We use our own backoffice for remote logins. Passwords for panel login are encrypted. Is it possible to remove the option for customers to change their password for panel login so they will stay in sync with our own backoffice?
If it's not possible, is there a way to decrypt the panel login passwords, like there is for the admin-password (/usr/local/psa/bin/admin --show-password)?
I am having a Plesk server and when I scanned it with tools like OpenVas, It detected the following vulnerabilities with CVE acronym. As the corresponding ports and services are being controlled by Plesk, I require to patch it.URL....As you can see this vulnerability has been hit on port 106. I checked the Plesk server and found the port 106 being used by service "poppassd". This was nothing I installed and came along with the Plesk installation. Hence just wanted to make sure whether it has a patch from Parallels. As per my investigation this service is used for changing mailbox passwords and I am currently using Roundcube client. How to patch this vulnerability.
As per the solution in pic, the vulnerability "SMTP antivirus scanner DoS" can be resolved by upgrading or installing anti virus for Plesk mail server. I am ready to buy Dr.Web or Kaspersky from Parallels. But wanted to make sure whether any of the above antivirus can resolve the vulnerability.
cat /usr/local/psa/version
11.0.9 CentOS 6 110120608.16
Why can i login with two different passwords for the user admin in plesk control panel?
View 1 Replies View RelatedAfter a fresh install on a Debian Wheezy system, I get the following error(s) when trying to access the control panel.
https://sub.example.com:8443/
404 Not Found
Nginx
My log
Code:
2014/06/09 19:04:15 [warn] 32236#0: conflicting server name "" on 0.0.0.0:8443, ignored
2014/06/09 19:04:26 [error] 22597#0: *43 "/usr/share/html/index.html" is not found (2: No such file or directory), client: 68.51.77.126, server: , request: "GET / HTTP/1.1", host: "sub.example.com:8443"
While http://sub.example.com:8880/ works fine
How do they redirect to the Server URL in CPanel.
Eg. <Domain.tld>/cpanel
I looked for directory called /cpanel but non-exist.
I wish to use the same method to redirect to Plesk Panel <Domain.tld>/ppp if possible.
I am using CentOS 6.4... I cannot login to the admin page. Showing this message:
Error: Unable to log you on. An internal error occurred in the Single Sign-on authorization engine. Please try to log in later, and contact your hosting service provider if the problem persists.
Error log:
Doing restart of Parallels Installer...
2014-05-17 01:08:38: (server.c.1543) server stopped by UID = 0 PID = 10122
2014/05/17 01:15:04 [crit] 16495#0: *1 connect() to unix:/var/run/sw-engine.sock failed (2: No such file or directory) while connecting to upstream, client: 127.0.0.1, server: , request: "POST /plesk-billing/task-manager.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/sw-engine.sock:", host: "localhost:8443"
[Code] ....
I have tried this post: [URL] ....
[root@ns4008757 ~]# /usr/share/plesk-billing/integration --command=repair-all
Customer & Business Manager is not installed yet.
[root@ns4008757 ~]# /usr/local/psa/bin/sso -g
SSO status: on
SSO server url: https://XXX.XXX.XXX.XXX:8443
SSO API version: sw:sso:idp:1_0
SSO Application ID: z9fabw14uesl6ccoz0wnpwk68eghgvs6ny7
After running this two lines, when i login to admin panel, it shows: Can not extract SAML message.
I have a problem to login Parallels Plesk Panel, on a 1and1 vps.
When I click on "login", it just reload the page (I'm sure that username and password is correct).
today i changed the password for the admin panel for a customer (username eg. mylogin). 10 minutes later he called me and said that he cannot get into his emailaccount anymore. Checked the password and saw that the emailpassword for his emailaddress (eg. mylogin@mydomain.com) is now the same from the admin panel login. So i changed the emailpassword and checked the admin panel login - it now has the emailpassword. What a mess.. I'm running Plesk Panel 11.5.30 MU47.
