Results 1 to 10 of 10

Thread: security token missing logging into cpanel

  1. #1
    Registered User
    Join Date
    Oct 2010
    Posts
    2

    Default security token missing logging into cpanel

    Hello there,

    i wonder if someone can help me, i keep getting a security token missing error when i go to the logon page in cpanel, it only started today or certainly in the last 3 days but it seems to be having an effect on password protected directorys, anyone else seen this before ?

  2. #2
    cPanel Staff cPanelTristan's Avatar
    Join Date
    Oct 2010
    Location
    somewhere over the rainbow
    Posts
    7,609
    cPanel/WHM Access Level

    Root Administrator

    Default

    Please try unchecking this in WHM > Tweak Settings:

    Require security tokens for all interfaces. This will greatly improve the security of cPanel and WHM against XSRF attacks, but may break integration with other systems, login applications, billing software and third party themes.
    cPResources: Support Options | More Support Options | Forums Search | cPanel.net Site Search | Mailing Lists(Alt) | Docs
    -- Tristan, Technical Analyst III, Forums Specialist, cPanel Tech Support

    Submit a ticket | Check an existing ticket

  3. #3
    cPanel Quality Assurance Analyst cPanelDon's Avatar
    Join Date
    Nov 2008
    Location
    Houston, Texas, U.S.A.
    Posts
    2,554
    cPanel/WHM Access Level

    DataCenter Provider

    Default

    Quote Originally Posted by andy_pajerotdi View Post
    Hello there,

    i wonder if someone can help me, i keep getting a security token missing error when i go to the logon page in cpanel, it only started today or certainly in the last 3 days but it seems to be having an effect on password protected directorys, anyone else seen this before ?
    The security token option, as enabled or disabled via WebHost Manager, will only affect access to cPanel, WHM, and Webmail; it should not under any circumstances affect password-protected directories that are accessed through Apache/httpd.

    Please elaborate into further detail about what you are seeing that indicates an affect on password protected directories; any additional information that you can provide should help us to better identify the difficulty.

  4. #4
    Registered Member
    Join Date
    Apr 2005
    Posts
    246

    Default Re: security token missing logging into cpanel

    I ended up setting Security Tokens to "ON". Now I am logged out of my WHM altogether. How can I disable it from the command line (ssh) or something so that I can see my WHM again? Thanks!

  5. #5
    cPanel Staff cPanelTristan's Avatar
    Join Date
    Oct 2010
    Location
    somewhere over the rainbow
    Posts
    7,609
    cPanel/WHM Access Level

    Root Administrator

    Default Re: security token missing logging into cpanel

    You would need to edit /var/cpanel/cpanel.config file for this line:

    Code:
    xsrftokens=1
    Please change the 1 to a 0, then save the file. At that point, run the following command to push the changes:

    Code:
    /usr/local/cpanel/whostmgr/bin/whostmgr2 --updatetweaksettings
    cPResources: Support Options | More Support Options | Forums Search | cPanel.net Site Search | Mailing Lists(Alt) | Docs
    -- Tristan, Technical Analyst III, Forums Specialist, cPanel Tech Support

    Submit a ticket | Check an existing ticket

  6. #6
    Registered Member
    Join Date
    Jul 2002
    Posts
    415

    Default Re: security token missing logging into cpanel

    Although this is an old thread, I have been facing this issue with my servers. I have the "Security Tokens [?]" as OFF and even then I get this "WHM Login Security" warning many a times a day.

    Every time I have to login via shell and edit this file /var/cpanel/cpanel.config as mentioned by Tristan.

    Is there a permanent solution for this ?

  7. #7
    cPanel Staff cPanelTristan's Avatar
    Join Date
    Oct 2010
    Location
    somewhere over the rainbow
    Posts
    7,609
    cPanel/WHM Access Level

    Root Administrator

    Default Re: security token missing logging into cpanel

    The setting keeps reverting? If it is reverting, then some cron job is likely replacing your settings with some other settings. Have you tried changing it in WHM as well to see if it stays with that new option?

    I know of one specific hosting provider who cron pushes daily /var/cpanel/cpanel.config to all their machines (or they used to). This was causing untold issues such as DNS clustering sync issues where their nameservers were having a high number of re-sync processes due to pushing that file daily. If anyone is cron setting it to be changed daily for some reason, that will cause a slew of issues.
    cPResources: Support Options | More Support Options | Forums Search | cPanel.net Site Search | Mailing Lists(Alt) | Docs
    -- Tristan, Technical Analyst III, Forums Specialist, cPanel Tech Support

    Submit a ticket | Check an existing ticket

  8. #8
    Registered Member
    Join Date
    Jul 2002
    Posts
    415

    Default Re: security token missing logging into cpanel

    Hello Tristan,

    Yes, WHM is set to OFF, but many a times during the day it gives me a warning message and I have to manually set it to 0 ( zero) to get it back working and we do not have a cron set for this

    Thank you

  9. #9
    cPanel Staff cPanelTristan's Avatar
    Join Date
    Oct 2010
    Location
    somewhere over the rainbow
    Posts
    7,609
    cPanel/WHM Access Level

    Root Administrator

    Default Re: security token missing logging into cpanel

    Please submit a ticket about this issue. If it keeps changing to 1 in that file, something is causing that to happen.
    cPResources: Support Options | More Support Options | Forums Search | cPanel.net Site Search | Mailing Lists(Alt) | Docs
    -- Tristan, Technical Analyst III, Forums Specialist, cPanel Tech Support

    Submit a ticket | Check an existing ticket

  10. #10
    Registered Member
    Join Date
    Jul 2002
    Posts
    415

    Default Re: security token missing logging into cpanel

    I'' do that, Thank you

Similar Threads

  1. Replies: 88
    Last Post: 12-11-2013, 03:17 PM
  2. Replies: 1
    Last Post: 10-30-2013, 10:47 AM
  3. Replies: 3
    Last Post: 07-25-2013, 11:02 AM
  4. Replies: 55
    Last Post: 07-01-2013, 12:35 AM
  5. security token missing
    By allaner in forum Security
    Replies: 1
    Last Post: 12-09-2011, 12:52 PM
bargain