Bug/Third Party Troubleshooting: WPUmbrella "We can't communicate with your WordPress site" #17
Replies: 3 comments 2 replies
-
|
Hi @clariable Thanks for the detailed report.
I think what happens is that WPUmbrella "impersonates" the first admin user that it can find on your site. And since all admins need 2FA setup (by default), Umbrella's request is being redirect to the /force-setup page. The "not authenticated" error makes sense, because WPUmbrella is not a browser, so no authentication cookie is set. Can you try to set-up 2FA for the site's admin user? That should solve the problem. |
Beta Was this translation helpful? Give feedback.
-
|
To add to this, we have many Umbrella users using Fortress, which makes me confident in thinking that's its an admin without 2FA setup yet. |
Beta Was this translation helpful? Give feedback.
-
|
@clariable We've pushed a new release which makes WPUmbrella work even if you don't have 2FA setup yet for your admin account. |
Beta Was this translation helpful? Give feedback.
-
|
Hi Calvin,
Thanks a lot! Really appreciate your effort. :)
Mario Luna
IT consultant
Clariable
Address: Penttiläntie 1-3 K 69, 00740 Helsinki, Finland
WhatsApp: +358 458012888
https://clariable.com/
…On 25. Aug 2024 at 22.11 +0300, Calvin Alkan ***@***.***>, wrote:
@clariable We've pushed a new release which makes WPUmbrella work even if you don't have 2FA setup yet for your admin account.
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you were mentioned.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
Sure! Feel free to re-open this discussion if needed. |
Beta Was this translation helpful? Give feedback.
-
What happened?
Hi
I have a problem with a Fortress and WPUmbrella.
I see this message in Umbrella dashboard
snicco_fortress.http.ERROR Missing authentication for request path [/snicco-fortress/auth/totp/manage/force-setup]. Context: ['user_id' => 0, 'request_target' => '/snicco-fortress/auth/totp/manage/force-setup?redirect_to=/wp-json/wp-umbrella/v1/snapshot?noApiCache%3Dc3c8d21286036b849eb0cf68', 'request_method' => 'GET', 'identifier' => '00000000000019ef0000000000000000', 'fortress_request_uid' => 'e90fb72f073cd89e83211a6f'] Snicco\ScopedVendor\Snicco\Component\Psr7ErrorHandler\HttpException "Missing authentication for request path [/snicco-fortress/auth/totp/manage/force-setup]." in /public/wp-content/mu-plugins/snicco-fortress/releases/current/vendor/snicco/wp-auth-only-middleware/src/AuthenticateWPUser.php:25I tried to create a mini plugin to add IP addresses to the whitelist but nothing changed
`<?php
/**
Plugin Name: Fortaco Fortress - Skip the check for a session being in sudo-mode for WPUmbrella connections.
Description: Companion plugin to the Fortress Security module to whitelist WPUmbrella connections.
Author:
Version: 1.0',
' */
add_action(ShouldSudoModeCheckBeSkipped::class, function (ShouldSudoModeCheckBeSkipped $event) {
$ips = [
'212.129.45.77',
'212.83.142.5',
'212.83.175.107',
'2001:41d0:306:1702::/64',
'2001:BC8:2B7F:801::292/64',
];
if(in_array($_SERVER['REMOTE_ADDR'], $ips, true)){
$event->skip_for_current_request = true;
}
});`
What did you expect to happen?
No response
Did this work before?
No response
All your installed plugins and themes
+----------------------------------------------+----------+-----------+----------+----------------+-------------+
| name | status | update | version | update_version | auto_update |
+----------------------------------------------+----------+-----------+----------+----------------+-------------+
| accessibility-checker | active | none | 1.15.2 | | off |
| accessibility-checker-pro | active | none | 1.8.1 | | off |
| acfml | active | none | 2.1.4.1 | | off |
| advanced-custom-fields-pro | active | none | 6.3.5 | | off |
| alttext-ai | active | none | 1.8.1 | | off |
| cision-block-pro | active | none | 1.6.4 | | off |
| email-encoder-premium | active | available | 0.3.10 | 0.3.11 | off |
| filebird-pro | active | none | 6.3.3 | | off |
| fluentform | active | none | 5.2.0 | | off |
| fluentformpro | active | none | 5.2.0 | | off |
| fluent-smtp | active | none | 2.2.80 | | off |
| webtoffee-gdpr-cookie-consent | active | none | 2.6.1 | | off |
| optimole-wp | active | none | 3.13.6 | | off |
| instawp-connect | active | none | 0.1.0.50 | | off |
| kadence-blocks-pro | active | none | 2.4.4 | | off |
| kadence-blocks | active | none | 3.2.50 | | off |
| kadence-pro | active | none | 1.0.20 | | off |
| melapress-login-security-premium | inactive | none | 1.3.1 | | off |
| monsterinsights-eu-compliance | active | none | 2.3.2 | | off |
| google-analytics-premium | active | none | 9.0.2 | | off |
| patchstack | active | none | 2.2.13 | | off |
| perfmatters | active | none | 2.3.2 | | off |
| seo-by-rank-math | active | none | 1.0.226 | | off |
| seo-by-rank-math-pro | active | none | 3.0.69 | | off |
| remove-cpt-base | active | none | 6.5 | | off |
| temporary-login-without-password | active | none | 1.8.3 | | off |
| wp-widget-disable | active | none | 3.0.0 | | off |
| wp-2fa-premium | inactive | none | 2.8.0 | | off |
| sitepress-multilingual-cms | active | none | 4.6.13 | | off |
| wpml-string-translation | active | none | 3.2.14 | | off |
| wp-rocket | active | none | 3.16.4 | | off |
| wp-health | active | none | 2.16.1 | | off |
| 0-fortress-whitelist | must-use | none | 1.0', | | off |
| 0000000000000000000000000000-fortress-loader | must-use | none | | | off |
| kinsta-mu-plugins | must-use | none | 3.1.1 | | off |
| InitUmbrella | must-use | none | 1.0.0 | | off |
| _patchstack | must-use | none | | | off |
| _WPHealthHandlerMU | must-use | none | | | off |
| advanced-cache.php | dropin | none | | | off |
+----------------------------------------------+----------+-----------+----------+----------------+-------------+
+---------------+--------+--------+---------+----------------+-------------+
| name | status | update | version | update_version | auto_update |
+---------------+--------+--------+---------+----------------+-------------+
| kadence-child | active | none | 1.0.0 | | off |
| kadence | parent | none | 1.2.9 | | off |
+---------------+--------+--------+---------+----------------+-------------+
Third party software responsible for the issue
No response
Usage with default plugin/theme settings.