View 1 Replies View RelatedToday we received an email saying that the admin password for the server had been changed by them and that we should log in and change the password again ourselves.
49pence have provided no explanation as to why the password was changed and despite multiple requests have refused to give any kind of explanation. I've also asked to speak to a manager and this request was denied (well, more ignored and I was given the same line that they cannot disclose why they changed a customers' password).
I'm Unable to Login to Control Panel, this issue started few days back, in that time i'm using Plask v11.5, When i try to log in browser try to log in and few minutes after it showing Error 500, Application error, I try to run reconfigurator.exe to verify & fix the Plesk installation, everything updated fine but issues still exist today i decided to upgrade to v12 and i upgrade to V12, everything installed fine and but still login issues there.
This time whey i try to login, i'm not getting any error message, but after some time i got mail from the server "alarm level changed. Server health parameter "Services > Plesk CPU usage" changed its status from "green" to "red"."
After updating i'm unable to login to the plesk panel with every user account.
---------------------------------------------------------------------------------------
Url redirect: https://[domain]:8443/sso/api.php?api=/ui
Error: Authentication failed: invalid username or password specified
---------------------------------------------------------------------------------------
The usernames and passwords are correct.
I have a problem with one of my Plesk Panels for windows (v. 11.5.30 Update #47). One of the clients is getting "Redirect loop" error when tries to login to his panel. The funny thing is that this is only happening to one account. I've tried to change subsriber for his subscription, but there was no result, since the same thing happend when I tried to login with the new subscriber's login.
View 1 Replies View RelatedAfter installing Plesk 12.0.18 Update 43 on windows when I try to connect to Plesk Panel (https://myurl.com:8443/) I get error:
ERROR: PleskMainDBException: Host '127.0.0.1' is not allowed to connect to this MySQL server (db.php:435)
I tried to reset mysql admin password as described in article - with no luck : [URL] .....
I even tried to reset password:
%plesk_bin%plesksrvclient -set "newpassword" true
Again I get "Faild to connect to database: Host '127.0.01' is not allowed to connect to this mySQL server
All websites that uses mySql works but Plesk Panel is dead?
I'm getting a big problem on my server.
From 1 week until now I got 4 spam attacks. The attacker is the same, because the emails sent are iqual.
The technique is also the same, they use an email account (compromissed password) and send emails through smtp server.
When I detect the attack, i do:
1. identify the compromised account
2. Change password from the compromised account
3. Stop qmail
4. Clear queue with qmail-remove
5. Start qmail
The problem is that they already used 4 diferent domains since the first attack. So, here is my problem, how do they discover the passwords?! How can I solve this problem? I have hundreds of emails accounts and can't change it all.
CentOS release 5.10 (Final)
Plesk 11.0.9
Came across an answer within google, but wanted to make sure I have an updated tutorial to prevent crashing the mysql and or server as others did.
How can we reset all customer account passwords at once, whether it be a preset one and or random?
I need to be able to access email passwords in plain text (not encrypted). I'm running with updates so as to not force encryption, which I'm told is a one-way deal. I'm going to have to go to new hardware soon, as I'm finding the hardware starting to fail.
I understand the "mail_auth_view" utility shows the passwords, and was wondering if it will decrypt them for you?
If not, how can I keep the behavior of non-encrypted email passwords so that the customer administrators still have access to them for their users? I know a new install forces encryption, which is why I can't do that. How can I preserve the non-encrypted passwords and move to new hardware? This seems to be a deal breaker for my customers.
My System:
Ubuntu 12.04
Plesk 12.0.18 Update #18
Only Webserver no mail
What I want:
I have an old sha1 certificate and I would change this for the whole server.
What I have done so far:
I have already uploaded the new sha256 certificate with a new private key to plesk (I can not simply replace the old one, plesk does not allow me to upload a new private key).
