Support

Admin Tools

#37750 Admin Tools Blocking IPv6 User

Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket

Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.

Environment Information

Joomla! version
3.10.10
PHP version
7.4.10
Admin Tools version
6.1.7

Latest post by nicholas on Sunday, 18 September 2022 14:31 CDT

directive

Hi Support,

We have a client that is accessing their website via IPv6. They login fine, but as soon as they attempt editing their website and saving their changes, the get blocked by Admin Tools. Based on the security exceptions, this seems to be stemming from an admin password issue despite them already being logged in.

Any ideas as to what's going on?

nicholas
Akeeba Staff
Manager

If their IPv6 address is changing on every request (or after a few requests) Joomla no longer considers the user as logged in — the login session is tied to the IP address Joomla sees.

IPv6 is a weird beast. Unlike IPv4, it's not determined entirely by the Internet Service Provider (ISP). Please read https://en.wikipedia.org/wiki/IPv6_address#Stateless_address_autoconfiguration for context, especially Address Lifetime and Temporary Addresses. If either the router or their local machine is misconfigured in a way which results in the IPv6 address being continuously rotated in a matter of seconds/minutes instead of in a matter of hours/days they  have a very bad time trying to manage Joomla. Even without Admin Tools enabled they'd get kicked out of the administration interface due to their session being invalid. In fact, it's exactly because their session is invalidated that Admin Tools blocks them.

Nicholas K. Dionysopoulos

Lead Developer and Director

🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!

Support Information

Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.

Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!