{"id":211,"date":"2021-07-23T12:19:25","date_gmt":"2021-07-23T12:19:25","guid":{"rendered":"https:\/\/ssdsunucum.com\/blog\/what-happens-when-you-suspend-an-account\/"},"modified":"2021-07-23T12:19:25","modified_gmt":"2021-07-23T12:19:25","slug":"what-happens-when-you-suspend-an-account","status":"publish","type":"post","link":"https:\/\/ssdsunucum.com\/blog\/what-happens-when-you-suspend-an-account\/","title":{"rendered":"What Happens When You Suspend an Account"},"content":{"rendered":"<\/p>\n
\n
\n
\n

Valid for versions 94 through the latest version<\/em><\/p>\n<\/div>\n

\n

Version:<\/h4>\n

82<\/h4>\n

94<\/h4>\n<\/div><\/div>\n
\n

Overview<\/h2>\n

This document describes the actions that the system performs when you suspend an account.<\/p>\n

\n
Important:<\/div>\n
\n Suspension and bandwidth limiting are two separate functions. For more information, read our Account Suspension Versus Bandwidth Limiting and Account Termination documentation.\n <\/div>\n<\/div>\n
\n
Note:<\/div>\n
\n

To suspend or unsuspend an account, use WHM\u2019s Manage Account Suspension<\/em> interface (WHM >> Home >> Account Functions >> Manage Account Suspension<\/em>).<\/p>\n<\/p><\/div>\n<\/div>\n

Effects of suspension<\/h2>\n

The following table describes the actions that the system performs when you suspend an account and the limitations that result from these actions:<\/p>\n

\n
Note:<\/div>\n
\n

In the following section, user<\/code> represents the account\u2019s username.<\/p>\n<\/p><\/div>\n<\/div>\n

Adds suspended flags<\/h2>\n

The system adds the SUSPENDED=1<\/code> and SUSPENDTIME=epochdate<\/code> flags to the account\u2019s \/var\/cpanel\/users\/cpuser<\/code> file, where epochdate<\/code> represents the Unix time at which you suspended the account.<\/p>\n

As a result, the appropriate WHM interfaces sets the account to suspended<\/code> and list the reason for suspension.<\/p>\n

Locks reseller control<\/h3>\n

If you select the Prevent resellers from unsuspending<\/em> checkbox when you suspend the account, the system touches the \/var\/cpanel\/suspended\/user.lock<\/code> file.<\/p>\n

As a result, the appropriate WHM interfaces sets the account to locked. The system does not<\/strong> allow resellers to unsuspend the account.<\/p>\n

\n
Warning:<\/div>\n
\n

If you select this option when you suspend an account, the system only<\/strong> allows the root<\/code> user to unsuspend the account.<\/p>\n<\/p><\/div>\n<\/div>\n

Stops all user processes<\/h3>\n

The system stops all of the processes that that account owns.<\/p>\n

As a result, the system stops any functions that the cPanel account currently performs as the logged-in user. The following list includes some of the effects that this action may cause:<\/p>\n

    \n
  • \n

    The system forcibly logs the user out of a current session.<\/p>\n<\/li>\n

  • \n

    The system stops the user\u2019s cron jobs.<\/p>\n<\/li>\n<\/ul>\n

    Locks mailing lists<\/h3>\n

    The system creates a suspended.lists<\/code> directory in Mailman and moves the files for each of the account\u2019s mailing lists to this directory.<\/p>\n

    As a result, the account\u2019s mailing lists no longer function.<\/p>\n

    Locks Web Disk<\/h3>\n

    The system adds a *LOCKED*<\/code> string to the \/home\/homedir\/etc\/webdav\/shadow<\/code> password files for all account\u2019s Web Desk users. In this example, homedir<\/code> is the cPanel account\u2019s home directory name.<\/p>\n

    As a result, the account\u2019s Web Disk accounts no longer function.<\/p>\n

    Locks email passwords<\/h3>\n

    The system adds a *LOCKED*<\/code> string to the \/home\/homedir\/etc\/domain\/shadow<\/code> password files for all of the account\u2019s email users. In this example, homedir<\/code> is the cPanel account\u2019s home directory name and domain<\/code> is the email users\u2019 domain.<\/p>\n

    As a result, the account\u2019s email users cannot<\/strong> download mail.<\/p>\n

    \n
    Note:<\/div>\n
    \n

    The system continues to deliver mail to the account.<\/p>\n<\/p><\/div>\n<\/div>\n

    Incoming and outgoing email<\/h3>\n

    The system no longer allows the account\u2019s users to send email through the mail server. Also, the mail server will force all mail currently in the outbound message queue from that account\u2019s users to fail. As a result, the account\u2019s email users cannot<\/strong> send mail, and any mail they had in the mail server queue will<\/strong> fail.<\/p>\n

    Email Delivery Behavior<\/h4>\n

    When the server delivers an email message, Exim evaluates and executes code supplied by the cPanel account. If the cPanel account is suspended, you may not want the system to process user-supplied code in filters, forwarders, pipes, and redirection lists. You may choose from several configuration options to determine how the system processes email deliveries for suspended accounts.<\/p>\n

