Root was logged into pam using following authentication service: system (sudo)

fomistoklus

Member
Aug 16, 2012
7
0
1
cPanel Access Level
Root Administrator
Hi there,
every 30 minutes cpanel alerts me to email about root login.
I'm using RAID on the server and nagios plugin for monitoring it.
So, each nagios check performs script execution via sudo.
About what I can see in /var/log/secure log file.

I found the corresponding thread, but an old one, from 2012
http://forums.cpanel.net/f185/keep-getting-root-login-emails-268701.html

Yesterday I've upgraded cpanel up to WHM 11.44.2 (build 3), but I keep getting these messages to my inbox.
How I can stop these alerts?

cPanel on server.myname.com <[email protected]>
Root was logged into pam using following authentication service: system (sudo)
Thank you!
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,903
2,237
463
Hello :)

You can browse to "WHM Home » Security Center » cPHulk Brute Force Protection" and ensure the option to receive a notification when root successfully logs in from an IP address that is not white listed is disabled.

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,903
2,237
463
Does the issue persist after disabling the option referenced in my last post?

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,903
2,237
463
Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

Thank you.