Whitelisting login lockdown

  • Resolved Martijn

    (@ximie90)


    9 years, 4 months ago

    Hi,

    We are running into a problem with the login lockdown.
    This is a sort of intranet site, with a large part of the site behind the login. With about 150 users logging in from 25-ish office locations and their homes etc.
    The lockdown is good for unwanted visitors and the occupational forgotten password.
    But especially on the main location it causes some problems. There are 20-30 people working, plus the site ‘administrator’, the site administrator can unlock people manually if they can’t wait out the lockdown period. But if one of the other 30 people in the same building, on the same IP blocks him/herself the entire building will lose access.

    We want to keep this feature for the obvious security reasons, but is there a way to whitelist a couple of IPs from being locked down, and still be able to allow people to log in from home or other offices.
    Because when I read the discription of the login whitelist option, it will only allow from the whilelisted IP’s. This will not be the right solution to many IPs to add and we would need to update it weekly, to allow new employees etc.

    Kind regards,
    Martijn

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    9 years, 3 months ago

    Hi, I know what you mean. However at present the Login Whitelist feature works like you mentioned above. This is one ultimate method of protection. You can even set up an IP range for exclusion.

    However if you have many login from various IP addresses then this feature would not work for you at present. And as you mention if one gets locked out from an IP address, all who belong to that IP address would be locked out as well. I my opinion the Login Whitelist will not work for your current situation and in the way this feature is currently set up in the plugin.

    • This reply was modified 9 years, 3 months ago by mbrsolution.
    Plugin Contributor wpsolutions

    (@wpsolutions)

    9 years, 3 months ago

    Hi Martijn,
    I think a whitelist for the login lockdown is a reasonable suggestion and have been meaning to add it for a while now.
    I will add this feature in either the next or subsequent releases.

    • This reply was modified 9 years, 3 months ago by wpsolutions.
    Thread Starter Martijn

    (@ximie90)

    9 years, 3 months ago

    Hi,

    That would be great.
    As I said in my post, the current white list option is indeed not a viable option with so many IP addresses.

    I would imagine the lockdown whitelist could be quite easy, just check the whitelist before blocking, if on the whitelist > dont block.

    Any expectations on when this will be added>?

    Kind regards,

    Martijn

    Plugin Contributor wpsolutions

    (@wpsolutions)

    9 years, 3 months ago

    I will try my best to implement something by the next release.

    edei

    (@edei)

    9 years, 3 months ago

    we have a similar situation – so +1 for a new whitelist-solution

    cheers

    edei

    Plugin Contributor wpsolutions

    (@wpsolutions)

    9 years, 3 months ago

    I have implemented this feature and it will be available in the next release.

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Whitelisting login lockdown’ is closed to new replies.