Admin login issues on Cloud wifi

[scooper]

We've now had two users on different sites complain that they keep getting logged out of the admin area every minute or so. Other users of the same sites (and of course us when we test) don't have any problem at all.

Inspecting the admin logs I can see that they are having to log in repeatedly, but I've just noticed today that each time they do it's from a new IP address:

Code: Select all

94.119.64.2  Susannah Logged In  14 Feb. 2018 12:43:20
94.119.64.19 Susannah Logged In  14 Feb. 2018 12:41:32
94.119.64.2 Susannah Logged In  14 Feb. 2018 12:41:27
94.119.64.7 Susannah Logged In  14 Feb. 2018 12:41:22
94.119.64.10 Susannah Logged In  14 Feb. 2018 12:41:16

Within 20 seconds there we have 4 different IP addresses.

The user that those logs are from was using BT Cloud WiFi in a cafe.
Now I've no idea why the IP is changing all the time, but BT Cloud is pretty much the largest public wifi service here in the UK so if it's something they do that's affecting logins then that's going to be a pain.

So. Has anyone else had this problem? And any suggestions as to how to handle it? I've asked the user to try connecting through a VPN to see if that solves the problem.

On a wider note though - should we be able to handle this anyway? Even if IP addresses change why is that breaking the session? If I swap VPN servers I definitely get logged out of admin - but if we're using a cookie based auth id then that should be ok shouldn't it....

[paulbaker]

I've had the same issue with Nero coffee shops but with my webmail system. Didn't seem to keep the session, kept logging me out and so it was pretty much unusable. My CMSMS logins were stable though.

My solution was to change coffee shops.

[Rolf]

My solution was to change coffee shops.

LMAO

[scooper]

I see I've had my last reply removed.

I'm aware you don't want any core code changes listed in the forum so I was careful not to suggest that anyone alter code or even show what code needed to be changed.

What I did show was where I think the problem lies - if you weren't happy with the way I said it then please just let me know and I'll be happy to edit my post.

Just removing posts that might be useful to someone else who's having this problem without even letting me know isn't helpful to anyone.

[velden]

I see you already filed a bug report and I know it has attention of the Dev Team.

http://dev.cmsmadesimple.org/bug/view/11737

Thank you for the details.

[scooper]

Cheers Velden, thanks for the measured reply.

I was just a little cross because I'd managed to fix a problem that had been causing issues with a client and now no one gets to see how smart I am (ahem).

I promise I'll keep all code out of the forum now and only add it to the bug tracker.

Thanks for all the work from you and the dev team.

s.