The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

cPanel Login Box/Prompt (HTTP Auth Popup Window versus Cookie Auth Web-based Form)

Discussion in 'General Discussion' started by tjmoore, Jan 6, 2010.

  1. tjmoore

    tjmoore Member

    Joined:
    Jun 23, 2005
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    Hi
    I've deployed another cPanel server, I've configued it and its working fine apart from when you login.

    Instead of this, the drop down login box: thecorrectloginbox.png (see below)

    I get this instead, the basic html login box: wrongloginbox.png (see below)


    I'm sure I've checked the wrong box somewhere but I just cant find it!

    Any help appreciated.
     

    Attached Files:

  2. madaboutlinux

    madaboutlinux Well-Known Member

    Joined:
    Jan 24, 2005
    Messages:
    1,052
    Likes Received:
    2
    Trophy Points:
    38
    Location:
    Earth
    The first one doesn't look like a wrong login box... it's just that it's not popping up a new box. You will be able to login fine using either of the login window.
     
  3. tjmoore

    tjmoore Member

    Joined:
    Jun 23, 2005
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    I know its not wrong but I would prefer the pop up login box, I just cant understand why its not popping up :confused:
     
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,482
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    It looks to me like one is for cPanel one is for WHM. Either way, check your Tweak Settings Page > Redirection settings, against the other server. I think that's what you are looking for.
     
  5. tjmoore

    tjmoore Member

    Joined:
    Jun 23, 2005
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    Thats what I thought it was, tried it still doesn't want to work, this is what I have in the redirection panel:

    Always redirect users to the ssl/tls ports when visiting /cpanel, /webmail, etc. - Check

    When visiting /cpanel or /whm or /webmail WITHOUT SSL, you can choose to redirect to: Origin Domain Name

    When visiting /cpanel or /whm or /webmail with SSL, you can choose to redirect to: Origin Domain Name
     
  6. mocollin

    mocollin Member

    Joined:
    Dec 19, 2009
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    Is this 11.25? If so check this setting under "Tweak Settings" in WHM.

    "Disable Http Authentication for cPanel/WebMail/WHM Logins (forces cookie authentication.) This will help prevent certain types of XSRF attacks that rely on cached Http Auth credentials."

    If it is checked, it won't use HTTP Auth for logins.
     
  7. tjmoore

    tjmoore Member

    Joined:
    Jun 23, 2005
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    It worked!
    Thanks
     
  8. nyubi

    nyubi Registered

    Joined:
    Jan 15, 2010
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    how to disable pop-up in webmail login?

    im a newbie on site hosting and i have a question : how to disable a pop-up on webmail login, can please someone enlight me ?

    logic support @ this thread http://forums.cpanel.net/f34/how-create-webmail-login-web-page-126337.html

    answer : "From WHM >> Server Configuration >> Tweak Settings >>

    Disable Http Authentication for cPanel/WebMail/WHM Logins (forces cookie authentication)

    'Tick' the above option .

    It will Skip HTTP Authentication and pop-up window will not appear . "

    but in my cpanel i dont find any server configuration :confused: or what is WHM ? :D

    note: im not replying that thread because it quite old (back on oct)
     
  9. nyubi

    nyubi Registered

    Joined:
    Jan 15, 2010
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Emailed support guys at my hosting and they reply :

    Accept my apologies, it turned out cPanel currently does not allow to remove the pop-up login window.

    I'd advice you to use some mail client in order to access mail via cellphone, you can find more info regarding this matter on web.


    Seem they running modified cpanel ?
     
  10. DWHS.net

    DWHS.net Well-Known Member
    PartnerNOC

    Joined:
    Jul 28, 2002
    Messages:
    1,569
    Likes Received:
    6
    Trophy Points:
    38
    Location:
    LA, Costa RIca
    cPanel Access Level:
    Root Administrator
    The pop up login box is gone?

    When I login to cpanel or WHM on some servers it goes right to the cpanel login page. How can I get the htaccess pop up login back?
     
