The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Why are there no UI options for securing ssh - ftp - root using alternate usernames

Discussion in 'General Discussion' started by durangod, Sep 27, 2016.

  1. durangod

    durangod Well-Known Member

    Joined:
    May 12, 2012
    Messages:
    251
    Likes Received:
    10
    Trophy Points:
    18
    cPanel Access Level:
    Website Owner
    Hi, im just curios if most people secure their SSH, ROOT, and FTP using alternate usernames and then disabling the root login why are there no UI options for this to make it simple. I know there is a UI for turning off root login, but there is no simple process for server admin challenged people as myself that know very little about admining a server. Lack of such knowledge does not mean that we should be left out in the cold just because we want to have our own server.

    Many users come to cpanel because it is the best UI out there and it makes it easy. However such a global process that everyone does is left out of the UI for some reason. I would like to see several options added to cpanel WHM UI, leave the command line out of it unless really necessary.

    This would be under the host environment.

    1. easily create a new user and password inside the UI without having to associate it with a account.
    2. easily allow that user to be set as access specific ie. only smtp, only mail, only ftp, only ssh.
    3. easily set up the user access for those specific features in item 2 to be sure it works without having to edit conf files manually. I followed the instructions perfectly for setting up the key with putty and it still said it rejected it.
    4. in the ssh import key section it says you can paste a file but there is no way to do that, there is no option for pasting file on that page or inside that key block.
    5. add shell access menu for emergencies, i am sitting here now with a error in my ssh file so i cant access ssh, my ftp does not work so i cant download the file to fix it and if i lose my WHM for some reason then im totally locked out and i will have to wipe my system again.
    6. I would also like to see a file manager included in WHM. Why does almost every other open source product have a file manager but yet a paid service (and very expensive) like WHM does not?

    The purpose of this request is that everyone does this usually the first thing to secure things, so why is this not more UI realated and features added as a option to do this all in one menu. Everyone has issues with setting this up, i see a kazillion questions on how to do it. So why not have it in a menu 1-2-3 done...
     
    #1 durangod, Sep 27, 2016
    Last edited: Sep 28, 2016
  2. durangod

    durangod Well-Known Member

    Joined:
    May 12, 2012
    Messages:
    251
    Likes Received:
    10
    Trophy Points:
    18
    cPanel Access Level:
    Website Owner
    So i tried doing a ticket but since my ssh and ftp are both down the ticket access wont connect so all i can do is give them my whm password. This is why this needs to be in the UI and keep people like me out of config files..

    You know sometimes people you have to code for stupid people.

    Explain to me again why i would pay $45 a month for a panel that is so easily breakable. Ticket number 7727623
     
    #2 durangod, Sep 27, 2016
    Last edited by a moderator: Oct 2, 2016
  3. durangod

    durangod Well-Known Member

    Joined:
    May 12, 2012
    Messages:
    251
    Likes Received:
    10
    Trophy Points:
    18
    cPanel Access Level:
    Website Owner
    So here is the deal, if you break your ssh and your ftp, you are SCREWED!! there is no way for support to get into your system to fix it and there is no way for you to fix it via WHM. You will either need to install some other access utility, do the recovery disk deal and move the ssh file out of the way and reinstall ssh, or just wipe the freaken thing and start over.

    It also was suggested that i put a request into the features requests site, but you cant join without an invite code, so much for that.

    A simple file manager in the WHM could prevent all this stress.

    submitted for wipe... :(
     
    #3 durangod, Sep 27, 2016
    Last edited: Sep 27, 2016
  4. durangod

    durangod Well-Known Member

    Joined:
    May 12, 2012
    Messages:
    251
    Likes Received:
    10
    Trophy Points:
    18
    cPanel Access Level:
    Website Owner
    Folks this is important, if you have cpanel and whm i highly recommend you install this, i just found out about this and if i had this installed on the server it would have saved the day.

    ConfigServer Explorer (cse)

    use it for emergencies, it is worth its weight in gold totally.
     
  5. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    14,474
    Likes Received:
    202
    Trophy Points:
    63
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    The documentation may be helpful here to reset any incorrect changes made:
    How to Secure SSH - cPanel Knowledge Base - cPanel Documentation

    Agreed.
     
    ElviCities likes this.
Loading...

Share This Page