Institutional Subscriber Access

radjr · November 29, 2018, 9:47pm

Question please. If we enroll as an institutional user eg [Home] [User] [Journal Management] [Enrollment] with IP based access (outside those IP ranges) should we be able to get access to the content as the enrolled user?

Thanks

ctgraham · December 6, 2018, 1:51pm

Can you describe this a bit more?

In OJS 2.x the concept of Users is distinct from Subscriptions.

User Home → Journal Manager → Enrollment will allow you to manage Users. These users are not connected to IP based access.

User Home → Subscription Manager will allow you to manage Subscriptions. Institutional Subscriptions are tied to IP based access and are connected to users only as a Subscription Contact.

radjr · December 6, 2018, 3:04pm

Thanks.

We are having some issues with IP based access for institutional subscriptions. The user cannot get access through the IP range they sent us but are able to access the subscription via the username and password that is attached to the subscription. So OJS 2.x seems to deprecate from institutional to some in limbo access even though a individual subscription has not been created. Customer tested this by using their username and password to access the journal. They sent a screen shot of access but they cannot get cannot get access to articles. When they try to open PDFs, they get sent to the pay-per-view screen.

One side note, is there a tool that is best used to support customers and collect their real IP addresses? In debugging we use tracert but it will show several intermediate IPs. Thanks!

ctgraham · December 6, 2018, 3:26pm

You will want to use the webserver access logs to identify what IP address the client is using.

You can also ask the user to Google “what is my IP” or visit a website like https://www.whatismyip.com/ to display their IP to the screen. You can’t, however, be guaranteed that the IP the user is presenting to Google or two this other website is the same IP presented to your system. The IP address recorded in your access logs will be authoritative.

Exception to the above: If your server is behind a reverse proxy, the IP presented to your server on behalf of the user may be your own proxy’s IP. In this case, the proxy is probably also presenting you an additional HTTP header “x-forwarded-for” which represents the user’s IP. If this is the case, be sure the config.inc.php option trust_x_forwarded_for is On:

github.com

pkp/ojs/blob/823633016fb6e41458e9a82920b8029332df49bb/config.TEMPLATE.inc.php#L93-L96


; Allow the X_FORWARDED_FOR header to override the REMOTE_ADDR as the source IP
; Set this to "On" if you are behind a reverse proxy and you control the X_FORWARDED_FOR
; Warning: This defaults to "On" if unset for backwards compatibility.
trust_x_forwarded_for = Off

On the other hand, if you are receiving an x-forwarded-for header from an unexpected source (like an upstream EZProxy server), be sure to explicitly turn Off trust_x_forwarded_for in your config.inc.php.

radjr · December 6, 2018, 9:59pm

Thanks Clinton.

The real sequence of events was as follows:

User was created
User was connect to an institutional subscription
User was added as a subscription manager (Incorrectly)
User was removed from the subscription manger role.
User was added as a reader.
User could not access content via IP access.
User could not access content via username access.

Looks like removing the person as sub manager set some flag somewhere that blocks access.

Bottom line question is can the “Subscription Contact Person” log into the system and get access to content. My guess is NO unless we create an “Individual” subscription for them.

ctgraham · December 7, 2018, 1:34pm

I would expect that IP access (Institutional Subscription configuration) would allow access to content regardless of whether the user is logged in or logged out.

In other words, if an Institutional Subscription grants me access from my IP, I would not expect to lose access if I logged in but did not have a specific individual subscription.

If it is functioning this way, that seems like a bug. Does the user gain access to the content by IP on the same computer if they simply log out from OJS?

radjr · December 7, 2018, 2:32pm

Thanks Clinton. In this case, the user had IP based access with the subscription manager role (mistake on our part). When we removed them from the role, they no longer had access. They also tried access via username password and that did not work. (no individual subscription was set so this makes sense.)

So, the concern is what flag is being changed when someone is removed as a subscription manager that denies them access. I appreciate your help on this one.

ctgraham · December 7, 2018, 4:32pm

The Subscription Manager role is a high level management role similar to Journal Manager and Editorial roles. Journal Managers, Subscription Managers, and Editors will always have access to the published articles when logged in. This is unrelated to any Institutional Subscription by IP address.

radjr · December 7, 2018, 5:02pm

So maybe this is a case where IP access never worked and they are were set up for subscription manager which gained them access?

