switch account disappears

[florenceit]

Hi
I've setup accountlab plus. It seems that for an account I create with it , when I go into cpanel and use the switch account dropdown at the top, when I go to this particular account (created by ALP) the switch accounts box disappears, and I can't even page back with the browser. I have to logout and back in again.

any idea on how to troubleshoot this or what may cause it?

thanks!

 

[florenceit]

interestingly i just finally found out that this issue is happening on firefox 3.6 on Mac (snow leopard)

really odd, tried clearing all cache and browser settings, same deal.

it works just fine in safari.

haven't tried this on firefox 3.6 on a pc yet.

 

[kpmedia]

any idea on how to troubleshoot this or what may cause it?

I came across this today for the first time.
It's a dupe password issue.
You can find my long explanation here:
cPanel 'switch accounts' menu disappears, refreshes to client panel [FIXED]

It seems like a rather strange issue, almost as if the accounts (and associated passwords) are not separated enough from one another. I almost wonder what sort of affect this would have on security, if any. It's like the system is screaming "duplicate passwords detected" but without it being clearly announced.

Simply put, change a password.

 

[cPanelTristan]

Yes, this happens specifically when the reseller password is the same as the cPanel (non-reseller but owned by reseller) account password. Any account owned by a reseller should have a different password than the reseller's password. As kpmedia suggested, simply change the password for the account or change the reseller's password.

The reason this happens is that you cannot allow the switch accounts dropdown to occur on a non-reseller account. If we allowed the switch accounts dropdown and the user wasn't the same owner as the reseller, that user would then suddenly have login access as the reseller to these other accounts. This means we default to account user login first when checking the password, then to reseller or root password login after the cPanel user. This is to avoid the possible security issue of providing elevated access to a non-reseller account.

 

[kpmedia]

This means we default to account user login first when checking the password, then to reseller or root password login after the cPanel user. This is to avoid the possible security issue of providing elevated access to a non-reseller account.

That makes sense. Thanks for the explanation.

​