Intermittent 2FA Issues on WHM in Reseller Server
Hello everyone,
I’m facing a critical and, so far, unresolved issue with two-factor authentication (2FA) on WHM in a reseller server, where I don’t have root access. I’ve noticed that 2FA enables and disables intermittently, and attempts to get clarity from support have been unsatisfactory.
Situation and Restrictions
As this is a reseller service, my access is limited, and I rely on provider support for any configuration adjustments on the server. This prevents me from directly reviewing system logs to identify the root cause.
2FA Authentication Issue
Here are the primary details of what’s been happening:
-
Intermittent Activation and Deactivation of 2FA: At times, 2FA codes are rejected, and shortly after, authentication works again without any adjustment or change to the authenticator on my end. This "on and off" behavior raises serious concerns regarding system stability and security.
-
Contradictory and Unreliable Support: Upon contacting support for clarification, I was informed that they didn’t identify any issues but had deactivated and reactivated 2FA “as a precaution,” even though I hadn’t requested it. This unauthorized action and lack of a precise technical explanation make it even more challenging to understand what’s actually happening. Additionally, support provided contradictory explanations and avoided giving complete information, such as detailed access logs or changes in the system.
Concerns and Next Steps
Given that I don’t have root permissions, I’m limited to trusting the actions of support, who have not demonstrated transparency so far. Has anyone else experienced something similar on a reseller server or has suggestions on how to handle situations like this? I’m looking for recommendations on independent monitoring solutions or alternatives to verify the security of the settings.
Thanks in advance for any help!
-
Hey there! I can't say I've had any similar reports of this issue. Without root access there isn't going to be a good way to get to the bottom of the issue, so pestering your provider is going to be the best course of action.
I will say, as this option needs to be manually enabled by root in WHM, it's unlikely it would be turning on and off through any normal means, but there could be something else happening on the system that is causing authentication problems, such as a DoS attack or other malicious activity.
0
Please sign in to leave a comment.
Comments
1 comment