Here are a few lines from the access log and the error log for their IP. Have you ever seen the referring URL hammer create these errors? Is seems that content in open access is ok but that which is not open access fails. I am at a loss to understand why. But if for some reason referring URL access is enabled would this happen? The IP range is: 216.54.146.0-216.54.146.255 and 165.171.240.0-165.171.240.255

Appraently successful:

165.171.240.51 - - [07/Dec/2018:08:40:45 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive HTTP/1.1” 302 540 “http://web.a.ebscohost.com/pfi/results?vid=1&sid=ebe3f754-ebae-4da8-9c11-54c91f512a7a%40sdc-v-sessmgr01&bquery=(Journal+AND+“of”+AND+Opioid+AND+Management)&bdata=JmRiPWVkc3B1YiZ0eXBlPTQ0JnNpdGU9cGZpLWxpdmUmc2NvcGU9c2l0ZQ%3D%3D” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:10:38:03 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive HTTP/1.1” 302 540 “http://web.b.ebscohost.com/pfi/results?vid=6&sid=d416cb6c-70d5-46bf-bb10-59ee41b51282%40sessionmgr103&bquery=(Journal+AND+“of”+AND+Opioid+AND+Management)&bdata=JmRiPWVkc3B1YiZ0eXBlPTQ0JnNpdGU9cGZpLWxpdmUmc2NvcGU9c2l0ZQ%3D%3D” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:10:56:13 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive HTTP/1.1” 302 540 “http://web.b.ebscohost.com/pfi/results?vid=6&sid=d416cb6c-70d5-46bf-bb10-59ee41b51282%40sessionmgr103&bquery=(Journal+AND+“of”+AND+Opioid+AND+Management)&bdata=JmRiPWVkc3B1YiZ0eXBlPTQ0JnNpdGU9cGZpLWxpdmUmc2NvcGU9c2l0ZQ%3D%3D” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:10:58:03 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive HTTP/1.1” 302 540 “http://web.b.ebscohost.com/pfi/results?vid=6&sid=d416cb6c-70d5-46bf-bb10-59ee41b51282%40sessionmgr103&bquery=(Journal+AND+“of”+AND+Opioid+AND+Management)&bdata=JmRiPWVkc3B1YiZ0eXBlPTQ0JnNpdGU9cGZpLWxpdmUmc2NvcGU9c2l0ZQ%3D%3D” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”

Errors:

ctgraham · December 7, 2018, 7:01pm

The IP range and the IP addresses in the access log seem to match.

Is this a selective excerpt from the access log? Each of the lines listed is a request for the “Archives” page, and the server has responded with a “302” redirect. I’d expect to see another line representing what page the user was redirected to by that 302 response.

What specific version of OJS are you running? Your filesystem path suggests OJS 2.4.2, but the “ScheduledTaskDAO.inc.php” file referenced in your error log was introduced in OJS 2.4.3.

The error message itself seems to be (perhaps?, version depending) related to the following comparison, which is trying to determine if the Acron plugin needs to run scheduled tasks:

github.com

pkp/pkp-lib/blob/ad17dd567068aa7b50f6931edda5617ae6558f8f/classes/scheduledTask/ScheduledTaskHelper.inc.php#L113


			$day = $frequency->getAttribute('day');
			if (isset($day)) {
				$isValid = ScheduledTaskHelper::_isInRange($day, (int)date('j'), $lastRunTime, 'day', strtotime('-1 month'));
			}
		}

		if ($isValid) {
			// Check hour
			$hour = $frequency->getAttribute('hour');
			if (isset($hour)) {
				$isValid = ScheduledTaskHelper::_isInRange($hour, (int)date('G'), $lastRunTime, 'hour', strtotime('-1 day'));
			}
		}

		if ($isValid) {
			// Check minute
			$minute = $frequency->getAttribute('minute');
			if (isset($minute)) {
				$isValid = ScheduledTaskHelper::_isInRange($minute, (int)date('i'), $lastRunTime, 'min', strtotime('-1 hour'));
			}
		}

This is unlikely to be directly related to your access problem.

radjr · December 7, 2018, 7:08pm

Thanks Clinton. Those were all the log entries for that IP address in the access log. Version is 2.4.8.1

As for the error messages Here is the complete log related to that IP. Looks to me like the request links are failing. What do you think? Thanks, radjr

ctgraham · December 7, 2018, 9:07pm

These errors are just “warnings” letting you know that you need to configure the date.timezone setting in your php.ini settings. This will not cause processing to stop.

