Resolved Activate account by e-mail does not work

[williamplk]

Server operating system version

Ubuntu 22.04.4 LTS

Plesk version and microupdate number

Version 18.0.61 Update #5

Hello,

when create new customer by tick on activate account by e-mail

then i got email send to new customer as below

A new customer account has been created. Customer's contact name: New Customer Name Customer's login: customer-login-user To obtain your password, please proceed to https://server.mydomain.com/[email protected]&login_name=customer-login-user Panel entry point: https://server.mydomain.com​

when i click link to obtain your password in the link ask to type customer email or username to get password but i don't see email to activate customer account or get new password to login email then i check server log, i found as below

ERR

panel [9762:667ee4bf5f755]

Password reset request for login '' (user 'customer-login-user') was denied: account is suspended

or

ERR

panel [9744:667ee4807d883]

Password reset request for email '[email protected]' (user 'customer-login-user') was denied: account is suspended

why we need customer to activate their account by email but system said account is suspended then how customer activate their account?

 

[Kaspar@Plesk]

I see how this can be a bit confusing. The email your referring to is actually an notification, not the actual activation email. The notification email can be managed (edited, enabled and disabled) via Tools & Settings > Notifications (the Customer account creation notification).

However a separate email is sent with an activation link to activate the account. It has the (default) subject "Please activate your account in Plesk".

 

[williamplk]

i think i don't see any what you tell me. Seem like my plesk has problem thought.

i just have below notification template.

Tools & Settings > Notifications

The email your referring to is actually an notification, not the actual activation email.

this is actual activation email. i have receive same email as activation but i don't see link to activate beside link to reset password.

However a separate email is sent with an activation link to activate the account. It has the (default) subject "Please activate your account in Plesk".

i don't see this notification to client email (the client email i test to my second email before go live) i have separate email for system notification and other use is my personal gmail use to create account to see it is working or not.

finally, i don't see "Please activate your account in Plesk" rather then as to reset password.

then how could i solve it?

 

[Kaspar@Plesk]

Sorry for the confusion.

i just have below notification template.

Tools & Settings > Notifications

Is it enabled?

this is actual activation email. i have receive same email as activation but i don't see link to activate beside link to reset password.

No, it is not. It is the "Customer account creation" notification. The customer activation email is different.

i don't see this notification to client email (the client email i test to my second email before go live) i have separate email for system notification and other use is my personal gmail use to create account to see it is working or not.

Can you look in your mail logs to see which mails are sent to customer when creating a customer account?

 

[williamplk]

Is it enabled?

Can you look in your mail logs to see which mails are sent to customer when creating a customer account?

i saw it sent to customer email but i don't receive any email said activate just saw this as notification template.

 

[Kaspar@Plesk]

View attachment 26512

Can you disable it, create a test customer again with email activation and look in your mail logs for mail transactions sent to the customer email address.

There is an separate (different) email sent to customer for account activation. There should be log entries in the mail log.

 

[williamplk]

Note: my server is aws ec2 and aws staff not allow port 25 even i requested, they have bad reason not happy to allow then i use Plesk External SMTP extension. (it is working)

I try to copy log for you. i think Gmail reject? then activate email not going to customer email? as you see button log.

Note: the log read is bottom to top.

WARNING

postfix/smtpd [225510]

warning: unknown[79.110.62.14]: SASL LOGIN authentication failed: authentication failure

WARNING

plesk_saslauthd [225523]

failed mail authentication attempt for user 'admin@Welcome' (password len=9)

INFO

plesk_saslauthd [225523]

No such user 'admin@Welcome' in mail authorization database

INFO

postfix/pipe [225382]

ECC4B21009: to=<[email protected]>, relay=plesk_virtual, delay=0.06, delays=0/0/0/0.05, dsn=2.0.0, status=sent (delivered via plesk_virtual service)

WARNING

dmarc [225401]

ECC4B21009: DMARC: smtpdomain= maildomain=mail.mydomain.com mailfrom=[email protected] stamp=1719755903 ip=unknown adkim=strict aspf=strict p=REJECT sp=REJECT pct=100 align_dkim=fail align_spf=fail spfres=unknown dkimres=unknown dmarccheck=DMARC_POLICY_REJECT dmarcstatus=STOP

WARNING

dmarc [225401]

ECC4B21009: SPF record was not found in Authentication-Results

ERR

dk_check [225400]

ECC4B21009: DKIM Feed: No signature

INFO

postfix-local [225399]

ECC4B21009: from=<MAILER-DAEMON>, to=<[email protected]>, dirname=/mnt/akg-storage-disk/qmail/mailnames

INFO

postfix/smtp [225378]

