through this many times on the phone, it became evident that the client wasn't doing anything wrong.

After much investigation, we stumbled across the fact that they have a rather odd IP address, and Admin Tools is declaring the clients' successful admin log in (when the admin password is off) as "coming from (unknown country), (unknown country)".

We have not encountered this problem with any other clients, and so this "unknown country" issue seems to be the most likely cause, from what we can fathom.

Do you have any ideas on how we can resolve this (or any changes our client has to make to their IP/router, etc) so that our client can log into the Password-protect Administrator window successfully?

Many thanks for any pointers!

nicholas
Akeeba Staff
Manager
I think you are mixing up a few things. The administrator password protection operates at the Apache level, as it has to do with .htaccess and .htpasswd files being created inside the site's administrator directory. As such, it is not controlled by Admin Tools' component or plugin and doesn't cause log entries. The only thing which might be relevant to this issue is your client's browser having cached the wrong username/password.

Something which could be related is the use of an administrator secret URL parameter. In this case, if your client forgot to add that parameter to his URL, he will be blocked.

And now, regarding the "(unknown country)". It's not an error message. Actually, it's not the error reason. It merely means that you have not installed or updated the GeoIP.dat file. If you are not using GeoBlock, your client's IP not resolving to a country is completely irrelevant to any other issue you might have.

So, let's start by asking the right questions:
1. Are you having a problem with the administrator password protection or the secret URL parameter?
2. If you are using the secret URL parameter, does your client add the parameter to the URL he's using to access his site, e.g. http://www.example.com/administrator/index.php?secret_parameter
3. Are you using GeoBlock?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

happythorntons
Hi Nick,

Thanks so much for the lightening fast response!

Thanks also for explaining my confusion on the "unknown country" issue.

In response to your questions:

1. The problem is with the admin pw protection - the client enters the correct details (copied and pasted from what we sent over) into the first login window that pops up (the one before the admin login), and the window just keeps flashing up each time the login details are entered. We checked that CAPS LOCK was not on, and that the client was going to the correct link, which we also sent over. The Client doesn't seem to be getting blocked (from what we can see in the security log)
2. Yes, and yes.
3. No Geo-Blocking has not been setup in the WAF

Please let me know if there's any other information you might find useful? We have quite a few sites, and have never encountered anything like this before...

nicholas
Akeeba Staff
Manager
OK, in this case your client has a problem with his browser. The browser is supposed to send the username/password to the server, then cache this information and send it with every request. Maybe you should ask him to use another browser and/or computer?

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

happythorntons
Hi Nick,

I finally got to the bottom of this, so thought I would post the solution that worked for my client just in case it's helpful to others.

You were totally right with the clue being a browser problem: the problem ended up being firefox and safari reacting differently to chrome.

With the administrator password protection switched on, chrome would log in fine, but firefox and safari would not.

FF: 10.0.1
Safari: 5.1.3
Chrome: 18.0.1025.142

And the cause? It turned out the be a "£" at the end of the administrator password protection username. Once I removed the £ from the end of the username, all worked fine and nothing else was changed.

Rather bizarre, but glad it's all resolved now :)

Thanks so much for your help!

nicholas
Akeeba Staff
Manager
Hm, it actually makes sense to me. You should never use special characters. Always try using lowercase alphanumeric characters (a-z, 0-9). Sometimes you can get away with some special characters, but it's generally a bad idea for various reasons :)

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!