cPanel Emails not asking for password???

realizment

Member
Jan 28, 2013
14
0
1
cPanel Access Level
Website Owner
Hey guys,

I just moved to a new host and since moving im having a security issue with email access. Previously on my old host i would log into cPanel, the choose email and select access webmail on the account i wished to accesss, it would then go to a page asking for password for that account.

Now on my new host, all i have to do is login to cpanel it give mes access to all accounts without asking for the individual passwords. This is a MAJOR issue for me as i employ webmasters, who i need to give cpanel access to. But i cannot have them accessing personal emails. I asked my host support and they said thats just how it is with them.

Surely there is a setting to change this is there? Pleae any help much appreciated! Thank you!
 

ruzbehraja

Well-Known Member
May 19, 2011
392
11
68
cPanel Access Level
Root Administrator
Now on my new host, all i have to do is login to cpanel it give mes access to all accounts without asking for the individual passwords. This is a MAJOR issue for me as i employ webmasters, who i need to give cpanel access to. But i cannot have them accessing personal emails. I asked my host support and they said thats just how it is with them.
This should be helpful: http://forums.cpanel.net/f43/no-web...-email-accounts-cpanel-216102.html#post892162

I wanted to add an additional note on this thread for reference to anyone who also has WHM access (rather than cPanel only account access). If you set this option in WHM > Tweak Settings:



This will allow the cPanel username login account to log into each individual email account created on that cPanel account. As such, if you do not want this ability to exist for logging into each individual email account without the password for that email account, please set this to "Off" instead in WHM's Tweak Settings area. The default is already set to "Off"

Thanks!
Your host needs to do this.
 

realizment

Member
Jan 28, 2013
14
0
1
cPanel Access Level
Website Owner

realizment

Member
Jan 28, 2013
14
0
1
cPanel Access Level
Website Owner
Basically ive been on to hostgator again and they are telling me it will affect the whole shared server and they cannot do that and he asked several admins ad they all refused. and refused to give explanation as to why its set that way. Can anyone confirm this. This is negligent to customers like me who is a site owner not developer. :(
 

Infopro

Well-Known Member
May 20, 2003
17,090
519
613
Pennsylvania
cPanel Access Level
Root Administrator
Twitter
That setting mentioned above, if disabled by HG or anyone else, is disabled, we can assume. Correct?

Then why does this work as mentioned, if that setting you need to change but can't, is disabled?
Now on my new host, all i have to do is login to cpanel it give mes access to all accounts without asking for the individual passwords.


Have you tried another browser as I mentioned?
 

realizment

Member
Jan 28, 2013
14
0
1
cPanel Access Level
Website Owner
I have confused myself. I need it to ask for the individual passwords which it is not doing. Ive spoke to several hostgator techs and admins, they know what im talking about and say they cannot change this setting as it will affect the whole server (im on a shared server) I cant see the harm as others probably want it to. ive seen threads. But 1 admin tried to say its to restrict reselling or something, others could not find out to why its like this.

Yea i tried clearing cache and using another browser. I even logged into a friends cpanel who is also with hostgator to see if it was just me having the issue. I would have thought after all these years cpanel would have an option to set up sub access accounts to restrict things like mail etc too?
 

Infopro

Well-Known Member
May 20, 2003
17,090
519
613
Pennsylvania
cPanel Access Level
Root Administrator
Twitter
they know what im talking about and say they cannot change this setting as it will affect the whole server
What setting do they know you're talking about? It seems to me, the setting, if that's the issue here, is enabled already.

Please open a ticket at the link I posted above. I can't speak for the HG team, but I do know for sure that the cPanel Technical Support team can help.
 

realizment

Member
Jan 28, 2013
14
0
1
cPanel Access Level
Website Owner
I really appreciate your help. I tried opening a ticket and i cannot because i dont have access ID. I asked HG for this and they told me i dont have access to that as a shared server client. I dont understand when you say you think it is enabled, maybe that what i need, is for it to be disabled? Im confused. I would love to know how to start ticket without a access id. infopro are you a dedicated server owner?
 

realizment

Member
Jan 28, 2013
14
0
1
cPanel Access Level
Website Owner
Ok so heres the setting in questions as some already mentioned ""Mail authentication via domain owner password"
- Allow mail account authentication using the password of the domain owner’s account"
This by default is disabled by cpanel, so the host have to change it. It has been confirmed bu cPanel staff that this would be a server wide change affecting all users on the shared hosting.

I dont really understand why it is server wide i mean if a server is capable of having multiple cpanel accounts these type of settings should be per account! Im hoping i can change hostgator mind on this and they also have the virus scanner disable too! Which is handy for the emails on the server. Bummer!
 

max_payne

Active Member
Feb 1, 2013
33
1
6
cPanel Access Level
Root Administrator
Get yourself a VPS if you are worried about shared hosting rules that you apparently want HG to break just for your convenience. Simple as that.