Second Root User

[GreenVine]

Hello,
I want to create a second root user for WHM, the only difference between root and second root user is second root unable to change root's password.
This is my shell command:

useradd -u 0  -o  -g root  -G root -d /home/root2 root2
root@localhost [~]# id root2
uid=0(root) gid=0(root) groups=0(root)

But when I use this account to login to WHM, it says 'Invalid login', I want to know why and how to fix that?

[GreenVine]

Anyone could help me to solve?

[cPanelTristan]

If you want a second WHM root like user, you'll have to use one created in WHM itself in WHM > Create a New Account area, then give the user all privileges in Resellers > Reseller Center > Edit Privileges/Nameservers area under "Root Access" where it has All Features (warning: total and complete access).

[GreenVine]

If you want a second WHM root like user, you'll have to use one created in WHM itself in WHM > Create a New Account area, then give the user all privileges in Resellers > Reseller Center > Edit Privileges/Nameservers area under "Root Access" where it has All Features (warning: total and complete access).

I created a account and give it root access, but I found that it can change root password. Is there anyway to disable it?

[cPanelTristan]

The WHM created user with root like privileges has access to change the root password? I didn't know that was the case.

[GreenVine]

The WHM created user with root like privileges has access to change the root password? I didn't know that was the case.

Actually I can see Change Root Password function in WHM created user, please see:
/http://imgur.com/DayOk

[cPanelTristan]

I see. I know of no way to remove that capability then, since you are providing full WHM root like access to that user from that option in the Reseller section.

Can you explain why you need a full privilege user of this nature rather than one with select jailed abilities?

[GreenVine]

I see. I know of no way to remove that capability then, since you are providing full WHM root like access to that user from that option in the Reseller section.

Can you explain why you need a full privilege user of this nature rather than one with select jailed abilities?

I want to assign this account to my technical supporter so they must get full access expect change root password.

[cPanelTristan]

Do you have physical access to the machine in the event that happened? If so, then why are you going to all this trouble? If they changed the password on you, then you have a lot more to worry about then the password being changed since they already have full access. It's easy to change the password back if you have console on the machine to do that, but the very fact if they did change it would mean they are probably doing something far worse, which they can do because of having full access already.

[GreenVine]

Do you have physical access to the machine in the event that happened? If so, then why are you going to all this trouble? If they changed the password on you, then you have a lot more to worry about then the password being changed since they already have full access. It's easy to change the password back if you have console on the machine to do that, but the very fact if they did change it would mean they are probably doing something far worse, which they can do because of having full access already.

Thanks for your reply.
This is a VPS server, I am only have access to that via KVM.

[cPanelTristan]

I'm unaware of a method to make this possible to provide WHM access to a user who has full root privileges without providing all of the WHM options. Since changing the root password is there, then you are right, it allows that to happen unfortunately.

[GreenVine]

I'm unaware of a method to make this possible to provide WHM access to a user who has full root privileges without providing all of the WHM options. Since changing the root password is there, then you are right, it allows that to happen unfortunately.

Is there anyway to disable Change Root Password function for cPanel? Even I can delete that page...
If I need change root password, I can go with SSH and do not need cPanel to help me.