None
How can this be reproduced?
Hosting
No response
WordPress Version
No response
Fortress Version
Current Fortress Configuration
Cached Fortress Configuration
{ "modules": [ "password", "session", "auth", "rate_limit", "vaults_and_pillars", "code_freeze" ], "url_namespace": "/snicco-fortress", "cli_namespace": "fort", "db_table_namespace": "snicco_fortress", "challenges_table_name": null, "privileged_user_roles": [ "administrator", "editor" ], "theme_css_file": null, "session": { "sudo_mode_timeout": 600, "sudo_mode_timeout_per_cap": [], "idle_timeout": 1800, "idle_timeout_per_cap": [], "rotation_timeout": 1200, "rotation_timeout_per_cap": [], "absolute_timeout": 43200, "absolute_timeout_per_cap": [], "absolute_timeout_remembered_user": 86400, "absolute_timeout_remembered_user_per_cap": [], "table_name": null, "remember_cookie_name": "snicco_fortress_remember_me", "protected_pages": [ "/wp-admin/update-core.php", "/wp-admin/themes.php", "/wp-admin/theme-install.php", "/wp-admin/plugins.php", "/wp-admin/plugin-install.php", "/wp-admin/users.php", "/wp-admin/user-new.php", "/wp-admin/user-edit.php", "/wp-admin/profile.php", "/wp-admin/update.php", "/wp-admin/options-*", "/wp-admin/options.php", "/wp-admin/authorize-application.php", "/wp-admin/tools.php", "/wp-admin/import.php", "/wp-admin/export.php", "/wp-admin/site-health.php", "/wp-admin/export-personal-data.php", "/wp-admin/erase-personal-data.php", "/wp-admin/theme-editor.php", "/wp-admin/plugin-editor.php", "/snicco-fortress/auth/totp/manage*" ], "protected_capabilities": [ "administrator", "activate_plugins", "delete_plugins", "delete_themes", "delete_users", "edit_dashboard", "edit_files", "edit_plugins", "edit_theme_options", "edit_themes", "edit_users", "edit_user", "export", "import", "install_plugins", "install_themes", "manage_options", "promote_users", "remove_users", "list_users", "create_users", "switch_themes", "unfiltered_upload", "update_core", "update_plugins", "update_themes", "manage_categories", "delete_pages", "delete_private_pages", "delete_published_pages", "delete_others_pages", "delete_posts", "delete_private_posts", "delete_published_posts", "delete_others_posts", "view_site_health_checks", "install_languages", "edit_comment" ], "non_sudo_mode_recheck_frequency": 10, "disable_rotation_for_ajax_like_requests_per_cap": [] }, "auth": { "totp_secrets_table_name": null, "totp_sha_algo": "sha1", "totp_recovery_codes_locked_to_user_id": false, "skip_2fa_setup_duration_seconds": 1800, "require_2fa_for_roles": [ "administrator", "editor" ], "require_2fa_for_roles_before_login": [], "max_totp_attempts_before_lockout": 5, "magic_link_show_on_wp_login_form": true, "magic_link_allow_requesting_via_http": true }, "password": { "disable_application_passwords": false, "password_policy_excluded_roles": [], "disable_web_password_reset_for_roles": [ "administrator", "editor" ], "allow_legacy_hashes": true, "allow_legacy_hashes_for_non_passwords": true, "default_hash_strength": "moderate", "store_hashes_encrypted": false, "auto_upgrade_hashes": true, "include_pluggable_functions": true }, "rate_limit": { "storage": "auto", "cache_group": null, "device_id_cookie_prefix": "device_id", "device_id_burst": 5, "device_id_refill_one_token_seconds": 20, "username_burst": 5, "username_refill_one_token_seconds": 900, "ip_burst": 20, "ip_refill_one_token_seconds": 1800, "global_burst": 100, "global_refill_one_token_seconds": 30, "use_hashed_ips": false, "log_to_syslog": true, "syslog_daemon": "snicco_fortress", "syslog_flags": 1, "syslog_facility": 32 }, "vaults_and_pillars": { "option_pillars": [], "option_vaults": [], "strict_option_vaults_and_pillars": false }, "code_freeze": { "enabled": "auto" } }Fortress Configuration Sources
{ "server": { "name": "server", "file_path": "/etc/fortress/server.json", "file_exists": false }, "site": { "name": "site", "file_path": "/www/investorsfortacogroup_230/fortress/config.json", "file_exists": true, "content_decoded": [] } }Operating System
Is this an error/exception that occurs on Fortress managed pages?
None
Log output
Additional information
No response
Beta Was this translation helpful? Give feedback.
All reactions