Access control - ideas needed

[brendonhatcher]

Hi

I run a web development company.
We are taking on student interns.
I see no choice but to give them root access to WHM, and full Cpanel access for each account.

Ideally I want to give each student their own usernames and passwords, but this is impractical (6 students x 200 accounts), and WHM appears to only allow 1 root user anyway.

I can't use a solution that involves IP blocking - in South Africa, almost all IPs are dynamically assigned, and the students work from different locations (home, college, girlfriend's house etc).

I thought of making a "gateway" site.
Each user has an individual login to that site.
The site has a link to WHM and cpanel that carries the username and password in some hidden way.
However, I doubt that I could do that in a way that maintains security and is impossible for the students to break through (they are programming students, after all).

Can anyone suggest an approach?

Thanks
Brendon

[Spiral]

I got one word for you "reseller"

[brendonhatcher]

Hi Spiral

Thanks for responding.

This would involve moving all me accounts to the reseller account?
I have 6 interns and each needs their own password.
Can all 6 resellers access all accounts?

Thanks
Brendon

[Spiral]

Hi Spiral

Thanks for responding.

This would involve moving all me accounts to the reseller account?
I have 6 interns and each needs their own password.
Can all 6 resellers access all accounts?

Thanks
Brendon

You wanted to know how to create multiple "root" accounts in WHM ....

Well that can be done by creating a "reseller" login and then enabling "root" access in the permissions and configuration for that specific reseller account and then the new login will work the same as "root" when you login to WHM.

An alternative if you don't want to open up full root access is to change the ownership of the accounts that you want the new login to be able to manage to be owned by that specific reseller and then the new login won't have full root but still be able to manage the accounts.