• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Forwarded to devs Password reset request for email [email protected] was denied: user 'bar' may intercept mail sent to the domain example.com / passwords diverge

W

websi

New Pleskian
TITLE
Password reset request for email [email protected] was denied: user 'bar' may intercept mail sent to the domain example.com
+ email account and plesk passwords diverge after reset per link

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE
Plesk Version 18.0.43 Update #1
Linux CentOS Linux 7.9.2009 (Core) - (Yes, I know I have to migrate..)

PROBLEM DESCRIPTION
I noticed that whenever I update passwords of mail accounts via a "Password reset link" created on plesk.example.com/smb/email-address/edit/id/FOO/domainId/XY the mail accounts password gets updated but the password of the corresponding plesk user does not.
Therefore I tried to reset the plesk users password via plesk.example.com/get_password.php and noticed the following error in /var/log/plesk/panel.log:

Password reset request for email '[email protected]' (user '[email protected]') was denied: user 'bar' may intercept mail sent to the domain 'example.com'

User bar in this case is a user with a webmaster or webdesigner role.
User foo is an application user.

STEPS TO REPRODUCE
1) Create a User for a Subscription with at least Webmaster or Webdesigner role.
2) Create an Email Address for a Subscription with "Can be used to log in to Plesk" enabled.
3) Send a password reset link to the email address.
4) Change the password of the user.
5) Log in to the webmail portal. (this will work)
6) Log in to the plesk panel with the new password. (this will NOT work)
7) Reset the users password via "plesk.example.com/get_password.php". (this will NOT work)

ACTUAL RESULT
Passwords diverge after reset per link.
Password reset request for email does not send an email.

EXPECTED RESULT
Password reset request for email does send an email.
Password reset per link resets both users passwords.

YOUR EXPECTATIONS FROM PLESK SERVICE TEAM
Confirm bug
 
You must log in or register to reply here.

Similar threads

P
Resolved Password reset request was denied
Replies
6
Views
2K
Peter Debik
P
williamplk
Resolved Activate account by e-mail does not work
Replies
16
Views
2K
williamplk
williamplk
K
Question Workaround to modify the time-to-expire for password reset links(specifically email account passwords), up from 24hrs.
Replies
2
Views
2K
Kaspar
K
J
Resolved Unable to reset user password by username
Replies
3
Views
1K
Peter Debik
P
K
Forwarded to devs No password reset for additional admin accounts
Replies
2
Views
1K
Kaspar
K
Back
Top