[Case 46853] Not allow root login on cPanel port 2083

[monarobase]

I believe that it is since version 11.30, if I make a mistake and log into port 2083 with root user and password, I get an error saying that root does not have a guid.

The problem is that cPanel accepts the login and because of the error message the only way to log out is to close the browser and relaunch it.

I would prefer if for any logins with root user the system just said that the password was not correct.

[cPanelDavidG]

I believe that it is since version 11.30, if I make a mistake and log into port 2083 with root user and password, I get an error saying that root does not have a guid.

The problem is that cPanel accepts the login and because of the error message the only way to log out is to close the browser and relaunch it.

I would prefer if for any logins with root user the system just said that the password was not correct.

Fresh installations of cPanel&WHM (including 11.30) do not use HTTP Authentication and instead use Cookie Authentication. If you have upgraded to 11.30 from a prior version, you may want to consider switching from HTTP Authentication to Cookie Authentication via the Tweak Settings screen in WHM to prevent this from happening. Cookie Authentication is currently recommended in place of HTTP Authentication.

[monarobase]

This is with cookie login mode !

When I access https://IP:2083

I see the web form, not an htaccess form.

When I enter user : root and root's correct password I should get :

Login Attempt Failed!

As root is not allowed to log in directly to cPanel and should only have direct login capability to WHM.

But instead I get a white page with the following message :

Internal Server Error

500

Could not fetch uid or gid for : root
cpsrvd/11.30.2.1

I can not log out and have to completely close my browser and open it again to be able to log in again.

[cPanelDavidG]

Ah, you're attempting to login to the cPanel interface DIRECTLY as root (not using root overrride). That is not allowed at this time (hence the uid/gid error).

Did you want this behavior changed to allow this (contradicting the title of this thread) or a more user-friendly error message elaborating that this is not allowed? What exactly is your feature request?

[Infopro]

There is a problem here, I've just confirmed it on my server.

If I have WHM > Server Configuration > Tweak Settings, System Tab,
Accounts that can access a cPanel user account

Set to: cPanel User only

Using HTTP Authentication, then User root using root password to login to cPanel gets Login Attempt failed message.

If I disable HTTP Authentication and login to cPanel as root with root password I get internal server error. See attachment.

monarobase, you might want to open a report on this and link them to this thread.
http://go.cpanel.net/bugs

[cPanelDavidG]

There is a problem here, I've just confirmed it on my server.

If I have WHM > Server Configuration > Tweak Settings, System Tab,
Accounts that can access a cPanel user account

Set to: cPanel User only

Using HTTP Authentication, then User root using root password to login to cPanel gets Login Attempt failed message.

If I disable HTTP Authentication and login to cPanel as root with root password I get internal server error. See attachment.

monarobase, you might want to open a report on this and link them to this thread.
http://go.cpanel.net/bugs

Indeed, in that case, it would be a bug and everyone experiencing this should treat it as such.

[monarobase]

I have just submitted my bug report.

A bit confusing actually because in the past cPanel support has asked me to submit a bug as a feature request and now I have to do the opposite.

[cPanelDavidG]

I have just submitted my bug report.

A bit confusing actually because in the past cPanel support has asked me to submit a bug as a feature request and now I have to do the opposite.

Mind if I get the ID number of the bug report so I can ensure this is properly handled? Feel welcome to just PM it to me.

[monarobase]

I've just sent you the ID

[cPanelDavidG]

Thank you very much. Anyone else experiencing this issue (which is probably everyone viewing this thread as of writing) is welcome to submit a bug report, being sure to mention case 46853 this way we can notify you all via email as soon as this is resolved.

We've finally gotten this hammered out as being a bug, so I am closing this thread so all further inquiries about this can happen via the bug report system - http://go.cPanel.net/bugs