Multisite : user randomly locked out of some sites

  • A user reports being unable to log in to a sub-site (on a multisite install) with a given username and password. She receives the “User lockout message” after just the first trial, whereas I have set the settings to lock out after 5 trials.

    When I try to connect myself with the same credentials, it works.

    So I thought this user’s IP must be banned, but I couldn’t see it in the itsec_lockouts table. Besides, this user is able to connect to another subsite with the same IP!

    I was able to get this user to connect by adding her IP to the whitelist, but it’s not a satisfactory solution as it does not tell me why and where this user was banned in the first place. Plus other users might run into the same problem soon. Any idea of what’s going on?

    Thanks.

Viewing 3 replies - 1 through 3 (of 3 total)

  • I have 2 clients experiencing the same issue: can no longer login.

    Can you tell me where the whitelist is? I tried to locate it but couldn’t. Hopefully my clients can get back in and add their IPs to the whitelist.

    • This reply was modified 7 years, 11 months ago by SigMCR.
    Thread Starter su1

    (@su1)

    It’s under Security -> Settings -> Global Settings –> Configure Settings

    For the record, I think I found where the problem was coming from. The user had a username that was used by hackers to try to login, and so this username was hitting the maximum number of trials allowed *per username* (and not per IP).

    Thank you! I’ll pass this along to my clients.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Multisite : user randomly locked out of some sites’ is closed to new replies.