    You can configure what action EXIM should perform when the server receives an email message for a suspended account in WHM\u2019s Exim Configuration Manager<\/em> interface (WHM >> Home >> Service Configuration >> Exim Configuration Manager<\/em>). You can use one of the following settings:<\/p>\n\n\n\n\n\n\n\n\n
    \n
    Setting<\/div>\n<\/th>\n
    		Description<\/th>\n<\/tr>\n<\/thead>\n
    Deliver messages normally<\/em><\/td>\nThis setting accepts the email message and delivers it via normal delivery logic. This includes any forwarders, or piped scripts that the account user may have set up. This option is potentially risky, as these handlers could be used by a suspended user to retain access to account resources.<\/td>\n<\/tr>\n
    Accept and discard messages<\/em><\/td>\nThis setting accepts the email message, but immediately discards it, and ceases further processing.<\/td>\n<\/tr>\n
    Reject messages at SMTP time<\/em><\/td>\nThis setting rejects the email message, and returns a permanent error code to the sending mail server. Compliant mail servers will stop any further attempts to deliver the message. <\/p>\n
    \n
    Note:<\/div>\n
    \n This setting\u2019s behavior is the same as setting the Receiving Incoming Mail<\/em> option to Suspend<\/em> for an email address in cPanel\u2019s Manage Email Accounts<\/em> interface (cPanel >> Home >> Email >> Manage Email Accounts<\/em>).\n <\/div>\n<\/div>\n<\/td>\n<\/tr>\n
    Accept and queue messages<\/em><\/td>\nThis setting accepts the email message and places it in the local Exim queue temporarily. Exim will attempt delivery of the message periodically until the account is unsuspended or the message in the queue expires. By default, Exim reattempts delivery for queued messages for four days and eight hours then notifies the original sender that it could not deliver the message. This is the default<\/strong> setting.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    Updates the Apache configuration files<\/h3>\n

    The system updates Apache\u2019s httpd.conf<\/code> file with a Virtual Host include file for the user.<\/p>\n

      \n
    • \n

      The system creates the include file at the following location: <\/p>\n

      \n
      \/etc\/<\/span>apache2\/conf.d\/i<\/span>ncludes\/<\/span>account_suspensions.<\/span>conf<\/code><\/pre>\n<\/div>\n<\/li>\n
    • \n
      This include file contains a RedirectMatch<\/code> rule that redirects website traffic to the default template for suspended accounts. <\/p>\n
      \n
      Note:<\/div>\n
      \n
      Apache httpd.conf<\/code> include files originate from the following lines in Apache\u2019s main.default<\/code> file:<\/p>\n
      \n
      \n\n\n
      \n
      1\n<\/span>2\n<\/span>3\n<\/span><\/code><\/pre>\n<\/td>\n
      		\n
      [<\/span>% IF file_test(<\/span>'f'<\/span>, '\/usr\/local\/apache\/conf\/includes\/account_suspensions.conf'<\/span>)<\/span> -%]<\/span>\nInclude \"\/usr\/local\/apache\/conf\/includes\/account_suspensions.conf\"<\/span>\n[<\/span>% END -%]<\/span><\/code><\/pre>\n<\/td>\n<\/tr>\n<\/table>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/li>\n<\/ul>\n
      As a result, visitors cannot access the account\u2019s websites. Instead, a message appears that states the account was suspended.<\/p>\n
      \n
      Note:<\/div>\n
      \n
      To edit the message that appears for a suspended account\u2019s sites, use WHM\u2019s Web Template Editor<\/em> interface (WHM >> Home >> Account Functions >> Web Template Editor<\/em>).<\/p>\n<\/p><\/div>\n<\/div>\n
      Locks the shadow password<\/h3>\n
      The system uses the passwd -l<\/code> command to lock the account\u2019s \/etc\/shadow<\/code> password file. This command prepends the account\u2019s passwords with two exclamation marks (!!<\/code>).<\/p>\n
      The following list includes some of the effects that this action causes:<\/p>\n
        \n
      • \n
        The user cannot<\/strong> log in to their cPanel account.<\/p>\n<\/li>\n
      • \n
        The account\u2019s database users cannot<\/strong> log in to their databases.<\/p>\n<\/li>\n
      • \n
        The suspended account\u2019s password cannot<\/strong> change.<\/p>\n<\/li>\n<\/ul>\n
        Modifies permissions of ftp directory<\/h3>\n
        The system modifies the permissions of the user\u2019s public_ftp<\/code> directory to 0000<\/code>.<\/p>\n
        The system then creates the \/etc\/proftpd\/user.suspended<\/code> file and locks the account\u2019s FTP passwords in the \/etc\/proftpd\/passwd.vhosts<\/code> and \/etc\/proftpd\/user<\/code> password files. Finally, the system prepends the account\u2019s FTP passwords with two exclamation marks ( !!<\/code> ).<\/p>\n
        As a result, The account\u2019s FTP users cannot<\/strong> log in to the FTP server.<\/p>\n
        Also, the system cannot<\/strong> back up the user\u2019s public_ftp<\/code> directory because of the restrictive file permissions.<\/p>\n
        Changes MySQL user passwords<\/h3>\n
        The system changes all of the MySQL users\u2019 passwords. As a result, MySQL users cannot access their databases.<\/p>\n
        \n
        Note:<\/div>\n
        \n
        When you suspend a cPanel account, the system will not<\/strong> suspend any of the account\u2019s Amazon RDS\u2122 remote databases.<\/p>\n<\/p><\/div>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"
        Valid for versions 94 through the latest version Version: 82 94 Overview This document describes the actions that the system performs when you suspend an account. Important: Suspension and bandwidth limiting are two separate functions. For more information, read our Account Suspension Versus Bandwidth Limiting and Account Termination documentation. Note: To suspend or unsuspend an …<\/p>\n","protected":false},"author":1,"featured_media":212,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/211"}],"collection":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/comments?post=211"}],"version-history":[{"count":0,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/posts\/211\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media\/212"}],"wp:attachment":[{"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/media?parent=211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/categories?post=211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssdsunucum.com\/blog\/wp-json\/wp\/v2\/tags?post=211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}