• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Logging people into Plesk without them seeing/knowing the password

HostaHost

Silver Pleskian
Just curious if anyone's come up with a way to log staff into Plesk without them knowing the admin password? I was thinking something in php/curl would be ideal but I haven't had success with that because I have no way of getting the PHPSESSID from the destination server onto the user's computer with the correct cookie domain, and I think Plesk must be IP-specific for it's sessions because if I do the login in php/curl and obtain the resulting PHPSESSID, then redirect the client's browser to the login page with the PHPSESSID as a POST variable or url variable, that just gives them the login screen again.

I'm assuming the psa database's sessions table relies on an underlying php session so I haven't tried just remotely inserting a record in that table with my own generated session id and the user's ip, etc.

Going to cross-post this to the psa10 forum.
 
Back
Top