WHMCS & Cpanel - Access Hash or Password?

[suhailc]

Hi,

Just wanted to get some other opinions/advice on the best/most secure setup.

Do you use root & password? Wheel user & password? Or Access Hash?

Does using access hash give all the control for creating/suspending/deleting/changing plan as you get when using root & password?

[John]

I'd recommend using a reseller username (ie, not root) + the server hash.

This is most secure combination and allows full functionality of the module; only the WHM auto-login button on Setup > Servers won't work.

[nvtan]

I'd recommend using a reseller username (ie, not root) + the server hash.

This is most secure combination and allows full functionality of the module; only the WHM auto-login button on Setup > Servers won't work.

I also this failed

[clavilab]

if the recommendation is to use reseller username and hash key. how do you associate a hash key to a particular reseller user in WHM?? when i go to generate a hash key the default user is root.

[laszlof]

if the recommendation is to use reseller username and hash key. how do you associate a hash key to a particular reseller user in WHM?? when i go to generate a hash key the default user is root.

You need to be logged in as the reseller in WHM.

[nixell]

how if i want to create reseller account?

[tracedef]

When I create the reseller account I want to give as many privilieges to it as I can since it is me. When setting up reseller privileges there is an option for "root access" but I'm not clear as to whether or not this is the same as serverwide root access or just terminology WHM uses that signifies you have access to all admin priviiges. Is it safe to grant "root access" to a reseller or is the defeating the purpose of setting up a reseller account that WHMCS will use?

[Damo]

That defeats the purpose of setting up a less privileged account. You can still login into the WHM as root directly and do any modifications you need to do as root. The only thing that the reseller WHM account needs is the account function settings.

[tracedef]

Thank you. Now that I'm seeing the access that is taken away when that "root" is not given that makes sense. Now we can login as root when needed but all account creation via whmcs is handled by reseller.... Anything else we should be considering security wise apart from using a hash instead of password?

[tracedef]

Just a heads up, according to WHMCS via ticket, the configurable package add on will not work if you do not login as root, just a heads up.