• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Forwarded to devs No password reset for additional admin accounts

Kaspar

API expert
Plesk Guru
Username:

TITLE

No password reset for additional admin accounts

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

CentOS 7.9, Plesk 18.0.41

PROBLEM DESCRIPTION

When using the "Forgot your password?" feature on the login-screen for a "Additional administrator account" no reset email is send. So an additional administrator who forgot his/her password is unable to reset it.

Looking at Tools & Settings > Task Manager shows
SUCCESS2022-02-02 15:09:11reset-password

Looking at Tools & Settings > Action Log shows
2022-02-02 15:09:11123.123.123.123Password reset requestLogin Name: '' → testuser
Reset using: '' → Username
...

There is no reference in the mail log of a password reset mail.

STEPS TO REPRODUCE

1. Create a "Additional administrator account"
2. Logout of Plesk
3. Go to login-screen, click "Forgot your password?" link
4. Fill in email address or user name from the additional administrator account created a step 1

ACTUAL RESULT

No email received to reset password.

EXPECTED RESULT

Get an email to reset password.

ANY ADDITIONAL INFORMATION

Thanks to user @JohnBos for noticing this bug.

YOUR EXPECTATIONS FROM PLESK SERVICE TEAM

Confirm bug
 
Since Plesk Onyx, the option to reset the password via email was disabled for the Plesk administrator accounts for security reasons: https://support.plesk.com/hc/en-us/articles/360017069199

The bug PPPM-12977 is already created to improve such behaviour: The email should be sent with information that password for Plesk administrators cannot be reset for security reasons and instructions on how to reset it correctly.
No ETA is available for its implementation now.
 
Back
Top