Prevent Webmin from sending login alerts

One of our Wemin servers started to send access and login alerts like:

Webmin login page is accessed by unauthenticated user from xxx.xxx.xx.xx

Webmin 1.795 on ns1.domain.com (CentOS Linux 6.7)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36

and then immediately after it:

Webmin successful login alert for user root from xxx.xxx.xx.xx

Webmin 1.795 on ns1.domain.com (CentOS Linux 6.7)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.94 Safari/537.36

How can I stop them?

Status: 
Active

Comments

How are you receiving these alerts? Webmin itself doesn't send any messages like that.

Well, that's an interesting question as none of other servers do that. On this particular server we switched to Authentic theme just yesterday and installed new SSL certificates for Webmin, if it gives any idea.

You can disable that setting from the authentic theme settings page.

Ah, it does look like Authentic does indeed send email notifications in some situations.

As cyrus mentioned, that can be disabled.

To do that, click the Authentic Theme Settings option (on the bottom-left), and at the bottom of the settings screen is a set of security options.

There, set "Enabled for Webmin" and "Enabled for Usermin" to "No".

Ah, that Authentic Theme... We really like it, but on the other hand so many issues with it. For instance, in this case why on earth a theme is dealing with functionality? All the features, anything that pertains functions should come from Webmin core or its plugins like Virtualmin or Cloudmin, but theme should stay as theme and deal with only styling. So invasive from Authentic Theme's part...

Agree agree agree! And even better, if you aren't using Authentic (on your user account), you still get the messages! Makes it really hard to figure out how to make them stop.

DaveOverton, what Webmin and Authentic version are you using? That functionality had been removed from Authentic a few months ago.

Virtualmin version 5.04 Pro Theme version Authentic Theme 17.84

This is the last section of the settings screen in Authentic settings.

Security Alerts options
Security alerts will let you setup email notifications upon certain events. (Linux mail command is required for this feature to work)
Format: Message|Subject|Comma separated list of users/emails|Comma separated list of ignored IPv4/IPv6
Usage: %3 successful login alert for user %1 from %2|%3 successful login alert|root,user@example.org|1.2.3.4,5.6.7.8
Output: From: root, To: root, Subject: Webmin successful login alert, Message: Webmin successful login alert for user root from 2.3.4.5
Enabled for Webmin   Yes   No
Enabled for Usermin   Yes   No

I just use auto update on this stuff, so it thinks its all current anyway. The server itself was built July 15, so its not too far behind.

What Webmin version is it that you have there though? The current Webmin version shouldn't actually contain that option in Authentic.

Webmin 1.801

I have a second webmin install (new last week) with 1.801 also has these options available. This one doesn't have virtualmin installed.

Hmm, I was under the impression that was already removed entirely, but that may not be the case.

It is removed in the current Authentic version though, which will be part of the next Webmin release.