Possible bug using google authentication

durangod

Well-Known Member
May 12, 2012
504
46
78
cPanel Access Level
Website Owner
I have been able to duplicate this twice so it might be a bug im not sure 100%.

If your are logged into cpanel (not whm) and you have used the google authenticator to gain access, and then your ip changes (i switched from one internet to another), close the browser, and then you log back in, cpanel tells you that your ip has changed and you need to reenter your login data, but it does not ask you again for the google authentication, it just lets you right in.

I hope that makes sense, if not ill explain clearer.
 

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,296
1,266
313
Houston
I understand what you're saying, I'm actually wondering if that's related to the cookie your browser has saved for the cPanel session. What do you have set in WHM>>Service Configuration>>Tweak Settings -> Security -> Cookie IP Validation, Blank Referrer Safety Check, Referrer Safety Check
 

durangod

Well-Known Member
May 12, 2012
504
46
78
cPanel Access Level
Website Owner
Hi, thanks for the reply. Unfortunately this domain is on shared hosting and i dont have root access. But i do understand what you are referring to and you could be correct. I am happy considering that a sufficient solution. I just posted this to be sure someone knew that this was happening in the event it was an actual issue. I guess i could test it by cleaning all cookies after the IP change, but im happy with your answer.

Thanks again :)
 
Last edited:
  • Like
Reactions: cPanelLauren