Possible bug using google authentication

[durangod]

I have been able to duplicate this twice so it might be a bug im not sure 100%.

If your are logged into cpanel (not whm) and you have used the google authenticator to gain access, and then your ip changes (i switched from one internet to another), close the browser, and then you log back in, cpanel tells you that your ip has changed and you need to reenter your login data, but it does not ask you again for the google authentication, it just lets you right in.

I hope that makes sense, if not ill explain clearer.

 

[cPanelLauren]

I understand what you're saying, I'm actually wondering if that's related to the cookie your browser has saved for the cPanel session. What do you have set in WHM>>Service Configuration>>Tweak Settings -> Security -> Cookie IP Validation, Blank Referrer Safety Check, Referrer Safety Check

 

[durangod]

Hi, thanks for the reply. Unfortunately this domain is on shared hosting and i dont have root access. But i do understand what you are referring to and you could be correct. I am happy considering that a sufficient solution. I just posted this to be sure someone knew that this was happening in the event it was an actual issue. I guess i could test it by cleaning all cookies after the IP change, but im happy with your answer.

Thanks again