Cannot stay logged into cPanel

[Mazer]

I have difficulty logging into cpanel, I have used the correct passwords etc but I am continually prompted for username and password. Sometimes it will work and others it wont (using the same username/password), but when I can login any link I click will go back to prompting me.

This is happening among all hosts I use and I am sure not all of them updated the cpanel software - also no one else seems to be having this problem. So I have came to the conclusion that it must be our Network not allowing cpanel to set a cookie or session that is causing it to fail.

Can anyone list settings or network issues that might cause this to happen?

 

[Infopro]

Have you tried clearing your cache, or another browser just to try and narrow it down a bit?

 

[Mazer]

I have tried it in Firefox & Chrome I cleared browser cache in each of them, the issue is relevant to both browsers

 

[cPanelKenneth]

When this happens are you always logged in from the same computer?

 

[Mazer]

Yeh Kenneth always the same computer - my colleague has the same issue - I will try it on another network later and post the findings.

 

[cPanelKenneth]

Yeh Kenneth always the same computer - my colleague has the same issue - I will try it on another network later and post the findings.

I'm just guessing here, but it sounds like the following scenario may apply:

1. The cPanel server has the following setting enabled:

Validate the IP addresses used in all cookie based logins. This will limit the ability of attackers who capture cPanel session cookies to use them in an exploit of the cPanel or WebHost Manager interfaces. For this setting to have maximum effectiveness, proxydomains should also be disabled.

2. Your ISP aggressively changes your IP address every few seconds/minutes

3. Due to 1 and 2, you are prompted to re-authenticate frequently.

We've had a few tickets about that scenario and have introduced a change to how the validation works in 11.28. Beginning with that version we verify the IP address is in the same class C subnet as the original login.

 

[soundcomputers]

I was having a similar problem with a cpanel from a site I just started hosting, but with the old ones, I was able to stay logged in the whole time. I only use firefox normally, but i tested it in IE and opera, same result. Should i look into it farther or will i just need to keeping re-logging every 10 minutes or so?

 

[Mazer]

The issue was rapidly circulating IP addresses - I apologize for this taking a while to reply. The network admin has given us a static IP address and the issue is resolved.

Thanks for all your help.