[Typo3-dev] Typo3 backend login and proxy servers

[Kasper Skårhøj]

You can disable the check on a per-user basis. I'm not sure you can
totally disable it unless you simply hack the source, but that would be
very easy. 

In the userauth class, search for "lockIP" variable which is default set
to "4". I think if you set it to "0" you totally disable it, any setting
from 1-4 will provide degrees off locking (simply locking to each part
of the IP address).

- kasper

On Sun, 2004-08-08 at 18:01, Kristian Kristensen wrote:
> Hi Kasper, and all,
> 
> The information you provided plus information I got from my proxy provider,
> gives the solution. Apparently the proxy server I sit behind has a round
> robin configuration: It simply shifts it's incoming connections out to
> different other proxy servers, and each external proxy has a different ip
> address.
> So that coupled with the  locking to login ip address explains why I get
> thrown off.
> 
> Thanks for the reply, I'll go bang my proxy provider on the head now ;-)
> 
> Best,
> Kristian Kristensen
> 
> "Kasper Skrhj" <kasper2004 at typo3.com> wrote in message
> news:mailman.66.1091912760.5488.typo3-dev at lists.netfielders.de...
> > Two things changed:
> >
> > 1) backend sessions are locked to the HTTP_USER_AGENT value so sessions
> > cannot easily be hijacked.
> > 2) backend sessions are locked to the IP address meaning that a change
> > in IP adress will throw you off.
> >
> > - kasper
> >
> > On Sat, 2004-08-07 at 18:10, Kristian Kristensen wrote:
> > > Hi all,
> > >
> > > When I connect to <mysite>/typo3 and try to logon I get an error, saying
> > > that cookies must be enabled for me to use the system. However, the
> problem
> > > is only there when I use a proxy server. I'm using Typo3 version 3.6.2
> > > With version 3.5 I didn't have these problems.
> > >
> > > So the question is: has anything changed involving cookie handling upon
> > > backend login from version 3.5 to 3.6?
> > >
> > > Of course the simple solution would be that the proxy server is set up
> to
> > > drop any cookies, but that doesn't explain why it used to work in v.
> 3.5...
> > >
> > > Best,
> > > Kristian Kristensen
> > >
> > >
> > > _______________________________________________
> > > Typo3-dev mailing list
> > > Typo3-dev at lists.netfielders.de
> > > http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev
> > -- 
> > - kasper
> >
> > --------
> > Please notice NEW EMAIL ADDRESS for 2004!! (due to SPAM-contamination)
> >
> > "kasper2004 at typo3.com"
> >
> >
> 
> 
> _______________________________________________
> Typo3-dev mailing list
> Typo3-dev at lists.netfielders.de
> http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-dev
-- 
- kasper

--------
Please notice NEW EMAIL ADDRESS for 2004!! (due to SPAM-contamination)
	
"kasper2004 at typo3.com"