cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,908
2,218
463
Hello,

Do you notice any error messages in /usr/local/cpanel/logs/error_log or /usr/local/cpanel/logs/login_log when this happens?

Thank you.
 

Justin Emmons

Registered
Jun 21, 2016
3
0
1
Santa Ana
cPanel Access Level
Root Administrator
/usr/local/cpanel/logs/login_log shows the following:

"POST /login/?login_only=1 HTTP/1.1" FAILED LOGIN whostmgrd: login attempt to whm by a non-reseller/root
DEFERRED LOGIN cpaneld: switchuser: uid or gid passed user switch is less than 99
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,908
2,218
463
Hello,

The error message suggests the UID or GID for one of your users is possibly below "99". Could you search the /etc/passwd and /etc/shadow files to see if the user you are logging in as, or any user for that matter, utilizes a low numbered UID/GID? Here's the commands to use:

Code:
grep $username /etc/passwd
grep $username /etc/shadow
Or, view the full /etc/passwd and /etc/shadow files with the "cat" command to find the offending account.

Thank you.