Articles in this section

See more

[FIXED BUG] Mail accounts cannot log into Plesk web interface if password is encrypted

Avatar
Marc Vidal
Updated
Follow
Plesk for Linux DoNotDelete:docref kb: fixed kb: bug

Applicable to:

  • Plesk for Linux

Symptoms

  • Mail accounts with Access to the Control Panel option set in Domains > example.com > Email Addresses > mailbox name cannot log into Plesk GUI with PLAIN password if the password is encrypted in the database. The following error is displayed:

    PLESK_ERROR: Error: You have entered incorrect username or password.

  • The users had an encrypted password before the upgrade:

    # mysql -uadmin -p`cat /etc/psa/.psa.shadow` -Dpsa -e "select mail_name, domains.name as domain from accounts, mail,domains where dom_id = domains.id and mail.account_id = accounts.id and type='crypt'"
    +-----------+--------+
    | mail_name | domain |
    +-----------+--------+
    | admin | example.com |
    +-----------+--------+

  • PLAIN authentication to the mail server itself works without issues, only Plesk GUI login does not work.

Cause

Product issue:

  • #PPPM-1405 "It is now possible to log in to Plesk with an email address account, whose password was encrypted."
    Fixed in:

Resolution

Please consider updating your server:

Workaround

  1. Connect to the server via SSH
  2. Get a list of mail users with encrypted passwords (affected users):

    # mysql -uadmin -p`cat /etc/psa/.psa.shadow` -Dpsa -e "select mail_name, domains.name as domain from accounts, mail,domains where dom_id = domains.id and mail.account_id = accounts.id and type='crypt'"
    +-----------+--------+
    | mail_name | domain |
    +-----------+--------+
    | admin | example.com |
    +-----------+--------+

  3. Change the password for all users retrieved from the list in Domains > example.com > Email Addresses > mailbox name

As a workaround for Plesk 12.5 and Plesk Onyx, use:

Note: This fix below will resolve the issue for encrypted passwords which starts with "$1$".

Note: For Plesk 12.5 the custom fix can be applied without password changing.

Click on a section to expand

For RHEL/CentOS based system

Plesk 12.5 and Plesk Onyx 17.0:

# wget https://support.plesk.com/hc/en-us/article_attachments/360004705833/User_1.zip
# unzip User_1.zip
# mv /usr/local/psa/admin/plib/Smb/Db/Table/Row/User.php{,.bk}
# mv User.php /usr/local/psa/admin/plib/Smb/Db/Table/Row/User.php

Plesk Onyx 17.5:

# wget https://support.plesk.com/hc/en-us/article_attachments/360004678194/User_2.zip
# unzip User_2.zip
# mv /usr/local/psa/admin/plib/Smb/Db/Table/Row/User.php{,.bk}
# mv User.php /usr/local/psa/admin/plib/Smb/Db/Table/Row/User.php

Plesk Onyx 17.8:

# wget https://support.plesk.com/hc/en-us/article_attachments/360004707293/User_3.zip
# unzip User_3.zip
# mv /usr/local/psa/admin/plib/Smb/Db/Table/Row/User.php{,.bk}
# mv User.php /usr/local/psa/admin/plib/Smb/Db/Table/Row/User.php

For Debian/Ubuntu based system

Plesk 12.5 and Plesk Onyx 17.0:

# wget https://support.plesk.com/hc/en-us/article_attachments/360004707293/User_1.zip
# unzip User_1.zip
# mv /opt/psa/admin/plib/Smb/Db/Table/Row/User.php{,.bk}
# mv User.php /opt/psa/admin/plib/Smb/Db/Table/Row/User.php

Plesk Onyx 17.5:

# wget https://support.plesk.com/hc/en-us/article_attachments/360004707293/User_2.zip
# unzip User_2.zip
# mv /usr/local/psa/admin/plib/Smb/Db/Table/Row/User.php{,.bk}
# mv User.php /usr/local/psa/admin/plib/Smb/Db/Table/Row/User.php

Plesk Onyx 17.8:

# wget https://support.plesk.com/hc/en-us/article_attachments/360004707293/User_3.zip
# unzip User_3.zip
# mv /opt/psa/admin/plib/Smb/Db/Table/Row/User.php{,.bk}
# mv User.php /opt/psa/admin/plib/Smb/Db/Table/Row/User.php

Comments

2 comments

Sort by Date Votes

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles