Skip to main content

2FA prompt shows and loops upon completion when accessing a cPanel from WHM

David Hertenstein
  • Updated

Symptoms

After a recent update to cPanel, attempting to access a cPanel account from a root or reseller session displays the 2FA prompt for the WHM user. For example, using the List Accounts page in WHM. Attempting to authenticate with the valid WHM user 2FA code loops this page indefinitely.

 

Cause

We have opened a case with our developers with ID CPANEL-53684 to review this further. Once further action is taken on this case, it will be identified by this ID in our changelog.

Where can I locate the cPanel changelogs?

 

Resolution

We have released updates to the following versions that resolve this loop:

• 11.136.0.19 (EDGE, CURRENT)
• 11.134.0.35 (RELEASE, STABLE, LTS)
• 11.126.0.68
• 11.110.0.125 (ELS)

In another scenario, if a cPanel user account shares the same password as the root user, when logging into cPanel, the software will stop if it detects that the entered password matches the user's password and assume that the user is trying to log in. When 2FA is enabled for the cPanel account, it will dutifully then prompt for the cPanel user's 2FA code.

If you are not able to update, a session can be generated via the root command-line that is not impacted by this issue, as an alternative method to access a cPanel account. You can use the following command to create a login session for a cPanel user:

# whmapi1 create_user_session user=$USER service=cpaneld

Note: Replace $USER with the cPanel username. 

 

Related articles

Comments

1 comment

Date Votes
  • Devon Courtney cPanel Staff

    We have released updates to the following versions that resolve this loop:

    • 11.136.0.19 (EDGE, CURRENT)
    • 11.134.0.35 (RELEASE, STABLE, LTS)
    • 11.126.0.68
    • 11.110.0.125 (ELS)

    0

Article is closed for comments.

%