The 302s in the access log are from your HTTP accesses. There is another access log dedicated to your HTTPS accesses. You’ll find the corresponding 200 (success) request for the /issue/archive/ URL there, as well as other successful or failed requests for this IP.

radjr · December 7, 2018, 10:37pm

Thanks Clinton. Checking!

radjr · December 7, 2018, 10:49pm

Here is the SSL access log details for this IP. We even tried killing the subscription and creating a new one with a new contact person and the same thing happens. The get to the paywall for articles. Thank you for your help!

[root@ip-50-63-57-165 logs]# grep “165.171.240” access_ssl_log >> results_access_ssl
[root@ip-50-63-57-165 logs]# vi results_access_ssl
165.171.240.51 - - [07/Dec/2018:14:47:31 -0500] “GET /ojs-2.4.2/index.php/jom/login?source=%2Fojs-2.4.2%2Findex.php%2Fjom%2Farticle%2Fview%2F2271%2F2323&loginMessage=payment.loginRequired.forArticle?acceptCookies=1?acceptCookies=1?acceptCookies=1 HTTP/1.1” 302 6150 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/login?source=%2Fojs-2.4.2%2Findex.php%2Fjom%2Farticle%2Fview%2F2271%2F2323&loginMessage=payment.loginRequired.forArticle?acceptCookies=1?acceptCookies=1” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:47:31 -0500] “GET /ojs-2.4.2/index.php/jom/user HTTP/1.1” 200 25654 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/login?source=%2Fojs-2.4.2%2Findex.php%2Fjom%2Farticle%2Fview%2F2271%2F2323&loginMessage=payment.loginRequired.forArticle?acceptCookies=1?acceptCookies=1” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:47:37 -0500] “GET /ojs-2.4.2/index.php/jom/user?acceptCookies=1 HTTP/1.1” 200 24355 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/user” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:47:47 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/2271/2323 HTTP/1.1” 200 25850 “-” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:48:35 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/2010/2052 HTTP/1.1” 200 34732 “-” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:48:38 -0500] “GET /ojs-2.4.2/index.php/jom/article/download/2010/2052 HTTP/1.1” 200 451295 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/article/view/2010/2052” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:56:03 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/2271/2323 HTTP/1.1” 200 25850 “-” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:56:18 -0500] “GET /ojs-2.4.2/index.php/jom/login/signOut HTTP/1.1” 302 6324 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/article/view/2271/2323” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:56:19 -0500] “GET /ojs-2.4.2/index.php/jom/login HTTP/1.1” 200 24756 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/article/view/2271/2323” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:56:30 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/2271/2323 HTTP/1.1” 302 6137 “-” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:14:56:30 -0500] “GET /ojs-2.4.2/index.php/jom/login?source=%2Fojs-2.4.2%2Findex.php%2Fjom%2Farticle%2Fview%2F2271%2F2323&loginMessage=payment.loginRequired.forArticle HTTP/1.1” 200 26574 “-” “Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko”
165.171.240.51 - - [07/Dec/2018:15:42:13 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive HTTP/1.1” 200 33422 “http://web.b.ebscohost.com/pfi/results?vid=5&sid=55481d5e-8195-47f3-b5d9-5dd315150771%40pdc-v-sessmgr02&bquery=(Journal+AND+“of”+AND+Opioid+AND+Management)&bdata=JmRiPWVkc3B1YiZ0eXBlPTQ0JnNpdGU9cGZpLWxpdmUmc2NvcGU9c2l0ZQ%3D%3D” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:42:14 -0500] “GET /ojs-2.4.2/public/site/images/radjr/ICOO2019_Logo_Drop_Basic_OPAQUE_Date_BLUE_250x113.jpg HTTP/1.1” 304 5817 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:42:16 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive?acceptCookies=1 HTTP/1.1” 200 32031 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:42:36 -0500] “POST /ojs-2.4.2/index.php/jom/login/signIn HTTP/1.1” 302 6611 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive?acceptCookies=1” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:42:37 -0500] “GET /ojs-2.4.2/index.php/jom/login/changePassword/ohiohealth HTTP/1.1” 200 25744 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive?acceptCookies=1” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:42:38 -0500] “GET /ojs-2.4.2/lib/pkp/styles/lib/jqueryUi/images/ui-bg_glass_85_dfeffc_1x400.png HTTP/1.1” 200 600 “https://www.wmpllc.org/ojs-2.4.2/lib/pkp/styles/lib/jqueryUi/jqueryUi.css” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:42:38 -0500] “GET /ojs-2.4.2/lib/pkp/templates/images/throbber.gif HTTP/1.1” 200 8539 “https://www.wmpllc.org/ojs-2.4.2/styles/compiled.css” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:43:17 -0500] “GET /ojs-2.4.2/lib/pkp/styles/lib/jqueryUi/images/ui-bg_glass_75_d0e5f5_1x400.png HTTP/1.1” 200 6154 “https://www.wmpllc.org/ojs-2.4.2/lib/pkp/styles/lib/jqueryUi/jqueryUi.css” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:43:17 -0500] “GET /ojs-2.4.2/lib/pkp/styles/lib/jqueryUi/images/ui-bg_inset-hard_100_f5f8f9_1x100.png HTTP/1.1” 200 6096 “https://www.wmpllc.org/ojs-2.4.2/lib/pkp/styles/lib/jqueryUi/jqueryUi.css” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:43:18 -0500] “POST /ojs-2.4.2/index.php/jom/login/savePassword HTTP/1.1” 302 6199 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/login/changePassword/ohiohealth” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:43:18 -0500] “GET /ojs-2.4.2/index.php/jom/user HTTP/1.1” 200 24122 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/login/changePassword/ohiohealth” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:43:25 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive HTTP/1.1” 200 31643 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/user” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:43:40 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive?issuesPage=2 HTTP/1.1” 200 31795 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:43:46 -0500] “GET /ojs-2.4.2/index.php/jom/issue/view/25 HTTP/1.1” 200 35977 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive?issuesPage=2” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:43:54 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/80/59 HTTP/1.1” 200 25632 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/view/25” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:44:53 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive HTTP/1.1” 200 31643 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/article/view/80/59” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:44:57 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive?issuesPage=2 HTTP/1.1” 200 31795 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:45:03 -0500] “GET /ojs-2.4.2/index.php/jom/issue/view/25 HTTP/1.1” 200 35977 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive?issuesPage=2” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:45:09 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/80/59 HTTP/1.1” 200 25632 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/view/25” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:45:12 -0500] “GET /ojs-2.4.2/index.php/jom/issue/view/25 HTTP/1.1” 200 35977 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive?issuesPage=2” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:45:18 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/80 HTTP/1.1” 200 39306 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/view/25” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:45:23 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/80/59 HTTP/1.1” 200 25632 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/article/view/80” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:46:53 -0500] “GET /ojs-2.4.2/index.php/jom/issue/archive HTTP/1.1” 200 31643 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/article/view/80/59” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:46:58 -0500] “GET /ojs-2.4.2/index.php/jom/issue/view/27 HTTP/1.1” 200 33177 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/archive” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
165.171.240.51 - - [07/Dec/2018:15:47:06 -0500] “GET /ojs-2.4.2/index.php/jom/article/view/115/93 HTTP/1.1” 200 25635 “https://www.wmpllc.org/ojs-2.4.2/index.php/jom/issue/view/27” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36”
~

ctgraham · December 10, 2018, 2:06pm

Do other users have access via the institutional subscription? If not, then we’ll want to revisit the subscription or the config.inc.php settings.

If others can use the institutional subscription by IP, then we’ll need to look at more details for the user. Does a different browser work?

mikeb · March 24, 2020, 10:43am

Having same problems here.
If, read, can you let us know what the solution was?

radjr · March 24, 2020, 1:12pm

The result is in the thread. It was an IP issue. We are having issues with people accessing their subscriptions outside their network IP block. To get around that, we needed to create an individual subscription for that user in addition to their site license.

Clinton, please confirm the following: 1) We need an individual sub to enable username/password access to OJS. 2) If the individual sub expires, that indv. expired subscription blocks access. (This is what we saw) 3) Is there a better want to handle off premises/off network subscriber access in pay journals?

Thank you.