Access Denied from Admin Network

[MrDylan]

Hi,

The APS software is installed on the Curriculum servers, which have an IP range looking like 192.168.x.x

The Exams Officer sits on the Admin network, which uses an IP range of 10.15.x.x

Now when anyone from the Admin network tries to access the site they receive a "You are not authorised to view this page" error.

What do?
Is there any way to enable access from mulitple IP ranges?
Could I just change the restiction via subnet?
How can I even get to changing how this is setup without a reinstall?

Let me know if you need any more info and I'll try get it.

Thanks for any help,

Dylan.

[shahidemran]

I think during installation when u define subnet mask then it give u the accessable IP range accoring to your subnet mask. The short cut you can use is the Windows XP remote desktop either use Server or dedicated machine.

[MrDylan]

Thing is when I installed it I thought it would only be accessed from the Curriculum Network, so the accessible range then was fine.

Now it needs to be accessed from both networks that's no longer the case and I need to change it.

[ChrisH]

Are the admin and curriculum networks on different physical networks?
To have a presence on both networks the easiest thing will be to put another network card in the server configured with the admin range and maybe put in a manual DNS record in your admin server side DNS.
There are ofc all the usual security issues to take into account by doing this...

[MrDylan]

The two servers used to be totally seperate physically, but now they are accessible using vLANs, though the two networks have different IP ranges.

There is other web based (though not secure site) resources on the same server which are accessible from both networks with no problems.

[MrDylan]

I thought I'd put this in the original post but it seems not.

When I installed the software and I entered the IP range which could have access it was only given the Curriculum range, i think that's the problem but I don't know of any way to get to add any more range to it now circumstances have cahnged.

[SteveT]

If you go to the KS3 support site there is a page of instructions on altering IP address ranges. I had to do and it`s straightforward enough. You`ll find the appropriate info under the knowledge base article "How will changing my network's IP range affect my KS3 ICT testing software".

[MrDylan]

Thanks Steve T that looks promising.

I’ve looked through the KnowledgeBase Article titled “How will changing my network’s IP range affect my KS3 ICT testing software” and have gotten to step 7 of editing the server.xml file but am not sure how to change it.

It currently looks as below:

allow="(^127\.0\.0\.1$)|(^(((192))\.((168))\.(([0-9])|([1-9][0-9])|(1[0-9][0-9])|(2[0-4][0-9])|(25[0-5]))\.(([0-9])|([1-9][0-9])|(1[0-9][0-9])|(2[0-4][0-9])|(25[0-5])))$)"/>

I presume this is telling it the current IP settings using the Curriculum Network.

I need to add in the Admin Network which uses IP addresses of 10.15.x.x

I'm completely useless at code, what should the line look like?


Thanks,

Dylan

[Geoff]

its a regexp.

[MrDylan]

Done it )

The Knowledgebase article explains that you can change it to a - what I'd call a normal - way of writing the IP, so that's all I did for all localhost, Curriculum and Admin.

I also ran the keys.bat file from the website to regenerate the Security Certificate and restarted the Tomcat service and all works nicely now.

Thanks for all your help people, especially SteveT.