• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Resolved Plesk migrator broke DKIM records

H9k

Regular Pleskian
Hi there!
I migrated some 300 subscriptions over the weekend from identical Plesk setups (Onyx 17.5 on Ubuntu 16.04).
Now I noticed that all DKIM records are broken. The TXT records went from something like
v=DKIM1; p=MIGdba..."
to this
v=DKIM1; p=DKIM1; p=MIGdba..."
So having that p=DKIM1; there is clearly a mistake. So I disabled DKIM signing in the Mail Server settings, but the records were still there. So then I deleted all DKIM records from DNS (_domainkey and selector._domainkey), then I reenabled the DKIM signing. However, records were not created.
The only way to get the records generated again is to enable DKIM specifically on a single domain.
How can I enable DKIM for all domains (which have Mail Service enabled) at once?
 
Hi H9k,

the Plesk CLI commands could help you here:


You could get a list of the domains with a MySQL - command like:
Code:
mysql -uadmin -p$(cat /etc/psa/.psa.shadow) psa -e "SELECT domains.name, DomainServices.* FROM domains, DomainServices WHERE DomainServices.type = 'mail' AND DomainServices.dom_id = domains.id AND DomainServices.status = '0' ORDER BY name ASC;"

... and use the Plesk CLI command:
Code:
plesk bin subscription_settings -u example.com -sign_outgoing_mail true
... to update/modify the depending subscription settings.
 
Thank you very much @UFHH01, that did the trick. In my case I had to first set sign_outgoing_mail to false, then to true, and now the DNS zones have correct DKIM records.
Should I submit a bug about that broken DKIM after migration issue?
 
Back
Top