The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Root password is being changed

Discussion in 'Security' started by tomjung, Aug 13, 2014.

  1. tomjung

    tomjung Member

    Joined:
    Jul 21, 2014
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Hi, I tried logging in with my WHM root password today and it did not work. I contacted my hosting company to have them reset it. They did, I was able to login. About an hour later I went to log back in and it no longer worked. I had to have them reset the password again. Now I'm wondering what might be causing the password to change.

    Is there a log somewhere I can look at and what should I be looking for to tell me why this is happening?
     
  2. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    940
    Likes Received:
    55
    Trophy Points:
    28
    cPanel Access Level:
    DataCenter Provider
    It's probably just cphulk locking you out. Disable it, it's worthless if you have a real firewall with brute force detection like CSF/LFD.

    99% of the tickets I get for "root PW changed" are actually "CPHulk locked out root logins for everyone"
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,724
    Likes Received:
    660
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Yes, you can review the cPHulk log at:

    /usr/local/cpanel/logs/cphulkd.log

    Look to see if the "root" account was locked, as that's likely the reason authentication failed.

    Thank you.
     
  4. tomjung

    tomjung Member

    Joined:
    Jul 21, 2014
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    Thanks yal, just setup CSF and disabled CPHulk. Hopefully I won't have anymore issues.
     
  5. Mckenzielaa

    Mckenzielaa Member

    Joined:
    Jul 10, 2014
    Messages:
    11
    Likes Received:
    2
    Trophy Points:
    3
    cPanel Access Level:
    Root Administrator
    have you checked to see if Any otterrete users have root privs? Might be an idea while you Wait to see if turning cphulk helps.
     
Loading...

Share This Page