Then I set the new certificate as standard certificate and pressed the "secure pannel" button.
After that the panel uses the new certificate.
Then I set in "Tools & Settings -> IP Addresses" on both IP addresses the new certificate.
Reboot
But now the "Tools & Settings -> SSL Certificates" shows me that the old certificate is still used 2 times somewhere. But the Interface does not show where it is used. How can I find out where this certificate is used? I want to remove the old certificate from the server.
I have following problem when I try to cange the configuration file for Nginx in Plesk.
Details:
- Using Wordpress
- vServer
- PHP is handled through Nginx
- Memcached is enabled
To use the caching plugin "Cachify" in combination with memcached, the nginx configuration file must be edited. Following config should be used:
Code:
## GZIP
gzip_static on;
## CHARSET
charset utf-8;
## INDEX LOCATION
location / {
error_page 405 = @nocache;
[Code] ....
When I try to save the new config, following error appears:
Invalid nginx configuration: nginx: [emerg] duplicate location "/" in /var/www/vhosts/systemmydomain/conf/vhost_nginx.conf:8 nginx: configuration file /etc/nginx/nginx.conf test failed
How can I use the necessary configuration? I used google before, but some people said, that the server templated needs to be edited?
When changing the subscriber of migrated (or new subscriptions) from a normal customer to another normal customer or reseller customer I sometimes get the following message:
Code:
Reassigning Selected Subscriptions
ERROR: PleskFatalException
Picker not supported
When going back to the subscription overview I get the following error message:
Code:
Error: External exception. SQLSTATE[21000]: Cardinality violation: 1241 Operand should contain 1 column(s)
There are related forum entries:
Does not apply, vendor_id is never null: [URL] ....
Does not apply, it was a Plesk 11 > 11 migration: [URL] ....
The Plesk Health monitor is sending alerts to the wrong email by default. How can it be changed?hanged" notifications by "Health Monitor" are triggered by the default address that has been setup in My Profile > Profile & Preferences or is there a different way of changing this setting.
View 1 Replies View RelatedI've upgraded from WS2008R2 & IIS to CentOS and Plesk 12.Now, I wanted to change the webmail link for all domains to mail.domain instead of webmail.domain. I've followd 2 guides to do that: URLs....Everything went smooth, but now Horde and Roundcube look like this (even when I restarted the whole server):
View 12 Replies View Relatedwhere i can change the default plesk page when a domain has been suspended or disable? I like to change it to my custom page. Is there a way?
View 5 Replies View RelatedI have a Plesk 12 server running that works great. But the problem is that whenever one of my shared hosting customers changes something out a domain or subdomain, all the other sites on the server give a 502 error.
The reason why is clear to me: apache is reloading its config while nginx is still active, but sees apache as being down and therefor throws a 502 error.
Is there any way to prevent this from happening? Because it's happening a lot and people are sending in 'site down' reports while there's actually nothing wrong with the server or their site.
I have installed Plesk 12.0.18 on my server and want to change the hosting-type from "Forwarding" to "Web hosting". I change the type via "Websites & Domains" view (see attachments).
After I insert username and password, I get following error message:
Some fields are empty or contain an improper value. ('home' = '')
Deleting the domain and creating it from scratch is a bad option. I would have to create all e-mail accounts and migrate the data.
Over the weekend, I upgraded from Plesk 10.3 to Plesk 11.5, using the updater in the control panel. Everything seemed to go well. However, this morning I've noticed that some, not all, email accounts are having trouble logging into the server to send and receive mail. Other accounts are working fine.Via POP, I get this error: -ERR Temporary problem, please try again later
Via SMTP, I get this error:
535 auth failure
I see this in the maillog:
Jun 17 07:15:05 [server] courier-pop3d: LOGIN FAILED, user=[username], ip=[::ffff:xxx.xxx.xxx.xxx]
Jun 17 07:15:05 [server] courier-pop3d: authentication error: Input/output error
And this... Jun 17 07:24:50 [server] smtp_auth: FAILED: [email address] - password incorrect from [host] [xxx.xxx.xxx.xxx]
I replaced the server name, username, host, and IP in the above.
