Control Web Panel

WebPanel => CentOS 7 Problems => Topic started by: motanu8008 on December 11, 2018, 08:28:48 AM

Title: CWP Pro: User accounts are locked
Post by: motanu8008 on December 11, 2018, 08:28:48 AM
Hi guys,

After the latest update, 0.9.8.748 all the user accounts on all my CWP powered servers (I have 4 servers running CWP Pro), are being locked for reaching the maximum number of failed logins.

I've tested several accounts, from different IP addresses, and all have the same issue. I've rebooted the server, restarted firewall, triggered a manual cwp update, but the issue is still present.
(https://papionne.com/screen.png)
The admin panel is working fine, and the ip addresses I've tested are not blacklisted.



Any ideas?

Thanks!
Title: Re: CWP Pro: User accounts are locked
Post by: NychosX on December 11, 2018, 10:39:29 AM
Same problem  ???
Title: Re: CWP Pro: User accounts are locked
Post by: josemnunez on December 11, 2018, 10:45:51 AM
You can also disable this protection from admin -> Security -> User Login Segurity
Title: Re: CWP Pro: User accounts are locked
Post by: motanu8008 on December 11, 2018, 10:50:01 AM
I've disabled login security, purged all existing blocked ip's and enabled security again, and the issue is solved.

Thanks josemnunez for the hint!
Title: Re: CWP Pro: User accounts are locked
Post by: NychosX on December 11, 2018, 11:08:49 AM
You can also disable this protection from admin -> Security -> User Login Segurity

Thanks  ;)
Title: Re: CWP Pro: User accounts are locked
Post by: venty on December 11, 2018, 12:01:48 PM



but why should I deactivate this protection?
Title: Re: CWP Pro: User accounts are locked
Post by: josemnunez on December 11, 2018, 12:02:57 PM
With only activate and deactivate a small bug is corrected, you can leave activated after this
Title: Re: CWP Pro: User accounts are locked
Post by: monkeyking on December 11, 2018, 12:40:21 PM
Status: No is to disable or Yes is to disable? I have the same issue but mine was set to No to begin with. I am confused.
Title: Re: CWP Pro: User accounts are locked
Post by: motanu8008 on December 11, 2018, 01:34:20 PM
I've switched it from no to yes, and after saving the accounts get unlocked. Honestly, I didn't tried to login using bad passwords, to see if the IP gets blocked after X failed logins, but I will test and get back.

cheers
Title: Re: CWP Pro: User accounts are locked
Post by: saifur on December 11, 2018, 03:23:34 PM
Status: No is to disable or Yes is to disable? I have the same issue but mine was set to No to begin with. I am confused.

I just toggled it from NO to YES. The user panel login screen appeared and I toggled it back again. It's working.
Title: Re: CWP Pro: User accounts are locked
Post by: saifur on December 11, 2018, 03:24:23 PM
You can also disable this protection from admin -> Security -> User Login Segurity

Thanks. Its working.
Title: Re: CWP Pro: User accounts are locked
Post by: tyrnight on December 11, 2018, 05:06:00 PM
I got rid of the access denied by following these instructions but NOW it won't let any user log in to their user panel... HELP

Just says "incorrect access"
Title: Re: CWP Pro: User accounts are locked
Post by: HTA on December 23, 2018, 10:26:07 AM
Hi,

Trying to login to user control panel I get the "incorrect access" message.

I can login to admin control panel all OK

Could anyone point me in the right direction please?

Many thanks and kind regards

HTA
Title: Re: CWP Pro: User accounts are locked
Post by: nogats07 on January 21, 2019, 11:55:08 AM
I also seem to have this problem, it always says "incorrect access" when someone is logging in, I checked the ajax file that processes the login request and it just shows blank page? Whats the problem? I'm using cwp pro and can any admin advice regarding this? It seems to be a major bug.
Title: Re: CWP Pro: User accounts are locked
Post by: josemnunez on January 21, 2019, 02:14:38 PM
Hello

what is the status of the security module from the admin

Security -> User Login Segurity
Title: Re: CWP Pro: User accounts are locked
Post by: nogats07 on January 21, 2019, 04:19:34 PM
Hello

what is the status of the security module from the admin

Security -> User Login Segurity
It's not active and I didn't touched anything in it.
Title: Re: CWP Pro: User accounts are locked
Post by: josemnunez on January 21, 2019, 04:44:37 PM
this failure is very strange, but try this to solve, activate and deactivate the blocking service and let me know how it was
Title: Re: CWP Pro: User accounts are locked
Post by: nogats07 on January 22, 2019, 04:08:56 AM
this failure is very strange, but try this to solve, activate and deactivate the blocking service and let me know how it was
I tried to suspend the account and it shows the proper error, same with wrong password and wrong username. But when entering correct credentials it just always say "incorrect access" and I can't find any reason why this happens.
Title: Re: CWP Pro: User accounts are locked
Post by: HTA on January 22, 2019, 06:20:10 AM
Hi,

When I had this problem Mighty Dr.Wolf posted this suggestion: -

===========================================================

hi
just go to the cwp admin and change the password of this customer to (Random Password)
and then with this RANDOM password go to the customer web panel and change it from there to whatever you want >>>
sorry for my english :)
Regards

===========================================================

This worked for me and I hope it helps you?

Kind regards

HTA
Title: Re: CWP Pro: User accounts are locked
Post by: nogats07 on January 22, 2019, 07:58:37 AM
Hi,

When I had this problem Mighty Dr.Wolf posted this suggestion: -

===========================================================

hi
just go to the cwp admin and change the password of this customer to (Random Password)
and then with this RANDOM password go to the customer web panel and change it from there to whatever you want >>>
sorry for my english :)
Regards

===========================================================

This worked for me and I hope it helps you?

Kind regards

HTA
I did that and nothing change, that's why I'm getting confused right now, but I changed the default mysql password, is that the case? But I already updated the mysql config file of cwp
Title: Re: CWP Pro: User accounts are locked
Post by: multilan on February 26, 2019, 03:56:55 PM

Seems I always have to come back to this thread and nothing in here works.  CWP always blocks me on the "USER ACCESS" port 2082 and 2083.   I can log in to the root panel on port 2030 and 2031 with no issue.    I ran

#grep -r <MY IP NUMBER> /etc/*

from the console to find which file has my IP numbers in it and my IP is nowhere in any file on the system.  Why am I being blocked?  My IP number is nowhere in the CSF rules, nowhere in the firewall rules, nowhere on the system period.  And in fact why am I able to reach port 2030 and 2031 and not port 2082 and 2083 on this server even when I whitelist my IP in the root control panel?  Seems that should take precedence and override anything else on the system which is blocking me.

Can someone provide a detailed response instead of "Look in Security -> User Login Security".   I am running CentOS 0.9.8.769. 
If getting CWPro will fix this I will gladly get it but a good reason as to why this happens would be a good start.

Much appreciated.
Title: Re: CWP Pro: User accounts are locked
Post by: Netino on February 27, 2019, 03:41:15 AM
If you are seeking for blocked IP's, you must check with the command:
Code: [Select]
# iptables -L -n | grep <YOUR IP NUMBER>

...or, if you are using "ipset":
Code: [Select]
# ipset list | grep <YOUR IP NUMBER>

If your IP are not in that list, you are not being blocked in your server, is possible to be a block in your ISP.