User can manage shell access but it's disabled?

khorinis

Well-Known Member
Aug 15, 2010
65
0
56
Hi,
i made today a backup of my cpanel user and saw that i can access this category:
Main -> Security -> Manage SSH Keys

Why i can manage my ssh keys if ssh access is disabled?
 

claudio

Well-Known Member
Jul 31, 2004
201
0
166
Hi,
i made today a backup of my cpanel user and saw that i can access this category:
Main -> Security -> Manage SSH Keys

Why i can manage my ssh keys if ssh access is disabled?
check at your feature list and disable the manage ssh keys, i suppose this keys are used during the ssh access between your server and the ssh clients, but if under manage shell access there is no strange users in the wheel group, and no other shell such as jailed then no need to be worried about

note that suspended users may show a little different from other users

regards
Claudio
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
Hi,
i made today a backup of my cpanel user and saw that i can access this category:
Main -> Security -> Manage SSH Keys

Why i can manage my ssh keys if ssh access is disabled?
Managing SSH keys is not the same as having full shell access; to the best of my knowledge I believe it is normal to allow managing SSH keys, because this could be used for SFTP access that does not require full command-line shell access (i.e., SFTP can be used while CLI SSH is disabled).

Have you verified if the cPanel user can or cannot successfully connect to SSH and authenticate (log-in) using their cPanel account password?
 

khorinis

Well-Known Member
Aug 15, 2010
65
0
56
Yes, i tried and SSH tell me that the Shell is disabled for me and that i should contact the support if i need it.
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,545
12
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
Yes, i tried and SSH tell me that the Shell is disabled for me and that i should contact the support if i need it.
Do you have "root" (i.e., Administrator) access to the server? This is required in order to change the configuration or adjust the features that are allowed or enabled. If you do not have "root" access, please contact the support department of your web hosting service provider as only their staff would be able to assist with resolution.

If your web hosting provider is in need of assistance they are welcome to submit a support request and include a link to this forums thread in the ticket; we do not have access to the server unless your service provider contacts us via a support ticket and provides "root" login information.