show info that system owner is suspended

when a system owner suspended/locked and tried to login, cloudmin shows "Login failed. Please try again."

suggestion: when a system owner is suspended/locked please show "your account is suspended. please contact support" so system owner is clear that his/her account is suspended.

Status: 
Active

Comments

That may not be a great idea from a security point of view - currently Virtualmin/Webmin doesn't differentiate between an incorrect username or password when a login fails, which makes it harder for an hacker to perform a brute-force attack. Adding this kind of message would reveal that an account exists, but isn't currently usable.

An alternative might be a generic message like "Login failed. Wrong password, username unknown or account suspended - if you're sure the username is correct, contact support"

You can customize the error message by creating the file /etc/webmin/custom-lang containing :

session_failed=Login failed. Wrong password, username unknown or account suspended - if you're sure the username is correct, contact support

Ooh, see, Jamie anticipated this request! ;)

will this custom-lang file get overwritten when webmin got updated?

It wouldn't be overwritten, as that custom-lang file is in /etc/webmin and is considered a config file.

Files in /usr/libexec/webmin are where the actual Webmin run-time files are stored, and if those are modified they may indeed be overwritten.

So while you wouldn't want to modify the run-time files, modifying config files is safe and will be preserved.