root login for webUI

wav3front

Hi, I wonder how others handle the fact that you need to enable root login in order for webUI to work? Asking because allowing root on a linux system is considered unsafe. is there any workaround? Thanks Alex…

This content is hidden. Log in to view the full discussion.

cPFence

wav3front

You don’t need to enable full root login with a password. The recommended approach is:

PermitRootLogin prohibit-password
PasswordAuthentication no
PubkeyAuthentication yes

This keeps things secure by allowing only key-based root logins (which the WebUI uses) while blocking password access entirely.

Edit: More info on this help page:

https://my.cpfence.app/knowledgebase/132/How-to-Secure-SSH-While-Allowing-cPFence-WebUI-Access.html