Support

Admin Tools

#19676 XML-RPC access issue in Admin Tools

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a

Latest post by user77157 on Wednesday, 09 April 2014 20:00 CDT

user77157
Hello. I am trying to use an extension known as Joomdle on my site that utilizes XML-RPC, a bridge component that connects my main site to a subdomain. When I run a system health check from that component, I get the following error message: Joomla URL seems to be misconfigured in Joomdle auth plugin.

According to their documentation, this seemingly straightforward error message can actually be caused by several different things, as follows:

  • Re-check your Joomla URL in Joomdle auth plugin configuration.
    Make sure you include http://
    Check Joomla multi-language configuration and enter appropriate parameters in Moodle side if necessary
    Check any mod_security rules that may deny XMLRPC traffic
    Disable any Joomla security extensions you may have installed


Their documentation also says to visit: http::/yoursite.com/index.php?option=com_joomdle&task=ws.server&format=xmlrpc
and If everything is working fine, you should see something like: XML-RPC Error (1): Access Denied. However, if you get a different message or a blank page, there is some problem with your server configuration. I get the access denied message that indicates everything is fine.

I have a VPS, so I've been able to check that no security settings at that level are blocking it. I've checked everything else they recommend and I can't find any issues except that if I turn off Admin Tools, the connection works. Which leads me to believe that it is some type of misconfigured setting within Admin Tools. Didn't there used to be an option in Admin Tools for XML-RPC? I've looked through the forums on your site and I can't seem to locate any recent forum postings for Admin Tools that deal with this issue. Do you have any suggestions?

Thank You
Angela

nicholas
Akeeba Staff
Manager
First go to Admin Tools, Web Application Firewall, Configure WAF. Make sure "Log security exceptions" is set to Yes; if it's not, set it to Yes and click on Save. Now try reproducing your issue. Immediately after that, please go to Admin Tools, Web Application Firewall, Security Exceptions Log. The latest log entry at the top should have the date and time of when the issue occurred. Please copy the Reason and Target URL here so that we can further help you.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user77157
Alright, well I have "Log Security Exceptions = Yes" and I went through and recreated the issue. However, there is no record of an exception in the log, so unfortunately I can't give a reason or target URL. Which would imply it's not the firewall that's the problem, I guess? And that's not the easy answer I know I was hoping for :)

Okay, just to clarify some of the other stuff I checked before I posted my original topic:
  • I made sure that I wasn't getting any of the error messages one gets when the htaccess is blocking part of an extension.
    I checked to see that I'm not catching any JS, other script, and/or database error when I try and debug.
    Turning off the AdminTools system plugin is the only thing that has made the connection work so far.


If you want me to check anything else, just let me know.

Thank you!
Angela

nicholas
Akeeba Staff
Manager
If Admin Tools was blocking the XML-RPC service there would be a security exception logged. Nothing will be blocked without a log trace when "Log security exceptions" is set to "Yes". So it seems that your issue is not related to the web application firewall provided by Admin Tools. I don't know why the XML-RPC service works when you disable the plugin.

Let's try doing some shotgun debugging. Go to Components, Admin Tools, Web Application Firewall, Configure WAF and start turning options off, three at a time. Then save and retry your XML-RPC service three times (to make sure there is adequate repeatability which indicates correlation between action and observation). If at some point it starts working you know which three options are likely to cause a problem. You can then narrow down on finding which one is causing you trouble. Then you can enable all other options which you previously disabled and test again.

If none of this helps there is simply no relation between Admin Tools and the issue.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

user77157
Nicholas,

This was very helpful and with your assistance I have managed to track down the issue. I found that the "Disallow site access to IPs in Blacklist = Yes" setting was causing the problem because one of the shared IPs on our ISP had been blocked at some point. I did check the IPs back when this problem first started, but I only checked the main IP connections we use on our VPS and didn't realize that this other IP was there too.

So thank you very much for the guidance and if it happens again I know where to begin looking :)

Angela

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!