Duo for WordPress plugin – Access Denied

[PC]

After migrating my site from one host to another, I started to receive a 403 error when trying to log into my site’s back-end. I hadn’t changed anything since the migration, and after doing some research, I found this: http://wordpress.org/support/topic/403-forbidden-error-page-1.

I removed the Brute Force code from my root .htaccess file, as the plugin author suggested, and I was able to access my log in screen. However, after entering the correct credentials, I keep receiving an Access denied. https://www.evernote.com/shard/s2/sh/2a52c8c5-2a30-41f6-b06a-40c2b5da7646/55e2593650af2633aceca1557be9f2b8 message.

I checked in with my hosting provider, and they confirmed that it wasn’t a permissions issue. Also, they even tried disabling the top 2 offending rules from mod_sec, to no avail.

Does anyone have suggestions on what could be causing this issue?

[AITpro Admin]

“Access Denied” is not a BPS Pro message or alert.  It is either an error message/alert from another plugin or your Host server or maybe you had Directory Password Protection setup on your old host and you still have the BasicAuth .htaccess code in your wp-admin .htaccess file from your old host.  Rename your WordPress /plugins folder and delete both your root .htaccess file and your wp-admin .htaccess file.  You should be able to login to your site now.  Rename your /plugins folder back to its original name.  If you have any login plugins or other plugins that deal with authentication then test each one to find where the problem plugin is.  BPS Pro Login Security does not display an “Access Denied” message so that message is not coming from the BPS plugin.

[PC]

Thank you for the prompt response. I’ve identified the issue “I see “Access denied. The server’s time may be out of sync.” when logging in” https://www.duosecurity.com/docs/wordpress-troubleshooting.

[Author]

Posts