Is Webmin locking the root user by default?

OS type and version Debian 12
Webmin version Latest

I installed a new VPS with SSH key and added Webmin as usual. In order to access Webmin I had to add password in order to login to Webmin as usual.

sudo passwd root 123...

but this time I could not login to Webmin. When I checked the status of root, I was surprisingly locked:

sudo passwd -S root
root L 2023-07-07 0 99999 7 -1

I know I can unlock, but I wonder if this is a new “feature” of Webmin? The VPS vendor claims that it is not locked when deployed.

I don’t think so , else everyone would be jumping up and down and no one else has reported it.
By default you can login with root password (unless webmin is different to virtualmin) you don’t need to change it.
P.S. I just tested, that is the case.

Webmin didn’t do it! By default, the root Unix account is disabled on Debian/Ubuntu systems for “enhanced” security.

I’d like to point out that you don’t need to unlock the root Unix account. Instead, you can set a password specifically for Webmin user using:

webmin passwd root

Works perfect! Thank you!

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.