Duplicate users in poppassd ?

[chroniton]

When a user changes their password through the web mail (horde imp or squirrelmail) it appears to fail because the old password still works. Actually, both the old and new passwords work.

The password change is done through the poppassd service (port 106) and I've confirmed that the duplicate password issue exists even when telneting to port 106 and changing the password directly.

If you look in /var/qmail/users/poppasswd you will see a password entry for each past password.

Is this a bug or an issue with my server?

 

[defencer]

This is a bug in plesk. See this Hotfix for Plesk 7.5.2:

http://www.sw-soft.com/en/download/plesk/patches/

Plesk v.7.5.2 hotfix release notes.

This update works only with Plesk version 7.5.2. We can not guarantee that it will
work with any other Plesk version.

Install the hotfix RPM to update your Plesk 7.5.2 software:
# rpm -Uhv psa-hotfix-7.5.2-rh9.build75050204.16.i586.rpm

What's new in Plesk v.7.5.2 hotfix
===================================
[-] Problem with mail name rename/password change is resolved.
[-] Files uploaded through anonymous FTP get proper owner.

============================
Legend:
[+] new feature
[-] bug fixed or removed
[*] bug fixed and improvement made


Contact Information
===================

SWsoft Headquarters
13755 Sunrise Valley Drive
Suite 325
Herndon, VA 20171 USA
Phone: +1.703.815.5670,
Fax: +1.703.815.5675
World Wide Web: http://www.sw-soft.com

E-mail:
For billing information, email [email protected]
For purchasing or partnering information, email [email protected]
For technical support, use our Online Support Form.
To report problems with Plesk software, email [email protected]
For information on career opportunities with SWsoft, email [email protected]
For press contact information, email [email protected]
For information about becoming a Partner, email [email protected]
For information on translating Plesk into your language, email [email protected]
For general product information, email [email protected]

Copyright 1999, 2000, 2001, 2002, 2003, 2004, 2005 SWsoft, Inc. All rights reserved.

Don't forget to start mchk after hotfix applying

 

[chroniton]

Thanks for the suggestion. According to rpm, it's already installed:

[root@host root]# rpm -Uhv psa-hotfix-7.5.2-rhel3.build75050204.16.i586.rpm
Preparing... ########################################### [100%]
package psa-hotfix-7.5.2-rhel3.build75050204.16 is already installed

I tried running mchk again, the problem is still there.

 

[defencer]

Try to start mchk with -v option

# mchk -v

and see it's output.

 

[chroniton]

mchk

There is no output, it just returns a few seconds later:

[root@host root]# /usr/local/psa/admin/sbin/mchk -v
[root@host root]#

In my /var/log/messages file, I see that qmail restarts during the mchk.

When I look inside the psa patch rpm, I don't see where it updates the poppassd daemon ?

 

[defencer]

There is no output, it just returns a few seconds later:

[root@host root]# /usr/local/psa/admin/sbin/mchk -v

This means that mchk works correct.

When I look inside the psa patch rpm, I don't see where it updates the poppassd daemon ?

I suppose, that bug is in mailmng utility, and poppassd daemon just call that utility. So just check once more your file with pop3 users.

 

[chroniton]

Duplicate users in poppassd

Ok, I checked the file again, same issue. Now what ?

 

[defencer]

SWsoft support, I think.

 

[zeki79]

i have the same problem here...

 

[zeki79]

chroniton, you resolved the problem?

i get this messages when i try mchk -v :

dreambox:~ # /usr/local/psa/admin/sbin/mchk -v
mchk: popen_exec: command failed code: 64 , Specified mailname is invalid.
For usage information start utility with '--help' option.

mchk: popen_exec: command failed code: 64 , Specified mailname is invalid.
For usage information start utility with '--help' option.

dreambox:~ #

 

[chroniton]

RE:

No, I have not solved this problem. I submitted a support ticket to SW-Soft last week and am still waiting for a reply.

I do not get errors from my mchk though, it sounds like you may have a different issue.

 

[ViaHosting]

I have the same problem.

This HotFix doesn't correct this problem.


I notice that after changing the password, the poppassd creates a new entry at /var/qmail/users/poppasswd, instead of changing the password of the correspond user line.

So we will have as many lines as we try to change the user password.

The authentication program may pick up the first line, with the old password.


The mchk clean the password file and rebuild it for the psa database.
It fix the wrong lines until the next change.

 

[chroniton]

mailmng

Also, I notice that if you change the user's password using mailmng, the change is successful and there are no duplicate lines. This issue appears limited to just the poppassd daemon.

 

[ViaHosting]

Bug in poppassd - CONFIRMED

I had confirmed that the problem is at poppassd.

If you change the password using telnet at port 106, you will have duplicated records at /var/qmail/users/poppasswd.

This is the same deamon used by webmail to change the password.