Here are the steps I've tried so far.
- Changing the password using the control panel.
- Updating the number of daemons in authdaemonrc
- Restarting the services
I just upgraded my Plesk on Ubuntu (vServer) yesterday. But after the upgrade I couldn't login to the Panel anymore because all I get when I try to reach the panel (https://panel.examplesite.com:8443) is a white screen.
I rebooted the server and restarted the panel as well as Apache several times with no change.
I cannot login to Plesk server with admin credentials as it says Error: Access for administrator from address 'xx.xx.xx.xx' is restricted in accordance with IP Access restriction policy currently applied. Also I cannot SSH to server and it says connection refused.
View 2 Replies View RelatedI have VPS Server with Parallels Plesk 11.5.30 (64 bits) on OVH.ORG..Today i do Update to newest version via https://MY-IP:8447
Code: [URL] .....
Now i cant login to my server: [URL] ....
How can i repair it. I dont wanna install again Plesk Panel becouse i have a lot of configuration and email adress.All components like Apache Mysql, ftp works good, but i cant only login.
I cannot login server:8447
1. netstat -anp |grep 8447 = nothing
2. iptables -L Chain INPUT (policy ACCEPT) - empty; Chain FORWARD (policy ACCEPT) - empty; Chain OUTPUT (policy ACCEPT) - empty
This happened after the unsuccessful upgrade.
Code:
Execution failed.
Command: autoinstaller
Arguments: Array
(
[0] => --select-product-id
[1] => plesk
[2] => --select-release-current
[3] => --upgrade-installed-components
[4] => --include-components-from-class
[5] => vendor=parallels
[6] => --include-components-from-class
[7] => patched
[code]....
ERROR: Failed to download the package URL...transfer closed with 205 bytes remaining to read..Not all packages were installed.Please try installing packages again later.try installing the packages again.
It seems like I have got a lot of trouble with Plesk 12 on a CentOS 7 machine.
1. I could not install Plesk properly due to some drweb problem.
2. Than the smb configuration seems only to be implemented partly.
3. Suddenly FTP login is not possible anymore (503 Access denied)
And now even Apache is not running anymore!
Code:
Unable to generate the web server configuration file on the host <xxxxxxx.dyndns.org> because of the following errors:
Template_Exception: [Mon Jun 08 14:16:28.058302 2015] [so:warn] [pid 4230] AH01574: module actions_module is already loaded, skipping
[Mon Jun 08 14:16:28.063364 2015] [so:warn] [pid 4230] AH01574: module headers_module is already loaded, skipping
[Mon Jun 08 14:16:28.063957 2015] [so:warn] [pid 4230] AH01574: module logio_module is already loaded, skipping
[Mon Jun 08 14:16:28.066150 2015] [so:warn] [pid 4230] AH01574: module suexec_module is already loaded, skipping
httpd: Syntax error on line 357 of /etc/httpd/conf/httpd.conf: Syntax error on line 5 of /etc/httpd/conf.d
[code]....
The IP addresses assigned to our servers have changed so it's time to update the default SPF information contained in the DNS records for ALL of the domains hosted on our servers:
OLD
Code:
v=spf1 +ip4:173.236.23.185 +ip4:173.236.23.188/30 +a +mx -all
NEW
Code:
v=spf1 +ip4:69.160.255.188/30 +ip4:69.160.255.192 +a +mx -all
However, when we update the resource record in the DNS template and then "Apply the changes to all zones...",
Panel will apply changes from the template to all DNS zones including the customized ones. Note that user-modified records always remain intact. For example, if the template contains a new record that was already added by a customer, Panel will keep the customer's record.Click to expand...