Clef + Sucuri = 404 page after login

  • Resolved puregraphx

    (@puregraphx)


    7 years, 2 months ago

    We have Clef 2.6.1. and Sucuri 1.8.3. installed and some days ago, our client reported that he could no longer log in to the site, that he was always redirected to a 404 page. But as soon as we disable the Sucuri plugin, login via Clef works fine.

    If we enable Sucuri, we are redirect to an url like https://www.tomsgates.com/wp-login.php?state=xxxx&code=xxxxxx&clef=true

    We then receive 2 emails, 1 Success login from the correct user and IP, 1 Failed Login form the same IP but user Unknown.

    Login with Password results in a HTTP 500 error.

Viewing 5 replies - 1 through 5 (of 5 total)
  • Eve

    (@evahost)

    7 years, 2 months ago

    Hi puregphx,

    I’m sorry for the trouble. I installed Clef and was able to log in and out of my site just fine with the Sucuri plugin installed. I wasn’t able to reproduce the error. Have you done any hardening or other security measures that might be coming into play here?

    Have you checked error logs for the 500 server error?

    Thanks,
    Eve

    Thread Starter puregraphx

    (@puregraphx)

    7 years, 2 months ago

    The error looks like

    78.23.211.240 – – [14/Feb/2017:12:19:48 +0100] “GET /wp-login.php?state=xxxx&code=xxxx&clef=true HTTP/1.0” 500 20 “https://www.tomsgates.com/wp-login.php?loggedout=true” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36”

    We have disabled the iThemes Security plugin and kept Clef + Sucuri, the login problem still exists. Login via Clef = 404, login via pwd = 500 error

    Thread Starter puregraphx

    (@puregraphx)

    7 years, 1 month ago

    Any update on this please?

    Eve

    (@evahost)

    7 years, 1 month ago

    I was not able to reproduce this issue. And it looks like Clef is shutting down.

    yorman

    (@yorman)

    7 years ago

    Hello @puregraphx as my coworker mentioned, Clef is shutting down their service [1][2]. Clef will stop working on June 6, 2017 and they are recommending their users to transition to another form of two-factor authentication as soon as possible. Considering this, it makes no sense to address this issue.

    Marking as resolved, feel free to re-open if you have more questions.

    [1] https://getclef.com/
    [2] https://blog.getclef.com/discontinuing-support-for-clef-6c89febef5f3

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Clef + Sucuri = 404 page after login’ is closed to new replies.