Web Hosting Talk







View Full Version : WHM mod question


Alex597
10-25-2009, 12:48 PM
Hey, my friend was talking about a mod that gives multiple people access to the root account. with different passwords does anyone know what this mod is called it will greatly help us.

MikeDVB
10-25-2009, 01:41 PM
Hey, my friend was talking about a mod that gives multiple people access to the root account. with different passwords does anyone know what this mod is called it will greatly help us.

The easiest way would be to create a few reseller accounts with full access (so they would have root access by using their own username and password).

I've not looked at the logging but you might even be able to see who did what if it came down to it.

Alex597
10-25-2009, 01:42 PM
yea theres the /var/log files i don't know if it says username, but the problem with that is we can't get full ssh to those "root" accounts. we could get normal SSH but not full
plus we have some plugin's that only root can access and we need us all to be able to access it

MikeDVB
10-25-2009, 01:47 PM
yea theres the /var/log files i don't know if it says username, but the problem with that is we can't get full ssh to those "root" accounts. we could get normal SSH but not full

Sure you can, you should take a look at /etc/sudoers

As an example:
http://www.screen-shot.net/sudoers.swf

Alex597
10-25-2009, 01:48 PM
we have some plugin's that only root can access and we need us all to be able to access it

yea there is su/sudo we could use, i mostly use winscp to look into the files. and only one allowed to look at /home/ is root, unless you can edit it.

MikeDVB
10-25-2009, 01:49 PM
sudo su is how we grant root access to staff members as needed. As illustrated in the short video I created for you - if you give the user SSH access (regular SSH, not jailed) and then add them to the sudoers file they will be able to sudo su to root.

If you know what you are doing you can only allow certain commands and other such limitations but the staff with us that have the access are trusted with the access they are given. What it comes down to is that if you can't trust your staff then you better be willing to do it all yourself.

Do this in /etc/sudoers
## Allow root to run any commands anywhere
root ALL=(ALL) ALL
usernamehere ALL=(ALL) ALL

You will see the root ALL=(ALL) ALL in there already, just add a new line that is the same but change root to the actual username.

Log into SSH with that username and then type "sudo su" and hit enter - then type that user's password again (not the root password) and you will be escalated to root.

As for WHM plugins that only root can access - I don't know a way around that other than giving your staff the root password to the server.

HOD-Jardin
10-25-2009, 06:29 PM
Hey, my friend was talking about a mod that gives multiple people access to the root account. with different passwords does anyone know what this mod is called it will greatly help us.

I think I know what you are talking about.

Companies brand it as Master Reseller Packages?

Dan_EZPZ
10-25-2009, 08:08 PM
Probably WHMEZlogin - http://www.whmezlogin.com/

Alex597
10-26-2009, 01:58 AM
YES! exactly that, thanks if there was a rep thing here i would rep you lol. works nice, almost what i wanted. but it will do