A9D572100B: to=<[email protected]>, relay=gmail-smtp-in.l.google.com[142.251.175.26]:25, delay=2.3, delays=0.34/0.03/1.1/0.81, dsn=5.7.26, status=bounced (host gmail-smtp-in.l.google.com[142.251.175.26] said: 550-5.7.26 Unauthenticated email from mydomain.com is not accepted due to 550-5.7.26 domain's DMARC policy. Please contact the administrator of 550-5.7.26 mydomain.com domain if this was a legitimate mail. To learn about 550-5.7.26 the DMARC initiative, go to 550 5.7.26 Control unauthenticated mail from your domain - Google Workspace Admin Help d2e1a72fcca58-7080370e7e9si5747181b3a.152 - gsmtp (in reply to end of DATA command))

 

[Kaspar@Plesk]

INFO

postfix/smtp [225378]

A9D572100B: to=<[email protected]>, relay=gmail-smtp-in.l.google.com[142.251.175.26]:25, delay=2.3, delays=0.34/0.03/1.1/0.81, dsn=5.7.26, status=bounced (host gmail-smtp-in.l.google.com[142.251.175.26] said: 550-5.7.26 Unauthenticated email from mydomain.com is not accepted due to 550-5.7.26 domain's DMARC policy. Please contact the administrator of 550-5.7.26 mydomain.com domain if this was a legitimate mail. To learn about 550-5.7.26 the DMARC initiative, go to 550 5.7.26 Control unauthenticated mail from your domain - Google Workspace Admin Help d2e1a72fcca58-7080370e7e9si5747181b3a.152 - gsmtp (in reply to end of DATA command))

Yes, this indicates that a message is rejected by Gmail. Like because a DMARC policy is missing for the sending domain, which is required by Gmail. More information can be found here: Control unauthenticated mail from your domain - Google Workspace Admin Help

 

[williamplk]

i try to send the same email account (use in External SMTP Extension) sent to gmail and it was successful goes to gmail inbox.

why the same email address account set in plesk external smtp extension has problem? below i got from other mail log. is this the case? may be gmail not except relay?

 

[Kaspar@Plesk]

Which external SMTP extension do you mean?

 

[williamplk]

this one. Using Plesk Without the Mail Server

because aws not approve port 25 then i decide to use external smtp for plesk for sending internal system mail and relate customer register or reset password.

 

[Kaspar@Plesk]

this one. Using Plesk Without the Mail Server

because aws not approve port 25 then i decide to use external smtp for plesk for sending internal system mail and relate customer register or reset password.

Understood. Thank you.

I am not sure why some notifications are accepted by gmail but the email activation get rejected. Do configured a custom notification sending address in the panel.ini file with [notification] ?

 

[williamplk]

Do configured a custom notification sending address in the panel.ini file with [notification] ?

what you want me to do? pls kindly advice.

 

[Kaspar@Plesk]

what you want me to do? pls kindly advice.

Can you run the following command via SSH: grep "senderAddress" /usr/local/psa/admin/conf/panel.ini does it show any output?

INFO

postfix/smtp [225378]

A9D572100B: to=<[email protected]>, relay=gmail-smtp-in.l.google.com[142.251.175.26]:25, delay=2.3, delays=0.34/0.03/1.1/0.81, dsn=5.7.26, status=bounced (host gmail-smtp-in.l.google.com[142.251.175.26] said: 550-5.7.26 Unauthenticated email from mydomain.com is not accepted due to 550-5.7.26 domain's DMARC policy. Please contact the administrator of 550-5.7.26 mydomain.com domain if this was a legitimate mail. To learn about 550-5.7.26 the DMARC initiative, go to 550 5.7.26 Control unauthenticated mail from your domain - Google Workspace Admin Help d2e1a72fcca58-7080370e7e9si5747181b3a.152 - gsmtp (in reply to end of DATA command))

This error means that the DMARC policy is to restrictive for mydomain.com. Can you post the DMARC record for mydomain.com?

 

[williamplk]

Can you run the following command via SSH: grep "senderAddress" /usr/local/psa/admin/conf/panel.ini does it show any output?

No any output.

This error means that the DMARC policy is to restrictive for mydomain.com. Can you post the DMARC record for mydomain.com?

v=DMARC1; p=quarantine; sp=reject; adkim=s; aspf=s; pct=100; rua=mailto:[email protected];

 

[Kaspar@Plesk]

No any output.

Ok, good.

v=DMARC1; p=quarantine; sp=reject; adkim=s; aspf=s; pct=100; rua=mailto:[email protected];

Ok. I think this might be your problem. Notifications sent by Plesk are not DKIM signed. But your DMARC policy is set to strict and will ask receiving servers to reject emails if they are not DKIM signed.

You can try to set the DKIM cehck to 'relaxt' with adkim=r; in your DMARC policy. Try this DMARC setting instead:

v=DMARC1; p=quarantine; sp=reject; adkim=r; aspf=s; pct=100; rua=mailto:[email protected];

If there is an _domainkey record for mydomain.com change the value from o=- to o=~ .

 

[williamplk]

Boooom! IT WORK. Thank you @Kaspar@Plesk