  11. Miraenda

    Miraenda Well-Known Member

    Joined:
    Jul 28, 2004
    Messages:
    242
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Coralville, Iowa USA
    The option that determines if you receive a popup box or a login page is this one in WHM > Tweak Settings area under Security there:

    Disable Http Authentication for cPanel/WebMail/WHM Logins (forces cookie authentication.) This will help prevent certain types of XSRF attacks that rely on cached Http Auth credentials.

    If it is checked, you will have a login page without a popup box. If it is unchecked, you will have a popup box. It is more secure to have it checked and a login page.
     
  12. DWHS.net

    DWHS.net Well-Known Member
    PartnerNOC

    Joined:
    Jul 28, 2002
    Messages:
    1,569
    Likes Received:
    6
    Trophy Points:
    38
    Location:
    LA, Costa RIca
    cPanel Access Level:
    Root Administrator
    Thanks, good to know. I will just disable it for all logins then.
     
  13. delphiman

    delphiman Member

    Joined:
    Jan 4, 2007
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Cpanel and WHM not prompting for login

    I don't know what I did but now everytime I go to my WHM site or Cpanel site, it does not prompting for username and password anymore. BUT is still showing the web based login windows page

    Can you show me how to get my prompting back?
     
  14. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,482
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    You might try this:
    WHM > Server Configuration > Tweak Settings > Redirection section.

    Always redirect users to the ssl/tls ports when visiting /cpanel, /webmail, etc. checked.

    When visiting /cpanel or /whm or /webmail WITHOUT SSL, you can choose to redirect to: Hostname.

    When visiting /cpanel or /whm or /webmail with SSL, you can choose to redirect to: SSL Cerificate Name.

    And save it.


    If you don't have access to these settings you'll need to speak to your host.
     
  15. cPanelDon

    cPanelDon cPanel Quality Assurance Analyst
    Staff Member

    Joined:
    Nov 5, 2008
    Messages:
    2,557
    Likes Received:
    7
    Trophy Points:
    38
    Location:
    Houston, Texas, U.S.A.
    cPanel Access Level:
    DataCenter Provider
    Twitter:
    If the pop-up login prompt is not shown it sounds like HTTP authentication may be disabled; if it is disabled this means that cookie authentication will be used with a web-based login form.

    The authentication method may be toggled using WHM via the following menu paths:

    In cPanel version 11.25.1:
    WHM: Main >> Server Configuration >> Tweak Settings >> Security
    • Enable HTTP Authentication [?] Enable HTTP Authentication for cPanel/WebMail/WHM Logins. This risks certain types of XSRF attacks that rely on cached HTTP Auth credentials. Disabling forces cookie authentication.

    In cPanel version 11.25.0:
    WHM: Main >> Server Configuration >> Tweak Settings >> Security
    • Disable HTTP Authentication for cPanel/WebMail/WHM Logins (forces cookie authentication.) This will help prevent certain types of XSRF attacks that rely on cached HTTP Auth credentials.
     
    #15 cPanelDon, Jul 15, 2010
    Last edited: Jul 15, 2010
  16. Nu11

    Nu11 Registered

    Joined:
    Jul 15, 2010
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    www.domain.tld/cpanel and all other users no popup

    Hi,

    www.domain.tld/cpanel

    for some reason it isn't loading popup, its going directly to login page

    do you know why its doing this?
     
    #16 Nu11, Jul 15, 2010
    Last edited by a moderator: Jul 15, 2010
  17. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,482
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    OOPS sorry for the wrong details above. Just noticed..
     
  18. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,482
    Likes Received:
    203
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
  19. Nu11

    Nu11 Registered

    Joined:
    Jul 15, 2010
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Thanks! Worked :)
     
  20. cPanelDon

    cPanelDon cPanel Quality Assurance Analyst
    Staff Member

    Joined:
    Nov 5, 2008
    Messages:
    2,557
    Likes Received:
    7
    Trophy Points:
    38
    Location:
    Houston, Texas, U.S.A.
    cPanel Access Level:
    DataCenter Provider
    Twitter:
    Friendly Moderator Note

    Due to the similarity of discussion topics I have merged a few posts into an earlier thread as linked by Infopro. :)
     
Loading...

Share This Page