Security Advisor - Reserved, Invalid, and Misconfigured Usernames

cPanelMichael

• June 27, 2018 09:03

Hello Everyone! Upcoming builds of cPanel & WHM versions 70 and 72 will include an update to Reserved, Invalid, and Misconfigured Usernames - cPanel Knowledge Base - cPanel Documentation You can adjust notification settings for Security Advisor State Change and other alert types using Warn users about invalid, reserved, and misconfigured usernames. " CpanelInc/addon_securityadvisor@6fc3182 Let us know if you have any questions. Thanks!

• 

  sparek-3

  • June 27, 2018 14:24

  Why is this suddenly an issue?

  0
• 

  cPanelMichael

  • June 27, 2018 14:47

  Why is this suddenly an issue?

  
  Hello @sparek-3, Most notably, we expanded the list of reserved usernames as part of

  0
• 

  sparek-3

  • June 27, 2018 14:57

  Hmm. How often do you expect the reserved username list to change now, going forward? Changing usernames is really a horrible idea. Granted, sometimes it may be necessary, but it should never be the first step in resolving an issue. There is too much tied to a username. I know we have some usernames that probably no longer fit the profile, start with a number, use hyphens. And while I understand that this username syntax can't be used on new accounts, it's nice that they were grandfathered in. It sounds as if these will now have to be changed.

  0
• 

  cPanelMichael

  • June 27, 2018 16:17

  Hello @sparek-3, There are no active cases to add additional usernames to the reserved list at this time. It's generally something that happens as part of a security audit, a newly discovered security issue, or to address an issue with a cPanel & WHM feature. Thank you.

  0

Please sign in to leave a comment.